last executing test programs: 3.197476954s ago: executing program 0 (id=3863): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffe}, 0x10}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x76583, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffe}, 0x10}, 0x94) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x76583, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44) (async) 3.149446611s ago: executing program 3 (id=3864): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x5082}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x804d) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x1f}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008090}, 0x4000000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000180)={0x7, 'erspan0\x00', {0xeb}, 0x6}) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000340)=[{0x0, 0x0, 0x0}], 0x1, 0x44844) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000080), &(0x7f0000000140)=0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x4084) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c000000080000000600000001000013040000000200000843000000010000000e00000006000004030000000000000005000000f70a009a0500000002000000970000000900000001000000030000000400000000000000ffffff7f0700000000000000060000000a0000000200000000000100002e71005f5f2e"], &(0x7f0000000200)=""/5, 0x8c, 0x5, 0x1, 0x7}, 0x28) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00000127bd700000040000040000000c00180008ac0f0008ac0f00"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000040) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r9, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8040002a}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x41}, 0x8080) 3.02773939s ago: executing program 0 (id=3865): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x1, 0x20, 0x7, 0xffff}, &(0x7f00000004c0)=0x18) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000000)={r2, 0x20, "8539761d97050da1f73cd313a4fa872c1741cc354b3d496baf0d000034b57e9d"}, &(0x7f0000000440)=0x28) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000080)={r4, 0x8}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a"], 0x1c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="8800000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000fffe00026000128009000100766c616e00000000500002800600010000000000100003800c0001000200000005000000040003800600050081000000280004800c00010006000000000000000c00010001000000b60000000c000100507000001000000008000500", @ANYRES32=r7, @ANYBLOB="1e175fd0338e7c9ffe2b3a050000000000000031d72de5ede62dd8fd110aa4058a093d2309a0bdc8475331a01f77"], 0x88}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r8, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="20002abd7000fddbdf250c00000008000300", @ANYRES32=r10, @ANYBLOB="08000100030000000c0006000300000000000000ffffffff", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2004800c}, 0x20008090) 2.767438179s ago: executing program 4 (id=3867): r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0}, 0x0) (async, rerun: 32) r1 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000180)=0x1, 0x4) (async, rerun: 64) r4 = socket$kcm(0x10, 0x2, 0x10) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x9, r6, 0x14}, 0x10) (async) sendto$inet6(r3, &(0x7f0000000140)='n', 0x1, 0x24008084, &(0x7f00000001c0)={0xa, 0x2, 0xa, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) unshare(0x40400) r7 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x200, 0xffffffff}, 0x20) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001200)={r8}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1a, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) shutdown(r3, 0x1) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001800dd8d03900d00ffffffff020000000008000600000020060015000400000018001680140003"], 0x3c}}, 0x0) (rerun: 32) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3ebf2c5ef3ad0bb5, 0x0, 0x3}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xeed}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6c15}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x10000}}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xce, 0x40000000}}, 0x44) (rerun: 32) getsockopt$bt_hci(r1, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) 2.682635714s ago: executing program 4 (id=3869): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x3, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x400}, {0xc, 0xc878}]}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x47, 0xff9, 0x8}, 0x28) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x2, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000000}, 0x40044) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271d, 0x0, &(0x7f00000000c0)) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}], 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r9, @ANYBLOB="12030000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x40042) 2.675128439s ago: executing program 2 (id=3870): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x37}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000680)=""/4122, &(0x7f0000000000)=0x101a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1d5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf14}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8810) 2.499704577s ago: executing program 4 (id=3871): unshare(0x23a2c5b969429cc1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000390400000000000000000000000023ebf65ebdca1f3751e64e2d54fb70d01f6f64b5c26f2483dab7373031129d8392f4a86b68e1ed48f3d2d0d808d4d26c52252b93a6433559472ffb7e25134932c3ca083fb5613428a39f85bce96cd3f7f4", @ANYRES32=0x0, @ANYBLOB="0000000000080100200012800b0001006272696467650000100002800a0014000180c20000010000"], 0x40}}, 0x4000080) 2.444217752s ago: executing program 4 (id=3872): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a000100000002002000000080"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030500000000000000080000000066a6c3477e5ecd1d9eef448fff09b53bd5fae86840725fc3b8a42258e8c110ca224e088dec6131f1250c48aebc8d7f94e6dda80af741", @ANYRES32=0x0], 0x3c}}, 0x4000000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=@newtaction={0x18, 0x76, 0x1, 0x70bd2b, 0x25d7dbfc, {}, [{0x4}]}, 0x18}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r7, 0x305, 0x70bd27, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x24044080) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'caif0\x00', 0x1000}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r10}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r10, @ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x8, 0x1010, &(0x7f0000000980)=""/4112, 0x41100, 0x24}, 0x94) r11 = socket(0x40000000015, 0x5, 0x0) getsockopt(r11, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) 2.323343941s ago: executing program 2 (id=3874): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r0], 0x1c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001580)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000200000/0x3000)=nil, 0x3000, 0x4, 0x200000006c832, r3, 0x14ccc000) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r4, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r4, @ANYRES32=r1, @ANYRES32, @ANYRESHEX=0x0, @ANYRES32=r0, @ANYRESOCT=r4], 0xc4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000e40), r0) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="20002dbd7000fedbdf250300000006000a004e240000050002000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004081) r6 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x22020400) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r7, 0x0, 0x23, 0x0, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000940)=@nat={'nat\x00', 0x1b, 0x5, 0x410, 0x2a8, 0x1a0, 0xffffffff, 0xf8, 0x0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, &(0x7f00000008c0), {[{{@ip={@loopback, @rand_addr=0x64010102, 0x0, 0xff, 'syzkaller0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x2f, 0x2, 0x2}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x6, 0x10001], 0xd}}, @common=@socket0={{0x20}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x15, @loopback, @rand_addr=0x64010100, @icmp_id=0x65, @port=0x4e21}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x24}, 0xffffff00, 0xff000000, 'caif0\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x88, 0x0, 0x2c}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @loopback, @loopback, @gre_key=0xf933, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}, @common=@ttl={{0x28}, {0x1, 0x3}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x8, {0x4}}}}, {{@ip={@empty, @local, 0xffffff00, 0xff000000, 'veth1_to_hsr\x00', 'ip6gre0\x00', {0xff}, {}, 0x73, 0x1, 0x6e}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0xcc}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @private=0xa010100, @private=0xa010102, @gre_key=0x7, @gre_key=0xe33c}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001440), 0x200002, 