last executing test programs: 1m49.984088052s ago: executing program 0 (id=2823): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)={0x1c, 0x52, 0x200, 0x0, 0x0, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000580)={&(0x7f00000000c0)=""/75, 0x100000, 0x800, 0x5, 0x2}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e0000000800000007000000000000000000009ac93382fd1268d5bc135fc2517f7a418c45277777f72481c37e7b1c176a8cbe22d78b6ba6dae2f68993643332de4df1d48b80f92340ac16bc9c947533a96ddee4cc210c2dd1c42072ebb6b3c4b5d31520165fd74ac3e4d3e766d444a159e5a538d189271b676b102126a1c67a69cfebbf1a0a991f0043f50ebac2c9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1ab0429c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1d, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@end, @timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r8 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}}, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) r10 = socket$inet(0x2, 0xa, 0x7fff) sendmsg$inet(r10, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYBLOB="15"], 0x40}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) 1m49.043098377s ago: executing program 0 (id=2828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40005) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000440)=@ethtool_eeprom={0xb, 0xff, 0xaa2}}) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 1m48.235533829s ago: executing program 0 (id=2840): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000611183000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES16=r1, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000f"], 0x70}, 0x1, 0x0, 0x0, 0x2800}, 0x40) 1m48.002857505s ago: executing program 0 (id=2846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x6bf1c2d5adba8c32}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1m47.7106047s ago: executing program 0 (id=2849): socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x1, {}, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) (async) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) getpeername$packet(r0, 0x0, &(0x7f0000000300)) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1m47.671748644s ago: executing program 0 (id=2852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000980), 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0800048004000180f66540efc499e647e663257029cbc68d239520b9988f31d297607aa51072097ba1d3965867a859dfab0eaec4e8c16c78cc34ed8072881bc7c8e719bb34dd8f9add"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 3.094221375s ago: executing program 4 (id=4083): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f0000000780)="ee340ad606a8ba6e1e06303bac9177f9a3f6d9178ca1bad7eccc3d7ae8b07450e0a3c731907db20ecf01a9511db303e44811acbd45fe6edf94bd96e076302cf7d8b6e3fa8ffe70ad9535c25c101c0370a80d867a2973a213fd246db2454a0041bcb061928774290f65a55b06443fb6112b943a42b44409af03583799006b61bf1e12650e8f23dbe8b8d7a9b52d8b0a96e406b358114283a359b6100ffc316e2b73b5c1ecde61f6334c", 0xa9) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "5921e32573696cda", "953931c5c306762adb31e0935f1851d04852975a3cdf421b98525f3da55c0f84", "a801ab6f", "8c5b54ad78b48c8b"}, 0x38) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c, 0x80000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) recvmmsg(r1, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10122, 0x0) 1.955987035s ago: executing program 4 (id=4097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="459e", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000000)={{r1}, 0x8000, 0x4, 0x5}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r6, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) 1.943690206s ago: executing program 2 (id=4098): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x439, 0x40, 0x0, {0x0, 0x0, 0xe403, r3, 0xa000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48050}, 0x200080d0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002fc0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000002c000880280000022400010000000000000000000000000000000000000000000000000000000000000000000800050001000000140002007767310000000000000000000000000008000700ff00000014000200776732"], 0x78}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r7, 0x603, 0x70bd2f, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42000}, 0x4000054) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd701e000000000d0000000000028000000d0001000000e4c381c3122b5eb60000090035080000000000000500000100000000028000000e004e23000000000500020000d825f1099f230fd6033e04f2be17633000100000000000000000000b000a000000000002004e2400000000040008000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.655842955s ago: executing program 3 (id=4100): r0 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.490881845s ago: executing program 1 (id=4102): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x1, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0xc014) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) (async) r2 = accept$alg(r1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000180)={0x7, 'wg1\x00', {0x7ff}, 0x5}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf, 0x70}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20008040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x140, r6, 0xa8f711316ca90a05, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0xb4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xdf2}, @NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x225f6fd9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffff}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10}]}, @NL802154_ATTR_SEC_DEVKEY={0x50, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x1000) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x88, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4010}, 0x40004) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan4\x00'}) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000800), r5) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r9, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x84) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) (rerun: 64) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x70, r10, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x215, 0x39}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4a3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x187}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x814) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000ac0)={{0x0, 0x9, 0x5, 0x1ff, 0x3, 0x80000001, 0x10000, 0x0, 0x1ff, 0x2d, 0xb, 0x7, 0xffff, 0x4, 0x2}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001ac0)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001cc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001ec0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000020c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000030c0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xbb, "4925b13342976a"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000040c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000042c0)={0xffffffffffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "ff59bd1c0815c9"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000052c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000010ef80)={0x7fff, [{r11}, {r12, r13}, {r14, r15}, {r16, r17}, {}, {0x0, r18}, {0x0, r19}], 0x6, "907ecca6348433"}) 1.449515352s ago: executing program 3 (id=4103): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x6e8, 0x148, 0x2f8, 0x228, 0x228, 0x228, 0x618, 0x618, 0x618, 0x618, 0x618, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0x0, 0x0, 0xff000000], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x120, 0x148, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [], [], 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@ipv6={@mcast2, @dev, [0x0, 0x0, 0x0, 0xffffffff], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x8}, {}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @empty, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0x0, 0xff000000], [0x0, 0x0, 0xff000000, 0xffffffff], 'veth1_to_hsr\x00', '\x00', {0xff}, {}, 0x62, 0x35, 0x1, 0x10}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@remote, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [0x400], 0x0, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x10, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0], 0xff}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x748) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000083900005fb0011d5917fe3991e146f6770000000000668678bd1600000000000000000000000000995e364351aac8fab48dc4c1df81ae0cf22c3e64e59197"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x8920, &(0x7f0000000040)={'bridge0\x00', @ifru_ivalue=0x4}) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f0000000900)}, 0x20) close(0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000301011100000000000000000a0000000800034000002400140019"], 0x30}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001d0001002dbd7000fbdbdf2502000000", @ANYRES32=0x0, @ANYBLOB="100008070a000100ffffffff"], 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.264014899s ago: executing program 2 (id=4104): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r1, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e649", 0xb82}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) connect$tipc(r1, &(0x7f00000052c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)}, 0x20000801) 1.200241722s ago: executing program 1 (id=4105): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @private=0xa010101}}, 0x1, 0x4000}, 0x90) bind$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x2, 0x0, 0x20}, 0x10) listen(r0, 0x0) listen(r0, 0x7) unshare(0x20000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x1, 0x0, 0x3, 0x84ba, 0x8}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000240)={{r2, &(0x7f00000000c0)='\x00', 0x10000, &(0x7f0000000100)={@_ha_fsid={[0x6, 0x34b]}, {0x9, 0x1, 0x2, 0x6}}, 0xfff, &(0x7f0000000140)={@_ha_fsid}, &(0x7f00000001c0)=0x800a}, {[0x1450, 0x4, 0x0, 0xa]}, 0xfffffff8, 0x35, &(0x7f0000000200)=""/53}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8, 0x2, {0x0, 0x0, 0x4}, 0x1}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27032400000514000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @local, @broadcast}, &(0x7f00000003c0)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x13c, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x54, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x47, 0x5, "452bf72b719b84bef5338e8e6d158128c6ea8c01e28c87a1da0eb8f4c17b0ceee296bac870b022abcf181e9eb72a8a06dd815f2c5f47a80da25db6918305c37e9fe438"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xa0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x71, 0x5, "b678b933a341ec66d14c824761e82cf9a32e918e843cd1c93de06fea7b6ebf4476c40ba2393eec8e6d7b0608a54b1a196d5d843884e80d7530f9a1d58996b004ceb0097f4df68975e452be8897a1817050e9409a97d06d86f21d3552e1aa4dc4db446ff8699e2f30d9195a3cec"}, @ETHTOOL_A_BITSET_VALUE={0x28, 0x4, "fb2b0e502f95e3c3f5166ebe16e1acb5af9a2a5f319756af95d85bd1298ecd9940e51c1b"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20040004}, 0x85) 1.19386865s ago: executing program 3 (id=4106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48844}, 0x4) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x8, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x200100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0xffffffff, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) write$ppp(r5, &(0x7f00000001c0)="38d5", 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x0, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x9}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xfffffffffffffff4}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 703.537669ms ago: executing program 1 (id=4107): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32], 0x54}}, 0x0) 702.531376ms ago: executing program 4 (id=4108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x0, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_LABELS_MASK={0x10, 0x17, [0xae, 0x9, 0x2]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0x7, 0x0, 0x5, 0x8, 0xd873, 0x81, 0x80000001, 0x4]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRESHEX=r0], 0x118}}, 0x0) 633.868592ms ago: executing program 3 (id=4109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @random="f287a0060f06", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x5, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @local}, @time_exceeded={0x3, 0x8998bcce58ae484, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3f}}}}}}}, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000000000210000000000000005000000000000005f"], &(0x7f0000000280)=""/265, 0x41, 0x109, 0x1}, 0x20) (rerun: 32) 574.437353ms ago: executing program 4 (id=4110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0xe, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000005) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x15, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0xb}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="dc0000000a0a030000000000000000000a0000090900010073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 516.052074ms ago: executing program 2 (id=4111): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x12f, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000200081dc0000000000000000020000d4ae00"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) 515.696019ms ago: executing program 1 (id=4112): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xfffe, 0x2}, 0x6) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r2, 0x3d810686a7d95765, 0x70bd28, 0x25dfd9fd}, 0x14}, 0x1, 0x0, 0x0, 0x20048855}, 0x40040d6) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) 381.778419ms ago: executing program 4 (id=4113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000a40)={0x0, 0x32, &(0x7f00000009c0)}, 0x24000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xe327}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x60}}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x7, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_USERDATA={0x75, 0x7, 0x1, 0x0, "b55ba11213763e9b2afbee7b3087c96c6f4840b948cfa155e75491724366eb393002e4e38ab2ef33e18ab2df2388ffb2c363c4324e3b5fbc75c3669b3e58ac788566fd92e6287bd98b179745845de85da01983b4aff3f59cba6f9ea8e0c7d23aa7f47dc06fa7d4b96ecdf890176a58e1bc"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x114}, 0x1, 0x0, 0x0, 0x40084}, 0x4002095) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000010000304000000000400040000000000df8bfdcc62a69510dca723d77c4824e4be139620206280fcedde8aa6baad00223b6af429a78b5aa5c135d4ccef64a8e16feee0ca86a4833d3a38dedd349a31c4d2358dcc8d84836f4fe985370abec48f111ddd1e2f1095e67c4c7bab417b1938b6de227102c04f7c1598f86fb87b7e1e2503054f39a0d722642f28ad8d2a488ac27dfadfb9902b00a2dded3ddcd96d1e7a672fee91c652b330fbbf88c5a58581615e6a94f79c2f58047f523656f8382b854a6ada3427797b548997ad227530bc6fbedc4517075341e20aa3834f9765ed", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x2000000000000000}, 0x4000000) 368.956721ms ago: executing program 2 (id=4114): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffefa, &(0x7f0000001240)={&(0x7f00000004c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="25b57e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b000000000000000000"]}, @nested={0x11e, 0x0, 0x0, 0x1, [@typed={0xdd, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="37c14f9a8ead341bf43ea3970236c74b2e318966b7420623d7f5c9fde55324d4c519e80f9f4d6b22b3f1b672c61240c38914eb560eb9ca62fa58"]}]}, 0x184}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0xffffff2c, 0x2, 0xfff, 0x1}, 0x10) 361.548021ms ago: executing program 1 (id=4115): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x26, 0x0, @void}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001640)={r4, r5, 0x4}, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) 360.781945ms ago: executing program 3 (id=4116): syz_emit_ethernet(0x1ce, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/447], 0x0) (async) syz_emit_ethernet(0x1ce, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/447], 0x0) r0 = socket(0x11, 0x800000003, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x8c81) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r7, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52) (async) write$tun(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)=@newqdisc={0x48, 0x24, 0xf0b, 0x3fff, 0x25dfdbfc, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000}]}}]}, 0x48}}, 0x4c094) (async) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)=@newqdisc={0x48, 0x24, 0xf0b, 0x3fff, 0x25dfdbfc, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000}]}}]}, 0x48}}, 0x4c094) 203.822093ms ago: executing program 4 (id=4117): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan1\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x3) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000f00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000827bd7000fbdbdf250500000008000300", @ANYRES32=r3, @ANYBLOB="0c0006000320000003000000db8057734c5a11f9b767379dcdf4a4bb24cf0a0d9f8e0815a157e50d717325ccd159748d2c90de8b40754804670b6c59ec4155d81654f5e37f7ef2d1bbf77e85da1bce10c73312f9b05462d6730e26c63966ccd81140f907c04c5e95875d1093208ac60035a3a973b0a2152fd3458eb59f1c37d642ac78320966ce9aa0bb8f98f26b7c999ce68d75c3bb3532c05e9a47701121"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24044004) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000dc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002dbd7000fcdbdf25200000000c00060000000000000000000c000600000000000000000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB='\bJR\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c0006000300000003000000"], 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x40001) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e000b7300fc040000000000000000000000000000ff020000000000000000000000000001"], 0x0) sendmsg(r6, &(0x7f0000000c40)={&(0x7f00000000c0)=@isdn={0x22, 0x4, 0x64, 0x1, 0x1}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000140)="5e860a42bcb2bbb0b3ac707f86a07568872bd5232b292592bbdabd0c75a2fb0016228429ca13d3a1bc", 0x29}, {&(0x7f0000000180)="ccfd62495ce2175d53baea2d93bda7b2341a1a051cceaa079bf5b7ba3b5ab503361173e1f7457a9b429461102f482b9a10ed5fb15992faafe547409c64a5c92a94992b3c6f04019f433da423bda7cfc9232150ee0e374c7273a9ba53119e1c80febd2ec493e810645ef3fe2bee8477da887abd36afe7bce17d9e8c4b4fde968fa668f4ed06ff590eba13402933b794daa05ec52e8efe5956c4a76d0845e51414ea7e0a64", 0xa4}, {&(0x7f0000000300)="85dc529e5d1f52671e0403c27d8501b84f33571daa59c8a0ae2c3124c9f8d1bf4332397410b4af39969dbc86f319efaad0bfab594aebff0af1c2cc6c406c80519b61aabf0f19642f5e1f0d43829962a7fe774889943309f868400dfe", 0x5c}, {&(0x7f0000000380)="22359c42dbef00f2dd756abeb5ce5d5cabf120f298312eb1db2fcadd02692d6d22549fa57851a812dfacd097367a0338907bcaebe53345ce3b5290b5308bbf9f021eae7c632d8e1d1dee46503fe5832bfbb7c8f52e1655905f4501a211840c0f728231f8266c694c62a0336112168442961387a5bd7d594b9818062f47189af7189fd00ef581147fb77802129c86f0d9d893a4ff5a877e80783fa0eb30abb0bcdb316cccfaef52e07f987be7ba2d58b11abb6c22d2dba65dbd6519a0f4dd63a149513950b0079b2dfdeb20e3652e0608a00d1d1a78fceeb9eaeb1dec56af6e57864ba42741845563f62b87b1cddf8d083e4514c3", 