last executing test programs: 4.52335144s ago: executing program 1 (id=2275): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket(0x2a, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2e, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xfff8}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) socket(0x400000000010, 0x3, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) unshare(0x20000400) (async) unshare(0x20000400) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) accept4(r6, 0x0, 0x0, 0x800) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) 3.880016242s ago: executing program 2 (id=2279): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 3.763811127s ago: executing program 2 (id=2280): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x8, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x1973, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x3, 0x8}, 0x0, 0x6e6bb7, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x81}, {{@in=@empty, 0x4d6, 0x6c}, 0x2, @in=@multicast1, 0x34fe, 0x0, 0x0, 0x0, 0x0, 0x9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x8000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000380)) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0xd}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x26000880}, 0x80844) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="b40200000000000061174c0000000000850000002700000095000000000000004322207f5b9d680874e8dc8c5c9265ced41417862555b50684ce84a7fce1574510ed6540e18e2e0084f0c2c73e11a3e87bb9ee8ed3b5d1657d812d72020d79845c5c0989466b84d54188a25ddd3061579031a74f2018f54e4f66ee29f734df89a483d1561d7c86c1a95fd83fe4395615f4eda249c5702d03208822b1f508fb3ea04aeb85b4d61df6786b"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa22daa36caaaa86dd606410a600080001fe800000000000000000000000000012000000000000000000000000000000013200010400000010"], 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000003c0)={'nat\x00', 0x0, [0x1, 0xfffffeae, 0xb, 0xffffffff, 0x9]}, &(0x7f0000000440)=0x54) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 3.141966527s ago: executing program 4 (id=2283): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r2, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a00)={0x114, 0x30, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x8}}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @NFULA_CFG_MODE={0xa, 0x2, {0xfffff458}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_emit_ethernet(0x256, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9202203afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000030aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df"], 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) 2.893970716s ago: executing program 1 (id=2284): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000200)={0x80}) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r0, 0x0) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x64, r4, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x0) 2.531524049s ago: executing program 1 (id=2285): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="30cda2339d2ca36754", @ANYRES16=r1, @ANYBLOB="010026bd7000eedbdf25230000000a0001007770616e3100000005002700010000000500260008000000"], 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x8c4) 2.47023057s ago: executing program 1 (id=2287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, 0x0, &(0x7f0000000000)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x10, 0x700, 0x2, 0x47da, {{0x11, 0x4, 0x0, 0x2d, 0x44, 0x66, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@end, @generic={0x83, 0xd, "7d98a7e189020c2142d2b9"}, @rr={0x7, 0xf, 0x3a, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @timestamp={0x44, 0x10, 0xff, 0x0, 0xc, [0x6, 0x7, 0xf]}]}}}}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = getuid() getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000300)=0xfffffeae) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000100)=r4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYRES8=r6, @ANYRES32=r4, @ANYRES32=r5, @ANYRES8, @ANYRES16, @ANYBLOB="0400a78004005b80afcba5eb99c1238f1d051eff38c560d7f2db24565cc66642889f3d36cdf9a37eb11250c14fa7db24b15ed9b94d9e62a15be70491208f76c7396bb4412d4950d47aca7152da8ad7da210631dc64eb4b377118a5a4ebaf2f312b72e1da1a3574fd62bd4c0177808a67b6606d57a56fb7d4b59bdc3d7a7d3007c3ce37d499dd57ce08284a344ef9e97cb9ea94b154953c5dbf356cc1c59e3890ff49a053c755f660844f3004c50da79fb4e9c5cd49510700607fd7bf23b3e3274d0ea3cd5ed90e7a476132da6b29cc3ff445a58a95ac18015c92ad04834b7bf1ddcc8eb334140f0d7108e3ed7d8b4183a0f963268d94a583b2fde4f644fa79d39d5f4dfb858099bc3904f62bf46234936bc142daddb16245e1c64cdc221028e9ee37ff29a2616a261644d0cfbc180c65a4425d182ce7098960a6ee1268f64130bfbaa4a7d9cf1c50a2120c00300003000000000000005277d90b6f1d8c4c3a061f942fa76addb249f08ed643d962cb1856be24e0d038b3291aea3ad189c12ea899b30e19c0f34f3cb0fae6b460faae148719cfd77b32365ba8e997dc01f0b067e830998e3c84080029002727", @ANYRES32=r7, @ANYRESDEC], 0x250}, 0x1, 0x0, 0x0, 0x4048855}, 0x4000851) getpeername$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=@polexpire={0x30c, 0x1b, 0x200, 0x70bd25, 0x25dfdbfd, {{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x0, 0x4e22, 0x8, 0x2, 0x80, 0xa0, 0xf, r4, r7}, {0x7ffffffe, 0x80000000, 0x8, 0x9, 0x6, 0x100000001, 0x800, 0x6}, {0x2a3, 0x4, 0x3}, 0x9, 0x0, 0x2, 0x0, 0x1, 0x1}}, [@coaddr={0x14, 0xe, @in6=@rand_addr=' \x01\x00'}, @address_filter={0x28, 0x1a, {@in=@rand_addr=0x64010100, @in6=@loopback, 0x2, 0xc, 0x8}}, @extra_flags={0x8, 0x18, 0x9}, @tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0xc}, 0x4d6, 0x2b}, 0x2, @in=@local, 0x3500, 0x4, 0x2, 0x2, 0xe, 0x9, 0xffffffff}]}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd27, 0x70bd2c, 0x70bd2a, 0x70bd27, 0xa, [0x7ff, 0x4, 0x12]}}, @algo_crypt={0xb8, 0x2, {{'chacha20-generic\x00'}, 0x380, "8580b1fe24e56530ca273b50ff44553ed0a1a4bb732c40aefc48a9c26b32709121d6fd0e082f19fa39e7365db11d48227c3b62ebe6a8ef13f85a7c2af0a98fb645aa8420569b4297eaf6c682a6dffce16bf908e86a9fbbd8df5fd74c27f75de7fdea5838ac24ca1d4798f9fa862d8bc9"}}, @sa={0xe4, 0x6, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x80, 0xe0, 0x5c, r8}, {@in6=@mcast2, 0x4d2, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x10}, {0x3, 0xa8ea, 0xe930, 0xffff, 0xbcde, 0xd66, 0x7f, 0x1ff}, {0x7, 0x0, 0x3ff, 0x2}, {0xdc500000, 0x3, 0x1}, 0x70bd2d, 0x3506, 0x10, 0x4, 0x5, 0xc0}}]}, 0x30c}}, 0x4c094) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r9 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$netlink(0x10, 0x3, 0x15) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000035390000560000022500000019000a00100000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010010000000ffdbdf2500000000", @ANYRES32=r13, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000f0002000000080005"], 0x44}}, 0x0) close(0x4) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0x70bd2a, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}}, 0x0) 2.171261575s ago: executing program 2 (id=2289): recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)=@llc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/157, 0x9d}, {&(0x7f0000000140)=""/104, 0x68}, {&(0x7f00000001c0)=""/212, 0xd4}, {&(0x7f00000002c0)=""/252, 0xfc}], 0x4, &(0x7f0000000400)=""/98, 0x62}, 0x2140) r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f00000004c0)="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") r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001500)=@o_path={&(0x7f00000014c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x185000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000015c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000001680)={0xfffffffffffffffd, 0x0, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r3, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000001840)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4224}, 0xc, &(0x7f0000001800)={&(0x7f0000001700)={0xe4, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x51, 0xa8, @random="e4d347ddfa4114bc2a617612d22c2132f11ab482ba502490336deb0b796f031bfc5e13b10f11d1dd4be542b64b0b1e4130b925c663cce5329e1982db35e887815449d779f80fdac020c9499489"}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x4) pipe(&(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001900), r5) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000002b00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000001940)={0x1154, r8, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10f0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe4, 0x3, "9063bb0f2bc47b5a5fc7d350712cdd468c7a43a660a215c87f1ed3755ffd5e6f1bdf3a0f682a00fa365713c168b205a956e723263f60d77f872dc80db9c782672620802d2899f52de7c6c69ab3fa7618d16473a111719e54025a2e6d97512009d8b4a90696ff05abc5f5475b332b48d177748e10166c36753207366237652502c7ea5a07062bf6f08ba45d3bee670c033de335830170d7ab6883b30e5de8147280b3bd9d869f0b9da233d11ff0dfd6de4c485967f69a6fd71835918d65dd8cf8d5330fd1e6a5bef6b6c0719c753af7cdc48ac3f19a75b7d87d462bf535424314"}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}]}, 0x1154}, 0x1, 0x0, 0x0, 0x40}, 0x16844) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b80), r6) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000002d40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002bc0)={0x124, r11, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x4891) r12 = socket(0xb, 0x80000, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x40010, r1, 0x1cb42000) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r12, 0x84, 0x74, &(0x7f0000002d80)=""/89, &(0x7f0000002e00)=0x59) clock_gettime(0x0, &(0x7f0000002f00)={0x0, 0x0}) pselect6(0x40, &(0x7f0000002e40)={0x0, 0x4, 0x1f7a, 0x3, 0x80, 0x4, 0xbcbd, 0x5e}, &(0x7f0000002e80)={0x0, 0x9, 0x9f7c, 0x7, 0x400, 0x9, 0x8, 0x1a74000}, &(0x7f0000002ec0)={0x11113e9d, 0x4, 0x5, 0x40, 0xe, 0x1, 0x7fffffff, 0x7}, &(0x7f0000002f40)={r13, r14+10000000}, &(0x7f0000002fc0)={&(0x7f0000002f80)={[0x6]}, 0x8}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000003000)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000003040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000003440)={0x0, 0x9, 0x8d, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000003840)={0x0, 0x7}) ioctl$BTRFS_IOC_BALANCE_V2(r10, 0xc4009420, &(0x7f0000003c40)={0x2, 0x8, {0x10001, @usage=0x4, r15, 0x57a2, 0x9, 0xf7, 0x38000, 0x800, 0x28, @struct={0x2, 0x8ee}, 0xfffffff7, 0x56, [0xffffffffffffffff, 0x1, 0xffff, 0x2, 0x8, 0x6]}, {0x3824, @usage=0x1, r16, 0x5, 0x65d, 0x5, 0x8000000000000001, 0x7, 0x4b2, @usage=0x40, 0x7, 0xb5a, [0x7ff, 0xc009, 0x1000, 0x9, 0x1, 0x7]}, {0xfffffffffffffffc, @struct={0x0, 0x3}, r17, 0x229c, 0x5, 0x82, 0x8, 0x70123141, 0x0, @struct={0x2, 0x401}, 0x401, 0x2, [0x2, 0x2, 0xc, 0x2, 0xfffffffffffffbe6, 0x2]}, {0x8, 0x7c, 0x2}}) bpf$LINK_DETACH(0x22, &(0x7f0000004040)=r7, 0x4) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000004180)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004140)={&(0x7f00000040c0)={0x60, 0x1405, 0x800, 0x70bd2b, 0x25dfdbfb, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x10) 2.018907891s ago: executing program 3 (id=2290): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ff010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000000f00000000000000b7030000000000008500000005000000bf09000000000000650901000000000066000000ffffff80180100002020702500000005002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b70300000900000056000000060000002c93000000000000b5030000000000008500000076000000af0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) 1.977834095s ago: executing program 4 (id=2291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800c00021e00000000000000030c0011400000000000000101080004400000000108"], 0xc0}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xa289d000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb0ff}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0x2e, 0x0, &(0x7f0000000480)="b907e219edfff00702000ff0888ef384ae5f38a67cd8850996004a4556ab811ee900"/46, 0x0, 0x7, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.90773634s ago: executing program 0 (id=2292): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff0000000004000000c31800000001000095"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x69}, 0x94) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x8, {[@md5sig={0x13, 0x12, "345f8cf949a01b515682f44cecac91ba"}, @md5sig={0x1d, 0x2, "d2b653e0c9d32072c19dd6ca814b7d7b"}]}}}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="9500000000000000000000000000550000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}, 0x1, 0x0, 0x0, 0xc010}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x1, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0x987, 0x200ff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xdb7dd256967c7126}]}}}]}, 0x70}}, 0x4000080) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000e80)=0x0, &(0x7f0000000ec0)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000f00)={0x154, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x154}}, 0x24041000) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001180)={{r4}, &(0x7f0000001100), &(0x7f0000001140)='%pS \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) (async) unshare(0x22020400) (async) ioctl$sock_SIOCDELDLCI(r7, 0x8981, &(0x7f0000000400)={'vlan0\x00', 0x7ff}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r7) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r8, 0xea63065cfeb7eedb, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x808) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') read(r9, &(0x7f0000000200)=""/196, 0xc4) 1.775965499s ago: executing program 1 (id=2293): r0 = epoll_create1(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0x0, 0x9}, {0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x21, 0x7}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4080) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) r5 = socket(0x1, 0x80802, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r6, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xfeffffff, 0xf0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x4, 0x2, 0xf}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000], 0x0, 0x4}}}, @common=@unspec=@connlabel={{0x28}, {0x6, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast1, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) unshare(0x20380) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r9, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r9, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000040)={0x7, 0x7, 0xc, 0x9, 0x0, 0xc, 0x4, 0x6, 0x8, 0x2, 0xa1, 0x4, 0x3, 0x80}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b1600000000000000000200000838000480340001800b0001006e756d67656e00002400028000000240fffffff80800014000000016080003400000000008000440ffffffff0900010073797a30000000000900020073797a32000000001400000011000100000000000000006813000000"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1.775505323s ago: executing program 3 (id=2294): r0 = socket(0x23, 0x80002, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) write(r1, 0x0, 0x0) (async) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000000)={0x8000, 0x9, 0x4, 0xed2, 0x4}) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f00000000c0)=0x2, 0x4) (async) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0x4000) (async) syz_genetlink_get_family_id$team(&(0x7f0000000500), r0) 1.662472017s ago: executing program 4 (id=2295): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x18, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x18, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1.523135821s ago: executing program 0 (id=2296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x18}}, 0x20008020) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x50) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg$sock(r5, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x3) (async) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x48, 0xff, 0xe0, 0x6a91}, {0x6, 0x60, 0x0, 0x8}]}) (async) write$ppp(r4, &(0x7f0000000300)="5af9", 0x2) (async) mmap(&(0x7f0000022000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x18b6f000) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000014000000000000000018000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd372be5a6e5ac7d7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bind(r0, &(0x7f0000000240)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @private1, 0x2}}, 0x80) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r6, r9}, 0x14) (async) syz_emit_ethernet(0xd81, &(0x7f00000017c0)=ANY=[], 0x0) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000b80)={0x3, 0x5, 0xe6, &(0x7f0000000a80)=""/230}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029"], 0x18}, 0x4000010) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.440060468s ago: executing program 3 (id=2297): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x600) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "00e1ffffff00", "5985e81ad0d9585bc175cbecd3f55eb699e3ee0bc206f3ba527c85bde06fbf19", '\x00', '\x00\x00\x00\f\x00'}, 0x38) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x4, &(0x7f0000000300)=@ccm_128={{0x303}, "f83dd59aa90caff1", "74bc2f737a3a8bc88bb408f0a0e5920c", "31810fbb", "599e295e09ddac3d"}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3, 0xffffffffffffffff, 0x60ff}, 0xc) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbee, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x1}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x8c4) 1.422831119s ago: executing program 2 (id=2298): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="040027bd7000fcdbdf2505"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20004810) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000001c0), &(0x7f0000000240)=r3}, 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c"], 0xfdef) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 1.411994113s ago: executing program 4 (id=2299): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000380)={0xc, @broadcast, 0x4e22, 0x0, 'lc\x00', 0x9, 0x6, 0x26}, 0x2c) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x42ff}}}]}, 0x38}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x7, 0x20}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000340)={r8, 0x1, 0x34, "848545847ee69d301ecefdda099803fc23dd3bc44399ed6e2eda865760e17033e0eb16eab16e5902f5af812565327ee8fcbef3e6"}, 0x3c) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xffe8}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4041080) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="1000018005000480"], 0x28}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000980)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001300)={{r9}, 0x0, 0xa, @unused=[0x6, 0x0, 0x4ac, 0x7], @devid=r12}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x58, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 1.203545378s ago: executing program 3 (id=2300): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000885ff00bf0920000000000035090100000000009500000000000000bf080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.203283902s ago: executing program 0 (id=2301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB="008af09bc0079235ff03bb000000000000000000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x50) (async) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfff9, 