last executing test programs: 9.853718915s ago: executing program 3 (id=2882): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e12080016", 0x2b}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f00000000c0)="510003000000", 0x6) 9.746129656s ago: executing program 3 (id=2885): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') pipe(&(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215e8000) socket(0x2, 0x3, 0xff) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1a}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)='r', 0x1}], 0x1, 0x0, 0x0, 0x30000}, 0x0) 8.947835475s ago: executing program 3 (id=2896): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xdf8d, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) 8.822611734s ago: executing program 3 (id=2900): unshare(0x600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x1100, 0x1000000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @private=0x2}}}}) 3.557338445s ago: executing program 2 (id=2977): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x18}, 0x48010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef8cd8d80001400000010000100000000000000dfff0000000a"], 0xe8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r3, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001b00)={0x34, r5, 0x1, 0x1000000, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x34}}, 0x20004000) socketpair(0x8979d398cbba0db7, 0x2, 0xb6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}]}}]}]}]}}]}, 0x78}}, 0x2008c014) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xffffffffffffffa2, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xfffa, 0x2}, {}, {0x1c, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_DST={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x24004000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000008c0)={'erspan0\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x7, 0x8, 0x10, 0x6, {{0x1f, 0x4, 0x2, 0x3, 0x7c, 0x68, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x95, 0x3, 0x0, [{@private=0xa010100, 0x7}, {@loopback, 0x563}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @timestamp_addr={0x44, 0xc, 0xf1, 0x1, 0x9, [{@broadcast, 0x8}]}, @end, @timestamp_addr={0x44, 0x24, 0x58, 0x1, 0x7, [{@empty, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x7}, {@multicast2, 0x7}, {@private=0xa010102, 0x10001}]}, @timestamp={0x44, 0x18, 0xd8, 0x0, 0xc, [0x5, 0x2, 0x4, 0x6, 0x4]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000009c0)={'syztnl0\x00', &(0x7f0000000940)={'syztnl1\x00', 0x0, 0x2f, 0x10, 0x4, 0x0, 0x48, @local, @empty, 0x8000, 0x1, 0x2}}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r15) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r15, &(0x7f0000000200)={0x0, 0x40000, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r16, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r17}]}, 0x1c}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000a00)={@initdev, 0x0}, &(0x7f0000000a40)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a80)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000001480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001440)={&(0x7f0000000ac0)={0x968, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0x1, 0x6, 0x6}, {0xc, 0xa, 0xfe}, {0x0, 0x7, 0xf0, 0x5}, {0x3, 0x5, 0x0, 0xfffffff5}, {0x4, 0xf9, 0x39, 0x7}, {0x9, 0xe7, 0x69, 0x3}, {0x2, 0x5, 0xff, 0x800}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x6c, 0x4, 0xd}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x795}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x2, 0x5, 0x29}, {0x3, 0x40, 0x9, 0xe4}, {0xfff0, 0xff, 0x25, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x10, 0x10, 0x0, 0x7}, {0xb38, 0x1, 0x80, 0xb}]}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x56}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x854}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r9}, {0x10c, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x6, 0x16, 0xffff}, {0x7, 0xe, 0x10, 0xb}, {0x7, 0x9, 0xaf, 0x3}, {0x9, 0x2, 0x4, 0x100}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff1}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbaf}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x81, 0xab, 0x9bd}, {0x0, 0xe9, 0x2, 0x1ff}, {0xff6, 0x7, 0xc, 0xec}, {0x8, 0x4, 0x7, 0x9}, {0x9, 0x1, 0x1, 0xd}, {0x7, 0x10, 0x5, 0x7fffffff}, {0x8, 0x1, 0x4, 0x6}]}}}]}}, {{0x8, 0x1, r13}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9e1d}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x968}, 0x1, 0x0, 0x0, 0x4008008}, 0x4008000) 3.33953012s ago: executing program 0 (id=2981): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r5, r7, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x1}}, 0x30) syz_emit_ethernet(0x7a, &(0x7f0000001900)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0xb, 0x6, "6575d5", 0x44, 0x2f, 0x1, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x8, 0x1, 0x9, 0x2, 0x1, 0x1, 0x7, 0x5}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0xe, 0x2, 0x4, 0x2, 0x0, 0x0, 0x5, 0x6}, 0x2, {0x7, 0xe, 0x1, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, r10, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100feffffff0000000001"], 0x114}], 0x1}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) 3.30363156s ago: executing program 1 (id=2982): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd27, 0xfffffffd, {0x2, 0x10, 0x20, 0x4, 0x0, 0x0, 0xfe, 0x1, 0x3200}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1e}}]}, 0x24}}, 0x4000000) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000002040)=0xe5, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ip6erspan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xfa, 0xb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0x0) 3.302041994s ago: executing program 2 (id=2983): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x5, 0x400, 0x9, 0x81, 0x101, 0x86a4, 0xc40, 0x7fffffff, 0xfffffffd, 0x1, 0xb, 0x16, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f00070100000000fcdbdf25047c0000040000000c00018008000f"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f00070100000000fcdbdf25047c0000040000000c00018008000f"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113c00000000008510e65002000000850000007600000095005122000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r7, 0xf81, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r7, 0xf81, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r8, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r8, 0x0, 0xc, 0xe0, &(0x7f0000000100)="c168d24298e580790f866e1d", &(0x7f0000000500)=""/224, 0x0, 0x0, 0x74, 0x42, &(0x7f0000000240)="639f7f8760da45ff119f6139c907b22256576a746f52dfeeb090579eaa1c059d95d15a2ef65336893a1732cdec7b846d40425d1b7dc094fe6fa38aee3e9930ebaed4de11c554ff7a4f1501ea0652704e333b9f3f4d17faee1129ed1045f28694b4603eeac47773624b6cd3a9100cc4f160ae8bd2", &(0x7f0000000600)="fe55648761f3e26efa67ce0935f6e3aa82c3cfeb55f36c3539d4482ddc7dd3d99797803e8f45dfb2398dd3ec9e9ec1a6a33be23229f9e1288fd7bc4d441dae101a78", 0x4, 0x0, 0x1}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r8, 0x0, 0xc, 0xe0, &(0x7f0000000100)="c168d24298e580790f866e1d", &(0x7f0000000500)=""/224, 0x0, 0x0, 0x74, 0x42, &(0x7f0000000240)="639f7f8760da45ff119f6139c907b22256576a746f52dfeeb090579eaa1c059d95d15a2ef65336893a1732cdec7b846d40425d1b7dc094fe6fa38aee3e9930ebaed4de11c554ff7a4f1501ea0652704e333b9f3f4d17faee1129ed1045f28694b4603eeac47773624b6cd3a9100cc4f160ae8bd2", &(0x7f0000000600)="fe55648761f3e26efa67ce0935f6e3aa82c3cfeb55f36c3539d4482ddc7dd3d99797803e8f45dfb2398dd3ec9e9ec1a6a33be23229f9e1288fd7bc4d441dae101a78", 0x4, 0x0, 0x1}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) 2.06246594s ago: executing program 1 (id=2984): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002e80)=ANY=[@ANYBLOB="200000000080000084800000020000000000", @ANYRES32=0x0], 0x20}, 0x851) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) 1.998594385s ago: executing program 2 (id=2985): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$kcm(0x29, 0x7, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) r4 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b40)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000a80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, &(0x7f0000000c40)=0xc) sendmmsg$unix(r3, &(0x7f0000000d00)=[{{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000008c0)="5f800d2487d144a3fd7744beed55755d2f6153bb9d322997ef07d163e142b6f4d17bbfdb9145ac91ce135256239ec8f995e7cdf97c796abb21749dce1ce922af2b7af658b755159d6dfa51f446ab70d5712a3b3f2375b5b157521ae8fb7d54a32b2e10475f9d2bf2282a4546da65e23f821433d7cfd040784619bd5137c64e2c973243e759765d5bd19e2bf606d375689fa0ee7da48ad7d452d43dc2e5804be4732a3092c105e121972a059aa533a67c60d2", 0xb2}, {&(0x7f0000000980)="f322e767121f1da92b9a0035042962f8791c0b5d07089cc4dd0512115a5526ad37cc8e6e0b1c86b38ced82cbd00d49612401a5951fa468", 0x37}, {&(0x7f00000009c0)="170573915fc75664e611939b2ca4cf24d1697ea38d665f51d3b393e48fde16306b09091de0cbf275ae666a", 0x2b}, {&(0x7f0000000a00)}], 0x4, &(0x7f0000000c80)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x20, 0x4044010}}], 0x1, 0x40c5) (async) sendmmsg$unix(r3, &(0x7f0000000d00)=[{{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000008c0)="5f800d2487d144a3fd7744beed55755d2f6153bb9d322997ef07d163e142b6f4d17bbfdb9145ac91ce135256239ec8f995e7cdf97c796abb21749dce1ce922af2b7af658b755159d6dfa51f446ab70d5712a3b3f2375b5b157521ae8fb7d54a32b2e10475f9d2bf2282a4546da65e23f821433d7cfd040784619bd5137c64e2c973243e759765d5bd19e2bf606d375689fa0ee7da48ad7d452d43dc2e5804be4732a3092c105e121972a059aa533a67c60d2", 0xb2}, {&(0x7f0000000980)="f322e767121f1da92b9a0035042962f8791c0b5d07089cc4dd0512115a5526ad37cc8e6e0b1c86b38ced82cbd00d49612401a5951fa468", 0x37}, {&(0x7f00000009c0)="170573915fc75664e611939b2ca4cf24d1697ea38d665f51d3b393e48fde16306b09091de0cbf275ae666a", 0x2b}, {&(0x7f0000000a00)}], 0x4, &(0x7f0000000c80)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x20, 0x4044010}}], 0x1, 0x40c5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r10) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private}, 0x2, 0x4, 0x2, 0x3}}, 0x2e) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r12, 0x80487436, &(0x7f0000000040)="d9b604") (async) ioctl$PPPIOCGL2TPSTATS(r12, 0x80487436, &(0x7f0000000040)="d9b604") ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20048884) (async) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20048884) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x44840) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) (async) r14 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r14) sendmsg$xdp(r14, &(0x7f00000007c0)={&(0x7f0000000000)={0x2c, 0x6, r13, 0xa}, 0x10, &(0x7f0000000700)=[{&(0x7f00000001c0)="eb7a5ba752e17cf719994e8e4177df5fa81a645d837c755201d2c4f508568f200a8e55e6489c4590395d14779425143dc078a5bed113bace729a1797aa77651048c396d63fe17b9e0416c17348", 0x4d}, {&(0x7f00000000c0)="f26070c3056f08d62a37ea1bf8191878f664d920dfbceffa49949ea90ec4cd75ec24b6f749301271d2305aa69d1014", 0x2f}, {&(0x7f00000002c0)="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", 0xfb}, {&(0x7f0000000240)="3a6ec6b1c72dea820029c0c76e56628e5e7c04e633c1b8b0a9c6ae476d84b0871d", 0x21}, {&(0x7f00000003c0)="08aeb447227806fdb7160aa4005aa0513760782662d093cc3c87890d4af12fbe656379550241abb37623715e6cbd32ab709abd2cb69a66c887559da2ee926b0e2eede6c7132328806ffa12f9484da8bf517c31311406dff8093855737a7ba5bfb59e9ba76e63107020091e029538662948771a419ee16801f4958d069dc485165dd082bdf136b33388f9316fa1d268177411d61d8fe439d20d3c0a59cd7b6cfaed67d6b552269d34fcfa7baf969e0047abf81d53f05c32717dd33cab5f21fcc7a3", 0xc1}, {&(0x7f0000000580)="48a182814ed23ddfb4aae83326f9144abf85429f5f03daee7b69017068047c8daf9b36b1e6dbcf0e9adf2c98c582fc5c1c17c06a3ed366aa51f55343c7ae5fbdc66a39f66a63b4a2e78d7c5f301084de7e0c94ff17cf8e0008d97a7f0d265ac1ba0179a2900afd763200e978ee77d44c855ce848c48a22ed5a64f939736b12265bdc3567", 0x84}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f00000004c0)="09945214a5d348b6fdd05e486d24aac791c9f397d0578baa87ecc157aa9dd2a66aa46ac36c804db94f5466d92279f5f844621852ae3ba6813ea7ea592c241c85d688bd2f0f93689ade728e8af108acdd5bf77a1febb41b0d92f4d92e0b7468", 0x5f}, {&(0x7f0000000640)="49e761e3585f802e665b2b434e6c06f40276cadac75a347a082ccc8a49806dd44598f741345dddb360ab0a31a0198bed0ed7a55bfc9a0d3626ae35c583a8fac198e73276d14aecb1511aded9043829807e035e97ad5e7df2aa5626905849d5d214dccf4c1fcea2c6d1b95c688463f41a3b3e1f2956c92eba8354c0d2e7a09b04520bf295a0d4ac844a0fe78fbf3739acef63fa78dbcdb3f5c8c2", 0x9a}], 0xa, 0x0, 0x0, 0x8005}, 0x24045084) 1.970461337s ago: executing program 1 (id=2986): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffcb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "1f8271b57326d2cd06c77f7141082f8bc18164a8cde63d55c42552f43f2cb0126f46de26c849626f8f1e92ec1693d6580135c73acfe420c078830b68732dd35588582d1623a87e1c705a6260fccb8a9723b1299a305b1fe6d1858aad80f29d43bc45d44ee93b8a1cd5a2f7bd1c8d4711330bd8e17da2ca0f428712c1f913fd0526a82497ee4888b2695491dabe3af483ec6c939b9ab1893cada806b245f320eeb8005c6a6b520e65a4449408ae841b548e6e309f3b9ad5fbd764d7338052495f89a82be087b692eb11f5b9153d0a3f22b5586c2078662e25d9ab57d339904f6e824fc2b705ac50cde174f48bb04e934ea306e91be9343d09e05192691250e303"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$can_bcm(r0, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000220a01"], 0xc8}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be34c6e17aa310769876c1d0000007ea60864160af36514001ac004000202080002000600010076e6f06cea2618c3ecb525c89c32f292b156a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}, {&(0x7f0000000000)="84f9341fea02e0f6b1cd5759af7232efb48c89b8b9ce7f8063438ef19d", 0x1d}, {&(0x7f0000000100)="94e873226e69afd6d9585cea8ee88ffa86beb1a502cdc7758c7d3a7accddadbafc190815525dc95387d3ad3626109cc0c9580ba565776db0524c820ed7376fefcd7b349efc79bcc16d8a7b259edae225a0b00d810e045341b5e6beae8dd258861ca341a4", 0x64}, {&(0x7f0000000180)="a922152e2d763f26e9e9511f4ec072545f330240cc3d87758afe3d449a3dec4dd0568a1dff9c701bb3316f43a4eded53be27b7c0b4e02bc32737935ab018fb096984ebb3b064bac7", 0x48}, {&(0x7f0000000200)="9f702b519351b7b4c7e0757e4e5550e627b16787bf2941d8a5c0dfbf8bd82f3ebeed1aa9d2bdcd698787868ee9db495d5e4bffa846bf0a0311dd0d23d01f38d5f14baa15aaf5877f8a688e78b826705f678416731cbd95e4157f8384fe2fdf5c2b0e4b7e1541e9e760494cc7b6996f7da0014c6a2bb29e0abb4d77aeb8dd5dfd043792c9c74d787a54fa65b238386509bc58bc4810af0ab4f44cc90c821f339e939427cfba88540c0cda81200fa634704544903c68bf34ebce6cb4b8649e", 0xbe}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340), 0x10) 1.887845317s ago: executing program 0 (id=2988): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xfffffffffffffff9) (async) listen(r0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x0) socket(0x2c, 0x3, 0x2) 1.833814016s ago: executing program 0 (id=2989): r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000080)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20}, 0x94) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) (async, rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="71190990e66b19240b7c80cbf165ab0887f10cb435a1bdaa63730881df8317e43525df98dcb772ce28831fd2ea3f360e9c2392fa60a64a48854c4ee32b73a6cd4aea6f51b52ec1d201f46f823033400b877a4f41b3ed8b023ea0319615621c1c5698dd27d1390c381a93165b70283cb526e0049d513f06207258e23250d1c35e6888f62c37518ad6b552e84005fdd019fe455b8aed2b3d", @ANYRES16=r5, @ANYBLOB="01002dbd7000fbdbdf25100000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000000000006001100ff7f000008001300ff0300000500140000000000"], 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x804) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000568000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a300000000014000000110001"], 0xf0}}, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000600)="ad56b6c5820fae9d6dcd3292ea54c7be857600004c90c200d63d8da40fa5e94dab", 0x21) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0x0, 0xfff2}}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) (async) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r9, 0x8) (async) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f00000000c0), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r10, &(0x7f00000002c0)={&(0x7f0000000240)={0x1d, r11}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001000000010000557b"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x40}, 0x8) (async) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r8, &(0x7f0000008580)={0x10000000}) 1.712633556s ago: executing program 1 (id=2990): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300090468fe070000000000000eac3736000000480100100000000004002b000a00010014a4ee1ee438d2fd00000000000000720896bba4b0ac43109cd34e9d7dc51dcf26960026404e7a5ef4b249cab8526efda284634ae585a109c012c40676d7d60ebd142af34706d1166b6e66b47ad55be0ed6b1a6f8ee46ad14ab46c", 0x83}, {0x0}, {0x0}], 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003001d0020"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf0905"], 0x428}}, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x40000103, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.708235199s ago: executing program 4 (id=2991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x1, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x58, r2, 0x1, 0x3, 0x3, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000084) 1.519093499s ago: executing program 4 (id=2992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000000000000000100000a7038577bf8b07bb8015fbdca3fefed44000000090a010400000000000000000a0000040900020033797a3100e95e761b8ff591c7fffffc0900010073797a315eb3000008000540dd2bd993f6d928c2e0f8f518e28098bb0000000b2c00128014000180090001006c6173740000000004000280140001800c000100636f756e74657200040002800800034000000130140000001100010000000000000000000100000af704ead5aa3c5c04a199b79b3eb00d5aeafcb9b17b6a0747ab94f4292ffa02c1e9e09d4c0c14bc88daf6a62f0af0a43aa72e74fe84007c7fe6065c0d2c233ba2b6865513"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket(0x1a, 0x80000, 0x7) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0xa1, 0x7f, 0x5, 0x50, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x5, 0xfff}}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 1.477609609s ago: executing program 2 (id=2993): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000e94d3112001b000000000010001a800c000a800500080004000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = epoll_create1(0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40000000}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4400020}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0xa, 0xa, 0x1, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000880) setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet6(r3, &(0x7f0000000180), 0x0, 0x64000040) socket$inet6(0xa, 0x1, 0x3) 1.472474811s ago: executing program 0 (id=2994): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x60046, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r2, @ANYBLOB="08001b00000000003a0155759db3cdc5fd6b79a6644c03bb396b62cde7ae855e5c7d0626334323e48a6b0ce4f149b2c2953af0dab56bcacc3f5c43845da77f1401cad303779f41871ac68417fabda582770f0ecfbc61d3cec91faba11f052ecdae86257ae191f4691218d835bdd2924ec31a4201afd7dbf6a90bcddcccdbeef614bd606224afbfb7709284d9274ae66df8c13080f8f2067baf5656f05cc50aaa1cf9920b823f3d89f7c612da46a47c70f2d82e71"], 