0xf4}, {&(0x7f0000000480)="e371f58276d3b7bc2c2d19dfc06ee7df265d5bf284abc13a9b60ea24e65e1f0a2465e22d1da57337f051dc759cf973730e1fe3f3e70661f037b0de065a552cfd1891664d4500bea6d95bbca5f07ea00e02dbb0f58bb646ad44c9cd31821d20b347c1eaeca99a9bc89a894e72b223c2d4fc4394601ba82e52b7170d77e8b261c61e4f98b2a7430a5bfeded8a7e8b5ecc685e6a80665e1a1aa95a6fde611aa5926ddaa4b112e4f0b8bf2781cd04822172f4e499c61f1da3fe2fd2f4eda271f0b8d6f607e56a9ab4e16681579af6b4dc15f1d3846dfd7d6a3c41f83c6f0c69b00e632bda35414d16c2e60165a20", 0xec}, {&(0x7f0000000580)="b383948a4ae21be5adc8ae4af2112f86696977e1aa921614e0e98e1a97b320517f530276f945f359b9757c6171fd6ac7af7fd58a8d164da492fade932498f713ce43bb039fb311bf62e2c11188cfe6e5737d00e2af5f2872e141d31189c66a6f912d76b17491c899204dd7d2042f84b2aa076b1bbef3f3d53acf79660f0d711e1291bd2ca8a178f7f8738ca9400ae45273af2c0d716385d59b750bb6b2f03a5a74a6cb2030e9214642ec7a", 0xab}, {&(0x7f0000000640)}, {&(0x7f0000000680)="02d7765d36f1a041adb355794a3f387743ccf19c5113d23786a94111ff5f78a78f944b3f7276e74e557f604700938958f00f94df68bf3091ac7c9d1f6de9a70cf7363e7627ef719addbe53d4e547af7f9eaabfb5f09bc24507f3bb597ae5c32c2cc235767a8ecba288f91a17ed008266e902f3c865c06ec5faa5fb3c6a8ec7ae3db91c16ed2257fb02c7b5b1210506f5ac6bf56df24553ac3208fbae9c95e6cdb92fd8eff5628016e82d6538c9533c4869a987937c3fb57b2087e7", 0xbb}, {&(0x7f0000000740)="57530322f927484885c54d67b693731664d808635d9f69b52e709bba9d4d6e2d7c437774ea4a4e14afe8495002463a7e576092921ff478c4750d4b541211081d3873060d186530a7c71f9da81f99432d2bfe96b2cd02147d9ee40a7be5d8976af380382eb89a36eddc6dc1d51cf434c13374ea23f466e7a0c99e6563f749f9625aa7a889c23b22721b2f6f852486d459af2cf29f3ca357c99a0641dba5657f3f6d8d29eabced04fc26b4bd23c3047c92151175c9232651b971c8d1d7d44236f98ef1c767599d74b3d6d6db7455668a2bede4e68499f3ed91e7767ec8b77c4d21ec38b24fbf093f5e74b4c28d2859f24849696144", 0xf4}], 0x9, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x330}, 0x20004804) (async) sendmsg(r6, &(0x7f0000000c40)={&(0x7f00000000c0)=@isdn={0x22, 0x4, 0x64, 0x1, 0x1}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000140)="5e860a42bcb2bbb0b3ac707f86a07568872bd5232b292592bbdabd0c75a2fb0016228429ca13d3a1bc", 0x29}, {&(0x7f0000000180)="ccfd62495ce2175d53baea2d93bda7b2341a1a051cceaa079bf5b7ba3b5ab503361173e1f7457a9b429461102f482b9a10ed5fb15992faafe547409c64a5c92a94992b3c6f04019f433da423bda7cfc9232150ee0e374c7273a9ba53119e1c80febd2ec493e810645ef3fe2bee8477da887abd36afe7bce17d9e8c4b4fde968fa668f4ed06ff590eba13402933b794daa05ec52e8efe5956c4a76d0845e51414ea7e0a64", 0xa4}, {&(0x7f0000000300)="85dc529e5d1f52671e0403c27d8501b84f33571daa59c8a0ae2c3124c9f8d1bf4332397410b4af39969dbc86f319efaad0bfab594aebff0af1c2cc6c406c80519b61aabf0f19642f5e1f0d43829962a7fe774889943309f868400dfe", 0x5c}, {&(0x7f0000000380)="22359c42dbef00f2dd756abeb5ce5d5cabf120f298312eb1db2fcadd02692d6d22549fa57851a812dfacd097367a0338907bcaebe53345ce3b5290b5308bbf9f021eae7c632d8e1d1dee46503fe5832bfbb7c8f52e1655905f4501a211840c0f728231f8266c694c62a0336112168442961387a5bd7d594b9818062f47189af7189fd00ef581147fb77802129c86f0d9d893a4ff5a877e80783fa0eb30abb0bcdb316cccfaef52e07f987be7ba2d58b11abb6c22d2dba65dbd6519a0f4dd63a149513950b0079b2dfdeb20e3652e0608a00d1d1a78fceeb9eaeb1dec56af6e57864ba42741845563f62b87b1cddf8d083e4514c3", 0xf4}, {&(0x7f0000000480)="e371f58276d3b7bc2c2d19dfc06ee7df265d5bf284abc13a9b60ea24e65e1f0a2465e22d1da57337f051dc759cf973730e1fe3f3e70661f037b0de065a552cfd1891664d4500bea6d95bbca5f07ea00e02dbb0f58bb646ad44c9cd31821d20b347c1eaeca99a9bc89a894e72b223c2d4fc4394601ba82e52b7170d77e8b261c61e4f98b2a7430a5bfeded8a7e8b5ecc685e6a80665e1a1aa95a6fde611aa5926ddaa4b112e4f0b8bf2781cd04822172f4e499c61f1da3fe2fd2f4eda271f0b8d6f607e56a9ab4e16681579af6b4dc15f1d3846dfd7d6a3c41f83c6f0c69b00e632bda35414d16c2e60165a20", 0xec}, {&(0x7f0000000580)="b383948a4ae21be5adc8ae4af2112f86696977e1aa921614e0e98e1a97b320517f530276f945f359b9757c6171fd6ac7af7fd58a8d164da492fade932498f713ce43bb039fb311bf62e2c11188cfe6e5737d00e2af5f2872e141d31189c66a6f912d76b17491c899204dd7d2042f84b2aa076b1bbef3f3d53acf79660f0d711e1291bd2ca8a178f7f8738ca9400ae45273af2c0d716385d59b750bb6b2f03a5a74a6cb2030e9214642ec7a", 0xab}, {&(0x7f0000000640)}, {&(0x7f0000000680)="02d7765d36f1a041adb355794a3f387743ccf19c5113d23786a94111ff5f78a78f944b3f7276e74e557f604700938958f00f94df68bf3091ac7c9d1f6de9a70cf7363e7627ef719addbe53d4e547af7f9eaabfb5f09bc24507f3bb597ae5c32c2cc235767a8ecba288f91a17ed008266e902f3c865c06ec5faa5fb3c6a8ec7ae3db91c16ed2257fb02c7b5b1210506f5ac6bf56df24553ac3208fbae9c95e6cdb92fd8eff5628016e82d6538c9533c4869a987937c3fb57b2087e7", 0xbb}, {&(0x7f0000000740)="57530322f927484885c54d67b693731664d808635d9f69b52e709bba9d4d6e2d7c437774ea4a4e14afe8495002463a7e576092921ff478c4750d4b541211081d3873060d186530a7c71f9da81f99432d2bfe96b2cd02147d9ee40a7be5d8976af380382eb89a36eddc6dc1d51cf434c13374ea23f466e7a0c99e6563f749f9625aa7a889c23b22721b2f6f852486d459af2cf29f3ca357c99a0641dba5657f3f6d8d29eabced04fc26b4bd23c3047c92151175c9232651b971c8d1d7d44236f98ef1c767599d74b3d6d6db7455668a2bede4e68499f3ed91e7767ec8b77c4d21ec38b24fbf093f5e74b4c28d2859f24849696144", 0xf4}], 0x9, &(0x7f0000001340)=ANY=[@ANYBLOB="d00000000000000009010000ff0000004b531aa9901f9f0a3a1e9bf50c73ab55791c3e1ba102fa41aed8b4fd3ac6e3ad92f074ed0d48284e2ede364482fbbffe7a139e5b0d7792a95ad8d12c20f1d56174417f1ceaa6b7e05dddd87c78af66e9b881a92ecac815f570ad4e1ef5d8336ab271c0f5eab86e5e718af24ab67d843e64d75a122ee550f96b1627d88634e2a1f79557ecbd3c3eaa1c16e88453d70173c8b9ab5d69b507a9184ab1a3d015b10469fd7394f80a48ba9755efa5b8b6b15a1a860e01d734ac5eff35c363f439a4a5d800000000000000880100000b000000503138e41b24fac1e35e2cc434d29d9cc3fda18ae37105b0a401a37ca87ee6a33fb574762b96baf549d57d9942e04a0d78eab5a6a8b314b8da18551a4406778929bcbab064718f0961739d04c1f760fab90430734ea300e2ba41ba7b304add7bcc2a4fb5efd66a0901dc2460c00f93a12569685b7ee808bebfd166c63ec83298cdd3cbb288e2e0caf2b390167dae03206582cee096c852db76235b5429fcbef91fc6f9f5f928af266ec2162fa0fbb151a530e7c675c1ec0d1c61ca8792bc2d1e06bc000000000000d80000000000000011010000ff010000b28ddfcecfab64d16b12f133dd15c39f6fec5a9839efe013b5bdfbde44f5827af36a84966924c89a28f03666d66d293f7b18373068f908c397693478d3b40976fe681bff5e2b8458c8528a7d656e9fda381cdc318acb749f5f0aaccbb5619f6b82633555c7ea3f4fbd0baeba9e4e711722810707db7d0d0150886cb1ee318e9a6c01b516a1a135fe647d9b48e91bcd7974ad1ca53ce2c30dac3f412ff57d0859a4cfc41593b1f9699274e41125e993e087fbf1e20f28a7d203b14fde7171005c6328a4407f202ba5180000000000000016010000080000005a000000000000009800000000000000090100000a0000000832037b1b86f8700cc70b33e555c08a78cdde719706483bb74008f8c219abe57095a996b522b09691355cb51b3b80c35d17d083b701395dd69260fca9a23c864d92b9a2d81c7753b76dc8ece12e3e6198a1ccf1b8790a1c5df214ad72a5808a3f28ff6c0f32dbc1c26ff4d3e9807dcd5328a13930b1639482cc5d4a95c52005f4c90000000000008f8a80ddbd3c177755b588f825366024f9cbaff4e57cd72b167d58f29da151"], 0x330}, 0x20004804) socket$can_raw(0x1d, 0x3, 0x1) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockname$packet(r7, 0x0, &(0x7f0000000080)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) setsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000000100)=0x79, 0x4) (async) setsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000000100)=0x79, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000011c0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001180)={&(0x7f0000001040)={0x10c, 0x1, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x240}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x581}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x204}]}, @CTA_NAT_DST={0x54, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x55200}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xc1}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7fff}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xfff]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xf84}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x900}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x811}, 0x5) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000120a0108000000000000000001000005080003401c00000428000000000a050000000000000000000100000809000000000800024000000000140000001100010000000000000000000300000a"], 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 203.431774ms ago: executing program 1 (id=4118): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x7) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc00000042000701fefffffffcdbdf25047c000004004580a10001"], 0xbc}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000080)=0x1000000, &(0x7f0000000280)=r5}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCADDRT(r7, 0x890b, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000300)={0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r11, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @broadcast}], 0x10) listen(r10, 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) 192.904936ms ago: executing program 2 (id=4119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x3}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x50, r3, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @dev}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x25000}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x44}}, 0x0) 26.869922ms ago: executing program 3 (id=4120): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r1, 0x8, 0x7, &(0x7f00000002c0)="c1841d67", 0x4) sendmsg$inet(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000080)="96f3633ad2fb52ca8ceb3b0c06809c6c866d1dd184f1575b3d1b8ba8e26bee32410014991382d1506f6c2d047c6df91cb08a1e24529448cad744814c15f14fdb1f63aa356dcb7a931ceb23c56852b46e8b0cd8ee533514776fe550f81d013f81926c", 0x62}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="d237f00db57f5da6b971f3f53c6d2d5e447ca1bb7707b98a4b12e05ec6b8b72357defd1c469a2e4405fa95b9b8608a0464299c17ae3db312b4a0147b0b2685b0393e", 0x42}], 0x3}, 0x40004850) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) 0s ago: executing program 2 (id=4121): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYRES8, @ANYBLOB="f1b7266ff6a49bb21891228bfee805976ac48143356b4e2e2d4d22c1", @ANYBLOB="0a27662b7ea2130bff7dac5097644a9221eca135c9d108bdce1726d80900000000000000001bf09a6be814c331b571788e86addca9fb606372231cecf5d9d2d1a2bc83dc8d59c8c9849bbc287df33641aca80337445231baedf2401bd4678792379d3ba744b975cc5be7ece1cf0350915675de4156ac8a4895237e96aa5d22681009000000a86b40fdad0f3c1e0f2da5842d433ee02ce2988517c8a859b889bee345b2dbbbc2ad671bd3e33479652eb1dd68c2df17776bf0b0eeea7e7fe31e179d5011a0bfd510274619afd97c51527eea93e2c4c8bfa1bd3604e4f072ddb5c8aeadc08e4a6db4ab86a3aa32fc53eac100"/252], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x7fffffff, 0x14}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000100001e3ff000002fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="0000000084100000180012800e00010077697265677561726400000004000280"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20044840) recvfrom$phonet(r2, &(0x7f00000005c0)=""/58, 0x38, 0x80002120, &(0x7f00000001c0)={0x23, 0x0, 0x1a}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) r7 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000140)={'c', ' *:* ', 'rm\x00'}, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_getnetconf={0x24, 0x52, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x40}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}]}, 0x24}, 0x1, 0x2000000000000000}, 0x2000000) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x3c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffffe}]}, 0x3c}}, 0x20000002) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r10}, &(0x7f0000000140), &(0x7f0000000280)=r2}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3f2, 0x1, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x400c000) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32], 0x20) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r12, @ANYBLOB="00001700291800001c0004000b0001207970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r10}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x1c, &(0x7f0000000a80)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c0000000000000000000d080000000000008500000005000000b70000000200000095ff7218f5a572fd748896b28332d1aaae0ba100cb46e93d4488cce6639f4d8462ad38909b5e672a25f6f790422da311d4754aa51a413d61ce017cc505192be167c862a0338db3", @ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) socket$unix(0x1, 0x2, 0x0) kernel console output (not intermixed with test programs): sing attributes in process `syz.0.2286'. [ 271.992284][T14135] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2286'. [ 272.186829][T14138] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2288'. [ 272.803959][T14177] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2297'. [ 272.813235][T14177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2297'. [ 272.825038][T14177] netlink: 'syz.4.2297': attribute type 2 has an invalid length. [ 272.843041][T14177] netlink: 'syz.4.2297': attribute type 2 has an invalid length. [ 274.982845][T14141] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 275.230211][T14192] netlink: 'syz.3.2302': attribute type 1 has an invalid length. [ 276.311847][T14276] netlink: 'syz.1.2322': attribute type 11 has an invalid length. [ 276.321187][T14276] netlink: 'syz.1.2322': attribute type 11 has an invalid length. [ 276.322059][T14278] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 276.415382][T14278] 8021q: adding VLAN 0 to HW filter on device bond5 [ 276.436397][T14283] bond5: (slave ip6erspan1): making interface the new active one [ 276.448323][T14283] bond5: (slave ip6erspan1): Enslaving as an active interface with an up link [ 276.856883][T14302] tipc: Enabling of bearer rejected, already enabled [ 276.868121][T14303] __nla_validate_parse: 75 callbacks suppressed [ 276.868139][T14303] netlink: 624 bytes leftover after parsing attributes in process `syz.0.2328'. [ 276.996225][T14306] netlink: 'syz.3.2329': attribute type 14 has an invalid length. [ 277.037780][T14306] IPVS: lc: FWM 3 0x00000003 - no destination available [ 277.143004][T14316] FAULT_INJECTION: forcing a failure. [ 277.143004][T14316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.168924][T14316] CPU: 0 UID: 0 PID: 14316 Comm: syz.0.2331 Not tainted syzkaller #0 PREEMPT(full) [ 277.168951][T14316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 277.168962][T14316] Call Trace: [ 277.168969][T14316] [ 277.168976][T14316] dump_stack_lvl+0xe8/0x150 [ 277.169017][T14316] should_fail_ex+0x40c/0x560 [ 277.169041][T14316] _copy_from_user+0x2d/0xb0 [ 277.169064][T14316] __x64_sys_epoll_ctl+0x128/0x1b0 [ 277.169091][T14316] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 277.169125][T14316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.169144][T14316] do_syscall_64+0x174/0x580 [ 277.169161][T14316] ? trace_irq_disable+0x3b/0x140 [ 277.169187][T14316] ? clear_bhb_loop+0x40/0x90 [ 277.169209][T14316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.169227][T14316] RIP: 0033:0x7f787199ce59 [ 277.169245][T14316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.169260][T14316] RSP: 002b:00007f78728bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 277.169279][T14316] RAX: ffffffffffffffda RBX: 00007f7871c16180 RCX: 00007f787199ce59 [ 277.169293][T14316] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000008 [ 277.169303][T14316] RBP: 00007f78728bf090 R08: 0000000000000000 R09: 0000000000000000 [ 277.169314][T14316] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 277.169325][T14316] R13: 00007f7871c16218 R14: 00007f7871c16180 R15: 00007ffd6b9e5f78 [ 277.169354][T14316] [ 277.678450][T14334] ip6t_REJECT: ECHOREPLY is not supported [ 277.750307][T14325] syzkaller0: entered promiscuous mode [ 277.790439][T14325] syzkaller0: entered allmulticast mode [ 278.146201][T14343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2338'. [ 278.275437][T14349] netlink: 'syz.0.2341': attribute type 4 has an invalid length. [ 278.562348][T14364] pim6reg1: entered promiscuous mode [ 278.570567][T14364] pim6reg1: entered allmulticast mode [ 279.020419][T14386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2351'. [ 279.225063][T14391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.457348][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2355'. [ 279.511313][T14402] bond10: (slave gre0): Device is not bonding slave [ 279.518371][T14402] bond10: option active_slave: invalid value (gre0) [ 279.523261][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2356'. [ 279.541573][T14402] bond10 (unregistering): Released all slaves [ 279.748862][T14406] bond10: option xmit_hash_policy: invalid value (64) [ 279.795036][T14406] bond10 (unregistering): Released all slaves [ 279.903065][T14427] netlink: 'syz.0.2361': attribute type 1 has an invalid length. [ 279.936793][T14427] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.2361'. [ 279.955067][T14427] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2361'. [ 280.124975][T14436] netlink: 'syz.0.2364': attribute type 1 has an invalid length. [ 280.170664][ T29] audit: type=1107 audit(1781364689.151:3): pid=14438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 280.222622][T14436] 8021q: adding VLAN 0 to HW filter on device bond9 [ 280.424520][T14450] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2367'. [ 280.486582][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2366'. [ 281.096177][T14494] No such timeout policy "syz1" [ 281.151942][T14492] syzkaller0: entered promiscuous mode [ 281.161340][T14492] syzkaller0: entered allmulticast mode [ 281.881687][ T9897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.042105][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.068957][T14545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2390'. [ 282.127929][T14549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2391'. [ 282.268116][T14549] 8021q: adding VLAN 0 to HW filter on device bond5 [ 282.335649][ T1099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.351762][T14560] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2393'. [ 282.406452][T14574] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2393'. [ 282.434330][T14577] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2399'. [ 282.640411][T14598] netlink: 'syz.3.2402': attribute type 1 has an invalid length. [ 282.680938][T14598] bond10: option mode: invalid value (7) [ 282.691812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.699831][T14598] bond10 (unregistering): Released all slaves [ 282.703310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.731943][T14602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2402'. [ 282.760208][T14602] netlink: 'syz.3.2402': attribute type 10 has an invalid length. [ 282.809849][T14602] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2402'. [ 282.837145][T14602] dummy0: entered promiscuous mode [ 283.053624][T14625] sctp: [Deprecated]: syz.4.2412 (pid 14625) Use of int in maxseg socket option. [ 283.053624][T14625] Use struct sctp_assoc_value instead [ 283.083092][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.286066][T14640] Cannot find del_set index 4 as target [ 283.356418][T14642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2417'. [ 283.493851][T14646] Bluetooth: MGMT ver 1.23 [ 283.521362][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.546929][T14647] netlink: 'syz.2.2419': attribute type 39 has an invalid length. [ 283.573841][T14646] netlink: 'syz.2.2419': attribute type 39 has an invalid length. [ 283.605217][T14648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2419'. [ 283.788281][T14651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2421'. [ 