0x0) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001480)=ANY=[@ANYBLOB="0a00000004000000070000007f"], 0x48) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000001440)={'ipvs\x00'}, &(0x7f00000014c0)=0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x1f, &(0x7f0000001780)=ANY=[@ANYBLOB="1800000009000000000000000900000018110000", @ANYRES32=r9, @ANYBLOB="bd77db17ec03f1a324f2f9a9e0980000000000000000b702000014000000b7030000000000008500000083008000bfb0022c8c259da277fb8775a4006f0901000000000055090100000000009500000000000000180000000600000000000000040000000719060009000000185600000d0000000000e4cb702dba13f2e0892cbb8aefc8c56d0000000000003a95fcffffffffff186100000800000000000000080000001859000004000000000000000000000018660000", @ANYRES32, @ANYBLOB="00000000e10e0000186b00000f0000000000000000100000bf91000000000000b7020000010000008500000089ea7e14b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x638, 0x2a8, 0x0, 0xffffffff, 0x478, 0x478, 0x568, 0x568, 0xffffffff, 0x568, 0x568, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}}, @common=@eui64={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa7, 0x7, "1b8e7779f7994c502b12f0705be336d0602cb84a1c461a581ad3495376a8"}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x3, 0x3790e863eaa91963, 0x1, [0x4, 0xfffc, 0x1, 0x7, 0x2, 0x0, 0x9, 0x9, 0xe, 0x6, 0x7, 0x7, 0x9, 0x3, 0xef5, 0x2], 0xb}}, @common=@srh={{0x30}, {0x2c, 0x5, 0x3, 0x10, 0x2, 0x2421, 0x4}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@rand_addr=' \x01\x00', @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, @port=0x4e20, @port=0x4e22}}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00', [0xffffffff, 0xff, 0xff, 0xffffffff], [0x0, 0xff000000, 0x0, 0xffffffff], 'ip_vti0\x00', 'batadv_slave_0\x00', {}, {}, 0x2c, 0x2, 0x1}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9c6, 'system_u:object_r:inetd_child_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv4=@multicast2, @ipv4=@loopback, @icmp_id=0x67, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) r10 = openat$cgroup_int(r8, &(0x7f0000000080)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="cda647629552db46d39f5ec5d4bf879618cbd0997bedf23b5e5221d7bdb64f36add9126bf49ae37a874e178c7e1c621ac42f43b1daa5fa428e9f279ba301f363c58f22c6b7684aeddd8cbb4f", @ANYRES64=r10], 0x27) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(r11, &(0x7f0000000800)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000e00)=0x1c) 2.321662576s ago: executing program 1 (id=3875): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) listen(r2, 0x20000b) r3 = accept4(r1, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000003340)=[{&(0x7f00000004c0)="cfae17953621a98be44c25f63b57087403e262550494172dffc85be7cfb6c9e3326fe71221928b5ea1f8a675149ceb95820d73b65057240205dc9541465c3941f98fea569b0065cba7b87827dea3de18c41dc1734f18118faea949f9fe800943f11831f0ea7751a7e0f1c5aa4a572bac234d3139960c81775418588364687613284dc700db997342cb43482b3edb49dff7567bfea927057c7bee8d0f10f0d0a8f5", 0xa1}, {&(0x7f0000000580)="815dd5a88cb6c842febcbe649b5b4109559a9137156a540bfffb2e294c523fd27040e8657b6316cccf4c7ca670891a1babb45279eefd5dd872c4d904442b657f14dcc5c511a15c98fa6f055c5ae9a02f3445203cb6897520b6eea6bf4595420dc32175ab845157db7d73acba82517b725b8db52be36accf263d545b7e2fca6377b336e75020d95bbd6a15d4fccadb48cc36d2bbb6bfe134898679923929e7f5de4f50d74e816fb317c53e7ecc6de3ca49d06b7f77ca3c694d486bc73e491851f543741ec58b35cf74cbd6f4d6837efe0dbb0a7204bc6ac964d598cc34b7a", 0xde}, {&(0x7f0000000680)="99e11cd717312c6c5c0b36ccfe1f078ad130523d93de7a58a1851c88f65a25b1fc4b7189d20052bc27573f252839faee24ad05919ee7d31a134bc4d3c93a834e19e6328269bfed003d78b634677bc7258c404d0234b78df406", 0xffffff7a}, {&(0x7f0000000700)="82f952f55e745fd565f25b6b7ecb70f6e66644e40af2f89de77df427354e7ed24d91817c64683ac1ba0f75b219d0de621f3e6fb10d853e142838f0a78a277a95d7c4985c5db497d25ed122285007369affd23cb536cef322a60a8fbbc3b8e7a3982a313a4d46d09293e0d2a50de90d1a901c1aff5da00b8ffb95d898d4f5b79bde7372c546929c44a19a02ecdcfbbf5547e689b36c6440b4b49b2cae16a0a1bc504a1172670f4819f13bc13338ee0fd0be308b147d9ce6f96c597889a69d04c5b655bb08f09dd70ab6babc1e36", 0xcd}, {&(0x7f0000000800)="4a69a93ec38cf91ad3cbffd2c56b48575619237240cc8ef75648312b46c06f110503d190cf913a4bdaed24567651a104fc67566199ce0c904b60", 0x3a}, {&(0x7f0000000840)="e5ecfd4880a27afadbef4e6274024b3c27c08706c4e7a1b9b37faf66297bb0e59aeada1356e71b0e9b7da516c60e70e0431d31a2f1aeb0997300a22af4", 0x3d}, {&(0x7f0000000880)="319703aff2704daed6a395303644e701554c61ff7ee6187bfcdf947f3e04fec02012d1", 0x23}, {&(0x7f00000008c0)="775b89fc5a07b397c04ccd2ea35c9de03c7508255de7d7124c448e77091750ce007b7276061194fdd73193debcfb7f62bc22e1674e496f71ce0b666d4f70dc0d7e9e227b462c39d328cc5b81ad501c158122f284fdf49ed5cb719264e301", 0x5e}, {&(0x7f00000022c0)="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", 0x134}], 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x10, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(r3) 2.207562454s ago: executing program 0 (id=3876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="3ce52c0d02d6"}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="080008000700000000031400000045f0003f00000000002f907800000000ffffffffa20022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000b05e109ac6dc70578c74af1f0af37a0600e1ffe6b7c63b"], 0x4d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a88000000090a051100000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005000000000b"], 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 2.199714247s ago: executing program 1 (id=3877): socket$inet6(0xa, 0x2, 0xfffffffe) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0xfffe, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x6, 0x84) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000140)={@dev, @empty, 0x0}, &(0x7f0000000340)=0xc) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f00000003c0)={0x0, 0x1, 0x1, 0x40, @vifc_lcl_ifindex=r7, @broadcast}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e657269"], 0xe0}}, 0x0) sendmsg$nl_crypto(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYRES64=r4], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r9, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r6, 0x3) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001200000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$inet6(r5, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)}, 0x20040044) socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) 2.086603871s ago: executing program 3 (id=3878): socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001014d9ec29bd7000fcd9df2508001400"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x2400c015}, 0xc084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) socket$netlink(0x10, 0x3, 0x0) 1.690425562s ago: executing program 3 (id=3879): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, 0x0, 0x48851) socket$nl_generic(0x10, 0x3, 0x10) close(r0) r3 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004811}, 0x4044004) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x80000001) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r6, 0x1) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) 1.543563831s ago: executing program 2 (id=3880): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r0, &(0x7f0000001640)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xffffffffffffff18, 0x840, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f0000001640)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xffffffffffffff18, 0x840, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept(r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2e, 0x3c, 0x3, [@struct, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x7fff, [{0x0, 0x3}, {0xfffffffc, 0x1, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x81}}]}, {0x0, [0x5f]}}, 0x0, 0x57}, 0x28) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000b00)="130000000102039839", 0x9}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2001}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x35, 0x400, 0x70bd2a, 0x25dfdbfe, {0x17}, [@typed={0x8, 0x8a, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8145}, 0x40000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) getsockopt$inet6_opts(r4, 0x29, 0x36, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRES16=r5], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRES16=r5], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYRES16=r4], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x4060001) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r7, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x5c, r9, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2b95ad41fe55a3d7f10ca9003a5d67e1"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x10}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x76ae27cf5b3624b1}, 