0x30}}, 0x0) 1.406281162s ago: executing program 4 (id=2995): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRESHEX=r2, @ANYBLOB="d09fe631d9b7c9dff9f06510571c9c66e96e1a1a3b3c875ea2bd2469b5a7d17114410451c4e75753ecba78fc23317da304a56a4cd4fe0095e4f3d9a6a549d5d670f0311ac8a6ef8ed56efeece95ff9fa0ef5b09b181e2e1a261970f9f89e4b313bca"], 0x3c}, 0x1, 0x0, 0x0, 0x4004845}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xfdef) 1.069702284s ago: executing program 2 (id=2996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a090400000000000000000500ffff140000001100010000000000000000000000000ac5fda01cc4"], 0x3c}}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(r1, 0x5460, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=0xffffffffffffffff], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x60, 0x30, 0x3, 0x0, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000340)='nv', 0x2) socket$netlink(0x10, 0x3, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000014c0)={0x14, 0x1, 0x3, 0x103}, 0x14}}, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r9, 0x112, 0xb, &(0x7f0000000580)=0x63, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES16=r0, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58}, 0x57) 1.041691204s ago: executing program 0 (id=2997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xc8, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000800}, 0x400c050) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x16, r2, 0x105, 0x1, 0xa, {{}, {@val={0x8, 0x3, r3}, @val={0x0, 0x99, {0x3, 0x48}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac0e, 0xfac03, 0xfac05]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) 1.003032047s ago: executing program 4 (id=2998): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000008f18d585fea1af16b8403cf15f0000000000000000ed"], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0xa00, &(0x7f0000000d40)={&(0x7f0000000c80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000a4000000000060100800008e73b00ac1e0001080007006401010105000100000000000800020005000000"], 0x34}, 0x1, 0x2000000}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) socketpair(0x2, 0xa, 0x4, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000000c0)={0x1, 0x1, 0x7}) ioctl$sock_netdev_private(r3, 0x8924, &(0x7f0000000000)) r6 = socket(0x11, 0x2, 0x10001) sendto(r6, 0x0, 0x0, 0x50, &(0x7f0000000180)=@qipcrtr={0x2a, 0x5, 0xfffffffe}, 0x80) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r7, 0x0, 0x1, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) 834.831569ms ago: executing program 4 (id=2999): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'syz_tun\x00', 0x0}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0xe, 0x4) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) (async) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) clock_gettime(0xa, 0x0) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$nci(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xc) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8607, 0x0, 0x0, 0x5}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x16, 0xa01, 0x0, 0x0, {0x1f}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}}, 0x8000) (async) getsockopt$rose(r4, 0x104, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001220aac3782eaa531000370400"/28, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c000280060002004f080000"], 0x3c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) (async) r5 = socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket(0x6, 0x803, 0x7) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x437, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, 0x5394b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1ff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x24000010) (async) unshare(0x20000400) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0x90000002}) (async) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) 833.931865ms ago: executing program 0 (id=3000): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300a7da1d991a9fbc6e22c170903f3c62bcc3b5b6ee67a96dcf36a2e9a1f1193125ad09438a0160227ee7b5ec25ed2baac27a6b8bb63493a1cc26c25d936c9c1a22b402aeb0f1476acb2b5913e362617e977107578d8dd074f08685c261812f2b06dbdcba21ab9851ad598d34e67c53831722480530be7988b0d76a0b8b3900908adb59f9f96662c015f80623332612d694f44179af16431924b58958b927485088b2f673244985e7a32d06c6de7ac841", @ANYRES32=r1, @ANYBLOB="1c005e8005004d08000008000606000000009950abc3cda0cb8d0000"], 0x38}}, 0x4000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2a, 0x200000, {0x0, 0x0, 0x0, r6, {0xfff3, 0x9}, {0xffe0, 0xc}, {0x7, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x48800) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f00000004c0), 0x0, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000002c0)={r7, 0x333, 0x3, 0x3}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="01002abd7000fcdbdf253d00000008000300", @ANYRES32=r15, @ANYBLOB="393ba44206c3889984e6f11270277c6da2e7598ecd2296d7fc10faa5114081071c1f6fb83026f9575d1cf6fe5523c34bf85c0b2ebda04e86ca92fff0c88757966ed2d019aefa1f0c01b81cde654555b89ff7df215659f59129e59e04e909a24f6a056474573112f803eca84a523890d696ca490b54246dcc83b4fb0b74"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f0000000300)=0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000340)={r16, 0x7f, 0x5, 0x82, 0xd, 0x5}, 0x14) r17 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f00baac258ae6be37edbe57aa23a7bbe4baaa67b33ced3bbfa7d83cd8c1b00bd8b2312c4dba10dfef09a2381010c59608f83294533870c07f636031983e6f9cf14011f92d66fa64281a26b481abca7e6e6d0af995a10ab76f090f91a7e6ff22"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYRES16=r5, @ANYRES8=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008520000003000000182b0000", @ANYRES8=r9, @ANYBLOB="00000000810000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', r6, 0x0, r17, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000000040)='nicvf0\x00') 820.043877ms ago: executing program 3 (id=2903): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000280)={0x0, 0x0, "261a92289d8867edcc45b73cca1dc65c"}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000003c0)={0x6, {{0xa, 0x4e20, 0x3, @private2, 0x5}}}, 0x88) sendfile(r0, r0, 0x0, 0xabf) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000340)={{r0, &(0x7f0000000000)='(-%#%]-$\x00', 0x10400, &(0x7f0000000040)={@align=0xd6ed, {0x0, 0xf, 0x83f2, 0xfffffffffffffff8}}, 0x2bb, &(0x7f00000000c0), &(0x7f0000000100)=0x4}, 0x1, &(0x7f0000000240)=[{0x3, 0x1, &(0x7f0000000140)='$-(\x00', &(0x7f0000000180)="22adb51bef237579636804c6aed94272db510791a0d573eaa2f2b6e871343d5dac8e74677b4c849f2bd7cfe5802eedb989a0922d3875a9212d56e3d32e4c967e9e73cd70ddb623bf969ff0aa16da6aa174e27bbed8418500a57aaa6405bdcbbb8c5eda33a11c783f14a590ce3adf3db0bc23eea604bf358422d9caa9c03193f7121287416d1586a70975556d14c359b0a47d8dbb0d45f3150f097969d0e5fc51e83d72e8c65b", 0xa6, 0x10}]}) r2 = socket$kcm(0x10, 0x2, 0x0) epoll_create(0xfffffff7) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x52, &(0x7f0000000080)}, 0x44010) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), r0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000880)=ANY=[@ANYBLOB="b8000000190001002dbd700000000000fe880000000000000000000000000001fe8000000000000000000000000000aa00000000000000000a00003000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c000000000000000000000000000000000000000000000000000000a4f68dfd2a0642da883a1ce5b4ea15d6ad744492d0d5a00000ff000000000000000000000000000a000000000000feffffffff7f400002000000000000080000"], 0xb8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a3c000000030a010400000000000000000a0020050900010073797a310000000408000b40000000040a000700726f75746500000008000540fffffffc140000001100010000000000000000000100000a78fbe10a707ec03fd0ac14cc81bb84e096e08e79e4ba02751f1ae99b8efff479fcc4538941f3b90a32a7196b3a817fdd482fc1005f58d3d7cfa0893ef97958ef8118795c55f1472d13c9bdc7af2358329e535965a66629132e8b615b7ef31134e774baaa91c1c301a7b1753a7882e6a706ce0939b9"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x25dfdbfb, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x1, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0xa0, 0x2e}, 0x3}, [@migrate={0x50, 0x11, [{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x24, r3, 0x133, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000440), 0x10) listen(r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r9, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) 747.25204ms ago: executing program 1 (id=3001): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@deltaction={0x100, 0x31, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x51, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x101, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x21e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x206, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x28, &(0x7f0000000000)={@random="2b893c1caa3e", @random="caf66222e6aa", @val={@val={0x88a8, 0x2, 0x0, 0x1}, {0x8100, 0x3, 0x0, 0x3}}, {@llc_tr={0x11, {@snap={0xaa, 0xab, "a3", "d6d9cc", 0x884c, "45bb8c97ec23fa20ead1"}}}}}, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 697.763126ms ago: executing program 4 (id=3002): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r2, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x3c}, 0x1, 0x620b}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x70) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 64) r6 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$sock_linger(r6, 0x1, 0x3d, &(0x7f0000000240)={0x1, 0x2}, 0x8) sendmmsg$sock(r6, &(0x7f0000002c00)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x14, 0x1, 0x3d, 0x1000000000002}}], 0x14}}], 0x1, 0x8845) (async) recvmmsg(r4, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x4e55}], 0x1, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x2000c800) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r9 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) getpeername$packet(r4, &(0x7f0000000200), &(0x7f0000000380)=0x14) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x7, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 647.031598ms ago: executing program 3 (id=3003): r0 = socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r4, 0x0, 0x0) close(0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, "e4"}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) socket$inet6(0xa, 0x80808, 0xa3a8) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) sendmmsg$inet(r7, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}], 0x2}}], 0x1, 0x4000000) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) splice(r2, 0x0, r1, 0x0, 0x1100000000f336, 0x8) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$netlink(0x10, 0x3, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000200)={r3}) 564.251485ms ago: executing program 1 (id=3005): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r0, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = accept4$alg(r4, 0x0, 0x0, 0x800) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000300)=r0, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000100)=0x2000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ce000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) pwritev(r8, &(0x7f00000002c0)=[{&(0x7f0000000240)="00214717a7070000000003060000000000000000aaa6729043098c737d317c447bd55c0b041d5874f72cf86d73d3b92ef9d7", 0x32}], 0x1, 0x7, 0x58) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xa, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0xd0, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xa0, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x8c, 0x9, 0x0, 0x1, [@m_csum={0x88, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x2b}}]}, {0x40, 0x6, "e6661491eaf2f4d266c782a6317d7c3020207270b498120e36bfe719d6adf12cb7f330caca54293f411264e76546d302db66e7303d6b70b5a0102b46"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0xc804}, 0x2) setsockopt$CAIFSO_LINK_SELECT(r11, 0x116, 0x7f, &(0x7f0000000280)=0x3, 0x4) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) 0s ago: executing program 2 (id=3006): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r4, 0x4) close(r3) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4090, 0xffa}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) syz_80211_inject_frame(0x0, 0x0, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4) syz_80211_inject_frame(0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100), 0x8) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r4, 0x4) (async) close(r3) (async) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4090, 0xffa}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) (async) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) (async) syz_80211_inject_frame(0x0, 0x0, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4) (async) kernel console output (not intermixed with test programs): .697772][T10112] name failslab, interval 1, probability 0, space 0, times 0 [ 167.710615][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 167.770837][T10112] CPU: 0 UID: 0 PID: 10112 Comm: syz.2.1243 Not tainted syzkaller #0 PREEMPT(full) [ 167.770862][T10112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 167.770871][T10112] Call Trace: [ 167.770878][T10112] [ 167.770885][T10112] dump_stack_lvl+0xe8/0x150 [ 167.770915][T10112] should_fail_ex+0x412/0x560 [ 167.770940][T10112] should_failslab+0xa8/0x100 [ 167.770962][T10112] ? skb_clone+0x212/0x3a0 [ 167.770980][T10112] kmem_cache_alloc_noprof+0x87/0x650 [ 167.770998][T10112] ? __netlink_lookup+0xc6/0x8b0 [ 167.771029][T10112] skb_clone+0x212/0x3a0 [ 167.771057][T10112] __netlink_deliver_tap+0x404/0x850 [ 167.771090][T10112] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.771113][T10112] netlink_deliver_tap+0x19c/0x1b0 [ 167.771136][T10112] netlink_unicast+0x7e3/0x9b0 [ 167.771163][T10112] ? __pfx_netlink_unicast+0x10/0x10 [ 167.771185][T10112] ? netlink_sendmsg+0x650/0xb40 [ 167.771205][T10112] ? skb_put+0x11b/0x210 [ 167.771232][T10112] netlink_sendmsg+0x813/0xb40 [ 167.771261][T10112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.771287][T10112] ? aa_sock_msg_perm+0xf1/0x1b0 [ 167.771310][T10112] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.771332][T10112] ____sys_sendmsg+0x972/0x9f0 [ 167.771358][T10112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.771383][T10112] ? import_iovec+0x73/0xa0 [ 167.771409][T10112] ___sys_sendmsg+0x2a5/0x360 [ 167.771431][T10112] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.771480][T10112] ? __fget_files+0x2a/0x420 [ 167.771503][T10112] ? __fget_files+0x3a0/0x420 [ 167.771535][T10112] __x64_sys_sendmsg+0x1bd/0x2a0 [ 167.771556][T10112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.771582][T10112] ? __pfx_ksys_write+0x10/0x10 [ 167.771609][T10112] do_syscall_64+0x14d/0xf80 [ 167.771625][T10112] ? trace_irq_disable+0x3b/0x150 [ 167.771648][T10112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.771666][T10112] ? clear_bhb_loop+0x40/0x90 [ 167.771687][T10112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.771703][T10112] RIP: 0033:0x7f1d67f9c799 [ 167.771721][T10112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.771735][T10112] RSP: 002b:00007f1d68df3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.771754][T10112] RAX: ffffffffffffffda RBX: 00007f1d68216090 RCX: 00007f1d67f9c799 [ 167.771766][T10112] RDX: 0000000020000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 167.771777][T10112] RBP: 00007f1d68df3090 R08: 0000000000000000 R09: 0000000000000000 [ 167.771787][T10112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.771797][T10112] R13: 00007f1d68216128 R14: 00007f1d68216090 R15: 00007fff4bdd78f8 [ 167.771825][T10112] [ 168.061619][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1243'. [ 168.079310][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 168.109423][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1245'. [ 168.157496][T10123] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 168.393090][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1250'. [ 168.694151][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'. [ 168.893836][T10152] netlink: 'syz.0.1255': attribute type 3 has an invalid length. [ 168.917502][ T8062] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.009184][T10152] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1255'. [ 169.171512][ T8062] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.216788][ T8062] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.325073][ T8062] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.357364][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1259'. [ 169.381870][T10169] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 169.411318][T10167] FAULT_INJECTION: forcing a failure. [ 169.411318][T10167] name failslab, interval 1, probability 0, space 0, times 0 [ 169.440123][T10169] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 169.463297][T10167] CPU: 0 UID: 0 PID: 10167 Comm: syz.0.1259 Not tainted syzkaller #0 PREEMPT(full) [ 169.463321][T10167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 169.463331][T10167] Call Trace: [ 169.463338][T10167] [ 169.463345][T10167] dump_stack_lvl+0xe8/0x150 [ 169.463375][T10167] should_fail_ex+0x412/0x560 [ 169.463403][T10167] should_failslab+0xa8/0x100 [ 169.463427][T10167] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 169.463447][T10167] ? __alloc_skb+0x1d0/0x7d0 [ 169.463469][T10167] ? __local_bh_enable_ip+0xd0/0x130 [ 169.463496][T10167] __alloc_skb+0x1d0/0x7d0 [ 169.463519][T10167] ? netlink_ack_tlv_len+0x6c/0x210 [ 169.463541][T10167] netlink_ack+0x146/0xa50 [ 169.463557][T10167] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.463570][T10167] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 169.463585][T10167] ? __pfx_nl80211_post_doit+0x10/0x10 [ 169.463599][T10167] ? __lock_acquire+0x6b5/0x2cf0 [ 169.463625][T10167] netlink_rcv_skb+0x2b6/0x4b0 [ 169.463656][T10167] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.463672][T10167] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.463702][T10167] ? down_read+0x272/0x2e0 [ 169.463717][T10167] ? genl_rcv+0xd/0x40 [ 169.463731][T10167] genl_rcv+0x28/0x40 [ 169.463743][T10167] netlink_unicast+0x80f/0x9b0 [ 169.463766][T10167] ? __pfx_netlink_unicast+0x10/0x10 [ 169.463783][T10167] ? netlink_sendmsg+0x650/0xb40 [ 169.463800][T10167] ? skb_put+0x11b/0x210 [ 169.463829][T10167] netlink_sendmsg+0x813/0xb40 [ 169.463854][T10167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.463875][T10167] ? aa_sock_msg_perm+0xf1/0x1b0 [ 169.463894][T10167] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 169.463912][T10167] ____sys_sendmsg+0x972/0x9f0 [ 169.463933][T10167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.463954][T10167] ? import_iovec+0x73/0xa0 [ 169.463977][T10167] ___sys_sendmsg+0x2a5/0x360 [ 169.463995][T10167] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.464035][T10167] ? __fget_files+0x2a/0x420 [ 169.464054][T10167] ? __fget_files+0x3a0/0x420 [ 169.464081][T10167] __x64_sys_sendmsg+0x1bd/0x2a0 [ 169.464097][T10167] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.464118][T10167] ? __pfx_ksys_write+0x10/0x10 [ 169.464142][T10167] do_syscall_64+0x14d/0xf80 [ 169.464155][T10167] ? trace_irq_disable+0x3b/0x150 [ 169.464174][T10167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.464188][T10167] ? clear_bhb_loop+0x40/0x90 [ 169.464206][T10167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.464219][T10167] RIP: 0033:0x7f7a05b9c799 [ 169.464233][T10167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.464244][T10167] RSP: 002b:00007f7a03df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.464259][T10167] RAX: ffffffffffffffda RBX: 00007f7a05e15fa0 RCX: 00007f7a05b9c799 [ 169.464269][T10167] RDX: 0000000020000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 169.464278][T10167] RBP: 00007f7a03df6090 R08: 0000000000000000 R09: 0000000000000000 [ 169.464286][T10167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.464294][T10167] R13: 00007f7a05e16038 R14: 00007f7a05e15fa0 R15: 00007ffebf84d118 [ 169.464317][T10167] [ 170.257611][T10196] netlink: 'syz.4.1268': attribute type 1 has an invalid length. [ 170.311257][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'. [ 170.504209][T10196] bond2: entered promiscuous mode [ 170.532119][T10196] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.621182][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 170.893467][T10220] FAULT_INJECTION: forcing a failure. [ 170.893467][T10220] name failslab, interval 1, probability 0, space 0, times 0 [ 170.965451][T10220] CPU: 0 UID: 0 PID: 10220 Comm: syz.2.1273 Not tainted syzkaller #0 PREEMPT(full) [ 170.965475][T10220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.965485][T10220] Call Trace: [ 170.965492][T10220] [ 170.965499][T10220] dump_stack_lvl+0xe8/0x150 [ 170.965528][T10220] should_fail_ex+0x412/0x560 [ 170.965555][T10220] should_failslab+0xa8/0x100 [ 170.965578][T10220] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 170.965599][T10220] ? __alloc_skb+0x1d0/0x7d0 [ 170.965620][T10220] ? __local_bh_enable_ip+0xd0/0x130 [ 170.965645][T10220] __alloc_skb+0x1d0/0x7d0 [ 170.965668][T10220] ? netlink_ack_tlv_len+0x6c/0x210 [ 170.965696][T10220] netlink_ack+0x146/0xa50 [ 170.965716][T10220] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.965742][T10220] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 170.965760][T10220] ? __pfx_nl80211_post_doit+0x10/0x10 [ 170.965778][T10220] ? __lock_acquire+0x6b5/0x2cf0 [ 170.965808][T10220] netlink_rcv_skb+0x2b6/0x4b0 [ 170.965830][T10220] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.965849][T10220] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.965888][T10220] ? down_read+0x272/0x2e0 [ 170.965906][T10220] ? genl_rcv+0xd/0x40 [ 170.965923][T10220] genl_rcv+0x28/0x40 [ 170.965939][T10220] netlink_unicast+0x80f/0x9b0 [ 170.965967][T10220] ? __pfx_netlink_unicast+0x10/0x10 [ 170.965990][T10220] ? netlink_sendmsg+0x650/0xb40 [ 170.966011][T10220] ? skb_put+0x11b/0x210 [ 170.966038][T10220] netlink_sendmsg+0x813/0xb40 [ 170.966070][T10220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.966096][T10220] ? aa_sock_msg_perm+0xf1/0x1b0 [ 170.966121][T10220] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 170.966143][T10220] ____sys_sendmsg+0x972/0x9f0 [ 170.966169][T10220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.966195][T10220] ? import_iovec+0x73/0xa0 [ 170.966225][T10220] ___sys_sendmsg+0x2a5/0x360 [ 170.966247][T10220] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.966297][T10220] ? __fget_files+0x2a/0x420 [ 170.966320][T10220] ? __fget_files+0x3a0/0x420 [ 170.966352][T10220] __x64_sys_sendmsg+0x1bd/0x2a0 [ 170.966372][T10220] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.966397][T10220] ? __pfx_ksys_write+0x10/0x10 [ 170.966424][T10220] do_syscall_64+0x14d/0xf80 [ 170.966439][T10220] ? trace_irq_disable+0x3b/0x150 [ 170.966462][T10220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.966478][T10220] ? clear_bhb_loop+0x40/0x90 [ 170.966497][T10220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.966512][T10220] RIP: 0033:0x7f1d67f9c799 [ 170.966527][T10220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.966540][T10220] RSP: 002b:00007f1d68df3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.966558][T10220] RAX: ffffffffffffffda RBX: 00007f1d68216090 RCX: 00007f1d67f9c799 [ 170.966569][T10220] RDX: 0000000020000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 170.966580][T10220] RBP: 00007f1d68df3090 R08: 0000000000000000 R09: 0000000000000000 [ 170.966589][T10220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.966598][T10220] R13: 00007f1d68216128 R14: 00007f1d68216090 R15: 00007fff4bdd78f8 [ 170.966626][T10220] [ 171.603394][T10242] netlink: 'syz.2.1279': attribute type 1 has an invalid length. [ 171.611273][T10242] netlink: 'syz.2.1279': attribute type 4 has an invalid length. [ 172.335309][T10274] sctp: [Deprecated]: syz.3.1292 (pid 10274) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.335309][T10274] Use struct sctp_sack_info instead [ 172.524910][T10279] veth0: entered promiscuous mode [ 172.545676][T10279] __nla_validate_parse: 5 callbacks suppressed [ 172.545691][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1293'. [ 172.620966][T10279] veth0 (unregistering): left promiscuous mode [ 173.037925][T10319] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1303'. [ 173.111087][T10319] bond6 (unregistering): Released all slaves [ 173.146403][T10323] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1303'. [ 173.424889][T10341] openvswitch: netlink: Multiple metadata blocks provided [ 173.592795][T10351] netlink: 'syz.0.1310': attribute type 2 has an invalid length. [ 173.741632][T10353] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1314'. [ 173.886123][T10366] netlink: 'syz.2.1317': attribute type 9 has an invalid length. [ 173.894147][T10366] netlink: 'syz.2.1317': attribute type 11 has an invalid length. [ 173.924165][T10366] netlink: 'syz.2.1317': attribute type 12 has an invalid length. [ 173.992879][T10366] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.1317'. [ 174.049990][T10370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1317'. [ 174.090842][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1317'. [ 174.280793][T10380] tipc: Invalid UDP bearer configuration [ 174.280844][T10380] tipc: Enabling of bearer rejected, failed to enable media [ 174.381239][T10384] netlink: 'syz.4.1321': attribute type 29 has an invalid length. [ 174.421799][T10384] netlink: 'syz.4.1321': attribute type 29 has an invalid length. [ 174.537094][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1323'. [ 174.547689][T10391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.555522][T10391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.491730][T10416] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1330'. [ 177.576363][T10416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.730026][T10422] netlink: 'syz.1.1333': attribute type 13 has an invalid length. [ 177.895565][T10441] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.935712][T10442] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.962274][T10441] netlink: 'syz.0.1338': attribute type 1 has an invalid length. [ 178.080938][T10450] netlink: 'syz.4.1341': attribute type 21 has an invalid length. [ 178.296055][T10441] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 178.297921][T10450] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1341'. [ 178.513108][T10469] netlink: 'syz.0.1346': attribute type 10 has an invalid length. [ 178.573600][T10469] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 178.587173][T10469] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 178.752201][T10480] FAULT_INJECTION: forcing a failure. [ 178.752201][T10480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.787506][T10480] CPU: 0 UID: 0 PID: 10480 Comm: syz.3.1350 Not tainted syzkaller #0 PREEMPT(full) [ 178.787534][T10480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 178.787544][T10480] Call Trace: [ 178.787551][T10480] [ 178.787559][T10480] dump_stack_lvl+0xe8/0x150 [ 178.787587][T10480] should_fail_ex+0x412/0x560 [ 178.787614][T10480] _copy_from_iter+0x1d3/0x1670 [ 178.787640][T10480] ? rcu_is_watching+0x15/0xb0 [ 178.787666][T10480] ? __pfx__copy_from_iter+0x10/0x10 [ 178.787694][T10480] ? netlink_sendmsg+0x650/0xb40 [ 178.787716][T10480] ? skb_put+0x11b/0x210 [ 178.787742][T10480] netlink_sendmsg+0x6c0/0xb40 [ 178.787770][T10480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.787794][T10480] ? aa_sock_msg_perm+0xf1/0x1b0 [ 178.787817][T10480] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 178.787840][T10480] ____sys_sendmsg+0x972/0x9f0 [ 178.787862][T10480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.787885][T10480] ? import_iovec+0x73/0xa0 [ 178.787912][T10480] ___sys_sendmsg+0x2a5/0x360 [ 178.787933][T10480] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.787975][T10480] ? __fget_files+0x2a/0x420 [ 178.787996][T10480] ? __fget_files+0x3a0/0x420 [ 178.788025][T10480] __x64_sys_sendmsg+0x1bd/0x2a0 [ 178.788045][T10480] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 178.788070][T10480] ? __pfx_ksys_write+0x10/0x10 [ 178.788099][T10480] do_syscall_64+0x14d/0xf80 [ 178.788115][T10480] ? trace_irq_disable+0x3b/0x150 [ 178.788139][T10480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.788156][T10480] ? clear_bhb_loop+0x40/0x90 [ 178.788177][T10480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.788194][T10480] RIP: 0033:0x7effa519c799 [ 178.788218][T10480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.788232][T10480] RSP: 002b:00007effa6008028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.788251][T10480] RAX: ffffffffffffffda RBX: 00007effa5415fa0 RCX: 00007effa519c799 [ 178.788263][T10480] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 178.788274][T10480] RBP: 00007effa6008090 R08: 0000000000000000 R09: 0000000000000000 [ 178.788285][T10480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.788294][T10480] R13: 00007effa5416038 R14: 00007effa5415fa0 R15: 00007fff6a960258 [ 178.788322][T10480] [ 179.042833][T10483] TCP: TCP_TX_DELAY enabled [ 179.049257][T10483] netlink: 'syz.0.1351': attribute type 10 has an invalid length. [ 179.068141][T10483] batman_adv: batadv0: Adding interface: netdevsim0 [ 179.074782][T10483] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.100416][T10483] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 179.372796][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'. [ 179.418118][T10489] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1353'. [ 179.456344][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'. [ 179.536429][T10489] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1353'. [ 179.633175][T10489] syzkaller1: entered promiscuous mode [ 179.661120][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1361'. [ 179.661820][T10489] syzkaller1: entered allmulticast mode [ 179.699257][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1361'. [ 179.779953][T10517] netlink: 'syz.1.1359': attribute type 16 has an invalid length. [ 179.818890][T10517] netlink: 'syz.1.1359': attribute type 17 has an invalid length. [ 180.144415][T10517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.240941][T10528] syzkaller0: entered promiscuous mode [ 180.246460][T10528] syzkaller0: entered allmulticast mode [ 180.570553][T10549] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1373'. [ 180.593741][T10553] x_tables: unsorted underflow at hook 1 [ 180.624696][T10555] tipc: Can't bind to reserved service type 1 [ 180.651647][T10554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1375'. [ 180.883809][T10561] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1377'. [ 181.251219][T10584] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.385994][T10584] bond2: option xmit_hash_policy: invalid value (157) [ 181.410197][T10584] bond2 (unregistering): Released all slaves [ 181.544791][T10595] syzkaller1: entered promiscuous mode [ 181.632964][T10595] syzkaller1: entered allmulticast mode [ 181.955925][T10611] macsec1: entered promiscuous mode [ 182.210274][T10619] tipc: Started in network mode [ 182.215184][T10619] tipc: Node identity de9edf374bef, cluster identity 4711 [ 182.255482][T10619] tipc: Enabled bearer , priority 0 [ 182.343014][T10626] syzkaller0: entered promiscuous mode [ 182.349237][T10626] syzkaller0: entered allmulticast mode [ 182.355555][T10626] tipc: Resetting bearer [ 182.416286][T10618] tipc: Resetting bearer [ 183.857442][T10618] tipc: Disabling bearer [ 183.998169][ T10] tipc: Node number set to 2507267895 [ 184.184075][T10667] FAULT_INJECTION: forcing a failure. [ 184.184075][T10667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.200262][T10667] CPU: 0 UID: 0 PID: 10667 Comm: syz.0.1404 Not tainted syzkaller #0 PREEMPT(full) [ 184.200299][T10667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.200310][T10667] Call Trace: [ 184.200326][T10667] [ 184.200333][T10667] dump_stack_lvl+0xe8/0x150 [ 184.200362][T10667] should_fail_ex+0x412/0x560 [ 184.200389][T10667] _copy_from_user+0x2d/0xb0 [ 184.200416][T10667] kstrtouint_from_user+0xd6/0x180 [ 184.200441][T10667] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 184.200478][T10667] proc_fail_nth_write+0x8e/0x210 [ 184.200502][T10667] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 184.200532][T10667] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 184.200557][T10667] vfs_write+0x29a/0xb90 [ 184.200584][T10667] ? __pfx_vfs_write+0x10/0x10 [ 184.200604][T10667] ? __fget_files+0x2a/0x420 [ 184.200633][T10667] ? __fget_files+0x3a0/0x420 [ 184.200655][T10667] ? __fget_files+0x2a/0x420 [ 184.200688][T10667] ksys_write+0x150/0x270 [ 184.200709][T10667] ? __pfx_ksys_write+0x10/0x10 [ 184.200737][T10667] do_syscall_64+0x14d/0xf80 [ 184.200754][T10667] ? trace_irq_disable+0x3b/0x150 [ 184.200777][T10667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.200795][T10667] ? clear_bhb_loop+0x40/0x90 [ 184.200815][T10667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.200832][T10667] RIP: 0033:0x7f7a05b5cfce [ 184.200849][T10667] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.200863][T10667] RSP: 002b:00007f7a03dd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.200882][T10667] RAX: ffffffffffffffda RBX: 00007f7a03dd56c0 RCX: 00007f7a05b5cfce [ 184.200895][T10667] RDX: 0000000000000001 RSI: 00007f7a03dd50a0 RDI: 0000000000000005 [ 184.200905][T10667] RBP: 00007f7a03dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 184.200915][T10667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.200925][T10667] R13: 00007f7a05e16128 R14: 00007f7a05e16090 R15: 00007ffebf84d118 [ 184.200953][T10667] [ 185.176038][T10621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.359424][T10688] netlink: 'syz.0.1411': attribute type 14 has an invalid length. [ 185.446394][T10691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.754154][T10704] IPv6: sit1: Disabled Multicast RS [ 185.809319][T10704] __nla_validate_parse: 3 callbacks suppressed [ 185.809336][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1417'. [ 185.874393][T10714] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1419'. [ 188.684779][T10710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 188.917230][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1429'. [ 188.920607][T10761] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1428'. [ 189.191994][T10761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1428'. [ 189.355599][T10790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1435'. [ 189.389647][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1435'. [ 189.512805][ T8058] tipc: Subscription rejected, illegal request [ 189.821044][T10804] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1440'. [ 189.901185][T10804] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1440'. [ 189.952364][T10804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1440'. [ 190.098764][T10815] netlink: 'syz.3.1444': attribute type 64 has an invalid length. [ 190.207864][T10819] bridge_slave_1: left allmulticast mode [ 190.243074][T10819] bridge_slave_1: left promiscuous mode [ 190.272738][T10819] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.357003][T10819] bridge_slave_0: left allmulticast mode [ 190.371579][T10819] bridge_slave_0: left promiscuous mode [ 190.377436][T10819] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.000437][T10851] __nla_validate_parse: 3 callbacks suppressed [ 191.000455][T10851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1455'. [ 191.061989][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 191.068555][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 191.074578][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 191.079061][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 191.081426][T10857] netlink: 'syz.1.1455': attribute type 1 has an invalid length. [ 191.178660][T10857] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1455'. [ 191.188634][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'. [ 191.267677][T10864] C speed is unknown, defaulting to 1000 [ 191.956186][T10891] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1467'. [ 191.966946][T10892] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1467'. [ 192.144253][ T980] hid-generic 0005:04F5:5504.0001: collection stack underflow [ 192.168112][ T980] hid-generic 0005:04F5:5504.0001: item 0 1 0 12 parsing failed [ 192.183699][ T980] hid-generic 0005:04F5:5504.0001: probe with driver hid-generic failed with error -22 [ 192.295513][T10905] syzkaller0: entered promiscuous mode [ 192.332856][T10905] syzkaller0: entered allmulticast mode [ 192.505259][T10925] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1475'. [ 192.743901][T10938] netlink: 'syz.0.1478': attribute type 11 has an invalid length. [ 192.772924][T10938] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1478'. [ 193.287492][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1489'. [ 193.415173][T10973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1492'. [ 193.500311][T10973] x_tables: unsorted entry at hook 1 [ 193.685314][T10985] syzkaller0: entered promiscuous mode [ 193.699590][T10985] syzkaller0: entered allmulticast mode [ 194.103802][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.110353][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.236452][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1502'. [ 194.391149][T11010] syzkaller0: entered allmulticast mode [ 195.070226][T11052] netlink: 'syz.3.1513': attribute type 8 has an invalid length. [ 195.244152][T11053] netlink: 'syz.3.1513': attribute type 5 has an invalid length. [ 195.455675][T11070] netlink: zone id is out of range [ 195.477071][T11070] netlink: del zone limit has 4 unknown bytes [ 195.643141][T11074] xt_l2tp: v2 doesn't support IP mode [ 196.314103][T11109] __nla_validate_parse: 7 callbacks suppressed [ 