last executing test programs: 3.126243942s ago: executing program 3 (id=7211): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f00000000c0)=0x80, 0x80000) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x140, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="620ed3752a17"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xbf80}, @NL80211_ATTR_IE={0xf3, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xfe, 0x9}}, @prep={0x83, 0x1f, {{}, 0xf, 0x4, @device_b, 0x1, @void, 0x8, 0x7fff, @device_b, 0x8}}, @random={0x0, 0xc3, "4092785a9f5b04f77b1a64286f074410139f9cf1a194ff0511ebe1cca5ddf1b1e3ca488dec170032ef2adfc84c2b5e2fc4327848b6957d937609138153dba8cf7fd2550b040baa3274d123a92585865c82964d70d30c637446a20975345ec1d9d5f9e0020875b5c7525fed9e6fda07ec733229fc9945949012896853919d91429cc4aa440ea3cfd411b72db563a8701a8288ac2a15de1d0aaceb9e2f7ebbae81c6681d69084a3ee479d445686db7e0f832d0433f580f4a5ef447bede424f862f8e10d2"}]}]}, 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x20000040) (async) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async) sendmsg$inet(r3, &(0x7f0000002680)={&(0x7f0000001100)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f00000025c0)=[{&(0x7f0000001180)="7cd4667333b701cc4dbae17bcb01d654dc1bbc6f444c11570f0c4027106e5a84f8ba976f529de47809aee4dd990cd6f8dba20faace0c13fe470e930deba929329fcb37616c54620eb83789b8ac9cb023239472b59cee8be7f0defc64b6faba59cf464c04c251fc24ef44564c2a6d59826c2333442dfc951b71593b0476595642d997c3fb79e84c561f9a541f6762748cbca5cd80b2ba35020c136b70717873d0f353b69bd6de5115701d67f8e00b", 0xae}, {&(0x7f0000001240)="8c9e38ca09423dbcd7752968cfea1f2883248276534fcdca42c09017d0f91d60ef7988dcf21fff29202adfdf256f33be96708d85e497fd3e62c744206d8ae3f1974ea00baf37f4dd061516ce52b0689447ed3dfb494e8f36a9105f500213da99c954a4957fc551e58d0dc9bd8c4353bf9d55ce9be86d6929be1e", 0x7a}, {&(0x7f0000001340)="7dbb613b726c3dffa7b4a906d6ab0a8a0ca4464becb7f930a04becf101a9dbf6f7daff9af4e396987e7460d6a369276f7e092c7f0725929c60d79c83f633326c5a66d31214aa8e5a530ef07831b2e82519cd116cb69f0f6d613ce3a65b0aa79a18fee1a98091acf08b2c92298047cabfed011dd671e10eda3707fc00e313bfb54b55b83a6a1352a20925ef3c73efceae96076d6696ed8bd99203a0920c466e9a0528", 0xa2}, {0x0}], 0x4}, 0x5) 2.638804335s ago: executing program 2 (id=7219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = accept4(r1, &(0x7f0000000300)=@l2, &(0x7f0000000380)=0x80, 0x80000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'veth1_to_team\x00'}) unshare(0x22020400) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000280), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c0006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008841}, 0x20000000) 2.503723031s ago: executing program 2 (id=7221): r0 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000048000000000000009f97fa5c7c2ab5e70c0000000c0000000700000005000000000000060400000000000000006100"], 0x0, 0x2b, 0x0, 0x1}, 0x20) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x7c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x25, 0x1, 0x0) connect$inet(r6, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x8, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000040000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYBLOB="262e79f313a69ae688fdf35327fdf30e17d7f31ee6c791d738de64c1ea6e8f2f2065bba9f8b6f9686eff44260247decb3b8136321c1ce18729b689c8cd3f01215221b65424cfb5e5488b7638c47713cd3d574e3dd1c00d9fb65be65b42cd6e15228483fbd7e5f017188cc908b6ee46820369713f039f92e8af695b152da5819027cbd05937e6b5554007a60fec8f3558727931a33e51eafc4994f2c86d916e78b23a5f46acd34ed249110011f9871a33e0e4b00ac03f6b9eac567b4e", @ANYRESDEC=r6, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.26692613s ago: executing program 0 (id=7226): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="08d3e5389fd5", 0x6}], 0x1}, 0x2404c044) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r3, 0x952de000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) 2.182464288s ago: executing program 3 (id=7227): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000000000)="ece600", 0xfffffe5a}], 0x2, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001780)=""/121, 0x79}], 0x1}, 0x8}], 0x1, 0x2120, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xa1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@local, @in=@multicast2}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 2.008247684s ago: executing program 0 (id=7228): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x1fc}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4, @multicast2}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x1fc}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) (async) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4, @multicast2}, 0x2}}, 0x2e) (async) 2.007958837s ago: executing program 3 (id=7229): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x1) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001200)={0x60000010}) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) close(0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async, rerun: 64) write$tun(r1, &(0x7f0000000300)=ANY=[], 0x36) (rerun: 64) 1.720373875s ago: executing program 4 (id=7231): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x268, 0x138, 0x700001b, 0x148, 0x0, 0x148, 0x1d0, 0x206, 0x240, 0x1d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'bridge_slave_0\x00', 'veth0_to_bridge\x00', {0x101}, {}, 0x32, 0x1, 0x1}, 0x1ea, 0xd8, 0x138, 0x0, {0x390, 0x8f00}, [@common=@set={{0x40}, {{0x0, [0x5, 0x2, 0x1, 0x7, 0x5], 0x3}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0xb, [0x2d, 0x3d, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x21, 0x103, 0x1c, 0x4017, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x268, 0x138, 0x700001b, 0x148, 0x0, 0x148, 0x1d0, 0x206, 0x240, 0x1d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'bridge_slave_0\x00', 'veth0_to_bridge\x00', {0x101}, {}, 0x32, 0x1, 0x1}, 0x1ea, 0xd8, 0x138, 0x0, {0x390, 0x8f00}, [@common=@set={{0x40}, {{0x0, [0x5, 0x2, 0x1, 0x7, 0x5], 0x3}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0xb, [0x2d, 0x3d, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x21, 0x103, 0x1c, 0x4017, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') (async) 1.429674415s ago: executing program 4 (id=7234): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) close(0xffffffffffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f00000001c0)=0xffffffff, 0x4) close(0xffffffffffffffff) r3 = socket(0x8, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x8000, {{0xa, 0x4, 0x3, @mcast1={0xff, 0x7}, 0x5}}, {{0xa, 0x4e20, 0x100, @local}}}, 0x108) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) bpf$BPF_LINK_UPDATE(0x21, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x54, 0x24, 0x4, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfa, 0xf, 0x102, 0x3, 0x1, 0x3, 0x401}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="66db84a90e02", @ANYRES16=r7, @ANYBLOB="00012dbd7000ffdbdf25140000000800050000000000080008000000000205000c00000000000800160019050000080003008fdd00000800170001000000"], 0x44}}, 0x4010) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r7, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES64=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0}, 0x90) r10 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r10, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) 1.343849937s ago: executing program 0 (id=7236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000005200010200000000000000001c"], 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d300000000000000000000000140001006970365f767469300000dc45ce160000080007"], 0xf4}}, 0x0) 1.32994447s ago: executing program 3 (id=7237): r0 = socket$kcm(0x29, 0x7, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000680)=0x1, 0xe2) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$ax25(r5, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast]}, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8932, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r9, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r9, 0xa}, &(0x7f00000001c0)=0x8) 1.328126204s ago: executing program 2 (id=7238): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)}, 0x40000) 1.225488226s ago: executing program 1 (id=7239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="67f4fc18f29466791b4906669f2dbcbc2eb462c269d061df2650510d643cca40f47c4a41c10888b25446d67bf3fe89e3d774dd26d52ec2ee482377db1440f816f063fca7b5df8a5d", @ANYRES16=r1, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x4014}, 0x20000800) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000100)=@req3={0x1008000, 0x7fffffff, 0x8000, 0x6, 0x0, 0x1}, 0x1c) (async) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) r12 = socket$nl_crypto(0x10, 0x3, 0x15) write$nci(r7, &(0x7f0000000800)=ANY=[@ANYBLOB="410401", @ANYRES64=r12], 0x4) r13 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r14, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0xb8}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r4, 0x1, 0x470bd28, 0x4, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000094}, 0x80) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x69}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_PID={0x8, 0x52, r15}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x72}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x69}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc001}, 0x8080) (async) r16 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x4040004) 1.032222924s ago: executing program 2 (id=7240): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r2}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x9, @dev}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x0) 1.031366377s ago: executing program 4 (id=7241): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="07d98d396058a855921d034d0fb8034a5317ce586c382c8d41f8212309f82dd261e5f9263338a10244d7b49f8608f304ee79d951cd4ca8c44b84d8b2da6feb009a0d53224f69c7a037105aa12b36d0f2fa926dad5b4a129773ae0025ee2dccc42c4cc23ddd896f77e5b427f7950212eaeb0dd9c789f8def4d9fbf6274bbf72f31c5a548464395d9a68564fc12ef2196d7eac2b93ba137c89c360011aa0c15d2a0db9dfc760b6e069968685b051123d404ba4e94ccfdfebeaa7a30c8de388e00edff56b0c6968ec98e00ad8decf9dec77295a37e60510e906474b55034f7f6594c92e49dd422bb4346631b852e64add94f0ee30da8e199a89d8969df24601639c324ea084f8b00dbb3322aa7b1759fde71e4279841257c589725c12070d0cd41423d566d8b73b2936119519e31f4c8243e9207e688e77550867081b9b685d277a4800", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000910000507000000000000000016000000", @ANYRES32, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r7, 0x10c, 0x1, &(0x7f0000000080), 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@delchain={0x44, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8, 0x6, r2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) sendmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)='r', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000010c0)="f3", 0x1}], 0x1}}], 0x2, 0x20004841) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1100000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000003300)="18f7c840ad8bc9e85cef962e4ac41a17f12a3c06dcb085fb5feea14252737ef777259c79eaeae7cafa85c584168f6caf8fec42f40475ac41f3d0d8c573c4b6f1f767c8f0c42760d369b3700e432b655eae22e7d69bc37c10b9bff587e355f7daec1515afb49c71c5124c4000bb7caf2e2a9fb2aa0054c9dffba7ef595b1dfd349af155cd7addc87ed544d9cf35f1570a25e78e30d1a1e5b7646b1ac68b4439c0ce6d0d32a0c64c2f6a791bb3013c7a0b010f31", 0xb3) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x12, r12, {0x0, 0xf}, {0x99a30f7c9fee26c, 0xffff}, {0x2, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fff}]}, 0x2c}}, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000701fcffffff00000000017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) recvmmsg(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000000980)=""/200, 0xc8}, {&(0x7f00000005c0)=""/72, 0x48}, {&(0x7f00000006c0)=""/120, 0x78}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000740)=""/40, 0x28}, {&(0x7f0000000c40)=""/214, 0xd6}], 0x8, &(0x7f0000000d40)=""/92, 0x5c}, 0x6}, {{&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000e40)=""/159, 0x9f}, {&(0x7f0000000f00)=""/159, 0x9f}, {&(0x7f0000000fc0)=""/212, 0xd4}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x4}, 0x8}, {{&(0x7f0000003100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000000a80)}], 0x1, &(0x7f00000031c0)=""/102, 0x66}, 0x8}], 0x3, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r8, 0x58, &(0x7f0000000300)}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x38, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2100, 0x0, 0x30, 0x0, @opaque="0d87aedaaa7fc9a56dc2d42b221003a116fd256378e5e186d69b1c57326a7371394d0c6bae77d286"}}}}}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r8, &(0x7f0000000300), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000033c0)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x4f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2b, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) 1.030220267s ago: executing program 1 (id=7242): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000200)=0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x4000) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0xfffffa3c, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) 798.030585ms ago: executing program 2 (id=7243): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0) (async, rerun: 32) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r2, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050427bd7000fddbdf250100000008000100", @ANYRES32=r6], 0x60}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x99, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f00000002c0), 0x8, 0x28, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0x1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x8}}}]}, 0x40}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x114, r5, 0x2, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x2000c8c4}, 0x14) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUOTA_FLAGS={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xfc}}, 0x0) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000005600000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) recvmmsg(r0, 0x0, 0x0, 0x10002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) sendmsg$can_bcm(r0, 0x0, 0x0) 783.29738ms ago: executing program 1 (id=7244): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xfffffe08}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001a40), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001bc0)={0x6, 0x18, &(0x7f0000001900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, @generic={0x2, 0xe, 0xc, 0xe, 0x3bb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f00000019c0)='syzkaller\x00', 0xf920319, 0x40, &(0x7f0000001a00)=""/64, 0x41100, 0x29, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000001a80)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001ac0)={0x0, 0xe, 0x8000, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001b00)=[r0, r0, 0x1], &(0x7f0000001b40)=[{0x4, 0x2, 0x6, 0x4}, {0x5, 0x2, 0x1, 0xc}, {0x0, 0x2, 0xe, 0x8}, {0x1, 0x4, 0x8, 0x8}, {0x2, 0x2, 0x4}, {0x4, 0x5, 0xf, 0xb}], 0x10, 0x400}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000006c0)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f00000006c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r7}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x5, [@restrict={0x5, 0x0, 0x0, 0xb, 0x4}, @enum64={0x1, 0x5, 0x0, 0x13, 0x1, 0x0, [{0xa, 0x2, 0x1}, {0xe, 0x7, 0x1}, {0xd, 0x4, 0x7}, {0x6, 0xabc, 0x8001}, {0x4, 0x0, 0x4}]}, @fwd={0x10}, @func={0x6, 0x0, 0x0, 0xc, 0x5}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x4, 0x8}, @enum={0x2, 0x4, 0x0, 0x6, 0x4, [{0x0, 0x3}, {0x7, 0x7f}, {0xf, 0x1}, {0x3, 0x5}]}]}, {0x0, [0x30, 0x2e, 0x1f]}}, &(0x7f0000001700)=""/237, 0xc5, 0xed, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000700)=""/4096, 0x40f00, 0x4b, '\x00', r9, 0x25, r10, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xb, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001800)=[r0, r0, r6], 0x0, 0x10, 0xa}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 580.240333ms ago: executing program 1 (id=7245): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) listen(r0, 0x1ad72f7) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x12, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 533.242401ms ago: executing program 4 (id=7246): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000004c00088048000080200009801c000080060001000200007f0f000200ac1414aa05000300020000002400010000000000000000000000000000000000000000000000000000000000000000000800050001000000140002007767310000"], 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x1}}}, 0x24}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 462.102705ms ago: executing program 2 (id=7247): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0xfe, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='G', 0x1}], 0x1}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000001d80)={0x0, 0x0, 0x0}, 0x400c885) (async) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448c9, 0x0) 376.214485ms ago: executing program 0 (id=7248): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0xd, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000180)={0x0, 0x9, 0x1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r3, r2}, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r4) 374.744139ms ago: executing program 4 (id=7249): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0700000004000000080000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000001000000010000000000000000000858e648154884e8fc0a0ecd361ff2ed9ac7b01c3b90c4273a75dec86826a16be1b5248e2f17d155d3ef168455a00677949c3f25606ffff24534a5a5bfbaa499582d416d26e6497e5287f5584438b246de897f30896a9a4497fd6219d2dcc78ce88f9de3dcd4974a3b6d425dcf96552d29d7a0d81b43609d10c475e043d4ad5a42353cdf3b27349c484ed4c8aba639a818c93e7305dca2750fcb5c334e8ae77cb43632798fa772a24a5b602"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000500), &(0x7f0000000200)=@tcp}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000002c0)='rpm_return_int\x00', r1, 0x0, 0x8}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000002c0)='rpm_return_int\x00', r2, 0x0, 0x8}, 0x18) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x36, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4, 0xd7}, @nested={0x24, 0x1, 0x0, 0x1, [@generic="6e1f9788296f21a71fce1309abbc8fd3a3b6a2166b2769c8e7e5deb9c77d1f29"]}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c801}, 0x8080) 289.821702ms ago: executing program 0 (id=7250): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) syz_emit_ethernet(0x3b6, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000000000000000800ee00"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b0430509da61bfb02b3235e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d52cfb3f27fafb60845f90b6dfc87c6905bbc94d33e4575c853105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d517fb2cf1a4ffdc1b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r2}, 0x94) 259.200534ms ago: executing program 4 (id=7251): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r1 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x2c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007f00)={&(0x7f0000007d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x3, 0x2}]}, @struct]}, {0x0, [0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x42}, 0x20) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x84, 0x0, 0x9, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xd8, 0x138, 0x0, {0x390, 0x8f00}, [@common=@set={{0x40}, {{0x0, [0x5, 0x2, 0x1, 0x4, 0x5], 0x3}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000001800000000800000008000046898b5ba8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_skb, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 200.395445ms ago: executing program 3 (id=7252): unshare(0x400) r0 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 199.595989ms ago: executing program 1 (id=7253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) close(0x3) r3 = socket(0x27, 0xa, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0xfffa, 0xfff2}, {0x0, 0xffe0}, {0x10, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000006, 0xfffffc00, 0x7, 0x1, {0x8, 0x2, 0xfffb, 0x800, 0x6, 0x8}, {0xfc, 0x0, 0x0, 0xd, 0x4b, 0x800}, 0x4, 0x4, 0x9}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r6, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b00)="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", 0x487}, {&(0x7f0000000740)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0768021fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61f48eccfcc29d7f9e48743b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab14b2be9dbffffffff18bba0f0f85e2e6316ae1ed9a2a7d030df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a6e453a8a28cd5c4b733fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33c0bb3c24fa67c327cde47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f120790934c3b32f2f4777c65b15748267223cbde856fa5a33f12cb1ea51da9ce96881d1aa6d096ed6b23190800000081803a2119d9efd47b1abba3c1e6c563c1ec692da80ef66b19495b8e801d07b133f1b552ee772732a90e765b92d67f7a0cc8f15a4c6143f7cd3bda78fcfd8ba9fe0214cea54c441858b1a773d808141a724a7687aadd5f22fc415fe71b6a7cbb4613b62604cb81e24725e5cc652922095be2020aad9c4560593b7b28e4d10be4c8bdbc4ee06be8db6fe26988cc9e69302c385397af29357560c9d83c05ba58e138dbbf07e98f4aea8fcbe18d03d757f52cd019e385ae824155e8f3cf0021bf9be062196fa1ad2d9298a1a7443f9c80350baa9bf2d147a0fcb1246c896c94bae98c9ac8b9ac098937ff0323b422ed61d18019379474f48334d888c6c8e02d52b08314d7bc8a247ecae6405b43af982d57ab5bea37cb2d9605e7ae1450d5f722de9d17e5fc326c2693bace0ad59dedb4a26e5a8059cd66b503a5e1ed82228fab5ece019b6883bf172094e4005ceb3c89c100af668d21e7a584f8db55c706adfe8a3b90b9275253e163f96e7a85aefafe4932d901880b511413de82cc982c9747e77eef828356b5842749906b2489f050cca8158423aab15cf28bb5857d532f9c532505cc09efb2c3837549def3558abca99f3aed45", 0x3b8}, {&(0x7f00000006c0)}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x15) writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x2, 0x2, 0x2}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000002ece60cbcee5586dd6001011900161100fe80006870bf2e000000000000000000000000bbfe800000000000000000000000e800aa00030e22001690788203000000000000ffb0"], 0x0) recvmmsg(r8, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001500020027bd7000fcdbdf250208d50081a5b4f790a58b697e481010a939fef22c1207dcd8c3b113c50db33ffc3601167456561baa253d7451930f60dcfbe71fa98ba26932", @ANYRES32=0x0, @ANYBLOB="08000400e0000001"], 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x40000) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x400, 0x1, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x40000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 135.150673ms ago: executing program 3 (id=7254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4079, 0xfef}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0xa0001f98, 0xfe71, 0x1f00, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/123) 106.99439ms ago: executing program 1 (id=7255): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)={r0, 0xfe6b, 0x8b3d, "b251e5d152799d88d02e6b90e258cc8a61ac6ab5f61dc2f52641ac99965b8b5d60114cf09c798522f10454ab082c0b3c022947be001755a56e2ec47c2cd023aea5b201c5a404850d1b41fc0735cfd276434075c68966cfa65d91bf71b9bfdf302fa26ed40cf940320a6ebdd0ae6715d4160a220bbeadcd75c3969700d110be2e7a1d5d493ac5db38ef59c01bb73ab78b78"}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 0s ago: executing program 0 (id=7256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) (async) bind$alg(r11, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r11, 0x0, 0x0, 0x0) (async) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003a40)=@newtaction={0x1008, 0x30, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{0xff4, 0x1, [@m_ipt={0xff0, 0x16, 0x0, 0x0, {{0x8}, {0xf30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xf21, 0x6, {0x4, 'mangle\x00', 0x7, 0x400, "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"}}]}, {0x99, 0x6, "5a2d0e869135a294681ef6728f70a65a4ea0d645f71a0d1a9a99c024664f4e73dede9d72b43ee6f5534424a60fccbf0cff8dc2529390cafe31ae5e8e55770458f47742a28dc9de14a5353494a516788dde5f40b2d2c8250994240fd3480d4fa9b3074e615a9102ede5ec3696a39921db8b2af38d59d8dd9bc64c7ed82b6ea0101d87fa1a8a6b4ff8b4b9d8499e145429c162d8abca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1008}}, 0x4000000) recvmmsg$unix(r12, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) close(0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x91, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): over after parsing attributes in process `syz.2.5553'. [ 596.632726][T25769] tc_dump_action: action bad kind [ 597.201612][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 597.219568][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 597.229691][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 597.259234][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 597.271243][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 598.743462][T25784] chnl_net:caif_netlink_parms(): no params data found [ 599.107849][T25864] nbd: socks must be embedded in a SOCK_ITEM attr [ 599.117678][T25861] set_target_v0_checkentry: 55 callbacks suppressed [ 599.117699][T25861] Cannot find del_set index 1 as target [ 599.250152][T25784] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.268323][T25784] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.275681][T25784] bridge_slave_0: entered allmulticast mode [ 599.305255][T25784] bridge_slave_0: entered promiscuous mode [ 599.309083][T25876] __nla_validate_parse: 6 callbacks suppressed [ 599.309102][T25876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5577'. [ 599.323650][T25784] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.337795][ T5843] Bluetooth: hci2: command tx timeout [ 599.347383][T25784] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.354715][T25784] bridge_slave_1: entered allmulticast mode [ 599.373706][T25784] bridge_slave_1: entered promiscuous mode [ 599.431452][T25882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5577'. [ 599.564356][T25784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.566309][T25867] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyڇv[Dwz [ 599.615737][T25784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.720533][T25896] netlink: 'syz.1.5584': attribute type 4 has an invalid length. [ 599.728271][T25784] team0: Port device team_slave_0 added [ 599.759262][T25896] netlink: 'syz.1.5584': attribute type 4 has an invalid length. [ 599.803758][T25784] team0: Port device team_slave_1 added [ 599.902170][T25784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.910786][T25784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.975604][T25784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.017927][T25784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.024936][T25784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.060524][T25784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.214580][T25784] hsr_slave_0: entered promiscuous mode [ 600.242389][T25784] hsr_slave_1: entered promiscuous mode [ 600.251012][T25784] debugfs: 'hsr0' already exists in 'hsr' [ 600.256978][T25784] Cannot create hsr debugfs directory [ 601.012111][T25957] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.5595'. [ 601.417978][ T5843] Bluetooth: hci2: command tx timeout [ 601.958886][T25984] netlink: zone id is out of range [ 601.969176][T25984] netlink: zone id is out of range [ 601.970025][T25983] netlink: zone id is out of range [ 601.976130][T25984] netlink: del zone limit has 4 unknown bytes [ 602.008497][T25983] netlink: zone id is out of range [ 602.014489][T25983] netlink: del zone limit has 4 unknown bytes [ 603.511210][ T5843] Bluetooth: hci2: command tx timeout [ 604.462062][T25784] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.727628][T25784] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.756310][T26009] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5604'. [ 604.970785][T25784] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.006835][T26009] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5604'. [ 605.017940][T26017] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5607'. [ 605.039201][T26017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5607'. [ 605.109114][T25784] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.192531][T26009] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5604'. [ 605.311402][T26009] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5604'. [ 605.529217][T26030] syzkaller0: create flow: hash 676117544 index 1 [ 605.580070][ T5843] Bluetooth: hci2: command tx timeout [ 605.638577][ T74] syzkaller0: tun_net_xmit 76 [ 605.644121][ T74] syzkaller0: tun_net_xmit 48 [ 605.667506][ T9908] syzkaller0: tun_net_xmit 76 [ 605.673417][ T9908] syzkaller0: tun_net_xmit 76 [ 605.724916][T26041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5612'. [ 605.861868][T25784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 605.879911][ T8094] syzkaller0: tun_net_xmit 76 [ 605.882956][T25784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 606.020345][T26030] syzkaller0: delete flow: hash 676117544 index 1 [ 606.256603][T26066] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 608.298531][T25784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 608.314287][T25784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 608.570465][T25784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.637236][T25784] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.658106][T26088] netlink: 204 bytes leftover after parsing attributes in process `syz.4.5623'. [ 608.659428][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.674896][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.754197][T26089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5622'. [ 608.833665][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.841125][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.992166][T26091] netlink: 'syz.0.5624': attribute type 2 has an invalid length. [ 609.014617][T25784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 609.027462][T25784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 609.380694][T26123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5631'. [ 609.524934][T25784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.632293][T25784] veth0_vlan: entered promiscuous mode [ 609.650491][T25784] veth1_vlan: entered promiscuous mode [ 609.711836][T25784] veth0_macvtap: entered promiscuous mode [ 609.726193][T25784] veth1_macvtap: entered promiscuous mode [ 609.814213][T25784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.874608][T25784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.981746][ T1335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.996551][ T1335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.006030][ T1335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.021482][ T1335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.489662][T26147] netlink: 'syz.4.5638': attribute type 2 has an invalid length. [ 610.508577][T26147] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5638'. [ 610.640859][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.660313][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.731404][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.750028][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.370499][T26186] netlink: 'syz.3.5647': attribute type 2 has an invalid length. [ 611.436766][T26187] veth0: entered promiscuous mode [ 611.455233][T26185] veth0: left promiscuous mode [ 611.824939][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 611.838749][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 611.852774][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 611.861594][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 611.872926][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 612.218710][T26202] bond7: Unable to set down delay as MII monitoring is disabled [ 612.231828][T26202] bond7 (unregistering): Released all slaves [ 612.341448][T26206] tipc: Started in network mode [ 612.346414][T26206] tipc: Node identity 1219b3e64986, cluster identity 4711 [ 612.354727][T26206] tipc: Enabled bearer , priority 0 [ 612.376704][T26207] syzkaller0: entered promiscuous mode [ 612.384296][T26207] syzkaller0: entered allmulticast mode [ 612.400598][T26211] IPv6: sit2: Disabled Multicast RS [ 612.430426][T26206] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 612.489687][T26205] tipc: Resetting bearer [ 612.521716][T26205] tipc: Disabling bearer [ 612.683174][T26226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5658'. [ 612.760977][T26226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.769685][T26226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.779513][T26226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.787388][T26226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.833285][T26236] sctp: [Deprecated]: syz.0.5660 (pid 26236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 612.833285][T26236] Use struct sctp_sack_info instead [ 612.922482][T26193] chnl_net:caif_netlink_parms(): no params data found [ 613.191984][ T9907] IPVS: starting estimator thread 0... [ 613.212930][T26193] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.239479][T26193] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.259616][T26193] bridge_slave_0: entered allmulticast mode [ 613.270142][T26193] bridge_slave_0: entered promiscuous mode [ 613.298648][T26252] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5661'. [ 613.299197][T26255] IPVS: using max 29 ests per chain, 69600 per kthread [ 613.321304][T26259] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5665'. [ 613.333454][T26193] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.334246][T26259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5665'. [ 613.354113][T26193] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.362536][T26193] bridge_slave_1: entered allmulticast mode [ 613.370169][T26193] bridge_slave_1: entered promiscuous mode [ 613.459976][T26193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.478695][T26193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.563001][T26193] team0: Port device team_slave_0 added [ 613.579001][T26228] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 613.596183][T26193] team0: Port device team_slave_1 added [ 613.698856][T26193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.706394][T26193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.733915][T26193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.772053][T26193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.787069][T26193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.819073][T26193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.870778][T26246] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 613.897644][ T5843] Bluetooth: hci3: command tx timeout [ 614.071620][T26193] hsr_slave_0: entered promiscuous mode [ 614.091065][T26193] hsr_slave_1: entered promiscuous mode [ 614.103965][T26193] debugfs: 'hsr0' already exists in 'hsr' [ 614.120530][T26193] Cannot create hsr debugfs directory [ 614.562498][T26309] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5676'. [ 