0x802, 0x3}, 0x8) (async) sendto$inet6(r6, &(0x7f0000000500)="b4c5ad1c9a0774c29c8d08914deabad9eae07c8bc68c5acab57dda7933b2d24ee41c0fb00612ec2d305bdb2884498b69b102a024a09da3e6b5099a662c60b21525fbc5961c780595034d4862cedc001c8f1b41b5607713fa407abbeccad623c05fa491a3c841c9b482ba58268c39d1467f2ee354b53d4a28240953ec5a9a989f7f1f38ee9a7051a49b5ee390c0bd7eb026c0d223616380f8469bf3366314072eb5208bae16e5a9", 0xb, 0x20080, &(0x7f0000000000)={0xa, 0x4c1e, 0x81, @mcast2, 0x8008000}, 0xfffffffffffffeff) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="4d21f9aabb265610977b7d201fcb431530e4e96baf76394d32e3fffd36ab56e5df92c4bc763039f8baba737803cf40913abf7d7c8b0cb898df6a5647b8b2ca2d96aef48efec63d2006cf0ac213ae8dda753c9202bb83b36ea00001", 0x5b, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) (async) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r3, &(0x7f0000000340)="fc11ff0f8e94f8f2595d88637ea55a45"}, 0x20) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x4040) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async, rerun: 64) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYRES64=r5, @ANYRES64=r4], 0xfdef) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) (async) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x1, 0x1, 0x8}, 0x20) (async) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) (async) sendmsg$inet6(r6, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4620, 0x80000, @private1={0xfc, 0x1, '\x00', 0xfd}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x28}, 0x40048c0) (async) pipe(&(0x7f0000000000)) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7ffffffb, 0x13) 1.056470306s ago: executing program 3 (id=2302): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r0, 0x7) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 926.206999ms ago: executing program 3 (id=2303): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x48880) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) 831.384072ms ago: executing program 0 (id=2304): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e6576653100000000000000000008"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x1000004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) accept4(r0, 0x0, 0x0, 0x80000) 713.554091ms ago: executing program 0 (id=2305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x80000000, 0x0, 0x0, 0x20780, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) (rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async, rerun: 32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) (rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x7, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="b0", 0x1}], 0x11}}], 0x2, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) r7 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r8, &(0x7f0000000280)=""/65, 0x41, 0x40000040, &(0x7f0000000480), 0x12) r9 = socket(0x28, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f00000000c0)={r10, 0xfffffc48}, 0x8) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000140)={r10, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000000200)=0x84) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x2, 0xa, 0x4}, {0x9c, 0x0, 0x7, 0x1, 0x6, 0x5}, 0x6, 0x71d, 0xa74}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 617.088147ms ago: executing program 1 (id=2306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0x8, 0x6, {{0x5, 0x4, 0x2, 0x25, 0x14, 0x64, 0x0, 0x3, 0x29, 0x0, @remote, @rand_addr=0x64010101}}}}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@deltclass={0x24, 0x29, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x8, 0xa}, {0x4, 0xfff3}, {0xfff3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x2004400d) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e22, 0x3, 'nq\x00', 0x2, 0x4, 0x38}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x22020400) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) pread64(r11, &(0x7f0000002200)=""/87, 0x57, 0xfffd) sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x4003, 0x0, 0x3, 0x3}, {@in6=@mcast2, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x5}, 0x0, 0x0, 0xa, 0x1}, [@extra_flags={0x8, 0x23, 0xfffffff8}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x140}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x70bd2a, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 432.612637ms ago: executing program 2 (id=2307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0xe, &(0x7f0000000500)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 155.830007ms ago: executing program 4 (id=2308): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r1}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYBLOB="1100"/12, @ANYRES32=0x0, @ANYRESDEC], 0x20) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) 152.427437ms ago: executing program 2 (id=2309): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000040)='./cgroup/syz0\x00', 0x40, &(0x7f0000000080)={@align=0x7c, {0x4, 0x5, 0x4}}, 0x10000, &(0x7f00000000c0), &(0x7f0000000100)=0xa}) ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f0000000180)={0x9, 0x3, 0x7, 0x2, 0x9, 0x10, 0x8}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1210240}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x4040) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x178, r2, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2400000, 0x9}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_KEYS={0xdc, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "c65c758a40"}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0xc, 0x4, "a1da816e8a7e4f9a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d206eb5d1b00a23f61964af61b"}, @NL80211_KEY_SEQ={0x8, 0x4, "5636f781"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "abbe582db2"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9de98f0d36f739202943d35abe"}, @NL80211_KEY_DEFAULT={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_SEQ={0x10, 0x4, "27c1a7887e46191892ee5438"}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_KEYS={0x6c, 0x51, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "873aa400d8724aee42351f8658"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8304ae8205631d2c4d1e9783fe"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_SEQ={0xd, 0x4, "ba7d11ba47619741d2"}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r1) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x80, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000007c0)=@get={0x1, &(0x7f0000000700)=""/166, 0x3}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4004081) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x188, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa9}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7591}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xa}}]}, 0x188}, 0x1, 0x0, 0x0, 0x8041}, 0x11) r8 = socket(0x28, 0x4, 0x6ed) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x94, r10, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x94}, 0x1, 0x0, 0x0, 0x24040810}, 0x400) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e40), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000e80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000001100)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x1e0, r11, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x144, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_ID={0x94, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x388a}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0xe4cef55b9b963c8b}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x401}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9000000000000}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}]}, @NL802154_ATTR_SEC_DEVKEY={0x50, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x874c8d7f440d0b8e}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffa}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000001140)={0x93, {0x1, 0x7f, 0x5, 0x8, 0x2}}) sendmsg$NLBL_MGMT_C_VERSION(r9, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x54, r10, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001300)=0x14) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000001380)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e20, @rand_addr=0x64010101}, {0x2, 0x4e21, @multicast1}, 0x18, 0x0, 0x0, 0x0, 0xcf0, &(0x7f0000001340)='macvlan0\x00', 0x7fffffffffffffff, 0x280a, 0x7}) bind$bt_l2cap(r8, &(0x7f0000001400)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6, 0x2}, 0xe) syz_genetlink_get_family_id$net_dm(&(0x7f0000001440), r9) 11.270431ms ago: executing program 4 (id=2310): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbee, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x1}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x8c4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r1, 0x101, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xa040) 0s ago: executing program 0 (id=2311): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x4}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x71d, 0x3509, 0x3, 0x10000, 0x9, 0x1002, 0x9, 0x3, 0x3, 0x802e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xfffc, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x0, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0xa, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x4, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x82, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x1, 0xff, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x8, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x5, 0x6, 0xa, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x4, 0xff, 0x4, 0x7, 0x7, 0x7, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x0, 0x7, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x10000, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x3, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x3, 0x20000000}]}, @int={0x5, 0x0, 0x0, 0x1, 0x5, 0x20}, @enum={0x7}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x61, 0x2e, 0xac192b8c5471f311, 0x5f]}}, 0x0, 0x58}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000001010000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r4, 0xffffffffffffffff, 0x3a, 0x0, @void}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40081}, 0x4c000) socket(0x18, 0xa, 0x3) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="08000000000001002400128009000100766c616e00000000140002800600010002000000060001000200000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="9554e11a2d282c11201105fb02a4a2410572bc2a3482177a22dcf121f8f7"], 0x54}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r12, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYRES16, @ANYBLOB="010027bd7000ffdbdf252e000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) kernel console output (not intermixed with test programs): im netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.188023][ T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.311171][ T8573] x_tables: duplicate underflow at hook 3 [ 174.600361][ T8588] netlink: 220 bytes leftover after parsing attributes in process `syz.4.692'. [ 174.620898][ T8588] xt_hashlimit: size too large, truncated to 1048576 [ 174.764409][ T8599] netlink: 'syz.4.692': attribute type 4 has an invalid length. [ 176.179715][ T29] audit: type=1804 audit(1783464628.561:2): pid=8664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.709" name="/newroot/126/cgroup.controllers" dev="tmpfs" ino=664 res=1 errno=0 [ 176.239447][ T29] audit: type=1800 audit(1783464628.581:3): pid=8664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.709" name="cgroup.controllers" dev="tmpfs" ino=664 res=0 errno=0 [ 176.477965][ T8675] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.517573][ T8675] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len [ 177.045766][ T8700] ip6t_REJECT: ECHOREPLY is not supported [ 177.275519][ T8709] __nla_validate_parse: 5 callbacks suppressed [ 177.275543][ T8709] netlink: 388 bytes leftover after parsing attributes in process `syz.1.720'. [ 177.613811][ T8720] netlink: 10 bytes leftover after parsing attributes in process `syz.1.724'. [ 177.968259][ T8735] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.286391][ T8737] syzkaller1: entered promiscuous mode [ 178.291790][ T8752] netlink: 48 bytes leftover after parsing attributes in process `syz.1.732'. [ 178.304103][ T8737] syzkaller1: entered allmulticast mode [ 178.598754][ T8765] netlink: 'syz.4.737': attribute type 2 has an invalid length. [ 178.602457][ T8758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'. [ 178.921046][ T8781] netlink: 'syz.0.742': attribute type 1 has an invalid length. [ 179.020192][ T8781] 8021q: adding VLAN 0 to HW filter on device bond7 [ 179.074775][ T8784] vlan6: entered allmulticast mode [ 179.103403][ T8784] bond7: entered allmulticast mode [ 179.199592][ T8781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.306053][ T8784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.430789][ T8795] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 179.906427][ T8817] vlan3: entered promiscuous mode [ 179.915870][ T8817] gretap0: entered promiscuous mode [ 180.501108][ T8840] netlink: 'syz.2.759': attribute type 4 has an invalid length. [ 180.559743][ T8841] netlink: 'syz.2.759': attribute type 4 has an invalid length. [ 180.588943][ T8849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'. [ 180.706095][ T8846] vlan7: entered allmulticast mode [ 180.713432][ T8846] bridge0: entered allmulticast mode [ 181.015194][ T8857] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 181.211042][ T8877] netlink: 104 bytes leftover after parsing attributes in process `syz.1.771'. [ 181.267594][ T8880] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 183.250294][ T8891] bridge_slave_0: default FDB implementation only supports local addresses [ 183.260457][ T8890] bridge_slave_0: default FDB implementation only supports local addresses [ 183.374213][ T8900] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.777'. [ 183.402817][ T8899] ip6tnl2: entered promiscuous mode [ 183.477508][ T8902] xt_ecn: cannot match TCP bits for non-tcp packets [ 183.914732][ T7987] nci: nci_rx_work: unknown MT 0x1 [ 183.917963][ T8921] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.077581][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.789'. [ 184.094938][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.787'. [ 184.106770][ T8937] netlink: 'syz.1.788': attribute type 61 has an invalid length. [ 184.145492][ T8941] openvswitch: netlink: Multiple metadata blocks provided [ 184.160510][ T8936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.170936][ T8937] netlink: 152 bytes leftover after parsing attributes in process `syz.1.788'. [ 184.240913][ T8936] bond1: (slave macvlan2): Opening slave failed [ 184.293532][ T8934] 8021q: adding VLAN 0 to HW filter on device bond5 [ 184.353222][ T8934] bond5 (unregistering): Released all slaves [ 184.497371][ T8953] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 184.647210][ T8958] netlink: 128 bytes leftover after parsing attributes in process `syz.3.796'. [ 184.767543][ T8963] netlink: 216 bytes leftover after parsing attributes in process `syz.2.798'. [ 184.776827][ T8963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.798'. [ 184.789311][ T8963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.798'. [ 184.923038][ T8972] netlink: 116 bytes leftover after parsing attributes in process `syz.2.800'. [ 185.110713][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 185.646572][ T6273] IPVS: starting estimator thread 0... [ 185.743088][ T8996] IPVS: using max 23 ests per chain, 55200 per kthread [ 186.222842][ T9012] sch_fq: defrate 8 ignored. [ 186.701597][ T9030] netlink: 'syz.2.816': attribute type 1 has an invalid length. [ 187.550845][ T9059] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 187.550845][ T9059] Please contact the netfilter-devel mailing list or update your nftables rules. [ 187.784106][ T9069] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 188.528555][ T9098] __nla_validate_parse: 11 callbacks suppressed [ 188.528576][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.835'. [ 188.578870][ T9098] netlink: 48 bytes leftover after parsing attributes in process `syz.4.835'. [ 188.682148][ T9098] geneve4: entered promiscuous mode [ 188.697653][ T9098] geneve4: entered allmulticast mode [ 188.959172][ T9110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.966170][ T9115] netlink: 68 bytes leftover after parsing attributes in process `syz.4.840'. [ 188.998950][ T9115] netlink: 68 bytes leftover after parsing attributes in process `syz.4.840'. [ 189.010139][ T9115] netlink: 68 bytes leftover after parsing attributes in process `syz.4.840'. [ 189.032776][ T9115] netlink: 68 bytes leftover after parsing attributes in process `syz.4.840'. [ 189.572257][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.846'. [ 189.769146][ T9148] netlink: 'syz.0.849': attribute type 2 has an invalid length. [ 189.776867][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 189.795615][ T9148] ¿: entered promiscuous mode [ 189.892339][ T9150] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 189.921166][ T9150] bond8: (slave lo): Enslaving as an active interface with an up link [ 189.934496][ T9150] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 191.428236][ T9093] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.570909][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'. [ 192.621506][ T9206] netlink: 'syz.1.865': attribute type 1 has an invalid length. [ 192.639372][ T9206] netlink: 756 bytes leftover after parsing attributes in process `syz.1.865'. [ 192.881827][ T9229] netlink: 'syz.1.869': attribute type 1 has an invalid length. [ 192.961403][ T9227] vti0: entered promiscuous mode [ 193.433442][ T9255] FAULT_INJECTION: forcing a failure. [ 193.433442][ T9255] name failslab, interval 1, probability 0, space 0, times 1 [ 193.492461][ T9255] CPU: 0 UID: 0 PID: 9255 Comm: syz.0.877 Not tainted syzkaller #0 PREEMPT(full) [ 193.492489][ T9255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 193.492512][ T9255] Call Trace: [ 193.492520][ T9255] [ 193.492529][ T9255] dump_stack_lvl+0xe8/0x150 [ 193.492580][ T9255] should_fail_ex+0x40c/0x560 [ 193.492611][ T9255] should_failslab+0xa8/0x100 [ 193.492644][ T9255] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 193.492671][ T9255] ? local_lock_release+0x9c/0x160 [ 193.492700][ T9255] ? __alloc_skb+0x1d7/0x7a0 [ 193.492725][ T9255] ? __alloc_skb+0x1d7/0x7a0 [ 193.492757][ T9255] __alloc_skb+0x1d7/0x7a0 [ 193.492788][ T9255] netlink_sendmsg+0x5d4/0xb40 [ 193.492830][ T9255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.492867][ T9255] ? aa_sock_msg_perm+0xf1/0x1b0 [ 193.492894][ T9255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.492926][ T9255] sock_sendmsg_nosec+0x13a/0x180 [ 193.492954][ T9255] ____sys_sendmsg+0x54e/0x850 [ 193.492991][ T9255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.493029][ T9255] ? import_iovec+0x73/0xa0 [ 193.493061][ T9255] ___sys_sendmsg+0x2a5/0x360 [ 193.493091][ T9255] ? __lock_acquire+0x683/0x2cf0 [ 193.493125][ T9255] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.493201][ T9255] ? __fget_files+0x2a/0x420 [ 193.493229][ T9255] ? __fget_files+0x3a2/0x420 [ 193.493267][ T9255] __x64_sys_sendmsg+0x1b1/0x290 [ 193.493302][ T9255] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 193.493354][ T9255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.493379][ T9255] do_syscall_64+0x174/0x580 [ 193.493409][ T9255] ? trace_irq_disable+0x3b/0x140 [ 193.493437][ T9255] ? clear_bhb_loop+0x40/0x90 [ 193.493464][ T9255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.493488][ T9255] RIP: 0033:0x7fb38459de59 [ 193.493517][ T9255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.493536][ T9255] RSP: 002b:00007fb3854b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.493559][ T9255] RAX: ffffffffffffffda RBX: 00007fb384825fa0 RCX: 00007fb38459de59 [ 193.493575][ T9255] RDX: 0000000020000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 193.493589][ T9255] RBP: 00007fb3854b3090 R08: 0000000000000000 R09: 0000000000000000 [ 193.493602][ T9255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.493614][ T9255] R13: 00007fb384826038 R14: 00007fb384825fa0 R15: 00007ffc8884b488 [ 193.493648][ T9255] [ 193.745227][ T9256] vlan2: entered allmulticast mode [ 193.750641][ T9256] bond0: entered allmulticast mode [ 193.755970][ T9256] bond_slave_0: entered allmulticast mode [ 193.761835][ T9256] bond_slave_1: entered allmulticast mode [ 193.775699][ T9261] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 193.784099][ T9261] netlink: 244 bytes leftover after parsing attributes in process `syz.1.879'. [ 193.796061][ T9261] NCSI netlink: No device for ifindex 0 [ 194.673140][ T9287] netlink: 'syz.1.887': attribute type 3 has an invalid length. [ 194.682267][ T9287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.062954][ T9301] netlink: 'syz.1.890': attribute type 1 has an invalid length. [ 195.228645][ T9308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.892'. [ 195.282044][ T9307] bond4: (slave bridge2): making interface the new active one [ 195.291191][ T9307] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 195.544584][ T9320] IPv6: NLM_F_CREATE should be specified when creating new route [ 195.579222][ T9318] tipc: Started in network mode [ 195.597342][ T9318] tipc: Node identity fa0f03633988, cluster identity 4711 [ 195.643427][ T9318] tipc: Enabled bearer , priority 0 [ 195.867447][ T9318] tipc: Disabling bearer [ 195.921135][ T9335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.899'. [ 195.960263][ T9332] syzkaller1: entered promiscuous mode [ 195.977879][ T9332] syzkaller1: entered allmulticast mode [ 196.018140][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 196.147765][ T9338] netlink: 44 bytes leftover after parsing attributes in process `syz.0.901'. [ 196.185538][ T9342] netlink: 44 bytes leftover after parsing attributes in process `syz.0.901'. [ 196.629467][ T9357] netlink: 'syz.2.906': attribute type 27 has an invalid length. [ 196.669710][ T9358] netdevsim netdevsim1: Direct firmware load for .