283.826064][ T1099] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 283.841250][ T1099] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 283.872880][ T1099] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 283.893222][ T1099] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 284.035595][T14669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.064420][T14673] syzkaller0: entered promiscuous mode [ 284.070512][T14669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.077358][T14673] syzkaller0: entered allmulticast mode [ 284.100565][T14669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.127613][T14669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.196900][T14674] netlink: 'syz.1.2427': attribute type 266 has an invalid length. [ 284.443385][T14692] netlink: 'syz.0.2433': attribute type 11 has an invalid length. [ 284.750343][T14709] netlink: 'syz.4.2438': attribute type 2 has an invalid length. [ 284.977878][T14727] syzkaller0: entered promiscuous mode [ 284.992372][T14727] syzkaller0: entered allmulticast mode [ 285.312120][T14755] netlink: 'syz.1.2452': attribute type 1 has an invalid length. [ 285.398188][T14755] 8021q: adding VLAN 0 to HW filter on device bond6 [ 285.592653][T14763] syzkaller0: entered promiscuous mode [ 285.609272][T14763] syzkaller0: entered allmulticast mode [ 285.771005][T14772] syzkaller0: entered promiscuous mode [ 285.785370][T14772] syzkaller0: entered allmulticast mode [ 285.797797][T14747] netlink: 'syz.0.2451': attribute type 266 has an invalid length. [ 285.839699][T14777] netlink: 'syz.4.2461': attribute type 1 has an invalid length. [ 285.852289][T14777] netlink: 'syz.4.2461': attribute type 1 has an invalid length. [ 286.306668][T14798] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 286.419822][T14811] tipc: Failed to remove unknown binding: 66,0,0/0:3794843902/3794843903 [ 286.457825][T14811] tipc: Failed to remove unknown binding: 66,0,0/0:3794843902/3794843903 [ 286.852907][T14831] netlink: 'syz.4.2478': attribute type 266 has an invalid length. [ 287.161701][ T9897] net_ratelimit: 10 callbacks suppressed [ 287.161722][ T9897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.177886][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.247346][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.384922][T14868] __nla_validate_parse: 10 callbacks suppressed [ 287.384941][T14868] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2486'. [ 287.988227][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.996450][T13608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.214451][T14915] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2497'. [ 288.242287][T14915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2497'. [ 288.282956][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.398491][T14925] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 288.410187][T14926] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2501'. [ 288.476304][T14925] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20000 [ 288.499306][T14934] openvswitch: netlink: EtherType 50a is less than min 600 [ 288.524369][T14934] netlink: 'syz.1.2505': attribute type 5 has an invalid length. [ 288.545282][T14934] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2505'. [ 288.687723][T14945] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2507'. [ 288.730393][T14946] syzkaller0: entered promiscuous mode [ 288.755477][T14946] syzkaller0: entered allmulticast mode [ 288.784384][T14946] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2508'. [ 289.075144][T14966] sctp: [Deprecated]: syz.1.2514 (pid 14966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.075144][T14966] Use struct sctp_sack_info instead [ 289.141634][T13608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.168592][T14938] netlink: 'syz.0.2506': attribute type 266 has an invalid length. [ 289.321411][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.036991][T15003] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2520'. [ 290.266414][T15013] tipc: Enabled bearer , priority 0 [ 290.282662][T13616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.288001][T15013] syzkaller0: entered promiscuous mode [ 290.308297][T15013] syzkaller0: entered allmulticast mode [ 290.347910][T15013] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 290.445797][T15023] syzkaller0: entered promiscuous mode [ 290.454379][T15023] syzkaller0: entered allmulticast mode [ 290.471132][T15013] tipc: Resetting bearer [ 290.582904][T15023] tipc: Enabled bearer , priority 0 [ 290.609416][T15012] tipc: Resetting bearer [ 290.649638][T15035] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2530'. [ 290.666539][T15012] tipc: Disabling bearer [ 290.673797][T15035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2530'. [ 290.697135][T15016] tipc: Resetting bearer [ 290.731209][T15016] tipc: Disabling bearer [ 290.950827][T15043] pim6reg1: entered promiscuous mode [ 290.974133][T15043] pim6reg1: entered allmulticast mode [ 291.066265][T15055] netlink: 'syz.1.2534': attribute type 266 has an invalid length. [ 291.449065][T15081] veth11: entered promiscuous mode [ 291.470721][T15084] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 291.580145][T15096] Bluetooth: hci1: too big key_count value 32778 [ 291.599421][T15096] netlink: 'syz.3.2542': attribute type 1 has an invalid length. [ 291.692338][T13616] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 291.735499][T15105] veth1_to_bridge: entered allmulticast mode [ 291.775170][T15105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.146043][T15124] syzkaller0: entered promiscuous mode [ 292.155034][T15124] syzkaller0: entered allmulticast mode [ 292.191943][T15126] syzkaller1: entered promiscuous mode [ 292.197546][T15126] syzkaller1: entered allmulticast mode [ 292.380855][T15128] netlink: 'syz.1.2553': attribute type 1 has an invalid length. [ 292.441540][ T9893] net_ratelimit: 4 callbacks suppressed [ 292.441562][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.582739][T13616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.856305][T15169] netlink: 'syz.2.2565': attribute type 3 has an invalid length. [ 292.865453][T15169] __nla_validate_parse: 10 callbacks suppressed [ 292.865471][T15169] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2565'. [ 292.885910][T15170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2565'. [ 292.920643][T15172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2565'. [ 292.995723][T15178] sock: sock_timestamping_bind_phc: sock not bind to device [ 293.076958][T15184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2570'. [ 293.386058][T15211] openvswitch: netlink: Flow actions attr not present in new flow. [ 293.482548][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.516474][T15221] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 293.555090][T15222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2580'. [ 293.599566][T15222] bridge_slave_1: left allmulticast mode [ 293.611319][T15222] bridge_slave_1: left promiscuous mode [ 293.652139][T15222] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.705286][T13608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.733496][ T5632] Bluetooth: hci4: command 0x0405 tx timeout [ 293.777395][T15239] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2583'. [ 293.806318][T15225] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2581'. [ 293.825672][T15225] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2581'. [ 293.941567][T15237] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 293.980829][T15237] bond6 (unregistering): Released all slaves [ 294.045184][ T9897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.053988][T15235] syzkaller1: entered promiscuous mode [ 294.059857][T15235] syzkaller1: entered allmulticast mode [ 294.092401][T15242] syzkaller1: entered promiscuous mode [ 294.110672][T15242] syzkaller1: entered allmulticast mode [ 294.305054][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2586'. [ 294.474307][T15272] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2590'. [ 294.499256][T15276] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 294.523567][ T9894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.703236][T13610] smc: removing ib device syz2 [ 294.842823][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.967080][T15290] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 294.991292][T15290] bond7: option packets_per_slave: allowed values 0 - 65535 [ 294.994057][T13610] smbdirect: ib_dev[syz2] removed [ 295.013037][T15290] bond7 (unregistering): Released all slaves [ 295.258500][T15299] syzkaller1: entered promiscuous mode [ 295.266765][T15299] syzkaller1: entered allmulticast mode [ 295.564167][ T9894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.625911][T15310] veth0_macvtap: left promiscuous mode [ 296.012799][T13608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.068869][T15332] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 296.068869][T15332] Please contact the netfilter-devel mailing list or update your nftables rules. [ 296.584018][T15346] syzkaller1: entered promiscuous mode [ 296.617250][T15346] syzkaller1: entered allmulticast mode [ 296.975065][T15374] netlink: 'syz.0.2620': attribute type 1 has an invalid length. [ 297.020069][T15385] netlink: 'syz.0.2620': attribute type 1 has an invalid length. [ 297.077668][T15373] tipc: Invalid UDP bearer configuration [ 297.077717][T15373] tipc: Enabling of bearer rejected, failed to enable media [ 297.273412][T15391] syzkaller0: entered promiscuous mode [ 297.319804][T15391] syzkaller0: entered allmulticast mode [ 297.642293][ T9894] net_ratelimit: 4 callbacks suppressed [ 297.642312][ T9894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.169231][T15431] syzkaller1: entered promiscuous mode [ 298.181241][T15431] syzkaller1: entered allmulticast mode [ 298.291673][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.438944][T15443] xt_hashlimit: size too large, truncated to 1048576 [ 298.485164][T15446] IPv6: NLM_F_CREATE should be specified when creating new route [ 298.517470][T15447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.567754][T15447] __nla_validate_parse: 8 callbacks suppressed [ 298.567776][T15447] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.2636'. [ 298.622531][T15447] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 298.660411][T15447] 0ªX¹¦Dö»: entered allmulticast mode [ 298.681431][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.734301][T15457] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 298.748451][T15457] bond7 (unregistering): Released all slaves [ 299.030944][T15470] xt_TPROXY: Can be used only with -p tcp or -p udp [ 299.187697][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2647'. [ 299.432500][ T423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.536366][T15505] IPv6: NLM_F_CREATE should be specified when creating new route [ 299.706824][T15513] ip6tnl1: entered allmulticast mode [ 299.714121][T15521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2659'. [ 299.725374][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.769285][ T423] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 299.796451][ T9897] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 299.806084][ T423] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 299.914747][T15534] pim6reg1: entered promiscuous mode [ 299.920418][T15534] pim6reg1: entered allmulticast mode [ 300.018935][T15538] netlink: 'syz.3.2665': attribute type 8 has an invalid length. [ 300.032436][T15536] tipc: Resetting bearer [ 300.082874][ T9897] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 300.108045][T15546] Unsupported ieee802154 address type: 0 [ 300.126684][ T9897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.169878][ T1172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.182782][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.200622][ T9897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.215278][T15551] ieee802154 phy1 wpan1: encryption failed: -22 [ 300.249107][T15536] batman_adv: batadv0: Interface deactivated: wlan0 [ 300.338197][T15532] tipc: Enabled bearer , priority 28 [ 300.523425][ T9897] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 300.591021][T15564] syzkaller0: entered promiscuous mode [ 300.614197][T15564] syzkaller0: entered allmulticast mode [ 300.699932][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2673'. [ 300.908497][T15587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2678'. [ 300.958775][T15587] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2678'. [ 300.993313][T15587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2678'. [ 301.020256][T15587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2678'. [ 301.065771][T15587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2678'. [ 301.090904][T15592] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2680'. [ 301.638536][T15615] syzkaller0: entered promiscuous mode [ 301.650461][T15615] syzkaller0: entered allmulticast mode [ 302.842912][ T1172] net_ratelimit: 4 callbacks suppressed [ 302.842932][ T1172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.860242][ T9894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.979310][T15655] openvswitch: netlink: Flow key attr not present in new flow. [ 302.988544][T15655] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 303.243019][T15665] veth1_to_bond: entered allmulticast mode [ 303.255412][T15665] veth1_to_bond: left allmulticast mode [ 303.272466][ T9897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.281241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.721272][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 303.882030][ T9894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.944363][T15691] __nla_validate_parse: 5 callbacks suppressed [ 303.944384][T15691] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2711'. [ 303.964662][T15691] syzkaller1: entered promiscuous mode [ 303.970567][T15691] syzkaller1: entered allmulticast mode [ 303.981859][ T1172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.989479][T15692] netlink: 'syz.2.2712': attribute type 1 has an invalid length. [ 304.054526][T15692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2712'. [ 304.170580][T15699] sctp: [Deprecated]: syz.4.2714 (pid 15699) Use of int in max_burst socket option deprecated. [ 304.170580][T15699] Use struct sctp_assoc_value instead [ 304.459029][T15715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2718'. [ 304.553945][T15718] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2719'. [ 304.832948][T15732] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2725'. [ 304.866051][T15732] syzkaller1: entered promiscuous mode [ 304.883241][T15732] syzkaller1: entered allmulticast mode [ 304.925081][ T9894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.003638][T15583] Set syz1 is full, maxelem 65536 reached [ 305.160931][T15746] sctp: [Deprecated]: syz.3.2730 (pid 15746) Use of int in max_burst socket option deprecated. [ 305.160931][T15746] Use struct sctp_assoc_value instead [ 305.290173][ T9894] IPVS: starting estimator thread 0... [ 305.402383][T15766] IPVS: using max 33 ests per chain, 79200 per kthread [ 305.438293][T15778] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 305.589664][T15778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2736'. [ 305.677484][T15778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.808774][T15799] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2742'. [ 305.836876][T15799] syzkaller1: entered promiscuous mode [ 305.844497][T15799] syzkaller1: entered allmulticast mode [ 306.095091][T15814] netlink: 'syz.0.2747': attribute type 15 has an invalid length. [ 306.106798][T15814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2747'. [ 306.251928][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2750'. [ 306.287431][T15828] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2749'. [ 306.496726][T15843] syzkaller1: entered promiscuous mode [ 306.506373][T15843] syzkaller1: entered allmulticast mode [ 306.755342][T15851] bond10: Invalid ad_actor_system MAC address. [ 306.764756][T15851] bond10: option ad_actor_system: invalid value (1) [ 306.774923][T15851] bond10 (unregistering): Released all slaves [ 306.805734][T15802] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 306.815723][T15802] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 306.863642][T15802] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 306.871164][T15802] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 306.890048][T15802] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 306.900390][T15802] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 306.920154][T15802] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 306.928125][T15802] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 306.938730][T15858] netlink: 'syz.2.2760': attribute type 21 has an invalid length. [ 307.236540][T15878] syzkaller1: entered promiscuous mode [ 307.246994][T15878] syzkaller1: entered allmulticast mode [ 307.674306][T15903] bond6: entered promiscuous mode [ 307.701902][T15903] bond6: entered allmulticast mode [ 307.723483][T15903] 8021q: adding VLAN 0 to HW filter on device bond6 [ 307.826881][T15920] ip6t_srh: unknown srh match flags 4000 [ 307.994424][T15936] netlink: 'syz.1.2781': attribute type 10 has an invalid length. [ 308.041564][ T5782] net_ratelimit: 11 callbacks suppressed [ 308.041582][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.053829][T15936] team0: Port device geneve1 added [ 308.091315][ T1172] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 308.176074][ T1172] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 308.201595][ T1172] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 308.249562][T15945] tipc: New replicast peer: 255.255.255.255 [ 308.280229][T15945] tipc: Enabled bearer , priority 10 [ 308.303140][T15938] syzkaller1: entered promiscuous mode [ 308.327577][T15938] syzkaller1: entered allmulticast mode [ 308.346507][ T1172] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 308.361582][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.369943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.404385][ T423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.984948][T15994] __nla_validate_parse: 15 callbacks suppressed [ 308.984968][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2798'. [ 309.036418][T15998] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.2800'. [ 309.054518][T15998] 0ªX¹¦Dö»: renamed from gretap0 [ 309.070489][T15998] 0ªX¹¦Dö»: entered allmulticast mode [ 309.081522][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.094406][T16002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2801'. [ 309.176465][T16003] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.2799'. [ 309.285855][T16014] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2805'. [ 309.300498][T16014] syzkaller1: entered promiscuous mode [ 309.302855][T16012] netlink: 'syz.2.2804': attribute type 29 has an invalid length. [ 309.316812][T16014] syzkaller1: entered allmulticast mode [ 309.505760][T16024] syzkaller0: entered promiscuous mode [ 309.522802][T16024] syzkaller0: entered allmulticast mode [ 309.537228][ T1172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.926331][T16048] x_tables: duplicate underflow at hook 2 [ 310.121989][ T9894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.134876][T16068] netlink: 'syz.3.2821': attribute type 1 has an invalid length. [ 310.209258][T16068] 8021q: adding VLAN 0 to HW filter on device bond10 [ 310.287665][T16068] syzkaller0: entered promiscuous mode [ 310.325534][T16068] syzkaller0: entered allmulticast mode [ 310.417221][T16068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.517024][T16086] can: request_module (can-proto-0) failed. [ 310.596927][T16099] FAULT_INJECTION: forcing a failure. [ 310.596927][T16099] name failslab, interval 1, probability 0, space 0, times 0 [ 310.623525][T16099] CPU: 1 UID: 0 PID: 16099 Comm: syz.1.2824 Not tainted syzkaller #0 PREEMPT(full) [ 310.623550][T16099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 310.623561][T16099] Call Trace: [ 310.623568][T16099] [ 310.623576][T16099] dump_stack_lvl+0xe8/0x150 [ 310.623603][T16099] should_fail_ex+0x40c/0x560 [ 310.623627][T16099] should_failslab+0xa8/0x100 [ 310.623656][T16099] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 310.623682][T16099] ? __alloc_skb+0x1d7/0x7a0 [ 310.623704][T16099] ? __local_bh_enable_ip+0xd0/0x130 [ 310.623727][T16099] __alloc_skb+0x1d7/0x7a0 [ 310.623754][T16099] tcp_collapse+0xc44/0x1c30 [ 310.623793][T16099] ? __pfx_tcp_collapse+0x10/0x10 [ 310.623833][T16099] tcp_try_rmem_schedule+0xa32/0x16d0 [ 310.623863][T16099] ? skb_put+0x112/0x210 [ 310.623888][T16099] tcp_send_rcvq+0x1eb/0x520 [ 310.623914][T16099] ? __pfx_tcp_send_rcvq+0x10/0x10 [ 310.623934][T16099] ? tomoyo_check_open_permission+0x38e/0x470 [ 310.623963][T16099] tcp_sendmsg_locked+0x4e53/0x55c0 [ 310.623988][T16099] ? tcp_sendmsg_locked+0x5b1/0x55c0 [ 310.624009][T16099] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 310.624035][T16099] ? __lock_acquire+0x683/0x2cd0 [ 310.624059][T16099] ? __lock_acquire+0x683/0x2cd0 [ 310.624082][T16099] ? unwind_next_frame+0x8f/0x2550 [ 310.624125][T16099] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 310.624162][T16099] ? tcp_sendmsg+0x21/0x50 [ 310.624184][T16099] ? __local_bh_enable_ip+0xd0/0x130 [ 310.624206][T16099] tcp_sendmsg+0x2f/0x50 [ 310.624225][T16099] ? __pfx_inet6_sendmsg+0x10/0x10 [ 310.624246][T16099] ____sys_sendmsg+0x61f/0xa20 [ 310.624271][T16099] ? __might_fault+0xaf/0x130 [ 310.624300][T16099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.624334][T16099] ? import_iovec+0x73/0xa0 [ 310.624359][T16099] ___sys_sendmsg+0x2a5/0x360 [ 310.624383][T16099] ? __lock_acquire+0x683/0x2cd0 [ 310.624406][T16099] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.624464][T16099] ? __fget_files+0x2a/0x420 [ 310.624484][T16099] ? __fget_files+0x3a2/0x420 [ 310.624515][T16099] __x64_sys_sendmsg+0x1bd/0x2a0 [ 310.624544][T16099] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.624579][T16099] ? __pfx_ksys_write+0x10/0x10 [ 310.624613][T16099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.624631][T16099] do_syscall_64+0x174/0x580 [ 310.624648][T16099] ? trace_irq_disable+0x3b/0x140 [ 310.624673][T16099] ? clear_bhb_loop+0x40/0x90 [ 310.624694][T16099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.624712][T16099] RIP: 0033:0x7f1361f9ce59 [ 310.624729][T16099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.624745][T16099] RSP: 002b:00007f1362e10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.624764][T16099] RAX: ffffffffffffffda RBX: 00007f1362215fa0 RCX: 00007f1361f9ce59 [ 310.624777][T16099] RDX: 000000000000c000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 310.624789][T16099] RBP: 00007f1362e10090 R08: 0000000000000000 R09: 0000000000000000 [ 310.624800][T16099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.624810][T16099] R13: 00007f1362216038 R14: 00007f1362215fa0 R15: 00007ffd00dbde68 [ 310.624840][T16099] [ 310.944978][ T423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.963369][ T423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.246343][ T5295] veth1_vlan: left promiscuous mode [ 311.314999][T16114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2829'. [ 311.326376][T16114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2829'. [ 311.352607][T16120] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.2828'. [ 311.372545][T16120] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 311.380845][T16110] xt_hashlimit: size too large, truncated to 1048576 [ 311.399462][T16120] 0ªX¹¦Dö»: entered allmulticast mode [ 311.508074][T16122] netlink: 'syz.0.2828': attribute type 1 has an invalid length. [ 311.534166][T16122] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2828'. [ 311.561612][T16122] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2828'. [ 311.586451][T16130] syzkaller1: entered promiscuous mode [ 311.617330][T16130] syzkaller1: entered allmulticast mode [ 312.123159][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 312.152217][T16159] pim6reg1: entered promiscuous mode [ 312.183353][T16159] pim6reg1: entered allmulticast mode [ 312.366581][T16161] syzkaller0: entered promiscuous mode [ 312.380512][T16161] syzkaller0: entered allmulticast mode [ 312.483561][T16183] netlink: 'syz.2.2848': attribute type 1 has an invalid length. [ 312.756203][T16204] SET target dimension over the limit! [ 313.054857][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 313.070060][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 313.109010][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 313.139513][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 313.166993][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 313.222792][ T1172] net_ratelimit: 4 callbacks suppressed [ 313.222808][ T1172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.243952][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.251879][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 313.272372][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 313.279891][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 313.289602][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 313.297392][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 314.047888][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.056482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.283509][ T9894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.365878][ T8855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.326246][ T9894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.408015][ T50] Bluetooth: hci5: command tx timeout [ 315.471504][ T8855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.786150][T16183] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 315.963424][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.980491][T16217] __nla_validate_parse: 6 callbacks suppressed [ 315.980506][T16217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2856'. [ 315.980878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.196625][T16230] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2859'. [ 316.222775][T16230] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2859'. [ 316.235578][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2861'. [ 316.885725][T16257] erspan0: entered promiscuous mode [ 316.911379][T16257] erspan0: entered allmulticast mode [ 317.146185][T16207] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.153696][T16207] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.161600][T16207] bridge_slave_0: entered allmulticast mode [ 317.169702][T16207] bridge_slave_0: entered promiscuous mode [ 317.185092][T16207] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.193117][T16207] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.200532][T16207] bridge_slave_1: entered allmulticast mode [ 317.209324][T16207] bridge_slave_1: entered promiscuous mode [ 317.248636][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.253565][T16207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.271371][T16207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.358555][T16274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2870'. [ 317.379659][T16207] team0: Port device team_slave_0 added [ 317.399180][T16207] team0: Port device team_slave_1 added [ 317.481321][ T50] Bluetooth: hci5: command tx timeout [ 317.488135][T16207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.488153][T16207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.488171][T16207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.496256][T16207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.533841][T16279] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2872'. [ 317.548261][T16280] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2872'. [ 317.548329][T16207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.585783][T16207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.594600][T16281] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2873'. [ 317.665099][T16207] hsr_slave_0: entered promiscuous mode [ 317.683619][T16207] hsr_slave_1: entered promiscuous mode [ 317.697862][T16207] debugfs: 'hsr0' already exists in 'hsr' [ 317.716038][T16207] Cannot create hsr debugfs directory [ 317.793931][T16286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2874'. [ 318.246092][T16322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2882'. [ 318.425266][T16328] netlink: 'syz.2.2884': attribute type 5 has an invalid length. [ 318.442455][ T9893] net_ratelimit: 16 callbacks suppressed [ 318.442476][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.468044][T16328] netlink: 'syz.2.2884': attribute type 6 has an invalid length. [ 318.558829][T16342] netlink: 'syz.1.2886': attribute type 5 has an invalid length. [ 318.600306][T16342] geneve4: entered promiscuous mode [ 318.624441][T16342] geneve4: entered allmulticast mode [ 318.791866][ T1099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.849834][T16357] syzkaller1: entered promiscuous mode [ 318.858673][T16357] syzkaller1: entered allmulticast mode [ 319.007225][T16364] netlink: 'syz.2.2890': attribute type 9 has an invalid length. [ 319.021575][T16364] netlink: 'syz.2.2890': attribute type 6 has an invalid length. [ 319.082448][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.090949][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.100969][T16370] IPVS: length: 131 != 8 [ 319.170280][T16372] 8021q: VLANs not supported on ip_vti0 [ 319.377839][T16384] tipc: Enabling of bearer rejected, failed to enable media [ 319.482217][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.490561][T16397] syzkaller1: entered promiscuous mode [ 319.503208][T16397] syzkaller1: entered allmulticast mode [ 319.563378][ T50] Bluetooth: hci5: command tx timeout [ 319.788751][T16405] netlink: 'syz.4.2902': attribute type 10 has an invalid length. [ 319.790251][T16408] netlink: 'syz.4.2902': attribute type 10 has an invalid length. [ 319.823426][T16405] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 319.844506][T16408] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 319.922260][ T8855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.338292][T16436] netlink: 'syz.3.2910': attribute type 1 has an invalid length. [ 320.409343][T16436] macvlan4: entered promiscuous mode [ 320.415200][T16436] macvlan4: entered allmulticast mode [ 320.422626][T16436] bond11: entered promiscuous mode [ 320.434426][T16436] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 320.467582][T16436] bond11: left promiscuous mode [ 320.521609][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.834812][T16464] netlink: 'syz.1.2917': attribute type 1 has an invalid length. [ 321.052064][T13610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.442487][T16488] netlink: 'syz.1.2923': attribute type 1 has an invalid length. [ 321.505321][T16488] bond7: (slave geneve5): making interface the new active one [ 321.525952][T16488] bond7: (slave geneve5): Enslaving as an active interface with an up link [ 321.546628][ T1162] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 321.565880][ T1162] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 321.570686][T16495] __nla_validate_parse: 13 callbacks suppressed [ 321.570706][T16495] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2925'. [ 321.585921][ T1162] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 321.591553][T16488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2923'. [ 321.608701][ T1162] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 321.641930][ T50] Bluetooth: hci5: command tx timeout [ 321.651656][T16492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2923'. [ 321.814489][T16501] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2928'. [ 322.160609][T16516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2931'. [ 322.367000][T16528] ip6t_srh: unknown srh invflags 4000 [ 322.371008][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2934'. [ 322.396667][T16530] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2935'. [ 322.401302][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2934'. [ 322.516572][T16532] unsupported nlmsg_type 40 [ 322.536606][T16532] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2937'. [ 322.569094][T16538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2940'. [ 322.584694][T16536] bond0: (slave team0): Releasing backup interface [ 322.593184][T16536] bridge_slave_0: left allmulticast mode [ 322.598928][T16536] bridge_slave_0: left promiscuous mode [ 322.606292][T16536] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.617767][T16536] bridge_slave_1: left allmulticast mode [ 322.626343][T16536] bridge_slave_1: left promiscuous mode [ 322.635771][T16536] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.649889][T16536] bond0: (slave bond_slave_0): Releasing backup interface [ 322.660281][T16536] bond0: (slave bond_slave_1): Releasing backup interface [ 322.672624][T16536] team0: Port device team_slave_1 removed [ 322.679037][T16536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.689283][T16536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.980503][T16556] 0ªX¹¦Dö»: left allmulticast mode [ 323.042615][T16556] macvlan0: left promiscuous mode [ 323.066123][T16556] tipc: Resetting bearer [ 323.103873][T16556] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 323.148443][T16556] ip6erspan0: left promiscuous mode [ 323.173089][T16556] bond3: left promiscuous mode [ 323.199898][T16556] geneve3: left promiscuous mode [ 323.213285][T16556] geneve3: left allmulticast mode [ 323.233695][T16556] gtp8: left promiscuous mode [ 323.238459][T16556] gtp8: left allmulticast mode [ 323.332167][T16556] geneve4: left promiscuous mode [ 323.349085][T16556] geneve4: left allmulticast mode [ 323.397427][ T1162] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 323.411662][ T1162] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 323.431337][ T1162] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 323.448242][ T1162] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 323.467891][ T1162] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 323.487072][ T1162] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 323.505708][ T1162] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 323.524653][ T1162] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 323.544167][ T1162] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 323.563424][ T1162] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 323.583115][ T1162] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 323.602476][ T1162] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 323.623066][ T1162] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 323.641389][ T9893] net_ratelimit: 7 callbacks suppressed [ 323.641408][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.657664][ T1162] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 323.678051][ T1162] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 323.708304][T16567] macsec0: entered promiscuous mode [ 323.713887][T16567] macsec0: entered allmulticast mode [ 323.722505][T16558] veth1_macvtap: entered allmulticast mode [ 323.729220][T16558] macsec0: left promiscuous mode [ 323.735235][T16558] macsec0: left allmulticast mode [ 323.740514][T16558] veth1_macvtap: left allmulticast mode [ 323.749993][T16568] syzkaller1: entered promiscuous mode [ 323.755582][T16568] syzkaller1: entered allmulticast mode [ 323.853808][T16583] xt_connbytes: Forcing CT accounting to be enabled [ 323.876906][ T1162] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 323.896815][ T1162] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 323.920449][ T1162] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 323.936279][ T1162] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 323.947069][ T1162] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 324.374576][T16608] syzkaller1: entered promiscuous mode [ 324.402059][T16608] syzkaller1: entered allmulticast mode [ 324.431322][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.621430][T16623] veth1_macvtap: mtu less than device minimum [ 324.683404][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.761413][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.769803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.869853][T16634] netlink: 'syz.1.2970': attribute type 4 has an invalid length. [ 324.901489][T16633] netlink: 'syz.1.2970': attribute type 4 has an invalid length. [ 325.182732][T16651] netlink: 'syz.2.2977': attribute type 58 has an invalid length. [ 325.551741][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.721447][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.271926][T16704] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 326.447212][ T29] audit: type=1107 audit(1781364735.431:4): pid=16708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ùé&6u²€êÑŠãÚú,gÌ;îÙ²{ÇÂò‰Ømëï]gÒo¶& ºY£B7Œ´ïP˜0¡' [ 326.650110][T16725] __nla_validate_parse: 15 callbacks suppressed [ 326.650147][T16725] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2994'. [ 326.661983][T16722] syzkaller0: entered promiscuous mode [ 326.686576][T16722] syzkaller0: entered allmulticast mode [ 326.692626][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.721432][T16724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2996'. [ 326.766682][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.810617][T16731] bond0: entered promiscuous mode [ 326.838508][T16731] bond0: left promiscuous mode [ 327.211997][T16748] Cannot find map_set index 135 as target [ 327.417581][T16758] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3002'. [ 327.460616][T16758] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3002'. [ 327.511149][T16758] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3002'. [ 327.975105][T16782] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3007'. [ 328.020773][T16782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3007'. [ 328.058503][T16782] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3007'. [ 328.076785][T16793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3009'. [ 328.091467][T16782] netlink: 'syz.3.3007': attribute type 2 has an invalid length. [ 328.122160][T16782] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3007'. [ 328.691257][T16822] net_ratelimit: 9 callbacks suppressed [ 328.691274][T16822] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 328.822606][T16829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.842502][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.941772][ T8695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.128749][T16844] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 329.411247][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 329.882841][ T9893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.051561][ T8695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.355167][T16916] tc_dump_action: action bad kind [ 330.523634][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.532033][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.549588][T16926] tc action pedit unable to extract header offset for header type (0x5) [ 330.878628][T16943] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 330.948007][T16947] netlink: 'syz.4.3057': attribute type 1 has an invalid length. [ 331.035663][T16947] 8021q: adding VLAN 0 to HW filter on device bond7 [ 331.062549][T16949] hsr0: entered promiscuous mode [ 331.115960][T16954] vlan0: entered promiscuous mode [ 331.128681][T16954] bond7: entered promiscuous mode [ 331.134626][T16954] vlan0: entered allmulticast mode [ 331.140054][T16954] bond7: entered allmulticast mode [ 331.174570][T16947] bond7: (slave bridge11): making interface the new active one [ 331.182528][T16947] bridge11: entered promiscuous mode [ 331.188139][T16947] bridge11: entered allmulticast mode [ 331.191733][ T8695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.201943][T16947] bond7: (slave bridge11): Enslaving as an active interface with an up link [ 331.702809][T16979] __nla_validate_parse: 50 callbacks suppressed [ 331.702828][T16979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3064'. [ 331.948700][T16992] gretap1: entered promiscuous mode [ 331.965777][T16992] batman_adv: batadv0: Adding interface: gretap1 [ 331.974466][T16992] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.000132][T16992] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 332.115312][T17002] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3070'. [ 332.116966][T17003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3070'. [ 332.193657][T16987] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3066'. [ 332.193726][T17009] netlink: 'syz.1.3073': attribute type 21 has an invalid length. [ 332.203646][T16987] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3066'. [ 332.215494][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3073'. [ 332.229281][T17009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3073'. [ 332.238642][T16987] netlink: 'syz.3.3066': attribute type 6 has an invalid length. [ 332.245452][T17009] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 332.257161][T16987] netlink: 'syz.3.3066': attribute type 5 has an invalid length. [ 332.274550][T16987] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3066'. [ 332.322589][T17011] ip6tnl2: entered promiscuous mode [ 332.458608][T17018] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3077'. [ 332.834792][T17036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3082'. [ 333.546510][T17090] syzkaller0: entered promiscuous mode [ 333.562499][T17090] syzkaller0: entered allmulticast mode [ 333.707781][T17101] net_ratelimit: 12 callbacks suppressed [ 333.707795][T17101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.724097][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.748115][T17101] tunl0: left promiscuous mode [ 333.778600][T17101] 0ªX¹¦Dö»: left allmulticast mode [ 333.862524][T17101] erspan0: left allmulticast mode [ 333.900362][T17101] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 334.507971][T17164] bond1: (slave lo): Releasing backup interface [ 334.515260][T17164] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 334.528265][T17164] bond0: (slave syz_tun): Releasing backup interface [ 334.536112][T17164] bridge_slave_0: left allmulticast mode [ 334.542797][T17164] bridge_slave_0: left promiscuous mode [ 334.548809][T17164] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.610672][ T1128] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 334.859740][T17164] bridge_slave_1: left allmulticast mode [ 334.866192][T17164] bridge_slave_1: left promiscuous mode [ 334.872097][T17164] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.884911][T17164] bond0: (slave bond_slave_0): Releasing backup interface [ 334.906628][T17164] bond0: (slave bond_slave_1): Releasing backup interface [ 334.915069][T17164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.924577][T17164] bond2: (slave bridge9): Releasing active interface [ 334.934408][T17164] bond3: (slave ip6gretap1): Releasing active interface [ 334.948893][T17164] bond5: (slave ip6erspan1): Releasing active interface [ 334.961827][T17164] bond7: (slave bridge11): Releasing active interface [ 334.969051][T17164] bridge11: left promiscuous mode [ 334.975234][T17164] bridge11: left allmulticast mode [ 334.986780][T17164] batman_adv: batadv0: Removing interface: gretap1 [ 337.451388][T17158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.477791][T17210] nbd: couldn't find device at index 2958377 [ 337.613044][T17213] tc action pedit 'at' offset 46 out of bounds [ 337.727311][T17223] bridge0: port 1(veth1_to_bridge) entered blocking state [ 337.753776][T17223] bridge0: port 1(veth1_to_bridge) entered disabled state [ 337.771648][T17223] veth1_to_bridge: entered allmulticast mode [ 337.782901][T17223] veth1_to_bridge: entered promiscuous mode [ 337.842761][T17234] __nla_validate_parse: 12 callbacks suppressed [ 337.842778][T17234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3126'. [ 338.277281][T17269] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3137'. [ 338.446130][T17280] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.451958][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3142'. [ 338.473222][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3142'. [ 338.700642][T17289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3144'. [ 339.054287][T17306] bridge_slave_0: default FDB implementation only supports local addresses [ 339.065123][T17306] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3151'. [ 339.076069][T17306] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3151'. [ 339.249793][T17316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3154'. [ 339.297536][T17319] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.3155'. [ 339.318327][T17321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3156'. [ 339.790762][T17341] netlink: zone id is out of range [ 339.805441][T17341] netlink: zone id is out of range [ 339.821331][T17341] netlink: zone id is out of range [ 339.828217][T17341] netlink: zone id is out of range [ 339.841914][T17341] netlink: zone id is out of range [ 339.852815][T17345] xt_hashlimit: size too large, truncated to 1048576 [ 339.862375][T17341] netlink: zone id is out of range [ 339.891330][T17341] netlink: zone id is out of range [ 339.914236][T17341] netlink: zone id is out of range [ 339.936621][T17341] netlink: zone id is out of range [ 339.966841][T17341] netlink: zone id is out of range [ 340.549485][T17372] x_tables: duplicate underflow at hook 1 [ 340.657774][T17379] batman_adv: batadv0: Adding interface: dummy0 [ 340.675302][T17379] batman_adv: batadv0: Interface activated: dummy0 [ 340.749572][T17387] syzkaller0: entered promiscuous mode [ 340.769758][T17387] syzkaller0: entered allmulticast mode [ 341.355286][T17430] Cannot find del_set index 0 as target [ 341.568997][T17443] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 342.323007][T13608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.333585][T13608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.461003][T17498] netlink: 'syz.4.3214': attribute type 39 has an invalid length. [ 342.517084][T17500] syzkaller0: entered promiscuous mode [ 342.523831][T17500] syzkaller0: entered allmulticast mode [ 342.698401][T17508] Unsupported ieee802154 address type: 0 [ 342.709485][T17511] netlink: 'syz.3.3220': attribute type 2 has an invalid length. [ 342.876191][T17528] netlink: 'syz.1.3223': attribute type 39 has an invalid length. [ 342.891890][T17528] hsr_slave_0: left promiscuous mode [ 342.899419][T17528] hsr_slave_1: left promiscuous mode [ 342.921300][ T50] Bluetooth: hci5: command tx timeout [ 343.475425][T17558] syzkaller0: entered promiscuous mode [ 343.495237][T17558] syzkaller0: entered allmulticast mode [ 346.180726][T17604] __nla_validate_parse: 12 callbacks suppressed [ 346.180747][T17604] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3245'. [ 346.254177][T17609] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3246'. [ 346.273354][T17606] syzkaller0: entered promiscuous mode [ 346.274987][T17609] FAULT_INJECTION: forcing a failure. [ 346.274987][T17609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.292985][T17606] syzkaller0: entered allmulticast mode [ 346.317286][T17609] CPU: 0 UID: 0 PID: 17609 Comm: syz.3.3246 Not tainted syzkaller #0 PREEMPT(full) [ 346.317311][T17609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 346.317320][T17609] Call Trace: [ 346.317328][T17609] [ 346.317336][T17609] dump_stack_lvl+0xe8/0x150 [ 346.317360][T17609] should_fail_ex+0x40c/0x560 [ 346.317385][T17609] _copy_to_user+0x31/0xb0 [ 346.317407][T17609] simple_read_from_buffer+0xe1/0x170 [ 346.317431][T17609] proc_fail_nth_read+0x1bb/0x230 [ 346.317454][T17609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 346.317474][T17609] ? rw_verify_area+0x24a/0x4c0 [ 346.317496][T17609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 346.317514][T17609] vfs_read+0x213/0xa80 [ 346.317539][T17609] ? __pfx___mutex_lock+0x10/0x10 [ 346.317557][T17609] ? __pfx_vfs_read+0x10/0x10 [ 346.317578][T17609] ? __fget_files+0x2a/0x420 [ 346.317599][T17609] ? __fget_files+0x3a2/0x420 [ 346.317615][T17609] ? __fget_files+0x2a/0x420 [ 346.317640][T17609] ksys_read+0x150/0x270 [ 346.317662][T17609] ? __pfx_ksys_read+0x10/0x10 [ 346.317690][T17609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.317706][T17609] do_syscall_64+0x174/0x580 [ 346.317720][T17609] ? trace_irq_disable+0x3b/0x140 [ 346.317741][T17609] ? clear_bhb_loop+0x40/0x90 [ 346.317760][T17609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.317775][T17609] RIP: 0033:0x7f309475d68e [ 346.317790][T17609] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 346.317813][T17609] RSP: 002b:00007f3095697fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 346.317830][T17609] RAX: ffffffffffffffda RBX: 00007f30956986c0 RCX: 00007f309475d68e [ 346.317841][T17609] RDX: 000000000000000f RSI: 00007f30956980a0 RDI: 0000000000000004 [ 346.317850][T17609] RBP: 00007f3095698090 R08: 0000000000000000 R09: 0000000000000000 [ 346.317859][T17609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.317868][T17609] R13: 00007f3094a16038 R14: 00007f3094a15fa0 R15: 00007ffe03a7d0a8 [ 346.317894][T17609] [ 346.636789][T17615] syzkaller0: entered promiscuous mode [ 346.645402][T17615] syzkaller0: entered allmulticast mode [ 346.653929][T17615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3250'. [ 346.756069][T17615] tipc: Enabled bearer , priority 0 [ 346.787883][T17614] tipc: Resetting bearer [ 346.870255][T17614] tipc: Disabling bearer [ 346.892147][T17639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3257'. [ 346.969278][T17641] bond0: entered allmulticast mode [ 347.111871][T17653] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3261'. [ 347.317529][T17664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3267'. [ 347.369808][T17668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3268'. [ 347.474933][T17670] net_ratelimit: 65 callbacks suppressed [ 347.474951][T17670] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 347.500056][T17675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.943408][T17695] tipc: Enabled bearer , priority 0 [ 347.973317][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 348.023484][T17699] syzkaller0: entered promiscuous mode [ 348.039163][T17699] syzkaller0: entered allmulticast mode [ 348.064213][T17694] tipc: Resetting bearer [ 348.107704][T17694] tipc: Disabling bearer [ 348.417020][T17736] tc_dump_action: action bad kind [ 348.939716][T17764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3295'. [ 348.950502][T17764] Cannot find del_set index 0 as target [ 349.108131][T17768] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3297'. [ 349.460044][T17796] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3304'. [ 349.540229][T17798] netlink: 'syz.2.3305': attribute type 15 has an invalid length. [ 349.549543][T17798] netlink: 'syz.2.3305': attribute type 15 has an invalid length. [ 349.659854][T17802] openvswitch: netlink: IP tunnel dst address not specified [ 349.687648][T17804] syzkaller0: entered promiscuous mode [ 349.695058][T17804] syzkaller0: entered allmulticast mode [ 349.764883][T17807] syzkaller0: entered promiscuous mode [ 349.770619][T17807] syzkaller0: entered allmulticast mode [ 349.984782][T17825] sctp: [Deprecated]: syz.4.3314 (pid 17825) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.984782][T17825] Use struct sctp_sack_info instead [ 350.026485][T17825] netlink: 'syz.4.3314': attribute type 7 has an invalid length. [ 350.214603][T17839] netlink: 'syz.1.3318': attribute type 1 has an invalid length. [ 350.248791][T17839] 8021q: adding VLAN 0 to HW filter on device bond8 [ 350.424463][T17857] TCP: TCP_TX_DELAY enabled [ 350.500253][T17860] netlink: 'syz.4.3323': attribute type 2 has an invalid length. [ 351.399661][T17905] netlink: 'syz.2.3333': attribute type 24 has an invalid length. [ 351.647188][T17927] __nla_validate_parse: 11 callbacks suppressed [ 351.648831][T17927] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3338'. [ 351.695022][T17930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.768170][T17934] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3341'. [ 351.953901][T17945] netlink: 'syz.4.3346': attribute type 11 has an invalid length. [ 351.971868][T17945] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.3346'. [ 352.020447][T17951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3347'. [ 352.064275][ T8695] nci: nci_rx_work: unknown MT 0x7 [ 352.267474][T17958] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 352.700835][T17969] netlink: 'syz.3.3351': attribute type 24 has an invalid length. [ 352.807064][T17972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3352'. [ 352.937007][T17983] x_tables: duplicate underflow at hook 1 [ 352.945976][T17983] x_tables: duplicate underflow at hook 1 [ 352.952653][T17983] x_tables: duplicate underflow at hook 1 [ 352.958850][T17983] x_tables: duplicate underflow at hook 1 [ 353.005905][T17987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3357'. [ 353.114564][T17990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3358'. [ 353.123864][T17990] netlink: 'syz.3.3358': attribute type 7 has an invalid length. [ 353.131863][T17990] netlink: 'syz.3.3358': attribute type 8 has an invalid length. [ 353.139646][T17990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3358'. [ 353.152427][T17990] 0ªX¹¦Dö»: entered promiscuous mode [ 353.158949][T17990] 0ªX¹¦Dö»: left promiscuous mode [ 354.923685][T17945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 355.226920][T18015] netlink: 'syz.2.3361': attribute type 1 has an invalid length. [ 355.275387][T18015] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3361'. [ 355.287545][T18016] pim6reg1: entered promiscuous mode [ 355.300746][T18016] pim6reg1: entered allmulticast mode [ 355.485210][T18025] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3365'. [ 355.580298][T18033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.657292][T18036] ieee802154 phy1 wpan1: encryption failed: -22 [ 355.775036][T18043] netlink: 'syz.2.3373': attribute type 1 has an invalid length. [ 355.790596][T18043] netlink: 'syz.2.3373': attribute type 3 has an invalid length. [ 355.951220][T18050] netlink: 'syz.2.3375': attribute type 1 has an invalid length. [ 355.992846][T18050] 8021q: adding VLAN 0 to HW filter on device bond8 [ 356.022939][T18050] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 356.064327][T18057] openvswitch: netlink: IP tunnel dst address not specified [ 356.509663][T18072] netlink: 'syz.4.3382': attribute type 5 has an invalid length. [ 356.528542][T18072] IPVS: Error connecting to the multicast addr [ 356.680417][T18074] syzkaller1: entered promiscuous mode [ 356.693624][T18074] syzkaller1: entered allmulticast mode [ 357.034024][T18084] __nla_validate_parse: 8 callbacks suppressed [ 357.034044][T18084] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3386'. [ 357.050305][T18084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3386'. [ 357.059601][T18084] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3386'. [ 357.270548][T18106] netlink: 404 bytes leftover after parsing attributes in process `syz.3.3393'. [ 357.283927][T18106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3393'. [ 357.295950][T18106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3393'. [ 357.305489][T18106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3393'. [ 357.348994][T18108] tap0: tun_chr_ioctl cmd 1074025672 [ 357.354607][T18108] tap0: ignored: set checksum disabled [ 357.667392][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3403'. [ 357.694292][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3403'. [ 357.710613][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3403'. [ 358.196063][T18154] netlink: 'syz.2.3412': attribute type 10 has an invalid length. [ 358.563050][T18183] syzkaller1: entered promiscuous mode [ 358.568661][T18183] syzkaller1: entered allmulticast mode [ 359.837091][T18255] syzkaller0: entered promiscuous mode [ 359.843084][T18255] syzkaller0: entered allmulticast mode [ 362.523358][T18232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.331886][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 363.859575][T18328] __nla_validate_parse: 9 callbacks suppressed [ 363.859595][T18328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3457'. [ 365.704889][T18264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 365.714913][T18288] netlink: 'syz.3.3444': attribute type 1 has an invalid length. [ 365.724285][T18288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3444'. [ 365.882024][T18335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3458'. [ 366.084305][T18349] blkio.reset_stats is deprecated [ 366.110575][T18350] bond9: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 366.126415][T18350] bond9 (unregistering): Released all slaves [ 366.280890][T18360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3465'. [ 366.613588][T18379] erspan0: entered promiscuous mode [ 366.619158][T18379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3471'. [ 367.077343][T18391] syz_tun: left promiscuous mode [ 367.164173][T18391] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 367.282246][T18409] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3481'. [ 367.348821][T18412] netlink: 'syz.2.3482': attribute type 10 has an invalid length. [ 367.522328][T18423] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 367.560937][T18423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.707763][T18439] netlink: 'syz.4.3489': attribute type 3 has an invalid length. [ 367.715953][T18439] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3489'. [ 367.808975][T18448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3493'. [ 367.812097][T18446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3492'. [ 