614.719221][T26320] netlink: 'syz.4.5677': attribute type 10 has an invalid length. [ 614.760113][T26323] netlink: 'syz.0.5679': attribute type 1 has an invalid length. [ 614.776758][T26324] netlink: 'syz.2.5680': attribute type 11 has an invalid length. [ 614.797763][T26324] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5680'. [ 614.843003][T26326] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5679'. [ 614.989723][T26323] 8021q: adding VLAN 0 to HW filter on device bond3 [ 614.998316][T26331] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5680'. [ 615.098236][ T5843] Bluetooth: hci1: command 0x0405 tx timeout [ 615.151969][T26193] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.474367][T26193] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.544365][T26357] netlink: 'syz.0.5685': attribute type 1 has an invalid length. [ 615.730639][T26366] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5687'. [ 615.793280][T26193] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.828219][T26360] tipc: Started in network mode [ 615.833378][T26360] tipc: Node identity 36f551eb0f48, cluster identity 4711 [ 615.842876][T26360] tipc: Enabled bearer , priority 0 [ 615.981188][ T5843] Bluetooth: hci3: command tx timeout [ 615.990938][T26366] bond8 (unregistering): Released all slaves [ 616.030886][T26369] syzkaller0: MTU too low for tipc bearer [ 616.036683][T26369] tipc: Disabling bearer [ 616.178077][T26193] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.601493][T26193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 616.673126][T26193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 616.726043][T26193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 616.780757][T26193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 617.180099][T26193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.213510][T26193] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.264309][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.271648][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.312660][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.319916][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.378653][T26429] IPv6: NLM_F_CREATE should be specified when creating new route [ 617.421901][T26429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 617.429347][T26429] IPv6: NLM_F_CREATE should be set when creating new route [ 617.436642][T26429] IPv6: NLM_F_CREATE should be set when creating new route [ 617.459930][T26193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.711711][T26437] netlink: 'syz.4.5699': attribute type 1 has an invalid length. [ 617.792611][T26437] 8021q: adding VLAN 0 to HW filter on device bond7 [ 617.887174][T26441] bond7: (slave veth7): Enslaving as an active interface with a down link [ 617.971369][T26437] bond7: (slave veth0_to_bond): making interface the new active one [ 617.989674][T26437] veth0_to_bond: entered promiscuous mode [ 617.999086][T26437] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 618.058838][ T5843] Bluetooth: hci3: command tx timeout [ 618.260042][T26193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.434382][T26471] netlink: 'syz.0.5707': attribute type 142 has an invalid length. [ 618.444954][T26471] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5707'. [ 618.445374][T26193] veth0_vlan: entered promiscuous mode [ 618.499747][T26193] veth1_vlan: entered promiscuous mode [ 618.555302][T26474] netlink: 4264 bytes leftover after parsing attributes in process `syz.3.5708'. [ 618.569013][T26474] openvswitch: netlink: Flow key attr not present in new flow. [ 618.609922][T26193] veth0_macvtap: entered promiscuous mode [ 618.636026][T26193] veth1_macvtap: entered promiscuous mode [ 618.704426][T26193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.741567][T26193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.776639][ T1335] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.820790][ T1335] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.834329][ T1335] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.846904][T26484] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 618.872496][T26488] netlink: 'syz.0.5712': attribute type 15 has an invalid length. [ 618.899210][ T1335] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.096900][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.115905][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.217179][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.261810][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.606203][T26517] x_tables: duplicate underflow at hook 1 [ 619.671279][T26515] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 619.724254][T26520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5724'. [ 619.833948][T26522] tipc: Enabling of bearer rejected, failed to enable media [ 619.870721][T26522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5725'. [ 620.137763][ T5843] Bluetooth: hci3: command tx timeout [ 620.606835][T26549] syzkaller0: entered promiscuous mode [ 620.631278][T26549] syzkaller0: entered allmulticast mode [ 620.707417][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 620.723331][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 620.732278][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 620.758957][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 620.771337][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 620.875735][T26564] netlink: 276 bytes leftover after parsing attributes in process `syz.1.5735'. [ 620.956669][T26564] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.5735'. [ 621.412785][T26591] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5744'. [ 622.097775][T26554] chnl_net:caif_netlink_parms(): no params data found [ 622.359354][T26630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5755'. [ 622.407386][T26631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5755'. [ 622.537689][ T5836] Bluetooth: hci3: command 0x0405 tx timeout [ 622.582811][T26554] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.606969][T26554] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.614911][T26554] bridge_slave_0: entered allmulticast mode [ 622.653052][T26651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5759'. [ 622.668303][T26554] bridge_slave_0: entered promiscuous mode [ 622.708497][T26554] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.728706][T26554] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.749384][ T30] audit: type=1107 audit(1759933093.548:14): pid=26654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 622.780235][T26554] bridge_slave_1: entered allmulticast mode [ 622.902529][T26658] netlink: zone id is out of range [ 622.902533][ T5843] Bluetooth: hci0: command tx timeout [ 622.909112][T26658] netlink: zone id is out of range [ 622.933809][T26554] bridge_slave_1: entered promiscuous mode [ 622.963368][T26658] netlink: zone id is out of range [ 622.970780][T26658] netlink: zone id is out of range [ 623.001999][T26554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.018780][T26554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.029215][T26663] ipt_rpfilter: unknown options [ 623.036144][T26658] netlink: zone id is out of range [ 623.111774][T26554] team0: Port device team_slave_0 added [ 623.122205][T26554] team0: Port device team_slave_1 added [ 623.159694][T26658] netlink: set zone limit has 4 unknown bytes [ 623.210701][T26554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.228302][T26554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.264754][T26554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.307317][T26554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.314446][T26554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.383032][T26554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.611098][T26554] hsr_slave_0: entered promiscuous mode [ 623.643280][T26554] hsr_slave_1: entered promiscuous mode [ 623.666057][T26554] debugfs: 'hsr0' already exists in 'hsr' [ 623.674714][T26554] Cannot create hsr debugfs directory [ 623.856268][T26701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5771'. [ 624.149770][T26554] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.186935][T26554] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.207278][T26554] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 624.282095][T26717] C: renamed from lo (while UP) [ 624.309748][T26718] vlan2: entered promiscuous mode [ 624.315036][T26718] bridge0: entered promiscuous mode [ 624.340653][T26724] netlink: 'syz.1.5780': attribute type 1 has an invalid length. [ 624.352528][T26724] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5780'. [ 624.409087][T26554] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.431062][T26554] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.460416][T26554] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 624.596829][T26554] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.609655][T26554] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.621129][T26554] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 624.753142][T26554] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.773394][T26554] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.824808][T26554] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 624.940569][ T5843] Bluetooth: hci0: command tx timeout [ 625.087762][T26554] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 625.111616][T26554] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 625.154849][T26554] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 625.184072][T26554] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 625.227662][T26757] syzkaller1: entered promiscuous mode [ 625.233196][T26757] syzkaller1: entered allmulticast mode [ 625.492003][T26775] netlink: 'syz.1.5792': attribute type 1 has an invalid length. [ 625.622096][T26554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.694345][T26554] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.723876][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.731145][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.754972][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.762566][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.924330][T26785] netlink: 'syz.2.5795': attribute type 1 has an invalid length. [ 626.289617][T26806] IPVS: length: 245 != 8 [ 626.404039][T26554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.419542][T26812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5802'. [ 626.610400][T26823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5803'. [ 626.621750][T26823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5803'. [ 627.017851][ T5843] Bluetooth: hci0: command tx timeout [ 627.078988][T26554] veth0_vlan: entered promiscuous mode [ 627.120981][T26554] veth1_vlan: entered promiscuous mode [ 627.242881][T26554] veth0_macvtap: entered promiscuous mode [ 627.272535][T26554] veth1_macvtap: entered promiscuous mode [ 627.304432][T26554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.336677][T26554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.355555][T26854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5814'. [ 627.466163][T26862] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5808'. [ 627.522156][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.531126][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.541784][T26854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5814'. [ 627.563556][T26866] netlink: 13 bytes leftover after parsing attributes in process `syz.3.5817'. [ 627.796939][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.819966][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.080127][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.101837][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.255511][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.265895][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.825912][T26924] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 628.832563][T26924] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 629.097832][ T5843] Bluetooth: hci0: command tx timeout [ 629.158699][ T1113] veth0_to_bond: left promiscuous mode [ 629.381006][T26957] netlink: 'syz.3.5835': attribute type 1 has an invalid length. [ 629.630262][T26966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.796353][T26979] netlink: 'syz.2.5841': attribute type 6 has an invalid length. [ 630.301417][T26997] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5847'. [ 630.397209][T27001] netlink: 'syz.3.5848': attribute type 2 has an invalid length. [ 630.405174][T27001] netlink: 119 bytes leftover after parsing attributes in process `syz.3.5848'. [ 630.471944][T27008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5850'. [ 630.601448][T27008] chnl_net:caif_netlink_parms(): no params data found [ 631.740651][T27066] __nla_validate_parse: 2 callbacks suppressed [ 631.740674][T27066] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5866'. [ 631.912554][T27078] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5869'. [ 632.574284][T27095] netlink: 'syz.4.5874': attribute type 11 has an invalid length. [ 632.705979][T27098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5877'. [ 632.791344][T27107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5877'. [ 633.219438][T27122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5883'. [ 633.316514][T27135] veth0: entered promiscuous mode [ 633.379332][T27134] veth0: left promiscuous mode [ 633.533195][T27143] netlink: 'syz.2.5890': attribute type 1 has an invalid length. [ 633.550319][T27143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5890'. [ 633.945802][T27156] FAULT_INJECTION: forcing a failure. [ 633.945802][T27156] name failslab, interval 1, probability 0, space 0, times 0 [ 633.967760][T27156] CPU: 1 UID: 0 PID: 27156 Comm: syz.1.5894 Not tainted syzkaller #0 PREEMPT(full) [ 633.967790][T27156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 633.967811][T27156] Call Trace: [ 633.967820][T27156] [ 633.967828][T27156] dump_stack_lvl+0x189/0x250 [ 633.967857][T27156] ? __pfx____ratelimit+0x10/0x10 [ 633.967886][T27156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.967907][T27156] ? __pfx__printk+0x10/0x10 [ 633.967936][T27156] ? __pfx___might_resched+0x10/0x10 [ 633.967964][T27156] ? fs_reclaim_acquire+0x7d/0x100 [ 633.967996][T27156] should_fail_ex+0x414/0x560 [ 633.968022][T27156] should_failslab+0xa8/0x100 [ 633.968048][T27156] __kmalloc_noprof+0xcb/0x4f0 [ 633.968069][T27156] ? kfree+0x4d/0x440 [ 633.968085][T27156] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 633.968117][T27156] tomoyo_realpath_from_path+0xe3/0x5d0 [ 633.968143][T27156] ? tomoyo_domain+0xd9/0x130 [ 633.968177][T27156] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 633.968200][T27156] tomoyo_path_number_perm+0x1e8/0x5a0 [ 633.968226][T27156] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 633.968298][T27156] ? __fget_files+0x2a/0x420 [ 633.968328][T27156] ? __fget_files+0x3a0/0x420 [ 633.968350][T27156] ? __fget_files+0x2a/0x420 [ 633.968379][T27156] security_file_ioctl+0xcb/0x2d0 [ 633.968404][T27156] __se_sys_ioctl+0x47/0x170 [ 633.968438][T27156] do_syscall_64+0xfa/0xfa0 [ 633.968465][T27156] ? lockdep_hardirqs_on+0x9c/0x150 [ 633.968493][T27156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.968513][T27156] ? clear_bhb_loop+0x60/0xb0 [ 633.968539][T27156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.968557][T27156] RIP: 0033:0x7fd65d18eec9 [ 633.968576][T27156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.968593][T27156] RSP: 002b:00007fd65e034038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.968616][T27156] RAX: ffffffffffffffda RBX: 00007fd65d3e5fa0 RCX: 00007fd65d18eec9 [ 633.968631][T27156] RDX: 0000000000000001 RSI: 00000000400454cb RDI: 0000000000000003 [ 633.968644][T27156] RBP: 00007fd65e034090 R08: 0000000000000000 R09: 0000000000000000 [ 633.968656][T27156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.968668][T27156] R13: 00007fd65d3e6038 R14: 00007fd65d3e5fa0 R15: 00007ffea657c368 [ 633.968707][T27156] [ 633.968716][T27156] ERROR: Out of memory at tomoyo_realpath_from_path. [ 634.233196][T27154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5888'. [ 634.472283][T27167] bond0: option ad_select: unable to set because the bond device is up [ 634.509701][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 634.523052][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 634.545001][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 634.556937][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 634.565288][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 634.889660][T27183] netlink: 'syz.1.5899': attribute type 1 has an invalid length. [ 634.898149][T27183] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5899'. [ 635.071961][T27188] netlink: 'syz.1.5901': attribute type 83 has an invalid length. [ 635.487447][T27203] xt_socket: unknown flags 0x50 [ 635.995448][T27168] chnl_net:caif_netlink_parms(): no params data found [ 636.618000][ T5843] Bluetooth: hci5: command tx timeout [ 636.619029][ T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.634189][ T74] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 636.645520][ T74] bond0 (unregistering): (slave ): Releasing backup interface [ 636.654097][ T74] mac80211_hwsim hwsim34 : left allmulticast mode [ 636.665735][ T74] bond0 (unregistering): Released all slaves [ 636.681913][ T74] bond1 (unregistering): Released all slaves [ 636.699632][ T74] bond2 (unregistering): Released all slaves [ 636.717330][ T74] bond3 (unregistering): Released all slaves [ 636.736287][ T74] bond4 (unregistering): Released