® failed with error -2 [ 196.714192][ T9358] netdevsim netdevsim1: Falling back to sysfs fallback for: .® [ 197.329379][ T9374] netlink: 'syz.3.910': attribute type 9 has an invalid length. [ 197.424825][ T9357] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.432726][ T9357] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.756214][ T9357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.778651][ T9357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.423046][ T9357] geneve2: left promiscuous mode [ 198.438539][ T9357] geneve2: left allmulticast mode [ 198.447256][ T9357] bond1: left promiscuous mode [ 198.452334][ T9357] gre1: left promiscuous mode [ 198.491387][ T9357] bridge1: left promiscuous mode [ 198.496453][ T9357] bridge1: left allmulticast mode [ 198.631185][ T9357] vlan3: left promiscuous mode [ 198.636020][ T9357] gretap0: left promiscuous mode [ 198.698496][ T9359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.706704][ T9359] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.718852][ T9359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.744743][ T9359] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.752035][ T9359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.762612][ T9359] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.769791][ T9359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.786283][ T9359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.796070][ T9359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.813206][ T9359] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 198.835829][ T9373] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 198.942038][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.912'. [ 198.963111][ T48] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.975498][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.986604][ T48] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.012263][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.213049][ T48] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.229270][ T9402] unsupported nlmsg_type 40 [ 199.246253][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.284689][ T48] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.313143][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.522659][ T9392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.546376][ T9392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.629686][ T9392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.653431][ T9392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.673553][ T9392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 199.684632][ T9392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.705552][ T9392] veth1_vlan: left promiscuous mode [ 199.714802][ T9392] veth0_vlan: left promiscuous mode [ 199.723087][ T9392] veth0_vlan: entered promiscuous mode [ 199.733308][ T9392] veth1_vlan: entered promiscuous mode [ 199.758977][ T9392] veth1_macvtap: left promiscuous mode [ 199.767359][ T9392] veth0_macvtap: left promiscuous mode [ 199.775246][ T9392] veth0_macvtap: entered promiscuous mode [ 199.791929][ T9392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.803123][ T9392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.813437][ T9392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.827326][ T9392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.835866][ T9392] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 199.868552][ T199] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.875837][ T199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.912432][ T199] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.919743][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.996817][ T7994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.020203][ T7994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.043754][ T9422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.921'. [ 200.053784][ T1044] bond3: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 200.070781][ T9422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.921'. [ 200.081420][ T1044] bond3: (slave veth0_to_bond): making interface the new active one [ 200.081982][ T9424] netlink: 'syz.1.920': attribute type 32 has an invalid length. [ 200.098663][ T1044] veth0_to_bond: entered promiscuous mode [ 200.108013][ T1044] bond3: active interface up! [ 200.110815][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 200.147540][ T9424] bond5: option coupled_control: invalid value (255) [ 200.156445][ T9424] bond5 (unregistering): Released all slaves [ 200.190158][ T7994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.256035][ T9422] geneve3: entered promiscuous mode [ 200.310934][ T7994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.594384][ T9436] syzkaller0: entered promiscuous mode [ 200.619769][ T9436] syzkaller0: entered allmulticast mode [ 200.627567][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 200.639505][ T9443] FAULT_INJECTION: forcing a failure. [ 200.639505][ T9443] name failslab, interval 1, probability 0, space 0, times 0 [ 200.679725][ T9439] netlink: 'syz.0.925': attribute type 1 has an invalid length. [ 200.699467][ T9436] tipc: Enabled bearer , priority 0 [ 200.714538][ T9443] CPU: 1 UID: 0 PID: 9443 Comm: syz.1.927 Not tainted syzkaller #0 PREEMPT(full) [ 200.714567][ T9443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 200.714580][ T9443] Call Trace: [ 200.714588][ T9443] [ 200.714597][ T9443] dump_stack_lvl+0xe8/0x150 [ 200.714637][ T9443] should_fail_ex+0x40c/0x560 [ 200.714669][ T9443] should_failslab+0xa8/0x100 [ 200.714703][ T9443] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 200.714728][ T9443] ? local_lock_release+0x9c/0x160 [ 200.714760][ T9443] ? __alloc_skb+0x1d7/0x7a0 [ 200.714786][ T9443] ? __alloc_skb+0x1d7/0x7a0 [ 200.714821][ T9443] __alloc_skb+0x1d7/0x7a0 [ 200.714854][ T9443] netlink_ack+0x136/0xb30 [ 200.714886][ T9443] ? __pfx___mutex_trylock_common+0x10/0x10 [ 200.714913][ T9443] ? rcu_is_watching+0x15/0xb0 [ 200.714948][ T9443] ? trace_contention_end+0x3d/0x140 [ 200.714978][ T9443] netlink_rcv_skb+0x2a4/0x4a0 [ 200.715012][ T9443] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 200.715046][ T9443] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.715096][ T9443] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.715129][ T9443] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.715165][ T9443] xfrm_netlink_rcv+0x79/0x90 [ 200.715196][ T9443] netlink_unicast+0x7bb/0x940 [ 200.715246][ T9443] netlink_sendmsg+0x813/0xb40 [ 200.715290][ T9443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.715328][ T9443] ? aa_sock_msg_perm+0xf1/0x1b0 [ 200.715356][ T9443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.715388][ T9443] sock_sendmsg_nosec+0x13a/0x180 [ 200.715417][ T9443] ____sys_sendmsg+0x54e/0x850 [ 200.715455][ T9443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.715498][ T9443] ? import_iovec+0x73/0xa0 [ 200.715533][ T9443] ___sys_sendmsg+0x2a5/0x360 [ 200.715562][ T9443] ? __lock_acquire+0x683/0x2cf0 [ 200.715596][ T9443] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.715666][ T9443] ? __fget_files+0x2a/0x420 [ 200.715694][ T9443] ? __fget_files+0x3a2/0x420 [ 200.715734][ T9443] __x64_sys_sendmsg+0x1b1/0x290 [ 200.715770][ T9443] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.715821][ T9443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.715846][ T9443] do_syscall_64+0x174/0x580 [ 200.715880][ T9443] ? trace_irq_disable+0x3b/0x140 [ 200.715908][ T9443] ? clear_bhb_loop+0x40/0x90 [ 200.715935][ T9443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.715957][ T9443] RIP: 0033:0x7fcc8419de59 [ 200.715978][ T9443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.715996][ T9443] RSP: 002b:00007fcc823f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.716020][ T9443] RAX: ffffffffffffffda RBX: 00007fcc84425fa0 RCX: 00007fcc8419de59 [ 200.716036][ T9443] RDX: 0000000020000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 200.716050][ T9443] RBP: 00007fcc823f6090 R08: 0000000000000000 R09: 0000000000000000 [ 200.716064][ T9443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.716077][ T9443] R13: 00007fcc84426038 R14: 00007fcc84425fa0 R15: 00007ffef28a1638 [ 200.716112][ T9443] [ 201.108137][ T9453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.165240][ T9439] 8021q: adding VLAN 0 to HW filter on device bond9 [ 201.211875][ T9449] vlan8: entered allmulticast mode [ 201.243018][ T9449] bond9: entered allmulticast mode [ 201.271814][ T9435] tipc: Resetting bearer [ 201.316267][ T9439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.349640][ T9435] tipc: Disabling bearer [ 201.482830][ T9470] netlink: 'syz.3.931': attribute type 1 has an invalid length. [ 201.579377][ T9475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.931'. [ 201.605631][ T9470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.635829][ T9474] batman_adv: batadv0: Adding interface: vlan4 [ 201.642455][ T9474] batman_adv: batadv0: The MTU of interface vlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.670706][ T9474] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active [ 201.726962][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035db2c00: rx timeout, send abort [ 201.771009][ T9475] bond2: entered promiscuous mode [ 201.789937][ T9475] bond2: entered allmulticast mode [ 201.856044][ T9470] bond2: (slave dummy0): making interface the new active one [ 201.879549][ T9470] dummy0: entered promiscuous mode [ 201.886991][ T9470] dummy0: entered allmulticast mode [ 201.896991][ T9470] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 202.227778][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035db2800: rx timeout, send abort [ 202.237995][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035db2c00: abort rx timeout. Force session deactivation [ 202.292843][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.938'. [ 202.343624][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.938'. [ 202.465660][ T9492] "syz.3.940" (9492) uses obsolete ecb(arc4) skcipher [ 202.497577][ T9493] "syz.3.940" (9493) uses obsolete ecb(arc4) skcipher [ 202.577566][ T9495] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.941'. [ 202.652119][ T9500] syzkaller0: entered promiscuous mode [ 202.669497][ T9500] syzkaller0: entered allmulticast mode [ 202.706815][ T9500] tipc: Started in network mode [ 202.720830][ T9500] tipc: Node identity , cluster identity 4711 [ 202.736091][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035db2800: abort rx timeout. Force session deactivation [ 202.756694][ T9500] tipc: Failed to obtain node identity [ 202.799497][ T9500] tipc: Enabling of bearer rejected, failed to enable media [ 203.110338][ T9519] netlink: 'syz.0.948': attribute type 1 has an invalid length. [ 203.205743][ T9524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.948'. [ 203.352741][ T9519] bond10: entered promiscuous mode [ 203.368531][ T9519] 8021q: adding VLAN 0 to HW filter on device bond10 [ 203.450752][ T9534] batadv0: entered promiscuous mode [ 203.473774][ T9534] macsec2: entered promiscuous mode [ 203.480135][ T9534] macsec2: entered allmulticast mode [ 203.485771][ T9536] IPVS: Scheduler module ip_vs_sip not found [ 203.495027][ T9534] batadv0: entered allmulticast mode [ 203.520852][ T9534] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 203.531177][ T9534] batadv0: left allmulticast mode [ 203.544318][ T9534] batadv0: left promiscuous mode [ 203.621700][ T9524] bond10: entered allmulticast mode [ 203.666825][ T9538] bond10: (slave bridge2): making interface the new active one [ 203.675220][ T9538] bridge2: entered promiscuous mode [ 203.682034][ T9538] bridge2: entered allmulticast mode [ 203.696343][ T9538] bond10: (slave bridge2): Enslaving as an active interface with an up link [ 204.161649][ T9567] __nla_validate_parse: 4 callbacks suppressed [ 204.161672][ T9567] netlink: 120 bytes leftover after parsing attributes in process `syz.3.958'. [ 204.209604][ T9565] syzkaller0: entered promiscuous mode [ 204.236913][ T9565] syzkaller0: entered allmulticast mode [ 204.289565][ T9565] tipc: Enabled bearer , priority 0 [ 204.295211][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'. [ 204.356349][ T9562] tipc: Resetting bearer [ 204.434205][ T9582] netlink: 112 bytes leftover after parsing attributes in process `syz.2.962'. [ 204.667246][ T9592] netlink: 'syz.2.962': attribute type 1 has an invalid length. [ 204.845644][ T9562] tipc: Disabling bearer [ 205.306011][ T9615] xt_l2tp: v2 sid > 0xffff: 8388608 [ 205.381991][ T9619] netlink: 'syz.2.971': attribute type 153 has an invalid length. [ 205.399499][ T9619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.971'. [ 205.419870][ T9628] netlink: 40 bytes leftover after parsing attributes in process `syz.3.974'. [ 206.526147][ T9386] IPVS: starting estimator thread 0... [ 206.639608][ T9668] IPVS: using max 27 ests per chain, 64800 per kthread [ 206.697698][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.982'. [ 207.027185][ T9678] bond5: entered promiscuous mode [ 207.033621][ T9678] bond5: entered allmulticast mode [ 207.039818][ T9678] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.102111][ T9687] syzkaller0: entered promiscuous mode [ 207.128384][ T9687] syzkaller0: entered allmulticast mode [ 207.374374][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'. [ 208.369845][ T9742] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 208.416535][ T9747] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1008'. [ 208.437711][ T9747] tc_dump_action: action bad kind [ 208.722554][ T9752] hsr0 speed is unknown, defaulting to 1000 [ 208.787903][ T9758] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1012'. [ 208.851484][ T9752] hsr0 speed is unknown, defaulting to 1000 [ 208.947925][ T9752] hsr0 speed is unknown, defaulting to 1000 [ 209.020220][ T9752] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 209.092857][ T9752] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 209.117722][ T9768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1014'. [ 209.150123][ T9752] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 209.195277][ T9770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1014'. [ 209.326003][ T9752] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 209.424171][ T9752] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 209.456853][ T9779] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 209.674775][ T9791] PKCS7: Unknown OID: [4] (bad) [ 209.680212][ T9791] PKCS7: Only support pkcs7_signedData type [ 209.902203][ T9752] hsr0 speed is unknown, defaulting to 1000 [ 210.036388][ T9752] hsr0 speed is unknown, defaulting to 1000 [ 210.092624][ T9752] hsr0 speed is unknown, defaulting to 1000 [ 210.177252][ T9752] hsr0 speed is unknown, defaulting to 1000 [ 210.222715][ T9752] hsr0 speed is unknown, defaulting to 1000 [ 210.355260][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1026'. [ 210.397498][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1026'. [ 210.832376][ T9827] xt_HMARK: proto mask must be zero with L3 mode [ 210.865382][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 210.899549][ T9827] netlink: 'syz.3.1031': attribute type 30 has an invalid length. [ 210.923927][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 210.952020][ T9831] netlink: 'syz.3.1031': attribute type 30 has an invalid length. [ 211.009693][ T9830] block nbd0: server does not support multiple connections per device. [ 211.066784][ T9830] block nbd0: shutting down sockets [ 211.359276][ T199] veth0_to_bond: left promiscuous mode [ 211.624773][ T9856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1036'. [ 211.822852][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 211.825231][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 211.840181][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 211.933072][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'. [ 212.014312][ T9867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1039'. [ 212.113057][ T9864] macsec1: entered promiscuous mode [ 212.130199][ T9867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1039'. [ 212.171261][ T9864] batadv0: entered promiscuous mode [ 212.200147][ T9864] macsec1: entered allmulticast mode [ 212.240583][ T9864] batadv0: entered allmulticast mode [ 212.273422][ T9864] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 212.316190][ T9864] batadv0: left allmulticast mode [ 212.328373][ T9864] batadv0: left promiscuous mode [ 213.122803][ T9897] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.133821][ T9897] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.303739][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1050'. [ 213.587527][ T9897] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.641329][ T9897] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.805545][ T9922] ipip0: entered promiscuous mode [ 213.829328][ T9922] ipip0: entered allmulticast mode [ 213.836012][ T9928] netlink: 'syz.1.1054': attribute type 1 has an invalid length. [ 213.938083][ T9931] Cannot find add_set index 2 as target [ 213.984524][ T9897] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.015768][ T9897] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.202250][ T9928] 8021q: adding VLAN 0 to HW filter on device bond6 [ 214.229051][ T9930] bond3: (slave veth0_to_bond): Releasing active interface [ 214.251883][ T9930] bond6: (slave veth0_to_bond): making interface the new active one [ 214.262606][ T9930] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 214.282936][ T9932] bond6: entered promiscuous mode [ 214.289218][ T9932] veth0_to_bond: entered promiscuous mode [ 214.295318][ T9932] bond6: entered allmulticast mode [ 214.301397][ T9932] veth0_to_bond: entered allmulticast mode [ 214.322361][ T9935] macvlan2: entered promiscuous mode [ 214.348385][ T9935] macvlan2: entered allmulticast mode [ 214.355485][ T9935] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 214.366840][ T9935] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 214.397489][ T9936] __nla_validate_parse: 2 callbacks suppressed [ 214.397513][ T9936] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1056'. [ 214.414013][ T9936] tc_dump_action: action bad kind [ 214.462611][ T9897] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.475914][ T9897] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.591969][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1057'. [ 214.714075][ T7987] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.759118][ T7987] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.874086][ T199] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.893004][ T199] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.899176][ T9945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.953323][ T48] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.968006][ T48] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.990435][ T9945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.102927][ T199] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.120941][ T199] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.156090][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1060'. [ 215.167264][ T9950] netlink: 'syz.2.1061': attribute type 21 has an invalid length. [ 215.206349][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1060'. [ 215.208585][ T9947] netlink: 'syz.4.1060': attribute type 30 has an invalid length. [ 215.257278][ T9948] netlink: 'syz.4.1060': attribute type 30 has an invalid length. [ 215.448063][ T7987] netdevsim netdevsim4 €Â: set [0, 1] type 1 family 0 port 8472 - 0 [ 215.458690][ T9962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.478664][ T7987] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 215.521968][ T7987] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 215.592019][ T7987] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 215.626024][ T9971] sch_fq: defrate 4294967293 ignored. [ 215.702798][ T9972] sch_fq: defrate 4294967293 ignored. [ 215.879197][ T9964] hsr0 speed is unknown, defaulting to 1000 [ 216.095390][ T9986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1072'. [ 216.179115][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1070'. [ 216.207030][ T9992] netlink: 'syz.0.1072': attribute type 1 has an invalid length. [ 216.209093][ T9990] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1070'. [ 216.523151][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 217.196526][T10011] syzkaller0: entered promiscuous mode [ 217.237886][T10011] syzkaller0: entered allmulticast mode [ 217.271502][T10019] lo speed is unknown, defaulting to 1000 [ 217.281127][T10019] lo speed is unknown, defaulting to 1000 [ 217.409632][T10019] lo speed is unknown, defaulting to 1000 [ 217.443911][T10019] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 217.459675][T10019] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 217.510348][T10019] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 217.554447][T10027] block nbd0: not configured, cannot reconfigure [ 217.568828][T10022] batadv_slave_1: entered promiscuous mode [ 217.656489][T10020] hsr0 speed is unknown, defaulting to 1000 [ 217.727990][T10019] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 217.742981][T10025] hsr0 speed is unknown, defaulting to 1000 [ 217.767521][T10025] lo speed is unknown, defaulting to 1000 [ 217.884345][T10020] lo speed is unknown, defaulting to 1000 [ 217.971109][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1085'. [ 218.020290][T10019] lo speed is unknown, defaulting to 1000 [ 218.176415][T10019] lo speed is unknown, defaulting to 1000 [ 218.229240][T10022] batadv_slave_1: left promiscuous mode [ 218.279247][T10019] lo speed is unknown, defaulting to 1000 [ 218.405292][T10019] lo speed is unknown, defaulting to 1000 [ 218.431870][T10019] lo speed is unknown, defaulting to 1000 [ 219.548600][T10080] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1097'. [ 219.801157][T10092] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1099'. [ 219.894825][T10101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1102'. [ 219.906087][ T70] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 219.931785][T10092] team0 (unregistering): Port device team_slave_1 removed [ 219.945232][T10092] team0 (unregistering): Port device bridge1 removed [ 219.959492][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1102'. [ 219.994171][T10103] netlink: 'syz.1.1100': attribute type 5 has an invalid length. [ 220.011609][T10106] macvlan0: entered promiscuous mode [ 220.020947][T10101] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1102'. [ 220.085570][T10106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1102'. [ 220.185393][T10114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1103'. [ 220.214009][T10118] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1103'. [ 220.806345][T10126] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.814147][T10126] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.127494][T10126] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 221.250811][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1106'. [ 221.314118][T10136] ipt_REJECT: TCP_RESET invalid for non-tcp [ 221.322954][T10139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1106'. [ 222.797132][T10094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.161915][T10158] netlink: 'syz.4.1113': attribute type 1 has an invalid length. [ 223.290275][T10158] 8021q: adding VLAN 0 to HW filter on device bond3 [ 223.329333][T10160] bond3: (slave veth7): Enslaving as an active interface with a down link [ 223.430106][T10167] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 223.494050][T10167] bond3: (slave batadv1): making interface the new active one [ 223.520328][T10167] batadv1: entered promiscuous mode [ 223.526359][T10167] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 223.575941][T10170] syzkaller1: entered promiscuous mode [ 223.599865][T10170] syzkaller1: entered allmulticast mode [ 223.624352][T10158] bond3 (unregistering): (slave veth7): Releasing active interface [ 223.647953][T10158] bond3 (unregistering): (slave batadv1): Releasing active interface [ 223.670374][T10158] bond3 (unregistering): Released all slaves [ 224.722596][T10226] __nla_validate_parse: 5 callbacks suppressed [ 224.722616][T10226] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1132'. [ 225.200522][T10241] netlink: 'syz.0.1137': attribute type 1 has an invalid length. [ 225.319043][T10232] sctp: [Deprecated]: syz.2.1133 (pid 10232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.319043][T10232] Use struct sctp_sack_info instead [ 225.382959][T10241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1137'. [ 225.490746][T10241] bond11: (slave bridge3): making interface the new active one [ 225.506262][T10241] bond11: (slave bridge3): Enslaving as an active interface with an up link [ 225.837852][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1143'. [ 225.907206][T10262] netlink: 'syz.1.1144': attribute type 1 has an invalid length. [ 226.035060][T10262] 8021q: adding VLAN 0 to HW filter on device bond7 [ 226.131183][T10271] vlan3: entered allmulticast mode [ 226.136558][T10271] bond7: entered allmulticast mode [ 226.161624][T10274] bond7: (slave geneve2): making interface the new active one [ 226.171931][T10274] geneve2: entered allmulticast mode [ 226.180395][T10283] netlink: 'syz.2.1146': attribute type 1 has an invalid length. [ 226.196701][T10274] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 226.225495][T10282] netlink: 'syz.2.1146': attribute type 1 has an invalid length. [ 226.251009][T10262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.332960][T10262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.405956][T10283] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.423997][T10286] netlink: 'syz.4.1147': attribute type 7 has an invalid length. [ 226.433811][T10286] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1147'. [ 226.445175][T10286] netlink: 'syz.4.1147': attribute type 6 has an invalid length. [ 226.453859][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1147'. [ 226.472405][T10282] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 227.082881][T10314] netlink: 'syz.0.1155': attribute type 14 has an invalid length. [ 227.388796][T10328] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1161'. [ 227.570973][T10331] syzkaller1: entered promiscuous mode [ 227.602406][T10331] syzkaller1: entered allmulticast mode [ 227.687206][T10341] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1165'. [ 227.755205][T10341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1165'. [ 228.050422][T10352] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1169'. [ 228.207983][T10357] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1172'. [ 228.273264][T10358] hsr0 speed is unknown, defaulting to 1000 [ 228.290458][T10358] lo speed is unknown, defaulting to 1000 [ 228.937956][T10376] Bluetooth: MGMT ver 1.23 [ 228.989106][ T29] audit: type=1800 audit(1783464681.361:4): pid=10376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1177" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1194 res=0 errno=0 [ 229.222482][T10389] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 229.575228][T10389] 8021q: adding VLAN 0 to HW filter on device bond6 [ 229.936645][T10415] netlink: 'syz.2.1184': attribute type 10 has an invalid length. [ 230.012363][T10418] netlink: 'syz.2.1184': attribute type 10 has an invalid length. [ 230.167878][T10418] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 230.353535][T10427] __nla_validate_parse: 3 callbacks suppressed [ 230.353558][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1187'. [ 230.369320][T10428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1188'. [ 230.966565][T10451] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 231.021881][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 231.160683][T10455] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 231.168503][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1197'. [ 231.324842][T10455] bond12: entered promiscuous mode [ 231.356861][T10455] 8021q: adding VLAN 0 to HW filter on device bond12 [ 231.449780][T10457] bond12: (slave bridge4): making interface the new active one [ 231.468622][T10457] bridge4: entered promiscuous mode [ 231.480819][T10457] bond12: (slave bridge4): Enslaving as an active interface with an up link [ 231.766115][T10475] netlink: 'syz.0.1199': attribute type 4 has an invalid length. [ 231.870895][T10475] netlink: 'syz.0.1199': attribute type 4 has an invalid length. [ 232.810089][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'. [ 232.891305][T10508] xt_TCPMSS: Only works on TCP SYN packets [ 233.765697][T10532] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1213'. [ 233.808024][T10533] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1213'. [ 233.818666][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1212'. [ 233.854359][T10534] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1212'. [ 234.029619][T10538] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1215'. [ 234.301508][T10540] syzkaller0: entered promiscuous mode [ 234.327862][T10540] syzkaller0: entered allmulticast mode [ 234.379932][T10540] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1214'. [ 238.021572][T10562] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.029235][T10562] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.150426][T10621] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1233'. [ 238.378977][T10562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.429609][T10562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.612114][T10562] geneve3: left promiscuous mode [ 238.721737][T10600] batman_adv: batadv0: Adding interface: vlan3 [ 238.735124][T10600] batman_adv: batadv0: The MTU of interface vlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.774638][T10600] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 239.443264][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1241'. [ 239.453322][T10643] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1241'. [ 240.223982][T10661] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1249'. [ 240.267832][T10661] netlink: 'syz.4.1249': attribute type 5 has an invalid length. [ 240.439910][T10673] netlink: 'syz.1.1253': attribute type 1 has an invalid length. [ 240.527394][T10673] 8021q: adding VLAN 0 to HW filter on device bond8 [ 240.637340][T10676] bond8: (slave veth9): Enslaving as an active interface with a down link [ 240.777949][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1254'. [ 240.797206][T10673] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 240.847538][T10681] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 240.892326][T10681] bond8: (slave batadv1): making interface the new active one [ 240.926973][T10681] batadv1: entered promiscuous mode [ 240.944770][T10681] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 240.983663][ T24] lo speed is unknown, defaulting to 1000 [ 240.984229][ T11] hsr0 speed is unknown, defaulting to 1000 [ 241.378563][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1260'. [ 241.481185][T10698] syzkaller0: entered promiscuous mode [ 241.488493][T10698] syzkaller0: entered allmulticast mode [ 241.494834][T10712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1262'. [ 241.537546][T10708] tipc: Enabled bearer , priority 0 [ 241.913290][T10725] openvswitch: netlink: Missing valid actions attribute. [ 241.928654][T10725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.055683][T10728] openvswitch: netlink: Missing valid actions attribute. [ 242.064185][T10728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.609478][T10707] syzkaller0: entered promiscuous mode [ 243.615239][T10707] syzkaller0: entered allmulticast mode [ 243.622511][T10708] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 243.644480][T10723] (: renamed from bridge_slave_0 (while UP) [ 243.675812][ T6274] tipc: Node number set to 3280405347 [ 243.740440][T10716] tipc: Resetting bearer [ 243.864386][T10716] tipc: Disabling bearer [ 243.965964][T10741] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1271'. [ 244.124001][T10748] netlink: 'syz.2.1273': attribute type 21 has an invalid length. [ 244.135500][T10748] IPv6: NLM_F_CREATE should be specified when creating new route [ 244.155229][T10748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1273'. [ 244.230662][T10735] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 244.237492][T10735] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 244.257255][T10735] ip6tnl2: left promiscuous mode [ 244.266404][T10735] bond2: left promiscuous mode [ 244.271889][T10735] dummy0: left promiscuous mode [ 244.277073][T10735] bond2: left allmulticast mode [ 244.284853][T10735] dummy0: left allmulticast mode [ 244.322575][T10752] netlink: 'syz.2.1273': attribute type 4 has an invalid length. [ 244.514180][T10751] bond0: (slave dummy0): Releasing backup interface [ 244.534258][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 244.553295][T10751] bridge3: port 1(dummy0) entered blocking state [ 244.575948][T10751] bridge3: port 1(dummy0) entered disabled state [ 244.583341][T10755] netlink: 'syz.2.1273': attribute type 10 has an invalid length. [ 244.597984][T10763] netlink: zone id is out of range [ 244.611342][T10763] netlink: zone id is out of range [ 244.615134][T10751] dummy0: entered allmulticast mode [ 244.616898][T10763] netlink: zone id is out of range [ 244.627421][T10755] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1273'. [ 244.637785][T10763] netlink: get zone limit has 8 unknown bytes [ 244.647000][T10751] dummy0: entered promiscuous mode [ 244.663793][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1278'. [ 244.836091][T10779] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 244.852875][T10759] 8021q: adding VLAN 0 to HW filter on device bond3 [ 244.871031][T10755] bridge3: port 1(dummy0) entered blocking state [ 244.878495][T10755] bridge3: port 1(dummy0) entered forwarding state [ 244.886945][T10755] dummy0: left allmulticast mode [ 244.892480][T10755] bridge3: port 1(dummy0) entered disabled state [ 244.905414][T10775] bridge0: port 1(veth1_virt_wifi) entered blocking state [ 244.929012][T10775] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 244.952356][T10775] veth1_virt_wifi: entered allmulticast mode [ 244.967754][T10775] veth1_virt_wifi: left allmulticast mode [ 245.005989][T10781] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 245.039011][T10781] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 245.090490][T10783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1283'. [ 245.365972][T10798] netlink: 'syz.1.1288': attribute type 1 has an invalid length. [ 245.385520][T10798] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1288'. [ 245.482616][T10798] pim6reg1: entered promiscuous mode [ 245.488055][T10798] pim6reg1: entered allmulticast mode [ 246.067455][T10825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.143579][T10822] No such timeout policy "syz0" [ 246.765613][T10855] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1304'. [ 247.141964][T10868] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 247.547028][T10891] syzkaller0: entered promiscuous mode [ 247.557199][T10891] syzkaller0: entered allmulticast mode [ 247.571432][ T50] block nbd0: Receive control failed (result -107) [ 247.654571][T10896] sctp: [Deprecated]: syz.3.1314 (pid 10896) Use of int in max_burst socket option. [ 247.654571][T10896] Use struct sctp_assoc_value instead [ 249.937867][ T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 