last executing test programs: 3.675798691s ago: executing program 4 (id=2012): unshare(0x20000400) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pread64(r0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x11, 0x4, 0x4, 0xfffffffe}, 0x48) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000000701080000000000000000050000020900010073797a000000315ec61c3ee9283bb7217fb555510c22eed5624ae85817ca0e6d6f1c30d3cdc97acd68ff2bfbbb4d1c885b4822263086331e30545b7d9588b57883f7c564fed7fba3946ee5974c20c0d0603c3010769f28ab6d2dbec0ad44a3fd8385180f85fd69a96e5edd72ce7c88468601438ab7b163c6b2df2253c9a6c6126d191856c73bd98200000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080) 3.547437789s ago: executing program 4 (id=2014): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0x8001, 0x4}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) socket$key(0xf, 0x3, 0x2) socket$phonet(0x23, 0x2, 0x1) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000300)={0x401, 0x2}, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r7 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) close(0x4) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r8, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4c000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x64, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_USERDATA={0x21, 0x6, 0x1, 0x0, "64dbc26356c590693d648b8f2cbc45ebcd793ded9fe10e7101b22aec0d"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x4000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) recvmmsg(r0, &(0x7f0000009e00)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)=""/51, 0x33}], 0x1}, 0x8}], 0x1, 0x20, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 3.347085234s ago: executing program 4 (id=2018): socket$inet(0x2, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x128}, 0x44) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x128}, 0x44) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0xc14) r5 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) write(r6, &(0x7f0000000140)="41000200010001", 0x7) (async) write(r6, &(0x7f0000000140)="41000200010001", 0x7) close(r6) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) write$bt_hci(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="e6212006c900c0e58b2e97086cf80200"], 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r5) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x20000810) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x22, 0x0, 0xffffffffffffff62, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r9) (async) close(r9) 3.098419416s ago: executing program 4 (id=2021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x710, 0x0, 0x5, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [{{0x254, 0x1, {{0x2}, 0xcf, 0x4, 0x18, 0x6, 0x12, 'syz0\x00', "3b34f3be2e4c97016ae316831c00c8a1cfe0866ba59903932290336723c9f0fd", "3547dcf866cd29402ad6b45418fce9b94f00079d7ae2cf54d45b3ac3db97dc74", [{0x80, 0x0, {0x6, 0x7}}, {0xe, 0x3, {0x0, 0xf653}}, {0x7fff, 0x4, {0x2, 0x3}}, {0x9, 0x9, {0x1, 0x7}}, {0x5, 0x2, {0x1, 0x6}}, {0x400, 0x8, {0x2, 0xfffffffc}}, {0x8, 0x9, {0x3, 0xfffffff8}}, {0x100, 0x3, {0x0, 0x2}}, {0x2, 0x8, {0x1, 0x4}}, {0x4, 0xe, {0x1}}, {0x401, 0x1000, {0x1, 0x6cb}}, {0x8, 0x101, {0x2, 0x40}}, {0x7f, 0x3, {0x3, 0x8000}}, {0x3, 0xa000, {0x3, 0x1}}, {0x6, 0x8a, {0x1, 0x8}}, {0x8000, 0x3, {0x2, 0x4}}, {0x9, 0x40, {0x2, 0x68e}}, {0x3000, 0x9, {0x1, 0x9}}, {0x9, 0x7fff, {0x2, 0x671}}, {0x1, 0x2, {0x1, 0x9}}, {0x0, 0x8000, {0x3, 0x1ff}}, {0x7, 0x9, {0x2, 0x1}}, {0x1, 0x8, {0x2, 0x6}}, {0xf7, 0x8, {0x1, 0x5}}, {0xb, 0xf, {0x1, 0xec}}, {0x1, 0x4, {0x1, 0x101}}, {0x3, 0x8000, {0x0, 0x7}}, {0x519, 0x1, {0x1, 0xee08}}, {0xff, 0x0, {0x1, 0x400}}, {0x0, 0xfffd, {0x1, 0xfffffffb}}, {0x2, 0x6, {0x1, 0x8}}, {0x2f, 0x2, {0x1, 0x9}}, {0x8, 0x7, {0x3, 0x7}}, {0x8, 0x6, {0x1, 0x43e}}, {0x8, 0x40, {0x3, 0x9}}, {0x1, 0x4d, {0x1ab9a90ffdec069}}, {0x101, 0x8, {0x0, 0xe9a}}, {0x6, 0xfffe, {0x3, 0x90eb}}, {0xbe, 0x5, {0x3, 0x6}}, {0x2, 0x6, {0x3, 0x400}}]}}}, {{0x254, 0x1, {{0x3, 0x82ad}, 0x1, 0x2, 0x6, 0x5, 0x27, 'syz1\x00', "820121ae2e4c2d6c80feacb499be7f3b4c29bc3c449bd1e3a5faa0b83b6092e0", "7a190b80b45046d14d6d4a22d0953d350d7b44c5d3d22d5dd415d117f770985d", [{0x2, 0xb, {0x1, 0x6}}, {0x6b, 0x3, {0x1}}, {0x6, 0x3, {0x2, 0x1}}, {0x6, 0xe000, {0x3, 0xfff}}, {0x7ff, 0x6, {0x0, 0x10}}, {0x8001, 0x5, {0x2, 0x5}}, {0xd, 0x5, {0x1}}, {0x1, 0x6, {0x1, 0xffff8000}}, {0x8, 0x5255, {0x1, 0x6}}, {0x4, 0x86, {0x1, 0x6}}, {0x2, 0x11e}, {0x2, 0xb4, {0x0, 0x80000001}}, {0x8001, 0xfce, {0x3, 0x1}}, {0xc4f, 0x8, {0x2, 0xa}}, {0x9, 0x6, {0x0, 0xd9a}}, {0x1000, 0x80, {0x1, 0xf}}, {0x1, 0xd, {0x2, 0x9}}, {0xbfb, 0xfffe, {0x3, 0x2}}, {0xfff9, 0x511c, {0x3, 0xfffffba6}}, {0x9, 0x0, {0x3, 0x4}}, {0x6, 0x5, {0x2, 0x10000}}, {0x40, 0x4000, {0x0, 0x4b}}, {0x1, 0x5, {0x2}}, {0x10, 0x2, {0x1, 0x2}}, {0x6, 0x0, {0x2, 0x955b}}, {0xb, 0x8001, {0x2, 0x3ff}}, {0x5, 0xd, {0x2, 0xcb53}}, {0x81, 0x8, {0x1, 0x81}}, {0x101, 0x0, {0x2, 0xfffffff0}}, {0x3, 0x1, {0x0, 0x2}}, {0x1, 0x8, {0x3, 0x2}}, {0xd, 0x3, {0x2, 0xa74}}, {0x7, 0x4, {0x0, 0x7}}, {0xa, 0x0, {0x0, 0x81}}, {0x200, 0x1ff, {0x1, 0x2c}}, {0x3, 0x1000, {0x1, 0x4}}, {0x2, 0x88, {0x0, 0x40}}, {0x6, 0x6, {0x0, 0x97fb}}, {0xa, 0x800, {0x0, 0x7}}, {0x4, 0xd503, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x5, 0xb, 0x2, 0x7, 0x17, 'syz1\x00', "fa9d723e58f7ec1b0e1b31e40dbdb269aaaf7a45c4c3f411d867fd7ad3d56d8a", "5aa4438876a2ea73354d7ee4564dff33e7dc272d479f1a24a8a56fe583b66ebb", [{0x9, 0x3827, {0x0, 0xffff419d}}, {0x1, 0x5, {0x1, 0x3}}, {0x200, 0x5, {0x2, 0x15}}, {0xf667, 0x4bc, {0x1, 0x8c}}, {0x40f6, 0x1, {0x2, 0xfffffffd}}, {0xf, 0xa74, {0x2, 0x40}}, {0x2, 0x4406, {0x4, 0x7}}, {0xf2bc, 0x6, {0x0, 0x98b7}}, {0x7, 0x5, {0x2, 0x9}}, {0x7, 0x35, {0x1, 0x7}}, {0x800, 0x8, {0x2, 0x10}}, {0x6, 0x8d}, {0x6, 0xdf, {0x3, 0xfff}}, {0x8, 0x7ff, {0x3, 0xc1000}}, {0x4, 0x1, {0x2, 0x5}}, {0x8, 0x0, {0x2, 0x3}}, {0x0, 0xfff8, {0x1, 0x4f4f}}, {0x8, 0x7, {0x0, 0x1}}, {0x9, 0x7, {0x3, 0x4}}, {0xd8ca, 0x6, {0x0, 0x28e3}}, {0xff, 0x8, {0x0, 0x6}}, {0x0, 0x6, {0x2, 0x2}}, {0x5, 0x9, {0x0, 0x7fff}}, {0x101, 0x401, {0x0, 0x3}}, {0x6, 0x9, {0x2, 0x6}}, {0x37, 0xb6, {0x3, 0x5}}, {0x2, 0x8001, {0x0, 0x27c0d892}}, {0x0, 0x3ff, {0x2}}, {0xf55b, 0xc97, {0x0, 0x1}}, {0x1ff, 0x7ff, {0x2, 0x7}}, {0x80, 0xffff, {0x3, 0x9c5e}}, {0x8, 0x8, {0x0, 0x570}}, {0x3ff, 0x5, {0x1, 0xed}}, {0x7, 0x3ff, {0x1, 0x3}}, {0x0, 0x7, {0x3, 0x8000}}, {0x7, 0x96b6, {0x3, 0x8}}, {0x2, 0x9, {0x1, 0x2d0}}, {0x3, 0xfff7, {0x1, 0x401}}, {0x1, 0x8, {0x1, 0x6}}, {0x4, 0x8, {0x3, 0x2}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x4084}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800900010068617368000000002c00028008000640e80000ff08000140000000030800044020000003080003400000000408000240000000120900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 2.857732699s ago: executing program 4 (id=2028): r0 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000140)=""/183, 0xb7}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_smc(0x2b, 0x1, 0x0) 2.506482067s ago: executing program 4 (id=2032): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') socket$xdp(0x2c, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="18030000f000000000000000ff000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b5020000140000008500000083000000bc0900000000000055090100240000009500000000002fa86e4e000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000200)='GPL\x00', 0x6, 0x1006, &(0x7f0000001b00)=""/4102, 0x40f00, 0x9, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) unshare(0x6a040000) r3 = socket$inet6(0xa, 0x80002, 0x0) unshare(0x40000480) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf2502000000080001", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4008054) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000240)={'mangle\x00', 0x0, [0x7, 0x0, 0xc, 0xffff7fff, 0xfffffffd]}, &(0x7f00000002c0)=0x54) 1.684617268s ago: executing program 0 (id=2048): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x80000000}]}}}]}, 0x3c}}, 0x4040) 1.627850834s ago: executing program 3 (id=2049): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="40002f800c00020000000000000000000800010000000000280003801c0003800600010000000000080002000200000006000300a7aa0000080001"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 1.49236724s ago: executing program 3 (id=2052): socket$xdp(0x2c, 0x3, 0x0) socket(0x27, 0x5, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x8801) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4) 1.41761275s ago: executing program 0 (id=2053): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20040400) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xd35, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0x3a, 0x0, 0x1, 0x7}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0xffffffffffffffff}, 0x0, 0x0) 1.218016785s ago: executing program 3 (id=2057): r0 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 1.107818158s ago: executing program 3 (id=2059): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x3f8613bd}, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="890b0000000000000010704d4f00010400000000010700000000000000531cafcad8ed81d4fa4086df029195a30ce5644d667698a4ee85bfdd1f8d05020010040103010a00000000000000000000c91000001e0000edff00000000000000000176bb1159bb4829321dafb808f9bf1042933a99cf2238891295f973fb82810577985c30099c"], 0x60) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x41) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', r3, 0x0, 0x31, 0x93, 0x0, 0xd, @ipv4={'\x00', '\xff\xff', @loopback}, @private2, 0x20, 0x20, 0xb91}}) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x2, @remote, 'pimreg0\x00'}}) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 900.215318ms ago: executing program 2 (id=2062): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r0, &(0x7f0000000a00)={0xa, 0x4e20, 0x4, @loopback, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xeffffff1, @empty, 0x2}, 0x1c) 897.142725ms ago: executing program 3 (id=2063): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, &(0x7f0000000180)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) pipe(&(0x7f0000000380)) socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0136030000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=r5], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x20000044) 870.438049ms ago: executing program 1 (id=2064): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmmsg$inet(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="e137865f", 0x4}], 0x1, &(0x7f0000000f00)=ANY=[@ANYBLOB="b6a5"], 0x58}}], 0x1, 0x4002090) 765.632572ms ago: executing program 2 (id=2065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xd) 751.104512ms ago: executing program 1 (id=2066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 671.975666ms ago: executing program 3 (id=2067): sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="200025bd7000ffdbff250d0000007de667583ce32064b7f3667f6c3830a532eccdcb9045f688b8f7110d94811169aa8651e5693bb6c1e00036d66e1491a99164b66a2a19ad0e821f49d42fc840f9744b2e2b8337dd0915f494e93643a36490f962a817f47778569f0474685752269e3a4bba5939e2c88c60ef98dbe0dd6f3cc687636a2dca5b909b4dbb8e89a99074939f2c5b7b265922c9d3416c838686c934224d8f4c2433bf3f40e5aced5bfae49e36bbb29ea60a983c87539bbe796bbd97682bea80969ceedf3a30a11100edaa5ccec01e8ef312ac2508a65f1c62169f9a8453"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0c0100001600010000000000010000000a01010000000000000000000000000000000000000000000000ffff000000004e240000000000000000802000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1414aa0000000033000000ffffffff000000000000000000000000200000000000000000000000000000000000000000000000050000000000000068482c4500000000f1ffffffffffffff03000000000000000000000000000000000000000000004000000000000000000100000000004000feffffffffffffff000000000000000096070000000800000000000000000000030000000000000000000000b1a001000c001c00", @ANYRES32=0x0, @ANYBLOB="0100000008"], 0x10c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000402300090122bd7008f9ffffff020000007e092743bd4e923913272bca42d457e0df0319d30633f4f4ac9b594c3e688407aa08f1342db79ff64137fdc417aa3c6b2b93696b1fe8a92cd444767944b9e6f4299840de09cf78"], 0x14}, 0x1, 0x0, 0x0, 0x1004c957}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000001c0)=0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x40, 0x10, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000006, 0x4132, 0xffffffffffffffff, 0xab7ee000) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x7, 0x12, r1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0xffffffffffffffff, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x16, 0x60, 0x6, 0xfffffffd}]}) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/175, 0xaf}, {&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f0000000140)=""/59, 0x3b}], 0x3, &(0x7f0000000380)=""/12, 0xc}, 0x100) write$ppp(r2, &(0x7f0000000000)='\x00\x00', 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="a400000001020101000f000f00000000000000000f000600746674702d3230303030000013000b006361686c666f7277617264696e670000080008400000000305000600000000005c00018004000280050001"], 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x4000084) syz_emit_ethernet(0x62, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2686dd60000200002c0600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b01000009078000008045c7f080a000000810000000302040000000000000000"], 0x0) 581.890001ms ago: executing program 1 (id=2068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)={[{0x2b, 'perf_event'}]}, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x5, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 539.147938ms ago: executing program 2 (id=2069): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r2, 0xe2dd266ab2404e65, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000b40)={0x4c, r4, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xde567ea0696331e4}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) 517.167324ms ago: executing program 0 (id=2070): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6dafe0900"}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@rights={{0x18, 0x1, 0x1, [r2, r1]}}], 0x18, 0x4000025}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c40b5000000400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x34, r10, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x34}}, 0x4000040) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003200), r12) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000003240)={'wpan0\x00', 0x0}) close(r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r12, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f0000003280)={0x5c, r13, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xea}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "47add1c4a8a48825e8b670a03812ca2c"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x6c, r7, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0x200}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004801) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 369.897287ms ago: executing program 1 (id=2071): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="a18302000000000000000500eb9608000300"], 0x1c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) 369.672037ms ago: executing program 2 (id=2072): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="340000002e0003050000100000000000200000f8ffffffffffffff0008000000", @ANYRESDEC=r0, @ANYRES8=r0], 0x34}], 0x1}, 0x20000480) 369.520947ms ago: executing program 0 (id=2073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000"], 0x68}}, 0x0) 260.511225ms ago: executing program 0 (id=2074): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f00000002c0)=@ethtool_link_settings={0x4c, 0xb, 0x17, 0x1b, 0xfe, 0xb, 0x4, 0x8, 0xd, 0x4, [0xc, 0x10083, 0x1000000, 0x2, 0x2eea0afb, 0xf, 0x4000004d, 0xb9ad]}}) 251.743287ms ago: executing program 2 (id=2075): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}], 0x1, 0x20004840) shutdown(r0, 0x0) sendto$inet(r0, &(0x7f0000000080)="f54e", 0x2, 0x480, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000002c0)=""/256, 0xf8, 0x10100, 0x0, 0xfc5d) 231.193185ms ago: executing program 1 (id=2076): r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 102.006258ms ago: executing program 2 (id=2077): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800", @ANYBLOB="9d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) clock_gettime(0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r4, &(0x7f0000002140)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x81, @local, 0x7}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000000c0)="9c5054a5af2f81d706d451f728eeeb", 0xf}, {&(0x7f0000000240)="a356f58980a4d1bc340b4e2fde9103daf31d759e26dc8c7daf932a29deb282c831f5ac7c221bd877f910efe1305661a004d56dcdae60bf8c5afcdf94e242116d01754e2c8bf813abff4130fbf20f90d34ec6312e92c1f0702bdc590d16a0e93b9a7cb6f4a57018173bdc851f1a55fca8ff825e03bdabad1c447a88abbcfafe7b8c76a6e71a03f4abbe22454a88599438b9c3740cdbd09e74715e6a6b640fd621b67df416dcf324fe233f3e043b", 0xad}, {&(0x7f0000000340)="c046641ca8108ae11f406a3f6dd523a4b312f92777b24ad78aab6c826de6", 0x1e}, {&(0x7f00000006c0)="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", 0x1000}], 0x4}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x800, @mcast2, 0x3}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000000480)="184be7dd4dd3c22fe23fa762c51b082ba5eb6264d83c7d095b25749124973489be6d38ba1b2a3ee79dae2f7d05e98974ec32f0951ed5fabce20d01f6c09e3b67e273bd1479eefa205c2bf612283ba7ac74a0c174c2ad25fb6627ef035a71c840f30dbe9b35426be8f8a06705c3f67b037b9ae965b77956c919ec011207267b5e87a5d2636a52125f31a85b5e5f877513", 0x90}, {&(0x7f0000000540)="c5bdbc41ea6d216af30c86900a947500ace21f154c5f02df17f28fea934c97e2638514a22c5f9e74b68b123429f5c5d885e23cd3586be026c82a12772f5559616080b302b6d79cf8b6f2dad8122e08101749a0fb82c3290ba5a7f46b", 0x5c}, {&(0x7f00000016c0)="c4b2b2f6a484059d81339951def3fb9d16f1b253e82c801953ac169d742ab8fc08c7e2e55379ea0b46a3c2f242acfa541aab7c4fe289e9965e4940aff91af6451c6b6ad0a711fa8cee59", 0x4a}, {&(0x7f00000005c0)="c277e799335444", 0x7}, {&(0x7f0000001740)="25fc1088813ded3a5ef4eeb8e5eac5190fa30844bec5bb9ce93c7b62dd9fd51aca5210699faf755d02433f8212123559f27d2e8218042a683b603f9065f3374a62b3859dbc32a686757565d455989d3da1f43219d507fc52ca97750a4c8bef09bc2277c3d33e44d0d1b59936285814b42cff72f534ddba51d3b0abc494aa90026f688e40a7a1744d5c9bc90b66d7066aefe19c07ce8ea633faa060454aaa93b9028e833a55d0b6ed2e22572cf6d08f3ffccac7cff601f71689732ce0c195343e", 