all slaves [ 636.758280][ T74] bond5 (unregistering): Released all slaves [ 636.920444][ T74] bond6 (unregistering): Released all slaves [ 636.934963][ T74] bond7 (unregistering): Released all slaves [ 636.949620][ T74] bond8 (unregistering): Released all slaves [ 636.972991][T27228] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 637.174589][T27241] netlink: 288 bytes leftover after parsing attributes in process `syz.1.5915'. [ 637.198598][T27241] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5915'. [ 637.278263][ T74] _Z`Ԁ@Y: left promiscuous mode [ 637.361033][T27248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5920'. [ 637.728142][T27261] FAULT_INJECTION: forcing a failure. [ 637.728142][T27261] name failslab, interval 1, probability 0, space 0, times 0 [ 637.751263][T27261] CPU: 1 UID: 0 PID: 27261 Comm: syz.3.5922 Not tainted syzkaller #0 PREEMPT(full) [ 637.751296][T27261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 637.751309][T27261] Call Trace: [ 637.751317][T27261] [ 637.751326][T27261] dump_stack_lvl+0x189/0x250 [ 637.751354][T27261] ? __pfx____ratelimit+0x10/0x10 [ 637.751382][T27261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.751404][T27261] ? __pfx__printk+0x10/0x10 [ 637.751427][T27261] ? __lock_acquire+0xab9/0xd20 [ 637.751465][T27261] should_fail_ex+0x414/0x560 [ 637.751493][T27261] should_failslab+0xa8/0x100 [ 637.751530][T27261] kmem_cache_alloc_noprof+0x73/0x3c0 [ 637.751550][T27261] ? skb_clone+0x212/0x3a0 [ 637.751584][T27261] skb_clone+0x212/0x3a0 [ 637.751617][T27261] __netlink_deliver_tap+0x404/0x850 [ 637.751659][T27261] ? netlink_deliver_tap+0x2e/0x1b0 [ 637.751686][T27261] netlink_deliver_tap+0x19c/0x1b0 [ 637.751713][T27261] netlink_unicast+0x7fa/0x9e0 [ 637.751747][T27261] ? __pfx_netlink_unicast+0x10/0x10 [ 637.751773][T27261] ? netlink_sendmsg+0x642/0xb30 [ 637.751796][T27261] ? skb_put+0x11b/0x210 [ 637.751827][T27261] netlink_sendmsg+0x805/0xb30 [ 637.751865][T27261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.751895][T27261] ? aa_sock_msg_perm+0xf1/0x1d0 [ 637.751924][T27261] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 637.751951][T27261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.751977][T27261] __sock_sendmsg+0x21c/0x270 [ 637.752003][T27261] ____sys_sendmsg+0x505/0x830 [ 637.752040][T27261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 637.752080][T27261] ? import_iovec+0x74/0xa0 [ 637.752112][T27261] ___sys_sendmsg+0x21f/0x2a0 [ 637.752144][T27261] ? __pfx____sys_sendmsg+0x10/0x10 [ 637.752217][T27261] ? __fget_files+0x2a/0x420 [ 637.752240][T27261] ? __fget_files+0x3a0/0x420 [ 637.752279][T27261] __x64_sys_sendmsg+0x19b/0x260 [ 637.752310][T27261] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 637.752351][T27261] ? __pfx_ksys_write+0x10/0x10 [ 637.752378][T27261] ? do_syscall_64+0xbe/0xfa0 [ 637.752412][T27261] do_syscall_64+0xfa/0xfa0 [ 637.752439][T27261] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.752466][T27261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.752486][T27261] ? clear_bhb_loop+0x60/0xb0 [ 637.752519][T27261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.752539][T27261] RIP: 0033:0x7ff9d8d8eec9 [ 637.752558][T27261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.752575][T27261] RSP: 002b:00007ff9d9c30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.752599][T27261] RAX: ffffffffffffffda RBX: 00007ff9d8fe5fa0 RCX: 00007ff9d8d8eec9 [ 637.752614][T27261] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000004 [ 637.752625][T27261] RBP: 00007ff9d9c30090 R08: 0000000000000000 R09: 0000000000000000 [ 637.752638][T27261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.752650][T27261] R13: 00007ff9d8fe6038 R14: 00007ff9d8fe5fa0 R15: 00007ffd878b3558 [ 637.752688][T27261] [ 637.756614][ T74] tipc: Left network mode [ 637.817426][T27168] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.242540][T27168] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.250124][T27168] bridge_slave_0: entered allmulticast mode [ 638.273668][T27168] bridge_slave_0: entered promiscuous mode [ 638.344191][T27168] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.367653][T27168] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.385454][T27168] bridge_slave_1: entered allmulticast mode [ 638.406308][T27168] bridge_slave_1: entered promiscuous mode [ 638.698091][ T5843] Bluetooth: hci5: command tx timeout [ 638.725649][T27168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.754177][T27168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.987947][T27301] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 639.020974][T27168] team0: Port device team_slave_0 added [ 639.119748][T27168] team0: Port device team_slave_1 added [ 639.175045][ T74] hsr_slave_0: left promiscuous mode [ 639.182648][ T74] hsr_slave_1: left promiscuous mode [ 639.200499][T27310] netlink: 'syz.4.5933': attribute type 33 has an invalid length. [ 639.287664][T27319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5935'. [ 639.298701][T27319] openvswitch: netlink: Flow actions attr not present in new flow. [ 639.994929][ T74] team0 (unregistering): Port device team_slave_1 removed [ 640.051909][ T74] team0 (unregistering): Port device team_slave_0 removed [ 640.626751][T27317] syzkaller0: entered promiscuous mode [ 640.633485][T27317] syzkaller0: entered allmulticast mode [ 640.673212][T27342] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 640.689147][T27168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.705657][T27168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.736064][T27168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.786452][ T5843] Bluetooth: hci5: command tx timeout [ 640.796190][T27168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.804350][T27168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.889178][T27168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.130501][T27168] hsr_slave_0: entered promiscuous mode [ 641.142024][T27355] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5942'. [ 641.150447][T27168] hsr_slave_1: entered promiscuous mode [ 641.189118][T27168] debugfs: 'hsr0' already exists in 'hsr' [ 641.197938][T27168] Cannot create hsr debugfs directory [ 641.297929][T27363] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5945'. [ 641.678557][ T74] IPVS: stop unused estimator thread 0... [ 641.953958][T27395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5952'. [ 641.964938][T27395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5952'. [ 642.196766][T27401] team_slave_0: entered promiscuous mode [ 642.202661][T27401] team_slave_1: entered promiscuous mode [ 642.220528][T27401] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 642.255163][ T7497] tipc: Subscription rejected, illegal request [ 642.336710][T27405] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 642.357123][T27410] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5955'. [ 642.670278][T27168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 642.693593][T27168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 642.785666][T27168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 642.833691][T27168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 642.860530][ T5843] Bluetooth: hci5: command tx timeout [ 643.155153][T27168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.162985][T27445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5962'. [ 643.235342][T27168] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.270951][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.278264][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.302826][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.310114][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.041773][T27168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.213481][T27168] veth0_vlan: entered promiscuous mode [ 644.236087][T27489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5972'. [ 644.258723][T27168] veth1_vlan: entered promiscuous mode [ 644.372646][T27168] veth0_macvtap: entered promiscuous mode [ 644.412168][T27168] veth1_macvtap: entered promiscuous mode [ 644.487990][T27168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.520887][T27168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.153128][ T7497] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.179920][ T7497] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.194303][T27517] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 645.213729][ T7497] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.254519][ T7497] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.264319][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.671418][T27536] netlink: 'syz.3.5983': attribute type 1 has an invalid length. [ 645.770349][T27536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 645.846362][T27542] vlan2: entered promiscuous mode [ 645.876487][T27542] bond1: entered promiscuous mode [ 645.882753][T27542] vlan2: entered allmulticast mode [ 645.892585][T27542] bond1: entered allmulticast mode [ 645.949425][T27545] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5985'. [ 645.952633][T27536] bond1: (slave gretap1): making interface the new active one [ 645.983753][T27536] gretap1: entered promiscuous mode [ 645.998029][T27536] gretap1: entered allmulticast mode [ 646.016114][T27536] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 646.093385][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.153088][T27551] netlink: 'syz.1.5986': attribute type 29 has an invalid length. [ 646.181534][T27551] netlink: 'syz.1.5986': attribute type 29 has an invalid length. [ 646.201217][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.223697][T27551] netlink: 'syz.1.5986': attribute type 29 has an invalid length. [ 646.259512][T27555] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5988'. [ 646.262726][T27551] netlink: 'syz.1.5986': attribute type 29 has an invalid length. [ 646.334435][T27545] bond5 (unregistering): Released all slaves [ 646.397514][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.405826][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.582466][T27568] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20004 [ 646.912265][T27580] netlink: 'syz.0.5991': attribute type 2 has an invalid length. [ 646.942052][T27575] tipc: Enabling of bearer rejected, failed to enable media [ 647.659336][T27608] netlink: 'syz.4.5999': attribute type 1 has an invalid length. [ 647.708900][T27611] netlink: 'syz.4.5999': attribute type 1 has an invalid length. [ 647.806861][T27615] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6001'. [ 647.830709][T27615] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6001'. [ 647.860515][T27618] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6001'. [ 647.872059][T27617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6000'. [ 647.882714][T27615] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6001'. [ 647.931417][T27617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6000'. [ 648.060293][T27623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6004'. [ 648.130152][T27623] bridge_slave_1: left allmulticast mode [ 648.135927][T27623] bridge_slave_1: left promiscuous mode [ 648.246712][T27623] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.268879][T27623] bridge_slave_0: left allmulticast mode [ 648.274599][T27623] bridge_slave_0: left promiscuous mode [ 648.280878][T27631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6006'. [ 648.292609][T27623] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.511176][T27646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6008'. [ 648.930482][T27668] netlink: 'syz.3.6014': attribute type 15 has an invalid length. [ 648.975761][T27668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6014'. [ 649.009011][T27670] x_tables: duplicate underflow at hook 2 [ 649.013549][T27668] netlink: 'syz.3.6014': attribute type 15 has an invalid length. [ 649.015132][ T1335] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 649.067151][ T1335] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 649.131173][ T1335] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 649.149019][ T1335] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 649.496639][T27686] macvtap1: entered promiscuous mode [ 649.517098][T27686] macvtap1: entered allmulticast mode [ 649.531518][T27686] bond_slave_0: entered promiscuous mode [ 649.537657][T27686] bond_slave_1: entered promiscuous mode [ 649.543483][T27686] bond0: entered allmulticast mode [ 649.548858][T27686] bond_slave_0: entered allmulticast mode [ 649.554769][T27686] bond_slave_1: entered allmulticast mode [ 649.561107][T27686] bond0: entered promiscuous mode [ 649.569305][T27686] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 649.576680][T27686] team0: Device macvtap1 failed to register rx_handler [ 649.585179][T27686] bond0: left allmulticast mode [ 649.593422][T27686] bond_slave_0: left allmulticast mode [ 649.599686][T27686] bond_slave_1: left allmulticast mode [ 649.607252][T27686] bond0: left promiscuous mode [ 649.612877][T27686] bond_slave_0: left promiscuous mode [ 649.618455][T27686] bond_slave_1: left promiscuous mode [ 650.442810][T27735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.695926][T27741] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 650.868039][T27746] syz_tun: entered allmulticast mode [ 650.947944][T27746] syz_tun: left allmulticast mode [ 651.039477][T27762] tipc: Started in network mode [ 651.044598][T27762] tipc: Node identity 12e47866d132, cluster identity 4711 [ 651.052694][T27762] tipc: Enabled bearer , priority 0 [ 651.111655][T27768] syzkaller0: entered promiscuous mode [ 651.126911][T27768] syzkaller0: entered allmulticast mode [ 651.211105][T27762] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 651.240521][T27770] No such timeout policy "syz1" [ 651.261295][T27762] tipc: Resetting bearer [ 651.556943][T27792] validate_nla: 4 callbacks suppressed [ 651.563892][T27792] netlink: 'syz.4.6055': attribute type 1 has an invalid length. [ 651.694721][T27796] bond2 (unregistering): Released all slaves [ 651.785312][T27796] pim6reg1: entered promiscuous mode [ 651.790790][T27796] pim6reg1: entered allmulticast mode [ 651.835003][T27761] tipc: Resetting bearer [ 651.942993][T27761] tipc: Disabling bearer [ 652.001213][T27812] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 652.062058][ T5843] Bluetooth: hci5: command tx timeout [ 652.153544][T27814] syz.0.6062: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 652.171767][T27814] CPU: 0 UID: 0 PID: 27814 Comm: syz.0.6062 Not tainted syzkaller #0 PREEMPT(full) [ 652.171799][T27814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 652.171812][T27814] Call Trace: [ 652.171820][T27814] [ 652.171829][T27814] dump_stack_lvl+0x189/0x250 [ 652.171862][T27814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.171885][T27814] ? __pfx__printk+0x10/0x10 [ 652.171908][T27814] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 652.171934][T27814] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 652.171961][T27814] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 652.171990][T27814] warn_alloc+0x214/0x310 [ 652.172017][T27814] ? stack_depot_save_flags+0x40/0x860 [ 652.172043][T27814] ? __pfx_warn_alloc+0x10/0x10 [ 652.172072][T27814] ? kasan_save_track+0x4f/0x80 [ 652.172095][T27814] ? xskq_create+0x56/0x170 [ 652.172120][T27814] ? xsk_init_queue+0xb0/0x110 [ 652.172144][T27814] ? xsk_setsockopt+0x4dc/0x8d0 [ 652.172167][T27814] ? do_sock_setsockopt+0x179/0x1b0 [ 652.172193][T27814] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 652.172216][T27814] ? do_syscall_64+0xfa/0xfa0 [ 652.172243][T27814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.172274][T27814] __vmalloc_node_range_noprof+0x125/0x12f0 [ 652.172346][T27814] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 652.172372][T27814] ? xskq_create+0x56/0x170 [ 652.172404][T27814] ? __kasan_kmalloc+0x93/0xb0 [ 652.172432][T27814] vmalloc_user_noprof+0xad/0xf0 [ 652.172457][T27814] ? xskq_create+0xbf/0x170 [ 652.172487][T27814] xskq_create+0xbf/0x170 [ 652.172520][T27814] xsk_init_queue+0xb0/0x110 [ 652.172552][T27814] xsk_setsockopt+0x4dc/0x8d0 [ 652.172581][T27814] ? __pfx_xsk_setsockopt+0x10/0x10 [ 652.172612][T27814] ? __pfx_aa_sk_perm+0x10/0x10 [ 652.172640][T27814] ? aa_sock_opt_perm+0xff/0x1b0 [ 652.172669][T27814] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 652.172696][T27814] ? __pfx_xsk_setsockopt+0x10/0x10 [ 652.172725][T27814] do_sock_setsockopt+0x179/0x1b0 [ 652.172760][T27814] __x64_sys_setsockopt+0x13f/0x1b0 [ 652.172793][T27814] do_syscall_64+0xfa/0xfa0 [ 652.172820][T27814] ? lockdep_hardirqs_on+0x9c/0x150 [ 652.172850][T27814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.172869][T27814] ? clear_bhb_loop+0x60/0xb0 [ 652.172895][T27814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.172915][T27814] RIP: 0033:0x7f538558eec9 [ 652.172934][T27814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.172952][T27814] RSP: 002b:00007f538649b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 652.172976][T27814] RAX: ffffffffffffffda RBX: 00007f53857e5fa0 RCX: 00007f538558eec9 [ 652.172991][T27814] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 652.173004][T27814] RBP: 00007f5385611f91 R08: 0000000000000004 R09: 0000000000000000 [ 652.173016][T27814] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.173029][T27814] R13: 00007f53857e6038 R14: 00007f53857e5fa0 R15: 00007ffc050474a8 [ 652.173068][T27814] [ 652.173077][T27814] Mem-Info: [ 652.194853][T27817] netlink: 'syz.3.6063': attribute type 1 has an invalid length. [ 652.198928][T27814] active_anon:6132 inactive_anon:0 isolated_anon:0 [ 652.198928][T27814] active_file:3211 inactive_file:40130 isolated_file:0 [ 652.198928][T27814] unevictable:768 dirty:118 writeback:0 [ 652.198928][T27814] slab_reclaimable:13482 slab_unreclaimable:133117 [ 652.198928][T27814] mapped:29334 shmem:1375 pagetables:1803 [ 652.198928][T27814] sec_pagetables:0 bounce:0 [ 652.198928][T27814] kernel_misc_reclaimable:0 [ 652.198928][T27814] free:1277548 free_pcp:12873 free_cma:0 [ 652.198992][T27814] Node 0 active_anon:24528kB inactive_anon:0kB active_file:12844kB inactive_file:160316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117336kB dirty:472kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17220kB pagetables:7064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 652.199048][T27814] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 652.199099][T27814] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 652.199186][T27814] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 652.199239][T27814] Node 0 DMA32 free:1198324kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24484kB inactive_anon:0kB active_file:12844kB inactive_file:158484kB unevictable:1536kB writepending:472kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:41148kB local_pcp:17240kB free_cma:0kB [ 652.262986][T27822] netlink: 'syz.1.6064': attribute type 178 has an invalid length. [ 652.266393][T27814] lowmem_reserve[]: [ 652.453755][T27823] netlink: 'syz.0.6062': attribute type 21 has an invalid length. [ 652.504422][T27814] 0 [ 652.622230][T27823] IPv6: NLM_F_CREATE should be specified when creating new route [ 652.622612][T27823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 652.622712][T27823] IPv6: NLM_F_CREATE should be set when creating new route [ 652.622772][T27823] IPv6: NLM_F_CREATE should be set when creating new route [ 652.622798][T27823] IPv6: NLM_F_CREATE should be set when creating new route [ 652.760473][T27830] erspan0: entered promiscuous mode [ 652.771289][T27830] erspan0: entered allmulticast mode [ 652.781760][T27814] 0 1 1 1 [ 652.785057][T27814] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 652.839260][T27814] lowmem_reserve[]: 0 0 0 0 0 [ 652.960065][T27814] Node 1 Normal free:3896492kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10336kB local_pcp:1472kB free_cma:0kB [ 653.068077][T27814] lowmem_reserve[]: 0 0 0 0 0 [ 653.077356][T27814] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 653.134554][T27851] __nla_validate_parse: 12 callbacks suppressed [ 653.134576][T27851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6075'. [ 653.165930][T27814] Node 0 DMA32: 400*4kB (UME) 355*8kB (UM) 49*16kB (UM) 162*32kB (UME) 156*64kB (UM) 33*128kB (UM) 633*256kB (UM) 375*512kB (U) 128*1024kB (UME) 6*2048kB (UM) 165*4096kB (UM) = 1197864kB [ 653.198488][T27814] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 653.211042][T27856] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 653.220754][T27814] Node 1 Normal: 191*4kB (UE) 44*8kB (UME) 33*16kB (UME) 216*32kB (UME) 71*64kB (UME) 15*128kB (UME) 4*256kB (UME) 5*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3896492kB [ 653.250349][T27814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 653.270373][T27814] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 653.307609][T27858] tipc: Enabled bearer , priority 0 [ 653.315453][T27858] syzkaller0: entered promiscuous mode [ 653.321156][T27858] syzkaller0: entered allmulticast mode [ 653.329373][T27814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 653.375284][T27814] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 653.392926][T27814] 44714 total pagecache pages [ 653.398239][T27814] 0 pages in swap cache [ 653.411427][T27862] tipc: Resetting bearer [ 653.423448][T27814] Free swap = 124996kB [ 653.438928][T27814] Total swap = 124996kB [ 653.443534][T27814] 2097051 pages RAM [ 653.447752][T27814] 0 pages HighMem/MovableOnly [ 653.452727][T27814] 424452 pages reserved [ 653.457589][T27814] 0 pages cma reserved [ 653.457728][T27857] tipc: Resetting bearer [ 653.489299][T27857] tipc: Disabling bearer [ 654.014530][T27893] bond3: option lp_interval: invalid value (0) [ 654.017825][T27891] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 654.020986][T27893] bond3: option lp_interval: allowed values 1 - 2147483647 [ 654.046082][T27893] bond3 (unregistering): Released all slaves [ 654.485628][T27919] pimreg: entered allmulticast mode [ 654.549031][T27926] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6098'. [ 654.615932][T27934] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 654.968416][T27946] netlink: 'syz.1.6102': attribute type 26 has an invalid length. [ 655.083114][T27949] tipc: Started in network mode [ 655.089091][T27949] tipc: Node identity 8a816d0759ad, cluster identity 4711 [ 655.098760][T27949] tipc: Enabled bearer , priority 0 [ 655.125704][T27948] tipc: Disabling bearer [ 655.140091][T27959] netlink: 'syz.2.6107': attribute type 4 has an invalid length. [ 655.245388][T27963] sctp: [Deprecated]: syz.2.6108 (pid 27963) Use of int in maxseg socket option. [ 655.245388][T27963] Use struct sctp_assoc_value instead [ 655.339709][T27965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6109'. [ 655.662404][T27981] openvswitch: netlink: Key type 29 is not supported [ 655.774871][T27987] netlink: 'syz.0.6110': attribute type 33 has an invalid length. [ 656.100479][T28005] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6123'. [ 656.162673][T28008] netlink: 'syz.3.6125': attribute type 10 has an invalid length. [ 656.509889][T28026] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6129'. [ 656.558752][T28029] netlink: 'syz.3.6128': attribute type 16 has an invalid length. [ 656.566725][T28029] netlink: 'syz.3.6128': attribute type 17 has an invalid length. [ 656.575208][T28026] xt_policy: neither incoming nor outgoing policy selected [ 656.633007][T28034] openvswitch: netlink: Message has -2 unknown bytes. [ 656.745279][T28029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 656.911898][T28038] openvswitch: netlink: Key 0 has unexpected len 20 expected 0 [ 656.946262][T28040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6132'. [ 656.991175][T28040] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 657.019798][T28040] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6132'. [ 657.174597][T28053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6138'. [ 657.188056][T28054] syzkaller1: entered promiscuous mode [ 657.193677][T28054] syzkaller1: entered allmulticast mode [ 659.139921][T28136] netlink: 'syz.1.6167': attribute type 11 has an invalid length. [ 659.149029][T28136] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6167'. [ 659.336294][T28143] netlink: 'syz.4.6169': attribute type 4 has an invalid length. [ 659.395614][T28143] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6169'. [ 659.473174][T28149] netlink: 'syz.1.6171': attribute type 9 has an invalid length. [ 659.775353][T28168] xt_CT: You must specify a L4 protocol and not use inversions on it [ 660.234066][T28190] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6179'. [ 660.479507][T28200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6181'. [ 660.892564][T28220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6186'. [ 661.249560][T28233] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 661.290023][T28176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6176'. [ 661.315609][T28233] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 661.321892][T28242] netlink: 'syz.3.6191': attribute type 2 has an invalid length. [ 661.330129][T28233] gretap1: entered promiscuous mode [ 661.332413][T28242] netlink: 'syz.3.6191': attribute type 2 has an invalid length. [ 661.346553][T28243] netlink: 'syz.3.6191': attribute type 2 has an invalid length. [ 661.349924][T28233] gretap1: entered allmulticast mode [ 661.358029][T28243] netlink: 'syz.3.6191': attribute type 2 has an invalid length. [ 661.598459][T28249] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6193'. [ 661.658650][T28249] nbd: must specify at least one socket [ 661.955960][T28270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6198'. [ 662.023336][T28275] syzkaller1: left promiscuous mode [ 662.031586][T28275] syzkaller1: left allmulticast mode [ 662.229323][T28284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6202'. [ 662.298041][T28290] !: renamed from bond_slave_0 (while UP) [ 662.511300][T28296] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 662.565312][T28299] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 662.583689][T28302] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6208'. [ 662.585988][T28305] 8021q: VLANs not supported on xfrm0 [ 662.661282][T28307] tipc: Enabling of bearer rejected, failed to enable media [ 662.703044][T28311] Cannot find add_set index 65532 as target [ 662.790590][ T9907] IPVS: starting estimator thread 0... [ 662.897958][T28315] IPVS: using max 29 ests per chain, 69600 per kthread [ 662.933609][T28323] geneve2: entered promiscuous mode [ 662.943029][T28323] team0: Port device geneve2 added [ 662.967274][ T1095] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20003 - 0 [ 662.993005][ T1095] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20003 - 0 [ 663.025966][ T1095] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20003 - 0 [ 663.040497][ T1095] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20003 - 0 [ 663.246515][T28349] netlink: 'syz.1.6221': attribute type 29 has an invalid length. [ 663.271885][T28349] netlink: 'syz.1.6221': attribute type 29 has an invalid length. [ 663.456197][T28356] syzkaller0: entered promiscuous mode [ 663.461834][T28356] syzkaller0: entered allmulticast mode [ 663.472406][T28356] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 663.593990][T28359] macvtap1: entered allmulticast mode [ 663.614935][T28359] veth0_macvtap: entered allmulticast mode [ 664.322377][T28389] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 664.929703][T28408] __nla_validate_parse: 1 callbacks suppressed [ 664.929728][T28408] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6243'. [ 664.954984][T28410] netlink: 'syz.1.6242': attribute type 1 has an invalid length. [ 664.963624][T28410] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6242'. [ 664.998583][T28410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6242'. [ 665.019779][T28408] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6243'. [ 665.034156][T28408] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6243'. [ 665.082211][T28416] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6243'. [ 665.156523][T28416] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6243'. [ 665.194350][T28416] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6243'. [ 665.459078][T28436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6246'. [ 665.648239][T28442] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6248'. [ 665.661984][T28436] macvlan7: entered promiscuous mode [ 665.669763][T28436] macvlan7: entered allmulticast mode [ 665.676745][T28436] bond2: entered promiscuous mode [ 665.683603][T28436] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 665.698497][T28436] bond2: left promiscuous mode [ 665.934913][T28450] bridge_slave_0: left allmulticast mode [ 665.944386][T28450] bridge_slave_0: left promiscuous mode [ 665.954762][T28450] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.975038][T28450] bridge_slave_1: left allmulticast mode [ 665.984655][T28450] bridge_slave_1: left promiscuous mode [ 665.991361][T28450] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.004174][T28450] bond0: (slave bond_slave_0): Releasing backup interface [ 666.020499][T28450] bond0: (slave bond_slave_1): Releasing backup interface [ 666.058210][T28450] team0: Port device team_slave_0 removed [ 666.089454][T28450] team0: Port device team_slave_1 removed [ 666.108364][T28450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.130621][T28450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.148611][T28450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.160151][T28450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.173498][T28450] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 666.572679][T28477] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 666.709411][T28486] openvswitch: netlink: ERSPAN option length err (len 272, max 255). [ 666.875995][T28500] openvswitch: netlink: Key type 123 is out of range max 32 [ 669.301905][T28508] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 669.923682][T28544] veth0_to_bridge: entered promiscuous mode [ 669.987922][T28550] netlink: 'syz.2.6278': attribute type 13 has an invalid length. [ 670.115675][T28550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 670.176789][T28554] xt_CT: No such helper "syz1" [ 670.214702][T28561] __nla_validate_parse: 8 callbacks suppressed [ 670.214725][T28561] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6281'. [ 670.315155][T28564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6282'. [ 670.331120][T28566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6280'. [ 670.393616][T28569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6284'. [ 670.674432][T28540] veth0_to_bridge: left promiscuous mode [ 670.772608][T28595] nbd: must specify at least one socket [ 670.855358][T28595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6292'. [ 670.891572][T28600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6293'. [ 670.901097][T28600] netlink: 'syz.0.6293': attribute type 7 has an invalid length. [ 670.911558][T28600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6293'. [ 670.925186][T28600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6293'. [ 670.936035][T28600] netlink: 'syz.0.6293': attribute type 1 has an invalid length. [ 670.984994][T28600] netlink: 'syz.0.6293': attribute type 1 has an invalid length. [ 671.028550][T28600] bond5: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 671.044491][T28600] bond5: entered promiscuous mode [ 671.050893][T28600] bond5: entered allmulticast mode [ 671.056928][T28600] 8021q: adding VLAN 0 to HW filter on device bond5 [ 671.299657][T28621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6298'. [ 671.619650][T28642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6306'. [ 671.689631][T28646] netlink: 'syz.3.6307': attribute type 6 has an invalid length. [ 672.152418][T28671] x_tables: duplicate underflow at hook 3 [ 672.432313][T28669] bond2: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 672.446372][T28669] bond2: entered promiscuous mode [ 672.451997][T28669] bond2: entered allmulticast mode [ 672.458062][T28669] 8021q: adding VLAN 0 to HW filter on device bond2 [ 672.802895][T28707] netlink: 'syz.1.6323': attribute type 2 has an invalid length. [ 672.895196][T28717] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 672.905908][T28699] netlink: 'syz.2.6320': attribute type 1 has an invalid length. [ 674.060098][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 674.442891][T28769] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 674.455324][T28769] bond3 (unregistering): Released all slaves [ 674.828403][T28793] syzkaller1: entered promiscuous mode [ 674.833945][T28793] syzkaller1: entered allmulticast mode [ 675.115885][T28810] netlink: 'syz.2.6346': attribute type 1 has an invalid length. [ 675.233005][T28817] __nla_validate_parse: 15 callbacks suppressed [ 675.233026][T28817] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6349'. [ 675.279715][T28806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6342'. [ 675.328211][T28824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6351'. [ 675.346521][T28824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6351'. [ 675.357791][T28824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6351'. [ 675.436642][T28806] bond0: (slave dummy0): Releasing backup interface [ 675.550017][T28836] netlink: 'syz.2.6355': attribute type 3 has an invalid length. [ 675.789287][T28841] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6356'. [ 676.064571][T28852] netlink: 'syz.3.6359': attribute type 6 has an invalid length. [ 676.271754][T28860] IPVS: set_ctl: invalid protocol: 60 172.30.0.5:20003 [ 676.352493][T28871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6366'. [ 676.414905][T28877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6367'. [ 677.051471][T28903] sctp: [Deprecated]: syz.4.6373 (pid 28903) Use of int in max_burst socket option. [ 677.051471][T28903] Use struct sctp_assoc_value instead [ 677.134424][T28907] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 677.349623][T28916] netlink: 'syz.0.6372': attribute type 7 has an invalid length. [ 677.373290][T28918] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6377'. [ 677.391660][T28916] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6372'. [ 677.620135][T28934] netlink: 'syz.2.6381': attribute type 12 has an invalid length. [ 678.141646][T28943] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.275507][T28943] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.403923][T28943] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.535617][T28943] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.601198][T28965] netlink: 'syz.2.6393': attribute type 5 has an invalid length. [ 678.706781][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.771098][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.821224][T28975] netlink: 'syz.3.6398': attribute type 2 has an invalid length. [ 678.875180][ T1095] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.994754][ T1335] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.296548][T29044] netlink: 'syz.2.6416': attribute type 64 has an invalid length. [ 