0x20000000) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x5c, r9, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2b95ad41fe55a3d7f10ca9003a5d67e1"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x10}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x76ae27cf5b3624b1}, 0x20000000) 1.395593784s ago: executing program 0 (id=3881): r0 = socket$rds(0x15, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, 0x0, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x15, 0x20000000000000bb, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r4, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket(0x10, 0x1, 0xdffffffd) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000000c0)={@multicast2, @remote, 0x0}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000240)={@mcast2, 0x32, r9}) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000007c80)="2fd0f73c8feff191a5cba05cfc2f229974a96b6f8dda81ff04", 0x19) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='vlan0\x00'}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000100)=@ethtool_channels={0x3d, 0xb9f1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x10001}}) 1.14683767s ago: executing program 2 (id=3882): socket(0xb, 0xd962577a715acf85, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06000d006a729886"], 0x15) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={0x0, 0x6}, 0x8) 1.103750688s ago: executing program 4 (id=3883): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0x5f456000) r0 = epoll_create(0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="18005a8014000180050009"], 0x34}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000003e00)={0x10bc, 0x25, 0x319, 0x70bd26, 0x8000, {0x5}, [@nested={0x10a8, 0x138, 0x0, 0x1, [@nested={0x10a4, 0x101, 0x0, 0x1, [@generic="a0101b38d33c99c5b4a88159ce9aae1219326d73c426017e1aefc57004e61011de1d33a7bf30e161b98ab694a9a6d9083bda3d1a9d124154367e0df7e528582dc347cb6315e91ab2d497caab5c217bb5fd9a299bb186ae13863075404868d3de1d4a4b1e0d12f8a2f5972e9c8e25376552c1a4e5ac171a0dd7fe978efe25e0d8eb13a99803e9", @generic="9fa9604032874a92175d8703547af9fb6b6282f9f3668bc5ffa14207e5542eac166c1f6d3472db2fc512bb13549002a08a8b6bb9547fc0bd810830a2a0b9bee5c1bbbdbad45aec3503191ff8403bbc9d3e831e2d2009ea920a18512c3b04b9a1b51defbedb9bea90925e8cbd90be2b19859c33a9c622c6c3cdd937961e85b04e0bb81cf944e139df5ff8ec7e309f83a0a1d95d55b7cef3ffe79b83ed1e367df36b2457a52552c9339e615f", @generic="c8d24d4257c52474b0744d704ddde155770a86c5d07d584d153d355d9b6ad3070937e7441768f9b1e6fb6dbaf530c84aeb254469337e8b371ae46c68412cce9e8a328dd63f7904cd48e6ca746e055b00e3b1edeb69439150a4fdc23f313f0b2e71f54400519c315904a49e45ceb1f1ee4174b2f79378bfc866ba23ddf1fd031feb6f27a86f546b8279b73aa8ca3af9e2cc7488e3", @typed={0x8, 0x7e, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="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"]}]}]}, 0x10bc}, 0x1, 0x0, 0x0, 0x4840}, 0x404c0c4) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x7fff, 0x3}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000040)=@ethtool_per_queue_op={0x4b, 0xe, [0x7, 0x0, 0x45, 0x0, 0xb, 0xfffffffa, 0x8d, 0x5, 0x401, 0x3, 0x1, 0x8, 0x7, 0x10001, 0x9, 0x80000001, 0x4, 0x4, 0x8, 0x2, 0x7, 0x40000000, 0x1, 0xffffffff, 0x7, 0x4, 0xe1, 0x7f, 0x401, 0x6, 0x800, 0x3ff, 0x3, 0x80000000, 0x4, 0x1, 0x8, 0x3ff, 0x8, 0x3, 0xb, 0x400, 0x7fff, 0xe65, 0x8, 0x6, 0xb7, 0x80000001, 0x95e6, 0x6, 0x7, 0x6, 0x80000000, 0xdbf1, 0x9, 0x8, 0x3, 0x3, 0x3, 0x7, 0x5, 0x0, 0x895, 0x3, 0x4bd, 0x0, 0x6, 0x7, 0x2, 0x2cb0, 0x5f4, 0x80000000, 0xffffffff, 0x9, 0x8001, 0x2, 0x6, 0x9, 0xfffffc01, 0x9, 0x7fff, 0x9, 0x0, 0x8, 0x0, 0x9, 0x7, 0x6, 0x78, 0x1, 0xd9da, 0x400, 0x7, 0x4, 0x2, 0x1, 0x2, 0x3, 0x400, 0x7fd1, 0xe, 0x4, 0x5, 0x3, 0x5, 0xc4c, 0x6, 0x6, 0x7, 0x576d, 0x101, 0x3, 0x7, 0x1, 0x1000, 0x89, 0x7, 0x9, 0x800, 0x5d0, 0x0, 0x8, 0x9, 0x2, 0x80000000, 0x3ff, 0x4, 0x7fffffff], "cc78d9fc4f6e8f82cd9cade96bdc3a6daa8bbfdd7164f2efa43cbb52cbd8157c8d0436e5c946dbe61842ba4b618b7febf225a6cae1b041c9623abef1a4b04c4da0012462caa9bf03a308d85d2050f1d903d5abbebc001675d63009"}}) (async) r7 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = getpid() sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, r9, 0x25, 0x2, @val=@uprobe_multi={&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=[0x16, 0x7, 0x8], 0x0, 0xdda7, 0x3, 0x1, r11}}, 0x40) 1.103375029s ago: executing program 0 (id=3884): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYRES64, @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES64=r0], 0x40}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000110850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'team0\x00', &(0x7f0000000280)=@ethtool_sfeatures={0x3b, 0x2, [{0x401, 0x8}, {0x1, 0x80000001}]}}) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/148, 0x94}], 0x1, 0xeca, 0x9efa) 1.023474363s ago: executing program 1 (id=3885): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000037c0000040042801c0001800600060088a80000100004"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000019c0)={0x0, 'macsec0\x00', {}, 0x62}) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01031400e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r6, 0x4, 0x8}, 0xc) recvmsg$kcm(r5, &(0x7f0000000540)={&(0x7f00000001c0), 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/93, 0x5d}], 0x2, &(0x7f0000000480)=""/132, 0x84}, 0x12062) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d3"}]}], {0x14}}, 0x70}}, 0x0) 981.20239ms ago: executing program 2 (id=3886): socket$nl_generic(0x10, 0x3, 0x10) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) (async, rerun: 64) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x19, 0x0, &(0x7f0000001400)) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) (async) bpf$PROG_LOAD(0x5, 0x0, 0x56e7c802b6c78090) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000280)=0xc, 0x4) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000100e1ff00000000f78000002ec0376e908b3ba579771a58dfd61f850000008a00000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) (async) shutdown(r4, 0x1) (async) write$cgroup_int(r3, &(0x7f0000000200)=0x10001, 0x12) sendfile(r3, r2, 0x0, 0xf03a0005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r6, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001e40)=""/104, 0x45}], 0x20}, 0x2}], 0x1, 0x1, 0x0) (async) sendmmsg$inet6(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="127d589163267e4b0eda2e4186729989fdd2e24baac09a37b374a16c27a136d37e08121d3864d6559759e5", 0x2b}, {&(0x7f00000003c0)="c9d9a10108979adc78d18e770debf3b9caf235b65ab08a7ad91d", 0x1a}], 0x2}}], 0x1, 0x20e8086) (async) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) 874.803097ms ago: executing program 4 (id=3887): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x0, 0xfff3}, {0xf2ff, 0xfff3}, {0xd, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001500)) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x68, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [0xb09a], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x1, {{}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="525eb52724d8e9afa919cf57a0c0ad528511e9a3f2931ebb1e5b98c34d33a53a1a354652e2ac56f3e506ad9c6479a98cbc3101cbeafde77b3335bcc7248a2a3ac2c33f0fba1e37d334497ba513fdb799f824962cec57be790f4ab10c2180d4ecb29bb247aa7ae26be5949d696940e698"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010003000000000000002600000018000180140002006c6f"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="805f9305", @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf250f0000006c00018008000300020000000800030002000000080003000200000014000200766c616e30000000000000000000000008000100", @ANYRES32=r0, @ANYBLOB="0800030000000000140002007663616e300000000000000000000000080003000200000008000300020000000800030000000000"], 0x80}, 0x1, 0x0, 0x0, 0x4804}, 0x20040004) 874.545389ms ago: executing program 0 (id=3888): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x9, @empty, 0x3, 0x3}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) read(r6, &(0x7f0000000000)=""/82, 0x52) connect$can_bcm(r6, &(0x7f0000000080)={0x1d, r5}, 0x19) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xc, 0x8}, {0xfff1, 0xa}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4008010) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r7, 0x0) 730.269989ms ago: executing program 3 (id=3889): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b400000000000000dd0a"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) 612.394532ms ago: executing program 1 (id=3890): r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x50) r4 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r4, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) socket$netlink(0x10, 0x3, 0xb) listen(r4, 0x3) close(0x4) 333.085459ms ago: executing program 3 (id=3891): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8995, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth1_to_bond\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f00000001c0)=0x80000001, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000010c0)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r2, @ANYRES8, @ANYBLOB="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"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cubic', 