196.314119][T11109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1529'. [ 196.559415][T11123] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1533'. [ 196.591298][T11122] Cannot find set identified by id 65534 to match [ 196.697488][T11126] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 196.887231][T11125] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1534'. [ 196.913717][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1538'. [ 196.916261][T11125] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1534'. [ 196.991182][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1538'. [ 197.126511][T11143] x_tables: duplicate underflow at hook 3 [ 197.141227][T11133] netlink: 'syz.3.1538': attribute type 11 has an invalid length. [ 197.591237][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1549'. [ 197.714174][T11173] netlink: 'syz.2.1550': attribute type 12 has an invalid length. [ 197.794317][T11176] xt_ipcomp: unknown flags 1D [ 197.847707][T11176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1552'. [ 198.123847][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1556'. [ 199.112974][T11246] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 199.273554][T11256] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1574'. [ 199.421691][T11266] Cannot find add_set index 46338 as target [ 199.661357][T11266] C speed is unknown, defaulting to 1000 [ 200.124120][T11265] syz.0.1572 (11265) used greatest stack depth: 17472 bytes left [ 200.137347][T11288] FAULT_INJECTION: forcing a failure. [ 200.137347][T11288] name failslab, interval 1, probability 0, space 0, times 0 [ 200.158547][T11288] CPU: 0 UID: 0 PID: 11288 Comm: syz.4.1582 Not tainted syzkaller #0 PREEMPT(full) [ 200.158570][T11288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 200.158580][T11288] Call Trace: [ 200.158588][T11288] [ 200.158595][T11288] dump_stack_lvl+0xe8/0x150 [ 200.158624][T11288] should_fail_ex+0x412/0x560 [ 200.158651][T11288] should_failslab+0xa8/0x100 [ 200.158674][T11288] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 200.158694][T11288] ? __alloc_skb+0x186/0x7d0 [ 200.158717][T11288] ? __alloc_skb+0x1d0/0x7d0 [ 200.158738][T11288] ? __local_bh_enable_ip+0xd0/0x130 [ 200.158763][T11288] __alloc_skb+0x1d0/0x7d0 [ 200.158790][T11288] netlink_sendmsg+0x5d4/0xb40 [ 200.158821][T11288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.158846][T11288] ? aa_sock_msg_perm+0xf1/0x1b0 [ 200.158868][T11288] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 200.158891][T11288] ____sys_sendmsg+0x972/0x9f0 [ 200.158915][T11288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.158939][T11288] ? import_iovec+0x73/0xa0 [ 200.158966][T11288] ___sys_sendmsg+0x2a5/0x360 [ 200.158987][T11288] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.159034][T11288] ? __fget_files+0x2a/0x420 [ 200.159057][T11288] ? __fget_files+0x3a0/0x420 [ 200.159089][T11288] __x64_sys_sendmsg+0x1bd/0x2a0 [ 200.159108][T11288] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.159132][T11288] ? __pfx_ksys_write+0x10/0x10 [ 200.159160][T11288] do_syscall_64+0x14d/0xf80 [ 200.159185][T11288] ? trace_irq_disable+0x3b/0x150 [ 200.159209][T11288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.159227][T11288] ? clear_bhb_loop+0x40/0x90 [ 200.159248][T11288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.159265][T11288] RIP: 0033:0x7fa7da59c799 [ 200.159282][T11288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.159297][T11288] RSP: 002b:00007fa7db44d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.159316][T11288] RAX: ffffffffffffffda RBX: 00007fa7da815fa0 RCX: 00007fa7da59c799 [ 200.159329][T11288] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 200.159340][T11288] RBP: 00007fa7db44d090 R08: 0000000000000000 R09: 0000000000000000 [ 200.159355][T11288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.159368][T11288] R13: 00007fa7da816038 R14: 00007fa7da815fa0 R15: 00007ffe185c0678 [ 200.159395][T11288] [ 200.939383][T11311] ip6gre1: entered allmulticast mode [ 201.174417][T11319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.231450][T11326] dvmrp0: entered allmulticast mode [ 201.274067][T11322] syzkaller1: entered promiscuous mode [ 201.279856][T11322] syzkaller1: entered allmulticast mode [ 201.391364][T11332] netlink: 'syz.0.1596': attribute type 29 has an invalid length. [ 201.934516][T11363] __nla_validate_parse: 6 callbacks suppressed [ 201.934535][T11363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1604'. [ 202.539701][T11399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.705135][T11408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1615'. [ 202.767458][T11408] veth0_to_team: entered promiscuous mode [ 202.801500][T11408] veth0_to_team: left promiscuous mode [ 202.812763][T11413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1615'. [ 202.834982][T11413] nbd: must specify at least one socket [ 202.852510][T11412] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1617'. [ 202.864764][T11412] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1617'. [ 202.884506][T11421] openvswitch: netlink: IP tunnel dst address not specified [ 202.901906][T11418] geneve3: entered promiscuous mode [ 202.925775][T11418] geneve3: entered allmulticast mode [ 202.980405][T11413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.987708][T11413] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 203.041946][T11413] bond0: (slave gre0): Error -95 calling set_mac_address [ 203.075520][ T8069] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 203.106277][ T8069] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 203.152004][ T8069] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 203.171285][T11430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.202980][ T8069] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 203.881938][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1630'. [ 203.917012][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1630'. [ 203.959240][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1630'. [ 203.988648][T11477] netlink: 'syz.0.1631': attribute type 1 has an invalid length. [ 204.017031][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1630'. [ 204.047642][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1630'. [ 204.799659][T11512] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 205.417403][T11539] openvswitch: netlink: Flow key attr not present in new flow. [ 205.481374][T11543] FAULT_INJECTION: forcing a failure. [ 205.481374][T11543] name failslab, interval 1, probability 0, space 0, times 0 [ 205.513708][T11543] CPU: 1 UID: 0 PID: 11543 Comm: syz.4.1649 Not tainted syzkaller #0 PREEMPT(full) [ 205.513734][T11543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.513745][T11543] Call Trace: [ 205.513752][T11543] [ 205.513759][T11543] dump_stack_lvl+0xe8/0x150 [ 205.513789][T11543] should_fail_ex+0x412/0x560 [ 205.513817][T11543] should_failslab+0xa8/0x100 [ 205.513841][T11543] __kmalloc_noprof+0xe8/0x760 [ 205.513861][T11543] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 205.513888][T11543] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 205.513913][T11543] genl_family_rcv_msg_doit+0xd9/0x330 [ 205.513939][T11543] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 205.513966][T11543] ? apparmor_capable+0x126/0x170 [ 205.513994][T11543] ? bpf_lsm_capable+0x9/0x20 [ 205.514017][T11543] ? security_capable+0x7e/0x2c0 [ 205.514045][T11543] genl_rcv_msg+0x61c/0x7a0 [ 205.514069][T11543] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.514086][T11543] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 205.514103][T11543] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 205.514124][T11543] ? __pfx_nl80211_post_doit+0x10/0x10 [ 205.514143][T11543] ? __lock_acquire+0x6b5/0x2cf0 [ 205.514175][T11543] netlink_rcv_skb+0x232/0x4b0 [ 205.514198][T11543] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.514218][T11543] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.514258][T11543] ? down_read+0x272/0x2e0 [ 205.514276][T11543] ? genl_rcv+0xd/0x40 [ 205.514298][T11543] genl_rcv+0x28/0x40 [ 205.514313][T11543] netlink_unicast+0x80f/0x9b0 [ 205.514344][T11543] ? __pfx_netlink_unicast+0x10/0x10 [ 205.514367][T11543] ? netlink_sendmsg+0x650/0xb40 [ 205.514388][T11543] ? skb_put+0x11b/0x210 [ 205.514424][T11543] netlink_sendmsg+0x813/0xb40 [ 205.514456][T11543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.514483][T11543] ? aa_sock_msg_perm+0xf1/0x1b0 [ 205.514507][T11543] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 205.514531][T11543] ____sys_sendmsg+0x972/0x9f0 [ 205.514558][T11543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.514586][T11543] ? import_iovec+0x73/0xa0 [ 205.514616][T11543] ___sys_sendmsg+0x2a5/0x360 [ 205.514640][T11543] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.514694][T11543] ? __fget_files+0x2a/0x420 [ 205.514718][T11543] ? __fget_files+0x3a0/0x420 [ 205.514753][T11543] __x64_sys_sendmsg+0x1bd/0x2a0 [ 205.514774][T11543] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 205.514802][T11543] ? __pfx_ksys_write+0x10/0x10 [ 205.514833][T11543] do_syscall_64+0x14d/0xf80 [ 205.514850][T11543] ? trace_irq_disable+0x3b/0x150 [ 205.514874][T11543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.514893][T11543] ? clear_bhb_loop+0x40/0x90 [ 205.514915][T11543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.514933][T11543] RIP: 0033:0x7fa7da59c799 [ 205.514950][T11543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.514964][T11543] RSP: 002b:00007fa7db44d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.514983][T11543] RAX: ffffffffffffffda RBX: 00007fa7da815fa0 RCX: 00007fa7da59c799 [ 205.514995][T11543] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 205.515006][T11543] RBP: 00007fa7db44d090 R08: 0000000000000000 R09: 0000000000000000 [ 205.515016][T11543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.515026][T11543] R13: 00007fa7da816038 R14: 00007fa7da815fa0 R15: 00007ffe185c0678 [ 205.515055][T11543] [ 206.933920][T11607] FAULT_INJECTION: forcing a failure. [ 206.933920][T11607] name failslab, interval 1, probability 0, space 0, times 0 [ 206.968156][T11607] CPU: 0 UID: 0 PID: 11607 Comm: syz.1.1664 Not tainted syzkaller #0 PREEMPT(full) [ 206.968181][T11607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 206.968192][T11607] Call Trace: [ 206.968199][T11607] [ 206.968206][T11607] dump_stack_lvl+0xe8/0x150 [ 206.968235][T11607] should_fail_ex+0x412/0x560 [ 206.968263][T11607] should_failslab+0xa8/0x100 [ 206.968287][T11607] __kmalloc_noprof+0xe8/0x760 [ 206.968307][T11607] ? nl80211_trigger_scan+0x52f/0x1f50 [ 206.968330][T11607] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 206.968355][T11607] nl80211_trigger_scan+0x52f/0x1f50 [ 206.968390][T11607] genl_family_rcv_msg_doit+0x22a/0x330 [ 206.968416][T11607] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 206.968448][T11607] ? bpf_lsm_capable+0x9/0x20 [ 206.968469][T11607] ? security_capable+0x7e/0x2c0 [ 206.968498][T11607] genl_rcv_msg+0x61c/0x7a0 [ 206.968522][T11607] ? __pfx_genl_rcv_msg+0x10/0x10 [ 206.968538][T11607] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 206.968555][T11607] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 206.968575][T11607] ? __pfx_nl80211_post_doit+0x10/0x10 [ 206.968594][T11607] ? __lock_acquire+0x6b5/0x2cf0 [ 206.968627][T11607] netlink_rcv_skb+0x232/0x4b0 [ 206.968651][T11607] ? __pfx_genl_rcv_msg+0x10/0x10 [ 206.968671][T11607] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 206.968711][T11607] ? down_read+0x272/0x2e0 [ 206.968736][T11607] ? genl_rcv+0xd/0x40 [ 206.968754][T11607] genl_rcv+0x28/0x40 [ 206.968771][T11607] netlink_unicast+0x80f/0x9b0 [ 206.968800][T11607] ? __pfx_netlink_unicast+0x10/0x10 [ 206.968823][T11607] ? netlink_sendmsg+0x650/0xb40 [ 206.968843][T11607] ? skb_put+0x11b/0x210 [ 206.968870][T11607] netlink_sendmsg+0x813/0xb40 [ 206.968902][T11607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.968928][T11607] ? aa_sock_msg_perm+0xf1/0x1b0 [ 206.968953][T11607] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 206.968976][T11607] ____sys_sendmsg+0x972/0x9f0 [ 206.969003][T11607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.969030][T11607] ? import_iovec+0x73/0xa0 [ 206.969059][T11607] ___sys_sendmsg+0x2a5/0x360 [ 206.969083][T11607] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.969135][T11607] ? __fget_files+0x2a/0x420 [ 206.969159][T11607] ? __fget_files+0x3a0/0x420 [ 206.969193][T11607] __x64_sys_sendmsg+0x1bd/0x2a0 [ 206.969214][T11607] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 206.969240][T11607] ? __pfx_ksys_write+0x10/0x10 [ 206.969270][T11607] do_syscall_64+0x14d/0xf80 [ 206.969287][T11607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.969305][T11607] ? clear_bhb_loop+0x40/0x90 [ 206.969326][T11607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.969342][T11607] RIP: 0033:0x7f180a99c799 [ 206.969364][T11607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.969378][T11607] RSP: 002b:00007f1808bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.969397][T11607] RAX: ffffffffffffffda RBX: 00007f180ac15fa0 RCX: 00007f180a99c799 [ 206.969409][T11607] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 206.969420][T11607] RBP: 00007f1808bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 206.969430][T11607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.969440][T11607] R13: 00007f180ac16038 R14: 00007f180ac15fa0 R15: 00007ffd4aad9068 [ 206.969467][T11607] [ 207.491850][T11620] netlink: 'syz.2.1670': attribute type 5 has an invalid length. [ 207.499674][T11620] __nla_validate_parse: 51 callbacks suppressed [ 207.499695][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1670'. [ 207.514814][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1670'. [ 207.920368][T11639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1676'. [ 208.726165][T11679] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1687'. [ 208.844471][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1689'. [ 208.862011][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1689'. [ 208.918486][T11688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.938561][T11687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.601263][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1699'. [ 209.772630][T11722] macvtap2: entered allmulticast mode [ 209.779561][T11722] veth0_macvtap: entered allmulticast mode [ 209.795926][T11720] : renamed from bond0 (while UP) [ 210.025531][T11731] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 210.048799][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1705'. [ 210.100393][T11737] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1705'. [ 210.481015][T11762] C speed is unknown, defaulting to 1000 [ 210.793031][T11786] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1717'. [ 210.973836][T11793] netlink: 'syz.4.1719': attribute type 39 has an invalid length. [ 211.473796][T11815] bridge2: entered promiscuous mode [ 211.480813][T11815] bridge2: entered allmulticast mode [ 211.495973][T11815] bridge3: entered promiscuous mode [ 211.501388][T11815] bridge3: entered allmulticast mode [ 211.540891][T11815] bridge4: entered promiscuous mode [ 211.551437][T11815] bridge4: entered allmulticast mode [ 211.577398][T11815] bridge5: entered promiscuous mode [ 211.597940][T11815] bridge5: entered allmulticast mode [ 211.630740][T11815] bridge6: entered promiscuous mode [ 211.647009][T11815] bridge6: entered allmulticast mode [ 211.694451][T11815] bridge7: entered promiscuous mode [ 211.710742][T11815] bridge7: entered allmulticast mode [ 211.743286][T11815] bridge8: entered promiscuous mode [ 211.752100][T11815] bridge8: entered allmulticast mode [ 211.782646][T11815] bridge9: entered promiscuous mode [ 211.788253][T11815] bridge9: entered allmulticast mode [ 211.802128][T11815] bridge10: entered promiscuous mode [ 211.807446][T11815] bridge10: entered allmulticast mode [ 211.821872][T11815] bridge11: entered promiscuous mode [ 211.827806][T11815] bridge11: entered allmulticast mode [ 211.845262][T11815] bridge12: entered promiscuous mode [ 211.851067][T11815] bridge12: entered allmulticast mode [ 211.871713][T11815] bridge13: entered promiscuous mode [ 211.877164][T11815] bridge13: entered allmulticast mode [ 211.902630][T11815] bridge14: entered promiscuous mode [ 211.908940][T11815] bridge14: entered allmulticast mode [ 211.944018][T11815] bridge15: entered promiscuous mode [ 211.959298][T11815] bridge15: entered allmulticast mode [ 212.003360][T11815] bridge16: entered promiscuous mode [ 212.014094][T11815] bridge16: entered allmulticast mode [ 212.060507][T11838] netlink: 'syz.1.1735': attribute type 11 has an invalid length. [ 212.063649][T11815] bridge17: entered promiscuous mode [ 212.074182][T11815] bridge17: entered allmulticast mode [ 212.092642][T11815] bridge18: entered promiscuous mode [ 212.105075][T11815] bridge18: entered allmulticast mode [ 212.124360][T11815] bridge19: entered promiscuous mode [ 212.129933][T11815] bridge19: entered allmulticast mode [ 212.173064][T11815] bridge20: entered promiscuous mode [ 212.211946][T11815] bridge20: entered allmulticast mode [ 212.324839][T11852] netlink: 'syz.3.1739': attribute type 16 has an invalid length. [ 212.341541][T11852] netlink: 'syz.3.1739': attribute type 3 has an invalid length. [ 212.347066][T11815] bridge21: entered promiscuous mode [ 212.363289][T11815] bridge21: entered allmulticast mode [ 212.477253][T11864] nbd: must specify an index to disconnect [ 212.500947][T11866] netlink: 'syz.4.1743': attribute type 2 has an invalid length. [ 212.706412][T11878] __nla_validate_parse: 11 callbacks suppressed [ 212.706431][T11878] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1745'. [ 212.816772][T11885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1749'. [ 213.057308][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1751'. [ 213.446429][T11921] xt_hashlimit: size too large, truncated to 1048576 [ 213.469922][T11925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1759'. [ 213.498929][T11926] xt_connbytes: Forcing CT accounting to be enabled [ 213.591690][T11931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1759'. [ 213.916065][T11943] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1764'. [ 213.946806][T11947] openvswitch: netlink: Key type 158 is out of range max 32 [ 213.988474][T11947] vlan3: entered allmulticast mode [ 214.458609][T11961] syzkaller0: entered promiscuous mode [ 214.464126][T11961] syzkaller0: entered allmulticast mode [ 214.930462][T12004] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1782'. [ 216.033007][T12013] netlink: 'syz.0.1783': attribute type 1 has an invalid length. [ 216.161402][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1783'. [ 216.226624][T12013] macvlan3: entered promiscuous mode [ 216.268750][T12013] macvlan3: entered allmulticast mode [ 216.280355][T12013] bond8: (slave macvlan3): Opening slave failed [ 216.320712][T12036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1790'. [ 