680.306063][T29044] __nla_validate_parse: 8 callbacks suppressed [ 680.306086][T29044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6416'. [ 680.420134][T29053] netlink: 212352 bytes leftover after parsing attributes in process `syz.0.6419'. [ 680.421173][T29055] netlink: 212352 bytes leftover after parsing attributes in process `syz.0.6419'. [ 680.430710][T29053] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 680.451165][T29055] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 680.494925][T29050] syzkaller1: left promiscuous mode [ 680.500498][T29050] syzkaller1: left allmulticast mode [ 680.713435][T29063] bridge: RTM_NEWNEIGH with invalid ether address [ 680.764711][T29065] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.779837][T29070] netlink: 'syz.3.6423': attribute type 16 has an invalid length. [ 680.781829][T29065] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.787803][T29070] netlink: 'syz.3.6423': attribute type 17 has an invalid length. [ 680.919221][T29070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 681.022359][ T5843] Bluetooth: hci5: link tx timeout [ 681.034787][ T5843] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 681.158264][T29088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6431'. [ 681.167693][T29088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6431'. [ 681.345363][T29096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6432'. [ 681.625946][T29118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6439'. [ 681.639579][T29118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6439'. [ 681.652832][T29118] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6439'. [ 682.032342][T29138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6446'. [ 682.246589][T29149] netlink: 'syz.4.6451': attribute type 1 has an invalid length. [ 682.294324][T29149] bond3 (unregistering): Released all slaves [ 682.341349][T29154] ip6tnl3: entered promiscuous mode [ 682.346714][T29154] ip6tnl3: entered allmulticast mode [ 682.506929][T29155] gre0: left promiscuous mode [ 682.878922][T29155] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.886831][T29155] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.978734][T29155] team_slave_0: left promiscuous mode [ 682.984629][T29155] team_slave_1: left promiscuous mode [ 683.108177][ T5836] Bluetooth: hci5: command 0x0406 tx timeout [ 683.181773][T29155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.209563][T29155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.253720][T29155] veth0_virt_wifi: left allmulticast mode [ 683.486369][T29155] vlan2: left promiscuous mode [ 683.492041][T29155] bridge0: left promiscuous mode [ 683.502770][T29155] bond5: left promiscuous mode [ 683.508554][T29155] bond5: left allmulticast mode [ 683.656326][ T7492] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.692926][ T7492] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.721516][ T7492] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.770676][ T7492] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.095943][T29211] Bluetooth: MGMT ver 1.23 [ 684.368677][T29219] tipc: Enabled bearer , priority 0 [ 684.376564][T29219] syzkaller0: entered promiscuous mode [ 684.408215][T29219] syzkaller0: entered allmulticast mode [ 684.629766][T29234] tipc: Resetting bearer [ 684.673588][T29218] tipc: Resetting bearer [ 684.753618][T29218] tipc: Disabling bearer [ 685.003215][T29244] erspan0: entered promiscuous mode [ 685.010695][T29244] erspan0: entered allmulticast mode [ 685.349195][T29269] tipc: Enabled bearer , priority 0 [ 685.360018][T29269] syzkaller0: entered promiscuous mode [ 685.365963][T29269] syzkaller0: entered allmulticast mode [ 685.380272][T29269] __nla_validate_parse: 6 callbacks suppressed [ 685.380295][T29269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6481'. [ 685.411037][T29274] netlink: 'syz.2.6482': attribute type 2 has an invalid length. [ 685.426334][T29270] vlan3: entered promiscuous mode [ 685.518582][T29274] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6482'. [ 685.557904][T29274] nbd: must specify a device to reconfigure [ 685.597244][T29270] bridge0: entered promiscuous mode [ 686.467835][ T8100] tipc: Node number set to 3285612646 [ 690.262406][T29269] tipc: Resetting bearer [ 690.289175][T29268] tipc: Resetting bearer [ 690.333882][T29268] tipc: Disabling bearer [ 690.383800][T29286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6485'. [ 690.836125][T29311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6493'. [ 690.942733][T29317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6493'. [ 690.978871][T29306] C: entered promiscuous mode [ 691.030966][T29323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6497'. [ 691.058147][T29323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6497'. [ 691.075765][T29323] netlink: 'syz.2.6497': attribute type 1 has an invalid length. [ 691.120396][T29323] bond1: (slave ip6gretap1): making interface the new active one [ 691.129254][T29323] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 691.137722][T29323] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 691.141912][T29329] netlink: 'syz.4.6498': attribute type 1 has an invalid length. [ 691.145741][T29323] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 691.170959][T29305] C: left promiscuous mode [ 691.251355][T29329] 8021q: adding VLAN 0 to HW filter on device bond3 [ 691.295315][T29327] bond3: (slave geneve2): making interface the new active one [ 691.318757][T29337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6501'. [ 691.344505][T29327] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 691.449941][T29342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6503'. [ 691.503071][T29349] netlink: 'syz.1.6505': attribute type 6 has an invalid length. [ 691.519437][T29346] 8021q: adding VLAN 0 to HW filter on device bond4 [ 691.531469][T29351] netlink: 'syz.1.6505': attribute type 6 has an invalid length. [ 691.543068][T29351] netlink: 'syz.1.6505': attribute type 6 has an invalid length. [ 691.551276][T29349] netlink: 'syz.1.6505': attribute type 6 has an invalid length. [ 691.954221][T29364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6509'. [ 691.995863][T29363] tipc: Enabled bearer , priority 0 [ 692.005502][T29363] syzkaller0: entered promiscuous mode [ 692.013323][T29363] syzkaller0: entered allmulticast mode [ 692.023659][T29368] netlink: 'syz.3.6511': attribute type 1 has an invalid length. [ 692.064295][T29363] tipc: Resetting bearer [ 692.075572][T29361] tipc: Resetting bearer [ 692.120353][T29361] tipc: Disabling bearer [ 692.258736][T29378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6513'. [ 692.269856][T29378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6513'. [ 692.293312][T29378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6513'. [ 692.979510][T29418] sit0: entered promiscuous mode [ 693.039949][T29418] netlink: 'syz.4.6524': attribute type 1 has an invalid length. [ 694.471497][T29490] bridge0: port 1(batadv1) entered blocking state [ 694.497541][T29490] bridge0: port 1(batadv1) entered disabled state [ 694.522269][T29490] batadv1: entered allmulticast mode [ 694.557309][T29490] batadv1: entered promiscuous mode [ 694.707102][T29500] tipc: Enabled bearer , priority 0 [ 694.723258][T29500] syzkaller0: entered promiscuous mode [ 694.733052][T29500] syzkaller0: entered allmulticast mode [ 694.810164][T29500] tipc: Resetting bearer [ 694.839716][T29496] tipc: Resetting bearer [ 694.909953][T29496] tipc: Disabling bearer [ 694.956139][T29509] netlink: 'syz.2.6549': attribute type 1 has an invalid length. [ 694.969637][ T1113] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 694.979500][ T1113] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 695.033156][T29519] 8021q: adding VLAN 0 to HW filter on device bond2 [ 695.595794][T29552] netlink: 'syz.3.6563': attribute type 19 has an invalid length. [ 695.771236][T29561] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 695.884105][T29569] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20001 [ 696.103765][T29584] __nla_validate_parse: 8 callbacks suppressed [ 696.103786][T29584] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6571'. [ 696.250079][T29597] macvtap1: entered allmulticast mode [ 696.255714][T29597] veth0_macvtap: entered allmulticast mode [ 696.308454][T29595] macvtap2: entered allmulticast mode [ 696.332332][T29595] macvtap3: entered allmulticast mode [ 696.376009][T29595] macvtap4: entered allmulticast mode [ 696.408766][T29595] macvtap5: entered allmulticast mode [ 696.425995][T29595] macvtap6: entered allmulticast mode [ 696.443899][T29595] macvtap7: entered allmulticast mode [ 696.464920][T29595] macvtap8: entered allmulticast mode [ 696.516001][T29595] macvtap9: entered allmulticast mode [ 696.534586][T29595] macvtap10: entered allmulticast mode [ 696.553226][T29595] macvtap11: entered allmulticast mode [ 696.570322][T29595] macvtap12: entered allmulticast mode [ 696.593613][T29595] macvtap13: entered allmulticast mode [ 696.613165][T29595] macvtap14: entered allmulticast mode [ 696.635493][T29595] macvtap15: entered allmulticast mode [ 696.646029][T29606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6577'. [ 696.658647][T29606] netlink: 'syz.2.6577': attribute type 9 has an invalid length. [ 696.660815][T29595] macvtap16: entered allmulticast mode [ 696.667703][T29606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6577'. [ 696.687588][T29595] macvtap17: entered allmulticast mode [ 696.715239][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.716659][T29606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6577'. [ 696.725253][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.746926][T29606] netlink: 'syz.2.6577': attribute type 9 has an invalid length. [ 696.755822][T29606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6577'. [ 696.806770][T29595] macvtap18: entered allmulticast mode [ 696.821187][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.862647][T29595] macvtap19: entered allmulticast mode [ 696.872246][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.939309][T29595] macvtap20: entered allmulticast mode [ 696.970915][T29595] macvtap21: entered allmulticast mode [ 696.982664][T29625] netlink: 'syz.3.6581': attribute type 2 has an invalid length. [ 696.990137][T29595] macvtap22: entered allmulticast mode [ 697.019890][ T5843] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 697.026433][T29595] macvtap23: entered allmulticast mode [ 697.048906][T29628] netlink: 'syz.4.6583': attribute type 1 has an invalid length. [ 697.306875][T29641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6588'. [ 697.409796][T29628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 697.430630][T29642] C: renamed from lo (while UP) [ 697.450920][T29642] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 697.904647][T29671] netlink: 'syz.1.6596': attribute type 10 has an invalid length. [ 697.933919][T29671] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 698.001101][T29679] netlink: 'syz.2.6599': attribute type 12 has an invalid length. [ 698.021700][T29681] atomic_op ffff888050a44998 conn xmit_atomic 0000000000000000 [ 698.049591][T29679] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6599'. [ 698.386196][T29701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6606'. [ 698.522797][T29709] netlink: 'syz.3.6609': attribute type 10 has an invalid length. [ 698.532319][T29709] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6609'. [ 698.548613][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 698.563379][T29709] batadv0: entered promiscuous mode [ 698.569572][T29709] batadv0: entered allmulticast mode [ 698.575830][T29709] bridge0: port 3(batadv0) entered blocking state [ 698.585425][T29709] bridge0: port 3(batadv0) entered disabled state [ 698.848313][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 698.858973][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 698.864919][T29720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.884481][T29726] delete_channel: no stack [ 699.451343][T29751] xt_CT: You must specify a L4 protocol and not use inversions on it [ 699.500744][T29755] netlink: 'syz.4.6624': attribute type 10 has an invalid length. [ 699.517690][T29755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.540291][T29755] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 699.597562][T29755] netlink: 'syz.4.6624': attribute type 10 has an invalid length. [ 699.631368][T29755] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6624'. [ 699.673272][T29764] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 699.688272][T29755] batadv0: entered promiscuous mode [ 699.703895][T29755] batadv0: entered allmulticast mode [ 699.756444][T29755] bond0: (slave batadv0): Releasing backup interface [ 699.816300][T29755] bridge0: port 3(batadv0) entered blocking state [ 699.829722][T29755] bridge0: port 3(batadv0) entered disabled state [ 699.856991][T29771] Cannot find add_set index 1 as target [ 699.871670][T29751] bridge0: port 2(ipvlan2) entered blocking state [ 699.879236][T29751] bridge0: port 2(ipvlan2) entered disabled state [ 699.886023][T29751] ipvlan2: entered allmulticast mode [ 699.892837][T29751] bridge0: entered allmulticast mode [ 699.909842][T29751] ipvlan2: left allmulticast mode [ 699.923054][T29751] bridge0: left allmulticast mode [ 700.004695][T29778] 8021q: VLANs not supported on lo [ 700.085112][T29780] vlan3: entered allmulticast mode [ 700.091916][T29780] bridge0: entered allmulticast mode [ 700.098609][T29780] bridge4: port 1(vlan3) entered blocking state [ 700.105398][T29780] bridge4: port 1(vlan3) entered disabled state [ 700.124186][T29780] vlan3: entered promiscuous mode [ 700.130167][T29780] bridge0: entered promiscuous mode [ 700.167854][ T1095] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 700.178228][ T1095] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 700.300367][ T1335] wlan1: Trigger new scan to find an IBSS to join [ 700.444602][T29797] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 700.449641][T29801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.709957][T29816] netlink: 'syz.3.6640': attribute type 3 has an invalid length. [ 700.916457][T29824] lo: entered allmulticast mode [ 700.923931][T29824] xt_cgroup: path and classid specified [ 701.310392][T29849] __nla_validate_parse: 7 callbacks suppressed [ 701.310417][T29849] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6653'. [ 701.383193][T29853] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6654'. [ 701.695546][T29857] validate_nla: 4 callbacks suppressed [ 701.695568][T29857] netlink: 'syz.1.6656': attribute type 10 has an invalid length. [ 701.797124][T29857] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6656'. [ 701.829042][T29857] batadv0: entered promiscuous mode [ 701.834409][T29857] batadv0: entered allmulticast mode [ 701.899034][T29857] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 702.225695][T29876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6664'. [ 702.523991][T29886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6667'. [ 702.576400][T29887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6667'. [ 702.610489][T29887] netlink: 'syz.1.6667': attribute type 9 has an invalid length. [ 702.648173][T29886] netlink: 'syz.1.6667': attribute type 9 has an invalid length. [ 703.110548][T29919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6675'. [ 703.255890][ T5837] hid (null): unknown global tag 0xe [ 703.263362][ T5837] hid (null): nested delimiters [ 703.462656][T29939] netlink: 'syz.3.6680': attribute type 1 has an invalid length. [ 704.188613][T29968] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6688'. [ 704.205558][T29955] delete_channel: no stack [ 704.421038][ T5837] hid-generic 0005:0D45:1012.0002: unknown global tag 0xe [ 704.430087][ T5837] hid-generic 0005:0D45:1012.0002: item 0 2 1 14 parsing failed [ 704.448009][ T5837] hid-generic 0005:0D45:1012.0002: probe with driver hid-generic failed with error -22 [ 704.844986][T30005] batadv_slave_0: entered promiscuous mode [ 704.865943][T30004] batadv_slave_0: left promiscuous mode [ 705.066575][T30022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6704'. [ 705.086827][T30022] netlink: 'syz.3.6704': attribute type 7 has an invalid length. [ 705.101585][T30022] netlink: 'syz.3.6704': attribute type 8 has an invalid length. [ 705.116576][T30022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6704'. [ 705.338214][ T7497] wlan1: Trigger new scan to find an IBSS to join [ 705.520585][T30050] netlink: 'syz.1.6712': attribute type 10 has an invalid length. [ 705.941645][T30080] tipc: Enabling of bearer rejected, failed to enable media [ 706.248098][ T7497] wlan1: Creating new IBSS network, BSSID 7e:4a:d8:d4:d7:4a [ 706.491748][T30116] batadv0: mtu less than device minimum [ 706.511431][T30116] __nla_validate_parse: 4 callbacks suppressed [ 706.511452][T30116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6734'. [ 706.919959][T30136] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6741'. [ 707.128587][T30154] netlink: 'syz.3.6747': attribute type 21 has an invalid length. [ 707.136660][T30154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6747'. [ 707.149612][T30154] netlink: 'syz.3.6747': attribute type 21 has an invalid length. [ 707.158028][T30154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6747'. [ 707.290323][T30161] xt_ecn: cannot match TCP bits for non-tcp packets [ 707.342104][T30164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 707.459433][T30169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6748'. [ 707.552094][T30174] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6753'. [ 