last executing test programs: 2.979508137s ago: executing program 0 (id=2077): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x44) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x25dfdbfc, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) 2.810789615s ago: executing program 0 (id=2080): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0xffffffff00000000, 0x3, 0xe9}) (async) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344}, 0x1, 0x0) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x6001}, @void, @ipv6=@tcp={0xf, 0x6, "dc2e54", 0x383, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, {[@srh={0x2c, 0x6, 0x4, 0x3, 0x0, 0x18, 0x5, [@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, @local]}, @fragment={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66}, @hopopts={0x61, 0x2e, '\x00', [@generic={0x2, 0x60, "b7e14d23f5f301162548cf6ef2eb4dc07527d61e5040ab77399743fb06d54455c730d5398d82ef1e102d00d70aff7b1c22963d0f3c879ec4fa1bcbd6da71e613ad4dcc1e656b1112e9d5d8fb8f60dc1bdc6d09c09eb5ba537d89fc9ff2455694"}, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x38, {0x3, 0xc, 0xf0, 0x8, [0x2, 0x3, 0x8, 0xe, 0x7, 0x0]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0xf4, 0xb8, "7ceebd16a073b14e7797fa82f2750f136b27af209cef0e5a528f8e2dbcee30a209f94ab69bb4473b07309ccf259e1bbbfb1be1b4d9625a915b278bbcacba3ee88860235fe00a0af7b95fccb327f0690bce6533c111745a119e6327772db807c0545d690364cb5080a13fc340700d8e25606a3b52f041adfec1181d21c43282de3faeb227ef3a8fb58c58d6905b58a62ee29c5a0d3f15b0b7eb58e3bbc709756edbb55f80ca4e1d7063f275bbec9bec871c01c9a7ae87085a"}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @mcast1}]}, @hopopts={0x0, 0x1, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xda}]}, @srh={0x3c, 0xe, 0x4, 0x7, 0x1, 0x40, 0x3, [@local, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @private2]}], {{0x4e24, 0x4e24, r2, 0x41424344, 0x1, 0x0, 0xe, 0x20, 0x1, 0x0, 0x6, {[@nop, @timestamp={0x8, 0xa, 0x2, 0x6}, @window={0x3, 0x3, 0xe}, @mss={0x2, 0x4, 0x2}, @sack={0x5, 0xe, [0x4, 0x2, 0x3]}, @fastopen={0x22, 0x3, "e7"}]}}, {"090a4cbbde8ebb527f3d05086eeca0eb0d00e3a492b824c1e75884ebfc5fb528e340d663d1168ba7306cda802d8b87aee98cc3bafbaddc6b8f35083010fc025974dc54616bf7795ef335ee9f4951628088fcaafe4e8d206cb8a53d5a342a31e54f6331b47248c2c71fad7b8e3a4b98df201afaadec23c0289e9bb8971171464b69a0ff25a77c7e0ec513267b5f4e7d53affbeb4128e2766d6850e6f648da10e3bd132bc6c0eb60c301831c8959232efa973c3192d3653c32d02d6440fe974b833cd091ae307dbe1c3143e71eb2e27dcd0724307d9b7850cf0633e360d1f1409f4871aca24aa475485562307bdbc82ca4733f835003d56ce8c6fc8d"}}}}}, 0x3af) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (async, rerun: 64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) getsockopt$sock_buf(r3, 0x1, 0x19, 0x0, &(0x7f0000000280)) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000050025bd7000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="00000000010400000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c0000004900000127bd7000fbdbdf250a000800", @ANYRES32=r5, @ANYBLOB="01000000080002000500000014000100000000000000000000000000000000001400010000000000000009f30000000000000001cf8db1f223c073a8f026de8d4b1bef84a1271fd9d35ed2b675eb507159a6d62751bfdf64ea29eb9cca053570b856a34cfe44c86eb7dca0921c5cc983f89dd5d9a964338dccb21d29b0435ea9cffbd5bca92bffb01d62f03ef5a940502f7d92c2c9c799cb632a1eca24f1ca610e1176376883a651992fecdaaa2cea7244dc7c3eedd153b105cfec8d46e6"], 0x4c}, 0x1, 0x0, 0x0, 0x20000894}, 0x0) 2.45302892s ago: executing program 0 (id=2084): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x1, 0x0, @multicast2, @loopback}}}}}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x99}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4010) 2.283850979s ago: executing program 2 (id=2085): recvfrom(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x2022, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000040), 0x4) r0 = socket$inet6(0xa, 0x4, 0x9) listen(r0, 0x5) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x82, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1e, 0x6, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @alu={0x4, 0x1, 0xa, 0x2, 0x1, 0x2, 0xfffffffffffffffc}]}, &(0x7f0000000600)='GPL\x00', 0x7, 0xb0, &(0x7f0000000640)=""/176, 0x41000, 0x1a, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x3, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x4, 0x2, 0x4, 0x6}, {0x1, 0x3, 0xf, 0x4}, {0x1, 0x1, 0xa, 0xa}], 0x10, 0xbcc}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000009c0)={r0, &(0x7f00000008c0)='-\\!\x00', 0xc2080, &(0x7f0000000900)={@_ha_fsid={[0x51, 0x326]}, {0x6, 0x6, 0xacb, 0x2}}, 0xed9, &(0x7f0000000940)={@_ha_fsid}, &(0x7f0000000980)=0x80}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x1, 0xf51a, 0x2, 0x1028e, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0x0, 0x1, 0x14}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x2b, 0x5, &(0x7f0000000080)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000000c0)='GPL\x00', 0x3, 0x9d, &(0x7f0000000100)=""/157, 0x41000, 0x14, '\x00', r1, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xe, 0x0, 0x7}, 0x10, r2, r3, 0x8, &(0x7f0000000b80)=[r4, r5, 0x1, r6, r7], &(0x7f0000000bc0)=[{0x1, 0x5, 0x6}, {0x5, 0x5, 0x1, 0x8}, {0x5, 0x2, 0x7, 0x3}, {0x5, 0x3, 0x7}, {0x0, 0x1, 0x10, 0xb}, {0x1, 0x2, 0x6, 0x7}, {0x3, 0x2, 0x8, 0x1}, {0x0, 0x2, 0xe, 0x8}], 0x10, 0x8}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000d00)={@ipv4={'\x00', '\xff\xff', @local}, r1}, 0x14) bind$inet6(r0, &(0x7f0000000d40)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0xc}, 0x4}, 0x1c) r8 = accept4(r0, &(0x7f0000000d80)=@sco, &(0x7f0000000e00)=0x80, 0x0) sendmsg$inet6(r8, &(0x7f00000010c0)={&(0x7f0000000e40)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}, 0xca00}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000000e80)="cfbf663fbf88ac420190fe3c6682bcf3e7cd271822c8b28c85296b6af2c772fc759aea59b33f025b8c8221215577b7d5d0abeee9f80a343e12c4b17cb4097c7f70fb7046706dd773bb9c229972300423ca4d09dcf8c4b173780513284524ffd1a37a06d1277b938b4a2214cab9351b9440a3bb368293e6a4a093b8a3bd87e8c23729f19b3e0fe2ffcef8a4a30af317b61a412bf6f4307594e135bb847e79238f610018b736a0164cb708755e16aaaff35967e3bd5d23abb2f00e52a06914a2c401d2ebf9b2cc7b9a1b5655438b", 0xcd}, {&(0x7f0000000f80)="39efa532162dc8c7ef94d91f4c6a1c3b12e4da72d9e6c07df6b880748e66d0eb2c8c82c4617e7a0fe370436955ce48b059b6b26396d03f4bb2df20f19b516dae595d94cfa68710a402bf44f1c74a363969bc", 0x52}], 0x2, &(0x7f0000001040)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffff1}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0xa5}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x60}, 0x40000) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000001100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x14}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000001140)=@buf) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000001180)=@int=0x8e, 0x4) r9 = socket$netlink(0x10, 0x3, 0x1) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r9, 0x40106e80, &(0x7f00000011c0)={0x8, 0x1}) r10 = socket$kcm(0x29, 0x4, 0x0) r11 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000001200)={r11}) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001280), r9) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x34, r12, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x31}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x4}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x796}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x40040) getsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000001380)={@private2}, &(0x7f00000013c0)=0x14) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000001400)={0x3c, 0x4, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x33}}, @enc_lim={0x4, 0x1, 0xfa}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x3}, @pad1, @pad1]}, 0x30) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000001440)="fa463d4ca02f410a1b58e1459a2fd07c", 0x10) 2.216726458s ago: executing program 4 (id=2086): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000002060101000000000000000000000003050005000a0000000900020073797a30000000000500010007000000fc7a206541c5f1a5826a0bac8115c2e072d335905d3ac43375b358170d843f95ad19f987f13a76f07210f28a000cdabed6ebcbedb86623659fdd04a82d3f38ad03ecabae4b75eaf125bc824b8071cd1b0bc5196e6eafae3ca694efe9c8130d63d23d566b4083343d988b4f5b1333222f700d94cb27f70a5ecb7d112fc6d1fe4b7a8387e94c7caea1212e4b863a7bdc7bcf670000000000000000"], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001740)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1288}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5a34}}, 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0x9801, 0x20005}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x439, 0x0, 0x3, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x40, r8, 0x121, 0x70bd24, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4548}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x4001004) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r8, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000010) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000002060101000000000000000000000003050005000a0000000900020073797a30000000000500010007000000fc7a206541c5f1a5826a0bac8115c2e072d335905d3ac43375b358170d843f95ad19f987f13a76f07210f28a000cdabed6ebcbedb86623659fdd04a82d3f38ad03ecabae4b75eaf125bc824b8071cd1b0bc5196e6eafae3ca694efe9c8130d63d23d566b4083343d988b4f5b1333222f700d94cb27f70a5ecb7d112fc6d1fe4b7a8387e94c7caea1212e4b863a7bdc7bcf670000000000000000"], 0x30}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001740)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1288}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5a34}}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0x9801, 0x20005}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x439, 0x0, 0x3, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r2) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x40, r8, 0x121, 0x70bd24, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4548}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x4001004) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r8, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000010) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) 2.20537787s ago: executing program 0 (id=2088): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x7d, &(0x7f0000000700)={r1, 0xfffff801, 0x11e2000, 0x62c, 0x100, 0x2, 0x2, 0x4, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0xfffffffb, 0x3, 0x1000, 0x1}}, &(0x7f00000007c0)=0xb0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) r4 = socket(0x40000000015, 0x5, 0x0) syz_emit_ethernet(0x6d, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "e4177f", 0x37, 0x89, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], "bd4fb9e9cbae6d1c21edd9ff38ebd97386806c27d875482109e2185d0451ac14af30b8f4630f7f80e090d090a20eff51b342066e552bce"}}}}}, 0x0) (async) getsockopt(r4, 0x200000000114, 0x8, 0x0, &(0x7f0000000240)=0x38) 2.004447884s ago: executing program 4 (id=2089): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000100)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40094) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x20) 1.931943873s ago: executing program 2 (id=2090): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000140)={{0xffffffffffffffff, &(0x7f0000000000)='--/\x00', 0x40, &(0x7f0000000040)={@_ha_fsid={[0x767a5787, 0x5]}, {0xaa93, 0xd, 0x80000000, 0xf2}}, 0x9, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)}, {[0x3, 0x0, 0xdde, 0x1]}, 0x7, 0x25, &(0x7f0000000100)=""/37}) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000094}, 0x40000) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000380)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) (rerun: 64) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf0, r2, 0x504, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffe}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x48050}, 0x800) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000005c0)=0x5) (async, rerun: 64) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000600)) (rerun: 64) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r4, 0x9, &(0x7f00000006c0)="835779362df59d3cd43013cd2082c1dbf85a9e0c4c2bc5aeabd384e7c87c9cba51f04aef5e5e907eab44c57c43c065ccb2ac22f65229818c92cde1f111c56d67b53d1005fc5a60c1169848ce566a8a61f0e756c394ca756b09ad5314791d26d895a52fc243bae1a1bf1693531e3e89922fe3c8d061f557492864fc271293d7ceab037fa2d8c2c2f864eafd6413653e142687115df99c") ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000780)={0xd, 0x3544, 0xd}) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x140d, 0x108, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x78, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3d}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "d03342f6d2973381ff6599678cabee7a"}, @NL80211_ATTR_PMK={0x14, 0xfe, "4eaa63c4252bed681340a4827ce21be9"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4b}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7f}, @NL80211_ATTR_PMK={0x14, 0xfe, "b62529c40f78735eb4b68a132b999d5a"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) r6 = openat$cgroup_type(r4, &(0x7f0000000a40), 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000a80)=0x80000000) r7 = socket(0x1, 0x3, 0x4) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x80, 0x1, 0x7, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x71f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFACCT_QUOTA={0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x401}]}, 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x11c, r2, 0xcf16100fa0e484e1, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1be}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5c1a}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20000}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x2000}, 0xb378532b77547b69) (async) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000e00)={0xffffffffffffffff, 0x3, 'Ds\'', 0x52, 0x80}) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000f80), r4) (async) socket$unix(0x1, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x64, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfe}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040050) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) (async, rerun: 64) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000001140)={0x0, 0x3, 0xef8, 0x3}) (async, rerun: 64) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x98, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x7c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IFACE={0x14, 0x17, 'team0\x00'}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 1.654111597s ago: executing program 1 (id=2091): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0xc4ea760049c17f33, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000010401000000000100000000ba000000050001000100000006000640000200000000000000c11229461db6118fe79b0f1242a3910c16423925c2769cc3095d2c99bf8bb48fed168efe0d"], 0x24}}, 0x10000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2804) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000180)={0x0, 0x2993}, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) 1.579502087s ago: executing program 4 (id=2092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000400000000000000000c00078008000640000000070500010007000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6970"], 0x58}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r7, 0x1, 0x0, 0xfffffffd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x7}]}, 0x34}}, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x30, r5, 0x2000) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r8, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "2ea101ab090c0a75e57de560ecd9e9980fa794b73644cc05cd4d079809556e06", "777f7aef52eb9fa85d4b788af65280a2d857f95d446f1ee8049e26b9751e9b78", "4db01cdef103294f3acb7a7dfed1411e139c0e05d8c80fa87a21705be3111664", "2bd1f1e94cf5344e6dc0d0b93043a7096d44905b996ba7c55518eac44aaa3163", "e0f569720c553c0a577f8f99e81dd584822ed1f66d1024ba5d75fdc1591cab2d", "68fc0fe43b73999d43efb405", 0x2, 0xe, 0x4, 0x200, 0x7}}) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000000)={0x1, 0xf, 0x5}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@getaddr={0x14, 0x16, 0x8, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.521212089s ago: executing program 1 (id=2093): r0 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001380)={'veth0\x00', &(0x7f0000001340)=@ethtool_cmd={0x18, 0x1ff, 0xffff38ce, 0x5, 0x9, 0x7f, 0x2, 0x3, 0x3, 0x3, 0x9, 0x2, 0x6, 0xb4, 0x3, 0x6, [0x9, 0x1]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, &(0x7f00000000c0)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x48}}, 0x8000000) 1.51694912s ago: executing program 2 (id=2094): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40) 1.490396041s ago: executing program 3 (id=2095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x40440a4}, 0x4080) sendmsg$NFT_BATCH(r0, 0x0, 0x40800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x40440a4}, 0x4080) (async) sendmsg$NFT_BATCH(r0, 0x0, 0x40800) (async) 1.424665485s ago: executing program 4 (id=2096): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=ANY=[@ANYBLOB="3c00000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000048001b000000000014001a8010000280e2cdf35093b79cd56a15b132"], 0x3c}}, 0x0) 1.40044415s ago: executing program 1 (id=2097): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.336246115s ago: executing program 2 (id=2098): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWRULE={0xdc, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6003}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf7}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8914}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x104}}, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @generic="4fffb619b45f0877ddd00f05b457a65d54acc046575978fa63c84996f91dfab8f854f66770283b1088bfc185ff58091c43079ec6138ced26654e47f46b51bfd31de4c10572ee0d3e151a33e56aa57e2294f686849277bbba3266a2ec4f4679efde8cf247ef4edee54f85ac023655a75cf5aaa9fc7b3e00a70d007ef1437aaabca2e4a82a093dde658a28be78e5e7668201c2dc09bdf4e2eee54fb4ae974dec1d5579c96a7d4612dacf994e7757204be487b87ffca2c4ec54", @nested={0x8, 0x4, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0xe0}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000d042dbd7000fcffff1f00000000a5b8bae6c3cd35cc6aad5d6984ab52bc", @ANYRES32=r4, @ANYBLOB="46000600000000002400128009000100626f6e640000000014000280050001000200000005000e0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x64, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x444e}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e00000000000000090000006a00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000ae1d4465464a75fe042228230ea5fbb957b3df000000000000049230b761e0deab7490bfbaf8025042c35d044f9c166c10ba1b0f818799fea21fe2774819008ec6d9bda606a696121d2400041210c6f1e33ceb1d84ea8740ec63f1eca1bb0810f930137d660db955b59a891aabdd202582490ac165562302a844acc323498179c318e932210b7a5099afb230", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r7, 0x0, &(0x7f0000000400)=""/55}, 0x20) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$SIOCGIFHWADDR(r8, 