249.950191][T10926] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 250.022951][T10932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1325'. [ 250.048750][T10935] netlink: 'syz.0.1322': attribute type 1 has an invalid length. [ 250.066320][T10934] netlink: 'syz.1.1324': attribute type 12 has an invalid length. [ 250.083384][T10933] netlink: 'syz.3.1323': attribute type 3 has an invalid length. [ 250.163930][T10942] netlink: 'syz.0.1322': attribute type 5 has an invalid length. [ 250.251021][T10935] bond13: entered promiscuous mode [ 250.257547][T10935] 8021q: adding VLAN 0 to HW filter on device bond13 [ 250.326866][T10948] macvtap1: entered allmulticast mode [ 250.441729][T10950] smbdirect: ib_dev[syz2] removed [ 250.470642][T10942] bond13: (slave bridge5): making interface the new active one [ 250.490323][T10942] bridge5: entered promiscuous mode [ 250.504896][T10942] bond13: (slave bridge5): Enslaving as an active interface with an up link [ 250.712720][T10952] syzkaller0: entered promiscuous mode [ 250.721784][T10952] syzkaller0: entered allmulticast mode [ 250.757163][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1331'. [ 250.959802][ T29] audit: type=1800 audit(1783464703.341:5): pid=10983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1332" name="memory.events" dev="tmpfs" ino=1343 res=0 errno=0 [ 251.034958][ T29] audit: type=1804 audit(1783464703.351:6): pid=10983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1332" name="/newroot/258/memory.events" dev="tmpfs" ino=1343 res=1 errno=0 [ 253.215337][T10993] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 253.226556][T10993] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 253.236872][T10993] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 253.359484][ T1044] batadv1: left promiscuous mode [ 253.705748][T11007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.794714][T11023] netlink: 'syz.0.1340': attribute type 1 has an invalid length. [ 253.835091][T11023] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1340'. [ 253.927985][T11023] netlink: 'syz.0.1340': attribute type 1 has an invalid length. [ 254.058482][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 254.315936][T11049] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1346'. [ 254.389969][T11050] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1346'. [ 254.913222][T11076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1353'. [ 255.574076][T11111] vlan4: entered allmulticast mode [ 255.581047][T11111] gretap0: entered allmulticast mode [ 255.693400][T11114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1364'. [ 255.713832][T11117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1365'. [ 256.052472][T11130] sctp: [Deprecated]: syz.3.1370 (pid 11130) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.052472][T11130] Use struct sctp_sack_info instead [ 256.101771][T11133] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1371'. [ 256.212880][T11145] sctp: [Deprecated]: syz.3.1370 (pid 11145) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.212880][T11145] Use struct sctp_sack_info instead [ 256.297731][T11134] syzkaller0: entered promiscuous mode [ 256.306829][T11134] syzkaller0: entered allmulticast mode [ 256.587059][T11157] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1377'. [ 256.613201][T11155] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1376'. [ 256.632561][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'. [ 256.682157][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1376'. [ 256.741827][T11160] netlink: 'syz.1.1376': attribute type 2 has an invalid length. [ 256.847671][T11165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1378'. [ 256.857648][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1378'. [ 256.946520][T11166] tipc: Enabling of bearer rejected, failed to enable media [ 256.984953][T11169] netlink: 'syz.3.1378': attribute type 3 has an invalid length. [ 257.009247][T11169] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1378'. [ 257.053526][T11172] syzkaller0: entered promiscuous mode [ 257.060166][T11172] syzkaller0: entered allmulticast mode [ 257.589732][T11198] netlink: 'syz.3.1388': attribute type 1 has an invalid length. [ 257.796991][T11207] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004 [ 257.930607][T11210] lo speed is unknown, defaulting to 1000 [ 258.202879][T11226] xt_TCPMSS: Only works on TCP SYN packets [ 258.742532][ T50] Bluetooth: hci4: link tx timeout [ 258.749850][ T50] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 259.074891][T11255] lo speed is unknown, defaulting to 1000 [ 260.778561][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 260.832638][T11316] __nla_validate_parse: 13 callbacks suppressed [ 260.832656][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1423'. [ 261.340208][ T48] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.367714][ T48] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.414346][ T48] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.453497][ T48] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.481152][ T48] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.504575][ T48] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.521499][T11326] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1427'. [ 261.549286][T11329] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1427'. [ 261.591033][ T48] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.600351][ T48] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.613374][T11328] bond0: (slave bond_slave_1): Releasing backup interface [ 262.126507][T11354] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1433'. [ 262.136992][T11352] vlan9: entered promiscuous mode [ 262.157945][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1434'. [ 262.228361][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 262.275064][T11359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1435'. [ 262.393135][T11363] netlink: 'syz.0.1437': attribute type 1 has an invalid length. [ 262.555705][T11371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1438'. [ 262.599939][T11363] 8021q: adding VLAN 0 to HW filter on device bond14 [ 262.835939][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1440'. [ 262.877871][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1440'. [ 263.022483][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 263.100921][T11382] lo speed is unknown, defaulting to 1000 [ 263.699404][T11408] netlink: 'syz.1.1448': attribute type 13 has an invalid length. [ 263.822280][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 264.202104][T11425] veth0: entered promiscuous mode [ 264.252130][T11429] nbd: must specify a size in bytes for the device [ 264.301417][T11426] veth0: left promiscuous mode [ 264.467764][T11435] xt_connbytes: Forcing CT accounting to be enabled [ 264.794790][T11443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.864723][T11443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.885275][T11457] netlink: 'syz.2.1458': attribute type 1 has an invalid length. [ 264.960834][T11461] xt_bpf: check failed: parse error [ 265.019073][T11457] bond7: option mode: invalid value (7) [ 265.033980][T11457] bond7 (unregistering): Released all slaves [ 265.189214][T11465] netlink: 'syz.2.1458': attribute type 10 has an invalid length. [ 265.267143][T11469] openvswitch: netlink: Message has 8 unknown bytes. [ 265.285879][T11469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.386182][T11463] dummy0: left promiscuous mode [ 265.449569][T11465] dummy0: entered promiscuous mode [ 265.632808][T11488] xt_TCPMSS: Only works on TCP SYN packets [ 265.838082][T11488] bridge_slave_1: left allmulticast mode [ 265.879302][T11488] bridge_slave_1: left promiscuous mode [ 265.919283][T11488] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.937388][T11488] bridge_slave_0: left allmulticast mode [ 265.944587][T11488] bridge_slave_0: left promiscuous mode [ 265.951537][T11488] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.215885][T11495] lo speed is unknown, defaulting to 1000 [ 266.594369][T11517] __nla_validate_parse: 5 callbacks suppressed [ 266.594391][T11517] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1476'. [ 266.783105][T11521] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1475'. [ 266.973112][T11526] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1478'. [ 266.992909][T11526] netlink: 'syz.4.1478': attribute type 1 has an invalid length. [ 267.281846][T11543] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1484'. [ 267.603237][T11562] FAULT_INJECTION: forcing a failure. [ 267.603237][T11562] name failslab, interval 1, probability 0, space 0, times 0 [ 267.617178][T11562] CPU: 0 UID: 0 PID: 11562 Comm: syz.1.1489 Not tainted syzkaller #0 PREEMPT(full) [ 267.617226][T11562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 267.617257][T11562] Call Trace: [ 267.617267][T11562] [ 267.617277][T11562] dump_stack_lvl+0xe8/0x150 [ 267.617323][T11562] should_fail_ex+0x40c/0x560 [ 267.617358][T11562] should_failslab+0xa8/0x100 [ 267.617395][T11562] __kmalloc_noprof+0xfe/0x720 [ 267.617424][T11562] ? rcu_is_watching+0x15/0xb0 [ 267.617461][T11562] ? tomoyo_realpath_from_path+0xef/0x640 [ 267.617487][T11562] ? tomoyo_realpath_from_path+0xef/0x640 [ 267.617521][T11562] tomoyo_realpath_from_path+0xef/0x640 [ 267.617558][T11562] ? tomoyo_path_number_perm+0x219/0x5f0 [ 267.617594][T11562] tomoyo_path_number_perm+0x246/0x5f0 [ 267.617642][T11562] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 267.617675][T11562] ? __lock_acquire+0x683/0x2cf0 [ 267.617726][T11562] ? hook_file_ioctl+0x1f0/0x5f0 [ 267.617786][T11562] ? __fget_files+0x2a/0x420 [ 267.617821][T11562] ? __fget_files+0x2a/0x420 [ 267.617850][T11562] ? __fget_files+0x3a2/0x420 [ 267.617879][T11562] ? __fget_files+0x2a/0x420 [ 267.617914][T11562] security_file_ioctl+0xc3/0x2a0 [ 267.617955][T11562] __se_sys_ioctl+0x47/0x170 [ 267.617977][T11562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.618004][T11562] do_syscall_64+0x174/0x580 [ 267.618043][T11562] ? trace_irq_disable+0x3b/0x140 [ 267.618073][T11562] ? clear_bhb_loop+0x40/0x90 [ 267.618102][T11562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.618137][T11562] RIP: 0033:0x7fcc8419de59 [ 267.618161][T11562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.618182][T11562] RSP: 002b:00007fcc823f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.618208][T11562] RAX: ffffffffffffffda RBX: 00007fcc84425fa0 RCX: 00007fcc8419de59 [ 267.618227][T11562] RDX: 0000200000000040 RSI: 0000000000008b2c RDI: 0000000000000004 [ 267.618243][T11562] RBP: 00007fcc823f6090 R08: 0000000000000000 R09: 0000000000000000 [ 267.618258][T11562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.618273][T11562] R13: 00007fcc84426038 R14: 00007fcc84425fa0 R15: 00007ffef28a1638 [ 267.618313][T11562] [ 267.850765][T11562] ERROR: Out of memory at tomoyo_realpath_from_path. [ 268.528048][T11482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.916105][T11586] bridge0: port 3(bond0) entered blocking state [ 268.937823][T11586] bridge0: port 3(bond0) entered disabled state [ 268.970644][T11586] bond0: entered promiscuous mode [ 268.991051][T11586] bond_slave_0: entered promiscuous mode [ 269.021308][T11586] bond_slave_1: entered promiscuous mode [ 269.614099][T11609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1502'. [ 270.356425][T11648] syzkaller0: entered promiscuous mode [ 270.370585][T11648] syzkaller0: entered allmulticast mode [ 270.504278][T11651] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 270.735249][T11655] netlink: 'syz.1.1511': attribute type 1 has an invalid length. [ 270.777992][T11655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.819314][T11654] netlink: 'syz.1.1511': attribute type 2 has an invalid length. [ 270.849566][T11674] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1518'. [ 270.867608][T11654] netlink: 'syz.1.1511': attribute type 8 has an invalid length. [ 270.900005][T11654] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1511'. [ 270.912236][T11675] netlink: 'syz.0.1519': attribute type 1 has an invalid length. [ 270.937777][T11675] : renamed from dummy0 (while UP) [ 271.341508][T11685] netlink: 'syz.2.1523': attribute type 30 has an invalid length. [ 271.374625][T11685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1523'. [ 271.605785][T11685] bond7: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 272.371504][T11685] bond7 (unregistering): Released all slaves [ 272.853707][T11718] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1531'. [ 272.864129][T11719] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1531'. [ 273.018701][T11722] sctp: [Deprecated]: syz.3.1532 (pid 11722) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.018701][T11722] Use struct sctp_sack_info instead [ 273.470356][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1538'. [ 273.777662][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1538'. [ 274.133005][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1545'. [ 274.159564][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1545'. [ 275.047606][T11797] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1549'. [ 275.166121][T11802] netlink: 'syz.4.1549': attribute type 1 has an invalid length. [ 275.192572][T11802] netlink: 'syz.4.1549': attribute type 2 has an invalid length. [ 275.699369][T11819] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1551'. [ 276.019257][T11815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1551'. [ 276.672004][T11849] netlink: 'syz.0.1558': attribute type 1 has an invalid length. [ 276.691973][T11849] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1558'. [ 277.791674][T11881] lo speed is unknown, defaulting to 1000 [ 278.218743][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 278.291996][T11898] netlink: 'syz.4.1570': attribute type 83 has an invalid length. [ 279.107841][T11911] netlink: 'syz.2.1573': attribute type 12 has an invalid length. [ 281.865445][T11962] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 281.910542][T11962] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 283.186176][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1587'. [ 283.312107][T11984] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1587'. [ 283.730697][T11991] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1588'. [ 284.130406][T11991] veth12: entered allmulticast mode [ 284.905591][T12008] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20001 [ 285.048961][T12008] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1591'. [ 285.073134][T12009] netlink: 'syz.2.1594': attribute type 13 has an invalid length. [ 285.085918][T12009] netlink: 'syz.2.1594': attribute type 17 has an invalid length. [ 285.170717][T12014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1594'. [ 285.302425][T12008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1591'. [ 285.436514][T12021] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1596'. [ 286.192099][T12009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.262950][T12009] dummy0: left promiscuous mode [ 286.336159][T12009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.494490][T12009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.521303][T12009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.533023][T12037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1598'. [ 286.592024][T12009] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.603883][T12009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.636213][T12009] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 286.670557][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1595'. [ 286.681041][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1595'. [ 286.691486][T12015] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 287.003324][T12025] syzkaller0: entered promiscuous mode [ 287.021380][T12025] syzkaller0: entered allmulticast mode [ 287.164752][T12039] bond8: (slave lo): Releasing backup interface [ 287.263194][T12039] bond8: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 288.104467][T12039] bond0: (slave bond_slave_0): Releasing backup interface [ 288.190646][T12039] bond0: (slave bond_slave_1): Releasing backup interface [ 288.247767][T12039] team0: Port device team_slave_0 removed [ 288.271910][T12039] team0: Port device team_slave_1 removed [ 288.308090][T12039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.323375][T12039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.364353][T12039] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 288.555726][T12036] lo speed is unknown, defaulting to 1000 [ 290.063563][T12084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1610'. [ 290.133687][T12084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1610'. [ 291.334214][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1618'. [ 291.446542][T12110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1616'. [ 291.680682][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1619'. [ 291.997565][T12110] smbdirect: ib_dev[syú2] removed [ 292.107166][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1621'. [ 292.485850][T12125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1622'. [ 292.683601][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1624'. [ 292.978914][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1624'. [ 293.064112][T12130] batman_adv: batadv0: Removing interface: vlan3 [ 294.092474][T12155] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 294.152638][T12155] bond5 (unregistering): Released all slaves [ 294.418991][T12161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1631'. [ 295.134915][T12176] syzkaller1: entered promiscuous mode [ 295.158684][T12176] syzkaller1: entered allmulticast mode [ 295.385960][T12185] netlink: 'syz.4.1635': attribute type 13 has an invalid length. [ 296.095476][T12137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.723952][T12192] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1638'. [ 296.848805][T12199] netlink: 'syz.3.1641': attribute type 2 has an invalid length. [ 297.040179][T12199] : entered promiscuous mode [ 298.134981][T12221] bond7: option arp_interval: invalid value (18446744073709551615) [ 298.161009][T12227] x_tables: duplicate entry at hook 3 [ 298.209043][T12221] bond7: option arp_interval: allowed values 0 - 2147483647 [ 298.270067][T12221] bond7 (unregistering): Released all slaves [ 299.374053][T12255] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1654'. [ 301.274231][T12273] netlink: 'syz.3.1659': attribute type 2 has an invalid length. [ 302.530164][T12290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1664'. [ 304.554169][T12273] : entered promiscuous mode [ 304.705957][T12276] batadv0: entered promiscuous mode [ 304.730271][T12276] batadv0: entered allmulticast mode [ 306.956632][T12337] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1675'. [ 307.023052][T12338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.131194][T12338] x_tables: unsorted entry at hook 2 [ 307.209409][T12338] xt_hashlimit: size too large, truncated to 1048576 [ 307.901585][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 308.316766][T12365] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1681'. [ 308.407866][T12365] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1681'. [ 