216.361078][T12036] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1790'. [ 216.712640][T12045] netlink: 'syz.0.1792': attribute type 1 has an invalid length. [ 217.283010][T12055] netlink: 'syz.3.1797': attribute type 1 has an invalid length. [ 217.366907][T12055] 8021q: adding VLAN 0 to HW filter on device bond3 [ 217.430128][T12062] gtp0: entered promiscuous mode [ 217.435108][T12062] gtp0: entered allmulticast mode [ 217.659210][T12086] netlink: 'syz.3.1802': attribute type 10 has an invalid length. [ 217.864697][T12099] FAULT_INJECTION: forcing a failure. [ 217.864697][T12099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.912751][T12099] CPU: 1 UID: 0 PID: 12099 Comm: syz.2.1806 Not tainted syzkaller #0 PREEMPT(full) [ 217.912778][T12099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.912789][T12099] Call Trace: [ 217.912796][T12099] [ 217.912805][T12099] dump_stack_lvl+0xe8/0x150 [ 217.912834][T12099] should_fail_ex+0x412/0x560 [ 217.912862][T12099] _copy_from_iter+0x1d3/0x1670 [ 217.912886][T12099] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 217.912908][T12099] ? __lock_acquire+0x6b5/0x2cf0 [ 217.912939][T12099] ? __pfx__copy_from_iter+0x10/0x10 [ 217.912967][T12099] ? dev_get_by_index+0x22/0x2e0 [ 217.912987][T12099] ? dev_get_by_index+0x22/0x2e0 [ 217.913010][T12099] packet_sendmsg+0x30b2/0x50f0 [ 217.913040][T12099] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 217.913064][T12099] ? __lock_acquire+0x6b5/0x2cf0 [ 217.913095][T12099] ? __lock_acquire+0x6b5/0x2cf0 [ 217.913134][T12099] ? aa_sk_perm+0x6d5/0x900 [ 217.913151][T12099] ? __pfx_packet_sendmsg+0x10/0x10 [ 217.913181][T12099] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 217.913210][T12099] ? aa_sock_msg_perm+0xf1/0x1b0 [ 217.913233][T12099] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 217.913252][T12099] ? __pfx_packet_sendmsg+0x10/0x10 [ 217.913276][T12099] __sys_sendto+0x672/0x710 [ 217.913302][T12099] ? __pfx___sys_sendto+0x10/0x10 [ 217.913323][T12099] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 217.913353][T12099] ? __fget_files+0x3a0/0x420 [ 217.913395][T12099] ? ksys_write+0x242/0x270 [ 217.913418][T12099] ? __pfx_ksys_write+0x10/0x10 [ 217.913442][T12099] __x64_sys_sendto+0xde/0x100 [ 217.913470][T12099] do_syscall_64+0x14d/0xf80 [ 217.913486][T12099] ? trace_irq_disable+0x3b/0x150 [ 217.913510][T12099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.913529][T12099] ? clear_bhb_loop+0x40/0x90 [ 217.913551][T12099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.913569][T12099] RIP: 0033:0x7f1d67f9c799 [ 217.913586][T12099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.913601][T12099] RSP: 002b:00007f1d68e14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 217.913621][T12099] RAX: ffffffffffffffda RBX: 00007f1d68215fa0 RCX: 00007f1d67f9c799 [ 217.913634][T12099] RDX: 000000000000fd35 RSI: 00002000000002c0 RDI: 0000000000000003 [ 217.913645][T12099] RBP: 00007f1d68e14090 R08: 0000200000000140 R09: 0000000000000014 [ 217.913657][T12099] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 217.913668][T12099] R13: 00007f1d68216038 R14: 00007f1d68215fa0 R15: 00007fff4bdd78f8 [ 217.913696][T12099] [ 217.995936][T12113] __nla_validate_parse: 34 callbacks suppressed [ 217.995953][T12113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1807'. [ 218.052171][T12110] syzkaller0: entered promiscuous mode [ 218.198126][T12110] syzkaller0: entered allmulticast mode [ 218.226171][T12115] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 218.272612][T12123] netlink: 'syz.1.1814': attribute type 32 has an invalid length. [ 218.281893][T12115] syzkaller0: entered promiscuous mode [ 218.296591][T12115] syzkaller0: entered allmulticast mode [ 218.335184][T12124] netlink: 'syz.1.1814': attribute type 12 has an invalid length. [ 218.371481][T12115] tipc: Enabled bearer , priority 0 [ 218.380793][T12114] tipc: Resetting bearer [ 218.419247][T12114] tipc: Disabling bearer [ 218.573260][T12124] bond0: option primary_reselect: invalid value (255) [ 218.653277][T12124] bond0 (unregistering): Released all slaves [ 218.735864][T12145] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.1818'. [ 218.925259][T12162] team_slave_0: entered allmulticast mode [ 218.951433][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 218.980815][T12162] team_slave_0: entered promiscuous mode [ 219.064258][T12157] "syz.1.1821" (12157) uses obsolete ecb(arc4) skcipher [ 219.177605][T12179] IPVS: Unknown mcast interface: vcan0 [ 219.238717][T12179] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1827'. [ 219.276503][T12182] netlink: 'syz.1.1829': attribute type 1 has an invalid length. [ 219.281755][T12179] sctp: [Deprecated]: syz.3.1827 (pid 12179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.281755][T12179] Use struct sctp_sack_info instead [ 219.396320][T12193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1829'. [ 219.426274][T12191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1833'. [ 219.432699][T12195] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1834'. [ 219.442059][T12193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1829'. [ 219.456846][T12182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.464714][T12185] veth0: entered promiscuous mode [ 219.537508][T12199] bond0: (slave geneve2): making interface the new active one [ 219.655941][T12199] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 219.672648][T12184] veth0: left promiscuous mode [ 219.782023][T12212] --map-set only usable from mangle table [ 219.807676][T12196] syzkaller0: entered promiscuous mode [ 219.822535][T12196] syzkaller0: entered allmulticast mode [ 220.083039][T12228] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1845'. [ 221.096651][T12227] lo: Caught tx_queue_len zero misconfig [ 221.148170][T12239] syzkaller1: entered promiscuous mode [ 221.153685][T12239] syzkaller1: entered allmulticast mode [ 221.334473][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1850'. [ 222.005425][T12307] netlink: 'syz.2.1866': attribute type 2 has an invalid length. [ 222.021574][T12309] netlink: 'syz.4.1865': attribute type 12 has an invalid length. [ 222.040200][T12309] netlink: 'syz.4.1865': attribute type 11 has an invalid length. [ 222.591624][T12347] IPv6: addrconf: prefix option has invalid lifetime [ 222.918768][T12368] netlink: 'syz.2.1881': attribute type 1 has an invalid length. [ 222.979860][T12370] netlink: 'syz.0.1880': attribute type 7 has an invalid length. [ 222.991713][T12368] bond7: entered promiscuous mode [ 223.000506][T12368] 8021q: adding VLAN 0 to HW filter on device bond7 [ 223.099637][T12368] __nla_validate_parse: 7 callbacks suppressed [ 223.099655][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1881'. [ 223.346085][T12386] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1886'. [ 223.382832][T12373] bond7: (slave bridge5): making interface the new active one [ 223.391876][T12373] bridge5: entered promiscuous mode [ 223.401152][T12373] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 223.411531][T12383] lo: entered allmulticast mode [ 223.416440][T12383] lo: left allmulticast mode [ 223.424883][T12389] netlink: 'syz.1.1887': attribute type 11 has an invalid length. [ 223.433087][T12389] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.1887'. [ 223.644747][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1889'. [ 223.678841][T12395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1889'. [ 223.734701][T12410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1894'. [ 223.750550][T12395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1889'. [ 223.809636][T12416] netlink: 'syz.1.1896': attribute type 4 has an invalid length. [ 223.841854][T12414] bridge6: entered promiscuous mode [ 223.847146][T12416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1896'. [ 223.856847][T12414] bridge6: entered allmulticast mode [ 224.125584][T12428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.400417][T12442] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1905'. [ 225.409634][T12442] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1905'. [ 225.627900][T12463] netlink: 'syz.4.1908': attribute type 3 has an invalid length. [ 225.853547][T12469] bond8: entered promiscuous mode [ 225.873148][T12469] 8021q: adding VLAN 0 to HW filter on device bond8 [ 225.971378][T12469] netlink: 'syz.2.1912': attribute type 12 has an invalid length. [ 225.980343][T12469] netlink: 'syz.2.1912': attribute type 29 has an invalid length. [ 225.989059][T12469] netlink: 'syz.2.1912': attribute type 2 has an invalid length. [ 226.020644][T12469] 8021q: adding VLAN 0 to HW filter on device bond8 [ 226.027779][T12469] bond8: (slave sit1): The slave device specified does not support setting the MAC address [ 226.040078][T12469] bond8: (slave sit1): Error -95 calling set_mac_address [ 226.063486][T12491] syzkaller0: entered promiscuous mode [ 226.069371][T12491] syzkaller0: entered allmulticast mode [ 226.336554][T12501] openvswitch: netlink: Key 26 has unexpected len 328 expected 16 [ 226.722326][T12528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.839928][T12539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.853550][T12533] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 227.198834][T12557] ip6t_srh: unknown srh invflags 4000 [ 227.205767][T12557] validate_nla: 1 callbacks suppressed [ 227.205786][T12557] netlink: 'syz.1.1938': attribute type 16 has an invalid length. [ 227.514363][T12561] sctp: [Deprecated]: syz.2.1940 (pid 12561) Use of int in max_burst socket option. [ 227.514363][T12561] Use struct sctp_assoc_value instead [ 228.188557][T12559] __nla_validate_parse: 7 callbacks suppressed [ 228.188578][T12559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1939'. [ 228.321443][T12574] sctp: [Deprecated]: syz.1.1943 (pid 12574) Use of int in maxseg socket option. [ 228.321443][T12574] Use struct sctp_assoc_value instead [ 228.407134][T12580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1944'. [ 228.461479][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'. [ 228.510732][T12589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1948'. [ 228.601091][T12596] netlink: 'syz.2.1950': attribute type 10 has an invalid length. [ 228.632593][T12598] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1949'. [ 228.708532][T12596] syzkaller1: entered promiscuous mode [ 228.722836][T12596] syzkaller1: entered allmulticast mode [ 228.985533][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1955'. [ 228.996885][T12616] xt_l2tp: missing protocol rule (udp|l2tpip) [ 229.391251][T12640] netlink: 'syz.4.1965': attribute type 2 has an invalid length. [ 229.405493][T12636] syzkaller0: entered promiscuous mode [ 229.411342][T12636] syzkaller0: entered allmulticast mode [ 229.430006][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1965'. [ 229.443589][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1965'. [ 231.187601][T12676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1975'. [ 231.316431][T12686] netlink: 'syz.1.1978': attribute type 5 has an invalid length. [ 231.362067][T12686] netlink: 'syz.1.1978': attribute type 10 has an invalid length. [ 231.655226][T12711] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1984'. [ 231.698758][T12715] syzkaller0: entered promiscuous mode [ 231.704273][T12715] syzkaller0: entered allmulticast mode [ 231.773328][T12715] netlink: 'syz.2.1986': attribute type 9 has an invalid length. [ 231.829124][T12723] syzkaller0: entered promiscuous mode [ 231.834638][T12723] syzkaller0: entered allmulticast mode [ 231.875572][T12723] tipc: Started in network mode [ 231.890941][T12723] tipc: Node identity , cluster identity 6 [ 231.896875][T12723] tipc: Failed to obtain node identity [ 231.905159][T12723] tipc: Enabling of bearer rejected, failed to enable media [ 231.920829][T12723] +: renamed from syzkaller0 (while UP) [ 232.281670][T12751] netlink: 'syz.2.1993': attribute type 1 has an invalid length. [ 232.833539][T12783] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 232.852165][T12790] netlink: 'syz.0.2007': attribute type 4 has an invalid length. [ 232.870619][T12790] 8021q: VLANs not supported on ip6_vti0 [ 233.126315][T12809] vlan3: entered promiscuous mode [ 233.133579][T12809] bridge0: entered promiscuous mode [ 233.320362][T12821] xt_recent: Unsupported userspace flags (000000b1) [ 233.427188][T12825] __nla_validate_parse: 1 callbacks suppressed [ 233.427207][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2020'. [ 233.445074][T12825] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 233.460087][T12823] netlink: 'syz.0.2019': attribute type 1 has an invalid length. [ 233.717861][T12839] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.749427][T12839] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.763685][T12848] netlink: 'syz.2.2022': attribute type 16 has an invalid length. [ 233.799109][T12848] netlink: 'syz.2.2022': attribute type 17 has an invalid length. [ 233.971876][T12848] bond0: left promiscuous mode [ 233.976953][T12848] bond_slave_0: left promiscuous mode [ 234.007461][T12848] bond_slave_1: left promiscuous mode [ 234.023198][T12848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.037251][T12848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.072911][T12859] syzkaller0: entered promiscuous mode [ 234.078530][T12859] syzkaller0: entered allmulticast mode [ 234.134825][T12868] netlink: 'syz.3.2031': attribute type 11 has an invalid length. [ 234.300204][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2035'. [ 234.318984][T12880] x_tables: duplicate underflow at hook 1 [ 234.516026][T12891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2039'. [ 234.526915][T12893] xt_hashlimit: invalid rate [ 234.829730][T12908] netlink: 'syz.4.2044': attribute type 5 has an invalid length. [ 234.863446][T12908] bond4: option tlb_dynamic_lb: invalid value (9) [ 234.878354][T12908] bond4 (unregistering): Released all slaves [ 234.889452][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2045'. [ 255.541577][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.547919][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 284.672038][T12927] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2051'. [ 284.673863][T12925] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 284.693632][T12925] bond0: (slave gre0): Error -95 calling set_mac_address [ 284.764688][T12932] x_tables: duplicate underflow at hook 1 [ 284.787959][T12925] syzkaller0: entered promiscuous mode [ 284.793614][T12925] syzkaller0: entered allmulticast mode [ 286.123085][T12935] veth0: entered promiscuous mode [ 286.128477][T12939] veth0: left promiscuous mode [ 286.570991][T12984] netlink: 'syz.2.2066': attribute type 3 has an invalid length. [ 286.583824][T12987] netlink: 'syz.2.2066': attribute type 3 has an invalid length. [ 286.653963][T12989] netlink: set zone limit has 4 unknown bytes [ 286.663345][T12998] sctp: [Deprecated]: syz.4.2069 (pid 12998) Use of int in maxseg socket option. [ 286.663345][T12998] Use struct sctp_assoc_value instead [ 286.782696][T13004] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2072'. [ 286.793859][T12997] SET target dimension over the limit! [ 287.002690][T13019] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2076'. [ 287.563253][T13041] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2082'. [ 287.598490][T13041] 8021q: VLANs not supported on ip6gre0 [ 287.605616][T13041] netlink: 'syz.2.2082': attribute type 1 has an invalid length. [ 287.733975][T13057] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2086'. [ 287.749642][T13058] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2087'. [ 287.764164][T13062] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2088'. [ 287.765716][T13041] 8021q: adding VLAN 0 to HW filter on device bond9 [ 287.810588][T13052] bond9: (slave ip6erspan0): making interface the new active one [ 287.820447][T13052] bond9: (slave ip6erspan0): Enslaving as an active interface with an up link [ 288.158385][T13086] syzkaller1: entered promiscuous mode [ 288.163900][T13086] syzkaller1: entered allmulticast mode [ 288.276927][T13097] 8021q: VLANs not supported on gre0 [ 288.518138][T13108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2100'. [ 288.670764][T13117] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2104'. [ 288.692916][T13116] netlink: 'syz.2.2103': attribute type 1 has an invalid length. [ 288.720785][T13116] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2103'. [ 289.577142][T13190] netlink: 'syz.2.2117': attribute type 1 has an invalid length. [ 290.248452][T13224] __nla_validate_parse: 1 callbacks suppressed [ 290.248470][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'. [ 290.303874][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'. [ 290.351721][T13230] ipt_REJECT: TCP_RESET invalid for non-tcp [ 290.383174][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'. [ 290.409108][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'. [ 290.485701][T13245] netlink: 'syz.4.2134': attribute type 1 has an invalid length. [ 290.626897][T13249] nbd: must specify at least one socket [ 290.636668][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2134'. [ 290.655711][T13254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.690074][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2134'. [ 290.893134][T13267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.919359][T13265] team0 (unregistering): Port device team_slave_0 removed [ 290.957875][T13265] team0 (unregistering): Port device team_slave_1 removed [ 291.269038][T13292] IPv6: NLM_F_CREATE should be specified when creating new route [ 291.312689][T13292] netlink: 'syz.0.2148': attribute type 10 has an invalid length. [ 292.361659][T13358] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.394562][T13356] xt_ecn: cannot match TCP bits for non-tcp packets [ 292.487673][T13358] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.628633][T13358] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.740331][T13358] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.812854][T13388] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 292.876460][T13388] bond3 (unregistering): Released all slaves [ 293.008426][ T5488] veth1_macvtap: left promiscuous mode [ 293.172743][ T8063] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.216365][ T8063] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.277386][ T8063] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.321514][T13414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2180'. [ 293.341394][T13417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2181'. [ 293.352412][ T8063] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.378462][T13417] openvswitch: netlink: Flow actions attr not present in new flow. [ 293.892371][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2185'. [ 293.914531][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2185'. [ 294.059678][T13456] veth7: entered promiscuous mode [ 294.075495][T13456] veth7: entered allmulticast mode [ 295.279942][T13533] __nla_validate_parse: 5 callbacks