0xb) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000380)=0xffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x25}, [@jmp={0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x25}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 320.731074ms ago: executing program 1 (id=3892): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl(r0, 0x7fffffff, &(0x7f0000000000)="8ac496273de0de20efd5bdc7628e7318d19eb96c35b3bf7a46628ccc77ca256387213de10ecc6dc9b3") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x93}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) 199.688319ms ago: executing program 2 (id=3893): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r3, 0xaa0f4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x9, 0x10, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r5, 0xe6905000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) mmap(&(0x7f0000751000/0x1000)=nil, 0x1000, 0x200000a, 0x11, r1, 0xffffe000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x484200, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)) close(r6) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7e7e56bcacb82b5ec9a02f0d0bbd6c267ebe5414c9bdc8d322e57bb93273b81cb7d05e520fe19d3c99b17e7965aeb0d8212735852d745efdc8a5378bdb6e21dfa44699cc2c9e8d5414e54137ed870d6506909dfe8f663677d1af1fa787339be2b5938f80fd6803047637752a91f96f9b4efd806181d3a4b599bfa226b5a1f096b0691fe3a8eaa5e0fd6148ccb6d901fc85b561f767747e30b97c34759709"], 0x9e) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x4, 0x10012, r2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100"], 0x44}, 0x5}, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 130.175635ms ago: executing program 1 (id=3894): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x28, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @printk={@lx}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xb, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80010}, 0x94) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}]}}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000300)={@loopback, @rand_addr, 0x0}, &(0x7f0000000740)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xf, 0x7, 0x22, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x700, 0x7, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'erspan0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x700, 0x20, 0x7fff, 0x3, {{0x37, 0x4, 0x1, 0x26, 0xdc, 0x65, 0x0, 0x1, 0x29, 0x0, @multicast2, @multicast2, {[@ssrr={0x89, 0x13, 0xee, [@multicast1, @multicast2, @rand_addr=0x64010101, @multicast2]}, @timestamp_addr={0x44, 0x44, 0x65, 0x1, 0x0, [{@rand_addr=0x64010100, 0x472}, {@rand_addr=0x64010100, 0x7}, {@empty, 0x1}, {@rand_addr=0x64010100, 0x5}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x7fff}, {@multicast2, 0x55ba}, {@local, 0xcd}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x80000001}]}, @lsrr={0x83, 0x17, 0xa8, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x57, 0x2, [{0x6, 0x10, "94d41fb609c94ab672e65b258a19"}, {0x5, 0x2}, {0x6, 0x10, "31e778123f168e364b09e918cb50"}, {0x7, 0xe, "69380f7f8dae559b037a57b0"}, {0x2, 0x4, "8a18"}, {0x7, 0x7, "e48852d506"}, {0x5, 0x7, "b1bc47f73c"}, {0x0, 0x4, 'T|'}, {0x6, 0xb, "c12884f3babdc316a4"}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={r1, 0xe0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], 0x0, 0xac, &(0x7f0000000640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000019c0)={'tunl0\x00', &(0x7f00000018c0)={'tunl0\x00', 0x0, 0x80, 0x10, 0x10001, 0x9, {{0x2f, 0x4, 0x1, 0x37, 0xbc, 0x64, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@lsrr={0x83, 0x17, 0x42, [@broadcast, @private=0xa010102, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x3a}]}, @timestamp_addr={0x44, 0x34, 0x5e, 0x1, 0x0, [{@multicast2, 0xaff1}, {@rand_addr=0x64010100, 0x6043f7fa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@remote, 0xf}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x2}, {@empty, 0x1ff}]}, @generic={0x88, 0xd, "50ea4232ec139bc556575b"}, @cipso={0x86, 0x4a, 0x1, [{0x1, 0xb, "97c67b2d1d0be51921"}, {0x1, 0xd, "8b0844a2d1b2d6f9ebf0f7"}, {0x5, 0x10, "0601ebab72f5e6705135087938a0"}, {0x0, 0xd, "f0abc4ed6c4c09d49899bb"}, {0x0, 0x6, "7b2a024c"}, {0x2, 0x9, "8945b937c6e70e"}]}, @end, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001a00)={'batadv0\x00', 0x0}) r13 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r15}, &(0x7f0000000840), &(0x7f0000000880)=r16}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r16, r14, 0x25, 0x0, @val=@tcx={@void, @value=r16}}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001b80)={'tunl0\x00', &(0x7f0000001a40)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0x7f, 0x0, {{0x41, 0x4, 0x0, 0x3a, 0x104, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast2, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0x87, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@empty, 0x1}, {@empty, 0x2}, {@multicast1, 0x8b39}, {@private=0xa010102, 0x99b0}]}, @timestamp_addr={0x44, 0x14, 0x5f, 0x1, 0x7, [{@broadcast, 0x3f52}, {@multicast2}]}, @timestamp_addr={0x44, 0x2c, 0xbb, 0x1, 0x2, [{@empty, 0x6}, {@loopback, 0xe}, {@dev={0xac, 0x14, 0x14, 0x37}, 0xed85}, {@private=0xa010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x4}]}, @timestamp={0x44, 0x14, 0xb6, 0x0, 0x6, [0x2, 0xf707, 0x5, 0x79309a94]}, @ssrr={0x89, 0x1f, 0x7a, [@empty, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010100, @private=0xa010102, @remote, @local, @rand_addr=0x64010101]}, @ssrr={0x89, 0x7, 0xb, [@remote]}, @cipso={0x86, 0x29, 0x1, [{0x2, 0xd, "d6ebd89e572249b862ee3a"}, {0x1, 0x7, "fad9d35bd3"}, {0x0, 0xf, "710d2e62ca52c26bc5d7b85ca0"}]}, @rr={0x7, 0x1f, 0x67, [@broadcast, @loopback, @empty, @multicast1, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001c80)={'syztnl2\x00', &(0x7f0000001bc0)={'syztnl1\x00', 0x0, 0x7, 0x8, 0xaa8, 0x9, {{0x20, 0x4, 0x2, 0x38, 0x80, 0x66, 0x0, 0xed, 0x5d7379adce8a45f9, 0x0, @multicast1, @local, {[@noop, @timestamp_prespec={0x44, 0x54, 0xc0, 0x3, 0x0, [{@private=0xa010102, 0xc}, {@multicast1, 0x4}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x8}, {@local}, {@private=0xa010102, 0x4}, {@local, 0xe8e}, {@rand_addr=0x64010102, 0x4}, {@loopback}, {@rand_addr=0x64010100, 0xffff0480}]}, @ssrr={0x89, 0x17, 0x27, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x29}, @empty]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001f80)={r1, 0xe0, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001cc0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d40)=[0x0, 0x0], 0x0, 0xa8, &(0x7f0000001d80)=[{}], 0x8, 0x10, &(0x7f0000001dc0), &(0x7f0000001e00), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001fc0)={'batadv0\x00', 0x0}) r21 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r21, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r23 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r23, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r22, {0xb, 0xd}, {}, {0x8, 0xc}}}, 0x24}}, 0x40004) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000002280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002240)={&(0x7f0000002000)={0x20c, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20c}}, 0x40000) 0s ago: executing program 3 (id=3895): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x4000000}, @printk={@x, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfff8, 0x500}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) kernel console output (not intermixed with test programs): LAN 0 to HW filter on device bond13 [ 641.674772][T17241] bond13: (slave wireguard0): refused to change device type [ 641.875632][T17249] block nbd0: NBD_DISCONNECT [ 642.031876][T17245] dvmrp0: left allmulticast mode [ 642.041807][T17245] pimreg: left allmulticast mode [ 642.056481][T17245] syz_tun: left allmulticast mode [ 642.249717][T17265] block nbd0: Unsupported socket: should be TCP or UNIX. [ 642.728851][T17287] block nbd0: not configured, cannot reconfigure [ 642.737246][T17289] netlink: 'syz.4.2925': attribute type 1 has an invalid length. [ 642.816953][T17289] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 643.100545][T17301] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 643.133285][T17301] netlink: 'syz.2.2927': attribute type 13 has an invalid length. [ 643.369872][T17306] netlink: 'syz.0.2929': attribute type 1 has an invalid length. [ 643.633930][T15030] hsr_slave_0: left promiscuous mode [ 643.647344][T15030] batman_adv: batadv0: Removing interface: dummy0 [ 643.678608][ T808] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 644.062537][T17304] netlink: 'syz.3.2930': attribute type 1 has an invalid length. [ 644.270911][T17321] __nla_validate_parse: 9 callbacks suppressed [ 644.270931][T17321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2933'. [ 