0x8927, &(0x7f0000000000)={'team_slave_1\x00'}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r10, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r10, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r10, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) setsockopt$bt_hci_HCI_TIME_STAMP(r9, 0x0, 0x3, &(0x7f0000000080), 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet(0x2, 0x1, 0x6) listen(r12, 0xfffffff8) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x0) 1.334315478s ago: executing program 3 (id=2099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000e80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0xbb8}, 0x1, 0x0, 0x0, 0x41}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, 0x0, &(0x7f0000000040)) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef916b5b5854be7ec7a9a4aef031e83d5d", 0xffffffffffffffda) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, 0x0, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x13, 0xa, 0x200) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r8) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendfile(r1, r7, 0x0, 0x80e03a0005) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$key(0xf, 0x3, 0x2) 1.277564248s ago: executing program 1 (id=2100): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) listen(r0, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='caif0\x00', 0x10) (async) sendmmsg$inet6(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92", 0x2}], 0x1}}], 0x1, 0x4400c800) (async) sendto$inet6(r3, &(0x7f0000000300), 0x1a, 0x3b00, 0x0, 0xfffffffffffffdfd) (async) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc2003c3) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) (async) sendto$inet6(r4, &(0x7f00000001c0)="c2", 0x1, 0x4050, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) shutdown(r4, 0x1) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x8000000, 0xffff}, &(0x7f0000000200)=0xc) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x2, 0x2, 0x1, 0x1, 0x9, 0x2}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r7) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}}, 0x4000) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) 1.18600863s ago: executing program 0 (id=2101): pipe(&(0x7f0000000040)={0xffffffffffffffff}) read(r0, 0x0, 0x0) (async) read(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)=':', 0x1}], 0x1) ppoll(&(0x7f00000000c0)=[{r2, 0x8080}], 0x1, &(0x7f0000000180), 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{r2, 0x8080}], 0x1, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0xb4, 0x1e, 0x200, 0x70bd2b, 0x25dfdbfe, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x98, 0x3, 0x0, 0x1, [@typed={0x92, 0x9, 0x0, 0x0, @binary="38cabb72d6fe7726bbf077d8c41045e7fc6600e5449859db1242953409b4daadd19d41804d25a6f627d4c1522430b39639e1643218045ddd173fc17bde32d086a9d80d00db25eeb0748586673edb65bb26fc6b776f145ab39212415681b4192bb75dcca1b52428a90ae353923a1efd26e8624a19b75d07022d790326ccef98393fd5a3fa671da6fb9a58e2b8e144"}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10000004}, 0x4008030) 1.132828087s ago: executing program 2 (id=2102): r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) (async) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) (async) r3 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a600300000fc020001000000000000000000000000ff0200000000000000000000000000012900000000000000b2031bd5af02ed89faf1d01f64b7e4b1b4836f373ed8f09a380b61960d7cedd013ef27ee9fe4acf8"], 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$xdp(r2, &(0x7f00000005c0)={0x2d, 0x11, r4, 0xc}, 0x10) (async) close(r2) 1.1264992s ago: executing program 1 (id=2103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) socket$inet(0x2, 0x3, 0x6) (async) r1 = socket$inet(0x2, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0x5, 0x7, 0x15, @rand_addr=' \x01\x00', @local, 0x20, 0x20, 0x5, 0x8}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xc0, r4, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd1}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x4040) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xc0, r4, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd1}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x4040) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000a000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r8, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000001) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x0) 1.035512439s ago: executing program 2 (id=2104): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x20, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfb, {0x5, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040084}, 0x4008030) listen(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r3, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x6, 0x7, 0x9, 0x1, 0x9, 0x5, 0x1, 0x1, 0x0, 0x6, 0xbe, 0x8b, 0x4, 0x2}, 0xe) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x10140, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r6 = getpid() r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x305) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r8) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r14 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, r11, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2040}, 0x40000) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x150, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r14}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x150}, 0x1, 0x0, 0x0, 0x800}, 0x40000080) writev(r2, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 1.034846591s ago: executing program 3 (id=2105): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x50, 0x30, 0x8, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) socket$kcm(0x29, 0x1, 0x0) 912.167209ms ago: executing program 3 (id=2106): r0 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x80800) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000240)={'ah\x00'}, &(0x7f0000000300)=0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc4}}, 0x0) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000380)={@mcast1, 0x3, 0x1, 0xfc, 0x8, 0x2, 0x1ff}, 0x20) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x1}]}, 0x24}}, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) (async, rerun: 64) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r10) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r12, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r11}]}, 0x3c}, 0x1, 0x620b, 0x0, 0x80}, 0x0) (async) connect$pppl2tp(r9, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x3a) (async) write$tun(r8, &(0x7f0000000600)=ANY=[], 0x342) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000200)={'gre0\x00', 0x0}) (rerun: 64) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) sendto(r7, 0x0, 0x2000, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x94}, 0x9}, 0x80) (async) syz_open_procfs$namespace(r5, &(0x7f0000000180)='ns/pid\x00') (async, rerun: 32) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x80089419, &(0x7f00000003c0)) (rerun: 32) r13 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r13, &(0x7f0000000340)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xc}, 0x1c) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=@ipv4_getrule={0x1c, 0x22, 0x300, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x2, 0x35, 0x0, 0x0, 0x0, 0x8}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x5) 527.320636ms ago: executing program 4 (id=2107): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x2f8, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x2, 0x3, 0x8, 0x2, 0x2], 0x1, 0x5}, {0x4, [0x1, 0x3, 0x6, 0x2, 0x6, 0x1], 0x2, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xffffffff, 0xff000000, 0xff], 0x4e20, 0x4e24, 0x4e22, 0x4e23, 0x80000001, 0x8, 0x4, 0x8, 0x1ff}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x7}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x6, 0x5}, {0x3, 0x1, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) 254.227055ms ago: executing program 0 (id=2108): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x20, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xb, 0x1b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000100)=0x2, 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) (async) setsockopt$inet_udp_int(r9, 0x11, 0x67, &(0x7f0000000440)=0x2, 0x4) (async) sendmmsg$inet(r9, &(0x7f0000001800)=[{{&(0x7f0000000400)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0x0) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xfe) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x10000000000000d5, 0x0, 0x0, 0x28040054}, 0x8040) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b4000000000000009311d800008000200000002f5e0e6f9299dd2faefb954418d825c02805000000c326138f568f3fedbc3156e0c40e10a8c683ae060000fa9c896adce9403c63829977e2bb476f93cb4be4abfa63ac0345cfdb0627402c00"/106], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x11, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 104.54085ms ago: executing program 3 (id=2109): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611068000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 103.528002ms ago: executing program 1 (id=2110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000004060104000000000000000000060000050001"], 0x1c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000004060104000000000000000000060000050001"], 0x1c}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) (async) close(0x3) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) 61.565924ms ago: executing program 3 (id=2111): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061112800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) socket(0x2b, 0x80801, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf2544000000080003009665d66ebfd697e577b2e78f074a707941a5a55a4f3e9dbc8eb23bbc2bf00c9c44078be78b668905bce1aca43cc1a4bfbc6bbbac657372d4d83129bb780ac4644ac1cdc8838bdecd", @ANYRES32=r3, @ANYBLOB="0c00238005000e0002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004085}, 0x4000000) 0s ago: executing program 4 (id=2112): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x6, 0x50, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x8000, 0x4, 0x6}}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x3c, 0x66, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x1, 0xfff2}, {0xf, 0xfff2}, {0x2}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r2 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000200)=0x1c) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0xffffffff, @private0, 0x2ceb}, 0x1c) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000380)={0x1, 0x1, 0x1000, 0xb5, &(0x7f0000000280)="853c8e2eeae11b0abef4af9809df7f5538ea6f9816fb2e3c0f4f02d7c6892e3e73175ae496a37887d6a672b95dfd9a6a5f6b816fefd3fb3810569059fe7ff2d3bbb48a0cd438c3d272edfb8dc047819416863cdffbf1f379052ba798ac04aca81b10df191df6c6e3c75dc670b507550577768128a75c9b962cfaa5745dd5a655b8257c0cc904693117b1db7a25f0fa2e90ea23ba496a487fe65e5f55de6ba235944c3ec400ed0ff866eada98fe8499a35508412cf2", 0x3b, 0x0, &(0x7f0000000340)="b0617a7298ac9a1e644c5ba2eef927ef54eeebc8b071eaa68f62b754f47431301938e020d4d663c9fd3e486377b0a3d4a0e0ab2dc2d30ace3b4578"}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000400)={0x0, 0xffffffff, 0x8000}) r3 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r3, &(0x7f0000000440)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @broadcast}}, 0x24) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x140a, 0x400, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x41) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x5d, &(0x7f0000000580)=0x3, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000005c0), &(0x7f0000000600)=0x40) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000640)={0x1, 0x0, 0x0, 0x19, 0x3}) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000780)={&(0x7f0000000680)=[{0x0, 0x2, 0x0, {0x2, 0x7}}, {0x6, 0x0, 0x0, {0xc7, 0x10, 0x2}}, {0x4, 0x0, 0x0, {0x101, 0xfffffffe, 0x1}}, {0x8000000000000000, 0x0, 0x0, {0xa8, 0x832, 0x2}}, {0x8, 0x2, 0x0, {0x10, 0xfffffc00, 0x2}}, {0xfffffffffffffff7, 0x2, 0x0, {0x4, 0x8001}}, {0x3ca, 0x2, 0x0, {0x6, 0x64}}, {0x3, 0x2, 0x0, {0x6, 0xffff23e7, 0x1}}], 0x8, 0x20, 0x8, 0x5}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r6, 0x124b3a7e5dca7403, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4010) sendmsg(r0, &(0x7f0000002ec0)={&(0x7f0000000900)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-sse2\x00'}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000980)="83ce6e117bcb53b1ce7f856459cec82c13dbaa4f7f060b48a63a7303a1d26a57725f5481324c43d307ec2af60e69", 0x2e}, {&(0x7f00000009c0)="46289000ab27ee08036b3eff9d131746dc0e6ce18efbeeef9d118c3b7bc34e368c4232fbdb8067641e032a6b1feb20073b5f92f015c9e051f1915d3ed7efb787f56732f533a86da277649c405617fa0c12ae6d114002c01e4487ff5f4d5e37b0bfbf3d401b6cbebcfda068eb2aadfabc6353f69a9a18b18b904df96c5be5f9c5da9a821c13bf2fbfac973e05e8aa8ba3ab91ca04e18d6f5fea6e2689242e54e3763d4041a297b5199f321c58410ffa515ac12e65d3e3fd729a8a5d9ae121ce41c26e61831d82095a5aa82a55fc8a250a0d1fb8f385dc348e5043ab4a4a", 0xdd}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="f550c6aa6552b7dd4c3ce3bb3c7b82de5efdd4eebfe48dbc8e59d9fd31bed8e4db46fbe1a9513cabb819c379145e6b4ddbeb591055642bb1efa8632a79fa526a0b1cf1ef2d9f7f0d3f7e24375612239bd3b31b8e5cc285662ec220578cb640eed7146456ed781533ce3b0cbb8b510e2b763d65cce4105149b1462a56b4a78cb35f8089df806a34e56105eb7c8f336f0786a25745de5178b1999b511170d024f958a63d7c692253507b1e84e72161505db463723200fdbe4dd0738d201626f820c8ee5a7fb81916", 0xc7}, {&(0x7f0000001bc0)="798d596c6a1613c0d23a05d6fe75bd12c9094555eeea9fb3a81bf058e6b044fcca86bf7e0b3b7f11cfb420e34beb24885b210e6911fc38d9791197f0067ba4129d53143ddf5221d90fe0a72762bdb2e7019d948c3bea3b84ed4bf70730de35f9", 0x60}, {&(0x7f0000001c40)="d1234274631683d8cabe2a4b9da770e596d595b19ff91170eed841026448ad95d07dd03d3fed398e8d0b2b30d76a0011dc62670c303b716c804bb9f1fab56fa769f64d11d3080cec95d32b175425709f880eaeb44c904397743f773e804d31ef285b697c5b8e98540f530352f34c2fabae6172b9fdb3159c4c081febf6e60e42fe30c0629dedec594f84540043a46a178be7d4145bb83075c1e6208c5d75069c2b7d213887f4073bb64097c2068cf8821d", 0xb1}], 0x6, &(0x7f0000001d80)=[{0x70, 0x88, 0x7, "f87297663c6aec0ee95cadce4b3346cbb527c312ed2d1374bf006720d46dd7953df863870b4b3e6531a759c93dfd93f84bc6ffa8d893078cc11b454d1d1d1a81eac8032d5cf1a966988cca7825eaccfd0488c91fff490d1d08"}, {0xc0, 0x117, 0x5, "2edb917b194bbb13ff87033497722104ea528c466a58671392a67c94bbc164e01efb56f93dd913cbf8e62e7f4dd2930db5b25e28418b45dbcd3acf0ad5e9990e5ce6a8c3252f20a1aac62b429266856e4abc37d31d9282762aa341cf493426d48b0fd822b237e10c4e72c483ec07d4c6f4da646e83538f0cfe30bb26b75d127a289d40c60b9766b6b429ae28dedda2c16774716f9ca29dae821c2cf22546c86728abe22eec2d6fe6258098"}, {0x1010, 0x116, 0x8, "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"}], 0x1140}, 0x10) pipe(&(0x7f0000002f00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r8, &(0x7f0000003000)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x48}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000003080), r7) sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000003140)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003100)={&(0x7f00000030c0)={0x34, r9, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r8, 0x891b, &(0x7f0000003180)={'macvlan1\x00', {0x2, 0x0, @initdev}}) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f00000031c0)) accept$packet(r8, &(0x7f0000003200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003240)=0x14) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000003280)={0x0, @aes256, 0x0, @desc2}) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000003300)={'ip6_vti0\x00', &(0x7f00000032c0)=@ethtool_stats={0x1d, 0x4, [0x6, 0x615, 0x1, 0x1]}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003340)={0x0, @private, @initdev}, &(0x7f0000003380)=0xc) kernel console output (not intermixed with test programs): netlink: Unknown VXLAN extension attribute 0 [ 107.734641][ T7119] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 107.757582][ T12] IPVS: starting estimator thread 0... [ 107.826602][ T1419] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.826757][ T1419] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.827460][ T1419] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.827522][ T1419] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.869167][ T7118] IPVS: using max 32 ests per chain, 76800 per kthread [ 108.023916][ T7140] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 108.023980][ T7140] NCSI netlink: No device for ifindex 0 [ 108.311924][ T7142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.584535][ T7169] IPv6: addrconf: prefix option has invalid lifetime [ 110.353776][ T7173] tipc: Enabling of bearer rejected, already enabled [ 110.362863][ T7184] erspan0: entered promiscuous mode [ 110.362941][ T7184] erspan0: entered allmulticast mode [ 110.620707][ T7206] netlink: 'syz.2.361': attribute type 1 has an invalid length. [ 110.631566][ T7206] __nla_validate_parse: 16 callbacks suppressed [ 110.631611][ T7206] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.361'. [ 110.631641][ T7206] netlink: 2060 bytes leftover after parsing attributes in process `syz.2.361'. [ 110.859380][ T7223] xt_MASQUERADE: bad MAP_IPS. [ 111.873810][ T7273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.369'. [ 111.893491][ T7273] netlink: 'syz.4.369': attribute type 21 has an invalid length. [ 111.902022][ T7273] netlink: 156 bytes leftover after parsing attributes in process `syz.4.369'. [ 111.925720][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 112.020378][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.372'. [ 112.130580][ T7289] netlink: 'syz.3.375': attribute type 21 has an invalid length. [ 112.143949][ T7289] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.194668][ T7281] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 112.196756][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.371'. [ 112.273635][ T7292] tipc: Enabling of bearer rejected, already enabled [ 112.889994][ T7324] netlink: 15 bytes leftover after parsing attributes in process `syz.0.381'. [ 112.917940][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 113.062091][ T7322] team0: Port device team_slave_0 removed [ 113.367601][ T7338] gretap1: entered promiscuous mode [ 113.387844][ T7338] batman_adv: batadv0: Adding interface: gretap1 [ 113.396406][ T7338] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 113.415348][ T7338] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 113.528022][ T7357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.388'. [ 113.598224][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.598277][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.687846][ T7360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.759455][ T7364] batadv_slave_0: entered promiscuous mode [ 113.768872][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.812775][ T7364] batadv_slave_0 (unregistering): left promiscuous mode [ 113.812875][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.207570][ T7401] pimreg3: entered allmulticast mode [ 114.437384][ T1419] IPVS: starting estimator thread 0... [ 114.526511][ T7416] IPVS: using max 31 ests per chain, 74400 per kthread [ 114.588357][ T7423] Bluetooth: hci0: unsupported parameter 5135 [ 114.594711][ T7423] Bluetooth: hci0: unsupported parameter 8192 [ 114.605691][ T7423] Bluetooth: hci0: unsupported parameter 5135 [ 114.611851][ T7423] Bluetooth: hci0: unsupported parameter 8192 [ 114.695138][ T7430] netlink: 'syz.4.405': attribute type 16 has an invalid length. [ 114.699312][ T7430] netlink: 'syz.4.405': attribute type 2 has an invalid length. [ 114.824383][ T7425] wg0 speed is unknown, defaulting to 1000 [ 114.938027][ T7441] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 115.052057][ T7445] ieee802154 phy1 wpan1: encryption failed: -22 [ 115.302400][ T149] IPVS: starting estimator thread 0... [ 115.385324][ T7465] IPVS: using max 36 ests per chain, 86400 per kthread [ 115.548699][ T7462] syzkaller0: entered promiscuous mode [ 115.548742][ T7462] syzkaller0: entered allmulticast mode [ 115.782999][ T7488] __nla_validate_parse: 15 callbacks suppressed [ 115.783048][ T7488] netlink: 44 bytes leftover after parsing attributes in process `syz.1.417'. [ 116.271975][ T7517] netlink: 'syz.3.421': attribute type 4 has an invalid length. [ 116.272012][ T7517] netlink: 152 bytes leftover after parsing attributes in process `syz.3.421'. [ 117.990407][ T7517] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 118.030078][ T7533] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 118.504651][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.435'. [ 118.899473][ T7602] netlink: 64 bytes leftover after parsing attributes in process `syz.2.442'. [ 118.964224][ T7601] IPVS: set_ctl: invalid protocol: 64 0.32.0.0:0 [ 118.993400][ T7590] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.999985][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'. [ 119.289006][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 119.407640][ T7623] netlink: 'syz.1.446': attribute type 1 has an invalid length. [ 119.407680][ T7623] netlink: 224 bytes leftover after parsing attributes in process `syz.1.446'. [ 119.560084][ T7629] bridge1: entered promiscuous mode [ 119.560115][ T7629] bridge1: entered allmulticast mode [ 119.563528][ T7629] team0: Port device bridge1 added [ 119.567000][ T7629] bridge0: port 4(team0) entered blocking state [ 119.567130][ T7629] bridge0: port 4(team0) entered disabled state [ 119.567357][ T7629] team0: entered allmulticast mode [ 119.567371][ T7629] team_slave_0: entered allmulticast mode [ 119.567400][ T7629] team_slave_1: entered allmulticast mode [ 119.572740][ T7629] team0: entered promiscuous mode [ 119.572756][ T7629] team_slave_0: entered promiscuous mode [ 119.572918][ T7629] team_slave_1: entered promiscuous mode [ 119.574593][ T7629] bridge0: port 4(team0) entered blocking state [ 119.574690][ T7629] bridge0: port 4(team0) entered forwarding state [ 119.587178][ T7629] syzkaller0: entered promiscuous mode [ 119.587196][ T7629] syzkaller0: entered allmulticast mode [ 119.800000][ T7633] netlink: 10 bytes leftover after parsing attributes in process `syz.0.451'. [ 119.813503][ T7633] openvswitch: netlink: IPv6 tunnel dst address is zero [ 119.942241][ T7636] netlink: 'syz.0.453': attribute type 1 has an invalid length. [ 119.942284][ T7636] netlink: 224 bytes leftover after parsing attributes in process `syz.0.453'. [ 119.970910][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 120.027557][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.027600][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.157515][ T7621] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 120.511324][ T7668] wg2 speed is unknown, defaulting to 1000 [ 120.543589][ T7668] wg2 speed is unknown, defaulting to 1000 [ 120.619144][ T7673] veth3: entered promiscuous mode [ 120.619188][ T7673] veth3: entered allmulticast mode [ 120.631453][ T7668] wg2 speed is unknown, defaulting to 1000 [ 120.923803][ T7689] __nla_validate_parse: 1 callbacks suppressed [ 120.931073][ T7689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.468'. [ 120.943697][ T7689] netlink: 56 bytes leftover after parsing attributes in process `syz.4.468'. [ 121.255130][ T7700] netlink: 'syz.3.471': attribute type 1 has an invalid length. [ 121.307441][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 121.316526][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.471'. [ 121.346924][ T5624] Bluetooth: hci4: command 0x0401 tx timeout [ 121.375515][ T7700] bond3: entered promiscuous mode [ 121.375959][ T7700] 8021q: adding VLAN 0 to HW filter on device bond3 [ 121.711766][ T7668] infiniband syz2: set active [ 121.711810][ T7668] infiniband syz2: added wg2 [ 121.754244][ T25] wg2 speed is unknown, defaulting to 1000 [ 121.770716][ T7668] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 121.770768][ T7668] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 121.770831][ T7668] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 121.873831][ T7668] RDS/IB: syz2: added [ 121.880916][ T7668] smc: adding ib device syz2 with port count 1 [ 121.881065][ T7668] smc: ib device syz2 port 1 has no pnetid [ 121.918004][ T30] wg2 speed is unknown, defaulting to 1000 [ 121.922517][ T7668] wg2 speed is unknown, defaulting to 1000 [ 122.027703][ T7728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.477'. [ 122.372801][ T7750] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 122.518641][ T7755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.484'. [ 122.531434][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.484'. [ 122.604564][ T7759] tunl0: entered promiscuous mode [ 122.619026][ T7759] netlink: 'syz.4.485': attribute type 4 has an invalid length. [ 122.619071][ T7759] netlink: 9 bytes leftover after parsing attributes in process `syz.4.485'. [ 122.680280][ T7744] netlink: 36 bytes leftover after parsing attributes in process `syz.1.482'. [ 122.865127][ T7773] netlink: 'syz.2.487': attribute type 83 has an invalid length. [ 122.938668][ T7668] wg2 speed is unknown, defaulting to 1000 [ 122.955331][ T7780] ip_tables: iptables: counters copy to user failed while replacing table [ 122.990214][ T7777] C: renamed from lo [ 123.002507][ T7777] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 123.218360][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 123.571809][ T7809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.967970][ T7830] netlink: 'syz.3.506': attribute type 83 has an invalid length. [ 124.000524][ T7668] wg2 speed is unknown, defaulting to 1000 [ 124.122331][ T7844] xt_cgroup: path and classid specified [ 124.350649][ T7853] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 124.350963][ T25] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 124.511193][ T7865] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.512378][ T7865] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.813067][ T7880] SET target dimension over the limit! [ 125.039239][ T7668] wg2 speed is unknown, defaulting to 1000 [ 125.100005][ T7890] netlink: 'syz.3.524': attribute type 4 has an invalid length. [ 125.103205][ T7890] syzkaller0: entered promiscuous mode [ 125.103226][ T7890] syzkaller0: entered allmulticast mode [ 125.240861][ T7898] netlink: 'syz.2.526': attribute type 1 has an invalid length. [ 125.240899][ T7898] netlink: 'syz.2.526': attribute type 2 has an invalid length. [ 125.242763][ T7897] netlink: 'syz.2.526': attribute type 1 has an invalid length. [ 125.242779][ T7897] netlink: 'syz.2.526': attribute type 2 has an invalid length. [ 126.002304][ T7668] wg2 speed is unknown, defaulting to 1000 [ 126.163283][ T7913] netlink: 'syz.2.533': attribute type 3 has an invalid length. [ 126.246742][ T7911] sctp: [Deprecated]: syz.4.530 (pid 7911) Use of int in maxseg socket option. [ 126.246742][ T7911] Use struct sctp_assoc_value instead [ 126.442353][ T7930] __nla_validate_parse: 8 callbacks suppressed [ 126.450624][ T7930] netlink: 32 bytes leftover after parsing attributes in process `syz.1.535'. [ 126.503109][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'. [ 126.503152][ T7937] netlink: 224 bytes leftover after parsing attributes in process `syz.3.536'. [ 126.503168][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'. [ 126.527201][ T7937] netlink: 'syz.3.536': attribute type 12 has an invalid length. [ 126.626813][ T7940] netlink: 144 bytes leftover after parsing attributes in process `syz.3.537'. [ 126.792457][ T7943] netlink: 193 bytes leftover after parsing attributes in process `syz.1.538'. [ 126.801987][ T7944] netlink: 2 bytes leftover after parsing attributes in process `syz.1.538'. [ 126.904072][ T7954] trusted_key: syz.0.541 sent an empty control message without MSG_MORE. [ 127.049198][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'. [ 127.054841][ T7960] syzkaller1: entered promiscuous mode [ 127.054861][ T7960] syzkaller1: entered allmulticast mode [ 127.062854][ T7959] tipc: Enabling of bearer rejected, failed to enable media [ 127.175025][ T7973] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 127.279861][ T7977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.548'. [ 127.312324][ T7977] bond0: (slave bond_slave_0): Releasing backup interface [ 127.388122][ T7977] bond_slave_0: entered promiscuous mode [ 127.394287][ T7977] bond_slave_0: entered allmulticast mode [ 127.397042][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.547'. [ 128.088471][ T25] wg2 speed is unknown, defaulting to 1000 [ 128.251515][ T8025] syzkaller1: entered promiscuous mode [ 128.251555][ T8025] syzkaller1: entered allmulticast mode [ 128.859040][ T31] audit: type=1107 audit(1789056939.455:2): pid=8064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 128.897582][ T8070] netlink: 'syz.3.565': attribute type 8 has an invalid length. [ 128.961374][ T8078] syzkaller0: entered promiscuous mode [ 128.968571][ T8078] syzkaller0: entered allmulticast mode [ 129.339699][ T8096] gre2: entered promiscuous mode [ 129.339741][ T8096] gre2: entered allmulticast mode [ 129.550026][ T8104] sctp: [Deprecated]: syz.1.571 (pid 8104) Use of int in maxseg socket option. [ 129.550026][ T8104] Use struct sctp_assoc_value instead [ 129.913475][ T8131] xt_bpf: check failed: parse error [ 130.727334][ T8158] netlink: 'syz.3.581': attribute type 32 has an invalid length. [ 130.747160][ T8158] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.759475][ T8162] netlink: 'syz.3.581': attribute type 32 has an invalid length. [ 130.922303][ T8181] sctp: [Deprecated]: syz.3.588 (pid 8181) Use of int in maxseg socket option. [ 130.922303][ T8181] Use struct sctp_assoc_value instead [ 131.148447][ T8198] bond0: option ad_select: unable to set because the bond device is up [ 131.479410][ T8171] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 131.731613][ T8222] netlink: 'syz.3.595': attribute type 12 has an invalid length. [ 131.842516][ T8229] netlink: 'syz.0.598': attribute type 4 has an invalid length. [ 132.717549][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.081498][ T8253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.159864][ T8286] netlink: 'syz.0.615': attribute type 62 has an invalid length. [ 133.382269][ T8297] __nla_validate_parse: 8 callbacks suppressed [ 133.382316][ T8297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.618'. [ 133.734266][ T8313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.625'. [ 133.797372][ T8315] netlink: 'syz.2.626': attribute type 1 has an invalid length. [ 133.805128][ T8315] netlink: 224 bytes leftover after parsing attributes in process `syz.2.626'. [ 134.297303][ T8349] netlink: 52 bytes leftover after parsing attributes in process `syz.0.635'. [ 134.308042][ T8349] netlink: 32 bytes leftover after parsing attributes in process `syz.0.635'. [ 134.509258][ T8362] netlink: 'syz.1.639': attribute type 10 has an invalid length. [ 134.509678][ T8362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.951282][ T8338] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 134.961508][ T8351] netlink: 'syz.2.637': attribute type 12 has an invalid length. [ 135.210791][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 135.251869][ T8396] netlink: 'syz.3.649': attribute type 15 has an invalid length. [ 135.378390][ T8401] batman_adv: batadv0: Adding interface: veth0 [ 135.386331][ T8401] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.412621][ T8401] batman_adv: batadv0: Interface activated: veth0 [ 135.469807][ T8401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.650'. [ 135.479156][ T8401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.479193][ T8401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.487185][ T8401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.487206][ T8401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.488912][ T8401] batman_adv: batadv0: Interface deactivated: veth0 [ 135.488928][ T8401] batman_adv: batadv0: Removing interface: veth0 [ 135.525946][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'. [ 135.534843][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.650'. [ 135.857810][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.890868][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'. [ 135.975747][ T149] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.978819][ T38] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.986627][ T142] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.986666][ T142] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.013152][ T8431] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 136.240136][ T8434] netlink: 'syz.1.660': attribute type 4 has an invalid length. [ 136.521530][ T8453] x_tables: duplicate entry at hook 1 [ 136.669842][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.677642][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.678777][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.679871][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.681076][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.695686][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.698560][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.699685][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.704597][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.708345][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.711137][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.712480][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.715594][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.717297][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.719786][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.722310][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.725669][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.726980][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.728344][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.729644][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.730872][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.732108][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.733455][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.734750][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.737358][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.738596][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.740398][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.741635][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.743025][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.744301][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.746622][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.751489][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.753679][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.301598][ T8488] netlink: 'syz.1.674': attribute type 1 has an invalid length. [ 137.381618][ T8493] bond2: (slave gretap1): making interface the new active one [ 137.391602][ T8493] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 137.462554][ T8493] netlink: 'syz.1.674': attribute type 4 has an invalid length. [ 137.635025][ T8503] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 138.131893][ T8493] syz.1.674 (8493) used greatest stack depth: 19328 bytes left [ 138.268923][ T8528] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 138.268956][ T8528] netlink: 'syz.3.689': attribute type 2 has an invalid length. [ 138.302791][ T8528] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 138.302835][ T8528] netlink: 'syz.3.689': attribute type 2 has an invalid length. [ 138.313880][ T8532] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 138.313898][ T8532] netlink: 'syz.3.689': attribute type 2 has an invalid length. [ 138.339598][ T8531] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 138.412119][ T8539] __nla_validate_parse: 8 callbacks suppressed [ 138.418569][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 138.428344][ T8539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.691'. [ 138.428694][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 138.428714][ T8539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.691'. [ 138.460766][ T8539] veth1_macvtap: left promiscuous mode [ 138.760206][ T8554] bond3: entered allmulticast mode [ 138.762982][ T8554] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.777443][ T8558] netlink: 80 bytes leftover after parsing attributes in process `syz.2.692'. [ 138.777496][ T8558] netlink: 80 bytes leftover after parsing attributes in process `syz.2.692'. [ 138.814195][ T8554] netlink: 224 bytes leftover after parsing attributes in process `syz.2.692'. [ 139.351405][ T8601] macvlan3: entered promiscuous mode [ 139.353003][ T8601] macvlan3: entered allmulticast mode [ 139.353323][ T8601] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 139.381730][ T8603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.703'. [ 139.494536][ T8609] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.703'. [ 139.510340][ T8592] wg0 speed is unknown, defaulting to 1000 [ 139.538267][ T8614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.590946][ T8592] wg2 speed is unknown, defaulting to 1000 [ 139.630644][ T8618] tipc: Enabled bearer , priority 0 [ 139.651956][ T8618] syzkaller0: mtu less than device minimum [ 139.659859][ T8618] netlink: NAT attribute has 5 unknown bytes [ 139.666253][ T8618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.944472][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 140.282441][ T5279] veth1_macvtap: entered promiscuous mode [ 140.384604][ T8661] xt_cgroup: invalid path, errno=-2 [ 141.243522][ T8701] syz_tun: entered promiscuous mode [ 141.291836][ T8701] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 141.412925][ T8704] syzkaller0: left promiscuous mode [ 141.412977][ T8704] syzkaller0: left allmulticast mode [ 142.744599][ T8771] sctp: [Deprecated]: syz.3.743 (pid 8771) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.744599][ T8771] Use struct sctp_sack_info instead [ 143.759157][ T8820] validate_nla: 11 callbacks suppressed [ 143.759202][ T8820] netlink: 'syz.2.756': attribute type 12 has an invalid length. [ 143.832472][ T8835] nbd3: detected capacity change from 0 to 63 [ 143.844093][ T8835] block nbd3: NBD_DISCONNECT [ 143.852176][ T8832] openvswitch: netlink: Key type 16140 is out of range max 32 [ 143.867595][ T8835] block nbd3: Disconnected due to user request. [ 143.877667][ T8835] block nbd3: shutting down sockets [ 143.878181][ T1987] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 143.878286][ T1987] Buffer I/O error