0xc0}, {&(0x7f0000001800)="2ba52e68f13cf73c38fe3179aaf496cddd288200c601a1c2b2fd4ad023200e2dd63d10709141e9aab7f730717b5c5ad54c552f1d585fb60be701f26227daf37259c2c625adc95a7c460b2be43af55b12854c125539213c42c27b15cc04c07169244ce96ba7ff4d15b7dfe7fbfb8e5c77a79e286de396bd5e69c1fab0e4896f83170c8df15c58d07f158b21d6444c597324d923141a438aee53ce76f4c833b41c6ec1827c9c", 0xa5}], 0x6, &(0x7f0000001f00)=ANY=[@ANYBLOB="1400000000000000290000ff2207310d38003400"/30], 0x18}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001980)="31528e6cebdca11051b51b31c269713759553a", 0x13}, {&(0x7f00000019c0)="1b5dc47c03816fb5bb06281920bf061b1dc509aec54e40237de1468e90c05e1c873517b5", 0x24}, {&(0x7f0000001a00)="0acb5f642beddb047742422f921e13bd56b9894e8ff9ecf84183eef4d2b2121fb85fcf232dcac2d9780b569c59d0bdc0e05558d75927622176b4b3216d1bd60008ae4f3f79a159324ab279f39a860201cab70650681c1169018b85f800a90d8cc438b5c1c3c3bb0ccf2e37acfd8ea171b0f977ca5142e91e2716f5ffd74b64345b66f9e4bfc2abc9659968d0915ad79d26a0b81fb30001272e10", 0x9a}, {&(0x7f0000001ac0)="d2e28d1a1fce04d8f58c25c3b48ce2fb415ce2f561c65e730e3243d33d9490046c3cf8da337d1e65d98ea136c20661bd69092a1b9802703495cdeffeee", 0x3d}, {&(0x7f0000001b00)="334ab4db6d9b9f94b67ac9cd1753a82730881f2ce8628c9e8e85945cb4ba03aba3f868162b7933102505cbaba8773fd4d79cba6e48103035e087112dcf57f75c919109f1", 0x44}, {&(0x7f0000001b80)="213fa5b18ceb14f0643b4152c759d31c7fc994cd405012c08c3b6dc58e6efc8cd1fa88a86b20486d24fb9f1155d8643c6d9cf986291a42b9f0654dd1f7ccaf1dd9db49f22a96c0c453944e3832f2a0a7feba00f40a01a7e1a0945b7f9a33fa3eccf2049b1b71e61820e6793a716cd78a25a86d62c1950ae42deb2f24f355be107f6a0be8282173facf30453c50e1447cce3271d230ef98c7d75653e12e07b60080af50f5bee909985176d66145c39f241eb2ee46801ebd01f01ae0b1c84406e606f2f437b0f89fbaf4b4b661c0685ff7f864358f55efee97f480", 0xda}, {&(0x7f0000001c80)="50fc7cd0287dd963d2a983375fbf662998a716474e7e28fbf39b8e3895548546817a62bea2cb63b33e210c128d54fa7b288dc9155aa8c9cdeab091f4e5abf60dcd82ed3d3fd0afeb065ac186db7b914270b48a1c9259a42fa038fe911b96a9ddb53d902a49a170c86b4ad5d70322a48b811a3e17c6d48a75198b937665b306980215ce71c19479ff619e01b25e543bd4f20a54662f147b50ce935334f7e781e8c1ab512c7fdbb7153b88a56a2fecfadcf9a5262d90d40d74ae1973a3dcbd097405a3083f893f4100679b965578c804dba6d2084269cd780bb4e9e1e4b5aa32c73fa75ee7c97b53e0e9ee4f5cc7b707518164bae608192247", 0xf8}, {&(0x7f0000001d80)="8dd742d1808f6d37ed8489f943e2d2e9d85062990ebfaf708b036c5116f763adf073589a99a6b70cefd6f0b5ea025459f841bf701d49f2aff88c92c95289a9653f5d422f6816c82180902476e12092d7c17d04d8de6f5a207bc2d32c64a60905647e4492bcbba4c4af225d054da6df0cd62dd504f2ede57371b15bce402062a667690d14d8ff5c3b7ebc7861768909f0cfb8b87b606b1f9598058fd5ca12222b3c1f23e3aad17fdc4eeed7809b993bb84ed3083d594dfe19ed260504d258f4780ab801e4c68b177f017783ffa435736d07f215f0fc14ada1c3407d4a42", 0xdd}], 0x8, &(0x7f0000002200)=[@dstopts={{0x30, 0x29, 0x37, {0x16, 0x3, '\x00', [@enc_lim, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0x9}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x84, 0x6, 0x2, 0x6, 0x0, [@local, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x73}}, @dontfrag={{0x14, 0x29, 0x3e, 0x10001}}, @dontfrag={{0x14, 0x29, 0x3e, 0xd257}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}, @tclass={{0x14}}, @dstopts_2292={{0xc0, 0x29, 0x4, {0x16, 0x14, '\x00', [@generic={0x3b, 0x87, "58642afd28dbec2a49f99b36ff0d2a406423e56d2b63d1ec132e4b58f8e93518a12ab21c866d4fa4153c150e0c622c7534bb64883c65c971962686464b261afdd57aafc648e2595cd468b57adb24d3a806b8b066545e5b9c6ea8930621d497cdd3e47ce5f296de28628e96ce701d2dcb7c2d5c8c65e0c92e46d502f81830c8e9d3bbf8adf311e2"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x44fe}, @ra={0x5, 0x2, 0x6f}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0xc}, @jumbo={0xc2, 0x4, 0xfff}]}}}], 0x1d8}}], 0x3, 0x4008040) 101.63894ms ago: executing program 0 (id=2078): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)='%^,\x00', 0x0, &(0x7f0000000040)={@_ha_fsid={[0x2, 0x7]}, {0x0, 0xffff, 0x6, 0x5}}, 0x6, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x6}, {[0x20, 0x3, 0xfffffffa, 0xfffffffe]}, 0x9, 0x58, &(0x7f0000000100)=""/88}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'veth1_virt_wifi\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={'ip6gretap0\x00', {0x2, 0x4e24, @remote}}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f5, 0x0, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4001}, 0x40008c4) ioctl$int_in(r2, 0x5452, &(0x7f0000000480)=0x9) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000004c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) bind$alg(r0, &(0x7f0000000500)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) pselect6(0x40, &(0x7f0000000600)={0x1, 0x9, 0x3ff, 0x8, 0x9, 0x537, 0x2, 0x7ff}, &(0x7f0000000640)={0x81, 0x80000001, 0x2, 0x5d1, 0x6, 0x2, 0x5, 0x3}, &(0x7f0000000680)={0x7, 0xf875, 0xfffffffffffffffe, 0xfffffffffffffb63, 0xc6, 0x1, 0x6, 0xca}, &(0x7f00000006c0), &(0x7f0000000740)={&(0x7f0000000700), 0x8}) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f0000000800)={r4, r5+10000000}, &(0x7f0000000840)={[0x7]}, 0x8) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4014) r7 = syz_genetlink_get_family_id$smc(0x0, r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x8c, r7, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) socket$igmp(0x2, 0x3, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) r10 = accept(r9, &(0x7f0000000b80)=@qipcrtr, &(0x7f0000000c00)=0x80) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r10, 0x800448d3, &(0x7f0000000c40)={@any, 0x8, 0x100, 0x6, 0xb, 0x7141, "96be92860423ab06b14468c350d61799729e57f735a5c0a70a474130d3a3b1ec47c0726f610e25a5f97ac5e9a1a2492381e8d4c7b08729022f8104fb01a308c16629b7f01489d1d0e4f66069a325a824511dc0c1c17c49a5220023d50be0117ba65be592695a36c9241810f8899b09c7bc47097079e900cff1969a1f77e0f432"}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r11, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x58, r12, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x58}}, 0x20000080) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000ec0)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000f00)=r14) 0s ago: executing program 1 (id=2079): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, &(0x7f0000000180), &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) sendmsg$xdp(r3, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): .751735][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.761369][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.769519][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.781977][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.794441][ T171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.818446][ T171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.850282][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.874156][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.901836][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.942084][ T171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.967264][ T171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.968798][ T51] Bluetooth: hci0: command tx timeout [ 77.020413][ T5825] veth0_macvtap: entered promiscuous mode [ 77.043143][ T51] Bluetooth: hci1: command tx timeout [ 77.043448][ T5840] Bluetooth: hci3: command tx timeout [ 77.048655][ T51] Bluetooth: hci2: command tx timeout [ 77.054752][ T5837] Bluetooth: hci4: command tx timeout [ 77.068611][ T171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.088349][ T171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.100459][ T5944] block nbd2: not configured, cannot reconfigure [ 77.127399][ T5825] veth1_macvtap: entered promiscuous mode [ 77.152498][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.167652][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.184731][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.261743][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.271602][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.295504][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.318620][ T66] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.437355][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.455922][ T5957] : entered promiscuous mode [ 77.486494][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.496811][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.520423][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.532193][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.633108][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.641060][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.758817][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.783578][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.900090][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.922156][ T5971] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 77.957103][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.308196][ T5988] x_tables: duplicate underflow at hook 3 [ 78.579114][ T6008] Bluetooth: MGMT ver 1.23 [ 78.659439][ T6008] Zero length message leads to an empty skb [ 78.917608][ T6020] Bluetooth: MGMT ver 1.23 [ 79.053985][ T51] Bluetooth: hci0: command tx timeout [ 79.123626][ T5831] Bluetooth: hci3: command tx timeout [ 79.126649][ T5840] Bluetooth: hci4: command tx timeout [ 79.130156][ T5831] Bluetooth: hci1: command tx timeout [ 79.141874][ T51] Bluetooth: hci2: command tx timeout [ 79.906794][ T6047] syzkaller1: entered promiscuous mode [ 79.955738][ T6047] syzkaller1: entered allmulticast mode [ 80.521048][ T6073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.36'. [ 80.585049][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 80.657503][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 80.832675][ T6096] tipc: Started in network mode [ 80.866894][ T6096] tipc: Node identity ac14140f, cluster identity 4711 [ 80.891679][ T6096] tipc: New replicast peer: 255.255.255.255 [ 80.935796][ T6096] tipc: Enabled bearer , priority 10 [ 81.034559][ T6100] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 81.098963][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 81.288048][ T6119] syz.4.45 uses obsolete (PF_INET,SOCK_PACKET) [ 81.306941][ T6124] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 81.318885][ T6124] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 81.338532][ T6121] sctp: [Deprecated]: syz.2.49 (pid 6121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 81.338532][ T6121] Use struct sctp_sack_info instead [ 81.414741][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.50'. [ 81.421559][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.50'. [ 81.585151][ T6135] netlink: 'syz.0.52': attribute type 5 has an invalid length. [ 81.805899][ T6142] netlink: 121112 bytes leftover after parsing attributes in process `syz.0.54'. [ 81.842114][ T6145] netlink: 'syz.3.53': attribute type 10 has an invalid length. [ 81.915528][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.978920][ T6145] bridge_slave_1: left allmulticast mode [ 82.053549][ T6145] bridge_slave_1: left promiscuous mode [ 82.081729][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.224186][ T6158] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.268794][ T6145] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 82.389818][ T6150] netlink: 'syz.4.57': attribute type 4 has an invalid length. [ 82.424130][ T6148] netlink: 'syz.1.56': attribute type 1 has an invalid length. [ 82.435986][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 82.451202][ T5833] tipc: Node number set to 2886997007 [ 82.469279][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 82.607657][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.60'. [ 82.718367][ T6172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.815223][ T6181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.858803][ T29] audit: type=1107 audit(1774535969.861:2): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 82.954187][ T6181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.111494][ T6195] erspan0: entered promiscuous mode [ 83.818468][ T6232] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.845773][ T51] Bluetooth: hci1: command tx timeout [ 84.148834][ T6248] Illegal XDP return value 4294967274 on prog (id 25) dev N/A, expect packet loss! [ 85.208693][ T6295] netlink: 'syz.1.94': attribute type 1 has an invalid length. [ 85.332310][ T797] cfg80211: failed to load regulatory.db [ 85.507029][ T6308] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_0, syncid = 2, id = 0 [ 85.757837][ T6318] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 85.778955][ T6320] __nla_validate_parse: 5 callbacks suppressed [ 85.778968][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.103'. [ 85.831839][ T6318] bond3 (unregistering): Released all slaves [ 85.833108][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.103'. [ 85.860900][ T6322] netlink: 'syz.4.104': attribute type 1 has an invalid length. [ 85.880031][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.104'. [ 86.111801][ T6328] syzkaller0: entered promiscuous mode [ 86.119240][ T6328] syzkaller0: entered allmulticast mode [ 86.760890][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.114'. [ 86.785397][ T6362] block nbd0: Unsupported socket: should be TCP or UNIX. [ 87.010659][ T6370] netlink: 'syz.4.116': attribute type 2 has an invalid length. [ 87.020710][ T6370] netlink: 'syz.4.116': attribute type 1 has an invalid length. [ 87.136719][ T6372] netlink: 'syz.0.117': attribute type 8 has an invalid length. [ 87.202467][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'. [ 87.550481][ T6396] netlink: 192 bytes leftover after parsing attributes in process `syz.2.126'. [ 87.960316][ T6418] netlink: 'syz.4.128': attribute type 2 has an invalid length. [ 87.988957][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 88.275425][ T6432] syzkaller1: entered promiscuous mode [ 88.282861][ T6432] syzkaller1: entered allmulticast mode [ 88.334324][ T6437] veth0: entered promiscuous mode [ 88.351449][ T6437] netlink: 'syz.2.135': attribute type 9 has an invalid length. [ 88.368674][ T6437] veth0: left promiscuous mode [ 88.651097][ T6450] bond1: (slave gretap0): Device is not bonding slave [ 88.659559][ T6450] bond1: option active_slave: invalid value (gretap0) [ 88.670083][ T6450] bond1 (unregistering): Released all slaves [ 88.911417][ T29] audit: type=1800 audit(1774535975.931:3): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.144" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=162 res=0 errno=0 [ 88.977204][ T6476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.145'. [ 88.990715][ T6476] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 89.971534][ T6521] netlink: 'syz.4.159': attribute type 8 has an invalid length. [ 90.220150][ T6532] sctp: [Deprecated]: syz.3.162 (pid 6532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.220150][ T6532] Use struct sctp_sack_info instead [ 90.249122][ T6535] netlink: 'syz.0.161': attribute type 83 has an invalid length. [ 90.261158][ T6536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.163'. [ 90.304235][ T6530] can: request_module (can-proto-0) failed. [ 90.418706][ T6544] netlink: 44 bytes leftover after parsing attributes in process `syz.2.167'. [ 90.858480][ T6563] ipt_REJECT: TCP_RESET invalid for non-tcp [ 91.416278][ T6594] vlan2: entered promiscuous mode [ 91.431712][ T6594] bridge0: entered promiscuous mode [ 91.726373][ T6617] __nla_validate_parse: 2 callbacks suppressed [ 91.726390][ T6617] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.191'. [ 91.750184][ T6620] netlink: 'syz.1.190': attribute type 1 has an invalid length. [ 91.768936][ T6618] netlink: 112 bytes leftover after parsing attributes in process `syz.4.192'. [ 91.832482][ T6621] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 91.872034][ T6620] bond2: (slave bridge2): Enslaving as a backup interface with a down link [ 91.905208][ T6621] bond2: (slave bridge3): Enslaving as a backup interface with a down link [ 92.265252][ T6641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.200'. [ 92.279172][ T6643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.199'. [ 92.292107][ T6641] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.200'. [ 92.306880][ T6641] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 92.310438][ T6643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.199'. [ 92.360206][ T6641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.364981][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 92.413716][ T6650] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 92.452085][ T6650] bond1: entered allmulticast mode [ 92.759632][ T6677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.207'. [ 92.781121][ T6680] netlink: 40 bytes leftover after parsing attributes in process `syz.2.208'. [ 92.851201][ T6639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.943846][ T6686] netlink: 48 bytes leftover after parsing attributes in process `syz.2.210'. [ 93.176562][ T6692] netlink: 'syz.0.212': attribute type 5 has an invalid length. [ 93.462649][ T6720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.664642][ T6722] veth3: entered allmulticast mode [ 94.148065][ T6755] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 94.403537][ T6765] syzkaller0: entered promiscuous mode [ 94.414987][ T6765] syzkaller0: entered allmulticast mode [ 94.629045][ T6785] netlink: 'syz.0.245': attribute type 1 has an invalid length. [ 94.650792][ T6785] netlink: 'syz.0.245': attribute type 11 has an invalid length. [ 94.968574][ T6806] veth0: entered promiscuous mode [ 94.996324][ T6804] veth0: left promiscuous mode [ 95.092534][ T6811] syzkaller0: entered promiscuous mode [ 95.111426][ T6811] syzkaller0: entered allmulticast mode [ 95.172484][ T6816] netlink: 'syz.1.254': attribute type 1 has an invalid length. [ 95.229416][ T6816] bond3: entered promiscuous mode [ 95.236018][ T6816] 8021q: adding VLAN 0 to HW filter on device bond3 [ 95.244392][ T6819] x9: renamed from bridge_slave_0 (while UP) [ 95.334333][ T6816] 8021q: adding VLAN 0 to HW filter on device bond3 [ 95.376375][ T6816] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 95.418644][ T6816] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 95.448836][ T6816] bond3: (slave vti0): making interface the new active one [ 95.457848][ T6816] vti0: entered promiscuous mode [ 95.477678][ T6816] bond3: (slave vti0): Enslaving as an active interface with an up link [ 95.539503][ T6827] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 95.807398][ T6826] syz.1.254 (6826) used greatest stack depth: 17472 bytes left [ 95.808322][ T6849] xt_policy: too many policy elements [ 95.911704][ T6853] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 95.928547][ T6855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.958315][ T6855] x_tables: unsorted entry at hook 2 [ 96.105925][ T6867] ieee802154 phy0 wpan0: encryption failed: -22 [ 96.400857][ T6882] trusted_key: syz.4.268 sent an empty control message without MSG_MORE. [ 96.852836][ T6906] xt_hashlimit: overflow, try lower: 3/0 [ 96.929981][ T6908] __nla_validate_parse: 12 callbacks suppressed [ 96.930000][ T6908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.275'. [ 97.281361][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.278'. [ 97.485423][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 97.782795][ T6943] netlink: 80 bytes leftover after parsing attributes in process `syz.0.282'. [ 98.133958][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.287'. [ 98.143415][ T6960] veth0: entered promiscuous mode [ 98.207835][ T6962] netlink: 576 bytes leftover after parsing attributes in process `syz.0.290'. [ 98.253331][ T6957] veth0: left promiscuous mode [ 98.502044][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 98.555007][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 98.616038][ T1011] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.631175][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 98.642385][ T35] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.680680][ T35] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.703169][ T35] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.085055][ T7016] openvswitch: netlink: Multiple metadata blocks provided [ 99.127357][ T7023] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 99.172632][ T7023] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 99.193346][ T7023] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 99.206824][ T7023] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 99.219352][ T7023] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 99.250729][ T7023] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 99.273560][ T7023] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 99.296744][ T7036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.309'. [ 99.303665][ T7023] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 99.335589][ T7023] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 99.568700][ T7048] netlink: 'syz.4.311': attribute type 10 has an invalid length. [ 99.577888][ T7048] dummy0: entered promiscuous mode [ 99.585160][ T7048] bridge0: port 3(dummy0) entered blocking state [ 99.592836][ T7048] bridge0: port 3(dummy0) entered disabled state [ 99.603200][ T7048] dummy0: entered allmulticast mode [ 99.615528][ T7048] bridge0: port 3(dummy0) entered blocking state [ 99.623468][ T7048] bridge0: port 3(dummy0) entered forwarding state [ 100.131552][ T7055] bond0: entered promiscuous mode [ 100.144504][ T7055] bond_slave_0: entered promiscuous mode [ 100.175309][ T7055] bond_slave_1: entered promiscuous mode [ 100.193553][ T7055] bridge_slave_1: entered promiscuous mode [ 100.597072][ T66] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.618761][ T66] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.689407][ T66] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.700959][ T66] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.046760][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.057965][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 158.577231][ T7097] __nla_validate_parse: 1 callbacks suppressed [ 158.577252][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.326'. [ 158.627282][ T7105] tipc: Invalid UDP bearer configuration [ 158.627330][ T7105] tipc: Enabling of bearer rejected, failed to enable media [ 158.772561][ T7111] netlink: 'syz.2.328': attribute type 9 has an invalid length. [ 159.086787][ T7113] syzkaller0: entered promiscuous mode [ 159.114517][ T7113] syzkaller0: entered allmulticast mode [ 159.143096][ T7111] warning: `syz.2.328' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 159.406028][ T7147] netlink: 'syz.1.335': attribute type 1 has an invalid length. [ 159.491771][ T7151] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.591455][ T7156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.338'. [ 159.602976][ T7156] netlink: 'syz.3.338': attribute type 7 has an invalid length. [ 159.610905][ T7156] netlink: 16 bytes leftover after parsing attributes in process `syz.3.338'. [ 159.630276][ T7157] netlink: 'syz.0.336': attribute type 11 has an invalid length. [ 159.718749][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 160.582274][ T7156] gretap0: entered promiscuous mode [ 160.590378][ T7156] gretap0: left promiscuous mode [ 160.715399][ T7164] tipc: Can't bind to reserved service type 1 [ 160.782780][ T7170] netlink: 'syz.0.342': attribute type 64 has an invalid length. [ 160.806861][ T7169] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 160.816480][ T7173] netlink: 'syz.3.343': attribute type 1 has an invalid length. [ 160.837176][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 160.846736][ T7169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.341'. [ 160.868159][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 160.873243][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.886643][ T7169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.341'. [ 160.972640][ T7173] bond3: entered promiscuous mode [ 160.978424][ T7173] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.036629][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.059012][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.094519][ T7173] tipc: Started in network mode [ 161.102824][ T7173] tipc: Node identity ca8a4541b6d9, cluster identity 4711 [ 161.114638][ T7173] tipc: Enabled bearer , priority 0 [ 161.121756][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'. [ 161.167724][ T7173] tipc: Resetting bearer [ 161.182808][ T7174] syzkaller0: entered promiscuous mode [ 161.218833][ T7174] syzkaller0: entered allmulticast mode [ 161.245831][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.346'. [ 161.249203][ T7182] gtp0: entered promiscuous mode [ 161.260192][ T7182] gtp0: entered allmulticast mode [ 161.268043][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.303878][ T7171] tipc: Resetting bearer [ 161.321662][ T7171] tipc: Disabling bearer [ 161.469224][ T7196] netlink: 'syz.2.348': attribute type 2 has an invalid length. [ 161.600796][ T7198] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 162.127633][ T7226] syzkaller0: entered promiscuous mode [ 162.137859][ T7226] syzkaller0: entered allmulticast mode [ 162.475655][ T7234] : entered promiscuous mode [ 162.552519][ T7236] tipc: Started in network mode [ 162.572220][ T7236] tipc: Node identity 4a0ca9b7592, cluster identity 4711 [ 162.590544][ T7236] tipc: Enabled bearer , priority 0 [ 162.611793][ T7243] syzkaller0: entered promiscuous mode [ 162.618214][ T7239] netlink: 'syz.3.363': attribute type 1 has an invalid length. [ 162.626498][ T7239] netlink: 'syz.3.363': attribute type 1 has an invalid length. [ 162.653213][ T7243] syzkaller0: entered allmulticast mode [ 162.718242][ T7236] tipc: Resetting bearer [ 162.759325][ T7235] tipc: Resetting bearer [ 162.843667][ T7235] tipc: Disabling bearer [ 163.618035][ T7290] bridge1: port 1(veth5) entered blocking state [ 163.627154][ T7290] bridge1: port 1(veth5) entered disabled state [ 163.633762][ T7290] veth5: entered allmulticast mode [ 163.641302][ T7290] veth5: entered promiscuous mode [ 164.002152][ T7297] __nla_validate_parse: 17 callbacks suppressed [ 164.002176][ T7297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.379'. [ 164.029668][ T7297] vxcan2: entered allmulticast mode [ 164.084616][ T35] wlan1: Trigger new scan to find an IBSS to join [ 164.348895][ T7312] netlink: 108 bytes leftover after parsing attributes in process `syz.4.384'. [ 164.365156][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 164.400255][ T7317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.385'. [ 164.446374][ T7324] netlink: 20 bytes leftover after parsing attributes in process `syz.2.386'. [ 164.473825][ T7317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.385'. [ 164.906602][ T7351] net_ratelimit: 7884 callbacks suppressed [ 164.906620][ T7351] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 164.959308][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 165.179203][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 165.200214][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 165.429638][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'. [ 166.032642][ T7430] openvswitch: netlink: IP tunnel dst address not specified [ 166.840886][ T7446] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 166.874066][ T7446] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 167.059152][ T1005] wlan1: Trigger new scan to find an IBSS to join [ 167.205563][ T51] block nbd0: Receive control failed (result -107) [ 167.256153][ T7472] veth5: entered promiscuous mode [ 167.269811][ T7469] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 167.327622][ T7469] bond1: (slave lo): Enslaving as an active interface with an up link [ 167.368840][ T7469] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 167.401483][ T7481] lo speed is unknown, defaulting to 1000 [ 167.409706][ T7481] lo speed is unknown, defaulting to 1000 [ 167.434345][ T7481] lo speed is unknown, defaulting to 1000 [ 167.658857][ T7491] syzkaller0: entered promiscuous mode [ 167.664776][ T7491] syzkaller0: entered allmulticast mode [ 167.682667][ T7493] netlink: 'syz.0.436': attribute type 1 has an invalid length. [ 167.687222][ T7491] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 167.709544][ T7491] gretap1: entered promiscuous mode [ 167.733003][ T7491] gretap1: entered allmulticast mode [ 167.830908][ T7493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.882643][ T7494] bond2: (slave geneve2): making interface the new active one [ 167.900966][ T7494] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 167.903687][ T7481] infiniband syz0: set active [ 167.915823][ T7481] infiniband syz0: added lo [ 167.979687][ T5969] lo speed is unknown, defaulting to 1000 [ 168.019280][ T7481] RDS/IB: syz0: added [ 168.053882][ T7481] smc: adding ib device syz0 with port count 1 [ 168.090935][ T7481] smc: ib device syz0 port 1 has no pnetid [ 168.129865][ T7481] lo speed is unknown, defaulting to 1000 [ 168.144205][ T9] lo speed is unknown, defaulting to 1000 [ 168.284821][ T7515] netlink: 'syz.4.440': attribute type 5 has an invalid length. [ 168.671680][ T7481] lo speed is unknown, defaulting to 1000 [ 169.018054][ T7554] __nla_validate_parse: 16 callbacks suppressed [ 169.018074][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'. [ 169.071246][ T7481] lo speed is unknown, defaulting to 1000 [ 169.097170][ T7559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.452'. [ 169.133605][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.372715][ T7481] lo speed is unknown, defaulting to 1000 [ 169.485742][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.458'. [ 169.539838][ T7577] bond2: entered promiscuous mode [ 169.545831][ T7577] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.576441][ T7581] bridge2: entered promiscuous mode [ 169.582664][ T7581] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 169.625105][ T7577] macvlan2: entered promiscuous mode [ 169.630676][ T7577] macvlan2: entered allmulticast mode [ 169.636698][ T7577] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 169.664749][ T7584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.460'. [ 169.721253][ T7481] lo speed is unknown, defaulting to 1000 [ 170.044964][ T7596] netlink: 96 bytes leftover after parsing attributes in process `syz.0.464'. [ 170.077591][ T7597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.464'. [ 170.096834][ T1005] wlan1: Trigger new scan to find an IBSS to join [ 170.163731][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.172858][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.585554][ T7621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.746404][ T7631] veth0_to_bond: entered allmulticast mode [ 170.832404][ T7637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.475'. [ 170.832795][ T7638] netlink: 'syz.0.474': attribute type 29 has an invalid length. [ 170.956431][ T7643] syzkaller1: entered promiscuous mode [ 170.962781][ T7643] syzkaller1: entered allmulticast mode [ 170.969291][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.994242][ T35] wlan1: Creating new IBSS network, BSSID 8a:4b:35:f8:28:22 [ 171.040176][ T7646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.477'. [ 171.053179][ T7646] netlink: 32 bytes leftover after parsing attributes in process `syz.2.477'. [ 171.112585][ T7650] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.478'. [ 171.135586][ T7650] IPv6: sit1: Disabled Multicast RS [ 171.205917][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.268979][ T7655] netlink: 'syz.4.480': attribute type 9 has an invalid length. [ 171.485080][ T7660] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 172.016973][ T7690] syzkaller1: entered promiscuous mode [ 172.022509][ T7690] syzkaller1: entered allmulticast mode [ 172.244289][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.325844][ T7721] netlink: 'syz.3.496': attribute type 1 has an invalid length. [ 172.601648][ T7740] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 172.644874][ T7741] veth7: entered promiscuous mode [ 172.697260][ T7744] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 172.709436][ T7744] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 173.287224][ T7783] netlink: 'syz.3.513': attribute type 9 has an invalid length. [ 173.295580][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.517794][ T7790] Cannot find del_set index 1 as target [ 173.809498][ T7811] netlink: 'syz.3.523': attribute type 1 has an invalid length. [ 173.817178][ T7808] netlink: 'syz.1.522': attribute type 12 has an invalid length. [ 173.906383][ T7816] 8021q: adding VLAN 0 to HW filter on device bond6 [ 173.917538][ T7816] bond5: (slave bond6): making interface the new active one [ 173.926928][ T7816] bond5: (slave bond6): Enslaving as an active interface with an up link [ 173.968702][ T7811] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 173.998997][ T7816] 8021q: adding VLAN 0 to HW filter on device bond5 [ 174.011113][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.071997][ T7818] openvswitch: netlink: IPv4 tunnel dst address is zero [ 174.624013][ T7856] syzkaller0: entered promiscuous mode [ 174.630049][ T7856] syzkaller0: entered allmulticast mode [ 174.831251][ T7865] bond3: entered allmulticast mode [ 174.863804][ T7865] vti0: entered allmulticast mode [ 175.215682][ T7892] __nla_validate_parse: 8 callbacks suppressed [ 175.215701][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.546'. [ 175.363281][ T797] net_ratelimit: 1 callbacks suppressed [ 175.363299][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.387393][ T7895] syzkaller0: entered promiscuous mode [ 175.393264][ T7895] syzkaller0: entered allmulticast mode [ 175.557956][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 175.578278][ T7908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.549'. [ 175.641791][ T7908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.549'. [ 175.853651][ T7907] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.261057][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.560'. [ 176.283752][ T7944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.562'. [ 176.302874][ T7945] netlink: 'syz.1.561': attribute type 10 has an invalid length. [ 176.324585][ T7945] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.332877][ T7945] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.392791][ T7945] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.400182][ T7945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.407876][ T7945] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.415837][ T7945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.433935][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.438614][ T7945] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 176.459336][ T7953] netlink: 'syz.2.563': attribute type 1 has an invalid length. [ 176.491911][ T7952] syzkaller0: entered promiscuous mode [ 176.497798][ T7952] syzkaller0: entered allmulticast mode [ 176.589436][ T7962] SET target dimension over the limit! [ 176.600267][ T7953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.715195][ T7955] bond4: (slave geneve2): making interface the new active one [ 176.728594][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 176.763113][ T7955] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 176.805976][ T7973] netlink: 52 bytes leftover after parsing attributes in process `syz.0.567'. [ 177.043302][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.112575][ T7988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.168964][ T7993] sctp: [Deprecated]: syz.1.576 (pid 7993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.168964][ T7993] Use struct sctp_sack_info instead [ 177.203536][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.297026][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'. [ 177.478622][ T8015] syzkaller0: entered promiscuous mode [ 177.486217][ T8015] syzkaller0: entered allmulticast mode [ 177.494150][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.600894][ T8024] sctp: [Deprecated]: syz.3.584 (pid 8024) Use of int in max_burst socket option deprecated. [ 177.600894][ T8024] Use struct sctp_assoc_value instead [ 177.710409][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 177.732620][ T8027] bond0: option ad_select: unable to set because the bond device is