367.900996][T18442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.910779][T18454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.975000][T18459] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3495'. [ 368.267627][T18480] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 368.312456][T18485] batman_adv: batadv0: Removing interface: wlan0 [ 368.503087][ T29] audit: type=1804 audit(1781364777.481:5): pid=18490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3505" name="/newroot/729/cgroup.controllers" dev="tmpfs" ino=3736 res=1 errno=0 [ 368.533928][T18492] netem: change failed [ 368.556411][ T29] audit: type=1800 audit(1781364777.511:6): pid=18490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3505" name="cgroup.controllers" dev="tmpfs" ino=3736 res=0 errno=0 [ 369.343350][T18541] __nla_validate_parse: 4 callbacks suppressed [ 369.343369][T18541] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3520'. [ 369.372029][T18532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.471664][T18546] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3522'. [ 370.158910][T18601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3537'. [ 370.292598][T18617] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3539'. [ 370.400825][T18626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3543'. [ 370.494393][T18630] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3544'. [ 370.512229][T18630] syzkaller1: entered promiscuous mode [ 370.518008][T18630] syzkaller1: entered allmulticast mode [ 370.625076][T18637] netlink: 'syz.2.3547': attribute type 1 has an invalid length. [ 370.682252][T18637] bond9: entered promiscuous mode [ 370.687889][T18637] 8021q: adding VLAN 0 to HW filter on device bond9 [ 370.728825][T18637] 8021q: adding VLAN 0 to HW filter on device bond9 [ 370.736290][T18637] bond9: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 370.748196][T18637] bond9: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 370.769889][T18637] bond9: (slave ip6gre2): making interface the new active one [ 370.782202][T18637] ip6gre2: entered promiscuous mode [ 370.789516][T18637] bond9: (slave ip6gre2): Enslaving as an active interface with an up link [ 370.804007][T18634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.864870][T18648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3549'. [ 370.919295][T18652] --map-set only usable from mangle table [ 371.134497][T18666] netlink: 'syz.4.3554': attribute type 4 has an invalid length. [ 371.149160][T18666] netlink: 'syz.4.3554': attribute type 4 has an invalid length. [ 371.185896][T18670] x_tables: duplicate underflow at hook 1 [ 371.273283][T18678] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3556'. [ 371.365752][T18673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.394598][T18673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.479667][T18673] veth0_macvtap: left promiscuous mode [ 371.504028][T18673] veth0_macvtap: entered promiscuous mode [ 371.648113][T18673] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.677569][T18673] 8021q: adding VLAN 0 to HW filter on device bond2 [ 371.695466][T18673] 8021q: adding VLAN 0 to HW filter on device eth0 [ 371.707104][T18673] 8021q: adding VLAN 0 to HW filter on device eth1 [ 371.719713][T18673] 8021q: adding VLAN 0 to HW filter on device eth2 [ 371.734219][T18673] 8021q: adding VLAN 0 to HW filter on device eth3 [ 371.761179][T18673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 371.795095][T18673] 8021q: adding VLAN 0 to HW filter on device bond4 [ 371.876302][T18673] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 371.955166][T13616] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.973991][T13616] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.995280][T13616] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.008492][T13616] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.017410][T13616] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.029114][T13616] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.135353][T13616] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.155287][T13616] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.178360][T18716] syzkaller1: entered promiscuous mode [ 372.184448][T18716] syzkaller1: entered allmulticast mode [ 372.208241][ T423] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.230012][ T423] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.238136][ T5726] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.255292][T18733] netlink: 'syz.3.3570': attribute type 1 has an invalid length. [ 372.260533][ T423] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 372.274108][ T9897] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 372.356718][T18733] 8021q: adding VLAN 0 to HW filter on device bond13 [ 372.398320][T18736] bond13: (slave veth0_to_bond): making interface the new active one [ 372.424275][T18736] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 372.593365][ T9897] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 372.657881][T18741] bond13: entered promiscuous mode [ 372.664355][T18741] veth0_to_bond: entered promiscuous mode [ 372.670520][T18741] bond13: entered allmulticast mode [ 372.676810][T18741] veth0_to_bond: entered allmulticast mode [ 372.797758][ T9897] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.865299][ T423] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 373.003408][ T5726] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.044345][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 373.071440][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 373.098890][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 373.111175][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 373.119052][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 373.380271][T18776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3577'. [ 373.553606][T18789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3580'. [ 373.659794][T18789] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 373.675195][T18789] bond10 (unregistering): Released all slaves [ 373.903211][T13616] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 374.508307][T18844] __nla_validate_parse: 1 callbacks suppressed [ 374.508326][T18844] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3592'. [ 374.515081][T18756] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.573913][T18851] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3597'. [ 374.584070][T18851] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3597'. [ 374.584859][T18756] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.594200][T18851] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3597'. [ 374.611310][T18851] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3597'. [ 374.620597][T18851] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3597'. [ 374.623134][T18756] bridge_slave_0: entered allmulticast mode [ 374.630568][T18851] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3597'. [ 374.646663][T18851] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3597'. [ 374.657323][T18851] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3597'. [ 374.667812][T18851] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3597'. [ 374.678677][T18756] bridge_slave_0: entered promiscuous mode [ 374.706387][T18849] vlan3: entered allmulticast mode [ 374.712104][T18849] bond0: entered allmulticast mode [ 374.731796][T18756] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.745177][T18756] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.767883][T18756] bridge_slave_1: entered allmulticast mode [ 374.794534][T18756] bridge_slave_1: entered promiscuous mode [ 374.905333][T18756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.922392][T18756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.971862][T18756] team0: Port device team_slave_0 added [ 375.011682][T18756] team0: Port device team_slave_1 added [ 375.093113][T18756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.100394][T18756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.127132][T18756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.143231][T18756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.150418][T18756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.177070][ T50] Bluetooth: hci2: command tx timeout [ 375.186982][T18756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.262800][T18756] hsr_slave_0: entered promiscuous mode [ 375.269304][T18756] hsr_slave_1: entered promiscuous mode [ 375.730667][T18892] netlink: 'syz.3.3607': attribute type 2 has an invalid length. [ 375.738801][T18892] netlink: 'syz.3.3607': attribute type 2 has an invalid length. [ 375.754027][T18892] netlink: 'syz.3.3607': attribute type 2 has an invalid length. [ 375.765686][T18892] netlink: 'syz.3.3607': attribute type 2 has an invalid length. [ 375.914309][T18904] xt_recent: Unsupported userspace flags (000000b1) [ 376.600818][T18912] syzkaller0: entered promiscuous mode [ 376.607184][T18912] syzkaller0: entered allmulticast mode [ 377.119450][T18946] netlink: 'syz.3.3620': attribute type 4 has an invalid length. [ 377.242098][ T50] Bluetooth: hci2: command tx timeout [ 377.491916][T18968] syzkaller0: entered promiscuous mode [ 377.501905][T18968] syzkaller0: entered allmulticast mode [ 377.560127][T18968] tipc: Enabled bearer , priority 0 [ 377.588136][T18967] tipc: Resetting bearer [ 377.619136][T18967] tipc: Disabling bearer [ 377.697889][T18976] netlink: 'syz.4.3630': attribute type 1 has an invalid length. [ 377.997065][T18995] netlink: 'syz.2.3637': attribute type 7 has an invalid length. [ 378.005238][T18995] netlink: 'syz.2.3637': attribute type 8 has an invalid length. [ 378.042231][ C0] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 378.042250][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 378.688446][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.698266][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 378.973234][T19055] udevd[19055]: setting owner of /dev/rfcomm28 to uid=0, gid=18 failed: No such file or directory [ 379.321485][ T50] Bluetooth: hci2: command tx timeout [ 379.333644][T19072] syzkaller1: entered promiscuous mode [ 379.349279][T19072] syzkaller1: entered allmulticast mode [ 379.405194][ T29] audit: type=1804 audit(1781364788.391:7): pid=19076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3658" name="/newroot/767/cgroup.controllers" dev="tmpfs" ino=3932 res=1 errno=0 [ 379.428145][ T29] audit: type=1800 audit(1781364788.391:8): pid=19076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3658" name="cgroup.controllers" dev="tmpfs" ino=3932 res=0 errno=0 [ 379.544364][T19080] xt_CT: You must specify a L4 protocol and not use inversions on it [ 379.544889][T19080] netlink: 'syz.2.3660': attribute type 11 has an invalid length. [ 379.566379][T19080] __nla_validate_parse: 42 callbacks suppressed [ 379.566396][T19080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3660'. [ 379.591020][T19080] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3660'. [ 379.908904][T19105] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3667'. [ 379.920687][T19090] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3664'. [ 379.931837][T19090] 8021q: VLANs not supported on ip_vti0 [ 380.014899][ T29] audit: type=1804 audit(1781364789.001:9): pid=19107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3668" name="/newroot/781/cgroup.controllers" dev="tmpfs" ino=3991 res=1 errno=0 [ 380.038220][ T29] audit: type=1800 audit(1781364789.001:10): pid=19107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3668" name="cgroup.controllers" dev="tmpfs" ino=3991 res=0 errno=0 [ 380.052622][T19107] IPVS: lc: FWM 3 0x00000003 - no destination available [ 380.305852][T19123] netlink: 'syz.3.3672': attribute type 21 has an invalid length. [ 380.326011][T19123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3672'. [ 380.355125][T19123] netlink: 'syz.3.3672': attribute type 21 has an invalid length. [ 380.375652][T19123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3672'. [ 380.376206][T19118] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3672'. [ 380.480750][T19136] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3675'. [ 380.585976][T19146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3677'. [ 380.613554][T19146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3677'. [ 380.730417][ T29] audit: type=1804 audit(1781364789.711:11): pid=19150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3679" name="/newroot/785/cgroup.controllers" dev="tmpfs" ino=4014 res=1 errno=0 [ 380.751750][T19150] IPVS: lc: FWM 3 0x00000003 - no destination available [ 380.779367][ T29] audit: type=1800 audit(1781364789.711:12): pid=19150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3679" name="cgroup.controllers" dev="tmpfs" ino=4014 res=0 errno=0 [ 380.883892][T19152] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 381.300954][T19172] bond10 (unregistering): Released all slaves [ 381.401801][ T50] Bluetooth: hci2: command tx timeout [ 381.644282][T19207] IPVS: sh: FWM 3 0x00000003 - no destination available [ 381.837379][T19214] syzkaller0: entered promiscuous mode [ 381.851240][T19214] syzkaller0: entered allmulticast mode [ 382.131522][T19223] netlink: 'syz.1.3698': attribute type 11 has an invalid length. [ 382.139560][T19223] netlink: 'syz.1.3698': attribute type 5 has an invalid length. [ 382.306509][T19231] netlink: 'syz.3.3700': attribute type 12 has an invalid length. [ 382.663436][T19256] bond0: option miimon: invalid value (18446744071829782528) [ 382.678284][T19256] bond0: option miimon: allowed values 0 - 2147483647 [ 382.723932][T19259] syzkaller0: entered promiscuous mode [ 382.729936][T19259] syzkaller0: entered allmulticast mode [ 382.740764][T19261] netlink: 'syz.4.3709': attribute type 21 has an invalid length. [ 382.750363][T19261] netlink: 'syz.4.3709': attribute type 6 has an invalid length. [ 383.199793][T19294] netlink: 'syz.1.3720': attribute type 13 has an invalid length. [ 383.334872][T19303] syzkaller0: entered promiscuous mode [ 383.343419][T19303] syzkaller0: entered allmulticast mode [ 383.383651][ T29] audit: type=1804 audit(1781364792.371:13): pid=19305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3724" name="/newroot/745/cgroup.controllers" dev="tmpfs" ino=3803 res=1 errno=0 [ 383.430694][ T29] audit: type=1800 audit(1781364792.371:14): pid=19305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3724" name="cgroup.controllers" dev="tmpfs" ino=3803 res=0 errno=0 [ 384.012761][T19331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.128403][T19337] syzkaller0: entered promiscuous mode [ 384.134658][T19337] syzkaller0: entered allmulticast mode [ 384.140958][ T29] audit: type=1804 audit(1781364793.121:15): pid=19335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3734" name="/newroot/800/cgroup.controllers" dev="tmpfs" ino=4092 res=1 errno=0 [ 384.144029][T19335] IPVS: lc: FWM 3 0x00000003 - no destination available [ 384.164663][ T29] audit: type=1800 audit(1781364793.121:16): pid=19335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3734" name="cgroup.controllers" dev="tmpfs" ino=4092 res=0 errno=0 [ 384.414969][T19348] netlink: 'syz.4.3739': attribute type 1 has an invalid length. [ 384.451241][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 384.549092][T19358] syzkaller0: entered promiscuous mode [ 384.554823][T19358] syzkaller0: entered allmulticast mode [ 384.619859][T19357] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 384.639745][T19361] tipc: Enabled bearer , priority 0 [ 384.675443][T19355] tipc: Resetting bearer [ 384.732665][T19355] tipc: Disabling bearer [ 384.784031][ T29] audit: type=1804 audit(1781364793.761:17): pid=19366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3745" name="/newroot/799/cgroup.controllers" dev="tmpfs" ino=4100 res=1 errno=0 [ 384.807957][ T29] audit: type=1800 audit(1781364793.781:18): pid=19366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3745" name="cgroup.controllers" dev="tmpfs" ino=4100 res=0 errno=0 [ 384.830960][T19364] __nla_validate_parse: 17 callbacks suppressed [ 384.830981][T19364] netlink: 212320 bytes leftover after parsing attributes in process `syz.2.3744'. [ 384.937021][T19373] netlink: 'syz.1.3746': attribute type 8 has an invalid length. [ 384.948010][T19372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3747'. [ 385.083947][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 385.112215][T19377] netlink: 'syz.4.3749': attribute type 1 has an invalid length. [ 385.138690][T19377] netlink: 'syz.4.3749': attribute type 1 has an invalid length. [ 385.260662][T19390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3753'. [ 385.331283][T19400] lo: entered promiscuous mode [ 385.336596][T19400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.427998][T19409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3757'. [ 385.509056][T19414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3758'. [ 385.630325][T19418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3759'. [ 385.668808][T19418] netlink: 'syz.1.3759': attribute type 29 has an invalid length. [ 385.700588][T19423] nftables ruleset with unbound chain [ 385.704392][T19418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3759'. [ 385.841554][T19434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3759'. [ 386.126968][T19442] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3766'. [ 386.150115][T19442] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3766'. [ 386.406356][T19453] vlan1: entered allmulticast mode [ 386.418600][T19453] veth0_vlan: entered allmulticast mode [ 386.621743][T19460] tap0: tun_chr_ioctl cmd 1074025676 [ 386.627554][T19460] tap0: owner set to 0 [ 386.631575][T19466] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 386.648494][T19460] xfrm1: entered promiscuous mode [ 386.657960][T19460] xfrm1: entered allmulticast mode [ 386.769191][T19471] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 387.002917][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 389.927200][T19492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.279698][T19533] __nla_validate_parse: 3 callbacks suppressed [ 390.279719][T19533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3795'. [ 390.465569][T19546] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 390.465750][T19547] sctp: [Deprecated]: syz.1.3798 (pid 19547) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.465750][T19547] Use struct sctp_sack_info instead [ 390.485388][T19546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.932996][T19567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3806'. [ 390.948005][T19567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3806'. [ 390.969688][T19567] macsec3: entered promiscuous mode [ 390.975377][T19567] macsec3: entered allmulticast mode [ 390.980821][T19567] bridge0: entered allmulticast mode [ 391.009702][T19571] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3808'. [ 391.054399][T19573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3809'. [ 391.099796][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3811'. [ 391.123118][T19575] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 391.174241][T19575] team0: entered promiscuous mode [ 391.179363][T19575] team0: entered allmulticast mode [ 391.426607][T19595] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3815'. [ 