on dev nbd3, logical block 0, async page read [ 143.878363][ T1987] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 143.878384][ T1987] Buffer I/O error on dev nbd3, logical block 1, async page read [ 143.878398][ T1987] Buffer I/O error on dev nbd3, logical block 2, async page read [ 143.878411][ T1987] Buffer I/O error on dev nbd3, logical block 3, async page read [ 143.879587][ T1987] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 143.879611][ T1987] Buffer I/O error on dev nbd3, logical block 0, async page read [ 143.879625][ T1987] Buffer I/O error on dev nbd3, logical block 1, async page read [ 143.879639][ T1987] Buffer I/O error on dev nbd3, logical block 2, async page read [ 143.879652][ T1987] Buffer I/O error on dev nbd3, logical block 3, async page read [ 143.879781][ T1987] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 143.879801][ T1987] Buffer I/O error on dev nbd3, logical block 0, async page read [ 143.879814][ T1987] Buffer I/O error on dev nbd3, logical block 1, async page read [ 143.879942][ T1987] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 143.880089][ T1987] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 143.880249][ T1987] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 143.880380][ T1987] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 143.880542][ T1987] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 143.880700][ T1987] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 143.880880][ T5638] ldm_validate_partition_table(): Disk read failed. [ 143.881829][ T5638] Dev nbd3: unable to read RDB block 0 [ 143.889981][ T5638] nbd3: unable to read partition table [ 143.937924][ T5638] ldm_validate_partition_table(): Disk read failed. [ 143.939882][ T5638] Dev nbd3: unable to read RDB block 0 [ 143.940603][ T5638] nbd3: unable to read partition table [ 144.043537][ T8839] __nla_validate_parse: 9 callbacks suppressed [ 144.043556][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 144.158961][ T8843] netlink: 9 bytes leftover after parsing attributes in process `syz.2.761'. [ 144.189661][ T8843] gretap0: entered promiscuous mode [ 144.253922][ T8843] netlink: 5 bytes leftover after parsing attributes in process `syz.2.761'. [ 144.254117][ T8843] 0ªî{X¹¦: renamed from gretap0 [ 144.284446][ T8843] 0ªî{X¹¦: left promiscuous mode [ 144.284499][ T8843] 0ªî{X¹¦: entered allmulticast mode [ 144.319985][ T8843] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 144.352850][ T8843] netlink: 11 bytes leftover after parsing attributes in process `syz.2.761'. [ 144.352901][ T8843] netlink: 11 bytes leftover after parsing attributes in process `syz.2.761'. [ 144.414042][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.762'. [ 144.551333][ T8852] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.562646][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'. [ 144.623922][ T8862] macvlan3: entered promiscuous mode [ 144.629239][ T8862] macvlan3: entered allmulticast mode [ 144.635636][ T8862] bond3: entered allmulticast mode [ 144.635698][ T8862] bond3: entered promiscuous mode [ 144.636472][ T8862] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 144.642308][ T8866] netlink: 'syz.2.767': attribute type 1 has an invalid length. [ 144.642325][ T8866] netlink: 224 bytes leftover after parsing attributes in process `syz.2.767'. [ 144.702847][ T8862] team0: Port device macvlan3 added [ 144.741072][ T8870] netlink: 'syz.1.770': attribute type 21 has an invalid length. [ 144.783330][ T8870] netlink: 132 bytes leftover after parsing attributes in process `syz.1.770'. [ 144.858223][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 145.074820][ T8874] bond4: Invalid ad_actor_system MAC address. [ 145.074863][ T8874] bond4: option ad_actor_system: invalid value (1) [ 145.091586][ T8874] bond4 (unregistering): Released all slaves [ 146.179938][ T8951] ip_tables: iptables: counters copy to user failed while replacing table [ 146.195702][ T8952] nbd0: detected capacity change from 0 to 63 [ 146.216760][ T5624] block nbd0: Receive control failed (result -104) [ 146.825670][ T8986] netlink: 'syz.1.789': attribute type 1 has an invalid length. [ 146.841166][ T8985] netlink: 'syz.1.789': attribute type 1 has an invalid length. [ 146.906633][ T8944] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.920260][ T8986] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.977279][ T8985] bond4: (slave ip6gretap1): making interface the new active one [ 146.985242][ T8985] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 146.989430][ T8988] bond4: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 147.010509][ T8988] bond4: entered allmulticast mode [ 147.010608][ T8988] ip6gretap1: entered allmulticast mode [ 147.661478][ T9029] netlink: 'syz.1.803': attribute type 3 has an invalid length. [ 147.744108][ T9029] netlink: Conntrack attr has 8 unknown bytes [ 147.750528][ T9029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.685705][ T9033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.793704][ T9058] __nla_validate_parse: 9 callbacks suppressed [ 150.793751][ T9058] netlink: 240 bytes leftover after parsing attributes in process `syz.2.809'. [ 150.927630][ T9068] netlink: 'syz.1.812': attribute type 39 has an invalid length. [ 151.001763][ T9063] netlink: 'syz.0.811': attribute type 29 has an invalid length. [ 151.001810][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.811'. [ 151.010991][ T9062] x_tables: duplicate underflow at hook 2 [ 151.240955][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 151.251701][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 151.293546][ T9073] netlink: 28 bytes leftover after parsing attributes in process `syz.4.814'. [ 151.609407][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.821'. [ 151.692452][ T9102] ip6t_REJECT: ECHOREPLY is not supported [ 151.709937][ T9103] netlink: 72 bytes leftover after parsing attributes in process `syz.1.824'. [ 151.751444][ T9094] bridge4: entered promiscuous mode [ 151.751485][ T9094] bridge4: entered allmulticast mode [ 151.757359][ T9094] team0: Port device bridge4 added [ 151.787578][ T9097] bridge2: entered promiscuous mode [ 151.787627][ T9097] bridge2: entered allmulticast mode [ 151.843998][ T9103] xt_esp: unknown flags DD [ 151.851496][ T9103] netlink: 'syz.1.824': attribute type 10 has an invalid length. [ 151.871521][ T9103] team0: Device vxcan1 is of different type [ 152.011920][ T9112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.828'. [ 152.058633][ T9112] bond3 (unregistering): Released all slaves [ 152.118655][ T9113] bond3 (unregistering): Released all slaves [ 152.184091][ T9116] syzkaller1: entered promiscuous mode [ 152.190478][ T9116] syzkaller1: entered allmulticast mode [ 152.295876][ T9087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.331101][ T9108] netlink: 'syz.2.826': attribute type 12 has an invalid length. [ 152.484773][ T9127] FAULT_INJECTION: forcing a failure. [ 152.484773][ T9127] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 152.484840][ T9127] CPU: 0 UID: 0 PID: 9127 Comm: syz.1.830 Not tainted syzkaller #0 PREEMPT(full) [ 152.484858][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.484874][ T9127] Call Trace: [ 152.484883][ T9127] [ 152.484891][ T9127] dump_stack_lvl+0xe8/0x150 [ 152.484921][ T9127] should_fail_ex+0x410/0x560 [ 152.484952][ T9127] _copy_from_user+0x2d/0xb0 [ 152.484976][ T9127] ___sys_sendmsg+0x1c6/0x360 [ 152.484996][ T9127] ? __lock_acquire+0x6df/0x2e50 [ 152.485016][ T9127] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.485066][ T9127] ? __fget_files+0x2a/0x420 [ 152.485088][ T9127] ? __fget_files+0x3a2/0x420 [ 152.485120][ T9127] __x64_sys_sendmsg+0x1b1/0x290 [ 152.485141][ T9127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.485180][ T9127] do_syscall_64+0x166/0x520 [ 152.485205][ T9127] ? trace_irq_disable+0x3b/0x140 [ 152.485222][ T9127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.485239][ T9127] ? clear_bhb_loop+0x70/0xc0 [ 152.485260][ T9127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.485278][ T9127] RIP: 0033:0x7f706159e159 [ 152.485293][ T9127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.485308][ T9127] RSP: 002b:00007f705f7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.485332][ T9127] RAX: ffffffffffffffda RBX: 00007f7061825fa0 RCX: 00007f706159e159 [ 152.485344][ T9127] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 152.485355][ T9127] RBP: 00007f705f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 152.485366][ T9127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.485376][ T9127] R13: 00007f7061826038 R14: 00007f7061825fa0 R15: 00007ffd1ee78ae8 [ 152.485405][ T9127] [ 152.802325][ T9135] netlink: 'syz.1.835': attribute type 3 has an invalid length. [ 153.129446][ T9149] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.838'. [ 153.215018][ T9143] netlink: 'syz.1.835': attribute type 3 has an invalid length. [ 153.252588][ T9152] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 153.269631][ T9152] bond5 (unregistering): Released all slaves [ 153.357509][ T5624] Bluetooth: hci2: SCO packet too small [ 153.414658][ T9147] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 153.434723][ T9147] bond5 (unregistering): Released all slaves [ 153.452114][ T9156] batadv_slave_1: mtu less than device minimum [ 153.599573][ T9178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.844'. [ 153.638410][ T9181] FAULT_INJECTION: forcing a failure. [ 153.638410][ T9181] name failslab, interval 1, probability 0, space 0, times 1 [ 153.638463][ T9181] CPU: 1 UID: 0 PID: 9181 Comm: syz.4.843 Not tainted syzkaller #0 PREEMPT(full) [ 153.638481][ T9181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.638491][ T9181] Call Trace: [ 153.638497][ T9181] [ 153.638503][ T9181] dump_stack_lvl+0xe8/0x150 [ 153.638531][ T9181] should_fail_ex+0x410/0x560 [ 153.638559][ T9181] ? __alloc_skb+0x1db/0x7a0 [ 153.638585][ T9181] should_failslab+0xa8/0x100 [ 153.638608][ T9181] ? __alloc_skb+0x1db/0x7a0 [ 153.638631][ T9181] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 153.638656][ T9181] ? __alloc_skb+0x18d/0x7a0 [ 153.638681][ T9181] ? __alloc_skb+0x1db/0x7a0 [ 153.638712][ T9181] __alloc_skb+0x1db/0x7a0 [ 153.638741][ T9181] netlink_sendmsg+0x5d4/0xb40 [ 153.638772][ T9181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.638801][ T9181] ? apparmor_socket_sendmsg+0x98/0x360 [ 153.638829][ T9181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.638849][ T9181] sock_sendmsg_nosec+0x13a/0x180 [ 153.638882][ T9181] ____sys_sendmsg+0x54e/0x850 [ 153.638907][ T9181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.638934][ T9181] ? import_iovec+0x73/0xa0 [ 153.638955][ T9181] ___sys_sendmsg+0x2a5/0x360 [ 153.638973][ T9181] ? __lock_acquire+0x6df/0x2e50 [ 153.638994][ T9181] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.639046][ T9181] ? __fget_files+0x2a/0x420 [ 153.639067][ T9181] ? __fget_files+0x3a2/0x420 [ 153.639098][ T9181] __x64_sys_sendmsg+0x1b1/0x290 [ 153.639120][ T9181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 153.639158][ T9181] do_syscall_64+0x166/0x520 [ 153.639182][ T9181] ? trace_irq_disable+0x3b/0x140 [ 153.639199][ T9181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.639218][ T9181] ? clear_bhb_loop+0x70/0xc0 [ 153.639240][ T9181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.639257][ T9181] RIP: 0033:0x7f4c3439e159 [ 153.639273][ T9181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.639287][ T9181] RSP: 002b:00007f4c35190028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.639305][ T9181] RAX: ffffffffffffffda RBX: 00007f4c34625fa0 RCX: 00007f4c3439e159 [ 153.639318][ T9181] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 153.639329][ T9181] RBP: 00007f4c35190090 R08: 0000000000000000 R09: 0000000000000000 [ 153.639339][ T9181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.639350][ T9181] R13: 00007f4c34626038 R14: 00007f4c34625fa0 R15: 00007ffd393740e8 [ 153.639377][ T9181] [ 154.093592][ T9201] netlink: 'syz.3.850': attribute type 1 has an invalid length. [ 154.127279][ T149] nci: nci_ntf_packet: unknown ntf opcode 0xb1f [ 154.370831][ T9221] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 154.370831][ T9221] Please contact the netfilter-devel mailing list or update your nftables rules. [ 154.645412][ T9231] ip_tables: iptables: counters copy to user failed while replacing table [ 157.034076][ T9195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.263717][ T9248] Bluetooth: MGMT ver 1.23 [ 157.284225][ T9253] __nla_validate_parse: 5 callbacks suppressed [ 157.284282][ T9253] netlink: 44 bytes leftover after parsing attributes in process `syz.0.862'. [ 157.345303][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 157.345339][ T9258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.863'. [ 157.459115][ T9266] netlink: 'syz.2.865': attribute type 15 has an invalid length. [ 157.459157][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 157.567876][ T9278] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 157.600615][ T9266] xt_hashlimit: size too large, truncated to 1048576 [ 157.689746][ T9288] FAULT_INJECTION: forcing a failure. [ 157.689746][ T9288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.703157][ T9288] CPU: 0 UID: 0 PID: 9288 Comm: syz.0.870 Not tainted syzkaller #0 PREEMPT(full) [ 157.703180][ T9288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.703190][ T9288] Call Trace: [ 157.703197][ T9288] [ 157.703205][ T9288] dump_stack_lvl+0xe8/0x150 [ 157.703233][ T9288] should_fail_ex+0x410/0x560 [ 157.703264][ T9288] _copy_from_iter+0x1d3/0x1660 [ 157.703288][ T9288] ? __alloc_skb+0x27a/0x7a0 [ 157.703314][ T9288] ? __alloc_skb+0x27a/0x7a0 [ 157.703338][ T9288] ? __alloc_skb+0x27a/0x7a0 [ 157.703362][ T9288] ? __pfx__copy_from_iter+0x10/0x10 [ 157.703383][ T9288] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 157.703408][ T9288] ? __alloc_skb+0x27a/0x7a0 [ 157.703430][ T9288] ? __alloc_skb+0x27a/0x7a0 [ 157.703459][ T9288] ? netlink_sendmsg+0x650/0xb40 [ 157.703480][ T9288] ? skb_put+0x112/0x210 [ 157.703499][ T9288] netlink_sendmsg+0x6c0/0xb40 [ 157.703530][ T9288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.703558][ T9288] ? apparmor_socket_sendmsg+0x98/0x360 [ 157.703586][ T9288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.703607][ T9288] sock_sendmsg_nosec+0x13a/0x180 [ 157.703633][ T9288] ____sys_sendmsg+0x54e/0x850 [ 157.703666][ T9288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.703694][ T9288] ? import_iovec+0x73/0xa0 [ 157.703716][ T9288] ___sys_sendmsg+0x2a5/0x360 [ 157.703735][ T9288] ? __lock_acquire+0x6df/0x2e50 [ 157.703758][ T9288] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.703812][ T9288] ? __fget_files+0x2a/0x420 [ 157.703832][ T9288] ? __fget_files+0x3a2/0x420 [ 157.703862][ T9288] __x64_sys_sendmsg+0x1b1/0x290 [ 157.703884][ T9288] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.703921][ T9288] do_syscall_64+0x166/0x520 [ 157.703945][ T9288] ? trace_irq_disable+0x3b/0x140 [ 157.703962][ T9288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.703980][ T9288] ? clear_bhb_loop+0x70/0xc0 [ 157.704002][ T9288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.704022][ T9288] RIP: 0033:0x7f16cc39e159 [ 157.704039][ T9288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.704054][ T9288] RSP: 002b:00007f16cd33a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.704072][ T9288] RAX: ffffffffffffffda RBX: 00007f16cc625fa0 RCX: 00007f16cc39e159 [ 157.704085][ T9288] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 157.704096][ T9288] RBP: 00007f16cd33a090 R08: 0000000000000000 R09: 0000000000000000 [ 157.704107][ T9288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.704117][ T9288] R13: 00007f16cc626038 R14: 00007f16cc625fa0 R15: 00007ffd00f9fd78 [ 157.704147][ T9288] [ 158.171714][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 158.237908][ T9299] netlink: 'syz.1.872': attribute type 21 has an invalid length. [ 158.237985][ T9299] netlink: 132 bytes leftover after parsing attributes in process `syz.1.872'. [ 158.731084][ T9328] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 158.836053][ T9327] netlink: 48 bytes leftover after parsing attributes in process `syz.4.878'. [ 158.856938][ T9337] netlink: 104 bytes leftover after parsing attributes in process `syz.3.879'. [ 158.891148][ T9334] openvswitch: netlink: IPv4 tun info is not correct [ 159.052945][ T9351] netlink: 193 bytes leftover after parsing attributes in process `syz.2.881'. [ 159.153189][ T9360] FAULT_INJECTION: forcing a failure. [ 159.153189][ T9360] name failslab, interval 1, probability 0, space 0, times 0 [ 159.153234][ T9360] CPU: 0 UID: 0 PID: 9360 Comm: syz.3.884 Not tainted syzkaller #0 PREEMPT(full) [ 159.153254][ T9360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.153264][ T9360] Call Trace: [ 159.153271][ T9360] [ 159.153279][ T9360] dump_stack_lvl+0xe8/0x150 [ 159.153309][ T9360] should_fail_ex+0x410/0x560 [ 159.153341][ T9360] should_failslab+0xa8/0x100 [ 159.153362][ T9360] __kmalloc_noprof+0xfe/0x720 [ 159.153390][ T9360] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 159.153417][ T9360] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 159.153451][ T9360] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 159.153487][ T9360] genl_family_rcv_msg_doit+0xda/0x340 [ 159.153519][ T9360] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 159.153553][ T9360] ? apparmor_capable+0x126/0x170 [ 159.153577][ T9360] ? bpf_lsm_capable+0x9/0x20 [ 159.153603][ T9360] ? security_capable+0x7e/0x2c0 [ 159.153627][ T9360] genl_rcv_msg+0x614/0x7a0 [ 159.153660][ T9360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 159.153682][ T9360] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 159.153699][ T9360] ? __pfx_nl80211_start_ap+0x10/0x10 [ 159.153719][ T9360] ? __pfx_nl80211_post_doit+0x10/0x10 [ 159.153738][ T9360] ? __pfx_ref_tracker_free+0x10/0x10 [ 159.153767][ T9360] netlink_rcv_skb+0x226/0x4a0 [ 159.153790][ T9360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 159.153817][ T9360] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 159.153864][ T9360] ? down_read+0x2be/0x330 [ 159.153886][ T9360] genl_rcv+0x28/0x40 [ 159.153909][ T9360] netlink_unicast+0x7bd/0x940 [ 159.153939][ T9360] netlink_sendmsg+0x813/0xb40 [ 159.153969][ T9360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.153998][ T9360] ? apparmor_socket_sendmsg+0x98/0x360 [ 159.154028][ T9360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.154049][ T9360] sock_sendmsg_nosec+0x13a/0x180 [ 159.154076][ T9360] ____sys_sendmsg+0x54e/0x850 [ 159.154102][ T9360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.154131][ T9360] ? import_iovec+0x73/0xa0 [ 159.154156][ T9360] ___sys_sendmsg+0x2a5/0x360 [ 159.154174][ T9360] ? __lock_acquire+0x6df/0x2e50 [ 159.154197][ T9360] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.154254][ T9360] ? __fget_files+0x2a/0x420 [ 159.154277][ T9360] ? __fget_files+0x3a2/0x420 [ 159.154310][ T9360] __x64_sys_sendmsg+0x1b1/0x290 [ 159.154334][ T9360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.154375][ T9360] do_syscall_64+0x166/0x520 [ 159.154400][ T9360] ? trace_irq_disable+0x3b/0x140 [ 159.154417][ T9360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.154436][ T9360] ? clear_bhb_loop+0x70/0xc0 [ 159.154459][ T9360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.154477][ T9360] RIP: 0033:0x7f5fb059e159 [ 159.154493][ T9360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.154508][ T9360] RSP: 002b:00007f5fb153d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.154528][ T9360] RAX: ffffffffffffffda RBX: 00007f5fb0825fa0 RCX: 00007f5fb059e159 [ 159.154541][ T9360] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 159.154552][ T9360] RBP: 00007f5fb153d090 R08: 0000000000000000 R09: 0000000000000000 [ 159.154563][ T9360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.154574][ T9360] R13: 00007f5fb0826038 R14: 00007f5fb0825fa0 R15: 00007ffe62566568 [ 159.154605][ T9360] [ 159.216705][ T9362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.883'. [ 159.600659][ T9372] Cannot find add_set index 34 as target [ 159.867386][ T9388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.000976][ T9395] team0: left allmulticast mode [ 160.006308][ T9395] team_slave_0: left allmulticast mode [ 160.012049][ T9395] team_slave_1: left allmulticast mode [ 160.031338][ T9395] team0: left promiscuous mode [ 160.039279][ T9395] team_slave_0: left promiscuous mode [ 160.044962][ T9395] team_slave_1: left promiscuous mode [ 160.058902][ T9395] bridge0: port 4(team0) entered disabled state [ 160.083323][ T9395] bond2: left allmulticast mode [ 160.093548][ T9395] bond2: left promiscuous mode [ 160.093843][ T9395] bridge0: port 3(bond2) entered disabled state [ 160.118036][ T9395] bridge_slave_1: left allmulticast mode [ 160.123848][ T9395] bridge_slave_1: left promiscuous mode [ 160.131891][ T9395] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.152478][ T9395] bridge_slave_0: left allmulticast mode [ 160.159078][ T9395] bridge_slave_0: left promiscuous mode [ 160.165027][ T9395] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.475317][ T9417] xt_TCPMSS: Only works on TCP SYN packets [ 160.976022][ T9454] netlink: 'syz.2.908': attribute type 2 has an invalid length. [ 162.041021][ T9498] netlink: 'syz.1.919': attribute type 1 has an invalid length. [ 166.720252][ T9555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.933124][ T9587] __nla_validate_parse: 19 callbacks suppressed [ 166.939711][ T9587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.943'. [ 166.949968][ T9587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.943'. [ 167.022460][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.943'. [ 167.022507][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.943'. [ 167.022533][ T9587] netlink: 36 bytes leftover after parsing attributes in process `syz.3.943'. [ 167.039626][ T9587] netlink: 104 bytes leftover after parsing attributes in process `syz.3.943'. [ 167.099291][ T9588] netlink: 272 bytes leftover after parsing attributes in process `syz.3.943'. [ 167.209897][ T9593] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 167.300339][ T9598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.945'. [ 167.300391][ T9598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.945'. [ 167.375867][ T9602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.947'. [ 167.375911][ T9602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.375929][ T9602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.415593][ T9592] syz.4.944: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 167.415753][ T9592] CPU: 1 UID: 0 PID: 9592 Comm: syz.4.944 Not tainted syzkaller #0 PREEMPT(full) [ 167.415771][ T9592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.415779][ T9592] Call Trace: [ 167.415786][ T9592] [ 167.415793][ T9592] dump_stack_lvl+0xe8/0x150 [ 167.415824][ T9592] warn_alloc+0x24d/0x270 [ 167.415852][ T9592] ? kasan_save_track+0x4f/0x80 [ 167.415869][ T9592] ? kasan_save_track+0x3e/0x80 [ 167.415888][ T9592] ? __pfx_warn_alloc+0x10/0x10 [ 167.415909][ T9592] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 167.415927][ T9592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.415963][ T9592] __vmalloc_node_range_noprof+0x127/0x1540 [ 167.416008][ T9592] ? rcu_is_watching+0x16/0xb0 [ 167.416034][ T9592] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 167.416058][ T9592] ? __kmalloc_cache_noprof+0x321/0x600 [ 167.416083][ T9592] ? __kmalloc_cache_noprof+0x14d/0x600 [ 167.416107][ T9592] ? xskq_create+0x56/0x220 [ 167.416134][ T9592] xskq_create+0x148/0x220 [ 167.416157][ T9592] ? xsk_init_queue+0x8a/0xe0 [ 167.416181][ T9592] xsk_init_queue+0x8a/0xe0 [ 167.416205][ T9592] xsk_setsockopt+0x52a/0x960 [ 167.416229][ T9592] ? __pfx_xsk_setsockopt+0x10/0x10 [ 167.416250][ T9592] ? __pfx_aa_sk_perm+0x10/0x10 [ 167.416277][ T9592] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 167.416297][ T9592] ? __pfx_xsk_setsockopt+0x10/0x10 [ 167.416320][ T9592] do_sock_setsockopt+0x17c/0x1b0 [ 167.416342][ T9592] __x64_sys_setsockopt+0x13d/0x1b0 [ 167.416366][ T9592] do_syscall_64+0x166/0x520 [ 167.416390][ T9592] ? trace_irq_disable+0x3b/0x140 [ 167.416406][ T9592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.416423][ T9592] ? clear_bhb_loop+0x70/0xc0 [ 167.416446][ T9592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.416463][ T9592] RIP: 0033:0x7f4c3439e159 [ 167.416479][ T9592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.416494][ T9592] RSP: 002b:00007f4c35190028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 167.416511][ T9592] RAX: ffffffffffffffda RBX: 00007f4c34625fa0 RCX: 00007f4c3439e159 [ 167.416523][ T9592] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000e [ 167.416533][ T9592] RBP: 00007f4c3443503b R08: 0000000000000004 R09: 0000000000000000 [ 167.416544][ T9592] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.416555][ T9592] R13: 00007f4c34626038 R14: 00007f4c34625fa0 R15: 00007ffd393740e8 [ 167.416584][ T9592] [ 167.416596][ T9592] Mem-Info: [ 167.416604][ T9592] active_anon:6337 inactive_anon:0 isolated_anon:0 [ 167.416604][ T9592] active_file:0 inactive_file:43128 isolated_file:0 [ 167.416604][ T9592] unevictable:0 dirty:111 writeback:0 [ 167.416604][ T9592] slab_reclaimable:10608 slab_unreclaimable:101522 [ 167.416604][ T9592] mapped:29349 shmem:527 pagetables:1268 [ 167.416604][ T9592] sec_pagetables:0 bounce:0 [ 167.416604][ T9592] kernel_misc_reclaimable:0 [ 167.416604][ T9592] free:1327920 free_pcp:9046 free_cma:0 [ 167.416649][ T9592] Node 0 active_anon:25348kB inactive_anon:0kB active_file:0kB inactive_file:172312kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117396kB dirty:444kB writeback:0kB shmem:2108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13512kB pagetables:4932kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 167.416709][ T9592] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 167.416764][ T9592] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.416812][ T9592] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 167.416844][ T9592] Node 0 DMA32 free:1354600kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25348kB inactive_anon:0kB active_file:0kB inactive_file:172312kB unevictable:0kB writepending:444kB zspages:0kB present:3129332kB managed:2546720kB mlocked:0kB bounce:0kB free_pcp:34928kB local_pcp:16716kB free_cma:0kB [ 167.416895][ T9592] lowmem_reserve[]: 0 0 0 0 0 [ 167.416952][ T9592] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.416998][ T9592] lowmem_reserve[]: 0 0 0 0 0 [ 167.417027][ T9592] Node 1 Normal free:3941720kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1256kB local_pcp:1256kB free_cma:0kB [ 167.417077][ T9592] lowmem_reserve[]: 0 0 0 0 0 [ 167.417106][ T9592] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 167.428413][ T9592] Node 0 DMA32: 470*4kB (UME) 302*8kB (ME) 186*16kB (UM) 38*32kB (ME) 28*64kB (UME) 23*128kB (UM) 10*256kB (ME) 11*512kB (UME) 6*1024kB (M) 2*2048kB (M) 323*4096kB (UM) = 1354664kB [ 167.428555][ T9592] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 167.428655][ T9592] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (UM) = 3941720kB [ 167.428797][ T9592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.428811][ T9592] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.428837][ T9592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.428851][ T9592] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.428864][ T9592] 43651 total pagecache pages [ 167.428875][ T9592] 0 pages in swap cache [ 167.428881][ T9592] Free swap = 124996kB [ 167.428887][ T9592] Total swap = 124996kB [ 167.428894][ T9592] 2097051 pages RAM [ 167.428900][ T9592] 0 pages HighMem/MovableOnly [ 167.428906][ T9592] 428755 pages reserved [ 167.428913][ T9592] 0 pages cma reserved [ 168.220576][ T9636] netlink: 'syz.1.955': attribute type 21 has an invalid length. [ 168.277605][ T9639] netlink: 'syz.0.954': attribute type 4 has an invalid length. [ 168.635900][ T9659] vcan0: tx address claim with dest, not broadcast [ 168.794626][ T9665] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 168.805286][ T9665] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 169.045113][ T9679] block nbd1: Unsupported socket: should be TCP or UNIX. [ 169.203159][ T9689] netlink: 'syz.1.970': attribute type 142 has an invalid length. [ 169.746473][ T9710] xt_hashlimit: size too large, truncated to 1048576 [ 170.594538][ T9732] netlink: 'syz.1.982': attribute type 10 has an invalid length. [ 170.649814][ T9732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.660189][ T9732] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 170.790102][ T9742] netlink: 'syz.4.984': attribute type 5 has an invalid length. [ 170.802069][ T9742] ÿÿÿÿÿÿ€: renamed from virt_wifi0 [ 171.290925][ T9765] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 171.366205][ T9770] vlan0: entered allmulticast mode [ 171.366231][ T9770] bond0: entered allmulticast mode [ 171.366259][ T9770] bond_slave_1: entered allmulticast mode [ 171.408496][ T5738] wg0 speed is unknown, defaulting to 1000 [ 171.462286][ T9770] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 171.828830][ T9796] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 171.843792][ T9799] x_tables: duplicate underflow at hook 3 [ 171.868515][ T9794] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 172.140083][ T9810] __nla_validate_parse: 9 callbacks suppressed [ 172.140165][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 172.599816][ T9837] tipc: Started in network mode [ 172.608222][ T9837] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 172.608306][ T9837] tipc: Enabling of bearer rejected, failed to enable media [ 172.690358][ T9841] netlink: 'syz.4.1014': attribute type 1 has an invalid length. [ 172.700989][ T9841] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1014'. [ 172.905739][ T9848] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 172.938558][ T9848] xt_hashlimit: size too large, truncated to 1048576 [ 173.002232][ T9844] C: renamed from lo [ 173.014454][ T9844] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 173.271136][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1019'. [ 173.723172][ T9879] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1026'. [ 174.036617][ T9900] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 174.047002][ T9900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.047432][ T9900] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 174.047464][ T9900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.047821][ T9900] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 174.047851][ T9900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.048230][ T9900] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 174.109757][ T9900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.220412][ T9907] syzkaller1: entered promiscuous mode [ 174.220460][ T9907] syzkaller1: entered allmulticast mode [ 174.450583][ T9914] netlink: 'syz.1.1035': attribute type 49 has an invalid length. [ 174.541418][ T9919] openvswitch: netlink: Duplicate or invalid key (type 0). [ 174.943742][ T9939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1043'. [ 174.964400][ T9947] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1045'. [ 175.036678][ T9947] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1045'. [ 175.124071][ T9953] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1049'. [ 175.136790][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1048'. [ 175.731841][ T9993] siw: device registration error -23 [ 176.227915][ T1987] block nbd0: Possible stuck request ffff8880267ee000: control (read@0,1024B). Runtime 30 seconds [ 176.228352][ T1987] block nbd0: Possible stuck request ffff8880267ee1c0: control (read@1024,1024B). Runtime 30 seconds [ 176.228380][ T1987] block nbd0: Possible stuck request ffff8880267ee380: control (read@2048,1024B). Runtime 30 seconds [ 176.228402][ T1987] block nbd0: Possible stuck request ffff8880267ee540: control (read@3072,1024B). Runtime 30 seconds [ 178.449877][ T9979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.616208][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1057'. [ 178.744419][T10016] netlink: 'syz.1.1062': attribute type 12 has an invalid length. [ 178.804344][T10018] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1063'. [ 178.973551][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1067'. [ 178.984464][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1067'. [ 179.059891][T10029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1067'. [ 179.124971][T10032] netlink: 'syz.3.1068': attribute type 29 has an invalid length. [ 179.143547][T10027] bridge0: entered allmulticast mode [ 179.158364][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 179.158411][T10032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1068'. [ 179.158438][T10032] tc_dump_action: action bad kind [ 179.223979][T10042] x_tables: duplicate entry at hook 4 [ 179.453975][T10048] netlink: 'syz.4.1074': attribute type 1 has an invalid length. [ 179.463650][T10048] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1074'. [ 180.217464][T10080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.981024][T10113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1092'. [ 181.042696][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1092'. [ 183.440712][T10084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.640782][T10139] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1097'. [ 183.705706][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1097'. [ 183.798059][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1097'. [ 183.841389][T10154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1097'. [ 183.937986][T10144] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1098'. [ 184.148232][T10165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1102'. [ 184.151325][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'. [ 184.151343][T10165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1102'. [ 184.181711][T10164] sctp: [Deprecated]: syz.3.1100 (pid 10164) Use of int in max_burst socket option. [ 184.181711][T10164] Use struct sctp_assoc_value instead [ 184.189127][T10167] sctp: [Deprecated]: syz.3.1100 (pid 10167) Use of int in max_burst socket option. [ 184.189127][T10167] Use struct sctp_assoc_value instead [ 184.431085][T10170] wg0 speed is unknown, defaulting to 1000 [ 184.477738][T10180] syzkaller0: entered promiscuous mode [ 184.477774][T10180] syzkaller0: entered allmulticast mode [ 184.494160][T10170] wg2 speed is unknown, defaulting to 1000 [ 184.513393][T10188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1108'. [ 184.537473][T10189] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 184.581824][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'. [ 184.999726][T10198] bond6: option lp_interval: invalid value (0) [ 184.999769][T10198] bond6: option lp_interval: allowed values 1 - 2147483647 [ 185.024673][T10198] bond6 (unregistering): Released all slaves [ 185.350412][T10216] xt_TPROXY: Can be used only with -p tcp or -p udp [ 185.944373][T10231] netlink: 'syz.0.1115': attribute type 1 has an invalid length. [ 186.641854][T10267] sctp: [Deprecated]: syz.4.1121 (pid 10267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.641854][T10267] Use struct sctp_sack_info instead [ 187.222446][T10173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.351587][T10297] openvswitch: netlink: Duplicate or invalid key (type 0). [ 187.360949][T10297] sctp: [Deprecated]: syz.1.1123 (pid 10297) Use of int in max_burst socket option. [ 187.360949][T10297] Use struct sctp_assoc_value instead [ 188.444945][T10361] SET target dimension over the limit! [ 189.270722][T10387] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.271452][T10387] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.595938][T10387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.622253][T10387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.035811][ T7505] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.035873][ T7505] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.035926][ T7505] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.035961][ T7505] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.071898][T10378] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 190.185389][T10423] netlink: 'syz.2.1147': attribute type 10 has an invalid length. [ 190.196403][T10423] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.206017][T10423] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 190.218178][T10419] openvswitch: netlink: IP tunnel TTL not specified. [ 190.218232][T10419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.625522][ T5624] Bluetooth: hci0: command 0x080f tx timeout [ 190.704747][T10452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.014797][T10463] __nla_validate_parse: 5 callbacks suppressed [ 191.014847][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 191.042309][T10463] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1156'. [ 191.214086][T10467] pim6reg527: entered allmulticast mode [ 191.268853][T10467] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1157'. [ 191.268912][T10467] openvswitch: netlink: Message has 512 unknown bytes. [ 191.308730][T10477] openvswitch: netlink: IPv4 tunnel dst address is zero [ 191.308787][T10477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.344557][T10479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1160'. [ 191.378215][T10477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1159'. [ 191.420084][T10479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1160'. [ 192.025082][T10520] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1168'. [ 192.034857][T10520] : renamed from bond0 (while UP) [ 192.416644][T10530] netlink: 'syz.3.1172': attribute type 9 has an invalid length. [ 192.619370][T10540] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1174'. [ 192.769459][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 193.023691][T10558] netlink: 'syz.4.1180': attribute type 5 has an invalid length. [ 193.023729][T10558] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1180'. [ 193.883983][T10601] syzkaller0: entered promiscuous mode [ 193.892896][T10601] syzkaller0: entered allmulticast mode [ 193.907550][T10601] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 194.018007][T10612] netlink: 'syz.1.1195': attribute type 2 has an invalid length. [ 