suppressed [ 295.279961][T13533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2209'. [ 295.328615][T13533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2209'. [ 295.886426][T13559] syzkaller0: entered promiscuous mode [ 295.892561][T13559] syzkaller0: entered allmulticast mode [ 295.935778][T13559] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2216'. [ 295.977409][T13565] pimreg3: entered allmulticast mode [ 297.432389][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2228'. [ 297.760789][T13613] FAULT_INJECTION: forcing a failure. [ 297.760789][T13613] name failslab, interval 1, probability 0, space 0, times 0 [ 297.821827][T13613] CPU: 1 UID: 0 PID: 13613 Comm: syz.1.2234 Not tainted syzkaller #0 PREEMPT(full) [ 297.821853][T13613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.821875][T13613] Call Trace: [ 297.821883][T13613] [ 297.821891][T13613] dump_stack_lvl+0xe8/0x150 [ 297.821921][T13613] should_fail_ex+0x412/0x560 [ 297.821949][T13613] should_failslab+0xa8/0x100 [ 297.821973][T13613] __kmalloc_noprof+0xe8/0x760 [ 297.821993][T13613] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 297.822019][T13613] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 297.822043][T13613] genl_family_rcv_msg_doit+0xd9/0x330 [ 297.822067][T13613] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 297.822093][T13613] ? apparmor_capable+0x126/0x170 [ 297.822120][T13613] ? bpf_lsm_capable+0x9/0x20 [ 297.822142][T13613] ? security_capable+0x7e/0x2c0 [ 297.822168][T13613] genl_rcv_msg+0x61c/0x7a0 [ 297.822191][T13613] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.822207][T13613] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 297.822225][T13613] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 297.822246][T13613] ? __pfx_nl80211_post_doit+0x10/0x10 [ 297.822273][T13613] ? __lock_acquire+0x6b5/0x2cf0 [ 297.822307][T13613] netlink_rcv_skb+0x232/0x4b0 [ 297.822331][T13613] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.822351][T13613] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.822390][T13613] ? down_read+0x272/0x2e0 [ 297.822408][T13613] ? genl_rcv+0xd/0x40 [ 297.822430][T13613] genl_rcv+0x28/0x40 [ 297.822446][T13613] netlink_unicast+0x80f/0x9b0 [ 297.822475][T13613] ? __pfx_netlink_unicast+0x10/0x10 [ 297.822498][T13613] ? netlink_sendmsg+0x650/0xb40 [ 297.822518][T13613] ? skb_put+0x11b/0x210 [ 297.822547][T13613] netlink_sendmsg+0x813/0xb40 [ 297.822579][T13613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.822604][T13613] ? aa_sock_msg_perm+0xf1/0x1b0 [ 297.822626][T13613] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 297.822648][T13613] ____sys_sendmsg+0x972/0x9f0 [ 297.822674][T13613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.822700][T13613] ? import_iovec+0x73/0xa0 [ 297.822729][T13613] ___sys_sendmsg+0x2a5/0x360 [ 297.822753][T13613] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.822803][T13613] ? __fget_files+0x2a/0x420 [ 297.822827][T13613] ? __fget_files+0x3a0/0x420 [ 297.822858][T13613] __x64_sys_sendmsg+0x1bd/0x2a0 [ 297.822878][T13613] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.822906][T13613] ? __pfx_ksys_write+0x10/0x10 [ 297.822937][T13613] do_syscall_64+0x14d/0xf80 [ 297.822953][T13613] ? trace_irq_disable+0x3b/0x150 [ 297.822977][T13613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.822995][T13613] ? clear_bhb_loop+0x40/0x90 [ 297.823016][T13613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.823034][T13613] RIP: 0033:0x7f180a99c799 [ 297.823051][T13613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.823067][T13613] RSP: 002b:00007f1808bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.823086][T13613] RAX: ffffffffffffffda RBX: 00007f180ac15fa0 RCX: 00007f180a99c799 [ 297.823099][T13613] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 297.823110][T13613] RBP: 00007f1808bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 297.823121][T13613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.823131][T13613] R13: 00007f180ac16038 R14: 00007f180ac15fa0 R15: 00007ffd4aad9068 [ 297.823159][T13613] [ 298.311499][T13624] openvswitch: netlink: Key type 220 is out of range max 32 [ 298.318724][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2238'. [ 298.343923][T13631] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.413709][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2238'. [ 298.449048][T13638] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2240'. [ 298.754916][T13657] SET target dimension over the limit! [ 298.884481][T13666] FAULT_INJECTION: forcing a failure. [ 298.884481][T13666] name failslab, interval 1, probability 0, space 0, times 0 [ 298.931752][T13661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2247'. [ 298.940553][T13666] CPU: 0 UID: 0 PID: 13666 Comm: syz.4.2248 Not tainted syzkaller #0 PREEMPT(full) [ 298.940579][T13666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.940590][T13666] Call Trace: [ 298.940597][T13666] [ 298.940604][T13666] dump_stack_lvl+0xe8/0x150 [ 298.940634][T13666] should_fail_ex+0x412/0x560 [ 298.940661][T13666] should_failslab+0xa8/0x100 [ 298.940684][T13666] __kmalloc_noprof+0xe8/0x760 [ 298.940704][T13666] ? nl80211_trigger_scan+0x52f/0x1f50 [ 298.940726][T13666] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 298.940748][T13666] nl80211_trigger_scan+0x52f/0x1f50 [ 298.940782][T13666] genl_family_rcv_msg_doit+0x22a/0x330 [ 298.940806][T13666] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 298.940834][T13666] ? bpf_lsm_capable+0x9/0x20 [ 298.940857][T13666] ? security_capable+0x7e/0x2c0 [ 298.940884][T13666] genl_rcv_msg+0x61c/0x7a0 [ 298.940909][T13666] ? __pfx_genl_rcv_msg+0x10/0x10 [ 298.940926][T13666] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 298.940942][T13666] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 298.940961][T13666] ? __pfx_nl80211_post_doit+0x10/0x10 [ 298.940980][T13666] ? __lock_acquire+0x6b5/0x2cf0 [ 298.941013][T13666] netlink_rcv_skb+0x232/0x4b0 [ 298.941037][T13666] ? __pfx_genl_rcv_msg+0x10/0x10 [ 298.941055][T13666] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 298.941095][T13666] ? down_read+0x272/0x2e0 [ 298.941112][T13666] ? genl_rcv+0xd/0x40 [ 298.941131][T13666] genl_rcv+0x28/0x40 [ 298.941146][T13666] netlink_unicast+0x80f/0x9b0 [ 298.941176][T13666] ? __pfx_netlink_unicast+0x10/0x10 [ 298.941206][T13666] ? netlink_sendmsg+0x650/0xb40 [ 298.941227][T13666] ? skb_put+0x11b/0x210 [ 298.941254][T13666] netlink_sendmsg+0x813/0xb40 [ 298.941286][T13666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.941313][T13666] ? aa_sock_msg_perm+0xf1/0x1b0 [ 298.941337][T13666] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 298.941359][T13666] ____sys_sendmsg+0x972/0x9f0 [ 298.941386][T13666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.941412][T13666] ? import_iovec+0x73/0xa0 [ 298.941460][T13666] ___sys_sendmsg+0x2a5/0x360 [ 298.941483][T13666] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.941536][T13666] ? __fget_files+0x2a/0x420 [ 298.941562][T13666] ? __fget_files+0x3a0/0x420 [ 298.941595][T13666] __x64_sys_sendmsg+0x1bd/0x2a0 [ 298.941616][T13666] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 298.941644][T13666] ? __pfx_ksys_write+0x10/0x10 [ 298.941674][T13666] do_syscall_64+0x14d/0xf80 [ 298.941690][T13666] ? trace_irq_disable+0x3b/0x150 [ 298.941714][T13666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.941732][T13666] ? clear_bhb_loop+0x40/0x90 [ 298.941753][T13666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.941769][T13666] RIP: 0033:0x7fa7da59c799 [ 298.941787][T13666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.941802][T13666] RSP: 002b:00007fa7db44d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.941820][T13666] RAX: ffffffffffffffda RBX: 00007fa7da815fa0 RCX: 00007fa7da59c799 [ 298.941832][T13666] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 298.941843][T13666] RBP: 00007fa7db44d090 R08: 0000000000000000 R09: 0000000000000000 [ 298.941854][T13666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.941864][T13666] R13: 00007fa7da816038 R14: 00007fa7da815fa0 R15: 00007ffe185c0678 [ 298.941893][T13666] [ 299.302704][T13672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2247'. [ 299.441362][T13682] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 299.518429][T13693] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2256'. [ 299.734647][T13711] netlink: 'syz.4.2261': attribute type 4 has an invalid length. [ 300.595337][T13773] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 300.649175][T13781] __nla_validate_parse: 4 callbacks suppressed [ 300.649193][T13781] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2280'. [ 300.873376][T13788] netlink: 'syz.4.2287': attribute type 2 has an invalid length. [ 301.025283][T13805] erspan2: entered allmulticast mode [ 301.382519][T13827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2295'. [ 301.658160][T13836] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2298'. [ 301.705143][T13844] netlink: 'syz.3.2301': attribute type 4 has an invalid length. [ 301.748174][T13844] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2301'. [ 301.852192][T13853] xt_l2tp: invalid flags combination: 8 [ 301.860021][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2302'. [ 301.892652][T13855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2303'. [ 301.893686][T13853] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2302'. [ 302.442535][T13887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2315'. [ 302.511387][T13887] bond0: entered promiscuous mode [ 302.534739][T13887] bond_slave_0: entered promiscuous mode [ 302.557290][T13887] bond_slave_1: entered promiscuous mode [ 302.594030][T13887] gretap0: entered promiscuous mode [ 302.605138][T13887] debugfs: 'hsr1' already exists in 'hsr' [ 302.611531][T13887] Cannot create hsr debugfs directory [ 302.617096][T13887] hsr1: entered promiscuous mode [ 302.622756][T13894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.683188][T13905] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2320'. [ 302.806449][T13913] netlink: 'syz.0.2323': attribute type 39 has an invalid length. [ 302.934415][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2324'. [ 303.084535][T13927] x_tables: unsorted underflow at hook 3 [ 303.398969][T13954] netlink: 'syz.3.2333': attribute type 1 has an invalid length. [ 303.502789][T13963] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 303.669140][T13974] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 303.804947][T13985] syzkaller1: entered promiscuous mode [ 303.844163][T13985] syzkaller1: entered allmulticast mode [ 303.929139][T13996] netlink: 'syz.0.2348': attribute type 3 has an invalid length. [ 303.938025][ T8077] bond0: (slave bond_slave_0): interface is now down [ 303.956418][ T8077] bond0: (slave bond_slave_1): interface is now down [ 303.982815][ T8077] bond0: now running without any active interface! [ 304.094300][T14007] netlink: 'syz.0.2352': attribute type 12 has an invalid length. [ 304.119662][T14007] netlink: 'syz.0.2352': attribute type 12 has an invalid length. [ 304.328949][T14028] ieee802154 phy0 wpan0: encryption failed: -22 [ 304.450162][T14038] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 304.484702][T14038] netlink: 'syz.2.2361': attribute type 1 has an invalid length. [ 304.509627][T14038] netlink: 'syz.2.2361': attribute type 1 has an invalid length. [ 304.555674][T14039] xt_CT: No such helper "pptp" [ 304.562058][T14046] block nbd0: not configured, cannot reconfigure [ 304.752453][T14057] veth1_to_bond: entered allmulticast mode [ 304.766452][T14057] veth1_to_bond: left allmulticast mode [ 304.844655][T14061] netlink: 'syz.3.2366': attribute type 2 has an invalid length. [ 305.025856][T14073] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20000 [ 305.041893][T14072] dvmrp0: left allmulticast mode [ 305.287570][T14087] IPv6: sit1: Disabled Multicast RS [ 305.352489][T14092] veth0_to_bridge: entered promiscuous mode [ 305.371717][T14091] veth0_to_bridge: left promiscuous mode [ 305.660768][T14112] syzkaller0: entered promiscuous mode [ 305.666800][T14112] syzkaller0: entered allmulticast mode [ 306.068406][T14146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.119177][T14148] __nla_validate_parse: 48 callbacks suppressed [ 306.119197][T14148] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2396'. [ 306.172066][T14153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.336225][T14166] xt_hashlimit: size too large, truncated to 1048576 [ 306.390125][T14157] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 306.729100][T14185] team0: Device ip6gre3 is of different type [ 307.040256][T14209] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 307.295891][T14227] netlink: 'syz.1.2415': attribute type 1 has an invalid length. [ 307.314079][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2415'. [ 307.339848][T14227] netlink: 'syz.1.2415': attribute type 1 has an invalid length. [ 307.636666][T14255] pim6reg: entered allmulticast mode [ 307.680150][T14254] pim6reg: left allmulticast mode [ 307.963815][T14274] nbd: must specify an index to disconnect [ 307.971395][T14277] xt_CONNSECMARK: invalid mode: 0 [ 308.068876][T14282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2429'. [ 308.383698][T14296] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2429'. [ 308.463975][T14296] nbd: device at index 64 is going down [ 308.504927][T14292] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2433'. [ 308.627147][T12937] udevd[12937]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 309.029207][T14346] netlink: 'syz.3.2444': attribute type 4 has an invalid length. [ 309.239476][T14357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2447'. [ 309.266876][T14359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2448'. [ 309.401627][T14371] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2452'. [ 309.504310][T14368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2451'. [ 309.591812][T14380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2455'. [ 309.656612][T14378] bond9: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 309.712588][T14392] syzkaller1: entered promiscuous mode [ 309.718148][T14392] syzkaller1: entered allmulticast mode [ 309.991151][T14412] netlink: 'syz.3.2462': attribute type 27 has an invalid length. [ 310.168811][T14426] team0: Device ip6gre3 is of different type [ 310.362643][T14442] syzkaller1: entered promiscuous mode [ 310.383082][T14442] syzkaller1: entered allmulticast mode [ 310.501760][T14445] syzkaller0: entered promiscuous mode [ 310.509892][T14445] syzkaller0: entered allmulticast mode [ 310.585634][T14453] bond3: (slave erspan0): Device is not bonding slave [ 310.592901][T14453] bond3: option active_slave: invalid value (erspan0) [ 310.601802][T14453] bond3 (unregistering): Released all slaves [ 312.041424][T14485] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 312.054029][T14485] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 312.063317][T14485] gretap1: entered promiscuous mode [ 312.069115][T14485] gretap1: entered allmulticast mode [ 312.140415][T14480] tipc: Started in network mode [ 312.158439][T14480] tipc: Node identity 8e8615c0d9ee, cluster identity 4711 [ 312.198712][T14480] tipc: Enabled bearer , priority 0 [ 312.329072][T14493] syzkaller0: entered promiscuous mode [ 312.334752][T14504] __nla_validate_parse: 4 callbacks suppressed [ 312.334771][T14504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2486'. [ 312.351979][T14493] syzkaller0: entered allmulticast mode [ 312.358371][T14493] tipc: Resetting bearer [ 312.411033][T14504] hsr_slave_1 (unregistering): left promiscuous mode [ 312.434700][T14478] tipc: Resetting bearer [ 312.821443][T14531] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2494'. [ 313.211893][T14536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2497'. [ 313.224084][T14536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2497'. [ 313.948035][T14478] tipc: Disabling bearer [ 313.958777][T14533] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 313.962705][ T29] tipc: Node number set to 1466439104 [ 314.122869][T14546] xt_TPROXY: Can be used only with -p tcp or -p udp [ 314.150468][T14549] geneve3: entered promiscuous mode [ 314.174687][T14547] netlink: 'syz.0.2500': attribute type 21 has an invalid length. [ 314.215033][T14547] netlink: 'syz.0.2500': attribute type 6 has an invalid length. [ 314.256023][T14547] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2500'. [ 314.283309][T14556] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 314.530218][T14575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2509'. [ 314.559210][T14574] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2510'. [ 314.570604][T14575] openvswitch: netlink: Flow key attr not present in new flow. [ 314.650349][T14585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2513'. [ 314.852000][T14594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.998717][T14605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2518'. [ 315.035238][T14610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2520'. [ 315.111161][T14605] tipc: Enabled bearer , priority 0 [ 315.142221][T14612] bond13 (unregistering): Released all slaves [ 315.267318][T14605] syzkaller0: entered promiscuous mode [ 315.273236][T14605] syzkaller0: entered allmulticast mode [ 315.280130][T14605] tipc: Resetting bearer [ 315.304785][T14604] tipc: Resetting bearer [ 316.707786][T14604] tipc: Disabling bearer [ 316.985398][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.996925][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.217076][T14687] netlink: 'syz.0.2542': attribute type 10 has an invalid length. [ 317.270233][T14696] netlink: get zone limit has 4 unknown bytes [ 317.547723][T14715] __nla_validate_parse: 4 callbacks suppressed [ 317.547741][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2551'. [ 317.655286][T14721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2553'. [ 317.850958][T14733] bond8: entered promiscuous mode [ 317.856044][T14733] bond8: entered allmulticast mode [ 317.892164][T14733] 8021q: adding VLAN 0 to HW filter on device bond8 [ 317.903238][T14744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2556'. [ 317.933310][T14733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2556'. [ 317.934928][T14749] IPv6: sit1: Disabled Multicast RS [ 318.063813][T14750] syzkaller0: entered promiscuous mode [ 318.078283][T14750] syzkaller0: entered allmulticast mode [ 318.099522][T14758] netlink: 'syz.3.2564': attribute type 2 has an invalid length. [ 318.141267][T14753] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2562'. [ 318.155026][T14759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2564'. [ 319.405210][T14771] delete_channel: no stack [ 319.503753][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2567'. [ 320.226613][T14776] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 320.244960][T14776] bridge0: port 4(team0) entered disabled state [ 