707.673348][T30169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6748'. [ 707.826595][T30189] netlink: 216 bytes leftover after parsing attributes in process `syz.4.6756'. [ 707.835882][T30189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6756'. [ 707.951623][T30193] Bluetooth: MGMT ver 1.23 [ 708.372281][T30215] netlink: 'syz.3.6765': attribute type 1 has an invalid length. [ 708.420810][T30215] 8021q: adding VLAN 0 to HW filter on device bond3 [ 708.509115][T30223] netlink: 'syz.3.6767': attribute type 1 has an invalid length. [ 708.517548][T30223] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6767'. [ 708.669396][T30229] IPv6: NLM_F_REPLACE set, but no existing node found! [ 708.771586][T30236] netlink: 'syz.2.6772': attribute type 4 has an invalid length. [ 708.952339][T30247] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 709.045079][T30254] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 709.760219][T30298] bridge0: port 4(vlan2) entered blocking state [ 709.768268][T30298] bridge0: port 4(vlan2) entered disabled state [ 709.777430][T30298] vlan2: entered allmulticast mode [ 709.795587][T30298] bridge0: entered allmulticast mode [ 709.804814][T30301] netlink: ct family unspecified [ 709.818463][T30301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.842978][T30298] vlan2: left allmulticast mode [ 709.851251][T30298] bridge0: left allmulticast mode [ 709.989626][ T5843] Bluetooth: hci2: command 0x0401 tx timeout [ 709.995920][ T5836] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 710.373234][T30330] IPVS: set_ctl: invalid protocol: 33 172.20.20.16:21 [ 710.939473][T30358] NCSI netlink: No device for ifindex 0 [ 710.974254][T30358] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 711.052728][T30364] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 711.067948][T30364] team0: Device macvtap0 is already an upper device of the team interface [ 712.122413][T30428] __nla_validate_parse: 12 callbacks suppressed [ 712.122438][T30428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6827'. [ 712.400148][T30443] IPv6: Can't replace route, no match found [ 712.409757][T30444] netlink: 'syz.3.6833': attribute type 3 has an invalid length. [ 712.420117][T30439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6832'. [ 712.445197][T30444] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6833'. [ 712.456684][T30444] netlink: 'syz.3.6833': attribute type 3 has an invalid length. [ 712.469706][T30444] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6833'. [ 712.488630][T30446] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 712.526035][T30447] netlink: 'syz.1.6834': attribute type 21 has an invalid length. [ 712.579001][T30447] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6834'. [ 712.607658][T30447] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6834'. [ 712.625761][T30447] netlink: 'syz.1.6834': attribute type 21 has an invalid length. [ 712.634846][T30447] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6834'. [ 712.641256][T30451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6835'. [ 712.645430][T30447] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6834'. [ 712.683347][T30447] netlink: 'syz.1.6834': attribute type 21 has an invalid length. [ 712.692344][T30447] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6834'. [ 712.715679][T30447] netlink: 'syz.1.6834': attribute type 21 has an invalid length. [ 712.724974][T30447] netlink: 'syz.1.6834': attribute type 21 has an invalid length. [ 712.733847][T30447] netlink: 'syz.1.6834': attribute type 21 has an invalid length. [ 712.752747][T30447] netlink: 'syz.1.6834': attribute type 21 has an invalid length. [ 712.766106][T30447] netlink: 'syz.1.6834': attribute type 21 has an invalid length. [ 712.880789][T30455] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 712.894782][T30455] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.954264][T30462] bond6: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 712.979160][T30462] bond6: entered promiscuous mode [ 712.984371][T30462] bond6: entered allmulticast mode [ 712.990213][T30462] 8021q: adding VLAN 0 to HW filter on device bond6 [ 713.049566][T30455] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 713.060277][T30455] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.138125][T30473] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 713.229735][T30473] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 713.246320][T30473] gretap1: entered promiscuous mode [ 713.262507][T30473] gretap1: entered allmulticast mode [ 713.342344][T30455] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 713.354725][T30455] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.672606][T30455] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 713.683849][T30455] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.885080][ T74] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 713.913713][ T74] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.989641][ T74] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 714.010034][ T74] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.174266][T30508] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 714.188465][T30508] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 714.241763][ T74] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 714.271326][ T74] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.312457][ T74] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 714.328107][ T74] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.540025][T30517] sctp: [Deprecated]: syz.4.6853 (pid 30517) Use of int in maxseg socket option. [ 714.540025][T30517] Use struct sctp_assoc_value instead [ 714.741421][T30528] Bluetooth: MGMT ver 1.23 [ 714.762506][T30522] team0: Device ip6gre2 is of different type [ 715.028784][T30523] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 715.054877][ T1095] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.074375][ T1095] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.088840][ T1095] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.142985][ T1095] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.066200][T30570] gre3: entered promiscuous mode [ 716.085403][T30570] gre3: entered allmulticast mode [ 716.932025][T30623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 716.975639][T30626] erspan0: entered promiscuous mode [ 716.994754][T30626] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 717.001563][T30626] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 717.231547][T30637] __nla_validate_parse: 76 callbacks suppressed [ 717.231574][T30637] netlink: 13 bytes leftover after parsing attributes in process `syz.4.6885'. [ 717.324892][T30640] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6886'. [ 717.470809][T30646] validate_nla: 34 callbacks suppressed [ 717.470831][T30646] netlink: 'syz.1.6888': attribute type 1 has an invalid length. [ 717.524406][T30646] 8021q: adding VLAN 0 to HW filter on device bond5 [ 717.835358][T30667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6892'. [ 717.846125][T30667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6892'. [ 718.311069][T30695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6900'. [ 718.387941][T30702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6902'. [ 719.228967][T30732] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 719.300694][T30742] netlink: 'syz.4.6912': attribute type 26 has an invalid length. [ 719.309266][T30742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6912'. [ 719.320486][T30742] netlink: 'syz.4.6912': attribute type 26 has an invalid length. [ 719.359243][T30742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6912'. [ 719.621377][T30755] FAULT_INJECTION: forcing a failure. [ 719.621377][T30755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.667140][T30755] CPU: 1 UID: 0 PID: 30755 Comm: syz.1.6917 Not tainted syzkaller #0 PREEMPT(full) [ 719.667173][T30755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 719.667185][T30755] Call Trace: [ 719.667194][T30755] [ 719.667203][T30755] dump_stack_lvl+0x189/0x250 [ 719.667233][T30755] ? __pfx____ratelimit+0x10/0x10 [ 719.667263][T30755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 719.667284][T30755] ? __pfx__printk+0x10/0x10 [ 719.667329][T30755] should_fail_ex+0x414/0x560 [ 719.667358][T30755] _copy_to_user+0x31/0xb0 [ 719.667390][T30755] simple_read_from_buffer+0xe1/0x170 [ 719.667420][T30755] proc_fail_nth_read+0x1b3/0x220 [ 719.667454][T30755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 719.667491][T30755] ? rw_verify_area+0x2a6/0x4d0 [ 719.667511][T30755] ? __lock_acquire+0xab9/0xd20 [ 719.667537][T30755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 719.667569][T30755] vfs_read+0x1fd/0xa30 [ 719.667588][T30755] ? fdget_pos+0x247/0x320 [ 719.667617][T30755] ? __pfx___mutex_lock+0x10/0x10 [ 719.667639][T30755] ? __pfx_vfs_read+0x10/0x10 [ 719.667664][T30755] ? __fget_files+0x2a/0x420 [ 719.667695][T30755] ? __fget_files+0x3a0/0x420 [ 719.667718][T30755] ? __fget_files+0x2a/0x420 [ 719.667753][T30755] ksys_read+0x145/0x250 [ 719.667779][T30755] ? __pfx_ksys_read+0x10/0x10 [ 719.667806][T30755] ? do_syscall_64+0xbe/0xfa0 [ 719.667841][T30755] do_syscall_64+0xfa/0xfa0 [ 719.667867][T30755] ? lockdep_hardirqs_on+0x9c/0x150 [ 719.667897][T30755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.667917][T30755] ? clear_bhb_loop+0x60/0xb0 [ 719.667945][T30755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.667964][T30755] RIP: 0033:0x7fd65d18d8dc [ 719.667986][T30755] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 719.668004][T30755] RSP: 002b:00007fd65e034030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 719.668027][T30755] RAX: ffffffffffffffda RBX: 00007fd65d3e5fa0 RCX: 00007fd65d18d8dc [ 719.668042][T30755] RDX: 000000000000000f RSI: 00007fd65e0340a0 RDI: 0000000000000003 [ 719.668055][T30755] RBP: 00007fd65e034090 R08: 0000000000000000 R09: 0000000000000000 [ 719.668069][T30755] R10: 0000200000000c00 R11: 0000000000000246 R12: 0000000000000001 [ 719.668083][T30755] R13: 00007fd65d3e6038 R14: 00007fd65d3e5fa0 R15: 00007ffea657c368 [ 719.668124][T30755] [ 719.962609][T30756] syzkaller0: entered promiscuous mode [ 720.000283][T30756] syzkaller0: entered allmulticast mode [ 720.700840][T30788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6927'. [ 722.887552][T30798] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6928'. [ 723.121697][ T30] audit: type=1107 audit(1759933193.928:15): pid=30810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=',?)>%K4X_ϻ:_' [ 723.249250][T30816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6934'. [ 723.495048][T30840] Dead loop on virtual device ip6_vti0, fix it urgently! [ 723.585978][T30849] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6941'. [ 723.589685][T30840] Dead loop on virtual device ip6_vti0, fix it urgently! [ 723.613930][T30840] Dead loop on virtual device ip6_vti0, fix it urgently! [ 723.644605][T30849] netlink: 788 bytes leftover after parsing attributes in process `syz.4.6941'. [ 723.815874][T30854] vlan0: entered promiscuous mode [ 723.824133][T30854] bridge0: entered promiscuous mode [ 724.111701][T30861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6945'. [ 724.149509][ T5836] Bluetooth: hci2: command 0x0401 tx timeout [ 724.451053][T30871] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 724.812483][T30890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6953'. [ 724.890580][T30890] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6953'. [ 725.085636][T30901] netlink: 'syz.3.6957': attribute type 21 has an invalid length. [ 725.093908][T30901] netlink: 'syz.3.6957': attribute type 22 has an invalid length. [ 725.105270][T30901] netlink: 'syz.3.6957': attribute type 23 has an invalid length. [ 725.114162][T30901] netlink: 'syz.3.6957': attribute type 25 has an invalid length. [ 725.122369][T30901] netlink: 'syz.3.6957': attribute type 26 has an invalid length. [ 725.130761][T30901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6957'. [ 726.001188][T30919] netlink: 'syz.0.6962': attribute type 4 has an invalid length. [ 726.009283][T30919] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6962'. [ 726.062465][T30920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6962'. [ 727.864786][T30919] `: renamed from bond0 [ 728.090482][T30933] batadv_slave_0: entered promiscuous mode [ 728.109100][T30933] batadv_slave_0: entered allmulticast mode [ 728.148787][T30935] __nla_validate_parse: 2 callbacks suppressed [ 728.148811][T30935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6968'. [ 728.381335][T30949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6974'. [ 728.405830][T30950] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 728.407748][T30948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6974'. [ 728.428004][T30949] netlink: 'syz.1.6974': attribute type 5 has an invalid length. [ 728.455082][T30948] netlink: 'syz.1.6974': attribute type 5 has an invalid length. [ 728.464686][T30954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6976'. [ 728.471018][T30955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6976'. [ 728.499236][T30952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6975'. [ 728.868508][T30973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6981'. [ 729.552301][T31034] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 729.716500][T31030] netlink: 'syz.2.6993': attribute type 1 has an invalid length. [ 729.725146][T31030] netlink: 784 bytes leftover after parsing attributes in process `syz.2.6993'. [ 731.578277][ T5843] Bluetooth: hci0: command tx timeout [ 732.385750][T31052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6999'. [ 732.557591][T31052] bond0: (slave bridge_slave_1): Releasing backup interface [ 732.715269][T31053] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 733.034395][T31078] netlink: 'syz.3.7008': attribute type 1 has an invalid length. [ 733.057768][T31078] netlink: 'syz.3.7008': attribute type 4 has an invalid length. [ 733.075898][T31078] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7008'. [ 733.124125][T31079] netlink: 'syz.3.7008': attribute type 1 has an invalid length. [ 733.166461][T31082] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.7009'. [ 733.181044][T31079] netlink: 'syz.3.7008': attribute type 4 has an invalid length. [ 733.210860][T31079] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7008'. [ 733.354771][T31092] veth0: entered promiscuous mode [ 733.361518][T31090] vlan1: entered allmulticast mode [ 733.379156][T31090] veth0_vlan: entered allmulticast mode [ 733.386012][T31090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7012'. [ 733.405144][T31092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7005'. [ 733.405539][T31096] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 733.442554][T31090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7012'. [ 733.483678][T31090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7012'. [ 733.526816][T31090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7012'. [ 733.848143][T31129] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 734.000451][T31092] veth0 (unregistering): left promiscuous mode [ 734.132910][T31141] IPVS: length: 203 != 8 [ 734.379698][ T5840] Bluetooth: hci3: command 0x0405 tx timeout [ 734.487942][T31148] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7024'. [ 734.715540][T31156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7025'. [ 734.834610][T31153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7025'. [ 734.923462][T31167] sch_fq: defrate 0 ignored. [ 735.130638][T31165] team_slave_0: left promiscuous mode [ 735.136835][T31165] team_slave_1: left promiscuous mode [ 735.145141][T31165] geneve2: left promiscuous mode [ 735.173942][T31165] batadv0: left promiscuous mode [ 735.184926][T31165] batadv0: left allmulticast mode [ 735.384214][T31165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.415594][T31165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.574653][T31165] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 735.665630][T31165] gretap1: left promiscuous mode [ 735.671701][T31165] gretap1: left allmulticast mode [ 735.713486][T31165] macvtap1: left allmulticast mode [ 735.724614][T31165] macvtap2: left allmulticast mode [ 735.734817][T31165] macvtap3: left allmulticast mode [ 735.745730][T31165] macvtap4: left allmulticast mode [ 735.756698][T31165] macvtap5: left allmulticast mode [ 735.767861][T31165] macvtap6: left allmulticast mode [ 735.775271][T31165] macvtap7: left allmulticast mode [ 735.782741][T31165] macvtap8: left allmulticast mode [ 735.790361][T31165] macvtap9: left allmulticast mode [ 735.798134][T31165] macvtap10: left allmulticast mode [ 735.805421][T31165] macvtap11: left allmulticast mode [ 735.814775][T31165] macvtap12: left allmulticast mode [ 735.823056][T31165] macvtap13: left allmulticast mode [ 735.832254][T31165] macvtap14: left allmulticast mode [ 735.840048][T31165] macvtap15: left allmulticast mode [ 735.847626][T31165] macvtap16: left allmulticast mode [ 735.854923][T31165] macvtap17: left allmulticast mode [ 735.862702][T31165] macvtap18: left allmulticast mode [ 735.870512][T31165] macvtap19: left allmulticast mode [ 735.880219][T31165] macvtap20: left allmulticast mode [ 735.889011][T31165] macvtap21: left allmulticast mode [ 735.896107][T31165] macvtap22: left allmulticast mode [ 735.903983][T31165] veth0_macvtap: left allmulticast mode [ 735.910778][T31165] macvtap23: left allmulticast mode [ 736.096394][ T1158] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.109175][ T1158] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20003 - 0 [ 736.122244][ T1158] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.131460][ T1158] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20003 - 0 [ 736.142407][ T1158] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.153219][ T1158] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20003 - 0 [ 736.162687][ T1158] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.171890][ T1158] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20003 - 0 [ 736.694829][T31227] netlink: 'syz.2.7049': attribute type 33 has an invalid length. [ 736.745629][T31227] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 736.761742][T31227] bond4 (unregistering): Released all slaves [ 737.780108][T31291] netlink: 'syz.1.7068': attribute type 11 has an invalid length. [ 737.790813][T31291] netlink: 'syz.1.7068': attribute type 4 has an invalid length. [ 738.211361][T31317] __nla_validate_parse: 15 callbacks suppressed [ 738.211393][T31317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7077'. [ 738.496510][T31335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7084'. [ 738.506020][T31335] netlink: 'syz.4.7084': attribute type 5 has an invalid length. [ 738.514120][T31335] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7084'. [ 738.656103][T31344] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 738.689535][T31344] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.699717][T31344] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.056207][T31365] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 739.089685][ T7497] batman_adv: batadv0: IGMP Querier appeared [ 739.106276][ T7497] batman_adv: batadv0: MLD Querier appeared [ 739.142775][T31374] tipc: Enabled bearer , priority 0 [ 739.153509][T31370] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 739.161487][T31370] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 739.170099][T31370] tipc: Resetting bearer [ 739.201276][ T1113] tipc: Resetting bearer [ 739.491830][T31379] macvtap2: entered promiscuous mode [ 739.499442][T31379] vlan0: entered promiscuous mode [ 739.505137][T31379] macvtap2: entered allmulticast mode [ 739.512276][T31379] vlan0: entered allmulticast mode [ 739.563873][T31380] macvtap3: entered promiscuous mode [ 739.584337][T31389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7095'. [ 739.608369][T31380] macvtap3: entered allmulticast mode [ 739.812020][T31391] tipc: Resetting bearer [ 739.885963][T31400] tipc: Enabled bearer , priority 0 [ 739.918863][T31400] syzkaller0: entered promiscuous mode [ 739.924630][T31400] syzkaller0: entered allmulticast mode [ 740.019533][T31400] tipc: Resetting bearer [ 740.028925][T31408] netlink: 'syz.3.7100': attribute type 1 has an invalid length. [ 740.036726][T31408] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7100'. [ 740.048849][T31405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7101'. [ 740.050966][ T7492] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 740.070943][T31399] tipc: Resetting bearer [ 740.148834][T31399] tipc: Disabling bearer [ 740.314514][T31422] netlink: 'syz.4.7108': attribute type 1 has an invalid length. [ 740.360265][T31422] bond6: entered promiscuous mode [ 740.361187][T31420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.365683][T31426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.384264][T31422] 8021q: adding VLAN 0 to HW filter on device bond6 [ 740.452734][T31428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7106'. [ 740.526089][T31434] x_tables: ip_tables: owner.1 match: invalid size 24 (kernel) != (user) 224 [ 740.834373][T31428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.900677][T31445] bridge0: port 1(ipvlan3) entered blocking state [ 740.955778][T31445] bridge0: port 1(ipvlan3) entered disabled state [ 740.990445][T31445] ipvlan3: entered allmulticast mode [ 741.001284][T31445] ipvlan3: left allmulticast mode [ 741.092425][T31455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7117'. [ 741.212404][T31457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7118'. [ 741.684474][T31475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7121'. [ 741.806029][T31475] netlink: 'syz.0.7121': attribute type 21 has an invalid length. [ 741.914351][T31475] netlink: 'syz.0.7121': attribute type 6 has an invalid length. [ 742.061190][T31492] netlink: 'syz.3.7130': attribute type 5 has an invalid length. [ 742.742599][T31528] netlink: 'syz.4.7141': attribute type 11 has an invalid length. [ 743.239988][ T1158] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xcc [ 743.480197][T31566] __nla_validate_parse: 1 callbacks suppressed [ 743.480267][T31566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7154'. [ 743.540517][T31569] netlink: 'syz.0.7155': attribute type 6 has an invalid length. [ 743.967943][T31557] netlink: 'syz.2.7151': attribute type 1 has an invalid length. [ 743.975957][T31557] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7151'. [ 745.468465][T31630] Cannot find map_set index 33 as target [ 745.746221][T31656] netlink: 'syz.1.7180': attribute type 2 has an invalid length. [ 745.758425][T31650] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 745.780512][T31657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7181'. [ 745.796504][T31650] bond7 (unregistering): Released all slaves [ 745.814688][T31656] netlink: 'syz.1.7180': attribute type 2 has an invalid length. [ 745.847947][T31661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7182'. [ 745.860017][T31659] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7182'. [ 746.040909][T31670] FAULT_INJECTION: forcing a failure. [ 746.040909][T31670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.058553][T31670] CPU: 1 UID: 0 PID: 31670 Comm: syz.1.7185 Not tainted syzkaller #0 PREEMPT(full) [ 746.058585][T31670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 746.058598][T31670] Call Trace: [ 746.058606][T31670] [ 746.058616][T31670] dump_stack_lvl+0x189/0x250 [ 746.058643][T31670] ? __pfx____ratelimit+0x10/0x10 [ 746.058672][T31670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 746.058691][T31670] ? __pfx__printk+0x10/0x10 [ 746.058723][T31670] should_fail_ex+0x414/0x560 [ 746.058750][T31670] _copy_to_user+0x31/0xb0 [ 746.058780][T31670] simple_read_from_buffer+0xe1/0x170 [ 746.058811][T31670] proc_fail_nth_read+0x1b3/0x220 [ 746.058844][T31670] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 746.058876][T31670] ? rw_verify_area+0x2a6/0x4d0 [ 746.058895][T31670] ? __lock_acquire+0xab9/0xd20 [ 746.058919][T31670] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 746.058949][T31670] vfs_read+0x1fd/0xa30 [ 746.058971][T31670] ? fdget_pos+0x247/0x320 [ 746.059001][T31670] ? __pfx___mutex_lock+0x10/0x10 [ 746.059021][T31670] ? __pfx_vfs_read+0x10/0x10 [ 746.059042][T31670] ? __fget_files+0x2a/0x420 [ 746.059069][T31670] ? __fget_files+0x3a0/0x420 [ 746.059090][T31670] ? __fget_files+0x2a/0x420 [ 746.059124][T31670] ksys_read+0x145/0x250 [ 746.059150][T31670] ? __pfx_ksys_read+0x10/0x10 [ 746.059175][T31670] ? do_syscall_64+0xbe/0xfa0 [ 746.059209][T31670] do_syscall_64+0xfa/0xfa0 [ 746.059236][T31670] ? lockdep_hardirqs_on+0x9c/0x150 [ 746.059263][T31670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.059291][T31670] ? clear_bhb_loop+0x60/0xb0 [ 746.059317][T31670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.059335][T31670] RIP: 0033:0x7fd65d18d8dc [ 746.059355][T31670] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 746.059373][T31670] RSP: 002b:00007fd65e034030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 746.059396][T31670] RAX: ffffffffffffffda RBX: 00007fd65d3e5fa0 RCX: 00007fd65d18d8dc [ 746.059411][T31670] RDX: 000000000000000f RSI: 00007fd65e0340a0 RDI: 0000000000000004 [ 746.059424][T31670] RBP: 00007fd65e034090 R08: 0000000000000000 R09: 0000000000000000 [ 746.059437][T31670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.059449][T31670] R13: 00007fd65d3e6038 R14: 00007fd65d3e5fa0 R15: 00007ffea657c368 [ 746.059486][T31670] [ 746.307797][T31663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7178'. [ 746.619087][T31667] wg2: entered promiscuous mode [ 746.624059][T31667] wg2: entered allmulticast mode [ 746.639215][T31681] veth1_to_bond: entered allmulticast mode [ 746.681184][T31681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7188'. [ 746.739350][T31681] veth1_to_bond (unregistering): left allmulticast mode [ 746.855920][T31681] bond0: (slave bond_slave_1): Releasing backup interface [ 747.231567][T31715] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7196'. [ 747.246771][T31715] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7196'. [ 747.256179][T31715] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7196'. [ 747.333351][T31720] xt_l2tp: missing protocol rule (udp|l2tpip) [ 748.040801][T31734] xt_nat: multiple ranges no longer supported [ 748.468233][T31779] netlink: 'syz.4.7215': attribute type 6 has an invalid length. [ 748.494162][T31784] __nla_validate_parse: 7 callbacks suppressed [ 748.494186][T31784] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7217'. [ 748.502557][ T1335] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.517196][T31779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7215'. [ 748.521903][ T1335] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.537066][T31779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7215'. [ 748.537100][T31779] netlink: 'syz.4.7215': attribute type 6 has an invalid length. [ 748.560978][ T1335] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.594291][ T1335] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.628463][T31789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7218'. [ 748.654059][T31791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7219'. [ 748.681140][T31793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7220'. [ 748.812336][T31799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7222'. [ 749.106315][ T30] audit: type=1800 audit(1759933219.898:16): pid=31813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7226" name="memory.events" dev="tmpfs" ino=2182 res=0 errno=0 [ 749.136430][ T30] audit: type=1804 audit(1759933219.938:17): pid=31813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.7226" name="/newroot/424/memory.events" dev="tmpfs" ino=2182 res=1 errno=0 [ 749.902024][T31842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7235'. [ 749.936505][T31844] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7234'. [ 750.294505][T31862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7242'. [ 750.294652][T31859] netlink: 'syz.2.7240': attribute type 9 has an invalid length. [ 750.854081][T31889] IPv6: Can't replace route, no match found [ 751.125143][T31905] C: left allmulticast mode [ 751.266323][T31910] syzkaller0: entered promiscuous mode [ 751.273581][T31910] syzkaller0: entered allmulticast mode [ 751.283357][T31912] [ 751.286016][T31912] ====================================================== [ 751.293047][T31912] WARNING: possible circular locking dependency detected [ 751.300149][T31912] syzkaller #0 Not tainted [ 751.304651][T31912] ------------------------------------------------------ [ 751.311696][T31912] syz.1.7255/31912 is trying to acquire lock: [ 751.317782][T31912] ffffffff8f62d718 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 751.327323][T31912] [ 751.327323][T31912] but task is already holding lock: [ 751.334706][T31912] ffffffff8f62d6b8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 751.344467][T31912] [ 751.344467][T31912] which lock already depends on the new lock. [ 751.344467][T31912] [ 751.354879][T31912] [ 751.354879][T31912] the existing dependency chain (in reverse order) is: [ 751.363898][T31912] [ 751.363898][T31912] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 751.371820][T31912] lock_acquire+0x120/0x360 [ 751.376863][T31912] _raw_spin_lock_bh+0x36/0x50 [ 751.382162][T31912] nr_rt_ioctl+0x390/0xd50 [ 751.387122][T31912] sock_do_ioctl+0xdc/0x300 [ 751.392170][T31912] sock_ioctl+0x576/0x790 [ 751.397041][T31912] __se_sys_ioctl+0xf9/0x170 [ 751.402264][T31912] do_syscall_64+0xfa/0xfa0 [ 751.407302][T31912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.413721][T31912] [ 751.413721][T31912] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 751.421894][T31912] lock_acquire+0x120/0x360 [ 751.427017][T31912] _raw_spin_lock_bh+0x36/0x50 [ 751.432405][T31912] nr_rt_ioctl+0x193/0xd50 [ 751.437351][T31912] sock_do_ioctl+0xdc/0x300 [ 751.442381][T31912] sock_ioctl+0x576/0x790 [ 751.447244][T31912] __se_sys_ioctl+0xf9/0x170 [ 751.452384][T31912] do_syscall_64+0xfa/0xfa0 [ 751.457427][T31912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.463852][T31912] [ 751.463852][T31912] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 751.471680][T31912] validate_chain+0xb9b/0x2140 [ 751.476970][T31912] __lock_acquire+0xab9/0xd20 [ 751.482184][T31912] lock_acquire+0x120/0x360 [ 751.487228][T31912] _raw_spin_lock_bh+0x36/0x50 [ 751.492537][T31912] nr_rt_device_down+0xa9/0x720 [ 751.497924][T31912] nr_device_event+0x137/0x150 [ 751.503222][T31912] notifier_call_chain+0x1b6/0x3e0 [ 751.508858][T31912] __dev_notify_flags+0x18d/0x2e0 [ 751.514408][T31912] netif_change_flags+0xe8/0x1a0 [ 751.519874][T31912] dev_change_flags+0x130/0x260 [ 751.525609][T31912] dev_ioctl+0x7b4/0x1150 [ 751.530467][T31912] sock_do_ioctl+0x22c/0x300 [ 751.535586][T31912] sock_ioctl+0x576/0x790 [ 751.540439][T31912] __se_sys_ioctl+0xf9/0x170 [ 751.545561][T31912] do_syscall_64+0xfa/0xfa0 [ 751.550684][T31912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.557108][T31912] [ 751.557108][T31912] other info that might help us debug this: [ 751.557108][T31912] [ 751.567538][T31912] Chain exists of: [ 751.567538][T31912] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 751.567538][T31912] [ 751.581459][T31912] Possible unsafe locking scenario: [ 751.581459][T31912] [ 751.588917][T31912] CPU0 CPU1 [ 751.594287][T31912] ---- ---- [ 751.599748][T31912] lock(nr_neigh_list_lock); [ 751.604430][T31912] lock(&nr_node->node_lock); [ 751.611717][T31912] lock(nr_neigh_list_lock); [ 751.619802][T31912] lock(nr_node_list_lock); [ 751.624396][T31912] [ 751.624396][T31912] *** DEADLOCK *** [ 751.624396][T31912] [ 751.632538][T31912] 2 locks held by syz.1.7255/31912: [ 751.637753][T31912] #0: ffffffff8f4d3c08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 751.646567][T31912] #1: ffffffff8f62d6b8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 751.656673][T31912] [ 751.656673][T31912] stack backtrace: [ 751.662567][T31912] CPU: 1 UID: 0 PID: 31912 Comm: syz.1.7255 Not tainted syzkaller #0 PREEMPT(full) [ 751.662590][T31912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 751.662601][T31912] Call Trace: [ 751.662609][T31912] [ 751.662618][T31912] dump_stack_lvl+0x189/0x250 [ 751.662642][T31912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 751.662658][T31912] ? __pfx__printk+0x10/0x10 [ 751.662675][T31912] ? print_lock_name+0xde/0x100 [ 751.662692][T31912] print_circular_bug+0x2ee/0x310 [ 751.662711][T31912] check_noncircular+0x134/0x160 [ 751.662730][T31912] validate_chain+0xb9b/0x2140 [ 751.662749][T31912] ? rt6_disable_ip+0x6b3/0x720 [ 751.662769][T31912] ? __lock_acquire+0xab9/0xd20 [ 751.662791][T31912] __lock_acquire+0xab9/0xd20 [ 751.662815][T31912] ? nr_rt_device_down+0xa9/0x720 [ 751.662835][T31912] lock_acquire+0x120/0x360 [ 751.662855][T31912] ? nr_rt_device_down+0xa9/0x720 [ 751.662879][T31912] ? nr_rt_device_down+0xa9/0x720 [ 751.662899][T31912] _raw_spin_lock_bh+0x36/0x50 [ 751.662920][T31912] ? nr_rt_device_down+0xa9/0x720 [ 751.662940][T31912] nr_rt_device_down+0xa9/0x720 [ 751.662962][T31912] ? do_raw_spin_unlock+0x122/0x240 [ 751.662982][T31912] nr_device_event+0x137/0x150 [ 751.663001][T31912] notifier_call_chain+0x1b6/0x3e0 [ 751.663019][T31912] __dev_notify_flags+0x18d/0x2e0 [ 751.663042][T31912] ? __pfx___dev_notify_flags+0x10/0x10 [ 751.663062][T31912] ? __dev_change_flags+0x4cc/0x6d0 [ 751.663085][T31912] ? __pfx___dev_change_flags+0x10/0x10 [ 751.663106][T31912] ? full_name_hash+0x92/0xe0 [ 751.663130][T31912] netif_change_flags+0xe8/0x1a0 [ 751.663153][T31912] dev_change_flags+0x130/0x260 [ 751.663177][T31912] dev_ioctl+0x7b4/0x1150 [ 751.663198][T31912] sock_do_ioctl+0x22c/0x300 [ 751.663223][T31912] ? __pfx_sock_do_ioctl+0x10/0x10 [ 751.663245][T31912] sock_ioctl+0x576/0x790 [ 751.663261][T31912] ? __pfx_sock_ioctl+0x10/0x10 [ 751.663277][T31912] ? __fget_files+0x3a0/0x420 [ 751.663295][T31912] ? __fget_files+0x2a/0x420 [ 751.663314][T31912] ? bpf_lsm_file_ioctl+0x9/0x20 [ 751.663330][T31912] ? __pfx_sock_ioctl+0x10/0x10 [ 751.663345][T31912] __se_sys_ioctl+0xf9/0x170 [ 751.663370][T31912] do_syscall_64+0xfa/0xfa0 [ 751.663394][T31912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.663409][T31912] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 751.663425][T31912] ? clear_bhb_loop+0x60/0xb0 [ 751.663442][T31912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.663457][T31912] RIP: 0033:0x7fd65d18eec9 [ 751.663473][T31912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.663488][T31912] RSP: 002b:00007fd65e034038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.663506][T31912] RAX: ffffffffffffffda RBX: 00007fd65d3e5fa0 RCX: 00007fd65d18eec9 [ 751.663524][T31912] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000008 [ 751.663535][T31912] RBP: 00007fd65d211f91 R08: 0000000000000000 R09: 0000000000000000 [ 751.663546][T31912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.663556][T31912] R13: 00007fd65d3e6038 R14: 00007fd65d3e5fa0 R15: 00007ffea657c368 [ 751.663575][T31912] [ 752.006475][T31889] Bluetooth: hci0: Opcode 0x0c03 failed: -4