644.299544][T16995] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 644.377597][T16995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 644.386772][T16995] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 644.400564][T16995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 644.496257][T16995] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 644.553343][T16995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 644.564508][T16995] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 644.591653][T16995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 644.769979][ T808] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 644.889226][T17348] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 645.280130][T17374] ipt_rpfilter: unknown options [ 645.504871][T16995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.539537][T17378] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2941'. [ 645.594425][T16995] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.610077][T15048] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.617449][T15048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.657040][T16995] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 645.686783][T16995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 645.704520][T15048] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.711725][T15048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.978199][T17385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2942'. [ 646.350248][T15030] IPVS: stop unused estimator thread 0... [ 646.746033][T17439] syzkaller0: entered promiscuous mode [ 646.752565][T17439] syzkaller0: entered allmulticast mode [ 646.864441][T17442] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 646.883612][T17435] xt_CT: No such helper "snmp" [ 646.997954][T16995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.121892][T16995] veth0_vlan: entered promiscuous mode [ 647.181492][T16995] veth1_vlan: entered promiscuous mode [ 647.293099][T16995] veth0_macvtap: entered promiscuous mode [ 647.316280][T16995] veth1_macvtap: entered promiscuous mode [ 647.437827][T16995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.478441][T16995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.495599][T17463] lo: Caught tx_queue_len zero misconfig [ 647.538477][ T1127] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.559025][ T1127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.609785][ T1127] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.632468][ T1127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.764123][T15034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.796391][T15034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.903981][T15030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.966802][T15030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.687068][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 648.712645][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 648.721677][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 648.729750][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 648.737610][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 649.805208][T17487] lo speed is unknown, defaulting to 1000 [ 649.905250][T17522] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 650.038461][T17527] netlink: 'syz.4.2966': attribute type 11 has an invalid length. [ 650.061478][T17529] FAULT_INJECTION: forcing a failure. [ 650.061478][T17529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.074595][T17529] CPU: 1 UID: 0 PID: 17529 Comm: syz.0.2967 Not tainted syzkaller #0 PREEMPT(full) [ 650.074622][T17529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 650.074634][T17529] Call Trace: [ 650.074642][T17529] [ 650.074651][T17529] dump_stack_lvl+0xe8/0x150 [ 650.074682][T17529] should_fail_ex+0x412/0x560 [ 650.074710][T17529] _copy_from_user+0x2d/0xb0 [ 650.074735][T17529] ___sys_sendmsg+0x1c6/0x360 [ 650.074758][T17529] ? __lock_acquire+0x6b5/0x2cf0 [ 650.074785][T17529] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.074848][T17529] ? __fget_files+0x2a/0x420 [ 650.074873][T17529] ? __fget_files+0x3a0/0x420 [ 650.074910][T17529] __x64_sys_sendmsg+0x1bd/0x2a0 [ 650.074935][T17529] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 650.074969][T17529] ? __pfx_ksys_write+0x10/0x10 [ 650.075018][T17529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.075042][T17529] do_syscall_64+0x174/0xf80 [ 650.075060][T17529] ? trace_irq_disable+0x3b/0x140 [ 650.075091][T17529] ? clear_bhb_loop+0x40/0x90 [ 650.075116][T17529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.075136][T17529] RIP: 0033:0x7f2d5659ce59 [ 650.075156][T17529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.075173][T17529] RSP: 002b:00007f2d574ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.075194][T17529] RAX: ffffffffffffffda RBX: 00007f2d56815fa0 RCX: 00007f2d5659ce59 [ 650.075209][T17529] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 650.075222][T17529] RBP: 00007f2d574ba090 R08: 0000000000000000 R09: 0000000000000000 [ 650.075234][T17529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.075245][T17529] R13: 00007f2d56816038 R14: 00007f2d56815fa0 R15: 00007ffd34508ce8 [ 650.075279][T17529] [ 650.394373][T17534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2968'. [ 650.406736][T17534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2968'. [ 650.449504][T17532] 8021q: adding VLAN 0 to HW filter on device  [ 650.481677][T17536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2968'. [ 650.507369][T17532] 8021q: adding VLAN 0 to HW filter on device ` [ 650.517394][T17532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.560483][T17532] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 650.570903][T17532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 650.619876][T17532] veth1_vlan: left promiscuous mode [ 650.647748][T17532] veth0_vlan: left promiscuous mode [ 650.673820][T17532] veth0_vlan: entered promiscuous mode [ 650.712909][T17532] veth1_vlan: entered promiscuous mode [ 650.723332][T17532] veth1_macvtap: left promiscuous mode [ 650.731349][T17532] veth1_macvtap: entered promiscuous mode [ 650.745102][T17532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 650.755241][T17532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 650.765243][T17532] 8021q: adding VLAN 0 to HW filter on device bond3 [ 650.774057][T17532] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 650.783346][T17532] bridge2: left promiscuous mode [ 650.790666][T17532] 8021q: adding VLAN 0 to HW filter on device bond4 [ 650.806008][T14558] Bluetooth: hci3: command tx timeout [ 650.830356][T17532] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 650.840523][T17532] 8021q: adding VLAN 0 to HW filter on device bond5 [ 650.850940][T17532] 8021q: adding VLAN 0 to HW filter on device bond6 [ 650.859964][T17532] 8021q: adding VLAN 0 to HW filter on device bond7 [ 650.869007][T17532] 8021q: adding VLAN 0 to HW filter on device bond8 [ 650.879401][T17532] 8021q: adding VLAN 0 to HW filter on device bond9 [ 650.887626][T17532] bond9: entered promiscuous mode [ 650.892724][T17532] gretap2: entered promiscuous mode [ 650.899204][T17532] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 650.908339][T17532] 8021q: adding VLAN 0 to HW filter on device bond10 [ 650.944772][T17532] 8021q: adding VLAN 0 to HW filter on device bond11 [ 650.958369][T17532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.968957][T17532] 8021q: adding VLAN 0 to HW filter on device eth0 [ 650.977663][T17532] 8021q: adding VLAN 0 to HW filter on device eth1 [ 650.986532][T17532] 8021q: adding VLAN 0 to HW filter on device eth2 [ 650.996281][T17532] 8021q: adding VLAN 0 to HW filter on device eth3 [ 651.006460][T17532] 8021q: adding VLAN 0 to HW filter on device bond12 [ 651.041423][T14443] bridge2: entered promiscuous mode [ 651.050336][T17536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2968'. [ 651.124493][T15035] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.133348][T15035] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.174554][ T1127] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.182838][ T1127] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.244519][ T1127] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.269331][ T1127] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.279302][ T1127] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.291361][ T1127] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.428861][T17565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2973'. [ 651.687577][T17564] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.695312][T17564] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.901683][T17564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.917080][T17564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.113659][T17565] ip6gre0: Master