194.154561][T10622] netlink: 'syz.4.1196': attribute type 1 has an invalid length. [ 194.220903][T10622] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.231680][T10624] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 194.251994][T10624] bond3: entered allmulticast mode [ 194.420561][T10638] syzkaller1: entered promiscuous mode [ 194.420600][T10638] syzkaller1: entered allmulticast mode [ 194.618421][T10656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.885051][T10667] tipc: Enabling of bearer rejected, media not registered [ 195.661588][T10703] tipc: Invalid UDP bearer configuration [ 195.663336][T10703] tipc: Enabling of bearer rejected, failed to enable media [ 195.682826][T10703] netlink: 'syz.4.1213': attribute type 10 has an invalid length. [ 195.772905][T10703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.782911][T10703] bond_slave_1: left allmulticast mode [ 195.786610][T10703] bond0 (unregistering): Released all slaves [ 196.368255][T10730] __nla_validate_parse: 13 callbacks suppressed [ 196.368312][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 196.384967][T10727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.429731][T10730] x_tables: unsorted entry at hook 1 [ 196.510242][T10732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1224'. [ 196.522311][T10736] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1225'. [ 196.630268][T10746] netlink: 'syz.4.1228': attribute type 1 has an invalid length. [ 196.650747][T10747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1227'. [ 196.687278][T10746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.799600][T10746] bond4: entered allmulticast mode [ 196.799979][T10746] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.534013][T10799] ipt_REJECT: TCP_RESET invalid for non-tcp [ 197.589348][T10800] ipt_REJECT: TCP_RESET invalid for non-tcp [ 197.804932][T10803] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 197.829692][T10811] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1244'. [ 197.949939][T10823] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1246'. [ 198.073251][T10831] IPVS: ip_vs_add_dest(): server weight less than zero [ 198.087440][T10833] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:21 [ 198.090817][T10835] IPVS: ip_vs_add_dest(): server weight less than zero [ 198.466992][T10846] team0 (unregistering): Port device team_slave_0 removed [ 198.667366][T10846] team0 (unregistering): Port device team_slave_1 removed [ 198.683224][T10846] team0 (unregistering): Port device bridge1 removed [ 198.691187][T10846] bond3: left allmulticast mode [ 198.691997][T10846] bond3: left promiscuous mode [ 198.699734][T10846] team0 (unregistering): Port device macvlan3 removed [ 200.761740][T10813] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.001248][T10866] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1257'. [ 201.023682][T10865] syzkaller0: entered promiscuous mode [ 201.023734][T10865] syzkaller0: entered allmulticast mode [ 201.026807][T10863] tipc: Enabled bearer , priority 0 [ 201.054042][T10871] netlink: 'syz.4.1259': attribute type 10 has an invalid length. [ 201.115558][T10865] tipc: Resetting bearer [ 201.193680][T10862] tipc: Resetting bearer [ 201.292209][T10862] tipc: Disabling bearer [ 201.312427][T10884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1262'. [ 201.358630][ T4934] Bluetooth: hci1: command 0x0406 tx timeout [ 201.358692][ T4934] Bluetooth: hci0: command 0x080f tx timeout [ 201.358716][ T4934] Bluetooth: hci2: command 0x0406 tx timeout [ 201.358773][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 201.718515][T10902] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1266'. [ 202.180819][T10928] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1273'. [ 202.491637][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1278'. [ 202.507634][T10943] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 202.521576][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'. [ 202.521609][T10943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1277'. [ 202.522413][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'. [ 202.522437][T10943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1277'. [ 202.729989][T10953] netlink: 'syz.0.1282': attribute type 10 has an invalid length. [ 202.757761][T10953] bond1: (slave veth0_to_bond): Releasing active interface [ 202.757803][T10953] veth0_to_bond: left promiscuous mode [ 202.757980][T10953] veth0_to_bond: left allmulticast mode [ 202.803869][T10953] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 202.889013][T10958] netlink: 'syz.1.1283': attribute type 49 has an invalid length. [ 202.919881][T10964] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 203.168645][T10977] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1288'. [ 203.299176][T10977] IPv6: sit2: Disabled Multicast RS [ 203.326419][T10981] veth1_to_bond: entered allmulticast mode [ 203.424898][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'. [ 203.487594][T11000] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1296'. [ 203.812979][T10981] veth1_to_bond (unregistering): left allmulticast mode [ 203.842241][T10981] bond0: (slave bond_slave_1): Releasing backup interface [ 203.912707][T10997] vlan0: entered promiscuous mode [ 203.918199][T10997] geneve1: entered promiscuous mode [ 203.923912][T10997] vlan0: entered allmulticast mode [ 203.929275][T10997] geneve1: entered allmulticast mode [ 204.380899][T11049] netlink: 'syz.3.1304': attribute type 7 has an invalid length. [ 204.380944][T11049] netlink: 'syz.3.1304': attribute type 8 has an invalid length. [ 205.249331][T11090] netlink: 'syz.4.1318': attribute type 11 has an invalid length. [ 205.316689][T11097] netlink: 'syz.0.1320': attribute type 5 has an invalid length. [ 205.421477][T11091] syzkaller1: entered promiscuous mode [ 205.421517][T11091] syzkaller1: entered allmulticast mode [ 205.790176][T11124] netlink: 'syz.1.1326': attribute type 1 has an invalid length. [ 205.803205][T11120] FAULT_INJECTION: forcing a failure. [ 205.803205][T11120] name failslab, interval 1, probability 0, space 0, times 0 [ 205.803238][T11120] CPU: 1 UID: 0 PID: 11120 Comm: syz.2.1324 Not tainted syzkaller #0 PREEMPT(full) [ 205.803259][T11120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.803268][T11120] Call Trace: [ 205.803275][T11120] [ 205.803282][T11120] dump_stack_lvl+0xe8/0x150 [ 205.803310][T11120] should_fail_ex+0x410/0x560 [ 205.803341][T11120] ? __alloc_skb+0x1db/0x7a0 [ 205.803367][T11120] should_failslab+0xa8/0x100 [ 205.803415][T11120] ? __alloc_skb+0x1db/0x7a0 [ 205.803438][T11120] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 205.803468][T11120] ? __alloc_skb+0x18d/0x7a0 [ 205.803493][T11120] ? __alloc_skb+0x1db/0x7a0 [ 205.803525][T11120] __alloc_skb+0x1db/0x7a0 [ 205.803554][T11120] tclass_notify+0xf4/0x250 [ 205.803586][T11120] tc_ctl_tclass+0xf30/0x1600 [ 205.803610][T11120] ? lock_acquire+0x115/0x350 [ 205.803638][T11120] ? __pfx___mutex_trylock_common+0x10/0x10 [ 205.803661][T11120] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 205.803685][T11120] ? rcu_is_watching+0x16/0xb0 [ 205.803706][T11120] ? trace_contention_end+0x3d/0x140 [ 205.803730][T11120] ? __mutex_lock+0x30b/0x1550 [ 205.803755][T11120] ? __kernel_text_address+0xd/0x30 [ 205.803774][T11120] ? unwind_get_return_address+0x4d/0x90 [ 205.803793][T11120] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 205.803850][T11120] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 205.803874][T11120] rtnetlink_rcv_msg+0x7b9/0xc00 [ 205.803898][T11120] ? netlink_sendmsg+0x5d4/0xb40 [ 205.803923][T11120] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 205.803948][T11120] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.803976][T11120] ? __lock_acquire+0x6df/0x2e50 [ 205.804005][T11120] netlink_rcv_skb+0x226/0x4a0 [ 205.804027][T11120] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.804055][T11120] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.804088][T11120] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.804109][T11120] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.804135][T11120] netlink_unicast+0x7bd/0x940 [ 205.804165][T11120] netlink_sendmsg+0x813/0xb40 [ 205.804195][T11120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.804224][T11120] ? apparmor_socket_sendmsg+0x98/0x360 [ 205.804253][T11120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.804274][T11120] sock_sendmsg_nosec+0x13a/0x180 [ 205.804300][T11120] ____sys_sendmsg+0x54e/0x850 [ 205.804324][T11120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.804353][T11120] ? import_iovec+0x73/0xa0 [ 205.804375][T11120] ___sys_sendmsg+0x2a5/0x360 [ 205.804398][T11120] ? __lock_acquire+0x6df/0x2e50 [ 205.804419][T11120] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.804473][T11120] ? __fget_files+0x2a/0x420 [ 205.804494][T11120] ? __fget_files+0x3a2/0x420 [ 205.804526][T11120] __x64_sys_sendmsg+0x1b1/0x290 [ 205.804549][T11120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 205.804590][T11120] do_syscall_64+0x166/0x520 [ 205.804613][T11120] ? trace_irq_disable+0x3b/0x140 [ 205.804630][T11120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.804648][T11120] ? clear_bhb_loop+0x70/0xc0 [ 205.804670][T11120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.804687][T11120] RIP: 0033:0x7f8b5b59e159 [ 205.804704][T11120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.804717][T11120] RSP: 002b:00007f8b5c50e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.804736][T11120] RAX: ffffffffffffffda RBX: 00007f8b5b825fa0 RCX: 00007f8b5b59e159 [ 205.804749][T11120] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 205.804760][T11120] RBP: 00007f8b5c50e090 R08: 0000000000000000 R09: 0000000000000000 [ 205.804771][T11120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.804782][T11120] R13: 00007f8b5b826038 R14: 00007f8b5b825fa0 R15: 00007ffe0cdb27b8 [ 205.804810][T11120] [ 206.003742][T11140] netlink: 'syz.4.1325': attribute type 2 has an invalid length. [ 206.029058][T11124] bond0: entered promiscuous mode [ 206.030241][T11124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.321351][ T1987] block nbd0: Possible stuck request ffff8880267ee000: control (read@0,1024B). Runtime 60 seconds [ 206.321406][ T1987] block nbd0: Possible stuck request ffff8880267ee1c0: control (read@1024,1024B). Runtime 60 seconds [ 206.321456][ T1987] block nbd0: Possible stuck request ffff8880267ee380: control (read@2048,1024B). Runtime 60 seconds [ 206.321482][ T1987] block nbd0: Possible stuck request ffff8880267ee540: control (read@3072,1024B). Runtime 60 seconds [ 206.483346][T11134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.496116][T11134] bond0: (slave xfrm1): The slave device specified does not support setting the MAC address [ 206.508430][T11134] bond0: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 206.520557][T11134] bond0: (slave xfrm1): making interface the new active one [ 206.528087][T11134] xfrm1: entered promiscuous mode [ 206.534811][T11134] bond0: (slave xfrm1): Enslaving as an active interface with an up link [ 206.572712][T11139] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 206.581250][T11139] gretap2: entered promiscuous mode [ 206.587030][T11139] gretap2: entered allmulticast mode [ 206.748741][T11169] __nla_validate_parse: 7 callbacks suppressed [ 206.755712][T11169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1331'. [ 206.813329][T11170] tipc: Can't bind to reserved service type 2 [ 206.846582][T11172] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1333'. [ 206.956231][T11174] netlink: 'syz.0.1334': attribute type 10 has an invalid length. [ 207.024832][T11176] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1337'. [ 207.117301][T11184] FAULT_INJECTION: forcing a failure. [ 207.117301][T11184] name failslab, interval 1, probability 0, space 0, times 0 [ 207.130740][T11184] CPU: 1 UID: 0 PID: 11184 Comm: syz.4.1338 Not tainted syzkaller #0 PREEMPT(full) [ 207.130766][T11184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.130777][T11184] Call Trace: [ 207.130785][T11184] [ 207.130792][T11184] dump_stack_lvl+0xe8/0x150 [ 207.130825][T11184] should_fail_ex+0x410/0x560 [ 207.130855][T11184] ? __alloc_skb+0x1db/0x7a0 [ 207.130882][T11184] should_failslab+0xa8/0x100 [ 207.130906][T11184] ? __alloc_skb+0x1db/0x7a0 [ 207.130928][T11184] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 207.130956][T11184] ? __alloc_skb+0x18d/0x7a0 [ 207.130981][T11184] ? __alloc_skb+0x1db/0x7a0 [ 207.131013][T11184] __alloc_skb+0x1db/0x7a0 [ 207.131043][T11184] tclass_notify+0xf4/0x250 [ 207.131077][T11184] tc_ctl_tclass+0xf30/0x1600 [ 207.131115][T11184] ? __pfx___mutex_trylock_common+0x10/0x10 [ 207.131140][T11184] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 207.131165][T11184] ? rcu_is_watching+0x16/0xb0 [ 207.131186][T11184] ? trace_contention_end+0x3d/0x140 [ 207.131209][T11184] ? __mutex_lock+0x30b/0x1550 [ 207.131239][T11184] ? __local_bh_enable_ip+0xd6/0x140 [ 207.131263][T11184] ? lockdep_hardirqs_on+0x7b/0x110 [ 207.131287][T11184] ? __dev_queue_xmit+0x29b/0x3820 [ 207.131336][T11184] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 207.131362][T11184] rtnetlink_rcv_msg+0x7b9/0xc00 [ 207.131394][T11184] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 207.131419][T11184] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.131444][T11184] ? ref_tracker_free+0x689/0x830 [ 207.131466][T11184] ? __pfx_ref_tracker_free+0x10/0x10 [ 207.131495][T11184] netlink_rcv_skb+0x226/0x4a0 [ 207.131518][T11184] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.131546][T11184] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.131583][T11184] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.131604][T11184] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.131632][T11184] netlink_unicast+0x7bd/0x940 [ 207.131671][T11184] netlink_sendmsg+0x813/0xb40 [ 207.131711][T11184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.131741][T11184] ? apparmor_socket_sendmsg+0x98/0x360 [ 207.131772][T11184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.131793][T11184] sock_sendmsg_nosec+0x13a/0x180 [ 207.131819][T11184] ____sys_sendmsg+0x54e/0x850 [ 207.131845][T11184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.131872][T11184] ? import_iovec+0x73/0xa0 [ 207.131894][T11184] ___sys_sendmsg+0x2a5/0x360 [ 207.131912][T11184] ? __lock_acquire+0x6df/0x2e50 [ 207.131932][T11184] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.131980][T11184] ? __fget_files+0x2a/0x420 [ 207.132000][T11184] ? __fget_files+0x3a2/0x420 [ 207.132029][T11184] __x64_sys_sendmsg+0x1b1/0x290 [ 207.132049][T11184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.132091][T11184] do_syscall_64+0x166/0x520 [ 207.132115][T11184] ? trace_irq_disable+0x3b/0x140 [ 207.132132][T11184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.132149][T11184] ? clear_bhb_loop+0x70/0xc0 [ 207.132171][T11184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.132189][T11184] RIP: 0033:0x7f4c3439e159 [ 207.132205][T11184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.132221][T11184] RSP: 002b:00007f4c35190028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.132241][T11184] RAX: ffffffffffffffda RBX: 00007f4c34625fa0 RCX: 00007f4c3439e159 [ 207.132253][T11184] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 207.132264][T11184] RBP: 00007f4c35190090 R08: 0000000000000000 R09: 0000000000000000 [ 207.132275][T11184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.132286][T11184] R13: 00007f4c34626038 R14: 00007f4c34625fa0 R15: 00007ffd393740e8 [ 207.132318][T11184] [ 207.452151][T11189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1340'. [ 207.564066][T11197] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1342'. [ 207.623938][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1342'. [ 207.647817][T11202] gretap0: entered promiscuous mode [ 207.657652][T11202] vlan0: entered promiscuous mode [ 207.729598][T11202] vlan0: entered promiscuous mode [ 207.831697][T11202] vlan0: entered promiscuous mode [ 207.910751][T11202] vlan0: entered promiscuous mode [ 207.942212][T11218] netdevsim netdevsim2: Direct firmware load for ÿ failed with error -2 [ 207.967254][T11218] netdevsim netdevsim2: Falling back to sysfs fallback for: ÿ [ 208.041135][T11202] vlan0: entered promiscuous mode [ 208.042344][T11221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1348'. [ 208.089846][T11223] netlink: 'syz.1.1349': attribute type 1 has an invalid length. [ 208.147336][T11202] vlan0: entered promiscuous mode [ 208.230053][T11228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1350'. [ 208.253329][T11228] netlink: 'syz.4.1350': attribute type 1 has an invalid length. [ 208.264099][T11228] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1350'. [ 208.311831][T11202] vlan0: entered promiscuous mode [ 208.471307][T11234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1353'. [ 208.601794][T11243] 8021q: VLANs not supported on vxcan1 [ 208.742689][T11250] xt_CT: No such helper "netbios-ns" [ 210.305407][ T5633] Bluetooth: hci4: command 0x0401 tx timeout [ 210.373819][T11347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.887842][T11380] x_tables: duplicate underflow at hook 2 [ 211.271519][T11401] netlink: 'syz.0.1399': attribute type 10 has an invalid length. [ 211.292691][T11406] netlink: 'syz.0.1399': attribute type 10 has an invalid length. [ 211.349993][T11407] netlink: 'syz.2.1400': attribute type 1 has an invalid length. [ 211.887454][T11437] __nla_validate_parse: 13 callbacks suppressed [ 211.894463][T11437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1405'. [ 212.052918][T11446] FAULT_INJECTION: forcing a failure. [ 212.052918][T11446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.052972][T11446] CPU: 0 UID: 0 PID: 11446 Comm: syz.0.1407 Not tainted syzkaller #0 PREEMPT(full) [ 212.052991][T11446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.053001][T11446] Call Trace: [ 212.053006][T11446] [ 212.053013][T11446] dump_stack_lvl+0xe8/0x150 [ 212.053039][T11446] should_fail_ex+0x410/0x560 [ 212.053071][T11446] _copy_to_user+0x31/0xb0 [ 212.053093][T11446] simple_read_from_buffer+0xe1/0x170 [ 212.053121][T11446] proc_fail_nth_read+0x1bb/0x230 [ 212.053145][T11446] ? common_file_perm+0x20e/0x2b0 [ 212.053166][T11446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 212.053190][T11446] ? rw_verify_area+0x24a/0x4c0 [ 212.053218][T11446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 212.053243][T11446] vfs_read+0x213/0xa80 [ 212.053272][T11446] ? __pfx___mutex_lock+0x10/0x10 [ 212.053299][T11446] ? __pfx_vfs_read+0x10/0x10 [ 212.053324][T11446] ? __fget_files+0x2a/0x420 [ 212.053350][T11446] ? __fget_files+0x3a2/0x420 [ 212.053371][T11446] ? __fget_files+0x2a/0x420 [ 212.053402][T11446] ksys_read+0x150/0x270 [ 212.053428][T11446] ? __pfx_ksys_read+0x10/0x10 [ 212.053463][T11446] do_syscall_64+0x166/0x520 [ 212.053487][T11446] ? trace_irq_disable+0x3b/0x140 [ 212.053504][T11446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.053523][T11446] ? clear_bhb_loop+0x70/0xc0 [ 212.053545][T11446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.053563][T11446] RIP: 0033:0x7f16cc35e98e [ 212.053579][T11446] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 