391.626372][T19612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3819'. [ 391.657641][T19614] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3820'. [ 391.754949][T19618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3822'. [ 391.764356][T19618] netlink: 'syz.3.3822': attribute type 7 has an invalid length. [ 391.786049][T19618] netlink: 'syz.3.3822': attribute type 8 has an invalid length. [ 391.796226][T19623] bond8 (unregistering): Released all slaves [ 391.861414][T19628] netlink: 'syz.2.3825': attribute type 7 has an invalid length. [ 391.869364][T19628] netlink: 'syz.2.3825': attribute type 8 has an invalid length. [ 391.964350][T19632] FAULT_INJECTION: forcing a failure. [ 391.964350][T19632] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 391.983648][T19632] CPU: 1 UID: 0 PID: 19632 Comm: syz.4.3827 Not tainted syzkaller #0 PREEMPT(full) [ 391.983680][T19632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 391.983695][T19632] Call Trace: [ 391.983776][T19632] [ 391.983833][T19632] dump_stack_lvl+0xe8/0x150 [ 391.983923][T19632] should_fail_ex+0x40c/0x560 [ 391.984020][T19632] prepare_alloc_pages+0x230/0x650 [ 391.984084][T19632] __alloc_frozen_pages_noprof+0x12f/0x380 [ 391.984115][T19632] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 391.984145][T19632] ? __pfx_policy_nodemask+0x10/0x10 [ 391.984189][T19632] alloc_pages_mpol+0x212/0x380 [ 391.984222][T19632] alloc_pages_noprof+0xac/0x2a0 [ 391.984242][T19632] __pud_alloc+0x3a/0x460 [ 391.984266][T19632] handle_mm_fault+0x1f87/0x3080 [ 391.984296][T19632] ? __pfx_mt_find+0x10/0x10 [ 391.984396][T19632] ? handle_mm_fault+0xec/0x3080 [ 391.984429][T19632] ? unwind_get_return_address+0x4d/0x90 [ 391.984472][T19632] ? __pfx_handle_mm_fault+0x10/0x10 [ 391.984508][T19632] ? __lock_acquire+0x683/0x2cd0 [ 391.984542][T19632] ? lock_mm_and_find_vma+0xa7/0x340 [ 391.984571][T19632] do_user_addr_fault+0x744/0x1340 [ 391.984606][T19632] exc_page_fault+0x6a/0xc0 [ 391.984682][T19632] asm_exc_page_fault+0x26/0x30 [ 391.984718][T19632] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 391.984793][T19632] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 391.984814][T19632] RSP: 0018:ffffc9001c2c7ab8 EFLAGS: 00050202 [ 391.984830][T19632] RAX: 00007ffffffff001 RBX: 0000000000000018 RCX: 0000000000000018 [ 391.984842][T19632] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffc9001c2c7bd0 [ 391.984854][T19632] RBP: ffffc9001c2c7cb0 R08: ffffc9001c2c7be7 R09: 1ffff92003858f7c [ 391.984866][T19632] R10: dffffc0000000000 R11: fffff52003858f7d R12: ffff88807de93000 [ 391.984879][T19632] R13: dffffc0000000000 R14: ffffc9001c2c7bd0 R15: 0000200000000100 [ 391.984910][T19632] _copy_from_user+0x7a/0xb0 [ 391.984959][T19632] rfcomm_dev_ioctl+0x1b4/0x21c0 [ 391.985049][T19632] ? kasan_quarantine_put+0xbb/0x1f0 [ 391.985072][T19632] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 391.985132][T19632] ? tomoyo_path_number_perm+0x219/0x5f0 [ 391.985218][T19632] ? do_vfs_ioctl+0x116f/0x1540 [ 391.985257][T19632] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 391.985290][T19632] sock_do_ioctl+0x101/0x320 [ 391.985356][T19632] ? __pfx_sock_do_ioctl+0x10/0x10 [ 391.985373][T19632] ? hook_file_ioctl+0x1f0/0x5c0 [ 391.985563][T19632] sock_ioctl+0x57a/0x7e0 [ 391.985585][T19632] ? __pfx_sock_ioctl+0x10/0x10 [ 391.985603][T19632] ? __fget_files+0x2a/0x420 [ 391.985632][T19632] ? __fget_files+0x3a2/0x420 [ 391.985651][T19632] ? __fget_files+0x2a/0x420 [ 391.985676][T19632] ? bpf_lsm_file_ioctl+0x9/0x20 [ 391.985718][T19632] ? __pfx_sock_ioctl+0x10/0x10 [ 391.985737][T19632] __se_sys_ioctl+0xfc/0x170 [ 391.985763][T19632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.985782][T19632] do_syscall_64+0x174/0x580 [ 391.985799][T19632] ? trace_irq_disable+0x3b/0x140 [ 391.985834][T19632] ? clear_bhb_loop+0x40/0x90 [ 391.985853][T19632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.985869][T19632] RIP: 0033:0x7f54f119ce59 [ 391.985884][T19632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.985898][T19632] RSP: 002b:00007f54f1fa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.985914][T19632] RAX: ffffffffffffffda RBX: 00007f54f1415fa0 RCX: 00007f54f119ce59 [ 391.985926][T19632] RDX: 0000200000000100 RSI: 00000000400452c9 RDI: 0000000000000004 [ 391.985936][T19632] RBP: 00007f54f1fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 391.985947][T19632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.985956][T19632] R13: 00007f54f1416038 R14: 00007f54f1415fa0 R15: 00007ffce9618f68 [ 391.985986][T19632] [ 392.094525][T19643] openvswitch: netlink: IPv4 tun info is not correct [ 392.968248][T19692] FAULT_INJECTION: forcing a failure. [ 392.968248][T19692] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 392.982149][T19692] CPU: 0 UID: 0 PID: 19692 Comm: syz.3.3841 Not tainted syzkaller #0 PREEMPT(full) [ 392.982165][T19692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 392.982172][T19692] Call Trace: [ 392.982177][T19692] [ 392.982181][T19692] dump_stack_lvl+0xe8/0x150 [ 392.982200][T19692] should_fail_ex+0x40c/0x560 [ 392.982217][T19692] prepare_alloc_pages+0x230/0x650 [ 392.982249][T19692] __alloc_frozen_pages_noprof+0x12f/0x380 [ 392.982278][T19692] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 392.982308][T19692] ? __pfx_policy_nodemask+0x10/0x10 [ 392.982339][T19692] ? do_raw_spin_lock+0x12b/0x2f0 [ 392.982357][T19692] alloc_pages_mpol+0x212/0x380 [ 392.982375][T19692] alloc_pages_noprof+0xac/0x2a0 [ 392.982385][T19692] __pmd_alloc+0x3a/0x5c0 [ 392.982399][T19692] handle_mm_fault+0xe22/0x3080 [ 392.982418][T19692] ? handle_mm_fault+0xec/0x3080 [ 392.982434][T19692] ? __pfx_handle_mm_fault+0x10/0x10 [ 392.982453][T19692] ? __lock_acquire+0x683/0x2cd0 [ 392.982465][T19692] ? lock_mm_and_find_vma+0xa7/0x340 [ 392.982481][T19692] do_user_addr_fault+0x744/0x1340 [ 392.982500][T19692] exc_page_fault+0x6a/0xc0 [ 392.982517][T19692] asm_exc_page_fault+0x26/0x30 [ 392.982527][T19692] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 392.982541][T19692] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 392.982549][T19692] RSP: 0018:ffffc9000d947ab8 EFLAGS: 00050202 [ 392.982558][T19692] RAX: 00007ffffffff001 RBX: 0000000000000018 RCX: 0000000000000018 [ 392.982565][T19692] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffc9000d947bd0 [ 392.982572][T19692] RBP: ffffc9000d947cb0 R08: ffffc9000d947be7 R09: 1ffff92001b28f7c [ 392.982579][T19692] R10: dffffc0000000000 R11: fffff52001b28f7d R12: ffff88801b3c2000 [ 392.982586][T19692] R13: dffffc0000000000 R14: ffffc9000d947bd0 R15: 0000200000000100 [ 392.982603][T19692] _copy_from_user+0x7a/0xb0 [ 392.982616][T19692] rfcomm_dev_ioctl+0x1b4/0x21c0 [ 392.982631][T19692] ? kasan_quarantine_put+0xbb/0x1f0 [ 392.982645][T19692] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 392.982663][T19692] ? tomoyo_path_number_perm+0x219/0x5f0 [ 392.982689][T19692] ? do_vfs_ioctl+0x116f/0x1540 [ 392.982716][T19692] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 392.982747][T19692] sock_do_ioctl+0x101/0x320 [ 392.982770][T19692] ? __pfx_sock_do_ioctl+0x10/0x10 [ 392.982786][T19692] ? hook_file_ioctl+0x1f0/0x5c0 [ 392.982809][T19692] sock_ioctl+0x57a/0x7e0 [ 392.982821][T19692] ? __pfx_sock_ioctl+0x10/0x10 [ 392.982834][T19692] ? __fget_files+0x2a/0x420 [ 392.982845][T19692] ? __fget_files+0x3a2/0x420 [ 392.982856][T19692] ? __fget_files+0x2a/0x420 [ 392.982869][T19692] ? bpf_lsm_file_ioctl+0x9/0x20 [ 392.982884][T19692] ? __pfx_sock_ioctl+0x10/0x10 [ 392.982895][T19692] __se_sys_ioctl+0xfc/0x170 [ 392.982909][T19692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.982919][T19692] do_syscall_64+0x174/0x580 [ 392.982929][T19692] ? trace_irq_disable+0x3b/0x140 [ 392.982943][T19692] ? clear_bhb_loop+0x40/0x90 [ 392.982955][T19692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.982965][T19692] RIP: 0033:0x7f309479ce59 [ 392.982975][T19692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.982984][T19692] RSP: 002b:00007f3095698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.982994][T19692] RAX: ffffffffffffffda RBX: 00007f3094a15fa0 RCX: 00007f309479ce59 [ 392.983001][T19692] RDX: 0000200000000100 RSI: 00000000400452c9 RDI: 0000000000000004 [ 392.983008][T19692] RBP: 00007f3095698090 R08: 0000000000000000 R09: 0000000000000000 [ 392.983014][T19692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.983020][T19692] R13: 00007f3094a16038 R14: 00007f3094a15fa0 R15: 00007ffe03a7d0a8 [ 392.983036][T19692] [ 393.444841][T19696] netlink: 'syz.3.3843': attribute type 1 has an invalid length. [ 393.479948][T19696] 8021q: adding VLAN 0 to HW filter on device bond14 [ 393.530151][T19696] bond14: (slave bridge10): making interface the new active one [ 393.551406][T19696] bond14: (slave bridge10): Enslaving as an active interface with an up link [ 395.533886][T19666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.745413][T19755] veth1_to_bond: entered allmulticast mode [ 395.759474][T19755] __nla_validate_parse: 7 callbacks suppressed [ 395.759494][T19755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3851'. [ 395.822856][T19755] veth1_to_bond (unregistering): left allmulticast mode [ 395.830975][T19759] FAULT_INJECTION: forcing a failure. [ 395.830975][T19759] name failslab, interval 1, probability 0, space 0, times 0 [ 395.847718][T19759] CPU: 1 UID: 0 PID: 19759 Comm: syz.3.3852 Not tainted syzkaller #0 PREEMPT(full) [ 395.847742][T19759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 395.847753][T19759] Call Trace: [ 395.847760][T19759] [ 395.847768][T19759] dump_stack_lvl+0xe8/0x150 [ 395.847794][T19759] should_fail_ex+0x40c/0x560 [ 395.847820][T19759] should_failslab+0xa8/0x100 [ 395.847848][T19759] ? __pmd_alloc+0xc1/0x5c0 [ 395.847870][T19759] kmem_cache_alloc_noprof+0x87/0x650 [ 395.847902][T19759] __pmd_alloc+0xc1/0x5c0 [ 395.847927][T19759] handle_mm_fault+0xe22/0x3080 [ 395.847962][T19759] ? handle_mm_fault+0xec/0x3080 [ 395.847992][T19759] ? __pfx_handle_mm_fault+0x10/0x10 [ 395.848033][T19759] ? __lock_acquire+0x683/0x2cd0 [ 395.848058][T19759] ? lock_mm_and_find_vma+0xa7/0x340 [ 395.848086][T19759] do_user_addr_fault+0x744/0x1340 [ 395.848131][T19759] exc_page_fault+0x6a/0xc0 [ 395.848160][T19759] asm_exc_page_fault+0x26/0x30 [ 395.848177][T19759] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 395.848200][T19759] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 395.848214][T19759] RSP: 0018:ffffc9000d68fab8 EFLAGS: 00050202 [ 395.848232][T19759] RAX: 00007ffffffff001 RBX: 0000000000000018 RCX: 0000000000000018 [ 395.848244][T19759] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffc9000d68fbd0 [ 395.848256][T19759] RBP: ffffc9000d68fcb0 R08: ffffc9000d68fbe7 R09: 1ffff92001ad1f7c [ 395.848269][T19759] R10: dffffc0000000000 R11: fffff52001ad1f7d R12: ffff88802ca21000 [ 395.848282][T19759] R13: dffffc0000000000 R14: ffffc9000d68fbd0 R15: 0000200000000100 [ 395.848314][T19759] _copy_from_user+0x7a/0xb0 [ 395.848337][T19759] rfcomm_dev_ioctl+0x1b4/0x21c0 [ 395.848363][T19759] ? kasan_quarantine_put+0xbb/0x1f0 [ 395.848386][T19759] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 395.848420][T19759] ? tomoyo_path_number_perm+0x219/0x5f0 [ 395.848452][T19759] ? do_vfs_ioctl+0x116f/0x1540 [ 395.848480][T19759] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 395.848513][T19759] sock_do_ioctl+0x101/0x320 [ 395.848537][T19759] ? __pfx_sock_do_ioctl+0x10/0x10 [ 395.848555][T19759] ? hook_file_ioctl+0x1f0/0x5c0 [ 395.848594][T19759] sock_ioctl+0x57a/0x7e0 [ 395.848617][T19759] ? __pfx_sock_ioctl+0x10/0x10 [ 395.848637][T19759] ? __fget_files+0x2a/0x420 [ 395.848657][T19759] ? __fget_files+0x3a2/0x420 [ 395.848676][T19759] ? __fget_files+0x2a/0x420 [ 395.848700][T19759] ? bpf_lsm_file_ioctl+0x9/0x20 [ 395.848726][T19759] ? __pfx_sock_ioctl+0x10/0x10 [ 395.848746][T19759] __se_sys_ioctl+0xfc/0x170 [ 395.848770][T19759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.848790][T19759] do_syscall_64+0x174/0x580 [ 395.848806][T19759] ? trace_irq_disable+0x3b/0x140 [ 395.848831][T19759] ? clear_bhb_loop+0x40/0x90 [ 395.848853][T19759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.848870][T19759] RIP: 0033:0x7f309479ce59 [ 395.848887][T19759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.848901][T19759] RSP: 002b:00007f3095698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.848918][T19759] RAX: ffffffffffffffda RBX: 00007f3094a15fa0 RCX: 00007f309479ce59 [ 395.848930][T19759] RDX: 0000200000000100 RSI: 00000000400452c9 RDI: 0000000000000004 [ 395.848941][T19759] RBP: 00007f3095698090 R08: 0000000000000000 R09: 0000000000000000 [ 395.848951][T19759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.848961][T19759] R13: 00007f3094a16038 R14: 00007f3094a15fa0 R15: 00007ffe03a7d0a8 [ 395.848992][T19759] [ 396.343845][T19776] netlink: 'syz.3.3855': attribute type 1 has an invalid length. [ 396.375908][T19776] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3855'. [ 396.658143][T19789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3858'. [ 397.007830][T19809] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 397.167831][ T29] audit: type=1804 audit(1781364806.151:19): pid=19824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3865" name="/newroot/825/cgroup.controllers" dev="tmpfs" ino=4231 res=1 errno=0 [ 397.235476][ T29] audit: type=1800 audit(1781364806.151:20): pid=19824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3865" name="cgroup.controllers" dev="tmpfs" ino=4231 res=0 errno=0 [ 397.279995][T19827] netlink: 'syz.2.3868': attribute type 7 has an invalid length. [ 397.294567][T19827] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3868'. [ 397.350035][T19830] ieee802154 phy1 wpan1: encryption failed: -22 [ 397.496591][T19837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3870'. [ 397.518790][T19839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3870'. [ 398.055106][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3878'. [ 398.310001][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3884'. [ 398.465858][T19906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3884'. [ 399.199510][T19950] netlink: 'syz.1.3899': attribute type 63 has an invalid length. [ 399.246410][T19950] netlink: 'syz.1.3899': attribute type 63 has an invalid length. [ 399.354269][T19955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3901'. [ 399.385774][T19959] netlink: 'syz.3.3902': attribute type 1 has an invalid length. [ 399.471727][T19959] 8021q: adding VLAN 0 to HW filter on device bond15 [ 399.485055][T19958] bond13: (slave veth0_to_bond): Releasing active interface [ 399.492903][T19958] veth0_to_bond: left promiscuous mode [ 399.499979][T19958] veth0_to_bond: left allmulticast mode [ 399.528938][ T29] audit: type=1804 audit(1781364808.511:21): pid=19965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3903" name="/newroot/833/cgroup.controllers" dev="tmpfs" ino=4276 res=1 errno=0 [ 399.555273][ T29] audit: type=1800 audit(1781364808.511:22): pid=19965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3903" name="cgroup.controllers" dev="tmpfs" ino=4276 res=0 errno=0 [ 399.708016][T19973] syzkaller0: entered promiscuous mode [ 399.714286][T19973] syzkaller0: entered allmulticast mode [ 399.873537][T19976] netlink: 'syz.3.3907': attribute type 6 has an invalid length. [ 400.346355][ T29] audit: type=1804 audit(1781364809.331:23): pid=20003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3914" name="/newroot/825/cgroup.controllers" dev="tmpfs" ino=4233 res=1 errno=0 [ 400.349026][T20003] IPVS: sh: FWM 3 0x00000003 - no destination available [ 400.402114][ T29] audit: type=1800 audit(1781364809.331:24): pid=20003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3914" name="cgroup.controllers" dev="tmpfs" ino=4233 res=0 errno=0 [ 400.456969][ T50] block nbd2: Receive control failed (result -1) [ 400.506814][T20010] syzkaller0: entered promiscuous mode [ 400.516024][T20010] syzkaller0: entered allmulticast mode [ 400.640867][T20014] netlink: 'syz.3.3919': attribute type 21 has an invalid length. [ 400.687722][T20014] bond16: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 400.717265][T20014] bond16 (unregistering): Released all slaves [ 401.082017][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 401.150020][ T29] audit: type=1804 audit(1781364810.131:25): pid=20036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3926" name="/newroot/800/cgroup.controllers" dev="tmpfs" ino=4086 res=1 errno=0 [ 401.179424][ T29] audit: type=1800 audit(1781364810.131:26): pid=20036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3926" name="cgroup.controllers" dev="tmpfs" ino=4086 res=0 errno=0 [ 401.298713][T20048] __nla_validate_parse: 3 callbacks suppressed [ 401.298735][T20048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3928'. [ 401.340889][T20050] syzkaller0: entered promiscuous mode [ 401.355817][T20050] syzkaller0: entered allmulticast mode [ 401.722831][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 401.768140][T20068] netlink: 'syz.4.3935': attribute type 8 has an invalid length. [ 401.780389][T20068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3935'. [ 401.966852][ T29] audit: type=1804 audit(1781364810.951:27): pid=20073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3937" name="/newroot/830/cgroup.controllers" dev="tmpfs" ino=4261 res=1 errno=0 [ 402.000917][T20073] IPVS: sh: FWM 3 0x00000003 - no destination available [ 402.041300][ T29] audit: type=1800 audit(1781364810.981:28): pid=20073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3937" name="cgroup.controllers" dev="tmpfs" ino=4261 res=0 errno=0 [ 402.160235][T20081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3939'. [ 402.170869][T20082] netlink: 'syz.2.3940': attribute type 12 has an invalid length. [ 402.208430][T20082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3940'. [ 402.808281][T20099] syzkaller0: entered promiscuous mode [ 402.823800][T20099] syzkaller0: entered allmulticast mode [ 403.127578][T20104] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3947'. [ 404.938284][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 405.825472][T20103] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.026459][ T29] audit: type=1804 audit(1781364815.011:29): pid=20123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3949" name="/newroot/843/cgroup.controllers" dev="tmpfs" ino=4333 res=1 errno=0 [ 406.057107][ T29] audit: type=1800 audit(1781364815.031:30): pid=20123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3949" name="cgroup.controllers" dev="tmpfs" ino=4333 res=0 errno=0 [ 406.176729][T20128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3951'. [ 406.194793][T20131] syzkaller0: entered promiscuous mode [ 406.203672][T20131] syzkaller0: entered allmulticast mode [ 406.544765][T20152] netlink: 'syz.2.3960': attribute type 1 has an invalid length. [ 406.564953][T20152] netlink: 'syz.2.3960': attribute type 1 has an invalid length. [ 406.566918][T20150] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3958'. [ 406.601732][T20155] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3958'. [ 406.740390][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3961'. [ 406.914306][T20166] netlink: 516 bytes leftover after parsing attributes in process `syz.2.3962'. [ 406.973090][T20168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3963'. [ 