309.394866][T12378] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1684'. [ 309.420104][T12384] netlink: 'syz.1.1684': attribute type 1 has an invalid length. [ 309.455929][T12381] netlink: 'syz.3.1686': attribute type 12 has an invalid length. [ 309.523878][T12389] netlink: 'syz.2.1688': attribute type 12 has an invalid length. [ 309.533107][T12381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.155370][T12398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1690'. [ 310.203193][T12398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.218459][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 310.345888][T12398] netlink: 'syz.2.1690': attribute type 1 has an invalid length. [ 310.796198][T12398] bond7 (unregistering): Released all slaves [ 312.533413][T12440] sctp: [Deprecated]: syz.3.1695 (pid 12440) Use of int in maxseg socket option. [ 312.533413][T12440] Use struct sctp_assoc_value instead [ 313.044385][T12453] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1697'. [ 313.360606][T12461] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.1698'. [ 313.411600][T12461] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.1698'. [ 313.892868][T12466] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1700'. [ 314.511161][T12475] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1703'. [ 314.839628][T12480] netlink: 'syz.0.1705': attribute type 1 has an invalid length. [ 315.007020][T12486] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1705'. [ 315.122404][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1708'. [ 315.149460][T12491] xt_TCPMSS: Only works on TCP SYN packets [ 315.517552][T12487] xt_CT: No such helper "netbios-ns" [ 316.689997][T12511] FAULT_INJECTION: forcing a failure. [ 316.689997][T12511] name failslab, interval 1, probability 0, space 0, times 0 [ 316.725276][T12511] CPU: 0 UID: 0 PID: 12511 Comm: syz.2.1713 Not tainted syzkaller #0 PREEMPT(full) [ 316.725311][T12511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.725326][T12511] Call Trace: [ 316.725335][T12511] [ 316.725345][T12511] dump_stack_lvl+0xe8/0x150 [ 316.725397][T12511] should_fail_ex+0x40c/0x560 [ 316.725429][T12511] should_failslab+0xa8/0x100 [ 316.725465][T12511] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 316.725494][T12511] ? skb_clone+0x212/0x3a0 [ 316.725529][T12511] ? skb_clone+0x212/0x3a0 [ 316.725571][T12511] skb_clone+0x212/0x3a0 [ 316.725604][T12511] ? pfkey_broadcast_one+0x7d/0x360 [ 316.725639][T12511] pfkey_broadcast_one+0x9b/0x360 [ 316.725666][T12511] ? pfkey_broadcast+0x39b/0x3e0 [ 316.725696][T12511] pfkey_broadcast+0x3a8/0x3e0 [ 316.725725][T12511] ? pfkey_broadcast+0x48/0x3e0 [ 316.725756][T12511] pfkey_sendmsg+0xf02/0x11d0 [ 316.725800][T12511] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 316.725851][T12511] ? __pfx_aa_sk_perm+0x10/0x10 [ 316.725890][T12511] ? aa_sock_msg_perm+0xf1/0x1b0 [ 316.725918][T12511] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 316.725946][T12511] sock_sendmsg_nosec+0x13a/0x180 [ 316.725976][T12511] ____sys_sendmsg+0x54e/0x850 [ 316.726015][T12511] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.726058][T12511] ? import_iovec+0x73/0xa0 [ 316.726096][T12511] ___sys_sendmsg+0x2a5/0x360 [ 316.726127][T12511] ? __lock_acquire+0x683/0x2cf0 [ 316.726164][T12511] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.726235][T12511] ? __fget_files+0x2a/0x420 [ 316.726264][T12511] ? __fget_files+0x3a2/0x420 [ 316.726304][T12511] __x64_sys_sendmsg+0x1b1/0x290 [ 316.726340][T12511] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 316.726400][T12511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.726427][T12511] do_syscall_64+0x174/0x580 [ 316.726460][T12511] ? clear_bhb_loop+0x40/0x90 [ 316.726487][T12511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.726511][T12511] RIP: 0033:0x7f6137f9de59 [ 316.726533][T12511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.726552][T12511] RSP: 002b:00007f6138e07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.726578][T12511] RAX: ffffffffffffffda RBX: 00007f6138225fa0 RCX: 00007f6137f9de59 [ 316.726595][T12511] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000003 [ 316.726609][T12511] RBP: 00007f6138e07090 R08: 0000000000000000 R09: 0000000000000000 [ 316.726623][T12511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.726636][T12511] R13: 00007f6138226038 R14: 00007f6138225fa0 R15: 00007ffeb5012c38 [ 316.726672][T12511] [ 317.035752][T12513] netlink: 'syz.4.1714': attribute type 1 has an invalid length. [ 317.468748][T12513] 8021q: adding VLAN 0 to HW filter on device bond5 [ 318.143802][T12535] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 318.267135][T12557] FAULT_INJECTION: forcing a failure. [ 318.267135][T12557] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 318.283866][T12557] CPU: 0 UID: 0 PID: 12557 Comm: syz.2.1725 Not tainted syzkaller #0 PREEMPT(full) [ 318.283895][T12557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 318.283907][T12557] Call Trace: [ 318.283915][T12557] [ 318.283923][T12557] dump_stack_lvl+0xe8/0x150 [ 318.283961][T12557] should_fail_ex+0x40c/0x560 [ 318.283993][T12557] _copy_to_user+0x31/0xb0 [ 318.284029][T12557] simple_read_from_buffer+0xe1/0x170 [ 318.284065][T12557] proc_fail_nth_read+0x1bb/0x230 [ 318.284099][T12557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.284133][T12557] ? rw_verify_area+0x24a/0x4c0 [ 318.284167][T12557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.284196][T12557] vfs_read+0x213/0xa80 [ 318.284234][T12557] ? __pfx___mutex_lock+0x10/0x10 [ 318.284266][T12557] ? __pfx_vfs_read+0x10/0x10 [ 318.284299][T12557] ? __fget_files+0x2a/0x420 [ 318.284343][T12557] ? __fget_files+0x3a2/0x420 [ 318.284371][T12557] ? __fget_files+0x2a/0x420 [ 318.284409][T12557] ksys_read+0x150/0x270 [ 318.284443][T12557] ? __pfx_ksys_read+0x10/0x10 [ 318.284485][T12557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.284510][T12557] do_syscall_64+0x174/0x580 [ 318.284535][T12557] ? trace_irq_disable+0x3b/0x140 [ 318.284559][T12557] ? clear_bhb_loop+0x40/0x90 [ 318.284582][T12557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.284600][T12557] RIP: 0033:0x7f6137f5e68e [ 318.284618][T12557] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 318.284634][T12557] RSP: 002b:00007f6138e06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 318.284655][T12557] RAX: ffffffffffffffda RBX: 00007f6138e076c0 RCX: 00007f6137f5e68e [ 318.284668][T12557] RDX: 000000000000000f RSI: 00007f6138e070a0 RDI: 0000000000000004 [ 318.284680][T12557] RBP: 00007f6138e07090 R08: 0000000000000000 R09: 0000000000000000 [ 318.284691][T12557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.284701][T12557] R13: 00007f6138226038 R14: 00007f6138225fa0 R15: 00007ffeb5012c38 [ 318.284730][T12557] [ 318.618687][T12559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1724'. [ 318.743396][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'. [ 318.778365][T12561] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1727'. [ 318.949956][T12564] veth9: entered allmulticast mode [ 319.010879][T12570] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1726'. [ 319.410114][T12563] bond10: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 319.551547][T12563] bond10 (unregistering): Released all slaves [ 320.137310][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1735'. [ 320.404601][ T5624] block nbd1: Receive control failed (result -107) [ 320.675528][T12602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1738'. [ 320.837146][T12606] ip6tnl0: Caught tx_queue_len zero misconfig [ 320.853178][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1738'. [ 321.238309][T12616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1743'. [ 321.483379][T12627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1747'. [ 321.547309][T12627] netlink: 'syz.3.1747': attribute type 1 has an invalid length. [ 321.652634][T12627] bond5: entered promiscuous mode [ 321.659302][T12627] 8021q: adding VLAN 0 to HW filter on device bond5 [ 321.712032][T12633] xfrm1: entered allmulticast mode [ 321.936157][T12627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1747'. [ 323.731582][T12683] __nla_validate_parse: 3 callbacks suppressed [ 323.731606][T12683] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1763'. [ 323.847709][T12685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1761'. [ 323.950281][T12693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1766'. [ 324.445514][T12710] tipc: Enabling of bearer rejected, failed to enable media [ 324.683013][T12717] bridge0: port 4(veth1_virt_wifi) entered blocking state [ 324.705299][T12717] bridge0: port 4(veth1_virt_wifi) entered disabled state [ 324.728599][T12717] veth1_virt_wifi: entered allmulticast mode [ 324.915271][T12717] veth1_virt_wifi: left allmulticast mode [ 324.955027][T12729] netlink: 'syz.1.1773': attribute type 1 has an invalid length. [ 325.223903][T12735] netlink: 'syz.3.1776': attribute type 9 has an invalid length. [ 325.614050][T12736] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1774'. [ 325.765800][T12736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1774'. [ 326.387621][T12776] tipc: Enabling of bearer rejected, failed to enable media [ 327.604892][T12810] x_tables: duplicate underflow at hook 2 [ 327.967415][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1800'. [ 328.702198][T12847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1808'. [ 328.768068][T12847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1808'. [ 329.233534][T12857] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1812'. [ 329.341413][T12857] syzkaller0: entered promiscuous mode [ 329.356141][T12857] syzkaller0: entered allmulticast mode [ 329.527936][T12857] tipc: Started in network mode [ 329.532887][T12857] tipc: Node identity aa915d815004, cluster identity 4711 [ 329.542705][T12857] tipc: Enabled bearer , priority 0 [ 329.848036][T12883] netlink: 'syz.2.1818': attribute type 9 has an invalid length. [ 329.855877][T12883] netlink: 'syz.2.1818': attribute type 6 has an invalid length. [ 329.950465][T12855] tipc: Resetting bearer [ 330.058266][T12855] tipc: Disabling bearer [ 330.102146][T12888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1819'. [ 330.213970][T12891] IPv6: NLM_F_CREATE should be specified when creating new route [ 330.245676][T12894] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1819'. [ 330.256426][T12894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1819'. [ 330.332585][T12895] xt_hashlimit: size too large, truncated to 1048576 [ 330.359811][T12895] xt_hashlimit: max too large, truncated to 1048576 [ 330.420954][T12893] netlink: 'syz.1.1822': attribute type 21 has an invalid length. [ 330.474411][T12893] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1822'. [ 330.485844][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1823'. [ 330.576481][T12893] netlink: 'syz.1.1822': attribute type 4 has an invalid length. [ 330.621607][T12893] netlink: 'syz.1.1822': attribute type 3 has an invalid length. [ 330.629420][T12893] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1822'. [ 331.540724][T12940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1833'. [ 331.549763][T12940] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 331.610913][T12943] netlink: 'syz.0.1834': attribute type 3 has an invalid length. [ 331.666540][T12943] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1834'. [ 331.766572][T12913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.778745][T12933] netlink: 'syz.4.1830': attribute type 1 has an invalid length. [ 332.678740][T12983] trusted_key: syz.3.1843 sent an empty control message without MSG_MORE. [ 332.724383][T12961] veth1_macvtap: renamed from vlan0 [ 332.828241][T12965] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 332.991238][T12985] nbd: must specify an index to disconnect [ 333.820271][T13010] netlink: 'syz.3.1852': attribute type 1 has an invalid length. [ 333.828159][T13010] __nla_validate_parse: 9 callbacks suppressed [ 333.828177][T13010] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1852'. [ 333.845046][T13015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1854'. [ 333.862173][T13015] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1854'. [ 334.065956][T13018] netlink: 'syz.0.1850': attribute type 2 has an invalid length. [ 334.169561][T13028] netlink: 'syz.1.1855': attribute type 4 has an invalid length. [ 334.530319][T13037] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1857'. [ 334.826028][T13050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1861'. [ 334.836321][T13050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1861'. [ 334.867444][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1861'. [ 335.326405][T13065] openvswitch: netlink: Missing valid actions attribute. [ 335.403311][T13065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.637440][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 335.646395][T13070] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1866'. [ 335.853484][T13074] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1868'. [ 335.894886][T13076] validate_nla: 2 callbacks suppressed [ 335.894907][T13076] netlink: 'syz.3.1870': attribute type 1 has an invalid length. [ 336.218583][T13089] tunl0: Caught tx_queue_len zero misconfig [ 337.283772][T13114] sctp: [Deprecated]: syz.2.1877 (pid 13114) Use of int in maxseg socket option. [ 337.283772][T13114] Use struct sctp_assoc_value instead [ 338.447689][T13133] pimreg: entered allmulticast mode [ 338.453832][T13133] pimreg: left allmulticast mode [ 339.026317][ T1134] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.040387][ T1134] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.145093][ T1134] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.153887][ T1134] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.273885][T13154] x_tables: duplicate underflow at hook 1 [ 339.774966][T13160] __nla_validate_parse: 8 callbacks suppressed [ 339.775024][T13160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1893'. [ 339.850470][T13160] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1893'. [ 340.142264][T13170] veth0: Caught tx_queue_len zero misconfig [ 340.325357][T13179] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.333261][T13179] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.550346][T13184] tipc: Started in network mode [ 340.555306][T13184] tipc: Node identity 3eec1a958634, cluster identity 4711 [ 340.562663][T13184] tipc: Enabled bearer , priority 0 [ 340.589519][T13184] syzkaller0: entered promiscuous mode [ 340.595065][T13184] syzkaller0: entered allmulticast mode [ 340.672386][T13180] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1898'. [ 341.230460][T13183] tipc: Resetting bearer [ 341.372979][T13183] tipc: Disabling bearer [ 342.032284][T13201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1904'. [ 342.078695][T13205] netlink: 'syz.0.1906': attribute type 32 has an invalid length. [ 342.373691][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1907'. [ 342.412098][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1908'. [ 342.421070][T13218] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1908'. [ 342.854611][T13228] x_tables: ip_tables: osf match: only valid for protocol 6 [ 343.375416][T13242] netlink: 'syz.0.1915': attribute type 2 has an invalid length. [ 343.389378][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1915'. [ 343.596136][T13248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1917'. [ 343.890300][T13253] hsr0 speed is unknown, defaulting to 1000 [ 343.952394][T13253] hsr0 speed is unknown, defaulting to 1000 [ 343.959303][T13253] hsr0 speed is unknown, defaulting to 1000 [ 343.966427][T13253] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 343.980634][T13253] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 343.997551][T13253] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 344.170787][T13253] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 344.293331][T13253] hsr0 speed is unknown, defaulting to 1000 [ 344.421262][T13253] hsr0 speed is unknown, defaulting to 1000 [ 344.473867][T13253] hsr0 speed is unknown, defaulting to 1000 [ 344.482064][T13253] hsr0 speed is unknown, defaulting to 1000 [ 344.490213][T13253] hsr0 speed is unknown, defaulting to 1000 [ 344.556718][T13259] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1921'. [ 344.868561][T13275] hsr0 speed is unknown, defaulting to 1000 [ 344.929751][T13284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1925'. [ 344.951079][T13284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1925'. [ 345.161189][T13284] sit0: entered promiscuous mode [ 345.166424][T13284] netlink: 'syz.0.1925': attribute type 1 has an invalid length. [ 345.174293][T13284] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1925'. [ 345.536513][T13284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1925'. [ 345.571232][T13284] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1925'. [ 345.699954][T13312] netlink: 'syz.2.1931': attribute type 4 has an invalid length. [ 345.791444][T13316] netlink: 'syz.2.1931': attribute type 4 has an invalid length. [ 345.844078][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1931'. [ 345.855663][T13319] FAULT_INJECTION: forcing a failure. [ 345.855663][T13319] name failslab, interval 1, probability 0, space 0, times 0 [ 345.868831][T13319] CPU: 0 UID: 0 PID: 13319 Comm: syz.4.1933 Not tainted syzkaller #0 PREEMPT(full) [ 345.868873][T13319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 345.868893][T13319] Call Trace: [ 345.868903][T13319] [ 345.868911][T13319] dump_stack_lvl+0xe8/0x150 [ 345.868953][T13319] should_fail_ex+0x40c/0x560 [ 345.868985][T13319] should_failslab+0xa8/0x100 [ 345.869020][T13319] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 345.869047][T13319] ? sctp_get_port_local+0x6bd/0x1700 [ 345.869077][T13319] ? sctp_get_port_local+0x6bd/0x1700 [ 345.869116][T13319] sctp_get_port_local+0x6bd/0x1700 [ 345.869163][T13319] ? __pfx_sctp_get_port_local+0x10/0x10 [ 345.869197][T13319] ? sctp_bind_addr_match+0x30/0x2b0 [ 345.869223][T13319] ? sctp_bind_addr_match+0x28b/0x2b0 [ 345.869252][T13319] sctp_do_bind+0x4d9/0x9a0 [ 345.869291][T13319] sctp_connect_new_asoc+0x270/0x6b0 [ 345.869324][T13319] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 345.869358][T13319] ? __ipv6_addr_type+0x59/0x2f0 [ 345.869387][T13319] ? sctp_inet6_send_verify+0x6e/0x300 [ 345.869421][T13319] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 345.869456][T13319] __sctp_connect+0x5cb/0xdc0 [ 345.869501][T13319] ? __pfx___sctp_connect+0x10/0x10 [ 345.869532][T13319] ? security_sctp_bind_connect+0x7e/0x2c0 [ 345.869565][T13319] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 345.869594][T13319] sctp_getsockopt_connectx3+0x227/0x360 [ 345.869620][T13319] ? lock_sock_nested+0x6a/0x100 [ 345.869647][T13319] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 345.869679][T13319] ? sctp_getsockopt+0x12f/0xb90 [ 345.869711][T13319] ? __local_bh_enable_ip+0xd0/0x130 [ 345.869742][T13319] sctp_getsockopt+0x984/0xb90 [ 345.869774][T13319] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 345.869800][T13319] do_sock_getsockopt+0x51d/0x7e0 [ 