up [ 177.859453][ T8032] vlan2: entered allmulticast mode [ 177.874848][ T8032] bridge1: entered allmulticast mode [ 177.914022][ T8042] bridge1: port 1(erspan0) entered blocking state [ 177.920938][ T8042] bridge1: port 1(erspan0) entered disabled state [ 177.946010][ T8042] erspan0: entered allmulticast mode [ 177.964730][ T8032] sock: sock_timestamping_bind_phc: sock not bind to device [ 178.160813][ T8054] netlink: 'syz.4.596': attribute type 22 has an invalid length. [ 178.185127][ T8054] netlink: 'syz.4.596': attribute type 22 has an invalid length. [ 178.367950][ T8067] syzkaller0: entered promiscuous mode [ 178.381464][ T8067] syzkaller0: entered allmulticast mode [ 178.564890][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.707679][ T8081] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 178.811174][ T8083] lo speed is unknown, defaulting to 1000 [ 180.513832][ T8170] __nla_validate_parse: 8 callbacks suppressed [ 180.513851][ T8170] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.622'. [ 180.621481][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'. [ 181.313729][ T8205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.629'. [ 181.365907][ T8205] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 181.392412][ T8205] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 181.503270][ T8216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.631'. [ 181.693960][ T8220] netlink: 'syz.2.632': attribute type 13 has an invalid length. [ 181.877414][ T8228] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.635'. [ 182.257144][ T8253] Bluetooth: MGMT ver 1.23 [ 182.610023][ T8260] netlink: 'syz.0.640': attribute type 32 has an invalid length. [ 182.675283][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'. [ 182.750262][ T8260] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 182.772809][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'. [ 182.804213][ T8273] xt_cgroup: xt_cgroup: no path or classid specified [ 182.860792][ T8267] lo speed is unknown, defaulting to 1000 [ 182.925765][ T8281] netlink: 'syz.0.645': attribute type 1 has an invalid length. [ 182.968375][ T8287] netlink: 404 bytes leftover after parsing attributes in process `syz.3.644'. [ 183.177974][ T8289] bond4: (slave geneve3): making interface the new active one [ 183.196861][ T8289] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 183.233039][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 183.253335][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 183.297080][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 183.354627][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 183.551354][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.647'. [ 183.701210][ T8318] netlink: 28 bytes leftover after parsing attributes in process `syz.3.651'. [ 183.764851][ T8318] netlink: 'syz.3.651': attribute type 4 has an invalid length. [ 183.843524][ T8324] IPv6: NLM_F_CREATE should be specified when creating new route [ 183.890280][ T8324] IPv6: NLM_F_CREATE should be specified when creating new route [ 183.925371][ T8324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 183.933067][ T8324] IPv6: NLM_F_CREATE should be set when creating new route [ 184.239128][ T8340] delete_channel: no stack [ 184.735705][ T1011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.746693][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.758388][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.088291][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.122832][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.147657][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.185350][ T8382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.233174][ T8382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.288979][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.328609][ T8399] netlink: 'syz.4.666': attribute type 5 has an invalid length. [ 185.417135][ T8401] netlink: 'syz.3.667': attribute type 15 has an invalid length. [ 185.742195][ T8421] __nla_validate_parse: 9 callbacks suppressed [ 185.742213][ T8421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.671'. [ 185.833458][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'. [ 186.016564][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 186.026787][ T8428] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 186.066168][ T8428] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 186.128209][ T8435] netlink: 'syz.1.676': attribute type 21 has an invalid length. [ 186.335692][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 186.372814][ T8450] netlink: 'syz.0.680': attribute type 1 has an invalid length. [ 186.391224][ T8452] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 186.405398][ T8450] nbd: error processing sock list [ 186.700324][ T8471] netlink: 220 bytes leftover after parsing attributes in process `syz.4.681'. [ 186.769332][ T8480] netlink: 328 bytes leftover after parsing attributes in process `syz.3.684'. [ 187.427436][ T8519] netlink: 76 bytes leftover after parsing attributes in process `syz.4.689'. [ 187.466873][ T8519] netlink: 'syz.4.689': attribute type 4 has an invalid length. [ 187.557619][ T8526] IPVS: set_ctl: invalid protocol: 4 172.20.20.18:20003 [ 187.638213][ T8531] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 187.715765][ T8531] IPv6: sit2: Disabled Multicast RS [ 187.755875][ T8536] tipc: Enabled bearer , priority 0 [ 187.941408][ T8531] syzkaller0: entered promiscuous mode [ 187.957811][ T8531] syzkaller0: entered allmulticast mode [ 187.974387][ T8531] tipc: Resetting bearer [ 188.066421][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'. [ 188.100357][ T146] tipc: Resetting bearer [ 188.181065][ T8536] tipc: Resetting bearer [ 189.590785][ T8536] tipc: Disabling bearer [ 189.729349][ T9] tipc: Node number set to 321694135 [ 189.948101][ T8611] netlink: 'syz.3.714': attribute type 30 has an invalid length. [ 190.343959][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'. [ 190.360082][ T8628] lo speed is unknown, defaulting to 1000 [ 190.471899][ T8641] x_tables: duplicate underflow at hook 4 [ 190.532262][ T8599] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 190.547936][ T8599] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 191.100152][ T8669] net_ratelimit: 54 callbacks suppressed [ 191.100172][ T8669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.184439][ T8670] netlink: 36 bytes leftover after parsing attributes in process `syz.0.732'. [ 191.356157][ T8685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.737'. [ 191.471929][ T8691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.901415][ T8712] netlink: 1 bytes leftover after parsing attributes in process `syz.0.746'. [ 192.159252][ T8724] netlink: 296 bytes leftover after parsing attributes in process `syz.1.752'. [ 192.287248][ T8732] netlink: 260 bytes leftover after parsing attributes in process `syz.3.756'. [ 192.333248][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.756'. [ 192.388975][ T8732] 8021q: adding VLAN 0 to HW filter on device bond7 [ 193.767807][ T29] audit: type=1800 audit(1774536080.791:4): pid=8785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.767" name="cgroup.controllers" dev="tmpfs" ino=806 res=0 errno=0 [ 194.450052][ T8841] xt_SECMARK: invalid mode: 9 [ 194.501151][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.508818][ T8838] veth1_macvtap: renamed from veth0_vlan [ 194.517554][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.829134][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 194.843634][ T8856] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 194.871154][ T8856] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 194.903488][ T8856] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 194.913602][ T8856] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 194.957043][ T8856] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 194.983317][ T8860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.789'. [ 194.993079][ T8856] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 195.032557][ T8856] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 195.061120][ T8856] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 195.228923][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.791'. [ 195.820954][ T5489] veth1_macvtap: left promiscuous mode [ 195.872135][ T5489] veth1_macvtap: entered promiscuous mode [ 195.927486][ T8882] netlink: 48 bytes leftover after parsing attributes in process `syz.2.793'. [ 196.225835][ T8891] : entered promiscuous mode [ 196.229440][ T8896] netlink: 'syz.0.798': attribute type 1 has an invalid length. [ 196.264523][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 196.340933][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 196.360427][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 196.540534][ T8896] bond6: entered promiscuous mode [ 196.565967][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 196.569608][ T8896] 8021q: adding VLAN 0 to HW filter on device bond6 [ 196.572771][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 196.587648][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 196.949921][ T8932] lo: entered allmulticast mode [ 196.970906][ T8931] syzkaller1: entered promiscuous mode [ 197.033547][ T8931] syzkaller1: entered allmulticast mode [ 197.359231][ T8923] lo: left allmulticast mode [ 197.560444][ T8959] xt_hashlimit: size too large, truncated to 1048576 [ 197.769064][ T8979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.814'. [ 197.986891][ T8993] netlink: 'syz.1.819': attribute type 1 has an invalid length. [ 197.994773][ T8993] netlink: 224 bytes leftover after parsing attributes in process `syz.1.819'. [ 198.118010][ T8991] netlink: 256 bytes leftover after parsing attributes in process `syz.2.818'. [ 198.946848][ T9020] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 199.058742][ T9024] netlink: 'syz.3.826': attribute type 20 has an invalid length. [ 199.093543][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 199.184284][ T1005] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.240626][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.261815][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.296955][ T9023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.827'. [ 199.310002][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.313052][ T9023] netlink: 'syz.4.827': attribute type 1 has an invalid length. [ 199.332516][ T9023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 199.435898][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.833'. [ 199.496494][ T9045] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 199.538253][ T9043] tap0: tun_chr_ioctl cmd 2148553947 [ 199.546416][ T9048] bridge0: entered allmulticast mode [ 199.689334][ T9060] netlink: 'syz.1.837': attribute type 1 has an invalid length. [ 199.734330][ T9060] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 199.774042][ T9068] gretap0: entered promiscuous mode [ 199.796336][ T9068] gretap0: left promiscuous mode [ 199.839812][ T9073] vlan1: entered allmulticast mode [ 199.846161][ T9073] bridge0: entered allmulticast mode [ 199.851843][ T9073] bridge0: port 3(vlan1) entered blocking state [ 199.859028][ T9073] bridge0: port 3(vlan1) entered disabled state [ 200.050190][ T9080] bridge_slave_1: default FDB implementation only supports local addresses [ 200.079674][ T9078] syzkaller1: entered promiscuous mode [ 200.091725][ T9083] netlink: 'syz.4.845': attribute type 1 has an invalid length. [ 200.093584][ T9078] syzkaller1: entered allmulticast mode [ 200.185132][ T9083] bond3: entered promiscuous mode [ 200.190605][ T9083] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.209699][ T9088] veth0_to_team: entered promiscuous mode [ 200.233053][ T9088] veth0_to_team: left promiscuous mode [ 200.411406][ T9098] net_ratelimit: 2069 callbacks suppressed [ 200.411424][ T9098] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 200.946032][ T9136] openvswitch: netlink: Message has 1 unknown bytes. [ 200.967360][ T9136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.999434][ T9138] FAULT_INJECTION: forcing a failure. [ 200.999434][ T9138] name failslab, interval 1, probability 0, space 0, times 0 [ 201.044055][ T66] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 201.053852][ T9138] CPU: 0 UID: 0 PID: 9138 Comm: syz.3.857 Not tainted syzkaller #0 PREEMPT(full) [ 201.053881][ T9138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 201.053899][ T9138] Call Trace: [ 201.053907][ T9138] [ 201.053915][ T9138] dump_stack_lvl+0xe8/0x150 [ 201.053955][ T9138] should_fail_ex+0x412/0x560 [ 201.053987][ T9138] should_failslab+0xa8/0x100 [ 201.054014][ T9138] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 201.054035][ T9138] ? __alloc_skb+0x1d0/0x7d0 [ 201.054052][ T9138] ? __local_bh_enable_ip+0xd0/0x130 [ 201.054080][ T9138] __alloc_skb+0x1d0/0x7d0 [ 201.054097][ T9138] ? netlink_ack_tlv_len+0x6c/0x210 [ 201.054126][ T9138] netlink_ack+0x146/0xa50 [ 201.054149][ T9138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.054172][ T9138] ? __lock_acquire+0x6b5/0x2cf0 [ 201.054206][ T9138] netlink_rcv_skb+0x2b6/0x4b0 [ 201.054232][ T9138] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.054254][ T9138] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.054294][ T9138] ? down_read+0x272/0x2e0 [ 201.054316][ T9138] ? genl_rcv+0xd/0x40 [ 201.054337][ T9138] genl_rcv+0x28/0x40 [ 201.054356][ T9138] netlink_unicast+0x80f/0x9b0 [ 201.054388][ T9138] ? __pfx_netlink_unicast+0x10/0x10 [ 201.054415][ T9138] ? netlink_sendmsg+0x650/0xb40 [ 201.054439][ T9138] ? skb_put+0x11b/0x210 [ 201.054460][ T9138] netlink_sendmsg+0x813/0xb40 [ 201.054495][ T9138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.054521][ T9138] ? aa_sock_msg_perm+0xf1/0x1b0 [ 201.054545][ T9138] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 201.054567][ T9138] ____sys_sendmsg+0x972/0x9f0 [ 201.054594][ T9138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.054622][ T9138] ? import_iovec+0x73/0xa0 [ 201.054644][ T9138] ___sys_sendmsg+0x2a5/0x360 [ 201.054671][ T9138] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.054725][ T9138] ? __fget_files+0x2a/0x420 [ 201.054749][ T9138] ? __fget_files+0x3a0/0x420 [ 201.054785][ T9138] __x64_sys_sendmsg+0x1bd/0x2a0 [ 201.054808][ T9138] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 201.054838][ T9138] ? __pfx_ksys_write+0x10/0x10 [ 201.054869][ T9138] do_syscall_64+0x14d/0xf80 [ 201.054889][ T9138] ? trace_irq_disable+0x3b/0x150 [ 201.054915][ T9138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.054932][ T9138] ? clear_bhb_loop+0x40/0x90 [ 201.054962][ T9138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.054980][ T9138] RIP: 0033:0x7faa7259c799 [ 201.055004][ T9138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.055019][ T9138] RSP: 002b:00007faa7340d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.055046][ T9138] RAX: ffffffffffffffda RBX: 00007faa72815fa0 RCX: 00007faa7259c799 [ 201.055059][ T9138] RDX: 0000000004040084 RSI: 0000200000000680 RDI: 0000000000000004 [ 201.055070][ T9138] RBP: 00007faa7340d090 R08: 0000000000000000 R09: 0000000000000000 [ 201.055081][ T9138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.055091][ T9138] R13: 00007faa72816038 R14: 00007faa72815fa0 R15: 00007ffced6895f8 [ 201.055121][ T9138] [ 201.104225][ T9144] netlink: 'syz.1.859': attribute type 1 has an invalid length. [ 201.249800][ T9149] openvswitch: netlink: Missing key (keys=40, expected=80) [ 201.344592][ T9144] __nla_validate_parse: 6 callbacks suppressed [ 201.344613][ T9144] netlink: 228 bytes leftover after parsing attributes in process `syz.1.859'. [ 201.400381][ T9149] openvswitch: netlink: Missing key (keys=40, expected=80) [ 201.441820][ T9149] openvswitch: netlink: Missing key (keys=40, expected=80) [ 201.479955][ T9160] netlink: 'syz.3.863': attribute type 21 has an invalid length. [ 201.492871][ T9149] openvswitch: netlink: Missing key (keys=40, expected=80) [ 201.524183][ T9160] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.534855][ T9164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.543221][ T9160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.557666][ T9160] IPv6: NLM_F_CREATE should be set when creating new route [ 201.565107][ T9160] IPv6: NLM_F_CREATE should be set when creating new route [ 201.567700][ T9149] openvswitch: netlink: Missing key (keys=40, expected=80) [ 201.572344][ T9160] IPv6: NLM_F_CREATE should be set when creating new route [ 201.702853][ T9174] netlink: 'syz.4.867': attribute type 10 has an invalid length. [ 201.768173][ T9174] team0 (unregistering): Port device team_slave_0 removed [ 201.806828][ T9174] team0 (unregistering): Port device team_slave_1 removed [ 202.165848][ T9202] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 202.207557][ T9202] netlink: 76 bytes leftover after parsing attributes in process `syz.3.872'. [ 202.228027][ T9202] netlink: 320 bytes leftover after parsing attributes in process `syz.3.872'. [ 202.870505][ T9242] xt_ecn: cannot match TCP bits for non-tcp packets [ 203.136032][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 203.167160][ T9260] xt_cgroup: invalid path, errno=-2 [ 203.193674][ T9262] netlink: 27 bytes leftover after parsing attributes in process `syz.2.885'. [ 203.206906][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 203.240262][ T9262] netlink: 32 bytes leftover after parsing attributes in process `syz.2.885'. [ 203.248847][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.884'. [ 203.250031][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.884'. [ 203.358611][ T9266] netlink: 'syz.1.887': attribute type 11 has an invalid length. [ 203.401465][ T9266] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.887'. [ 203.867340][ T9297] netlink: 'syz.3.896': attribute type 83 has an invalid length. [ 203.923021][ T9297] macsec2: entered promiscuous mode [ 204.018318][ T9307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.261452][ T9322] netlink: 'syz.2.904': attribute type 1 has an invalid length. [ 204.321150][ T9316] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 204.352977][ T9316] bond7: option packets_per_slave: allowed values 0 - 65535 [ 204.374375][ T9316] bond7 (unregistering): Released