320.251450][T14776] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.258752][T14776] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.267430][T14776] bridge0: entered allmulticast mode [ 320.370241][T14779] netlink: 'syz.3.2569': attribute type 12 has an invalid length. [ 320.379175][T14779] netlink: 'syz.3.2569': attribute type 29 has an invalid length. [ 320.387083][T14779] netlink: 'syz.3.2569': attribute type 2 has an invalid length. [ 320.395031][T14779] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2569'. [ 320.659460][T14724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 320.729094][T11250] batman_adv: batadv2: IGMP Querier appeared [ 320.735130][T11250] batman_adv: batadv2: MLD Querier appeared [ 320.849918][T14788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2570'. [ 321.310946][T14822] openvswitch: netlink: Missing key (keys=40, expected=80) [ 321.373049][T14828] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20004 [ 321.391110][T14828] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2583'. [ 321.448194][T14832] nbd: must specify at least one socket [ 321.762757][T14847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.797757][T14854] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 321.810595][T14854] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 321.844824][T14854] gretap2: entered promiscuous mode [ 321.862055][T14854] gretap2: entered allmulticast mode [ 321.870120][T14865] netlink: 'syz.2.2594': attribute type 1 has an invalid length. [ 321.886195][T14865] netlink: 'syz.2.2594': attribute type 2 has an invalid length. [ 321.912039][T14857] syz_tun: entered allmulticast mode [ 321.925819][T14869] geneve4: entered promiscuous mode [ 321.950501][T11251] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 39026 - 0 [ 321.977013][T11251] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 39026 - 0 [ 322.020288][T14877] xt_socket: unknown flags 0x50 [ 322.026502][T11251] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 39026 - 0 [ 322.133996][T14862] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 322.194163][T11251] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 39026 - 0 [ 322.222526][T14880] x_tables: unsorted entry at hook 3 [ 322.252545][T14852] syz_tun: left allmulticast mode [ 322.268597][T14885] netlink: 'syz.0.2598': attribute type 1 has an invalid length. [ 322.416473][T14895] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 322.416556][ T5829] Bluetooth: hci4: link tx timeout [ 322.439732][ T5829] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 322.491340][T14892] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 322.548179][T14892] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 322.571916][T14892] bond10: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 322.877120][T14917] C speed is unknown, defaulting to 1000 [ 323.115408][T14925] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.200028][T14929] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.212850][T14929] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.366675][T14925] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.434249][T14954] netlink: 'syz.3.2616': attribute type 75 has an invalid length. [ 323.450258][T14954] netlink: 'syz.3.2616': attribute type 83 has an invalid length. [ 323.496755][T14929] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.556682][T14929] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.660954][T14964] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 323.779850][T14929] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.822456][T14929] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.864021][T14973] __nla_validate_parse: 4 callbacks suppressed [ 323.864039][T14973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2620'. [ 323.870196][T14967] netlink: 'syz.0.2621': attribute type 1 has an invalid length. [ 323.887875][T14967] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2621'. [ 323.905217][T14925] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.919048][T14976] netlink: 'syz.3.2622': attribute type 4 has an invalid length. [ 323.969231][T14972] netlink: 'syz.3.2622': attribute type 4 has an invalid length. [ 324.085210][T14929] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.096987][T14929] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.150622][T14925] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.184317][T14973] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2620'. [ 324.269504][T14984] netlink: 384 bytes leftover after parsing attributes in process `syz.3.2625'. [ 324.332380][T11253] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.450923][T11253] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.471063][T11253] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.505398][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 324.551444][T11253] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.584855][T11253] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.614744][T11253] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.693057][T11253] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.712115][T11253] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.815739][T11253] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.843214][T11253] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.872760][T15020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.920502][T14929] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.967578][T14929] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.034973][T14929] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.046285][T14929] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.150408][T15036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.215355][T14929] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.245116][T14929] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.287842][T15045] IPv6: Can't replace route, no match found [ 325.317860][T15045] IPv6: Can't replace route, no match found [ 325.341431][T15050] syzkaller1: entered promiscuous mode [ 325.360066][T15050] syzkaller1: entered allmulticast mode [ 325.618308][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 325.690005][T15068] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2652'. [ 325.876089][T15082] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2656'. [ 326.145205][T15095] netlink: 'syz.0.2658': attribute type 10 has an invalid length. [ 326.157688][T15095] team0: Device vxcan1 is of different type [ 326.403899][T15108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2663'. [ 326.532928][T15118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2664'. [ 326.558388][T15119] veth0: entered promiscuous mode [ 326.580596][T15117] veth0: left promiscuous mode [ 326.801195][T15129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2669'. [ 326.844244][T15129] delete_channel: no stack [ 327.386102][T15155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2677'. [ 327.466378][T15167] netlink: 'syz.3.2680': attribute type 4 has an invalid length. [ 327.582806][T15175] netlink: 'syz.3.2682': attribute type 2 has an invalid length. [ 327.699182][T15183] syzkaller0: entered promiscuous mode [ 327.704889][T15183] syzkaller0: entered allmulticast mode [ 327.801688][T15189] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 327.929797][T15201] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 328.057119][T15206] sctp: [Deprecated]: syz.3.2689 (pid 15206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.057119][T15206] Use struct sctp_sack_info instead [ 328.775522][T15256] C speed is unknown, defaulting to 1000 [ 328.837297][T15258] netlink: 'syz.3.2705': attribute type 3 has an invalid length. [ 329.296277][T15287] __nla_validate_parse: 6 callbacks suppressed [ 329.296299][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2712'. [ 329.330839][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2712'. [ 329.358537][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2712'. [ 329.368860][T15291] syzkaller0: entered promiscuous mode [ 329.374447][T15291] syzkaller0: entered allmulticast mode [ 329.441122][T15292] netlink: 'syz.0.2712': attribute type 10 has an invalid length. [ 329.464906][T15298] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2716'. [ 329.467527][T15292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.494064][T15292] batadv0: entered promiscuous mode [ 329.500568][T15292] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 329.585269][T15302] af_packet: tpacket_rcv: packet too big, clamped from 4064 to 3952. macoff=96 [ 329.600752][T15302] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2718'. [ 329.734847][T15312] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2720'. [ 329.932642][T15321] syzkaller0: entered promiscuous mode [ 329.940354][T15321] syzkaller0: entered allmulticast mode [ 329.945971][T15322] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.195374][T15333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2728'. [ 330.206249][T15333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2728'. [ 330.256326][T15337] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2730'. [ 330.381935][T15350] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2734'. [ 330.491163][T15343] syzkaller0: entered promiscuous mode [ 330.536364][T15343] syzkaller0: entered allmulticast mode [ 330.673462][T15366] netlink: 'syz.1.2737': attribute type 8 has an invalid length. [ 332.267058][T15404] C speed is unknown, defaulting to 1000 [ 332.800957][T15439] xfrm1: entered promiscuous mode [ 332.832439][T15439] xfrm1: entered allmulticast mode [ 333.217291][T15471] ip6tnl0: Caught tx_queue_len zero misconfig [ 334.001914][T15521] vlan2: entered allmulticast mode [ 334.017735][T15521] gretap0: entered allmulticast mode [ 334.304601][T15540] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20003 [ 334.314221][ T5993] IPVS: starting estimator thread 0... [ 334.330348][T15542] netlink: 'syz.1.2782': attribute type 1 has an invalid length. [ 334.352007][T15543] __nla_validate_parse: 19 callbacks suppressed [ 334.352026][T15543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2782'. [ 334.371588][T15549] sctp: [Deprecated]: syz.3.2784 (pid 15549) Use of int in max_burst socket option. [ 334.371588][T15549] Use struct sctp_assoc_value instead [ 334.409073][T15545] IPVS: using max 33 ests per chain, 79200 per kthread [ 334.535778][T15542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 334.639271][T15564] vlan1: entered allmulticast mode [ 334.644439][T15564] veth0_vlan: entered allmulticast mode [ 334.903517][T15589] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2797'. [ 334.918621][T15584] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 334.941887][T15584] bond4: (slave lo): Enslaving as an active interface with an up link [ 334.963589][T15584] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 335.048876][T15597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2799'. [ 335.333561][T15616] bridge0: port 5(gretap0) entered blocking state [ 335.340168][T15616] bridge0: port 5(gretap0) entered listening state [ 335.346975][T15616] bridge0: port 4(team0) entered blocking state [ 335.353380][T15616] bridge0: port 4(team0) entered listening state [ 335.359999][T15616] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.367160][T15616] bridge0: port 2(bridge_slave_1) entered listening state [ 335.374555][T15616] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.381758][T15616] bridge0: port 1(bridge_slave_0) entered listening state [ 335.410328][T15616] team0: Device batadv3 failed to change mtu [ 335.531351][T15623] syzkaller0: entered promiscuous mode [ 335.536860][T15623] syzkaller0: entered allmulticast mode [ 335.576317][T15623] netem: change failed [ 335.658764][ T106] batman_adv: batadv2: MLD Querier disappeared - multicast optimizations disabled [ 335.976343][T15650] veth1_to_bond: entered allmulticast mode [ 335.986363][T15651] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 335.997666][T15650] veth1_to_bond: left allmulticast mode [ 336.005096][T15650] 8021q: VLANs not supported on gre0 [ 336.366285][T15666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2823'. [ 336.670534][T15679] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2826'. [ 336.915331][T15688] netlink: 'syz.0.2829': attribute type 4 has an invalid length. [ 336.990730][ T5822] Bluetooth: hci4: command 0x0405 tx timeout [ 337.033891][T15683] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2828'. [ 337.355380][T15701] netlink: 'syz.1.2832': attribute type 1 has an invalid length. [ 337.407129][T15704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2832'. [ 337.416408][T15704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2832'. [ 337.550201][T15701] bond5: entered promiscuous mode [ 337.555748][T15701] 8021q: adding VLAN 0 to HW filter on device bond5 [ 337.625800][T15711] bond5: (slave bridge4): making interface the new active one [ 337.635718][T15711] bridge4: entered promiscuous mode [ 337.643304][T15711] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 337.786800][T15729] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2838'. [ 337.820899][T15730] vlan1: left allmulticast mode [ 337.825800][T15730] veth0_vlan: left allmulticast mode [ 337.848157][T15729] netlink: 'syz.3.2838': attribute type 1 has an invalid length. [ 337.848820][T15730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2837'. [ 338.090902][T15751] netlink: 'syz.0.2842': attribute type 58 has an invalid length. [ 338.203625][T15754] 8021q: VLANs not supported on gre0 [ 338.433278][T15763] netlink: 'syz.3.2850': attribute type 1 has an invalid length. [ 338.521400][T15763] bond5: (slave gretap3): making interface the new active one [ 338.556952][T15763] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 338.640329][T15776] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 338.827943][T15787] netlink: 'syz.1.2857': attribute type 2 has an invalid length. [ 339.837416][T15837] netlink: 'syz.3.2862': attribute type 1 has an invalid length. [ 339.846763][T15837] netlink: 'syz.3.2862': attribute type 2 has an invalid length. [ 339.857483][T15837] netlink: 'syz.3.2862': attribute type 1 has an invalid length. [ 339.867337][T15837] netlink: 'syz.3.2862': attribute type 1 has an invalid length. [ 339.876261][T15837] netlink: 'syz.3.2862': attribute type 2 has an invalid length. [ 339.884543][T15837] netlink: 'syz.3.2862': attribute type 1 has an invalid length. [ 339.994053][T15843] __nla_validate_parse: 2 callbacks suppressed [ 339.994066][T15843] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2863'. [ 340.049592][T15840] : renamed from hsr0 (while UP) [ 340.055997][T15840] : failed to rename [ 340.261969][T15861] netlink: 'syz.0.2869': attribute type 11 has an invalid length. [ 340.270722][T15851] bond6: (slave vlan0): Error -34 calling dev_set_mtu [ 340.278592][T15851] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 340.375721][T15866] syzkaller0: entered promiscuous mode [ 340.381380][T15866] syzkaller0: entered allmulticast mode [ 340.400199][T15861] netlink: 'syz.0.2869': attribute type 10 has an invalid length. [ 340.408132][T15861] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2869'. [ 340.494274][T15874] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 340.515615][T15874] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.527656][T15874] bridge_slave_0 (unregistering): left promiscuous mode [ 340.535682][T15874] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.557459][T15873] syzkaller0: entered promiscuous mode [ 340.563257][T15873] syzkaller0: entered allmulticast mode [ 340.568627][T15880] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 340.690596][T15888] netlink: 'syz.0.2875': attribute type 2 has an invalid length. [ 341.175572][T15914] netlink: 'syz.3.2882': attribute type 21 has an invalid length. [ 341.185700][T15914] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2882'. [ 341.748298][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2891'. [ 341.889742][T15946] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2892'. [ 342.100076][T15961] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 342.311865][T15979] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2902'. [ 342.387531][T15983] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 342.417005][T15985] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 342.518976][T15987] x_tables: duplicate underflow at hook 1 [ 342.671467][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.689051][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.701041][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.716996][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.725076][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.733527][T15993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2908'. [ 342.940009][T15992] C speed is unknown, defaulting to 1000 [ 343.388319][T15992] chnl_net:caif_netlink_parms(): no params data found [ 343.519831][T16042] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .Ìg‰‚MaŒ³7.b¬¢‚Žôÿÿÿÿÿÿÿè‘ [ 343.682122][T15992] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.690280][T15992] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.697847][T15992] bridge_slave_0: entered allmulticast mode [ 343.709706][T15992] bridge_slave_0: entered promiscuous mode [ 343.721462][T15992] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.729389][T15992] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.742565][T15992] bridge_slave_1: entered allmulticast mode [ 343.750972][T15992] bridge_slave_1: entered promiscuous mode [ 343.807824][T15992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.836494][T15992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.903651][T15992] team0: Port device team_slave_0 added [ 343.914363][T16056] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2925'. [ 343.925052][T15992] team0: Port device team_slave_1 added [ 343.953092][T16056] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2925'. [ 343.979480][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2927'. [ 343.979803][T15992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.008341][T15992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.040051][T15992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.110074][T15992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.121100][T15992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.147430][T15992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.354298][T15992] hsr_slave_0: entered promiscuous mode [ 344.361061][T15992] hsr_slave_1: entered promiscuous mode [ 344.367544][T15992] debugfs: 'hsr0' already exists in 'hsr' [ 344.373979][T15992] Cannot create hsr debugfs directory [ 344.576249][T16079] vlan2: entered allmulticast mode [ 344.590680][T16079] bridge5: entered allmulticast mode [ 344.602835][T16078] bridge5: port 1(erspan0) entered blocking state [ 344.617110][T16078] bridge5: port 1(erspan0) entered disabled state [ 344.655755][T16078] erspan0: entered allmulticast mode [ 344.676359][T16078] erspan0: entered promiscuous mode [ 344.691626][T16078] bridge5: port 1(erspan0) entered blocking state [ 344.698262][T16078] bridge5: port 1(erspan0) entered forwarding state [ 344.759540][T16082] bridge0: port 1(gretap0) entered blocking state [ 344.766236][T16082] bridge0: port 1(gretap0) entered disabled state [ 344.773503][T16082] gretap0: entered allmulticast mode [ 344.796949][T16082] gretap0: entered promiscuous mode [ 344.818158][ T5829] Bluetooth: hci5: command tx timeout [ 344.950633][T16102] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 345.092295][T15992] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.129480][T15992] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.168961][T16115] __nla_validate_parse: 5 callbacks suppressed [ 345.168977][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2943'. [ 345.192929][T16109] can: request_module (can-proto-0) failed. [ 345.358727][T15992] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.377451][T15992] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.469276][T16128] gre0: entered promiscuous mode [ 345.476200][T16128] gre0: entered allmulticast mode [ 345.496234][T16129] ip6gre1: entered promiscuous mode [ 345.508166][T16129] ip6gre1: entered allmulticast mode [ 345.645443][T15992] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.683693][T15992] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.766685][T16136] netlink: 'syz.2.2950': attribute type 1 has an invalid length. [ 345.785302][T16147] netlink: zone id is out of range [ 345.801844][T16136] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2950'. [ 345.811311][T16147] netlink: zone id is out of range [ 345.818959][T16147] netlink: zone id is out of range [ 345.825663][T16147] netlink: zone id is out of range [ 345.836454][T15992] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.839659][T16147] netlink: zone id is out of range [ 345.853089][T16147] netlink: zone id is out of range [ 345.859235][T16147] netlink: zone id is out of range [ 345.863314][T15992] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.887371][T16147] netlink: zone id is out of range [ 345.892952][T16147] netlink: zone id is out of range [ 345.898239][T16147] netlink: zone id is out of range [ 346.138408][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2957'. [ 346.271709][T15992] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 346.304529][T15992] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 346.330812][T15992] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 346.357349][T15992] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 346.515772][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2967'. [ 346.606476][T16196] x_tables: unsorted underflow at hook 1 [ 346.630151][T15992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.660976][T15992] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.693091][T11253] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.700301][T11253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.721677][T16209] netlink: 'syz.2.2970': attribute type 22 has an invalid length. [ 346.733288][T16208] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.2969'. [ 346.733847][T11253] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.748184][T16209] netlink: 'syz.2.2970': attribute type 23 has an invalid length. [ 346.749768][T11253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.764430][T16209] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2970'. [ 346.834665][T15992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.886979][T16212] netlink: 'syz.0.2971': attribute type 1 has an invalid length. [ 346.908586][ T5829] Bluetooth: hci5: command tx timeout [ 346.927142][T16215] nbd: must specify an index to disconnect [ 347.013492][T16212] 8021q: adding VLAN 0 to HW filter on device bond13 [ 347.034656][T16218] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 347.194190][T16224] bond13: entered promiscuous mode [ 347.200295][T16224] bond13: entered allmulticast mode [ 347.219909][T16229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2973'. [ 347.229640][T16229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2973'. [ 347.239377][T16229] netlink: 'syz.4.2973': attribute type 12 has an invalid length. [ 347.247278][T16229] netlink: 'syz.4.2973': attribute type 11 has an invalid length. [ 347.485436][T15992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.636657][T16252] netlink: 'syz.4.2979': attribute type 13 has an invalid length. [ 347.651842][T16247] syzkaller0: entered promiscuous mode [ 347.657960][T16247] syzkaller0: entered allmulticast mode [ 347.735317][T16252] gretap0: refused to change device tx_queue_len [ 347.830521][T16254] netlink: 'syz.0.2981': attribute type 1 has an invalid length. [ 347.948745][T16265] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2981'. [ 348.965737][T15992] veth0_vlan: entered promiscuous mode [ 348.984232][ T5829] Bluetooth: hci5: command tx timeout [ 349.025425][T15992] veth1_vlan: entered promiscuous mode [ 349.066560][T15992] veth0_macvtap: entered promiscuous mode [ 349.133944][T15992] veth1_macvtap: entered promiscuous mode [ 349.176506][T16281] xt_hashlimit: size too large, truncated to 1048576 [ 349.185829][T16278] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2986'. [ 349.222975][T15992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.270432][T15992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.316622][ T8078] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.383648][ T8078] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.419537][ T8078] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.432740][ T8078] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.496755][T16291] netlink: 'syz.1.2990': attribute type 32 has an invalid length. [ 349.522731][T16296] netlink: 'syz.2.2993': attribute type 27 has an invalid length. [ 349.575750][T16300] xt_hashlimit: size too large, truncated to 1048576 [ 349.614151][T16296] team_slave_0: left promiscuous mode [ 349.640146][T16296] gretap1: left promiscuous mode [ 349.677145][T16296] bond1: left promiscuous mode [ 349.707140][T16296] macvtap1: left promiscuous mode [ 349.720056][T16296] bond2: left promiscuous mode [ 349.732073][T16296] bridge1: left promiscuous mode [ 349.746891][T16296] vlan2: left promiscuous mode [ 349.751987][T16296] bond3: left promiscuous mode [ 349.757847][T16296] bond4: left promiscuous mode [ 349.763920][T16296] gtp0: left promiscuous mode [ 349.770912][T16296] bond7: left promiscuous mode [ 349.775674][T16296] bridge5: left promiscuous mode [ 349.783071][T16296] bridge6: left promiscuous mode [ 349.789878][T16296] vlan3: left promiscuous mode [ 349.794729][T16296] bridge0: left promiscuous mode [ 349.801593][T16296] hsr1: left promiscuous mode [ 349.834950][T16302] bond14: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 349.855195][T16302] bond14: (slave lo): Enslaving as an active interface with an up link [ 349.979108][ T8070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.997687][ T8070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.044288][T11253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.053738][T11253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.433870][T16334] xt_socket: unknown flags 0xe4 [ 350.501474][T16339] syzkaller0: entered promiscuous mode [ 350.509631][T16339] syzkaller0: entered allmulticast mode [ 350.520695][T16340] syz.3.3003: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 350.553540][T16340] CPU: 1 UID: 0 PID: 16340 Comm: syz.3.3003 Not tainted syzkaller #0 PREEMPT(full) [ 350.553569][T16340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 350.553582][T16340] Call Trace: [ 350.553589][T16340] [ 350.553596][T16340] dump_stack_lvl+0xe8/0x150 [ 350.553639][T16340] warn_alloc+0x249/0x340 [ 350.553663][T16340] ? stack_trace_save+0xa9/0x100 [ 350.553688][T16340] ? __pfx_warn_alloc+0x10/0x10 [ 350.553716][T16340] ? kasan_save_track+0x4f/0x80 [ 350.553734][T16340] ? kasan_save_track+0x3e/0x80 [ 350.553749][T16340] ? __kasan_kmalloc+0x93/0xb0 [ 350.553767][T16340] ? __kmalloc_cache_noprof+0x31c/0x660 [ 350.553787][T16340] ? xskq_create+0x56/0x170 [ 350.553813][T16340] ? xsk_setsockopt+0x54c/0x990 [ 350.553837][T16340] ? do_sock_setsockopt+0x17c/0x1b0 [ 350.553866][T16340] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 350.553892][T16340] ? do_syscall_64+0x14d/0xf80 [ 350.553913][T16340] __vmalloc_node_range_noprof+0x132/0x1730 [ 350.553966][T16340] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 350.553994][T16340] ? __kasan_kmalloc+0x93/0xb0 [ 350.554023][T16340] vmalloc_user_noprof+0xad/0xe0 [ 350.554045][T16340] ? xskq_create+0xbf/0x170 [ 350.554072][T16340] xskq_create+0xbf/0x170 [ 350.554101][T16340] xsk_init_queue+0x8a/0xe0 [ 350.554129][T16340] xsk_setsockopt+0x54c/0x990 [ 350.554156][T16340] ? __pfx_xsk_setsockopt+0x10/0x10 [ 350.554180][T16340] ? __pfx_aa_sk_perm+0x10/0x10 [ 350.554207][T16340] ? aa_sock_opt_perm+0xff/0x1a0 [ 350.554235][T16340] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 350.554257][T16340] ? __pfx_xsk_setsockopt+0x10/0x10 [ 350.554283][T16340] do_sock_setsockopt+0x17c/0x1b0 [ 350.554319][T16340] __x64_sys_setsockopt+0x13d/0x1b0 [ 350.554355][T16340] do_syscall_64+0x14d/0xf80 [ 350.554374][T16340] ? trace_irq_disable+0x3b/0x150 [ 350.554402][T16340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.554423][T16340] ? clear_bhb_loop+0x40/0x90 [ 350.554447][T16340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.554467][T16340] RIP: 0033:0x7f5a4dd9c799 [ 350.554487][T16340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.554504][T16340] RSP: 002b:00007f5a4ec29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 350.554526][T16340] RAX: ffffffffffffffda RBX: 00007f5a4e016090 RCX: 00007f5a4dd9c799 [ 350.554541][T16340] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 350.554553][T16340] RBP: 00007f5a4de32c99 R08: 0000000000000004 R09: 0000000000000000 [ 350.554569][T16340] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.554582][T16340] R13: 00007f5a4e016128 R14: 00007f5a4e016090 R15: 00007fff930dd5d8 [ 350.554616][T16340] [ 350.556358][T16340] Mem-Info: [ 350.867770][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 350.878156][T16340] active_anon:6035 inactive_anon:0 isolated_anon:0 [ 350.878156][T16340] active_file:3410 inactive_file:40037 isolated_file:0 [ 350.878156][T16340] unevictable:768 dirty:59 writeback:0 [ 350.878156][T16340] slab_reclaimable:12159 slab_unreclaimable:107349 [ 350.878156][T16340] mapped:30507 shmem:1363 pagetables:1217 [ 350.878156][T16340] sec_pagetables:0 bounce:0 [ 350.878156][T16340] kernel_misc_reclaimable:0 [ 350.878156][T16340] free:1297344 free_pcp:8712 free_cma:0 [ 350.898116][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 350.930504][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 350.937717][ C1] bridge0: port 4(team0) entered learning state [ 350.944168][ C1] bridge0: port 5(gretap0) entered learning state [ 350.958686][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 350.967404][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 350.976445][T16340] Node 0 active_anon:24140kB inactive_anon:0kB active_file:13640kB inactive_file:159948kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122028kB dirty:236kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14732kB pagetables:4536kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 351.009380][T16340] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 351.043409][T16340] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.051590][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.082601][ T5822] Bluetooth: hci5: command tx timeout [ 351.088470][T16340] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 351.100612][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 351.107457][T16340] Node 0 DMA32 free:1224212kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24140kB inactive_anon:0kB active_file:13640kB inactive_file:159948kB unevictable:1536kB writepending:236kB zspages:0kB present:3129332kB managed:2552764kB mlocked:0kB bounce:0kB free_pcp:36248kB local_pcp:16936kB free_cma:0kB [ 351.107886][T10903] ================================================================== [ 351.143468][T16340] lowmem_reserve[]: [ 351.148918][T10903] BUG: KASAN: use-after-free in __mutex_lock+0x812/0x1300 [ 351.148945][T10903] Read of size 8 at addr ffff88803386c0a8 by task khidpd_04f55504/10903 [ 351.148960][T10903] [ 351.148969][T10903] CPU: 1 UID: 0 PID: 10903 Comm: khidpd_04f55504 Not tainted syzkaller #0 PREEMPT(full) [ 351.148988][T10903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 351.148998][T10903] Call Trace: [ 351.149005][T10903] [ 351.149014][T10903] dump_stack_lvl+0xe8/0x150 [ 351.149038][T10903] print_report+0xba/0x230 [ 351.149058][T10903] ? __mutex_lock+0x812/0x1300 [ 351.149074][T10903] kasan_report+0x117/0x150 [ 351.149096][T10903] ? __mutex_lock+0x812/0x1300 [ 351.149115][T10903] __mutex_lock+0x812/0x1300 [ 351.149134][T10903] ? __mutex_lock+0x5ac/0x1300 [ 351.149152][T10903] ? l2cap_unregister_user+0x6a/0x1b0 [ 351.149173][T10903] ? __pfx___mutex_lock+0x10/0x10 [ 351.149194][T10903] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 351.149217][T10903] ? lockdep_hardirqs_on+0x7a/0x110 [ 351.149233][T10903] l2cap_unregister_user+0x6a/0x1b0 [ 351.149252][T10903] hidp_session_thread+0x3cb/0x440 [ 351.149274][T10903] ? __pfx_hidp_session_thread+0x10/0x10 [ 351.149293][T10903] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 351.149315][T10903] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 351.149335][T10903] ? __kthread_parkme+0x7a/0x1f0 [ 351.149363][T10903] ? __kthread_parkme+0x19c/0x1f0 [ 351.149388][T10903] kthread+0x388/0x470 [ 351.149404][T10903] ? __pfx_hidp_session_thread+0x10/0x10 [ 351.149421][T10903] ? __pfx_kthread+0x10/0x10 [ 351.149438][T10903] ret_from_fork+0x51e/0xb90 [ 351.149460][T10903] ? __pfx_ret_from_fork+0x10/0x10 [ 351.149480][T10903] ? __switch_to+0xc7d/0x1450 [ 351.149499][T10903] ? __pfx_kthread+0x10/0x10 [ 351.149515][T10903] ret_from_fork_asm+0x1a/0x30 [ 351.149546][T10903] [ 351.149553][T10903] [ 351.152773][T16340] 0 [ 351.159853][T10903] The buggy address belongs to the physical page: [ 351.159874][T10903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803386c000 pfn:0x3386c [ 351.159891][T10903] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 351.159911][T10903] raw: 00fff00000000000 ffffea000172de08 ffff8880b8640c40 0000000000000000 [ 351.159925][T10903] raw: ffff88803386c000 0000000000000000 00000000ffffffff 0000000000000000 [ 351.159933][T10903] page dumped because: kasan: bad access detected [ 351.159953][T10903] page_owner tracks the page as freed [ 351.159959][T10903] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 5832, tgid 5832 (syz-executor), ts 65930604393, free_ts 351103403172 [ 351.168394][T16340] 0 [ 351.170580][T10903] post_alloc_hook+0x231/0x280 [ 351.411220][T10903] get_page_from_freelist+0x24dc/0x2580 [ 351.416770][T10903] __alloc_frozen_pages_noprof+0x18d/0x380 [ 351.422568][T10903] alloc_pages_mpol+0x232/0x4a0 [ 351.427413][T10903] ___kmalloc_large_node+0x4e/0x150 [ 351.432600][T10903] __kmalloc_large_node_noprof+0x18/0x90 [ 351.438220][T10903] __kmalloc_noprof+0x3e8/0x760 [ 351.443057][T10903] hci_alloc_dev_priv+0x28/0x2060 [ 351.448065][T10903] vhci_create_device+0x120/0x650 [ 351.453081][T10903] vhci_write+0x3ce/0x4a0 [ 351.457396][T10903] vfs_write+0x61d/0xb90 [ 351.461620][T10903] ksys_write+0x150/0x270 [ 351.465934][T10903] do_syscall_64+0x14d/0xf80 [ 351.470508][T10903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.476397][T10903] page last free pid 5832 tgid 5832 stack trace: [ 351.482714][T10903] __free_frozen_pages+0xc2b/0xdb0 [ 351.487822][T10903] bt_host_release+0x82/0x90 [ 351.492403][T10903] device_release+0x9e/0x1d0 [ 351.496985][T10903] kobject_put+0x228/0x560 [ 351.501396][T10903] vhci_release+0x15a/0x1a0 [ 351.505892][T10903] __fput+0x44f/0xa70 [ 351.509871][T10903] task_work_run+0x1d9/0x270 [ 351.514449][T10903] do_exit+0x70f/0x23c0 [ 351.518588][T10903] do_group_exit+0x21b/0x2d0 [ 351.523162][T10903] get_signal+0x1284/0x1330 [ 351.527648][T10903] arch_do_signal_or_restart+0xbc/0x830 [ 351.533179][T10903] exit_to_user_mode_loop+0x86/0x480 [ 351.538452][T10903] do_syscall_64+0x32d/0xf80 [ 351.543024][T10903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.548904][T10903] [ 351.551210][T10903] Memory state around the buggy address: [ 351.556820][T10903] ffff88803386bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 351.564879][T10903] ffff88803386c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 351.572923][T10903] >ffff88803386c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 351.580963][T10903] ^ [ 351.586314][T10903] ffff88803386c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 351.594358][T10903] ffff88803386c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 351.602413][T10903] ================================================================== [ 351.611891][T10903] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 351.619112][T10903] CPU: 1 UID: 0 PID: 10903 Comm: khidpd_04f55504 Not tainted syzkaller #0 PREEMPT(full) [ 351.628905][T10903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 351.638944][T10903] Call Trace: [ 351.642217][T10903] [ 351.645137][T10903] vpanic+0x56c/0xa60 [ 351.649124][T10903] ? __pfx_vpanic+0x10/0x10 [ 351.653618][T10903] panic+0xc5/0xd0 [ 351.657325][T10903] ? __pfx_panic+0x10/0x10 [ 351.661731][T10903] ? __mutex_lock+0x812/0x1300 [ 351.666483][T10903] ? __mutex_lock+0x812/0x1300 [ 351.671236][T10903] check_panic_on_warn+0x89/0xb0 [ 351.676167][T10903] ? __mutex_lock+0x812/0x1300 [ 351.680917][T10903] end_report+0x73/0x180 [ 351.685148][T10903] ? __mutex_lock+0x812/0x1300 [ 351.689897][T10903] kasan_report+0x128/0x150 [ 351.694403][T10903] ? __mutex_lock+0x812/0x1300 [ 351.699153][T10903] __mutex_lock+0x812/0x1300 [ 351.703729][T10903] ? __mutex_lock+0x5ac/0x1300 [ 351.708479][T10903] ? l2cap_unregister_user+0x6a/0x1b0 [ 351.713844][T10903] ? __pfx___mutex_lock+0x10/0x10 [ 351.718859][T10903] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 351.724656][T10903] ? lockdep_hardirqs_on+0x7a/0x110 [ 351.729839][T10903] l2cap_unregister_user+0x6a/0x1b0 [ 351.735035][T10903] hidp_session_thread+0x3cb/0x440 [ 351.740133][T10903] ? __pfx_hidp_session_thread+0x10/0x10 [ 351.745751][T10903] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 351.751979][T10903] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 351.758207][T10903] ? __kthread_parkme+0x7a/0x1f0 [ 351.763134][T10903] ? __kthread_parkme+0x19c/0x1f0 [ 351.768162][T10903] kthread+0x388/0x470 [ 351.772225][T10903] ? __pfx_hidp_session_thread+0x10/0x10 [ 351.777839][T10903] ? __pfx_kthread+0x10/0x10 [ 351.782412][T10903] ret_from_fork+0x51e/0xb90 [ 351.786990][T10903] ? __pfx_ret_from_fork+0x10/0x10 [ 351.792086][T10903] ? __switch_to+0xc7d/0x1450 [ 351.796746][T10903] ? __pfx_kthread+0x10/0x10 [ 351.801319][T10903] ret_from_fork_asm+0x1a/0x30 [ 351.806077][T10903] [ 351.809347][T10903] Kernel Offset: disabled [ 351.813681][T10903] Rebooting in 86400 seconds..