345.869839][T13319] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 345.869889][T13319] ? __fget_files+0x3a2/0x420 [ 345.869918][T13319] ? __fget_files+0x2a/0x420 [ 345.869954][T13319] __x64_sys_getsockopt+0x1a4/0x240 [ 345.869993][T13319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.870018][T13319] do_syscall_64+0x174/0x580 [ 345.870047][T13319] ? trace_irq_disable+0x3b/0x140 [ 345.870075][T13319] ? clear_bhb_loop+0x40/0x90 [ 345.870102][T13319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.870125][T13319] RIP: 0033:0x7f91fd59de59 [ 345.870147][T13319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.870165][T13319] RSP: 002b:00007f91fe3f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 345.870188][T13319] RAX: ffffffffffffffda RBX: 00007f91fd825fa0 RCX: 00007f91fd59de59 [ 345.870204][T13319] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 345.870216][T13319] RBP: 00007f91fe3f9090 R08: 0000200000000640 R09: 0000000000000000 [ 345.870230][T13319] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 345.870244][T13319] R13: 00007f91fd826038 R14: 00007f91fd825fa0 R15: 00007ffcb8694fa8 [ 345.870279][T13319] [ 346.516075][T13326] tipc: Enabling of bearer rejected, failed to enable media [ 346.637056][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1937'. [ 347.031141][T13348] bond0: (slave ip6tnl0): refused to change device type [ 347.143990][T13348] ip6erspan0: entered allmulticast mode [ 347.204875][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1940'. [ 347.352274][T13359] FAULT_INJECTION: forcing a failure. [ 347.352274][T13359] name failslab, interval 1, probability 0, space 0, times 0 [ 347.365044][T13359] CPU: 0 UID: 0 PID: 13359 Comm: syz.4.1944 Not tainted syzkaller #0 PREEMPT(full) [ 347.365076][T13359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 347.365090][T13359] Call Trace: [ 347.365172][T13359] [ 347.365241][T13359] dump_stack_lvl+0xe8/0x150 [ 347.365408][T13359] should_fail_ex+0x40c/0x560 [ 347.365518][T13359] should_failslab+0xa8/0x100 [ 347.365583][T13359] __kmalloc_cache_noprof+0xa8/0x660 [ 347.365621][T13359] ? sctp_add_bind_addr+0x8c/0x370 [ 347.365742][T13359] ? sctp_add_bind_addr+0x8c/0x370 [ 347.365769][T13359] ? __pfx_sctp_get_port_local+0x10/0x10 [ 347.365806][T13359] sctp_add_bind_addr+0x8c/0x370 [ 347.365831][T13359] ? sctp_auto_asconf_init+0x14d/0x1d0 [ 347.365868][T13359] sctp_do_bind+0x597/0x9a0 [ 347.365911][T13359] sctp_connect_new_asoc+0x270/0x6b0 [ 347.365947][T13359] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 347.365983][T13359] ? __ipv6_addr_type+0x59/0x2f0 [ 347.366094][T13359] ? sctp_inet6_send_verify+0x6e/0x300 [ 347.366162][T13359] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 347.366259][T13359] __sctp_connect+0x5cb/0xdc0 [ 347.366310][T13359] ? __pfx___sctp_connect+0x10/0x10 [ 347.366342][T13359] ? security_sctp_bind_connect+0x7e/0x2c0 [ 347.366448][T13359] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 347.366498][T13359] sctp_getsockopt_connectx3+0x227/0x360 [ 347.366524][T13359] ? lock_sock_nested+0x6a/0x100 [ 347.366612][T13359] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 347.366645][T13359] ? sctp_getsockopt+0x12f/0xb90 [ 347.366679][T13359] ? __local_bh_enable_ip+0xd0/0x130 [ 347.366735][T13359] sctp_getsockopt+0x984/0xb90 [ 347.366766][T13359] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 347.366798][T13359] do_sock_getsockopt+0x51d/0x7e0 [ 347.366864][T13359] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 347.366913][T13359] ? __fget_files+0x3a2/0x420 [ 347.366954][T13359] ? __fget_files+0x2a/0x420 [ 347.366987][T13359] __x64_sys_getsockopt+0x1a4/0x240 [ 347.367022][T13359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.367060][T13359] do_syscall_64+0x174/0x580 [ 347.367153][T13359] ? trace_irq_disable+0x3b/0x140 [ 347.367195][T13359] ? clear_bhb_loop+0x40/0x90 [ 347.367228][T13359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.367249][T13359] RIP: 0033:0x7f91fd59de59 [ 347.367277][T13359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.367296][T13359] RSP: 002b:00007f91fe3f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 347.367346][T13359] RAX: ffffffffffffffda RBX: 00007f91fd825fa0 RCX: 00007f91fd59de59 [ 347.367361][T13359] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 347.367373][T13359] RBP: 00007f91fe3f9090 R08: 0000200000000640 R09: 0000000000000000 [ 347.367386][T13359] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 347.367400][T13359] R13: 00007f91fd826038 R14: 00007f91fd825fa0 R15: 00007ffcb8694fa8 [ 347.367436][T13359] [ 348.294794][T13383] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1947'. [ 348.391144][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 348.921682][T13394] bridge4: entered promiscuous mode [ 348.959189][T13394] bridge4: entered allmulticast mode [ 349.016203][T13400] syzkaller0: entered promiscuous mode [ 349.021757][T13400] syzkaller0: entered allmulticast mode [ 350.202236][T13428] __nla_validate_parse: 4 callbacks suppressed [ 350.202293][T13428] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1962'. [ 350.318840][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1962'. [ 353.051947][T13434] netlink: 'syz.3.1962': attribute type 4 has an invalid length. [ 353.382793][T13462] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1966'. [ 353.503794][T13473] netlink: 'syz.1.1964': attribute type 9 has an invalid length. [ 353.521771][T13462] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1966'. [ 353.608173][T13462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.674555][T13485] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1968'. [ 353.684129][T13476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1965'. [ 353.684180][T13476] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1965'. [ 353.834540][T13482] netlink: 'syz.3.1968': attribute type 1 has an invalid length. [ 353.871557][T13482] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1968'. [ 353.932018][T13482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1968'. [ 353.983972][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1970'. [ 353.996894][T13484] nbd: must specify at least one socket [ 354.135627][T13495] geneve3: entered promiscuous mode [ 354.233560][T13500] dvmrp31: entered allmulticast mode [ 355.285715][T13537] __nla_validate_parse: 11 callbacks suppressed [ 355.285762][T13537] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1982'. [ 355.675195][T13553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.029005][T13553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.206310][T13574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1990'. [ 356.257864][T13574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1990'. [ 356.359610][T13555] pim6reg: entered allmulticast mode [ 356.365153][T13562] pim6reg: left allmulticast mode [ 356.415841][T13559] mac80211_hwsim hwsim10 »»»»»»: renamed from wlan0 [ 356.676358][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1991'. [ 356.685310][T13582] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1991'. [ 356.796662][T13585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.181388][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1998'. [ 357.437946][T13613] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2002'. [ 357.490961][T13615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2003'. [ 357.658675][T13618] netlink: 'syz.4.2001': attribute type 1 has an invalid length. [ 357.684035][T13618] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2001'. [ 357.717862][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2005'. [ 358.791199][T13666] pimreg: entered allmulticast mode [ 358.917802][T13669] xt_hashlimit: size too large, truncated to 1048576 [ 358.967290][T13665] bond0: (slave ip6tnl0): refused to change device type [ 359.462101][T13661] pimreg: left allmulticast mode [ 359.906229][T13699] sctp: [Deprecated]: syz.2.2026 (pid 13699) Use of int in maxseg socket option. [ 359.906229][T13699] Use struct sctp_assoc_value instead [ 360.979512][T13739] netlink: 'syz.3.2038': attribute type 10 has an invalid length. [ 361.054625][T13741] __nla_validate_parse: 8 callbacks suppressed [ 361.054680][T13741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2037'. [ 361.088337][T13741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2037'. [ 361.112945][T13745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2037'. [ 361.264214][T13745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2037'. [ 361.273774][T13742] bridge0: port 1(syz_tun) entered blocking state [ 361.280823][T13742] bridge0: port 1(syz_tun) entered disabled state [ 361.287506][T13742] syz_tun: entered allmulticast mode [ 361.320068][T13742] syz_tun: entered promiscuous mode [ 361.550030][T13755] tipc: Enabled bearer , priority 0 [ 361.659731][T13755] tipc: Resetting bearer [ 361.876038][T13754] tipc: Disabling bearer [ 362.737273][T13799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2051'. [ 362.752121][T13801] netlink: 'syz.4.2052': attribute type 13 has an invalid length. [ 362.768462][T13800] netlink: 'syz.0.2049': attribute type 1 has an invalid length. [ 362.779748][T13801] netlink: 'syz.4.2052': attribute type 17 has an invalid length. [ 362.861531][T13797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.969361][T13797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.114023][T13811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2049'. [ 363.851060][T13820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.883730][T13801] bridge0: port 3(bond0) entered blocking state [ 363.890158][T13801] bridge0: port 3(bond0) entered forwarding state [ 363.929711][T13801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.939042][T13801] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.968485][T13801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.031418][T13801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.042050][T13801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.055347][T13801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 364.080407][T13801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 364.094590][T13801] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 364.111560][T13800] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 364.251590][ T70] netdevsim netdevsim4 €Â: unset [0, 0] type 1 family 0 port 2816 - 0 [ 364.268407][ T70] netdevsim netdevsim4 €Â: unset [0, 1] type 1 family 0 port 8472 - 0 [ 364.276734][ T70] netdevsim netdevsim4 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.324434][ T70] netdevsim netdevsim4 €Â: unset [1, 1] type 2 family 0 port 39943 - 0 [ 364.361566][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.371937][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.391327][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.411751][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.501208][ T70] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 364.524006][ T70] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 364.532960][ T70] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.541876][ T70] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 39943 - 0 [ 364.572377][ T70] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 364.581324][ T70] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 364.592878][ T70] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.602015][ T70] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 39943 - 0 [ 364.611253][ T70] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 364.621474][ T70] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 364.733173][ T70] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.742139][ T70] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 39943 - 0 [ 365.014147][T13855] netlink: 'syz.4.2067': attribute type 1 has an invalid length. [ 365.021957][T13855] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2067'. [ 365.042582][T13855] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2067'. [ 365.062421][T13857] tipc: Started in network mode [ 365.067366][T13857] tipc: Node identity 400000000000000003, cluster identity 4711 [ 365.115371][T13859] tipc: Enabled bearer , priority 0 [ 365.193392][T13859] syzkaller0: entered promiscuous mode [ 365.251935][T13866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2066'. [ 365.261015][T13859] syzkaller0: entered allmulticast mode [ 365.267277][T13859] tipc: Resetting bearer [ 365.464200][T13866] vlan9: entered promiscuous mode [ 365.484113][T13866] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 365.538061][T13866] vlan9: entered allmulticast mode [ 365.555754][T13866] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 365.574088][T13876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2071'. [ 365.619481][T13856] tipc: Resetting bearer [ 368.128535][T13856] tipc: Disabling bearer [ 368.159212][T13869] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.166440][T13869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.174044][T13869] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.181216][T13869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.229077][T13869] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 368.238462][T13869] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 368.273397][ T6265] hsr0 speed is unknown, defaulting to 1000 [ 368.368557][T13901] netlink: 'syz.4.2076': attribute type 9 has an invalid length. [ 368.499409][T13906] netlink: 'syz.3.2078': attribute type 1 has an invalid length. [ 368.504980][T13908] netlink: zone id is out of range [ 368.512347][T13908] netlink: zone id is out of range [ 368.517499][T13908] netlink: zone id is out of range [ 368.525503][T13906] netlink: 'syz.3.2078': attribute type 2 has an invalid length. [ 368.529679][T13908] netlink: del zone limit has 4 unknown bytes [ 368.733266][T13906] __nla_validate_parse: 1 callbacks suppressed [ 368.733288][T13906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2078'. [ 369.236103][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2086'. [ 369.289891][T13943] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2086'. [ 369.356085][T13945] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 369.367125][T13945] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2091'. [ 369.381617][T13932] pimreg1: renamed from bridge0 (while UP) [ 369.408207][T13932] pimreg1: entered allmulticast mode [ 369.414449][T13932] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 369.510823][T13933] x_tables: duplicate underflow at hook 3 [ 369.610701][T13949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2092'. [ 369.693680][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2095'. [ 369.811168][T13956] bond11: option broadcast_neighbor: invalid value (4) [ 369.842315][T13965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2096'. [ 369.923034][T13956] bond11 (unregistering): Released all slaves [ 369.948699][T13965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2096'. [ 370.319804][T13980] xt_connbytes: Forcing CT accounting to be enabled [ 370.370173][T13980] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.623694][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2106'. [ 370.800991][T13991] block nbd2: server does not support multiple connections per device. [ 370.815679][T13991] block nbd2: shutting down sockets [ 370.851663][T14006] netlink: 'syz.1.2107': attribute type 1 has an invalid length. [ 370.884661][T14006] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2107'. [ 370.973162][T14018] netlink: 'syz.2.2110': attribute type 11 has an invalid length. [ 371.113953][T14025] sctp: [Deprecated]: syz.4.2111 (pid 14025) Use of int in maxseg socket option. [ 371.113953][T14025] Use struct sctp_assoc_value instead [ 371.493073][T14043] FAULT_INJECTION: forcing a failure. [ 371.493073][T14043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.597185][T14043] CPU: 1 UID: 0 PID: 14043 Comm: syz.4.2118 Not tainted syzkaller #0 PREEMPT(full) [ 371.597216][T14043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 371.597238][T14043] Call Trace: [ 371.597247][T14043] [ 371.597256][T14043] dump_stack_lvl+0xe8/0x150 [ 371.597296][T14043] should_fail_ex+0x40c/0x560 [ 371.597327][T14043] _copy_from_user+0x2d/0xb0 [ 371.597540][T14043] kstrtouint_from_user+0xd6/0x180 [ 371.597571][T14043] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 371.597616][T14043] proc_fail_nth_write+0x8e/0x210 [ 371.597661][T14043] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 371.597697][T14043] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 371.597725][T14043] vfs_write+0x296/0xba0 [ 371.597768][T14043] ? __pfx_vfs_write+0x10/0x10 [ 371.597802][T14043] ? __fget_files+0x2a/0x420 [ 371.597835][T14043] ? __fget_files+0x3a2/0x420 [ 371.597861][T14043] ? __fget_files+0x2a/0x420 [ 371.597898][T14043] ksys_write+0x150/0x270 [ 371.597934][T14043] ? __pfx_ksys_write+0x10/0x10 [ 371.597976][T14043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.598002][T14043] do_syscall_64+0x174/0x580 [ 371.598032][T14043] ? trace_irq_disable+0x3b/0x140 [ 371.598061][T14043] ? clear_bhb_loop+0x40/0x90 [ 371.598094][T14043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.598116][T14043] RIP: 0033:0x7f91fd55e68e [ 371.598138][T14043] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 371.598158][T14043] RSP: 002b:00007f91fe3f8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 371.598182][T14043] RAX: ffffffffffffffda RBX: 00007f91fe3f96c0 RCX: 00007f91fd55e68e [ 371.598198][T14043] RDX: 0000000000000001 RSI: 00007f91fe3f90a0 RDI: 0000000000000003 [ 371.598212][T14043] RBP: 00007f91fe3f9090 R08: 0000000000000000 R09: 0000000000000000 [ 371.598225][T14043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.598238][T14043] R13: 00007f91fd826038 R14: 00007f91fd825fa0 R15: 00007ffcb8694fa8 [ 371.598274][T14043] [ 371.931070][T14052] syzkaller0: entered promiscuous mode [ 371.936629][T14052] syzkaller0: entered allmulticast mode [ 376.275736][T14121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.838818][T14175] tipc: Enabled bearer , priority 0 [ 376.858112][T14175] syzkaller0: entered promiscuous mode [ 376.868328][T14175] syzkaller0: entered allmulticast mode [ 376.947227][T14181] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 376.956988][T14175] __nla_validate_parse: 5 callbacks suppressed [ 376.957008][T14175] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2148'. [ 377.025501][T14181] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 377.035310][T14173] tipc: Resetting bearer [ 377.047171][T14190] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2151'. [ 377.092494][T14173] tipc: Disabling bearer [ 377.299109][T14200] sctp: [Deprecated]: syz.4.2156 (pid 14200) Use of int in max_burst socket option. [ 377.299109][T14200] Use struct sctp_assoc_value instead [ 377.999803][T14210] hsr0 speed is unknown, defaulting to 1000 [ 378.030971][T14214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2159'. [ 378.171152][T14214] bond17: entered promiscuous mode [ 378.176895][T14214] 8021q: adding VLAN 0 to HW filter on device bond17 [ 378.406272][T14218] vlan10: entered allmulticast mode [ 378.421708][T14218] bond17: entered allmulticast mode [ 378.569196][T14230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2164'. [ 378.666257][T14238] netlink: 'syz.2.2164': attribute