all slaves [ 204.523216][ T9322] 8021q: adding VLAN 0 to HW filter on device bond5 [ 204.606751][ T9330] bond5: (slave veth3): Enslaving as an active interface with a down link [ 204.814117][ T9338] bond5: (slave gretap1): making interface the new active one [ 204.826436][ T9338] gretap1: entered promiscuous mode [ 204.843442][ T9338] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 204.890682][ T9322] macvlan4: entered promiscuous mode [ 204.910435][ T9322] macvlan4: entered allmulticast mode [ 204.922016][ T9322] bond5: entered promiscuous mode [ 204.933533][ T9322] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 204.942216][ T9322] bond5: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 204.999380][ T9322] bond5: left promiscuous mode [ 205.474675][ T9376] tun0: tun_chr_ioctl cmd 1074025675 [ 205.480923][ T9376] tun0: persist disabled [ 206.462243][ T9429] syzkaller1: entered promiscuous mode [ 206.477151][ T9429] syzkaller1: entered allmulticast mode [ 206.693725][ T797] IPVS: starting estimator thread 0... [ 206.803387][ T9444] IPVS: using max 32 ests per chain, 76800 per kthread [ 207.071280][ T9462] netlink: 'syz.4.929': attribute type 13 has an invalid length. [ 207.121818][ T9467] __nla_validate_parse: 7 callbacks suppressed [ 207.121838][ T9467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.934'. [ 207.147206][ T9462] veth0_macvtap: left promiscuous mode [ 207.185602][ T9462] macvtap0: entered allmulticast mode [ 207.218382][ T9462] macvtap0: refused to change device tx_queue_len [ 207.264059][ T9479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.929'. [ 207.338268][ T9483] delete_channel: no stack [ 207.367259][ T9481] netlink: 36 bytes leftover after parsing attributes in process `syz.1.937'. [ 207.379641][ T9479] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 207.962709][ T9507] syzkaller0: entered promiscuous mode [ 207.969737][ T9507] syzkaller0: entered allmulticast mode [ 208.091579][ T9511] lo: entered allmulticast mode [ 208.260292][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 208.286184][ T9523] x_tables: unsorted underflow at hook 1 [ 208.316579][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 208.447860][ T9532] sctp: [Deprecated]: syz.2.949 (pid 9532) Use of int in max_burst socket option deprecated. [ 208.447860][ T9532] Use struct sctp_assoc_value instead [ 208.656121][ T9540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.951'. [ 208.947114][ T9554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.955858][ T9554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.977347][ T9554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.985598][ T9554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.001223][ T9558] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.957'. [ 209.018818][ T9558] netlink: Conntrack attr has 3 unknown bytes [ 209.035230][ T9564] IPVS: set_ctl: invalid protocol: 58 172.30.0.4:20004 [ 209.311328][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.961'. [ 209.629124][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.968'. [ 209.726541][ T9598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.969'. [ 209.935254][ T9607] netlink: 'syz.2.971': attribute type 3 has an invalid length. [ 209.961626][ T9610] netlink: 'syz.2.971': attribute type 3 has an invalid length. [ 210.381819][ T9616] "syz.2.973" (9616) uses obsolete ecb(arc4) skcipher [ 210.507245][ T9643] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 210.511416][ T9646] netlink: 'syz.4.982': attribute type 1 has an invalid length. [ 210.552811][ T9649] team0: Device gtp0 is up. Set it down before adding it as a team port [ 210.696519][ T9646] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.339633][ T9703] netlink: 'syz.2.996': attribute type 33 has an invalid length. [ 212.079290][ T9742] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 212.101313][ T9742] bond7 (unregistering): Released all slaves [ 212.201423][ T9757] netlink: 'syz.0.1007': attribute type 1 has an invalid length. [ 212.276119][ T9757] 8021q: adding VLAN 0 to HW filter on device bond7 [ 212.647958][ T9792] xt_hashlimit: size too large, truncated to 1048576 [ 212.667074][ T9791] openvswitch: netlink: Flow actions attr not present in new flow. [ 212.849835][ T9801] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 212.953522][ T9801] bond8: (slave lo): Enslaving as an active interface with an up link [ 212.994444][ T9801] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 213.209982][ T9820] __nla_validate_parse: 8 callbacks suppressed [ 213.210003][ T9820] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1024'. [ 213.360558][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1026'. [ 213.422278][ T9831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1026'. [ 213.495760][ T9831] netlink: 'syz.3.1026': attribute type 64 has an invalid length. [ 213.736359][ T9854] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1033'. [ 213.762211][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 213.784095][ T9856] nbd: must specify at least one socket [ 213.949619][ T9867] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1035'. [ 213.974639][ T9862] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 214.006996][ T9862] bond7: option packets_per_slave: allowed values 0 - 65535 [ 214.039282][ T9862] bond7 (unregistering): Released all slaves [ 214.063254][ T9872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.072152][ T9872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.087063][ T9877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1039'. [ 214.088732][ T66] wlan1: Trigger new scan to find an IBSS to join [ 214.120000][ T9872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.136001][ T9872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.192533][ T9877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1039'. [ 214.239861][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1042'. [ 214.324672][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1042'. [ 214.411388][ T9893] netlink: 'syz.1.1047': attribute type 2 has an invalid length. [ 214.425446][ T9896] netlink: 'syz.3.1048': attribute type 2 has an invalid length. [ 215.033803][ T9933] openvswitch: netlink: Multiple metadata blocks provided [ 215.177281][ T9946] netlink: 'syz.3.1059': attribute type 1 has an invalid length. [ 215.218019][ T9950] netlink: 'syz.0.1060': attribute type 1 has an invalid length. [ 215.375363][ T9946] 8021q: adding VLAN 0 to HW filter on device bond9 [ 215.395710][ T9954] bond9: entered allmulticast mode [ 215.456592][ T9960] bond9: (slave ip6gretap1): making interface the new active one [ 215.465888][ T9960] ip6gretap1: entered allmulticast mode [ 215.477728][ T9960] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 215.515526][ T9970] syzkaller0: entered promiscuous mode [ 215.521287][ T9970] syzkaller0: entered allmulticast mode [ 215.529148][ T9970] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 215.755004][ T9983] nbd: device at index 64 is going down [ 215.918790][ T9999] netlink: 'syz.4.1073': attribute type 10 has an invalid length. [ 216.023501][ T171] gretap1: left promiscuous mode [ 216.223313][T10019] geneve2: entered promiscuous mode [ 216.309814][T10021] syzkaller0: entered promiscuous mode [ 216.315872][T10021] syzkaller0: entered allmulticast mode [ 216.388483][T10030] netlink: 'syz.1.1082': attribute type 7 has an invalid length. [ 216.408156][T10030] netlink: 'syz.1.1082': attribute type 8 has an invalid length. [ 217.053265][ T1011] wlan1: Trigger new scan to find an IBSS to join [ 217.089325][T10023] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 217.850402][T10043] netlink: 'syz.0.1086': attribute type 2 has an invalid length. [ 217.866481][T10043] netlink: 'syz.0.1086': attribute type 2 has an invalid length. [ 217.985925][T10056] netlink: 'syz.0.1091': attribute type 1 has an invalid length. [ 218.087861][T10056] bond8: entered promiscuous mode [ 218.093419][T10056] bond8: entered allmulticast mode [ 218.121786][T10056] 8021q: adding VLAN 0 to HW filter on device bond8 [ 218.218156][T10064] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 218.259303][T10064] bond10 (unregistering): Released all slaves [ 218.302406][T10077] __nla_validate_parse: 10 callbacks suppressed [ 218.302424][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 218.327894][ T5840] Bluetooth: hci4: command 0x0401 tx timeout [ 218.359897][T10077] hsr0: entered promiscuous mode [ 218.371502][T10077] macvlan2: entered allmulticast mode [ 218.379799][T10077] hsr0: entered allmulticast mode [ 218.385238][T10077] hsr_slave_0: entered allmulticast mode [ 218.391205][T10077] hsr_slave_1: entered allmulticast mode [ 218.509341][T10087] netlink: 'syz.3.1099': attribute type 1 has an invalid length. [ 218.520319][T10084] netlink: 'syz.3.1099': attribute type 1 has an invalid length. [ 218.532405][T10088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.679622][T10097] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1098'. [ 218.694354][T10097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1098'. [ 218.756798][T10103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1103'. [ 218.934152][T10118] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1108'. [ 218.976456][T10122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1109'. [ 219.065093][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1112'. [ 219.179226][T10135] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 219.195191][T10135] bond10 (unregistering): Released all slaves [ 219.398339][T10142] bond7: entered promiscuous mode [ 219.455532][T10148] macvlan3: entered promiscuous mode [ 219.473186][T10148] macvlan3: entered allmulticast mode [ 219.480031][T10148] bond7: (slave macvlan3): Opening slave failed [ 219.488850][T10142] netlink: 'syz.1.1115': attribute type 1 has an invalid length. [ 219.543000][T10142] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1115'. [ 219.645050][T10161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1120'. [ 219.664447][T10161] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1120'. [ 219.870736][T10173] x_tables: duplicate underflow at hook 2 [ 220.094006][ T1011] wlan1: Trigger new scan to find an IBSS to join [ 220.140881][T10192] netlink: 'syz.4.1130': attribute type 9 has an invalid length. [ 220.678371][T10226] netlink: 'syz.3.1142': attribute type 10 has an invalid length. [ 220.730061][T10226] syz_tun: entered promiscuous mode [ 220.751857][T10234] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 220.767724][T10226] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 220.963204][ T5840] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 221.003382][ T171] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00 [ 221.011674][T10243] netlink: 'syz.0.1146': attribute type 1 has an invalid length. [ 221.209810][T10249] syzkaller0: entered promiscuous mode [ 221.457138][T10257] syzkaller0: entered promiscuous mode [ 221.503960][T10253] syzkaller1: entered allmulticast mode [ 221.531262][T10281] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 221.548104][T10281] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 223.002102][T10301] veth0: entered promiscuous mode [ 223.017352][T10301] veth0: left promiscuous mode [ 223.056963][T10304] netlink: 'syz.1.1159': attribute type 11 has an invalid length. [ 244.060653][ T5899] IPVS: starting estimator thread 0... [ 244.063489][T10357] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 244.108297][T10371] netlink: 'syz.2.1168': attribute type 1 has an invalid length. [ 244.149094][T10373] __nla_validate_parse: 10 callbacks suppressed [ 244.149114][T10373] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1167'. [ 244.173432][T10367] IPVS: using max 30 ests per chain, 72000 per kthread [ 244.195978][T10374] netlink: 'syz.0.1167': attribute type 25 has an invalid length. [ 244.294898][T10383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1168'. [ 244.307921][T10375] bond6 (unregistering): Released all slaves [ 244.397186][T10387] syzkaller0: entered promiscuous mode [ 244.403328][T10387] syzkaller0: entered allmulticast mode [ 244.591730][T10397] syzkaller0: entered promiscuous mode [ 244.597315][T10397] syzkaller0: entered allmulticast mode [ 244.638799][T10399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1176'. [ 244.701015][T10401] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1177'. [ 244.848024][T10412] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1181'. [ 244.867878][T10412] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1181'. [ 244.882224][T10411] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1181'. [ 244.900488][T10411] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1181'. [ 244.936298][T10418] netlink: 'syz.3.1183': attribute type 142 has an invalid length. [ 244.967894][ T5840] Bluetooth: hci4: link tx timeout [ 244.979948][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 245.072555][T10422] netlink: 'syz.3.1185': attribute type 2 has an invalid length. [ 245.104933][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1186'. [ 245.125277][T10422] netlink: 'syz.3.1185': attribute type 1 has an invalid length. [ 245.127059][T10426] netlink: 'syz.0.1186': attribute type 1 has an invalid length. [ 245.160382][T10426] netlink: 'syz.0.1186': attribute type 1 has an invalid length. [ 245.207710][T10432] netlink: 'syz.2.1187': attribute type 1 has an invalid length. [ 245.265343][T10433] netlink: 'syz.2.1187': attribute type 1 has an invalid length. [ 245.347333][T10440] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 245.401422][T10437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1188'. [ 245.607382][T10461] sctp: [Deprecated]: syz.2.1195 (pid 10461) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.607382][T10461] Use struct sctp_sack_info instead [ 245.964593][T10484] gtp0: entered promiscuous mode [ 245.969721][T10484] gtp0: entered allmulticast mode [ 246.141749][T10493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.341523][T10501] openvswitch: netlink: Flow actions attr not present in new flow. [ 246.471434][T10508] tipc: Enabled bearer , priority 0 [ 246.506403][T10507] syzkaller0: entered promiscuous mode [ 246.511925][T10507] syzkaller0: entered allmulticast mode [ 246.684423][T10523] x_tables: duplicate underflow at hook 2 [ 246.690428][T10516] tipc: Resetting bearer [ 246.759414][T10516] tipc: Disabling bearer [ 246.828457][T10517] tipc: Enabling of bearer rejected, failed to enable media [ 246.840583][T10532] netlink: 'syz.0.1216': attribute type 61 has an invalid length. [ 247.045847][ T5840] Bluetooth: hci4: command 0x0401 tx timeout [ 247.266973][T10555] vlan3: entered allmulticast mode [ 247.272170][T10555] bridge4: entered allmulticast mode [ 247.400022][T10565] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 249.527964][T10630] __nla_validate_parse: 8 callbacks suppressed [ 249.527981][T10630] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1237'. [ 249.549347][T10630] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1237'. [ 249.816812][T10648] netlink: 'syz.3.1241': attribute type 9 has an invalid length. [ 250.848223][T10659] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1245'. [ 251.005868][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 251.018169][T10612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.284151][T10678] vlan4: entered promiscuous mode [ 251.318131][T10678] vlan4: entered allmulticast mode [ 251.335335][T10678] hsr_slave_1: entered allmulticast mode [ 251.339341][T10687] atomic_op ffff8880799ad998 conn xmit_atomic 0000000000000000 [ 251.402498][T10696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.567144][T10706] openvswitch: netlink: Duplicate or invalid key (type 0). [ 251.575443][T10706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.596976][T10708] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1257'. [ 251.625004][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1258'. [ 251.704593][T10715] netlink: 'syz.4.1261': attribute type 58 has an invalid length. [ 251.733379][T10715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1261'. [ 251.740466][T10719] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1262'. [ 251.808272][T10724] team0: Port device team_slave_1 removed [ 251.874322][T10730] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1266'. [ 251.885564][T10727] netlink: 'syz.1.1265': attribute type 30 has an invalid length. [ 251.996838][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'. [ 252.006852][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'. [ 252.409065][T10768] netlink: 'syz.2.1274': attribute type 4 has an invalid length. [ 252.477908][T10768] netlink: 'syz.2.1274': attribute type 4 has an invalid length. [ 252.498001][T10775] netlink: 'syz.4.1277': attribute type 21 has an invalid length. [ 252.668797][T10782] syzkaller0: entered promiscuous mode [ 252.684905][T10782] syzkaller0: entered allmulticast mode [ 252.726713][T10788] netlink: 'syz.2.1283': attribute type 11 has an invalid length. [ 252.735369][T10788] netlink: 'syz.2.1283': attribute type 11 has an invalid length. [ 252.792766][T10790] netlink: 'syz.3.1282': attribute type 1 has an invalid length. [ 252.965787][T10797] veth7: entered promiscuous mode [ 252.982469][T10797] veth7: entered allmulticast mode [ 253.331209][T10813] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 253.446484][T10827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.699060][T10813] vlan2: entered allmulticast mode [ 253.704598][T10813] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 253.966009][T10839] lo speed is unknown, defaulting to 1000 [ 253.978034][T10845] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 254.625084][T10878] openvswitch: netlink: Key type 346 is out of range max 32 [ 254.921509][T10896] __nla_validate_parse: 10 callbacks suppressed [ 254.921537][T10896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1309'. [ 255.184766][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'. [ 255.322749][T10892] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.330102][T10892] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.615828][T10892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.647423][T10892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.926957][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.934005][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.062466][T10892] hsr0: left allmulticast mode [ 256.074052][T10892] hsr_slave_0: left allmulticast mode [ 256.079477][T10892] hsr_slave_1: left allmulticast mode [ 256.090304][ T9] lo speed is unknown, defaulting to 1000 [ 256.124267][ T9] syz0: Port: 1 Link DOWN [ 256.227465][ T1005] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.249893][ T1005] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.295287][ T1005] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.305999][ T1005] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.332666][ T9] lo speed is unknown, defaulting to 1000 [ 256.375979][ T1005] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.398035][T10927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'. [ 256.426829][ T1005] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.443337][ T1005] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.460616][ T1005] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.493564][T10938] netlink: 'syz.2.1318': attribute type 1 has an invalid length. [ 256.513119][T10938] netlink: 'syz.2.1318': attribute type 2 has an invalid length. [ 256.521175][T10938] netlink: 'syz.2.1318': attribute type 1 has an invalid length. [ 256.545459][T10938] netlink: 'syz.2.1318': attribute type 3 has an invalid length. [ 256.607854][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1318'. [ 256.851987][T10961] syzkaller0: entered promiscuous mode [ 256.860964][T10961] syzkaller0: entered allmulticast mode [ 256.877497][T10961] bond8: option mode: unable to set because the bond device has slaves [ 256.898555][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1324'. [ 256.901442][T10963] batadv_slave_1: default FDB implementation only supports local addresses [ 256.944414][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 256.995193][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 257.295751][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'. [ 257.464555][T10994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.008460][T11029] syzkaller0: entered promiscuous mode [ 258.032225][T11029] syzkaller0: entered allmulticast mode [ 258.081452][T11033] syzkaller1: entered promiscuous mode [ 258.088721][T11033] syzkaller1: entered allmulticast mode [ 258.217053][T11041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1354'. [ 258.247487][T11041] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 258.298546][T11051] netlink: 'syz.2.1352': attribute type 3 has an invalid length. [ 258.347043][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1352'. [ 258.917547][ T5899] IPVS: starting estimator thread 0... [ 258.936024][T11083] : renamed from bond0 (while UP) [ 259.013022][T11084] IPVS: using max 27 ests per chain, 64800 per kthread [ 259.058024][T11088] IPv6: sit2: Disabled Multicast RS [ 259.134365][T11093] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 259.226326][T11095] TC_ACT_REPEAT abuse ? [ 259.458228][T11112] netlink: 'syz.3.1375': attribute type 1 has an invalid length. [ 259.466222][T11112] netlink: 'syz.3.1375': attribute type 4 has an invalid length. [ 259.504316][T11110] sit0: entered promiscuous mode [ 259.509458][T11110] netlink: 'syz.1.1374': attribute type 1 has an invalid length. [ 260.224491][T11157] __nla_validate_parse: 7 callbacks suppressed [ 260.224510][T11157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1391'. [ 260.379467][T11170] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1396'. [ 260.559823][T11181] netlink: 'syz.0.1398': attribute type 5 has an invalid length. [ 260.581887][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 260.584170][ T1005] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.663900][ T1005] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.683043][ T1005] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.722670][ T1005] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.871922][T11207] netlink: 'syz.4.1407': attribute type 2 has an invalid length. [ 260.875104][T11204] syzkaller0: entered promiscuous mode [ 260.886213][T11204] syzkaller0: entered allmulticast mode [ 261.049638][T11218] bridge5: entered promiscuous mode [ 261.055090][T11218] bridge5: entered allmulticast mode [ 261.133789][T11225] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 261.189216][T11223] bond1: (slave lo): Releasing backup interface [ 261.196814][T11223] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 261.227773][T11223] bridge_slave_0: left allmulticast mode [ 261.259904][T11223] bridge_slave_0: left promiscuous mode [ 261.281737][T11223] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.320641][T11223] bridge_slave_1: left allmulticast mode [ 261.326903][T11237] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 261.336678][T11223] bridge_slave_1: left promiscuous mode [ 261.351124][T11223] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.369259][T11223] bond0: (slave bond_slave_0): Releasing backup interface [ 261.387391][T11223] bond0: (slave bond_slave_1): Releasing backup interface [ 261.430267][T11223] team0: Port device team_slave_0 removed [ 261.452641][T11223] team0: Port device team_slave_1 removed [ 261.460710][T11223] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 261.479344][T11244] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1415'. [ 261.489460][T11227] team0: Mode changed to "activebackup" [ 261.609485][T11246] can: request_module (can-proto-0) failed. [ 261.934421][T11269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.021262][T11278] validate_nla: 2 callbacks suppressed [ 262.021282][T11278] netlink: 'syz.2.1426': attribute type 21 has an invalid length. [ 262.058731][T11278] netlink: 'syz.2.1426': attribute type 1 has an invalid length. [ 262.068338][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1426'. [ 262.114684][T11282] syzkaller1: entered promiscuous mode [ 262.120205][T11282] syzkaller1: entered allmulticast mode [ 262.447299][T11301] IPv6: NLM_F_CREATE should be specified when creating new route [ 262.460008][T11301] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.467354][T11301] IPv6: NLM_F_CREATE should be set when creating new route [ 262.493232][T11305] netlink: 'syz.0.1438': attribute type 9 has an invalid length. [ 262.552682][T11307] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1439'. [ 262.655683][T11313] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1440'. [ 262.800011][T11320] sctp: [Deprecated]: syz.4.1442 (pid 11320) Use of int in max_burst socket option deprecated. [ 262.800011][T11320] Use struct sctp_assoc_value instead [ 262.826265][T11323] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1444'. [ 263.158885][T11346] netlink: 774 bytes leftover after parsing attributes in process `syz.1.1453'. [ 263.374929][T11361] bond1: (slave ip6gretap1): making interface the new active one [ 263.383932][T11361] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 263.489873][T11367] vxcan3: entered promiscuous mode [ 263.750056][T11386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.059208][T11409] macvtap1: entered allmulticast mode [ 264.069354][T11409] veth0_macvtap: entered allmulticast mode [ 264.095096][T11412] netlink: 'syz.1.1479': attribute type 10 has an invalid length. [ 264.114541][T11412] team0: Device ipvlan1 failed to register rx_handler [ 264.258067][T11418] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1482'. [ 264.325536][T11419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.596054][T11440] netlink: 'syz.3.1486': attribute type 1 has an invalid length. [ 264.628487][T11444] netlink: 'syz.2.1488': attribute type 7 has an invalid length. [ 264.637796][T11444] netlink: 'syz.2.1488': attribute type 8 has an invalid length. [ 264.879882][T11458] bond7: option all_slaves_active: invalid value (222) [ 264.890105][T11458] bond7 (unregistering): Released all slaves [ 265.368013][T11506] wireguard0: entered promiscuous mode [ 265.395425][T11506] wireguard0: entered allmulticast mode [ 265.411053][T11511] netlink: 'syz.2.1508': attribute type 1 has an invalid length. [ 265.458540][T11511] bond7: (slave bridge4): making interface the new active one [ 265.467323][T11511] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 265.478622][T11511] __nla_validate_parse: 4 callbacks suppressed [ 265.478638][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1508'. [ 265.496514][T11511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1508'. [ 265.673914][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1512'. [ 265.740787][T11523] bond6: option lp_interval: invalid value (0) [ 265.747696][T11523] bond6: option lp_interval: allowed values 1 - 2147483647 [ 265.772686][T11523] bond6 (unregistering): Released all slaves [ 265.800197][T11534] veth0: entered promiscuous mode [ 265.816793][T11533] veth0: left promiscuous mode [ 266.006889][T11544] syzkaller0: entered promiscuous mode [ 266.012573][T11544] syzkaller0: entered allmulticast mode [ 266.150163][ T5969] IPVS: starting estimator thread 0... [ 266.253329][T11558] IPVS: using max 30 ests per chain, 72000 per kthread [ 266.727129][T11555] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 266.741312][T11555] vlan2: left promiscuous mode [ 266.746445][T11555] bridge0: left promiscuous mode [ 266.756652][T11555] gtp0: left promiscuous mode [ 266.761885][T11555] gtp0: left allmulticast mode [ 266.813641][ T146] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.846985][ T146] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.899567][ T146] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.913930][ T146] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.923674][ T146] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.941532][ T146] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.972025][ T146] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.984368][T11585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1529'. [ 266.997448][ T146] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.086201][T11585] vlan0: entered allmulticast mode [ 267.093885][T11585] bridge5: entered allmulticast mode [ 267.115129][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1529'. [ 267.601037][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1547'. [ 267.702805][T11643] xt_cluster: node mask cannot exceed total number of nodes [ 268.145841][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1554'. [ 268.276524][T11668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.465415][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1563'. [ 268.505393][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1564'. [ 268.522603][T11685] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1564'. [ 268.548796][T11685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.569726][T11685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.591857][T11685] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 268.635708][T11685] bond0 (unregistering): Released all slaves [ 269.138434][T11723] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.328488][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 271.171340][T11741] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 271.409291][T11765] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 271.590776][T11778] __nla_validate_parse: 7 callbacks suppressed [ 271.590795][T11778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1594'. [ 271.675723][T11783] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1593'. [ 271.704475][T11783] 8021q: VLANs not supported on gre0 [ 271.731147][T11788] netlink: 'syz.0.1596': attribute type 21 has an invalid length. [ 271.739277][T11788] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1596'. [ 271.765432][T11785] netlink: 'syz.2.1595': attribute type 1 has an invalid length. [ 271.775834][T11788] netlink: 'syz.0.1596': attribute type 4 has an invalid length. [ 271.794614][T11789] netlink: 'syz.0.1596': attribute type 21 has an invalid length. [ 271.795562][T11788] netlink: 'syz.0.1596': attribute type 5 has an invalid length. [ 271.802646][T11789] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1596'. [ 271.830750][T11788] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1596'. [ 271.882258][T11785] 8021q: adding VLAN 0 to HW filter on device bond8 [ 271.892783][T11789] netlink: 'syz.0.1596': attribute type 4 has an invalid length. [ 271.902265][T11789] netlink: 'syz.0.1596': attribute type 5 has an invalid length. [ 271.912284][T11789] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1596'. [ 271.930419][T11791] bond8: (slave geneve3): making interface the new active one [ 271.940361][T11791] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 271.973124][ T1005] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.979120][T11788] netlink: 'syz.0.1596': attribute type 1 has an invalid length. [ 271.991347][ T1005] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.024547][ T1005] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.074255][ T1005] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.092497][T11805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1599'. [ 272.134165][T11805] netlink: 'syz.1.1599': attribute type 1 has an invalid length. [ 272.286491][T11818] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1603'. [ 272.309593][T11818] netlink: zone id is out of range [ 272.317875][T11818] netlink: zone id is out of range [ 272.325438][T11818] netlink: zone id is out of range [ 272.331473][T11818] netlink: zone id is out of range [ 272.337321][T11818] netlink: zone id is out of range [ 272.343983][T11818] netlink: zone id is out of range [ 272.350884][T11818] netlink: zone id is out of range [ 272.357099][T11818] netlink: zone id is out of range [ 272.363797][T11818] netlink: zone id is out of range [ 272.549517][T11829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1607'. [ 272.596962][T11830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1606'. [ 272.827896][T11846] netlink: 'syz.4.1612': attribute type 12 has an invalid length. [ 272.896584][T11848] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 273.444286][T11865] FAULT_INJECTION: forcing a failure. [ 273.444286][T11865] name failslab, interval 1, probability 0, space 0, times 0 [ 273.473080][T11865] CPU: 0 UID: 0 PID: 11865 Comm: syz.1.1619 Not tainted syzkaller #0 PREEMPT(full) [ 273.473106][T11865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 273.473132][T11865] Call Trace: [ 273.473139][T11865] [ 273.473147][T11865] dump_stack_lvl+0xe8/0x150 [ 273.473179][T11865] should_fail_ex+0x412/0x560 [ 273.473206][T11865] should_failslab+0xa8/0x100 [ 273.473228][T11865] __kmalloc_noprof+0xe8/0x760 [ 273.473246][T11865] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 273.473275][T11865] tomoyo_realpath_from_path+0xe3/0x5d0 [ 273.473308][T11865] ? tomoyo_path_number_perm+0x219/0x630 [ 273.473331][T11865] tomoyo_path_number_perm+0x246/0x630 [ 273.473357][T11865] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 273.473381][T11865] ? __lock_acquire+0x6b5/0x2cf0 [ 273.473412][T11865] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 273.473450][T11865] ? __fget_files+0x2a/0x420 [ 273.473474][T11865] ? __fget_files+0x2a/0x420 [ 273.473494][T11865] ? __fget_files+0x3a0/0x420 [ 273.473514][T11865] ? __fget_files+0x2a/0x420 [ 273.473539][T11865] security_file_ioctl+0xc3/0x2a0 [ 273.473559][T11865] __se_sys_ioctl+0x47/0x170 [ 273.473580][T11865] do_syscall_64+0x14d/0xf80 [ 273.473597][T11865] ? trace_irq_disable+0x3b/0x150 [ 273.473618][T11865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.473633][T11865] ? clear_bhb_loop+0x40/0x90 [ 273.473652][T11865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.473666][T11865] RIP: 0033:0x7f4242f9c799 [ 273.473681][T11865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.473693][T11865] RSP: 002b:00007f4243ec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.473710][T11865] RAX: ffffffffffffffda RBX: 00007f4243215fa0 RCX: 00007f4242f9c799 [ 273.473721][T11865] RDX: 0000200000000240 RSI: 00000000000089f6 RDI: 0000000000000003 [ 273.473730][T11865] RBP: 00007f4243ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 273.473739][T11865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.473748][T11865] R13: 00007f4243216038 R14: 00007f4243215fa0 R15: 00007ffe8117fcd8 [ 273.473772][T11865] [ 273.473783][T11865] ERROR: Out of memory at tomoyo_realpath_from_path. [ 273.776269][T11877] batadv1: entered allmulticast mode [ 273.940609][T11886] bond0: option packets_per_slave: invalid value (18446744073709551615) [ 273.952457][T11886] bond0: option packets_per_slave: allowed values 0 - 65535 [ 273.964222][T11886] bond0 (unregistering): Released all slaves [ 274.222370][T11903] bridge0: port 3(dummy0) entered disabled state [ 274.229427][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.238485][T11903] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.251498][T11907] FAULT_INJECTION: forcing a failure. [ 274.251498][T11907] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 274.278730][T11907] CPU: 0 UID: 0 PID: 11907 Comm: syz.0.1635 Not tainted syzkaller #0 PREEMPT(full) [ 274.278828][T11907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 274.278839][T11907] Call Trace: [ 274.278846][T11907] [ 274.278854][T11907] dump_stack_lvl+0xe8/0x150 [ 274.278885][T11907] should_fail_ex+0x412/0x560 [ 274.278915][T11907] _copy_from_iter+0x1d3/0x1670 [ 274.278946][T11907] ? rcu_is_watching+0x15/0xb0 [ 274.278974][T11907] ? __pfx__copy_from_iter+0x10/0x10 [ 274.279007][T11907] ? netlink_sendmsg+0x650/0xb40 [ 274.279031][T11907] ? skb_put+0x11b/0x210 [ 274.279050][T11907] netlink_sendmsg+0x6c0/0xb40 [ 274.279079][T11907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.279107][T11907] ? aa_sock_msg_perm+0xf1/0x1b0 [ 274.279131][T11907] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.279151][T11907] ____sys_sendmsg+0x972/0x9f0 [ 274.279178][T11907] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.279203][T11907] ? import_iovec+0x73/0xa0 [ 274.279222][T11907] ___sys_sendmsg+0x2a5/0x360 [ 274.279246][T11907] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.279292][T11907] ? __fget_files+0x2a/0x420 [ 274.279316][T11907] ? __fget_files+0x3a0/0x420 [ 