212.053594][T11446] RSP: 002b:00007f16cd339fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 212.053613][T11446] RAX: ffffffffffffffda RBX: 00007f16cd33a6c0 RCX: 00007f16cc35e98e [ 212.053626][T11446] RDX: 000000000000000f RSI: 00007f16cd33a0a0 RDI: 0000000000000008 [ 212.053637][T11446] RBP: 00007f16cd33a090 R08: 0000000000000000 R09: 0000000000000000 [ 212.053648][T11446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.053658][T11446] R13: 00007f16cc626038 R14: 00007f16cc625fa0 R15: 00007ffd00f9fd78 [ 212.053687][T11446] [ 212.817308][T11483] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1415'. [ 212.830149][T11490] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.1417'. [ 212.929218][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1418'. [ 212.929271][T11495] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1418'. [ 213.459103][T11527] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1424'. [ 213.647587][T11534] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1426'. [ 214.420533][T11581] netlink: 'syz.3.1437': attribute type 1 has an invalid length. [ 214.430009][T11581] netlink: 'syz.3.1437': attribute type 2 has an invalid length. [ 214.453084][T11581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1437'. [ 214.516100][T11579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1436'. [ 214.520917][T11581] bond7: entered promiscuous mode [ 214.521723][T11581] bond7: entered allmulticast mode [ 214.522374][T11581] netlink: 'syz.3.1437': attribute type 9 has an invalid length. [ 214.529819][T11581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1437'. [ 214.590106][T11591] sctp: [Deprecated]: syz.4.1439 (pid 11591) Use of int in max_burst socket option. [ 214.590106][T11591] Use struct sctp_assoc_value instead [ 215.779153][T11644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.572465][T11691] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 216.780584][T11694] veth3: entered allmulticast mode [ 216.999848][T11713] netlink: 'syz.1.1476': attribute type 1 has an invalid length. [ 217.084257][T11713] bond6: entered promiscuous mode [ 217.102626][T11713] 8021q: adding VLAN 0 to HW filter on device bond6 [ 217.170392][T11711] __nla_validate_parse: 7 callbacks suppressed [ 217.170448][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 217.526022][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 217.562177][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 217.582160][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 217.582371][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 217.582541][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 217.582704][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 217.582864][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 217.604208][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 217.604383][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 217.741770][T11747] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 217.769094][T11747] syzkaller1: entered allmulticast mode [ 218.730583][T11791] macsec1: entered promiscuous mode [ 218.736207][T11791] hsr0: entered promiscuous mode [ 218.744433][T11791] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 219.361402][T11844] tipc: New replicast peer: 0.0.0.0 [ 219.368234][T11847] netlink: 'syz.0.1514': attribute type 1 has an invalid length. [ 219.376798][T11844] tipc: Enabled bearer , priority 10 [ 219.432185][T11847] 8021q: adding VLAN 0 to HW filter on device bond8 [ 219.685097][T11871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.012177][T11866] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.012741][T11866] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.875841][ T9427] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.891613][T10408] wg0 speed is unknown, defaulting to 1000 [ 220.891667][T10408] syz0: Port: 1 Link DOWN [ 220.903301][ T9422] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.903344][ T9422] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.903375][ T9422] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.276588][T11902] netlink: 'syz.2.1528': attribute type 4 has an invalid length. [ 222.180487][T11946] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 222.190873][T11946] __nla_validate_parse: 48 callbacks suppressed [ 222.190889][T11946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1540'. [ 222.190911][T11946] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 222.208463][T11945] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1539'. [ 222.412689][T11954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1541'. [ 222.670153][T11973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.903815][T11992] netlink: 37 bytes leftover after parsing attributes in process `syz.4.1553'. [ 222.911467][T11991] netlink: 37 bytes leftover after parsing attributes in process `syz.4.1553'. [ 222.924730][T11995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1554'. [ 222.989678][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1554'. [ 223.158378][T12007] wg0 speed is unknown, defaulting to 1000 [ 223.166378][T12007] wg2 speed is unknown, defaulting to 1000 [ 223.232254][T12011] netlink: 'syz.3.1560': attribute type 1 has an invalid length. [ 223.242218][T12011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.250415][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1556'. [ 223.252366][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1556'. [ 223.367010][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1559'. [ 223.434457][T12014] bond7: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 223.457287][T12014] bond7 (unregistering): Released all slaves [ 223.641593][T12022] netlink: 'syz.0.1562': attribute type 5 has an invalid length. [ 224.296690][T12045] netlink: 'syz.2.1570': attribute type 1 has an invalid length. [ 224.546039][T12045] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.597023][T12062] netlink: 'syz.3.1574': attribute type 16 has an invalid length. [ 224.597067][T12062] netlink: 'syz.3.1574': attribute type 17 has an invalid length. [ 224.670786][T12062] ip_vti0: left promiscuous mode [ 224.738475][T12062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.837773][T12062] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 224.952325][T12060] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.007852][T12060] tipc: Resetting bearer [ 225.008181][T12060] tipc: Resetting bearer [ 225.039484][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.039593][ T9422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.168032][T12095] geneve3: entered allmulticast mode [ 225.235720][T12101] syzkaller1: entered promiscuous mode [ 225.237183][T12101] syzkaller1: entered allmulticast mode [ 225.290575][T12056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.597287][T12112] ip6t_srh: unknown srh invflags 4000 [ 225.653789][T12113] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 225.659009][T12116] ip_tables: iptables: counters copy to user failed while replacing table [ 226.356621][T12156] bridge0: port 3(veth1_to_bridge) entered blocking state [ 226.367356][T12156] bridge0: port 3(veth1_to_bridge) entered disabled state [ 226.375874][T12156] veth1_to_bridge: entered allmulticast mode [ 226.394804][T12156] veth1_to_bridge: entered promiscuous mode [ 226.517265][T12167] lo: entered promiscuous mode [ 226.517685][T12167] tunl0: entered promiscuous mode [ 226.517984][T12167] gre0: entered promiscuous mode [ 226.518293][T12167] 0ªî{X¹¦: entered promiscuous mode [ 226.518308][T12167] 0ªî{X¹¦: left allmulticast mode [ 226.524460][T12167] erspan0: entered promiscuous mode [ 226.524767][T12167] ip_vti0: entered promiscuous mode [ 226.968957][T12140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 230.085364][ T4984] udevd[4984]: worker [5644] /devices/virtual/block/nbd0 is taking a long time [ 236.385523][ T1987] block nbd0: Possible stuck request ffff8880267ee000: control (read@0,1024B). Runtime 90 seconds [ 236.385577][ T1987] block nbd0: Possible stuck request ffff8880267ee1c0: control (read@1024,1024B). Runtime 90 seconds [ 236.385623][ T1987] block nbd0: Possible stuck request ffff8880267ee380: control (read@2048,1024B). Runtime 90 seconds [ 236.385650][ T1987] block nbd0: Possible stuck request ffff8880267ee540: control (read@3072,1024B). Runtime 90 seconds [ 253.881046][T12201] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 254.079485][T12219] netlink: 'syz.4.1609': attribute type 10 has an invalid length. [ 254.084416][T12218] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.094604][T12216] netlink: 'syz.2.1607': attribute type 2 has an invalid length. [ 254.300484][T12228] syzkaller1: entered promiscuous mode [ 254.300790][T12228] syzkaller1: entered allmulticast mode [ 254.375651][T12236] __nla_validate_parse: 4 callbacks suppressed [ 254.386965][T12236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1613'. [ 254.731710][T12252] syzkaller1: entered promiscuous mode [ 254.799989][T12261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'. [ 254.820358][T12261] hsr_slave_1 (unregistering): left promiscuous mode [ 255.002405][T12221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.020371][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'. [ 255.274365][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 255.274404][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1624'. [ 255.494265][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 255.494322][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1628'. [ 255.636733][T12309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1630'. [ 255.882540][T12317] netlink: 'syz.3.1633': attribute type 1 has an invalid length. [ 256.018429][T12317] bond8: entered promiscuous mode [ 256.018824][T12317] 8021q: adding VLAN 0 to HW filter on device bond8 [ 256.050959][T12318] bond8: (slave bridge3): making interface the new active one [ 256.050996][T12318] bridge3: entered promiscuous mode [ 256.051928][T12318] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 256.379512][T12339] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1638'. [ 256.409772][T12339] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1638'. [ 256.618537][T12350] veth0: entered promiscuous mode [ 256.627691][T12349] veth0: left promiscuous mode [ 257.247399][T12396] xt_hl: Unknown Hop Limit match mode: 206 [ 257.652208][T12414] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 257.733595][T12416] netlink: 'syz.1.1663': attribute type 2 has an invalid length. [ 257.937506][T12416] : entered promiscuous mode [ 258.117573][T12428] netlink: 'syz.3.1667': attribute type 10 has an invalid length. [ 258.163433][T12428] team0: Port device dummy0 added [ 258.235909][ T52] block nbd1: Receive control failed (result -32) [ 258.617876][T12468] openvswitch: netlink: Flow key attribute not present in set flow. [ 259.224233][T12488] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 259.281398][T12493] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 259.404759][T12499] netlink: 'syz.0.1690': attribute type 1 has an invalid length. [ 259.410496][T12496] __nla_validate_parse: 23 callbacks suppressed [ 259.410513][T12496] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1688'. [ 259.433942][T12499] netlink: 'syz.0.1690': attribute type 1 has an invalid length. [ 259.503860][T12501] tipc: Enabling of bearer rejected, already enabled [ 259.746080][T12528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1697'. [ 260.038785][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1701'. [ 260.049829][T12540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.303002][T12561] tipc: Enabling of bearer rejected, already enabled [ 260.415007][T12564] netlink: 'syz.2.1708': attribute type 1 has an invalid length. [ 260.474884][T12564] 8021q: adding VLAN 0 to HW filter on device bond5 [ 260.501944][T12571] Bluetooth: hci0: unsupported parameter 5135 [ 260.501983][T12571] Bluetooth: hci0: unsupported parameter 8192 [ 260.502017][T12571] Bluetooth: hci0: unsupported parameter 5135 [ 260.502033][T12571] Bluetooth: hci0: unsupported parameter 8192 [ 260.751661][T12591] Bluetooth: hci0: unsupported parameter 5135 [ 260.758698][T12591] Bluetooth: hci0: unsupported parameter 8192 [ 260.758744][T12591] Bluetooth: hci0: unsupported parameter 5135 [ 260.758760][T12591] Bluetooth: hci0: unsupported parameter 8192 [ 261.181203][T12612] syzkaller1: entered promiscuous mode [ 261.181248][T12612] syzkaller1: entered allmulticast mode [ 261.297513][T12617] tipc: Enabling of bearer rejected, already enabled [ 261.401768][T12619] netlink: zone id is out of range [ 261.407160][T12619] netlink: zone id is out of range [ 261.412724][T12619] netlink: zone id is out of range [ 261.418480][T12619] netlink: zone id is out of range [ 261.418628][T12619] netlink: zone id is out of range [ 261.418642][T12619] netlink: zone id is out of range [ 261.566085][T12629] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1724'. [ 261.575736][T12629] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1724'. [ 261.586984][T12629] netlink: 'syz.0.1724': attribute type 6 has an invalid length. [ 261.587018][T12629] netlink: 'syz.0.1724': attribute type 5 has an invalid length. [ 261.587033][T12629] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1724'. [ 262.033031][T12654] tipc: Enabling of bearer rejected, already enabled [ 262.217142][T12660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1732'. [ 262.509424][T12677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1738'. [ 262.511808][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1738'. [ 262.513733][T12677] veth1_to_bridge: entered promiscuous mode [ 262.724436][T12686] tipc: Enabling of bearer rejected, already enabled [ 262.751358][T12689] netlink: 808 bytes leftover after parsing attributes in process `syz.0.1743'. [ 263.327872][T12675] veth1_to_bridge: left promiscuous mode [ 263.413135][T12723] syzkaller1: entered promiscuous mode [ 263.420470][T12723] syzkaller1: entered allmulticast mode [ 263.536415][T12739] bond0: (slave syz_tun): Releasing backup interface [ 263.611344][T12739] bond0: (slave veth0_to_bond): Releasing backup interface [ 263.633946][T12739] bond0: (slave bond_slave_0): Releasing backup interface [ 263.657556][T12739] net_ratelimit: 5 callbacks suppressed [ 263.664903][T12739] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 263.828787][T12750] tipc: Enabling of bearer rejected, already enabled [ 264.112009][T12770] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 264.152007][T12769] gtp1: entered promiscuous mode [ 264.152054][T12769] gtp1: entered allmulticast mode [ 264.452194][T12786] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 264.620414][T12793] __nla_validate_parse: 1 callbacks suppressed [ 264.620464][T12793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1769'. [ 264.651817][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1769'. [ 264.682942][T12803] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 264.682995][T12803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.781460][T12804] netlink: 'syz.4.1770': attribute type 8 has an invalid length. [ 264.781539][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 264.923919][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1772'. [ 265.048749][T12808] netlink: 'syz.3.1773': attribute type 1 has an invalid length. [ 265.048793][T12808] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1773'. [ 265.048822][T12808] netlink: 41 bytes leftover after parsing attributes in process `syz.3.1773'. [ 265.129800][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1774'. [ 265.346786][T12815] ip_tables: iptables: counters copy to user failed while replacing table [ 265.491353][T12815] team0: Port device dummy0 removed [ 265.526556][T12815] bridge_slave_0: left allmulticast mode [ 265.526601][T12815] bridge_slave_0: left promiscuous mode [ 265.526803][T12815] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.591409][T12815] bridge_slave_1: left allmulticast mode [ 265.595544][T12815] bridge_slave_1: left promiscuous mode [ 265.595764][T12815] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.629888][T12815] bond0: (slave bond_slave_0): Releasing backup interface [ 265.656691][T12815] bond0: (slave bond_slave_1): Releasing backup interface [ 265.707361][T12815] team0: Port device team_slave_0 removed [ 265.737746][T12815] team0: Port device team_slave_1 removed [ 265.750346][T12815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.758144][T12815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.768978][T12815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.775629][T12815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.781832][T12815] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 265.807766][T12820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1778'. [ 265.807815][T12820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1778'. [ 265.807865][T12820] netlink: 'syz.1.1778': attribute type 3 has an invalid length. [ 265.808376][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1778'. [ 265.808413][T12825] netlink: 'syz.1.1778': attribute type 3 has an invalid length. [ 266.028228][T12824] bridge0: left allmulticast mode [ 266.136666][T12840] netlink: 'syz.2.1784': attribute type 2 has an invalid length. [ 266.269840][T12845] tipc: Enabling of bearer rejected, already enabled [ 266.373964][T12851] macvlan0: entered promiscuous mode [ 266.374006][T12851] team0: entered promiscuous mode [ 266.374033][T12851] team_slave_0: entered promiscuous mode [ 266.374236][T12851] team_slave_1: entered promiscuous mode [ 266.383983][T12851] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 266.479077][ T1987] block nbd0: Possible stuck request ffff8880267ee000: control (read@0,1024B). Runtime 120 seconds [ 266.479130][ T1987] block nbd0: Possible stuck request ffff8880267ee1c0: control (read@1024,1024B). Runtime 120 seconds [ 266.479171][ T1987] block nbd0: Possible stuck request ffff8880267ee380: control (read@2048,1024B). Runtime 120 seconds [ 266.479196][ T1987] block nbd0: Possible stuck request ffff8880267ee540: control (read@3072,1024B). Runtime 120 seconds [ 267.011101][T12887] netlink: 'syz.4.1795': attribute type 4 has an invalid length. [ 267.042561][T12875] ip6t_ah: unknown flags 5 [ 267.240535][T12895] tipc: Enabling of bearer rejected, already enabled [ 267.348432][T12902] sctp: [Deprecated]: syz.4.1800 (pid 12902) Use of int in maxseg socket option. [ 267.348432][T12902] Use struct sctp_assoc_value instead [ 267.368304][T12902] netlink: 'syz.4.1800': attribute type 3 has an invalid length. [ 267.380490][T12902] sctp: [Deprecated]: syz.4.1800 (pid 12902) Use of int in maxseg socket option. [ 267.380490][T12902] Use struct sctp_assoc_value instead [ 267.397145][T12906] netlink: 'syz.4.1800': attribute type 3 has an invalid length. [ 267.401076][T12907] xt_addrtype: ipv6 does not support BROADCAST matching [ 267.537691][T12915] ip_tables: iptables: counters copy to user failed while replacing table [ 267.891386][T12939] tipc: Enabling of bearer rejected, already enabled [ 268.370505][T12919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.790147][T12997] tipc: Enabling of bearer rejected, already enabled [ 268.842084][T12992] syzkaller1: entered promiscuous mode [ 