type 10 has an invalid length. [ 378.866581][T14250] xt_hashlimit: size too large, truncated to 1048576 [ 378.915969][T14238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 378.993142][T14238] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 379.020819][T14242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2166'. [ 380.189040][T14313] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2181'. [ 380.226331][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2177'. [ 380.279653][T14321] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2181'. [ 381.211053][T14353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2187'. [ 381.523187][T14362] tipc: Enabled bearer , priority 0 [ 381.530966][T14362] syzkaller0: entered promiscuous mode [ 381.536575][T14362] syzkaller0: entered allmulticast mode [ 381.548170][T14362] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 381.608872][T14362] tipc: Resetting bearer [ 381.648313][T14360] tipc: Resetting bearer [ 381.740623][T14360] tipc: Disabling bearer [ 381.752451][T14359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2191'. [ 381.796541][T14359] netlink: 'syz.2.2191': attribute type 16 has an invalid length. [ 382.020588][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2195'. [ 382.029559][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2195'. [ 382.126392][T14381] netlink: 'syz.3.2197': attribute type 1 has an invalid length. [ 382.174600][T14381] 8021q: adding VLAN 0 to HW filter on device bond6 [ 382.246297][T14387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2198'. [ 382.258071][T14387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2198'. [ 382.552810][T14404] syzkaller0: entered promiscuous mode [ 382.558362][T14404] syzkaller0: entered allmulticast mode [ 382.616902][T14394] batman_adv: batadv0: Adding interface: vlan4 [ 382.631377][T14394] batman_adv: batadv0: The MTU of interface vlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 5408 would solve the problem. [ 382.665272][T14394] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active [ 382.942547][T14423] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2208'. [ 382.965256][T14423] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2208'. [ 383.186242][T14435] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2207'. [ 383.276114][T14443] sock: sock_set_timeout: `syz.1.2209' (pid 14443) tries to set negative timeout [ 383.325733][T14434] block nbd4: not configured, cannot reconfigure [ 383.376448][T14434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.492559][T14451] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 384.476930][T14503] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2223'. [ 384.512987][T14505] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2224'. [ 384.674405][T14514] netlink: 'syz.1.2223': attribute type 8 has an invalid length. [ 384.693380][ T96] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x69 [ 384.712955][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'. [ 384.811327][T14522] netlink: 'syz.2.2225': attribute type 13 has an invalid length. [ 384.819224][T14522] netlink: 'syz.2.2225': attribute type 17 has an invalid length. [ 385.055497][T14515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.072080][T14515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.173942][T14522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.184330][T14522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.255223][T14522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.265904][T14522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.288692][T14522] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 385.818516][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 387.411268][T14503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 387.590424][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2230'. [ 387.656669][T14541] hsr0 speed is unknown, defaulting to 1000 [ 388.236423][T14566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2240'. [ 388.590065][T14541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2232'. [ 388.700225][T14583] x_tables: duplicate underflow at hook 1 [ 388.708110][T14583] syzkaller0: entered promiscuous mode [ 388.713639][T14583] syzkaller0: entered allmulticast mode [ 388.778345][T14583] tipc: Enabled bearer , priority 0 [ 388.872810][T14583] tipc: Resetting bearer [ 388.935434][T14585] netlink: 'syz.2.2245': attribute type 13 has an invalid length. [ 388.953255][T14585] netlink: 'syz.2.2245': attribute type 17 has an invalid length. [ 389.007813][T14582] tipc: Resetting bearer [ 389.102395][T14582] tipc: Disabling bearer [ 389.363192][T14585] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 390.270598][T14629] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2254'. [ 390.512096][T14637] tipc: Enabling of bearer rejected, failed to enable media [ 390.523176][T14637] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 390.821087][T14646] netlink: 'syz.1.2258': attribute type 3 has an invalid length. [ 390.840755][T14646] netlink: 'syz.1.2258': attribute type 16 has an invalid length. [ 390.858674][T14646] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2258'. [ 390.901704][T14655] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2262'. [ 390.911350][T14655] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2262'. [ 391.150120][T14664] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2263'. [ 391.262273][T14675] tipc: Enabled bearer , priority 0 [ 391.287612][T14675] tipc: Resetting bearer [ 391.464734][T14686] netlink: 'syz.1.2271': attribute type 21 has an invalid length. [ 391.475939][T14688] netlink: 'syz.1.2271': attribute type 21 has an invalid length. [ 391.662469][T14693] wireguard0: entered promiscuous mode [ 391.668021][T14693] wireguard0: entered allmulticast mode [ 392.325693][ T9377] tipc: Node number set to 1124073472 [ 392.476882][T14723] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2278'. [ 393.268848][T14754] netlink: 'syz.4.2283': attribute type 1 has an invalid length. [ 393.306568][T14754] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2283'. [ 395.012075][T14841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2299'. [ 395.022481][T14827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2293'. [ 395.066927][T14827] xt_TCPMSS: Only works on TCP SYN packets [ 395.328383][T14841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2299'. [ 395.446517][T14866] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2304'. [ 395.876373][T14873] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 395.975067][ T3113] IPVS: starting estimator thread 0... [ 396.188976][T14882] IPVS: using max 26 ests per chain, 62400 per kthread [ 396.311626][ T7995] [ 396.314020][ T7995] ====================================================== [ 396.321096][ T7995] WARNING: possible circular locking dependency detected [ 396.322339][T14877] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.328240][ T7995] syzkaller #0 Not tainted [ 396.335810][T14877] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.339594][ T7995] ------------------------------------------------------ [ 396.353664][ T7995] kworker/u8:16/7995 is trying to acquire lock: [ 396.359927][ T7995] ffff888034b65070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 396.369209][ T7995] [ 396.369209][ T7995] but task is already holding lock: [ 396.376595][ T7995] ffff888069ce2558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 396.386586][ T7995] [ 396.386586][ T7995] which lock already depends on the new lock. [ 396.386586][ T7995] [ 396.397008][ T7995] [ 396.397008][ T7995] the existing dependency chain (in reverse order) is: [ 396.406059][ T7995] [ 396.406059][ T7995] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 396.414461][ T7995] _raw_spin_lock+0x2e/0x40 [ 396.419560][ T7995] sch_direct_xmit+0x15f/0x4c0 [ 396.424885][ T7995] __dev_queue_xmit+0x1754/0x37f0 [ 396.430518][ T7995] hsr_forward_skb+0x152a/0x28c0 [ 396.436008][ T7995] send_hsr_supervision_frame+0x733/0xcf0 [ 396.442280][ T7995] hsr_announce+0x1db/0x370 [ 396.447333][ T7995] call_timer_fn+0x192/0x5e0 [ 396.452517][ T7995] __run_timer_base+0x652/0x8b0 [ 396.457932][ T7995] run_timer_softirq+0xb7/0x170 [ 396.463341][ T7995] handle_softirqs+0x225/0x840 [ 396.468653][ T7995] __irq_exit_rcu+0xca/0x220 [ 396.473793][ T7995] irq_exit_rcu+0x9/0x30 [ 396.478578][ T7995] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 396.484768][ T7995] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 396.491305][ T7995] lock_acquire+0x221/0x350 [ 396.496382][ T7995] fs_reclaim_acquire+0x98/0x100 [ 396.501961][ T7995] kmem_cache_alloc_noprof+0x64/0x5f0 [ 396.507867][ T7995] anon_vma_fork+0x88/0x540 [ 396.512914][ T7995] dup_mmap+0x970/0x1d90 [ 396.517788][ T7995] copy_mm+0x11a/0x480 [ 396.522453][ T7995] copy_process+0x1e99/0x43f0 [ 396.527696][ T7995] kernel_clone+0x2d7/0x940 [ 396.532761][ T7995] __x64_sys_clone+0x1b6/0x230 [ 396.538182][ T7995] do_syscall_64+0x174/0x580 [ 396.543334][ T7995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.549775][ T7995] [ 396.549775][ T7995] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 396.557534][ T7995] __lock_acquire+0x1520/0x2cf0 [ 396.562938][ T7995] lock_acquire+0x106/0x350 [ 396.567982][ T7995] _raw_spin_lock_bh+0x36/0x50 [ 396.573314][ T7995] hsr_dev_xmit+0x237/0x360 [ 396.578350][ T7995] dev_hard_start_xmit+0x2cd/0x830 [ 396.584075][ T7995] __dev_queue_xmit+0x1435/0x37f0 [ 396.589645][ T7995] NF_HOOK+0x33a/0x3c0 [ 396.594373][ T7995] arp_xmit+0x16c/0x270 [ 396.599082][ T7995] arp_solicit+0xbdc/0xe40 [ 396.604061][ T7995] __neigh_event_send+0xf0c/0x1510 [ 396.609808][ T7995] neigh_resolve_output+0x1a1/0x720 [ 396.615554][ T7995] ip_finish_output2+0xc4b/0x10b0 [ 396.621187][ T7995] ip_output+0x29f/0x450 [ 396.625988][ T7995] iptunnel_xmit+0x626/0xd10 [ 396.631187][ T7995] ip_tunnel_xmit+0x195b/0x2040 [ 396.636611][ T7995] __gre_xmit+0x19e/0x240 [ 396.641514][ T7995] erspan_xmit+0xad5/0x1590 [ 396.646557][ T7995] dev_hard_start_xmit+0x2cd/0x830 [ 396.652350][ T7995] sch_direct_xmit+0x257/0x4c0 [ 396.657719][ T7995] __dev_queue_xmit+0x1754/0x37f0 [ 396.663292][ T7995] alb_send_lp_vid+0x348/0x550 [ 396.668830][ T7995] alb_send_learning_packets+0x12c/0x300 [ 396.675187][ T7995] bond_alb_monitor+0x3d0/0x17c0 [ 396.680766][ T7995] process_scheduled_works+0xa8e/0x14e0 [ 396.686940][ T7995] worker_thread+0xa47/0xfb0 [ 396.692089][ T7995] kthread+0x388/0x470 [ 396.696702][ T7995] ret_from_fork+0x514/0xb70 [ 396.701865][ T7995] ret_from_fork_asm+0x1a/0x30 [ 396.707164][ T7995] [ 396.707164][ T7995] other info that might help us debug this: [ 396.707164][ T7995] [ 396.717415][ T7995] Possible unsafe locking scenario: [ 396.717415][ T7995] [ 396.725027][ T7995] CPU0 CPU1 [ 396.730446][ T7995] ---- ---- [ 396.735875][ T7995] lock(&qdisc_xmit_lock_key#4); [ 396.741279][ T7995] lock(&hsr->seqnr_lock); [ 396.748321][ T7995] lock(&qdisc_xmit_lock_key#4); [ 396.755978][ T7995] lock(&hsr->seqnr_lock); [ 396.760498][ T7995] [ 396.760498][ T7995] *** DEADLOCK *** [ 396.760498][ T7995] [ 396.768656][ T7995] 11 locks held by kworker/u8:16/7995: [ 396.774210][ T7995] #0: ffff88802a1ac140 ((wq_completion)bond4){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 396.785180][ T7995] #1: ffffc9001abc7c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 396.798251][ T7995] #2: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf3/0x17c0 [ 396.807849][ T7995] #3: ffffffff8eb59c80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 396.817924][ T7995] #4: ffff88802f3c5228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 396.830569][ T7995] #5: ffff888069ce2558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 396.840895][ T7995] #6: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 396.849831][ T7995] #7: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 396.859617][ T7995] #8: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 396.868519][ T7995] #9: ffffffff8eb59c80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 396.878458][ T7995] #10: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 396.887792][ T7995] [ 396.887792][ T7995] stack backtrace: [ 396.893697][ T7995] CPU: 1 UID: 0 PID: 7995 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 396.893722][ T7995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 396.893736][ T7995] Workqueue: bond4 bond_alb_monitor [ 396.893762][ T7995] Call Trace: [ 396.893771][ T7995] [ 396.893781][ T7995] dump_stack_lvl+0xe8/0x150 [ 396.893810][ T7995] print_circular_bug+0x2e1/0x300 [ 396.893829][ T7995] check_noncircular+0x12e/0x150 [ 396.893860][ T7995] __lock_acquire+0x1520/0x2cf0 [ 396.893888][ T7995] ? __siphash_unaligned+0x28d/0x3e0 [ 396.893985][ T7995] ? skb_network_protocol+0x23d/0x400 [ 396.894013][ T7995] ? hsr_dev_xmit+0x237/0x360 [ 396.894029][ T7995] lock_acquire+0x106/0x350 [ 396.894052][ T7995] ? hsr_dev_xmit+0x237/0x360 [ 396.894073][ T7995] ? hsr_dev_xmit+0x237/0x360 [ 396.894089][ T7995] _raw_spin_lock_bh+0x36/0x50 [ 396.894110][ T7995] ? hsr_dev_xmit+0x237/0x360 [ 396.894126][ T7995] hsr_dev_xmit+0x237/0x360 [ 396.894143][ T7995] ? hsr_dev_xmit+0x2d/0x360 [ 396.894161][ T7995] dev_hard_start_xmit+0x2cd/0x830 [ 396.894194][ T7995] __dev_queue_xmit+0x1435/0x37f0 [ 396.894215][ T7995] ? __dev_queue_xmit+0x29b/0x37f0 [ 396.894233][ T7995] ? __lock_acquire+0x683/0x2cf0 [ 396.894254][ T7995] ? arpt_do_table+0x25b/0x1f90 [ 396.894318][ T7995] ? __pfx___dev_queue_xmit+0x10/0x10 [ 396.894338][ T7995] ? __pfx_arpt_do_table+0x10/0x10 [ 396.894363][ T7995] ? NF_HOOK+0xa2/0x3c0 [ 396.894391][ T7995] NF_HOOK+0x33a/0x3c0 [ 396.894413][ T7995] ? __pfx_arp_xmit_finish+0x10/0x10 [ 396.894434][ T7995] ? NF_HOOK+0xa2/0x3c0 [ 396.894453][ T7995] ? __pfx_NF_HOOK+0x10/0x10 [ 396.894473][ T7995] ? lock_acquire+0x106/0x350 [ 396.894496][ T7995] ? __pfx_arp_xmit_finish+0x10/0x10 [ 396.894517][ T7995] ? inet_addr_type_dev_table+0x25/0x190 [ 396.894541][ T7995] arp_xmit+0x16c/0x270 [ 396.894561][ T7995] ? arp_xmit+0x23/0x270 [ 396.894581][ T7995] arp_solicit+0xbdc/0xe40 [ 396.894607][ T7995] ? __pfx_arp_solicit+0x10/0x10 [ 396.894635][ T7995] ? __neigh_event_send+0xea4/0x1510 [ 396.894664][ T7995] ? __pfx_arp_solicit+0x10/0x10 [ 396.894685][ T7995] __neigh_event_send+0xf0c/0x1510 [ 396.894712][ T7995] neigh_resolve_output+0x1a1/0x720 [ 396.894735][ T7995] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 396.894762][ T7995] ? ip_finish_output2+0x3de/0x10b0 [ 396.894785][ T7995] ip_finish_output2+0xc4b/0x10b0 [ 396.894814][ T7995] ? ip_skb_dst_mtu+0x811/0xa50 [ 396.894835][ T7995] ? ip_finish_output2+0x3de/0x10b0 [ 396.894859][ T7995] ? ip_finish_output+0x40b/0x530 [ 396.894881][ T7995] ip_output+0x29f/0x450 [ 396.894904][ T7995] ? ip_output+0x5a/0x450 [ 396.894925][ T7995] iptunnel_xmit+0x626/0xd10 [ 396.894956][ T7995] ip_tunnel_xmit+0x195b/0x2040 [ 396.894987][ T7995] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 396.895010][ T7995] ? __pfx_gre_build_header+0x10/0x10 [ 396.895031][ T7995] ? kfree+0x1c5/0x640 [ 396.895049][ T7995] ? pskb_expand_head+0x469/0x13a0 [ 396.895078][ T7995] __gre_xmit+0x19e/0x240 [ 396.895097][ T7995] ? __pfx___gre_xmit+0x10/0x10 [ 396.895119][ T7995] erspan_xmit+0xad5/0x1590 [ 396.895143][ T7995] ? __pfx_erspan_xmit+0x10/0x10 [ 396.895163][ T7995] ? __lock_acquire+0x683/0x2cf0 [ 396.895187][ T7995] dev_hard_start_xmit+0x2cd/0x830 [ 396.895220][ T7995] sch_direct_xmit+0x257/0x4c0 [ 396.895246][ T7995] ? __pfx_sch_direct_xmit+0x10/0x10 [ 396.895268][ T7995] ? __switch_to_asm+0x70/0x70 [ 396.895287][ T7995] __dev_queue_xmit+0x1754/0x37f0 [ 396.895309][ T7995] ? __dev_queue_xmit+0x29b/0x37f0 [ 396.895328][ T7995] ? __pfx___dev_queue_xmit+0x10/0x10 [ 396.895344][ T7995] ? rcu_is_watching+0x15/0xb0 [ 396.895386][ T7995] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 396.895407][ T7995] ? trace_kmem_cache_alloc+0x29/0xe0 [ 396.895424][ T7995] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 396.895445][ T7995] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 396.895465][ T7995] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 396.895489][ T7995] ? __alloc_skb+0x4cc/0x7a0 [ 396.895513][ T7995] ? alb_send_lp_vid+0x14e/0x550 [ 396.895536][ T7995] alb_send_lp_vid+0x348/0x550 [ 396.895561][ T7995] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 396.895589][ T7995] alb_send_learning_packets+0x12c/0x300 [ 396.895613][ T7995] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 396.895634][ T7995] ? bond_alb_monitor+0xf3/0x17c0 [ 396.895658][ T7995] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 396.895683][ T7995] bond_alb_monitor+0x3d0/0x17c0 [ 396.895706][ T7995] ? bond_alb_monitor+0xf3/0x17c0 [ 396.895727][ T7995] ? __pfx_bond_alb_monitor+0x10/0x10 [ 396.895749][ T7995] ? rcu_is_watching+0x15/0xb0 [ 396.895774][ T7995] ? process_scheduled_works+0xa20/0x14e0 [ 396.895794][ T7995] process_scheduled_works+0xa8e/0x14e0 [ 396.895824][ T7995] ? __pfx_process_scheduled_works+0x10/0x10 [ 396.895845][ T7995] ? assign_work+0x3cf/0x5d0 [ 396.895864][ T7995] worker_thread+0xa47/0xfb0 [ 396.895889][ T7995] ? __kthread_parkme+0x71/0x1f0 [ 396.895914][ T7995] kthread+0x388/0x470 [ 396.895937][ T7995] ? __pfx_worker_thread+0x10/0x10 [ 396.895955][ T7995] ? __pfx_kthread+0x10/0x10 [ 396.895979][ T7995] ret_from_fork+0x514/0xb70 [ 396.896005][ T7995] ? __pfx_ret_from_fork+0x10/0x10 [ 396.896029][ T7995] ? __switch_to+0xc89/0x1420 [ 396.896058][ T7995] ? __pfx_kthread+0x10/0x10 [ 396.896081][ T7995] ret_from_fork_asm+0x1a/0x30 [ 396.896104][ T7995] [ 397.615555][T14877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.693159][T14877] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 397.707157][T14877] veth3: left allmulticast mode [ 397.727165][T14877] veth7: left allmulticast mode [ 397.736763][T14877] bond5: left promiscuous mode [ 397.741677][T14877] bond5: left allmulticast mode [ 397.747383][T14877] bond6: left promiscuous mode [ 397.754323][T14877] veth0_to_bond: left promiscuous mode [ 397.760066][T14877] bond6: left allmulticast mode [ 397.764945][T14877] veth0_to_bond: left allmulticast mode [ 397.772257][T14877] vlan3: left allmulticast mode [ 397.777132][T14877] bond7: left allmulticast mode [ 397.782034][T14877] geneve2: left allmulticast mode [ 397.791285][T14877] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 397.798476][T14877] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 397.819645][T14877] vlan4: left allmulticast mode [ 397.824835][T14877] gretap0: left allmulticast mode [ 397.836435][T14877] geneve3: left promiscuous mode [ 397.857297][T14877] wireguard0: left promiscuous mode [ 397.862578][T14877] wireguard0: left allmulticast mode [ 397.960692][ T6266] hsr0 speed is unknown, defaulting to 1000 [ 397.966718][ T7995] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.976905][ T6266] syz0: Port: 1 Link DOWN [ 397.986145][ T7995] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.995938][ T7995] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.005153][ T7995] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.014810][ T7995] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.024200][ T7995] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.033513][ T7995] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.043096][ T7995] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0