274.279351][T11907] __x64_sys_sendmsg+0x1bd/0x2a0 [ 274.279373][T11907] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.279400][T11907] ? __pfx_ksys_write+0x10/0x10 [ 274.279430][T11907] do_syscall_64+0x14d/0xf80 [ 274.279449][T11907] ? trace_irq_disable+0x3b/0x150 [ 274.279474][T11907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.279492][T11907] ? clear_bhb_loop+0x40/0x90 [ 274.279513][T11907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.279573][T11907] RIP: 0033:0x7f3f1a59c799 [ 274.279594][T11907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.279609][T11907] RSP: 002b:00007f3f1b53c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.279628][T11907] RAX: ffffffffffffffda RBX: 00007f3f1a815fa0 RCX: 00007f3f1a59c799 [ 274.279641][T11907] RDX: 0000000000004000 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 274.279652][T11907] RBP: 00007f3f1b53c090 R08: 0000000000000000 R09: 0000000000000000 [ 274.279663][T11907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.279672][T11907] R13: 00007f3f1a816038 R14: 00007f3f1a815fa0 R15: 00007ffeaa159988 [ 274.279701][T11907] [ 274.553247][T11913] FAULT_INJECTION: forcing a failure. [ 274.553247][T11913] name failslab, interval 1, probability 0, space 0, times 0 [ 274.664822][T11913] CPU: 1 UID: 0 PID: 11913 Comm: syz.1.1636 Not tainted syzkaller #0 PREEMPT(full) [ 274.664849][T11913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 274.664860][T11913] Call Trace: [ 274.664867][T11913] [ 274.664875][T11913] dump_stack_lvl+0xe8/0x150 [ 274.664907][T11913] should_fail_ex+0x412/0x560 [ 274.664939][T11913] should_failslab+0xa8/0x100 [ 274.664965][T11913] __kmalloc_noprof+0xe8/0x760 [ 274.664986][T11913] ? tomoyo_encode+0x28b/0x550 [ 274.665020][T11913] tomoyo_encode+0x28b/0x550 [ 274.665050][T11913] tomoyo_realpath_from_path+0x58d/0x5d0 [ 274.665087][T11913] ? tomoyo_path_number_perm+0x219/0x630 [ 274.665111][T11913] tomoyo_path_number_perm+0x246/0x630 [ 274.665138][T11913] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 274.665165][T11913] ? __lock_acquire+0x6b5/0x2cf0 [ 274.665201][T11913] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 274.665243][T11913] ? __fget_files+0x2a/0x420 [ 274.665273][T11913] ? __fget_files+0x2a/0x420 [ 274.665298][T11913] ? __fget_files+0x3a0/0x420 [ 274.665324][T11913] ? __fget_files+0x2a/0x420 [ 274.665354][T11913] security_file_ioctl+0xc3/0x2a0 [ 274.665380][T11913] __se_sys_ioctl+0x47/0x170 [ 274.665405][T11913] do_syscall_64+0x14d/0xf80 [ 274.665425][T11913] ? trace_irq_disable+0x3b/0x150 [ 274.665451][T11913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.665470][T11913] ? clear_bhb_loop+0x40/0x90 [ 274.665493][T11913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.665511][T11913] RIP: 0033:0x7f4242f9c799 [ 274.665528][T11913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.665550][T11913] RSP: 002b:00007f4243ec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.665570][T11913] RAX: ffffffffffffffda RBX: 00007f4243215fa0 RCX: 00007f4242f9c799 [ 274.665583][T11913] RDX: 0000200000000240 RSI: 00000000000089f6 RDI: 0000000000000003 [ 274.665595][T11913] RBP: 00007f4243ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 274.665606][T11913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.665617][T11913] R13: 00007f4243216038 R14: 00007f4243215fa0 R15: 00007ffe8117fcd8 [ 274.665648][T11913] [ 274.665668][T11913] ERROR: Out of memory at tomoyo_realpath_from_path. [ 274.911824][T11930] x_tables: duplicate underflow at hook 2 [ 275.105285][T11942] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 275.221380][T11949] FAULT_INJECTION: forcing a failure. [ 275.221380][T11949] name failslab, interval 1, probability 0, space 0, times 0 [ 275.235444][T11949] CPU: 0 UID: 0 PID: 11949 Comm: syz.3.1648 Not tainted syzkaller #0 PREEMPT(full) [ 275.235474][T11949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 275.235485][T11949] Call Trace: [ 275.235492][T11949] [ 275.235500][T11949] dump_stack_lvl+0xe8/0x150 [ 275.235549][T11949] should_fail_ex+0x412/0x560 [ 275.235582][T11949] should_failslab+0xa8/0x100 [ 275.235608][T11949] ? skb_clone+0x212/0x3a0 [ 275.235631][T11949] kmem_cache_alloc_noprof+0x87/0x650 [ 275.235650][T11949] ? __netlink_lookup+0xc6/0x8b0 [ 275.235676][T11949] skb_clone+0x212/0x3a0 [ 275.235698][T11949] __netlink_deliver_tap+0x404/0x850 [ 275.235732][T11949] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.235756][T11949] netlink_deliver_tap+0x19c/0x1b0 [ 275.235781][T11949] netlink_unicast+0x7e3/0x9b0 [ 275.235815][T11949] ? __pfx_netlink_unicast+0x10/0x10 [ 275.235841][T11949] ? netlink_sendmsg+0x650/0xb40 [ 275.235866][T11949] ? skb_put+0x11b/0x210 [ 275.235888][T11949] netlink_sendmsg+0x813/0xb40 [ 275.235924][T11949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.235954][T11949] ? aa_sock_msg_perm+0xf1/0x1b0 [ 275.235983][T11949] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 275.236012][T11949] ____sys_sendmsg+0x972/0x9f0 [ 275.236044][T11949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.236074][T11949] ? import_iovec+0x73/0xa0 [ 275.236100][T11949] ___sys_sendmsg+0x2a5/0x360 [ 275.236124][T11949] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.236172][T11949] ? __fget_files+0x2a/0x420 [ 275.236194][T11949] ? __fget_files+0x3a0/0x420 [ 275.236270][T11949] __x64_sys_sendmsg+0x1bd/0x2a0 [ 275.236292][T11949] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 275.236321][T11949] ? __pfx_ksys_write+0x10/0x10 [ 275.236350][T11949] do_syscall_64+0x14d/0xf80 [ 275.236370][T11949] ? trace_irq_disable+0x3b/0x150 [ 275.236393][T11949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.236411][T11949] ? clear_bhb_loop+0x40/0x90 [ 275.236432][T11949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.236449][T11949] RIP: 0033:0x7faa7259c799 [ 275.236467][T11949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.236482][T11949] RSP: 002b:00007faa7340d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.236503][T11949] RAX: ffffffffffffffda RBX: 00007faa72815fa0 RCX: 00007faa7259c799 [ 275.236516][T11949] RDX: 0000000000004000 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 275.236528][T11949] RBP: 00007faa7340d090 R08: 0000000000000000 R09: 0000000000000000 [ 275.236540][T11949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.236551][T11949] R13: 00007faa72816038 R14: 00007faa72815fa0 R15: 00007ffced6895f8 [ 275.236587][T11949] [ 275.547952][T11953] delete_channel: no stack [ 275.638328][T11966] FAULT_INJECTION: forcing a failure. [ 275.638328][T11966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.683157][T11966] CPU: 1 UID: 0 PID: 11966 Comm: syz.3.1655 Not tainted syzkaller #0 PREEMPT(full) [ 275.683186][T11966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 275.683197][T11966] Call Trace: [ 275.683205][T11966] [ 275.683214][T11966] dump_stack_lvl+0xe8/0x150 [ 275.683248][T11966] should_fail_ex+0x412/0x560 [ 275.683281][T11966] _copy_from_user+0x2d/0xb0 [ 275.683304][T11966] get_user_ifreq+0x6b/0x180 [ 275.683330][T11966] sock_ioctl+0x704/0x7f0 [ 275.683353][T11966] ? __pfx_sock_ioctl+0x10/0x10 [ 275.683375][T11966] ? __fget_files+0x3a0/0x420 [ 275.683401][T11966] ? __fget_files+0x2a/0x420 [ 275.683427][T11966] ? bpf_lsm_file_ioctl+0x9/0x20 [ 275.683450][T11966] ? __pfx_sock_ioctl+0x10/0x10 [ 275.683473][T11966] __se_sys_ioctl+0xfc/0x170 [ 275.683495][T11966] do_syscall_64+0x14d/0xf80 [ 275.683514][T11966] ? trace_irq_disable+0x3b/0x150 [ 275.683538][T11966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.683557][T11966] ? clear_bhb_loop+0x40/0x90 [ 275.683579][T11966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.683596][T11966] RIP: 0033:0x7faa7259c799 [ 275.683615][T11966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.683631][T11966] RSP: 002b:00007faa7340d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.683651][T11966] RAX: ffffffffffffffda RBX: 00007faa72815fa0 RCX: 00007faa7259c799 [ 275.683664][T11966] RDX: 0000200000000240 RSI: 00000000000089f6 RDI: 0000000000000003 [ 275.683675][T11966] RBP: 00007faa7340d090 R08: 0000000000000000 R09: 0000000000000000 [ 275.683687][T11966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.683698][T11966] R13: 00007faa72816038 R14: 00007faa72815fa0 R15: 00007ffced6895f8 [ 275.683726][T11966] [ 276.080369][T11977] syzkaller0: entered promiscuous mode [ 276.101695][T11977] syzkaller0: entered allmulticast mode [ 276.511781][T12018] FAULT_INJECTION: forcing a failure. [ 276.511781][T12018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.527158][T12018] CPU: 0 UID: 0 PID: 12018 Comm: syz.1.1669 Not tainted syzkaller #0 PREEMPT(full) [ 276.527184][T12018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 276.527196][T12018] Call Trace: [ 276.527204][T12018] [ 276.527213][T12018] dump_stack_lvl+0xe8/0x150 [ 276.527245][T12018] should_fail_ex+0x412/0x560 [ 276.527277][T12018] _copy_to_user+0x31/0xb0 [ 276.527299][T12018] simple_read_from_buffer+0xe1/0x170 [ 276.527330][T12018] proc_fail_nth_read+0x1bb/0x230 [ 276.527372][T12018] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.527402][T12018] ? rw_verify_area+0x2a6/0x4d0 [ 276.527422][T12018] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.527450][T12018] vfs_read+0x20c/0xa70 [ 276.527469][T12018] ? fdget_pos+0x246/0x320 [ 276.527494][T12018] ? __pfx_netdev_run_todo+0x10/0x10 [ 276.527522][T12018] ? __pfx___mutex_lock+0x10/0x10 [ 276.527545][T12018] ? __pfx_vfs_read+0x10/0x10 [ 276.527566][T12018] ? __fget_files+0x2a/0x420 [ 276.527597][T12018] ? __fget_files+0x3a0/0x420 [ 276.527623][T12018] ? __fget_files+0x2a/0x420 [ 276.527658][T12018] ksys_read+0x150/0x270 [ 276.527681][T12018] ? __pfx_ksys_read+0x10/0x10 [ 276.527700][T12018] ? __pfx_sock_ioctl+0x10/0x10 [ 276.527734][T12018] do_syscall_64+0x14d/0xf80 [ 276.527754][T12018] ? trace_irq_disable+0x3b/0x150 [ 276.527782][T12018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.527809][T12018] ? clear_bhb_loop+0x40/0x90 [ 276.527832][T12018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.527847][T12018] RIP: 0033:0x7f4242f5cfce [ 276.527862][T12018] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 276.527877][T12018] RSP: 002b:00007f4243ec5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 276.527897][T12018] RAX: ffffffffffffffda RBX: 00007f4243ec66c0 RCX: 00007f4242f5cfce [ 276.527911][T12018] RDX: 000000000000000f RSI: 00007f4243ec60a0 RDI: 0000000000000004 [ 276.527922][T12018] RBP: 00007f4243ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 276.527934][T12018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.527945][T12018] R13: 00007f4243216038 R14: 00007f4243215fa0 R15: 00007ffe8117fcd8 [ 276.527975][T12018] [ 276.800050][T11984] validate_nla: 3 callbacks suppressed [ 276.800071][T11984] netlink: 'syz.0.1659': attribute type 29 has an invalid length. [ 276.814700][T11984] netlink: 'syz.0.1659': attribute type 29 has an invalid length. [ 276.855898][T12026] netlink: 'syz.4.1672': attribute type 9 has an invalid length. [ 276.870294][T12028] __nla_validate_parse: 19 callbacks suppressed [ 276.870314][T12028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1671'. [ 276.893045][T12028] nbd: couldn't find a device at index 255 [ 276.925345][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1672'. [ 276.954479][T12031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1672'. [ 276.981975][T12031] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1672'. [ 276.992200][T12033] xt_TPROXY: Can be used only with -p tcp or -p udp [ 277.038951][T12033] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1673'. [ 277.237343][T12046] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1678'. [ 277.248261][T12046] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1678'. [ 277.259049][T12046] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1678'. [ 277.329680][T12047] geneve1: entered allmulticast mode [ 277.435255][T12054] netlink: 808 bytes leftover after parsing attributes in process `syz.2.1681'. [ 277.436329][T12053] netlink: 'syz.1.1679': attribute type 9 has an invalid length. [ 277.562765][T12061] veth0_to_bond: entered allmulticast mode [ 277.643852][T12065] net_ratelimit: 185 callbacks suppressed [ 277.643874][T12065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.079781][T12087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.127633][T12088] openvswitch: netlink: IP tunnel dst address not specified [ 278.342694][T12107] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1696'. [ 278.418824][T12110] netlink: 'syz.3.1701': attribute type 10 has an invalid length. [ 278.526592][T12115] openvswitch: netlink: Actions may not be safe on all matching packets [ 281.930111][ T66] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 300.001272][T12192] syzkaller0: entered promiscuous mode [ 300.007793][T12192] syzkaller0: entered allmulticast mode [ 300.195182][T12210] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 300.209665][T12214] SET target dimension over the limit! [ 300.364245][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.372810][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.393489][T12225] __nla_validate_parse: 1 callbacks suppressed [ 300.393507][T12225] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1727'. [ 300.417441][T12227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.648032][T12236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1731'. [ 301.271436][T12274] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 301.515678][T12290] syzkaller0: entered promiscuous mode [ 301.521341][T12294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1748'. [ 301.524497][T12290] syzkaller0: entered allmulticast mode [ 301.555867][T12294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1748'. [ 301.585339][T12294] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1748'. [ 301.788573][T12307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1751'. [ 301.831471][T12309] netlink: 'syz.4.1751': attribute type 1 has an invalid length. [ 301.888242][T12309] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 302.119406][T12327] syzkaller1: entered promiscuous mode [ 302.135158][T12327] syzkaller1: entered allmulticast mode [ 302.152502][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1756'. [ 302.267535][T12335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1760'. [ 302.329966][T12339] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1761'. [ 302.375897][T12339] netlink: 'syz.4.1761': attribute type 7 has an invalid length. [ 302.445511][T12346] syzkaller0: entered promiscuous mode [ 302.458102][T12346] syzkaller0: entered allmulticast mode [ 302.530470][T12351] netlink: 'syz.0.1765': attribute type 1 has an invalid length. [ 302.549845][T12351] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 302.595800][T12356] netlink: 'syz.1.1766': attribute type 1 has an invalid length. [ 302.655402][T12356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.698547][T12363] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 302.808640][T12356] 8021q: adding VLAN 0 to HW filter on device bond8 [ 302.818235][T12356] bond0: (slave bond8): Enslaving as an active interface with a down link [ 303.264459][T12405] netlink: 'syz.4.1782': attribute type 4 has an invalid length. [ 303.361553][T12409] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1783'. [ 303.378111][T12411] siw: device registration error -23 [ 303.987090][T12446] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 304.002499][T12446] team0: Device macvlan2 is already an upper device of the team interface [ 304.023284][T12453] IPv6: NLM_F_CREATE should be specified when creating new route [ 304.036949][T12453] syzkaller0: entered promiscuous mode [ 304.044361][T12453] syzkaller0: entered allmulticast mode [ 304.069074][T12455] veth0: entered promiscuous mode [ 304.088754][T12444] tipc: Enabled bearer , priority 0 [ 304.125538][T12443] tipc: Resetting bearer [ 304.225724][T12443] tipc: Disabling bearer [ 304.274418][T12457] veth0: left promiscuous mode [ 304.528686][T12482] netlink: 'syz.0.1810': attribute type 3 has an invalid length. [ 304.549428][T12478] syzkaller0: entered promiscuous mode [ 304.555919][T12478] syzkaller0: entered allmulticast mode [ 304.671828][T12485] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 306.555052][T12511] SET target dimension over the limit! [ 306.614547][T12516] macsec0: entered promiscuous mode [ 306.633009][T12516] macsec0: entered allmulticast mode [ 306.694274][T12516] veth1_macvtap: entered allmulticast mode [ 306.700390][T12521] __nla_validate_parse: 6 callbacks suppressed [ 306.700410][T12521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1820'. [ 306.717353][T12516] macsec0: left promiscuous mode [ 306.722512][T12516] macsec0: left allmulticast mode [ 306.733527][T12516] veth1_macvtap: left allmulticast mode [ 307.024404][T12543] netlink: 'syz.4.1828': attribute type 1 has an invalid length. [ 307.079986][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1828'. [ 307.111036][T12543] 8021q: adding VLAN 0 to HW filter on device bond6 [ 307.167424][T12559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1832'. [ 307.377067][T12574] xt_hashlimit: max too large, truncated to 1048576 [ 307.540517][T12578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1838'. [ 307.705027][T12593] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.1843'. [ 307.746863][T12596] syzkaller1: entered promiscuous mode [ 307.764465][T12596] syzkaller1: entered allmulticast mode [ 307.826573][T12600] IPVS: Unknown mcast interface: vcan0 [ 307.865952][T12599] IPVS: Unknown mcast interface: vcan0 [ 307.904341][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1848'. [ 308.054146][T12615] netlink: 'syz.0.1852': attribute type 1 has an invalid length. [ 308.069600][T12618] batadv_slave_1: default FDB implementation only supports local addresses [ 308.129830][T12615] 8021q: adding VLAN 0 to HW filter on device bond9 [ 308.214861][T12621] bond9: (slave veth11): Enslaving as an active interface with a down link [ 308.575606][T12648] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1863'. [ 308.996284][T12663] syzkaller0: entered promiscuous mode [ 309.002184][T12663] syzkaller0: entered allmulticast mode [ 309.214194][T12672] netlink: 'syz.4.1869': attribute type 4 has an invalid length. [ 