407.033476][T20170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3964'. [ 407.116554][T20174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3966'. [ 407.289464][T20177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3967'. [ 407.319126][T20177] 8021q: adding VLAN 0 to HW filter on device bond10 [ 407.390777][T20177] 8021q: adding VLAN 0 to HW filter on device bond11 [ 407.405824][T20177] bond10: (slave bond11): Enslaving as an active interface with an up link [ 407.406862][T20180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3967'. [ 407.466445][T20180] bond10 (unregistering): (slave bond11): Releasing backup interface [ 407.499549][T20180] bond10 (unregistering): Released all slaves [ 407.630777][T20189] netlink: 'syz.3.3970': attribute type 1 has an invalid length. [ 407.651173][T20189] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3970'. [ 407.660536][T20189] netlink: 'syz.3.3970': attribute type 1 has an invalid length. [ 407.999180][T20200] openvswitch: netlink: Flow key attribute not present in set flow. [ 408.781390][T20240] netlink: 'syz.3.3984': attribute type 3 has an invalid length. [ 408.806018][T20240] netlink: 'syz.3.3984': attribute type 3 has an invalid length. [ 408.817548][T20242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.874590][T20244] syzkaller0: entered promiscuous mode [ 408.890612][T20244] syzkaller0: entered allmulticast mode [ 409.145661][T20261] syzkaller0: MTU too low for tipc bearer [ 409.173673][T20261] tipc: Enabling of bearer rejected, failed to enable media [ 409.420291][T20273] netlink: 'syz.1.3994': attribute type 27 has an invalid length. [ 409.438498][T20273] netlink: 'syz.1.3994': attribute type 4 has an invalid length. [ 410.166507][T20298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.377049][T20310] bond0: left allmulticast mode [ 410.433734][T20312] netlink: 'syz.2.4006': attribute type 3 has an invalid length. [ 410.538179][T20318] netlink: 'syz.1.4009': attribute type 19 has an invalid length. [ 412.129273][T20402] __nla_validate_parse: 15 callbacks suppressed [ 412.129293][T20402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4027'. [ 412.169420][T20402] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4027'. [ 412.192500][T20402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4027'. [ 412.267458][T20402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4027'. [ 412.610412][T20416] netlink: 'syz.2.4031': attribute type 1 has an invalid length. [ 412.702112][T20423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4034'. [ 412.717339][T20416] 8021q: adding VLAN 0 to HW filter on device bond10 [ 412.748488][T20421] bond8: (slave veth0_to_bond): Releasing backup interface [ 412.774974][T20421] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 412.788275][T20426] bond10: entered promiscuous mode [ 412.793857][T20426] bond10: entered allmulticast mode [ 412.901216][T20401] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 413.005357][T20435] netlink: 'syz.4.4036': attribute type 12 has an invalid length. [ 413.064905][T20435] bond8: option primary_reselect: invalid value (255) [ 413.094647][T20435] bond8 (unregistering): Released all slaves [ 413.119419][T20442] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4038'. [ 413.265504][T20449] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 413.327856][T20455] netlink: 'syz.3.4041': attribute type 3 has an invalid length. [ 413.350523][T20455] netlink: 'syz.3.4041': attribute type 1 has an invalid length. [ 413.361441][T20455] netlink: 212 bytes leftover after parsing attributes in process `syz.3.4041'. [ 413.393836][T20455] NCSI netlink: No device for ifindex 813332851 [ 413.551592][T20464] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4043'. [ 413.691569][T20472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4046'. [ 414.097006][T20483] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4049'. [ 414.436144][T20492] xt_bpf: check failed: parse error [ 414.569813][T20496] syzkaller1: entered promiscuous mode [ 414.594152][T20496] syzkaller1: entered allmulticast mode [ 416.859601][T20583] bond0: (slave gre0): refused to change device type [ 417.571026][T20618] x_tables: duplicate underflow at hook 1 [ 417.578477][T20617] syzkaller1: entered promiscuous mode [ 417.601331][T20617] syzkaller1: entered allmulticast mode [ 417.907526][T20632] __nla_validate_parse: 9 callbacks suppressed [ 417.907547][T20632] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4092'. [ 418.010775][T20637] netlink: 'syz.1.4093': attribute type 1 has an invalid length. [ 418.038542][T20637] netlink: 'syz.1.4093': attribute type 3 has an invalid length. [ 418.076161][T20637] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4093'. [ 418.109347][T20642] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 418.110032][T20637] NCSI netlink: No device for ifindex 813332851 [ 418.132047][T20641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4094'. [ 418.180270][T20640] mac80211_hwsim hwsim28 wlan1: left promiscuous mode [ 418.184878][T20645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4095'. [ 418.246008][T20645] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 418.286320][T20645] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 418.311368][T20645] gretap0: entered promiscuous mode [ 418.325544][T20645] gretap0: entered allmulticast mode [ 418.633181][T20662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4100'. [ 419.250753][T20688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4106'. [ 419.287851][T20688] netlink: 'syz.3.4106': attribute type 5 has an invalid length. [ 419.318490][T20688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4106'. [ 419.368733][T20688] geneve4: entered promiscuous mode [ 419.387599][T20688] geneve4: entered allmulticast mode [ 419.409797][ T13] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 419.435684][ T13] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 419.493924][ T13] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 419.514832][ T13] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 419.706918][T20697] tipc: Enabled bearer , priority 0 [ 419.760207][T20704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4111'. [ 419.770136][T20701] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4110'. [ 419.792084][T20707] netlink: 'syz.1.4112': attribute type 15 has an invalid length. [ 419.800164][T20707] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4112'. [ 419.814363][T20697] tipc: Disabling bearer [ 420.216370][T20721] netlink: 'syz.1.4118': attribute type 1 has an invalid length. [ 420.293333][T20719] [ 420.295713][T20719] ====================================================== [ 420.302764][T20719] WARNING: possible circular locking dependency detected [ 420.309876][T20719] syzkaller #0 Not tainted [ 420.314367][T20719] ------------------------------------------------------ [ 420.321463][T20719] syz.4.4117/20719 is trying to acquire lock: [ 420.327540][T20719] ffffffff8f0abdc8 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x20e/0x5d0 [ 420.337376][T20719] [ 420.337376][T20719] but task is already holding lock: [ 420.344748][T20719] ffff8880237b2ae0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15a0 [ 420.354191][T20719] [ 420.354191][T20719] which lock already depends on the new lock. [ 420.354191][T20719] [ 420.364587][T20719] [ 420.364587][T20719] the existing dependency chain (in reverse order) is: [ 420.373598][T20719] [ 420.373598][T20719] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 420.381327][T20719] lock_sock_nested+0x41/0x100 [ 420.386739][T20719] inet_shutdown+0x6a/0x390 [ 420.391832][T20719] nbd_mark_nsock_dead+0x2cb/0x550 [ 420.397564][T20719] recv_work+0x1cef/0x1e10 [ 420.402488][T20719] process_scheduled_works+0xa8e/0x14e0 [ 420.408572][T20719] worker_thread+0xa47/0xfb0 [ 420.413684][T20719] kthread+0x389/0x470 [ 420.418280][T20719] ret_from_fork+0x514/0xb70 [ 420.423414][T20719] ret_from_fork_asm+0x1a/0x30 [ 420.428690][T20719] [ 420.428690][T20719] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 420.436328][T20719] __mutex_lock+0x19d/0x1590 [ 420.441504][T20719] nbd_queue_rq+0x373/0x1150 [ 420.446614][T20719] blk_mq_dispatch_rq_list+0x499/0x1990 [ 420.452777][T20719] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 420.459680][T20719] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 420.466179][T20719] blk_mq_run_hw_queue+0x348/0x4f0 [ 420.471809][T20719] blk_mq_dispatch_list+0xd11/0xe10 [ 420.477518][T20719] blk_mq_flush_plug_list+0x45f/0x540 [ 420.483400][T20719] __blk_flush_plug+0x3ed/0x4d0 [ 420.488879][T20719] __submit_bio+0x465/0x560 [ 420.493926][T20719] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 420.500090][T20719] block_read_full_folio+0x599/0x830 [ 420.505910][T20719] filemap_read_folio+0x12c/0x3a0 [ 420.511465][T20719] do_read_cache_folio+0x354/0x590 [ 420.517093][T20719] read_part_sector+0xb6/0x2b0 [ 420.522454][T20719] adfspart_check_ICS+0xb1/0x960 [ 420.527908][T20719] bdev_disk_changed+0x82b/0x1780 [ 420.533444][T20719] blkdev_get_whole+0x372/0x510 [ 420.538869][T20719] bdev_open+0x324/0xd70 [ 420.543627][T20719] blkdev_open+0x461/0x600 [ 420.548557][T20719] do_dentry_open+0x816/0x1380 [ 420.553854][T20719] vfs_open+0x3b/0x340 [ 420.558437][T20719] path_openat+0x2e3b/0x3890 [ 420.563633][T20719] do_file_open+0x23e/0x4a0 [ 420.568654][T20719] do_sys_openat2+0x113/0x200 [ 420.573867][T20719] __x64_sys_openat+0x138/0x170 [ 420.579235][T20719] do_syscall_64+0x174/0x580 [ 420.584344][T20719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.590751][T20719] [ 420.590751][T20719] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 420.597965][T20719] __mutex_lock+0x19d/0x1590 [ 420.603071][T20719] nbd_queue_rq+0xc1/0x1150 [ 420.608203][T20719] blk_mq_dispatch_rq_list+0x499/0x1990 [ 420.614352][T20719] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 420.621203][T20719] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 420.627699][T20719] blk_mq_run_hw_queue+0x348/0x4f0 [ 420.633325][T20719] blk_mq_dispatch_list+0xd11/0xe10 [ 420.639042][T20719] blk_mq_flush_plug_list+0x45f/0x540 [ 420.644928][T20719] __blk_flush_plug+0x3ed/0x4d0 [ 420.650384][T20719] __submit_bio+0x465/0x560 [ 420.655410][T20719] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 420.661561][T20719] block_read_full_folio+0x599/0x830 [ 420.667363][T20719] filemap_read_folio+0x12c/0x3a0 [ 420.672909][T20719] do_read_cache_folio+0x354/0x590 [ 420.678557][T20719] read_part_sector+0xb6/0x2b0 [ 420.683853][T20719] adfspart_check_ICS+0xb1/0x960 [ 420.689308][T20719] bdev_disk_changed+0x82b/0x1780 [ 420.694843][T20719] blkdev_get_whole+0x372/0x510 [ 420.700213][T20719] bdev_open+0x324/0xd70 [ 420.704968][T20719] blkdev_open+0x461/0x600 [ 420.709995][T20719] do_dentry_open+0x816/0x1380 [ 420.715388][T20719] vfs_open+0x3b/0x340 [ 420.719974][T20719] path_openat+0x2e3b/0x3890 [ 420.725079][T20719] do_file_open+0x23e/0x4a0 [ 420.730100][T20719] do_sys_openat2+0x113/0x200 [ 420.735293][T20719] __x64_sys_openat+0x138/0x170 [ 420.740673][T20719] do_syscall_64+0x174/0x580 [ 420.745793][T20719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.752293][T20719] [ 420.752293][T20719] -> #5 (set->srcu){.+.+}-{0:0}: [ 420.759411][T20719] __synchronize_srcu+0xc9/0x2f0 [ 420.764893][T20719] elevator_switch+0x1e8/0x7b0 [ 420.770176][T20719] elevator_change+0x2fa/0x480 [ 420.775457][T20719] elevator_set_default+0x375/0x440 [ 420.781176][T20719] blk_register_queue+0x3f3/0x4e0 [ 420.786749][T20719] __add_disk+0x6cb/0xe30 [ 420.791614][T20719] add_disk_fwnode+0xfb/0x4b0 [ 420.796830][T20719] nbd_dev_add+0x733/0xb60 [ 420.801765][T20719] nbd_init+0x15f/0x1e0 [ 420.806590][T20719] do_one_initcall+0x250/0x870 [ 420.811870][T20719] do_initcall_level+0x10a/0x1a0 [ 420.817437][T20719] do_initcalls+0x59/0xa0 [ 420.822280][T20719] kernel_init_freeable+0x29d/0x3e0 [ 420.827994][T20719] kernel_init+0x1d/0x1d0 [ 420.832840][T20719] ret_from_fork+0x514/0xb70 [ 420.837944][T20719] ret_from_fork_asm+0x1a/0x30 [ 420.843223][T20719] [ 420.843223][T20719] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 420.851035][T20719] __mutex_lock+0x19d/0x1590 [ 420.856147][T20719] elevator_change+0x1af/0x480 [ 420.861437][T20719] elevator_set_none+0xb5/0x140 [ 420.866801][T20719] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 420.873125][T20719] nbd_start_device+0x189/0xb30 [ 420.878494][T20719] nbd_genl_connect+0x1597/0x1c10 [ 420.884041][T20719] genl_family_rcv_msg_doit+0x233/0x340 [ 420.890239][T20719] genl_rcv_msg+0x614/0x7a0 [ 420.895269][T20719] netlink_rcv_skb+0x226/0x4a0 [ 420.900587][T20719] genl_rcv+0x28/0x40 [ 420.905080][T20719] netlink_unicast+0x7bb/0x940 [ 420.910357][T20719] netlink_sendmsg+0x813/0xb40 [ 420.915663][T20719] ____sys_sendmsg+0x9b9/0xa20 [ 420.921034][T20719] ___sys_sendmsg+0x2a5/0x360 [ 420.926239][T20719] __x64_sys_sendmsg+0x1bd/0x2a0 [ 420.931700][T20719] do_syscall_64+0x174/0x580 [ 420.936805][T20719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.943211][T20719] [ 420.943211][T20719] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 420.951812][T20719] blk_alloc_queue+0x544/0x690 [ 420.957094][T20719] __blk_mq_alloc_disk+0x194/0x390 [ 420.962724][T20719] nbd_dev_add+0x494/0xb60 [ 420.967762][T20719] nbd_init+0x15f/0x1e0 [ 420.972441][T20719] do_one_initcall+0x250/0x870 [ 420.977723][T20719] do_initcall_level+0x10a/0x1a0 [ 420.983170][T20719] do_initcalls+0x59/0xa0 [ 420.988029][T20719] kernel_init_freeable+0x29d/0x3e0 [ 420.993941][T20719] kernel_init+0x1d/0x1d0 [ 420.998792][T20719] ret_from_fork+0x514/0xb70 [ 421.003893][T20719] ret_from_fork_asm+0x1a/0x30 [ 421.009195][T20719] [ 421.009195][T20719] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 421.016396][T20719] fs_reclaim_acquire+0x71/0x100 [ 421.021853][T20719] __kmalloc_cache_noprof+0x40/0x660 [ 421.027654][T20719] cryptomgr_notify+0x85/0x920 [ 421.033085][T20719] notifier_call_chain+0x1a5/0x3d0 [ 421.038713][T20719] blocking_notifier_call_chain+0x6a/0x90 [ 421.044945][T20719] crypto_alg_mod_lookup+0x390/0x5d0 [ 421.050745][T20719] crypto_alloc_tfm_node+0x135/0x3e0 [ 421.056548][T20719] crypto_alloc_sync_skcipher+0x39/0xd0 [ 421.062754][T20719] rxkad_init+0x22/0xf0 [ 421.067496][T20719] rxrpc_init_security+0x72/0x120 [ 421.073132][T20719] af_rxrpc_init+0x13d/0x2e0 [ 421.078480][T20719] do_one_initcall+0x250/0x870 [ 421.083765][T20719] do_initcall_level+0x10a/0x1a0 [ 421.089226][T20719] do_initcalls+0x59/0xa0 [ 421.094063][T20719] kernel_init_freeable+0x29d/0x3e0 [ 421.099770][T20719] kernel_init+0x1d/0x1d0 [ 421.104615][T20719] ret_from_fork+0x514/0xb70 [ 421.109720][T20719] ret_from_fork_asm+0x1a/0x30 [ 421.115002][T20719] [ 421.115002][T20719] -> #1 ((crypto_chain).rwsem){++++}-{4:4}: [ 421.123076][T20719] down_read+0x47/0x2e0 [ 421.127752][T20719] blocking_notifier_call_chain+0x54/0x90 [ 421.133997][T20719] __crypto_register_alg+0x31f/0x3b0 [ 421.139804][T20719] crypto_register_alg+0x44a/0x820 [ 421.145436][T20719] do_one_initcall+0x250/0x870 [ 421.150722][T20719] do_initcall_level+0x10a/0x1a0 [ 421.156171][T20719] do_initcalls+0x59/0xa0 [ 421.161011][T20719] kernel_init_freeable+0x29d/0x3e0 [ 421.166739][T20719] kernel_init+0x1d/0x1d0 [ 421.171611][T20719] ret_from_fork+0x514/0xb70 [ 421.176724][T20719] ret_from_fork_asm+0x1a/0x30 [ 421.182005][T20719] [ 421.182005][T20719] -> #0 (crypto_alg_sem){++++}-{4:4}: [ 421.189554][T20719] __lock_acquire+0x1520/0x2cd0 [ 421.194924][T20719] lock_acquire+0x106/0x350 [ 421.199942][T20719] down_write+0x96/0x200 [ 421.204703][T20719] crypto_alg_mod_lookup+0x20e/0x5d0 [ 421.210685][T20719] crypto_alloc_tfm_node+0x135/0x3e0 [ 421.216489][T20719] tls_set_sw_offload+0xa2b/0x1770 [ 421.222149][T20719] tls_setsockopt+0xf1c/0x15a0 [ 421.227429][T20719] do_sock_setsockopt+0x17c/0x1b0 [ 421.232970][T20719] __x64_sys_setsockopt+0x13d/0x1b0 [ 421.238688][T20719] do_syscall_64+0x174/0x580 [ 421.243793][T20719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.250203][T20719] [ 421.250203][T20719] other info that might help us debug this: [ 421.250203][T20719] [ 421.260422][T20719] Chain exists of: [ 421.260422][T20719] crypto_alg_sem --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 421.260422][T20719] [ 421.273569][T20719] Possible unsafe locking scenario: [ 421.273569][T20719] [ 421.281031][T20719] CPU0 CPU1 [ 421.286476][T20719] ---- ---- [ 421.291831][T20719] lock(sk_lock-AF_INET6); [ 421.296332][T20719] lock(&nsock->tx_lock); [ 421.303292][T20719] lock(sk_lock-AF_INET6); [ 421.310310][T20719] lock(crypto_alg_sem); [ 421.314637][T20719] [ 421.314637][T20719] *** DEADLOCK *** [ 421.314637][T20719] [ 421.322769][T20719] 1 lock held by syz.4.4117/20719: [ 421.327869][T20719] #0: ffff8880237b2ae0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15a0 [ 421.337706][T20719] [ 421.337706][T20719] stack backtrace: [ 421.343589][T20719] CPU: 0 UID: 0 PID: 20719 Comm: syz.4.4117 Not tainted syzkaller #0 PREEMPT(full) [ 421.343607][T20719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 421.343617][T20719] Call Trace: [ 421.343625][T20719] [ 421.343633][T20719] dump_stack_lvl+0xe8/0x150 [ 421.343653][T20719] print_circular_bug+0x2e1/0x300 [ 421.343672][T20719] check_noncircular+0x12e/0x150 [ 421.343690][T20719] __lock_acquire+0x1520/0x2cd0 [ 421.343711][T20719] ? crypto_alg_mod_lookup+0x20e/0x5d0 [ 421.343727][T20719] lock_acquire+0x106/0x350 [ 421.343739][T20719] ? crypto_alg_mod_lookup+0x20e/0x5d0 [ 421.343760][T20719] down_write+0x96/0x200 [ 421.343775][T20719] ? crypto_alg_mod_lookup+0x20e/0x5d0 [ 421.343791][T20719] ? __pfx_down_write+0x10/0x10 [ 421.343804][T20719] ? __init_swait_queue_head+0xa8/0x150 [ 421.343823][T20719] ? crypto_larval_alloc+0x1bf/0x290 [ 421.343838][T20719] crypto_alg_mod_lookup+0x20e/0x5d0 [ 421.343855][T20719] crypto_alloc_tfm_node+0x135/0x3e0 [ 421.343875][T20719] tls_set_sw_offload+0xa2b/0x1770 [ 421.343896][T20719] tls_setsockopt+0xf1c/0x15a0 [ 421.343917][T20719] ? __pfx_tls_setsockopt+0x10/0x10 [ 421.343938][T20719] ? __fget_files+0x2a/0x420 [ 421.343954][T20719] ? aa_sock_opt_perm+0xff/0x1a0 [ 421.344069][T20719] ? sock_common_setsockopt+0x36/0xc0 [ 421.344086][T20719] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 421.344101][T20719] do_sock_setsockopt+0x17c/0x1b0 [ 421.344128][T20719] __x64_sys_setsockopt+0x13d/0x1b0 [ 421.344147][T20719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.344161][T20719] do_syscall_64+0x174/0x580 [ 421.344173][T20719] ? trace_irq_disable+0x3b/0x140 [ 421.344192][T20719] ? clear_bhb_loop+0x40/0x90 [ 421.344207][T20719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.344220][T20719] RIP: 0033:0x7f54f119ce59 [ 421.344234][T20719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.344246][T20719] RSP: 002b:00007f54f1fa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 421.344260][T20719] RAX: ffffffffffffffda RBX: 00007f54f1415fa0 RCX: 00007f54f119ce59 [ 421.344270][T20719] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 421.344278][T20719] RBP: 00007f54f1232d6f R08: 0000000000000038 R09: 0000000000000000 [ 421.344287][T20719] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.344296][T20719] R13: 00007f54f1416038 R14: 00007f54f1415fa0 R15: 00007ffce9618f68 [ 421.344312][T20719] [ 421.600582][T20732] netlink: 'syz.3.4120': attribute type 6 has an invalid length. [ 421.614859][T20732] netlink: 'syz.3.4120': attribute type 5 has an invalid length. [ 421.625823][T20739] netlink: 'syz.2.4121': attribute type 4 has an invalid length.