is either lo or non-ether device [ 652.144339][ T1127] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.172193][ T1127] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.229699][ T1127] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.244934][ T1127] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.255584][T17594] netlink: 'syz.4.2977': attribute type 1 has an invalid length. [ 652.264866][ T1127] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.274812][ T1127] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.310815][T17596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2977'. [ 652.389581][T17594] 8021q: adding VLAN 0 to HW filter on device bond14 [ 652.400856][ T1127] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.413109][ T1127] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.428350][T17596] bond14: entered promiscuous mode [ 652.436651][T17596] bond14: entered allmulticast mode [ 652.594868][T17487] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.602814][T17487] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.610245][T17487] bridge_slave_0: entered allmulticast mode [ 652.619446][T17487] bridge_slave_0: entered promiscuous mode [ 652.629940][T17487] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.640331][T17487] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.648394][T17487] bridge_slave_1: entered allmulticast mode [ 652.656972][T17487] bridge_slave_1: entered promiscuous mode [ 652.699010][T17487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.713572][T17487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.794014][T17487] team0: Port device team_slave_0 added [ 652.804271][T17487] team0: Port device team_slave_1 added [ 652.882979][T14558] Bluetooth: hci3: command tx timeout [ 652.904055][T17487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.911198][T17487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.938188][T17487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.952851][T17487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.959879][T17487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.987141][T17487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.057349][T17487] hsr_slave_0: entered promiscuous mode [ 653.064208][T17487] hsr_slave_1: entered promiscuous mode [ 653.070822][T17487] debugfs: 'hsr0' already exists in 'hsr' [ 653.076659][T17487] Cannot create hsr debugfs directory [ 653.315589][T17613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2979'. [ 653.367638][T17487] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.379396][T17487] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 653.411335][T17487] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.531585][T17618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2982'. [ 653.669607][T17627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2982'. [ 653.967290][T17487] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.977119][T17487] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 653.986916][T17487] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.035522][T17640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2989'. [ 654.618506][T17487] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.628344][T17487] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 654.638212][T17487] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.964770][T14558] Bluetooth: hci3: command tx timeout [ 655.043391][T17487] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.053220][T17487] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 655.063091][T17487] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.305569][T17693] Cannot find set identified by id 65534 to match [ 655.395467][T17685] netlink: 'syz.3.3003': attribute type 4 has an invalid length. [ 655.420074][T17685] __nla_validate_parse: 3 callbacks suppressed [ 655.420095][T17685] netlink: 3581 bytes leftover after parsing attributes in process `syz.3.3003'. [ 655.439531][T17701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3007'. [ 655.587449][T17704] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3008'. [ 655.597616][T17704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3008'. [ 655.609437][T17704] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3008'. [ 655.628062][T17704] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3008'. [ 655.870644][T17487] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 655.884609][T17487] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 655.893554][T17487] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 655.919816][T17487] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 655.947426][T17487] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 655.995080][T17716] FAULT_INJECTION: forcing a failure. [ 655.995080][T17716] name failslab, interval 1, probability 0, space 0, times 0 [ 656.021451][T17487] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 656.029534][T17716] CPU: 0 UID: 0 PID: 17716 Comm: syz.3.3013 Not tainted syzkaller #0 PREEMPT(full) [ 656.029567][T17716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 656.029580][T17716] Call Trace: [ 656.029588][T17716] [ 656.029597][T17716] dump_stack_lvl+0xe8/0x150 [ 656.029629][T17716] should_fail_ex+0x412/0x560 [ 656.029659][T17716] should_failslab+0xa8/0x100 [ 656.029680][T17716] ? skb_clone+0x212/0x3a0 [ 656.029706][T17716] kmem_cache_alloc_noprof+0x87/0x650 [ 656.029734][T17716] ? apparmor_capable+0x126/0x170 [ 656.029766][T17716] skb_clone+0x212/0x3a0 [ 656.029787][T17716] ? nfnetlink_rcv+0x4b0/0x27b0 [ 656.029813][T17716] nfnetlink_rcv+0x4de/0x27b0 [ 656.029847][T17716] ? lockdep_hardirqs_on+0x7a/0x110 [ 656.029887][T17716] ? __local_bh_enable_ip+0xd0/0x130 [ 656.029908][T17716] ? __dev_queue_xmit+0x2b6/0x3950 [ 656.029932][T17716] ? __dev_queue_xmit+0x1fe5/0x3950 [ 656.029955][T17716] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 656.029986][T17716] ? __dev_queue_xmit+0x2b6/0x3950 [ 656.030013][T17716] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 656.030051][T17716] ? ref_tracker_free+0x693/0x840 [ 656.030080][T17716] ? __pfx_ref_tracker_free+0x10/0x10 [ 656.030121][T17716] ? skb_clone+0x246/0x3a0 [ 656.030146][T17716] ? __netlink_deliver_tap+0x807/0x850 [ 656.030170][T17716] ? netlink_deliver_tap+0x2e/0x1b0 [ 656.030198][T17716] ? netlink_deliver_tap+0x2e/0x1b0 [ 656.030219][T17716] ? netlink_deliver_tap+0x2e/0x1b0 [ 656.030245][T17716] netlink_unicast+0x75c/0x8e0 [ 656.030276][T17716] netlink_sendmsg+0x813/0xb40 [ 656.030311][T17716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.030337][T17716] ? aa_sock_msg_perm+0xf1/0x1b0 [ 656.030370][T17716] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 656.030402][T17716] ____sys_sendmsg+0x972/0x9f0 [ 656.030424][T17716] ? __might_fault+0xaf/0x130 [ 656.030458][T17716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.030490][T17716] ? import_iovec+0x73/0xa0 [ 656.030529][T17716] ___sys_sendmsg+0x2a5/0x360 [ 656.030550][T17716] ? __lock_acquire+0x6b5/0x2cf0 [ 656.030579][T17716] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.030642][T17716] ? __fget_files+0x2a/0x420 [ 656.030667][T17716] ? __fget_files+0x3a0/0x420 [ 656.030705][T17716] __x64_sys_sendmsg+0x1bd/0x2a0 [ 656.030733][T17716] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 656.030768][T17716] ? __pfx_ksys_write+0x10/0x10 [ 656.030809][T17716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.030833][T17716] do_syscall_64+0x174/0xf80 [ 656.030852][T17716] ? trace_irq_disable+0x3b/0x140 [ 656.030883][T17716] ? clear_bhb_loop+0x40/0x90 [ 656.030910][T17716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.030931][T17716] RIP: 0033:0x7f43cef9ce59 [ 656.030951][T17716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.030980][T17716] RSP: 002b:00007f43cfe28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.031001][T17716] RAX: ffffffffffffffda RBX: 00007f43cf215fa0 RCX: 00007f43cef9ce59 [ 656.031017][T17716] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 656.031030][T17716] RBP: 00007f43cfe28090 R08: 0000000000000000 R09: 0000000000000000 [ 656.031042][T17716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.031053][T17716] R13: 00007f43cf216038 R14: 00007f43cf215fa0 R15: 00007fffefc4cd68 [ 656.031086][T17716] [ 656.118228][T17487] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 656.400946][T17487] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 656.585684][T17730] netlink: 'syz.3.3016': attribute type 1 has an invalid length. [ 656.717787][T17730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3016'. [ 656.734169][T17487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.898618][T17487] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.911476][T15034] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.918733][T15034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.012855][T15035] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.020108][T15035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.042859][T14558] Bluetooth: hci3: command tx timeout [ 657.076507][T17745] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 657.132805][T17751] netlink: 'syz.0.3023': attribute type 1 has an invalid length. [ 657.164945][T17751] bond7: entered promiscuous mode [ 657.170574][T17751] 8021q: adding VLAN 0 to HW filter on device bond7 [ 657.230445][T17751] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3023'. [ 657.574978][T17765] FAULT_INJECTION: forcing a failure. [ 657.574978][T17765] name failslab, interval 1, probability 0, space 0, times 0 [ 657.587666][T17765] CPU: 1 UID: 0 PID: 17765 Comm: syz.3.3025 Not tainted syzkaller #0 PREEMPT(full) [ 657.587693][T17765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 657.587705][T17765] Call Trace: [ 657.587714][T17765] [ 657.587722][T17765] dump_stack_lvl+0xe8/0x150 [ 657.587752][T17765] should_fail_ex+0x412/0x560 [ 657.587779][T17765] should_failslab+0xa8/0x100 [ 657.587798][T17765] ? skb_clone+0x212/0x3a0 [ 657.587822][T17765] kmem_cache_alloc_noprof+0x87/0x650 [ 657.587849][T17765] ? apparmor_capable+0x126/0x170 [ 657.587879][T17765] skb_clone+0x212/0x3a0 [ 657.587901][T17765] ? nfnetlink_rcv+0x4b0/0x27b0 [ 657.587924][T17765] nfnetlink_rcv+0x4de/0x27b0 [ 657.587955][T17765] ? lockdep_hardirqs_on+0x7a/0x110 [ 657.587987][T17765] ? __local_bh_enable_ip+0xd0/0x130 [ 657.588007][T17765] ? __dev_queue_xmit+0x2b6/0x3950 [ 657.588030][T17765] ? __dev_queue_xmit+0x1fe5/0x3950 [ 657.588052][T17765] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 657.588083][T17765] ? __dev_queue_xmit+0x2b6/0x3950 [ 657.588112][T17765] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 657.588150][T17765] ? ref_tracker_free+0x693/0x840 [ 657.588176][T17765] ? __pfx_ref_tracker_free+0x10/0x10 [ 657.588218][T17765] ? skb_clone+0x246/0x3a0 [ 657.588244][T17765] ? __netlink_deliver_tap+0x807/0x850 [ 657.588266][T17765] ? netlink_deliver_tap+0x2e/0x1b0 [ 657.588296][T17765] ? netlink_deliver_tap+0x2e/0x1b0 [ 657.588318][T17765] ? netlink_deliver_tap+0x2e/0x1b0 [ 657.588346][T17765] netlink_unicast+0x75c/0x8e0 [ 657.588386][T17765] netlink_sendmsg+0x813/0xb40 [ 657.588420][T17765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.588447][T17765] ? aa_sock_msg_perm+0xf1/0x1b0 [ 657.588477][T17765] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 657.588508][T17765] ____sys_sendmsg+0x972/0x9f0 [ 657.588529][T17765] ? __might_fault+0xaf/0x130 [ 657.588562][T17765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 657.588593][T17765] ? import_iovec+0x73/0xa0 [ 657.588622][T17765] ___sys_sendmsg+0x2a5/0x360 [ 657.588642][T17765] ? __lock_acquire+0x6b5/0x2cf0 [ 657.588669][T17765] ? __pfx____sys_sendmsg+0x10/0x10 [ 657.588729][T17765] ? __fget_files+0x2a/0x420 [ 657.588753][T17765] ? __fget_files+0x3a0/0x420 [ 657.588789][T17765] __x64_sys_sendmsg+0x1bd/0x2a0 [ 657.588814][T17765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 657.588847][T17765] ? __pfx_ksys_write+0x10/0x10 [ 657.588886][T17765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.588909][T17765] do_syscall_64+0x174/0xf80 [ 657.588927][T17765] ? trace_irq_disable+0x3b/0x140 [ 657.588957][T17765] ? clear_bhb_loop+0x40/0x90 [ 657.588983][T17765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.589003][T17765] RIP: 0033:0x7f43cef9ce59 [ 657.589023][T17765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.589040][T17765] RSP: 002b:00007f43cfe28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.589062][T17765] RAX: ffffffffffffffda RBX: 00007f43cf215fa0 RCX: 00007f43cef9ce59 [ 657.589077][T17765] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 657.589090][T17765] RBP: 00007f43cfe28090 R08: 0000000000000000 R09: 0000000000000000 [ 657.589102][T17765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.589115][T17765] R13: 00007f43cf216038 R14: 00007f43cf215fa0 R15: 00007fffefc4cd68 [ 657.589147][T17765] [ 658.108773][T17487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.150282][T17487] veth0_vlan: entered promiscuous mode [ 658.162947][T17487] veth1_vlan: entered promiscuous mode [ 658.216649][T17487] veth0_macvtap: entered promiscuous mode [ 658.229822][T17487] veth1_macvtap: entered promiscuous mode [ 658.247232][T17487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.261290][T17487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.275702][ T1127] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.298232][ T1127] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.309124][ T1127] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.319426][ T1127] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.419247][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.439886][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.477649][ T3322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.486730][ T3322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.605083][T17772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3027'. [ 658.652795][T17772] team3: entered promiscuous mode [ 658.657980][T17772] team3: entered allmulticast mode [ 658.663708][T17772] 8021q: adding VLAN 0 to HW filter on device team3 [ 658.941221][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 658.981582][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 658.990200][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 658.998550][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 659.007953][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 659.437469][T17800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3033'. [ 659.580301][T17781] lo speed is unknown, defaulting to 1000 [ 659.649543][T17809] FAULT_INJECTION: forcing a failure. [ 659.649543][T17809] name failslab, interval 1, probability 0, space 0, times 0 [ 659.662832][T17809] CPU: 0 UID: 0 PID: 17809 Comm: syz.0.3035 Not tainted syzkaller #0 PREEMPT(full) [ 659.662860][T17809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 659.662872][T17809] Call Trace: [ 659.662881][T17809] [ 659.662890][T17809] dump_stack_lvl+0xe8/0x150 [ 659.662920][T17809] should_fail_ex+0x412/0x560 [ 659.662949][T17809] should_failslab+0xa8/0x100 [ 659.662972][T17809] __kmalloc_cache_noprof+0x88/0x660 [ 659.663003][T17809] ? nft_target_select_ops+0x2dc/0x5a0 [ 659.663104][T17809] nft_target_select_ops+0x2dc/0x5a0 [ 659.663130][T17809] nf_tables_expr_parse+0x72c/0xa80 [ 659.663158][T17809] ? rcu_is_watching+0x15/0xb0 [ 659.663184][T17809] ? nf_tables_expr_parse+0x168/0xa80 [ 659.663217][T17809] ? __pfx_nf_tables_expr_parse+0x10/0x10 [ 659.663248][T17809] ? nft_pernet+0x23/0x240 [ 659.663304][T17809] ? nf_tables_newrule+0x11bd/0x28b0 [ 659.663335][T17809] ? nla_strcmp+0x106/0x140 [ 659.663364][T17809] nf_tables_newrule+0x1315/0x28b0 [ 659.663411][T17809] ? __pfx_nf_tables_newrule+0x10/0x10 [ 659.663438][T17809] ? nfnl_pernet+0x23/0x240 [ 659.663469][T17809] ? nfnl_pernet+0x23/0x240 [ 659.663511][T17809] ? __nla_parse+0x40/0x60 [ 659.663541][T17809] nfnetlink_rcv+0x123e/0x27b0 [ 659.663599][T17809] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 659.663637][T17809] ? ref_tracker_free+0x693/0x840 [ 659.663699][T17809] ? __netlink_deliver_tap+0x807/0x850 [ 659.663733][T17809] ? netlink_deliver_tap+0x2e/0x1b0 [ 659.663755][T17809] ? netlink_deliver_tap+0x2e/0x1b0 [ 659.663783][T17809] netlink_unicast+0x75c/0x8e0 [ 659.663816][T17809] netlink_sendmsg+0x813/0xb40 [ 659.663850][T17809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 659.663881][T17809] ? aa_sock_msg_perm+0xf1/0x1b0 [ 659.663913][T17809] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 659.663944][T17809] ____sys_sendmsg+0x972/0x9f0 [ 659.663967][T17809] ? __might_fault+0xaf/0x130 [ 659.664001][T17809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 659.664033][T17809] ? import_iovec+0x73/0xa0 [ 659.664080][T17809] ___sys_sendmsg+0x2a5/0x360 [ 659.664101][T17809] ? __lock_acquire+0x6b5/0x2cf0 [ 659.664128][T17809] ? __pfx____sys_sendmsg+0x10/0x10 [ 659.664190][T17809] ? __fget_files+0x2a/0x420 [ 659.664214][T17809] ? __fget_files+0x3a0/0x420 [ 659.664251][T17809] __x64_sys_sendmsg+0x1bd/0x2a0 [ 659.664277][T17809] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 659.664310][T17809] ? __pfx_ksys_write+0x10/0x10 [ 659.664349][T17809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.664372][T17809] do_syscall_64+0x174/0xf80 [ 659.664392][T17809] ? trace_irq_disable+0x3b/0x140 [ 659.664423][T17809] ? clear_bhb_loop+0x40/0x90 [ 659.664449][T17809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.664469][T17809] RIP: 0033:0x7f2d5659ce59 [ 659.664489][T17809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.664506][T17809] RSP: 002b:00007f2d574ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 659.664528][T17809] RAX: ffffffffffffffda RBX: 00007f2d56815fa0 RCX: 00007f2d5659ce59 [ 659.664542][T17809] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 659.664555][T17809] RBP: 