268.842137][T12992] syzkaller1: entered allmulticast mode [ 269.374179][T13040] tipc: Enabling of bearer rejected, already enabled [ 269.644239][T13057] __nla_validate_parse: 16 callbacks suppressed [ 269.644285][T13057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1843'. [ 269.665373][T13057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1843'. [ 270.003807][T13074] netlink: 'syz.3.1850': attribute type 26 has an invalid length. [ 270.018712][T13073] tipc: Enabling of bearer rejected, already enabled [ 270.159844][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1857'. [ 270.172355][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1857'. [ 270.223066][ T9423] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc7 [ 270.445302][T13112] openvswitch: netlink: nsh attr 16382 is out of range max 3 [ 270.454810][T13112] IPv6: NLM_F_CREATE should be specified when creating new route [ 270.454936][T13112] netlink: 'syz.3.1862': attribute type 1 has an invalid length. [ 271.772746][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1867'. [ 271.810050][T13127] netlink: 'syz.4.1868': attribute type 8 has an invalid length. [ 273.043608][T13080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.271213][T13140] netlink: 'syz.2.1874': attribute type 1 has an invalid length. [ 273.277328][T13142] netlink: 'syz.2.1874': attribute type 1 has an invalid length. [ 273.323823][T13145] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1875'. [ 273.332853][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1870'. [ 273.378260][T13138] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 273.400515][T13155] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1876'. [ 273.706968][T13169] netlink: 'syz.4.1879': attribute type 5 has an invalid length. [ 274.146283][T13175] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1880'. [ 274.323605][T13184] IPVS: set_ctl: invalid protocol: 190 172.20.20.187:0 [ 274.324573][T13180] netlink: 'syz.0.1881': attribute type 11 has an invalid length. [ 274.361143][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1884'. [ 274.500571][T13186] hsr_slave_1 (unregistering): left promiscuous mode [ 274.690852][T13212] netlink: 'syz.3.1889': attribute type 39 has an invalid length. [ 274.790484][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1887'. [ 274.790513][T13197] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1887'. [ 274.821958][T13214] syzkaller1: entered promiscuous mode [ 274.822004][T13214] syzkaller1: entered allmulticast mode [ 274.850962][T13214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1890'. [ 274.941354][T13216] IPv6: NLM_F_CREATE should be specified when creating new route [ 274.971026][T13214] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1890'. [ 275.068728][T13225] Bluetooth: MGMT ver 1.23 [ 275.231969][T13230] xt_NETMAP: bad MAP_IPS. [ 275.906115][T13232] netlink: 'syz.2.1895': attribute type 8 has an invalid length. [ 276.501488][T13299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1911'. [ 276.751828][T13314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1914'. [ 277.261591][T13343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1922'. [ 277.455686][T13344] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1919'. [ 277.622421][T13355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1923'. [ 277.622641][T13355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1923'. [ 278.072407][T13376] sctp: [Deprecated]: syz.2.1931 (pid 13376) Use of int in max_burst socket option. [ 278.072407][T13376] Use struct sctp_assoc_value instead [ 278.448781][T13404] netlink: 'syz.3.1939': attribute type 3 has an invalid length. [ 278.955041][T13432] netlink: 'syz.0.1944': attribute type 39 has an invalid length. [ 279.036965][T13434] netlink: 'syz.0.1944': attribute type 13 has an invalid length. [ 279.037633][T13434] netlink: 'syz.0.1944': attribute type 13 has an invalid length. [ 279.208724][T13443] netlink: 'syz.4.1947': attribute type 29 has an invalid length. [ 279.210701][T13449] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 279.213263][T13449] openvswitch: netlink: Missing valid actions attribute. [ 279.317155][ T7505] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.318009][ T7505] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.318043][ T7505] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.318072][ T7505] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.399359][T13457] bond9: Unable to set up delay as MII monitoring is disabled [ 279.410705][T13457] bond9 (unregistering): Released all slaves [ 279.514712][T13464] v: renamed from veth0_vlan (while UP) [ 279.551892][T13464] openvswitch: netlink: Actions may not be safe on all matching packets [ 279.592319][T13467] tipc: Enabled bearer , priority 10 [ 280.153688][T13496] __nla_validate_parse: 40 callbacks suppressed [ 280.153737][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1959'. [ 280.298261][T13501] openvswitch: netlink: Key 6 has unexpected len 8 expected 2 [ 280.360839][T13509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1967'. [ 280.381323][T13509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1967'. [ 280.446175][T13512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1967'. [ 280.466734][T13509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1967'. [ 280.542674][T13524] : renamed from bond0 (while UP) [ 280.642162][ T7505] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc7 [ 280.678971][T13533] netlink: 'syz.0.1972': attribute type 1 has an invalid length. [ 280.861303][T13533] bond0: entered promiscuous mode [ 280.862269][T13533] bond0: entered allmulticast mode [ 280.863103][T13533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.151917][T13565] erspan2: entered allmulticast mode [ 281.162574][T13565] bond0: (slave erspan2): making interface the new active one [ 281.162616][T13565] erspan2: entered promiscuous mode [ 281.170366][T13565] bond0: (slave erspan2): Enslaving as an active interface with an up link [ 281.269995][T13569] hsr0: entered allmulticast mode [ 281.270022][T13569] hsr_slave_0: entered allmulticast mode [ 281.402196][T13573] netlink: 'syz.4.1979': attribute type 1 has an invalid length. [ 281.443911][T13573] bond5: (slave geneve2): making interface the new active one [ 281.451579][T13573] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 281.476803][ T1419] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 281.476871][ T1419] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 281.476900][ T1419] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 281.476926][ T1419] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 283.516242][T13520] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 283.700630][T13586] netlink: 'syz.1.1985': attribute type 10 has an invalid length. [ 283.749558][T13586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 283.778780][T13586] : (slave netdevsim1): Enslaving as an active interface with an up link [ 283.790081][T13592] netlink: 'syz.1.1985': attribute type 10 has an invalid length. [ 284.269026][ T9427] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc7 [ 284.300475][T13623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.300499][T13623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.303316][T13623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.303337][T13623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.341808][T13623] : (slave batadv0): Releasing backup interface [ 284.362381][T13625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1993'. [ 284.362432][T13625] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 284.377745][T13629] netlink: 'syz.0.1995': attribute type 26 has an invalid length. [ 284.377766][T13629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1995'. [ 284.380526][T13630] netlink: 'syz.0.1995': attribute type 26 has an invalid length. [ 284.380545][T13630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1995'. [ 284.413572][T13625] tipc: Resetting bearer [ 284.544284][T13636] pim6reg: entered allmulticast mode [ 284.643191][T13642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1998'. [ 284.697679][T13645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1998'. [ 284.891572][T13654] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 284.932915][T13658] syzkaller1: entered promiscuous mode [ 284.932943][T13658] syzkaller1: entered allmulticast mode [ 287.114194][T13616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.312893][T13678] IPv6: NLM_F_CREATE should be specified when creating new route [ 287.450049][T13691] __nla_validate_parse: 3 callbacks suppressed [ 287.450317][T13691] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2009'. [ 287.668040][T13700] IPv6: sit3: Disabled Multicast RS [ 287.676789][T13700] sit3: entered allmulticast mode [ 287.866291][T13716] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2017'. [ 288.002890][T13718] netlink: 'syz.3.2018': attribute type 11 has an invalid length. [ 288.003381][T13718] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2018'. [ 288.005853][T13718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2018'. [ 288.060774][ T9427] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc7 [ 288.227047][T13741] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 288.287140][T13741] team0: Port device xfrm0 added [ 290.970796][T13722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 291.225881][T13768] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2033'. [ 291.237513][T13768] 0·: renamed from hsr0 (while UP) [ 291.349085][T13774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2036'. [ 291.562394][T13768] 0·: entered allmulticast mode [ 291.571042][T13768] hsr_slave_0: entered allmulticast mode [ 291.592535][T13768] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 291.998682][ T9423] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc7 [ 294.892992][T13805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.133011][T13875] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2050'. [ 295.301642][T13881] h: entered promiscuous mode [ 295.433918][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 295.467598][T13889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2058'. [ 296.111652][T13922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2070'. [ 296.293450][T13936] ip_tables: iptables: counters copy to user failed while replacing table [ 296.370648][T13941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2075'. [ 296.387486][T13941] Cannot find del_set index 3 as target [ 296.546264][ T1987] block nbd0: Possible stuck request ffff8880267ee000: control (read@0,1024B). Runtime 150 seconds [ 296.546315][ T1987] block nbd0: Possible stuck request ffff8880267ee1c0: control (read@1024,1024B). Runtime 150 seconds [ 296.562347][ T1987] block nbd0: Possible stuck request ffff8880267ee380: control (read@2048,1024B). Runtime 150 seconds [ 296.562379][ T1987] block nbd0: Possible stuck request ffff8880267ee540: control (read@3072,1024B). Runtime 150 seconds [ 296.654756][T13954] netlink: 'syz.4.2079': attribute type 5 has an invalid length. [ 296.693365][T13968] netlink: 'syz.4.2079': attribute type 5 has an invalid length. [ 297.093314][T13985] veth9: entered promiscuous mode [ 297.340421][T14009] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2086'. [ 297.344188][T14008] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 297.344224][T14008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.352764][T14015] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2086'. [ 297.538571][T14008] bond10: option resend_igmp: invalid value (32767) [ 297.547934][T14008] bond10: option resend_igmp: allowed values 0 - 255 [ 297.558800][T14008] bond10 (unregistering): Released all slaves [ 297.695778][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2089'. [ 297.706575][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2089'. [ 297.947258][T14038] netlink: 'syz.4.2092': attribute type 3 has an invalid length. [ 297.947300][T14038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2092'. [ 298.936193][T14095] x_tables: duplicate underflow at hook 2 [ 299.023778][T14095] bond6: Unable to set up delay as MII monitoring is disabled [ 299.234599][T14095] bond6 (unregistering): Released all slaves [ 299.453523][T14100] ------------[ cut here ]------------ [ 29 ** replaying previous printk message ** [ 299.453554][T14100] UBSAN: array-index-out-of-bounds in kernel/bpf/disasm.c:306:6 [ 299.453586][T14100] index 3 is out of range for type 'const char *const[3]' [ 299.453609][T14100] CPU: 1 UID: 0 PID: 14100 Comm: syz.0.2108 Not tainted syzkaller #0 PREEMPT(full) [ 299.453629][T14100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.453644][T14100] Call Trace: [ 299.453652][T14100] [ 299.453659][T14100] dump_stack_lvl+0xe8/0x150 [ 299.453690][T14100] ubsan_epilogue+0xa/0x30 [ 299.453708][T14100] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 299.453747][T14100] print_bpf_insn+0x21f1/0x2910 [ 299.453771][T14100] ? __pfx_disasm_print+0x10/0x10 [ 299.453800][T14100] ? __pfx_print_bpf_insn+0x10/0x10 [ 299.453831][T14100] ? _copy_to_user+0x8a/0xb0 [ 299.453852][T14100] ? bpf_verifier_vlog+0x6db/0x900 [ 299.453887][T14100] diag_print_insn_context+0x433/0xd00 [ 299.453925][T14100] ? __pfx_diag_print_insn_context+0x10/0x10 [ 299.453954][T14100] ? __pfx_diag_write+0x10/0x10 [ 299.453977][T14100] ? __pfx_disasm_print+0x10/0x10 [ 299.454000][T14100] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 299.454028][T14100] ? diag_print_wrapped_prefixed+0x207/0x240 [ 299.454058][T14100] bpf_diag_source+0x639/0x18d0 [ 299.454096][T14100] ? _copy_to_user+0x8a/0xb0 [ 299.454116][T14100] ? bpf_verifier_vlog+0x58d/0x900 [ 299.454144][T14100] ? __pfx_bpf_diag_source+0x10/0x10 [ 299.454182][T14100] ? __pfx_diag_write+0x10/0x10 [ 299.454210][T14100] ? kfree+0x1c5/0x650 [ 299.454233][T14100] ? bpf_diag_program_structure+0x28a/0x430 [ 299.454261][T14100] bpf_diag_program_structure+0x31c/0x430 [ 299.454289][T14100] ? verbose+0x11d/0x1a0 [ 299.454316][T14100] ? __pfx_bpf_diag_program_structure+0x10/0x10 [ 299.454341][T14100] ? bpf_prepare_btf_info+0x639/0x1200 [ 299.454360][T14100] ? rcu_is_watching+0x16/0xb0 [ 299.454388][T14100] check_subprogs+0x66b/0x740 [ 299.454419][T14100] bpf_check+0x17ba/0x2e10 [ 299.454449][T14100] ? ktime_get_with_offset+0x93/0x2d0 [ 299.454472][T14100] ? __pfx_bpf_check+0x10/0x10 [ 299.454494][T14100] ? bpf_obj_name_cpy+0x194/0x1e0 [ 299.454523][T14100] bpf_prog_load+0x14d6/0x1c20 [ 299.454555][T14100] ? __pfx_bpf_prog_load+0x10/0x10 [ 299.454599][T14100] __sys_bpf+0xd0d/0xd90 [ 299.454623][T14100] ? __pfx___sys_bpf+0x10/0x10 [ 299.454643][T14100] ? do_futex+0x3e7/0x4e0 [ 299.454685][T14100] ? rcu_is_watching+0x16/0xb0 [ 299.454711][T14100] __x64_sys_bpf+0xba/0xd0 [ 299.454739][T14100] do_syscall_64+0x166/0x520 [ 299.454764][T14100] ? trace_irq_disable+0x3b/0x140 [ 299.454779][T14100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.454797][T14100] ? clear_bhb_loop+0x70/0xc0 [ 299.454815][T14100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.454830][T14100] RIP: 0033:0x7f16cc39e159 [ 299.454845][T14100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.454861][T14100] RSP: 002b:00007f16cd319028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 299.454880][T14100] RAX: ffffffffffffffda RBX: 00007f16cc626090 RCX: 00007f16cc39e159 [ 299.454893][T14100] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 299.454904][T14100] RBP: 00007f16cc43503b R08: 0000000000000000 R09: 0000000000000000 [ 299.454916][T14100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.454926][T14100] R13: 00007f16cc626128 R14: 00007f16cc626090 R15: 00007ffd00f9fd78 [ 299.454954][T14100] [ 299.460326][T14100] ---[ end trace ]--- [ 299.460339][T14100] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 299.806262][T14100] CPU: 1 UID: 0 PID: 14100 Comm: syz.0.2108 Not tainted syzkaller #0 PREEMPT(full) [ 299.815611][T14100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.825656][T14100] Call Trace: [ 299.828942][T14100] [ 299.831878][T14100] vpanic+0x56d/0xa60 [ 299.835884][T14100] ? __pfx_vpanic+0x10/0x10 [ 299.840399][T14100] ? irqentry_exit+0x218/0x910 [ 299.845170][T14100] panic+0xc5/0xd0 [ 299.848908][T14100] ? __pfx_panic+0x10/0x10 [ 299.853325][T14100] ? __pfx__printk+0x10/0x10 [ 299.857912][T14100] check_panic_on_warn+0x89/0xb0 [ 299.862844][T14100] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 299.868561][T14100] print_bpf_insn+0x21f1/0x2910 [ 299.873410][T14100] ? __pfx_disasm_print+0x10/0x10 [ 299.878434][T14100] ? __pfx_print_bpf_insn+0x10/0x10 [ 299.883640][T14100] ? _copy_to_user+0x8a/0xb0 [ 299.888230][T14100] ? bpf_verifier_vlog+0x6db/0x900 [ 299.893354][T14100] diag_print_insn_context+0x433/0xd00 [ 299.898818][T14100] ? __pfx_diag_print_insn_context+0x10/0x10 [ 299.904805][T14100] ? __pfx_diag_write+0x10/0x10 [ 299.909654][T14100] ? __pfx_disasm_print+0x10/0x10 [ 299.914849][T14100] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 299.920310][T14100] ? diag_print_wrapped_prefixed+0x207/0x240 [ 299.926295][T14100] bpf_diag_source+0x639/0x18d0 [ 299.931154][T14100] ? _copy_to_user+0x8a/0xb0 [ 299.935736][T14100] ? bpf_verifier_vlog+0x58d/0x900 [ 299.940853][T14100] ? __pfx_bpf_diag_source+0x10/0x10 [ 299.946149][T14100] ? __pfx_diag_write+0x10/0x10 [ 299.950999][T14100] ? kfree+0x1c5/0x650 [ 299.955066][T14100] ? bpf_diag_program_structure+0x28a/0x430 [ 299.960967][T14100] bpf_diag_program_structure+0x31c/0x430 [ 299.966689][T14100] ? verbose+0x11d/0x1a0 [ 299.970929][T14100] ? __pfx_bpf_diag_program_structure+0x10/0x10 [ 299.977162][T14100] ? bpf_prepare_btf_info+0x639/0x1200 [ 299.982614][T14100] ? rcu_is_watching+0x16/0xb0 [ 299.987378][T14100] check_subprogs+0x66b/0x740 [ 299.992053][T14100] bpf_check+0x17ba/0x2e10 [ 299.996464][T14100] ? ktime_get_with_offset+0x93/0x2d0 [ 300.001830][T14100] ? __pfx_bpf_check+0x10/0x10 [ 300.006589][T14100] ? bpf_obj_name_cpy+0x194/0x1e0 [ 300.011607][T14100] bpf_prog_load+0x14d6/0x1c20 [ 300.016369][T14100] ? __pfx_bpf_prog_load+0x10/0x10 [ 300.021489][T14100] __sys_bpf+0xd0d/0xd90 [ 300.025732][T14100] ? __pfx___sys_bpf+0x10/0x10 [ 300.030485][T14100] ? do_futex+0x3e7/0x4e0 [ 300.034830][T14100] ? rcu_is_watching+0x16/0xb0 [ 300.039587][T14100] __x64_sys_bpf+0xba/0xd0 [ 300.043991][T14100] do_syscall_64+0x166/0x520 [ 300.048574][T14100] ? trace_irq_disable+0x3b/0x140 [ 300.053584][T14100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.059637][T14100] ? clear_bhb_loop+0x70/0xc0 [ 300.064303][T14100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.070206][T14100] RIP: 0033:0x7f16cc39e159 [ 300.074625][T14100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.094229][T14100] RSP: 002b:00007f16cd319028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 300.102637][T14100] RAX: ffffffffffffffda RBX: 00007f16cc626090 RCX: 00007f16cc39e159 [ 300.110601][T14100] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 300.118566][T14100] RBP: 00007f16cc43503b R08: 0000000000000000 R09: 0000000000000000 [ 300.126527][T14100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.134487][T14100] R13: 00007f16cc626128 R14: 00007f16cc626090 R15: 00007ffd00f9fd78 [ 300.142465][T14100] [ 300.145791][T14100] Kernel Offset: disabled [ 300.150107][T14100] Rebooting in 86400 seconds..