309.415489][T12650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.430241][T12676] netlink: 'syz.1.1870': attribute type 1 has an invalid length. [ 309.445288][T12676] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1870'. [ 309.456730][T12676] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1870'. [ 309.467033][T12676] netlink: 'syz.1.1870': attribute type 1 has an invalid length. [ 309.491256][T12676] netlink: 'syz.1.1870': attribute type 8 has an invalid length. [ 309.526420][T12676] netlink: 606 bytes leftover after parsing attributes in process `syz.1.1870'. [ 309.972129][T12715] delete_channel: no stack [ 310.078979][T12212] udevd[12212]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 310.130612][T12729] tipc: Invalid UDP bearer configuration [ 310.130663][T12729] tipc: Enabling of bearer rejected, failed to enable media [ 310.134833][T12725] udevd[12725]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 310.466489][T12754] bond0: entered allmulticast mode [ 310.819786][T12779] bridge_slave_0: left allmulticast mode [ 310.825865][T12779] bridge_slave_0: left promiscuous mode [ 310.832138][T12779] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.859945][T12779] bridge_slave_1: left allmulticast mode [ 310.865839][T12779] bridge_slave_1: left promiscuous mode [ 310.871834][T12779] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.884267][T12779] bond0: (slave veth0_to_bond): Releasing active interface [ 310.891681][T12779] bond0: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 310.926940][T12779] team0: Port device team_slave_0 removed [ 310.946284][T12779] team0: Port device team_slave_1 removed [ 310.960586][T12779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.991970][T12779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.023960][T12779] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 311.070397][T12787] syzkaller1: entered promiscuous mode [ 311.092997][T12787] syzkaller1: entered allmulticast mode [ 311.198159][T12786] syzkaller1: entered promiscuous mode [ 311.207462][T12786] syzkaller1: entered allmulticast mode [ 311.223609][T12801] macvlan3: entered allmulticast mode [ 311.230823][T12786] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 311.239606][T12801] hsr0: entered allmulticast mode [ 311.246762][T12801] hsr_slave_0: entered allmulticast mode [ 311.275042][T12801] hsr_slave_1: entered allmulticast mode [ 311.466767][T12810] sctp: [Deprecated]: syz.4.1914 (pid 12810) Use of int in max_burst socket option. [ 311.466767][T12810] Use struct sctp_assoc_value instead [ 311.611577][T12821] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 311.639797][T12814] lo speed is unknown, defaulting to 1000 [ 311.765440][T12833] __nla_validate_parse: 10 callbacks suppressed [ 311.765460][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1920'. [ 311.798640][T12832] netlink: 'syz.4.1921': attribute type 1 has an invalid length. [ 311.873543][T12839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1921'. [ 312.697231][T12846] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1926'. [ 312.835842][T12864] syzkaller1: entered promiscuous mode [ 312.855175][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 312.869347][T12864] syzkaller1: entered allmulticast mode [ 312.958745][T12869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1933'. [ 313.032023][T12879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1936'. [ 313.562735][T12912] netlink: zone id is out of range [ 313.582155][T12912] netlink: zone id is out of range [ 313.610009][T12912] netlink: zone id is out of range [ 313.656406][T12912] netlink: zone id is out of range [ 313.661565][T12912] netlink: zone id is out of range [ 313.717467][T12919] netlink: 'syz.3.1949': attribute type 1 has an invalid length. [ 313.722389][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1948'. [ 313.736318][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1948'. [ 313.752123][T12912] netlink: zone id is out of range [ 313.766306][T12912] netlink: zone id is out of range [ 313.771522][T12912] netlink: zone id is out of range [ 313.777936][T12912] netlink: zone id is out of range [ 313.865018][T12919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1949'. [ 313.868833][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1951'. [ 314.031266][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1953'. [ 314.159744][T12939] Unsupported ieee802154 address type: 0 [ 314.322776][T12961] veth11: entered promiscuous mode [ 315.000588][T12994] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 315.024823][T12994] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 317.124516][T12946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 317.298491][T13008] net_ratelimit: 5 callbacks suppressed [ 317.298519][T13008] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 317.378832][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.385430][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.416683][T13016] __nla_validate_parse: 5 callbacks suppressed [ 317.416701][T13016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1974'. [ 317.634455][T13029] netlink: 'syz.0.1978': attribute type 1 has an invalid length. [ 317.813245][T13044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.479508][T13085] syzkaller0: entered promiscuous mode [ 318.485568][T13085] syzkaller0: entered allmulticast mode [ 318.495120][T13085] netlink: 'syz.3.2001': attribute type 1 has an invalid length. [ 318.505984][T13085] TC_ACT_REPEAT abuse ? [ 319.052032][T13097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.064124][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2004'. [ 319.105432][T13099] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2005'. [ 319.116691][T13100] netlink: 'syz.2.2004': attribute type 1 has an invalid length. [ 319.127488][T13100] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2004'. [ 319.246897][T13106] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2005'. [ 319.271465][T13110] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2007'. [ 321.425987][T13080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.626535][T13123] bridge0: port 3(syz_tun) entered blocking state [ 321.642359][T13123] bridge0: port 3(syz_tun) entered disabled state [ 321.662410][T13123] syz_tun: entered allmulticast mode [ 321.680253][T13123] syz_tun: entered promiscuous mode [ 321.704053][T13123] bridge0: port 3(syz_tun) entered blocking state [ 321.709634][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2013'. [ 321.711152][T13123] bridge0: port 3(syz_tun) entered forwarding state [ 321.769163][T13121] lo speed is unknown, defaulting to 1000 [ 321.895511][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2016'. [ 321.906064][T13137] tipc: Invalid UDP bearer configuration [ 321.906217][T13137] tipc: Enabling of bearer rejected, failed to enable media [ 322.189822][T13151] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2020'. [ 322.307554][T13158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2023'. [ 322.547683][T13171] vlan5: entered promiscuous mode [ 322.579955][T13171] bridge0: entered promiscuous mode [ 323.156073][T13204] IPv6: NLM_F_REPLACE set, but no existing node found! [ 323.174242][T13199] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 323.230368][T13193] lo speed is unknown, defaulting to 1000 [ 323.240684][T13209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2041'. [ 323.392578][T13217] netlink: 'syz.3.2044': attribute type 26 has an invalid length. [ 323.406278][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2044'. [ 323.414578][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2042'. [ 323.443069][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2042'. [ 323.475811][T13217] netlink: 'syz.3.2044': attribute type 26 has an invalid length. [ 323.542546][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2046'. [ 323.552143][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2046'. [ 323.584505][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2044'. [ 323.750927][T13230] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2050'. [ 323.779582][T13190] lo speed is unknown, defaulting to 1000 [ 324.248520][T13254] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2059'. [ 324.264126][T13254] bridge0: port 1(0x9) entered disabled state [ 324.298545][T13256] netlink: 'syz.2.2060': attribute type 4 has an invalid length. [ 324.472113][T13262] macsec2: entered allmulticast mode [ 324.612638][T13266] tap0: tun_chr_ioctl cmd 1074025680 [ 324.933691][T13283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2072'. [ 325.289414][T13299] ------------[ cut here ]------------ [ 325.295384][T13299] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 325.309178][T13299] WARNING: net/sched/cls_u32.c:855 at u32_change+0x1da0/0x2720, CPU#0: syz.1.2079/13299 [ 325.320025][T13299] Modules linked in: [ 325.325209][T13299] CPU: 0 UID: 0 PID: 13299 Comm: syz.1.2079 Not tainted syzkaller #0 PREEMPT(full) [ 325.335123][T13299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.345940][T13299] RIP: 0010:u32_change+0x1daf/0x2720 [ 325.352514][T13299] Code: 3d ca 78 43 06 01 75 33 e8 5e 93 0d f8 eb 50 e8 57 93 0d f8 48 8d 3d f0 a9 68 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 00 83 e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 32 93 0d f8 eb 24 e8 2b 93 0d f8 [ 325.374252][T13299] RSP: 0018:ffffc9000e9f6fc0 EFLAGS: 00010283 [ 325.380376][T13299] RAX: ffffffff89b80da9 RBX: ffff88807b715400 RCX: 0000000000000010 [ 325.388781][T13299] RDX: ffffffff8ce18300 RSI: 0000000000000020 RDI: ffffffff9020b7a0 [ 325.397216][T13299] RBP: ffffc9000e9f7178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 325.405519][T13299] R10: dffffc0000000000 R11: ffffed10170c8171 R12: ffff88807b7144e8 [ 325.413603][T13299] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 325.422250][T13299] FS: 00007f4243ec66c0(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000 [ 325.431379][T13299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.438407][T13299] CR2: 0000000000000008 CR3: 0000000047898000 CR4: 00000000003526f0 [ 325.446597][T13299] Call Trace: [ 325.450456][T13299] [ 325.453954][T13299] ? __pfx_u32_change+0x10/0x10 [ 325.458837][T13299] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 325.464802][T13299] tc_new_tfilter+0xff8/0x1780 [ 325.469819][T13299] ? __pfx_tc_new_tfilter+0x10/0x10 [ 325.475261][T13299] ? is_bpf_text_address+0x26/0x2b0 [ 325.480527][T13299] ? __pfx_tc_new_tfilter+0x10/0x10 [ 325.485810][T13299] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 325.490792][T13299] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 325.496265][T13299] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 325.501763][T13299] ? __lock_acquire+0x6b5/0x2cf0 [ 325.506845][T13299] netlink_rcv_skb+0x232/0x4b0 [ 325.511769][T13299] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 325.513473][T13302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.517418][T13299] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 325.531960][T13299] ? netlink_deliver_tap+0x2e/0x1b0 [ 325.537630][T13299] netlink_unicast+0x80f/0x9b0 [ 325.542631][T13299] ? __pfx_netlink_unicast+0x10/0x10 [ 325.548030][T13299] ? netlink_sendmsg+0x650/0xb40 [ 325.553940][T13299] ? skb_put+0x11b/0x210 [ 325.558259][T13299] netlink_sendmsg+0x813/0xb40 [ 325.563828][T13299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.569178][T13299] ? aa_sock_msg_perm+0xf1/0x1b0 [ 325.574238][T13299] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 325.579605][T13299] ____sys_sendmsg+0x972/0x9f0 [ 325.584497][T13299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.589924][T13299] ? import_iovec+0x73/0xa0 [ 325.595413][T13299] ___sys_sendmsg+0x2a5/0x360 [ 325.600153][T13299] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.606231][T13299] ? __pfx_futex_wake_mark+0x10/0x10 [ 325.611593][T13299] ? __fget_files+0x2a/0x420 [ 325.616361][T13299] ? __fget_files+0x3a0/0x420 [ 325.621100][T13299] __sys_sendmmsg+0x27c/0x4e0 [ 325.626285][T13299] ? __pfx___sys_sendmmsg+0x10/0x10 [ 325.631521][T13299] ? do_futex+0x333/0x420 [ 325.636171][T13299] ? rcu_is_watching+0x15/0xb0 [ 325.641024][T13299] __x64_sys_sendmmsg+0xa0/0xc0 [ 325.645985][T13299] do_syscall_64+0x14d/0xf80 [ 325.650612][T13299] ? trace_irq_disable+0x3b/0x150 [ 325.656644][T13299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.662760][T13299] ? clear_bhb_loop+0x40/0x90 [ 325.667954][T13299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.673963][T13299] RIP: 0033:0x7f4242f9c799 [ 325.678407][T13299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.698809][T13299] RSP: 002b:00007f4243ec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 325.707426][T13299] RAX: ffffffffffffffda RBX: 00007f4243215fa0 RCX: 00007f4242f9c799 [ 325.715479][T13299] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 325.723762][T13299] RBP: 00007f4243032c99 R08: 0000000000000000 R09: 0000000000000000 [ 325.731763][T13299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.740192][T13299] R13: 00007f4243216038 R14: 00007f4243215fa0 R15: 00007ffe8117fcd8 [ 325.748444][T13299] [ 325.751483][T13299] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 325.758868][T13299] CPU: 0 UID: 0 PID: 13299 Comm: syz.1.2079 Not tainted syzkaller #0 PREEMPT(full) [ 325.768254][T13299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.778511][T13299] Call Trace: [ 325.781811][T13299] [ 325.784761][T13299] vpanic+0x56c/0xa60 [ 325.788782][T13299] ? __pfx__printk+0x10/0x10 [ 325.793369][T13299] ? __pfx_vpanic+0x10/0x10 [ 325.797898][T13299] ? is_bpf_text_address+0x292/0x2b0 [ 325.803288][T13299] ? is_bpf_text_address+0x26/0x2b0 [ 325.808518][T13299] panic+0xc5/0xd0 [ 325.812246][T13299] ? __pfx_panic+0x10/0x10 [ 325.816687][T13299] __warn+0x315/0x4f0 [ 325.820673][T13299] ? u32_change+0x1da0/0x2720 [ 325.825350][T13299] ? u32_change+0x1da0/0x2720 [ 325.830110][T13299] __report_bug+0x29a/0x540 [ 325.835786][T13299] ? ___sys_sendmsg+0x2a5/0x360 [ 325.840651][T13299] ? __sys_sendmmsg+0x27c/0x4e0 [ 325.845498][T13299] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 325.850531][T13299] ? u32_change+0x1da0/0x2720 [ 325.855223][T13299] ? __pfx___report_bug+0x10/0x10 [ 325.860270][T13299] report_bug_entry+0x19a/0x290 [ 325.865125][T13299] ? u32_change+0x1daf/0x2720 [ 325.869891][T13299] ? u32_change+0x1db4/0x2720 [ 325.874566][T13299] handle_bug+0xce/0x200 [ 325.878853][T13299] exc_invalid_op+0x1a/0x50 [ 325.883408][T13299] asm_exc_invalid_op+0x1a/0x20 [ 325.888280][T13299] RIP: 0010:u32_change+0x1daf/0x2720 [ 325.893575][T13299] Code: 3d ca 78 43 06 01 75 33 e8 5e 93 0d f8 eb 50 e8 57 93 0d f8 48 8d 3d f0 a9 68 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 00 83 e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 32 93 0d f8 eb 24 e8 2b 93 0d f8 [ 325.913991][T13299] RSP: 0018:ffffc9000e9f6fc0 EFLAGS: 00010283 [ 325.920689][T13299] RAX: ffffffff89b80da9 RBX: ffff88807b715400 RCX: 0000000000000010 [ 325.928852][T13299] RDX: ffffffff8ce18300 RSI: 0000000000000020 RDI: ffffffff9020b7a0 [ 325.937665][T13299] RBP: ffffc9000e9f7178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 325.945744][T13299] R10: dffffc0000000000 R11: ffffed10170c8171 R12: ffff88807b7144e8 [ 325.954512][T13299] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 325.962515][T13299] ? u32_change+0x1d99/0x2720 [ 325.967239][T13299] ? __pfx_u32_change+0x10/0x10 [ 325.972097][T13299] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 325.977947][T13299] tc_new_tfilter+0xff8/0x1780 [ 325.982783][T13299] ? __pfx_tc_new_tfilter+0x10/0x10 [ 325.988119][T13299] ? is_bpf_text_address+0x26/0x2b0 [ 325.993370][T13299] ? __pfx_tc_new_tfilter+0x10/0x10 [ 325.998633][T13299] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 326.003908][T13299] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 326.009140][T13299] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 326.014637][T13299] ? __lock_acquire+0x6b5/0x2cf0 [ 326.019908][T13299] netlink_rcv_skb+0x232/0x4b0 [ 326.024749][T13299] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 326.030328][T13299] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.035825][T13299] ? netlink_deliver_tap+0x2e/0x1b0 [ 326.041904][T13299] netlink_unicast+0x80f/0x9b0 [ 326.046788][T13299] ? __pfx_netlink_unicast+0x10/0x10 [ 326.052092][T13299] ? netlink_sendmsg+0x650/0xb40 [ 326.057049][T13299] ? skb_put+0x11b/0x210 [ 326.061318][T13299] netlink_sendmsg+0x813/0xb40 [ 326.066151][T13299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.071459][T13299] ? aa_sock_msg_perm+0xf1/0x1b0 [ 326.076430][T13299] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 326.081797][T13299] ____sys_sendmsg+0x972/0x9f0 [ 326.086621][T13299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.093000][T13299] ? import_iovec+0x73/0xa0 [ 326.097626][T13299] ___sys_sendmsg+0x2a5/0x360 [ 326.102634][T13299] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.108926][T13299] ? __pfx_futex_wake_mark+0x10/0x10 [ 326.114430][T13299] ? __fget_files+0x2a/0x420 [ 326.119072][T13299] ? __fget_files+0x3a0/0x420 [ 326.123849][T13299] __sys_sendmmsg+0x27c/0x4e0 [ 326.128528][T13299] ? __pfx___sys_sendmmsg+0x10/0x10 [ 326.133732][T13299] ? do_futex+0x333/0x420 [ 326.138196][T13299] ? rcu_is_watching+0x15/0xb0 [ 326.143329][T13299] __x64_sys_sendmmsg+0xa0/0xc0 [ 326.149085][T13299] do_syscall_64+0x14d/0xf80 [ 326.153703][T13299] ? trace_irq_disable+0x3b/0x150 [ 326.158754][T13299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.164852][T13299] ? clear_bhb_loop+0x40/0x90 [ 326.169650][T13299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.175568][T13299] RIP: 0033:0x7f4242f9c799 [ 326.179990][T13299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.199600][T13299] RSP: 002b:00007f4243ec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 326.208018][T13299] RAX: ffffffffffffffda RBX: 00007f4243215fa0 RCX: 00007f4242f9c799 [ 326.216005][T13299] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 326.224150][T13299] RBP: 00007f4243032c99 R08: 0000000000000000 R09: 0000000000000000 [ 326.232787][T13299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.240890][T13299] R13: 00007f4243216038 R14: 00007f4243215fa0 R15: 00007ffe8117fcd8 [ 326.249447][T13299] [ 326.252813][T13299] Kernel Offset: disabled [ 326.257150][T13299] Rebooting in 86400 seconds..