00007f2d574ba090 R08: 0000000000000000 R09: 0000000000000000 [ 659.664567][T17809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.664578][T17809] R13: 00007f2d56816038 R14: 00007f2d56815fa0 R15: 00007ffd34508ce8 [ 659.664612][T17809] [ 660.303859][T17781] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.311083][T17781] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.319004][T17781] bridge_slave_0: entered allmulticast mode [ 660.328474][T17781] bridge_slave_0: entered promiscuous mode [ 660.355066][T17825] netlink: 'syz.0.3038': attribute type 1 has an invalid length. [ 660.414084][T17781] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.421290][T17781] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.430948][T17781] bridge_slave_1: entered allmulticast mode [ 660.473064][T17781] bridge_slave_1: entered promiscuous mode [ 660.568529][T17781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.593574][T17781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.733535][T17781] team0: Port device team_slave_0 added [ 660.751098][T17829] __nla_validate_parse: 1 callbacks suppressed [ 660.751120][T17829] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3039'. [ 660.777746][T17781] team0: Port device team_slave_1 added [ 660.830382][T17781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.837411][T17781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.864004][T17781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.877856][T17781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.884854][T17781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.967368][T17781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.094271][T17838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3043'. [ 661.103843][T17781] hsr_slave_0: entered promiscuous mode [ 661.115515][T17781] hsr_slave_1: entered promiscuous mode [ 661.122127][T17781] debugfs: 'hsr0' already exists in 'hsr' [ 661.127913][T17781] Cannot create hsr debugfs directory [ 661.138378][T17841] netlink: 'syz.0.3042': attribute type 1 has an invalid length. [ 661.150200][ T50] Bluetooth: hci1: command tx timeout [ 661.200412][T17843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3042'. [ 661.219042][T17841] bond8: entered promiscuous mode [ 661.224561][T17841] 8021q: adding VLAN 0 to HW filter on device bond8 [ 661.285030][T17843] bond8: entered allmulticast mode [ 661.429569][T17851] FAULT_INJECTION: forcing a failure. [ 661.429569][T17851] name failslab, interval 1, probability 0, space 0, times 0 [ 661.450895][T17851] CPU: 0 UID: 0 PID: 17851 Comm: syz.1.3045 Not tainted syzkaller #0 PREEMPT(full) [ 661.450924][T17851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 661.450937][T17851] Call Trace: [ 661.450945][T17851] [ 661.450955][T17851] dump_stack_lvl+0xe8/0x150 [ 661.450986][T17851] should_fail_ex+0x412/0x560 [ 661.451015][T17851] should_failslab+0xa8/0x100 [ 661.451038][T17851] __kmalloc_cache_noprof+0x88/0x660 [ 661.451068][T17851] ? net_generic+0x1e/0x240 [ 661.451186][T17851] ? tee_tg_check+0x164/0x460 [ 661.451213][T17851] tee_tg_check+0x164/0x460 [ 661.451243][T17851] xt_check_target+0x61a/0xca0 [ 661.451298][T17851] ? arch_stack_walk+0xfb/0x150 [ 661.451353][T17851] ? __pfx_xt_check_target+0x10/0x10 [ 661.451382][T17851] ? nft_pernet+0x23/0x240 [ 661.451414][T17851] ? nft_pernet+0x23/0x240 [ 661.451458][T17851] ? flush_work+0xd/0x30 [ 661.451487][T17851] nft_target_init+0x6b4/0xa50 [ 661.451517][T17851] ? do_syscall_64+0x174/0xf80 [ 661.451536][T17851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.451568][T17851] ? __pfx_nft_target_init+0x10/0x10 [ 661.451630][T17851] ? __kmalloc_noprof+0x37d/0x760 [ 661.451661][T17851] ? nf_tables_newrule+0x152c/0x28b0 [ 661.451689][T17851] ? __kmalloc_noprof+0x1b8/0x760 [ 661.451723][T17851] nf_tables_newrule+0x17ac/0x28b0 [ 661.451772][T17851] ? __pfx_nf_tables_newrule+0x10/0x10 [ 661.451800][T17851] ? nfnl_pernet+0x23/0x240 [ 661.451833][T17851] ? nfnl_pernet+0x23/0x240 [ 661.451874][T17851] ? __nla_parse+0x40/0x60 [ 661.451906][T17851] nfnetlink_rcv+0x123e/0x27b0 [ 661.451967][T17851] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 661.452042][T17851] ? netlink_deliver_tap+0x2e/0x1b0 [ 661.452078][T17851] ? netlink_deliver_tap+0x2e/0x1b0 [ 661.452102][T17851] ? netlink_deliver_tap+0x2e/0x1b0 [ 661.452132][T17851] netlink_unicast+0x75c/0x8e0 [ 661.452165][T17851] netlink_sendmsg+0x813/0xb40 [ 661.452201][T17851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.452229][T17851] ? aa_sock_msg_perm+0xf1/0x1b0 [ 661.452264][T17851] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 661.452296][T17851] ____sys_sendmsg+0x972/0x9f0 [ 661.452319][T17851] ? __might_fault+0xaf/0x130 [ 661.452354][T17851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.452388][T17851] ? import_iovec+0x73/0xa0 [ 661.452419][T17851] ___sys_sendmsg+0x2a5/0x360 [ 661.452450][T17851] ? __lock_acquire+0x6b5/0x2cf0 [ 661.452478][T17851] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.452548][T17851] ? __fget_files+0x2a/0x420 [ 661.452573][T17851] ? __fget_files+0x3a0/0x420 [ 661.452610][T17851] __x64_sys_sendmsg+0x1bd/0x2a0 [ 661.452636][T17851] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 661.452670][T17851] ? __pfx_ksys_write+0x10/0x10 [ 661.452708][T17851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.452731][T17851] do_syscall_64+0x174/0xf80 [ 661.452749][T17851] ? trace_irq_disable+0x3b/0x140 [ 661.452779][T17851] ? clear_bhb_loop+0x40/0x90 [ 661.452804][T17851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.452825][T17851] RIP: 0033:0x7fc68bb9ce59 [ 661.452845][T17851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.452863][T17851] RSP: 002b:00007fc68cb31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.452886][T17851] RAX: ffffffffffffffda RBX: 00007fc68be15fa0 RCX: 00007fc68bb9ce59 [ 661.452900][T17851] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 661.452914][T17851] RBP: 00007fc68cb31090 R08: 0000000000000000 R09: 0000000000000000 [ 661.452926][T17851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.452938][T17851] R13: 00007fc68be16038 R14: 00007fc68be15fa0 R15: 00007fffdab4be78 [ 661.452972][T17851] [ 661.835574][T17843] bond8: (slave bridge13): making interface the new active one [ 661.843215][T17843] bridge13: entered promiscuous mode [ 661.848809][T17843] bridge13: entered allmulticast mode [ 661.855537][T17843] bond8: (slave bridge13): Enslaving as an active interface with an up link [ 662.025728][T17845] lo speed is unknown, defaulting to 1000 [ 662.159138][T17781] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.171469][T17781] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.326408][T17781] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.336213][T17781] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.423280][T17868] bond9: (slave bond_slave_1): Device is not bonding slave [ 662.430717][T17868] bond9: option active_slave: invalid value (bond_slave_1) [ 662.445338][T17868] bond9 (unregistering): Released all slaves [ 662.481773][T17864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3048'. [ 662.490716][T17864] openvswitch: netlink: Flow actions attr not present in new flow. [ 662.581277][T17874] netlink: 210640 bytes leftover after parsing attributes in process `syz.0.3050'. [ 662.750216][T17881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3053'. [ 662.762359][T17781] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.772270][T17781] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.192429][T17889] openvswitch: netlink: nsh attr 6 is out of range max 3 [ 663.199622][T17889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 663.204153][ T50] Bluetooth: hci1: command tx timeout [ 663.278298][T17893] FAULT_INJECTION: forcing a failure. [ 663.278298][T17893] name failslab, interval 1, probability 0, space 0, times 0 [ 663.292467][T17893] CPU: 0 UID: 0 PID: 17893 Comm: syz.0.3057 Not tainted syzkaller #0 PREEMPT(full) [ 663.292494][T17893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 663.292506][T17893] Call Trace: [ 663.292515][T17893] [ 663.292524][T17893] dump_stack_lvl+0xe8/0x150 [ 663.292558][T17893] should_fail_ex+0x412/0x560 [ 663.292587][T17893] should_failslab+0xa8/0x100 [ 663.292610][T17893] __kmalloc_cache_noprof+0x88/0x660 [ 663.292638][T17893] ? net_generic+0x1e/0x240 [ 663.292659][T17893] ? tee_tg_check+0x164/0x460 [ 663.292686][T17893] tee_tg_check+0x164/0x460 [ 663.292715][T17893] xt_check_target+0x61a/0xca0 [ 663.292742][T17893] ? arch_stack_walk+0xfb/0x150 [ 663.292775][T17893] ? __pfx_xt_check_target+0x10/0x10 [ 663.292824][T17893] ? flush_work+0xd/0x30 [ 663.292853][T17893] nft_target_init+0x6b4/0xa50 [ 663.292873][T17893] ? do_syscall_64+0x174/0xf80 [ 663.292892][T17893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.292922][T17893] ? __pfx_nft_target_init+0x10/0x10 [ 663.292983][T17893] ? __kmalloc_noprof+0x37d/0x760 [ 663.293013][T17893] ? nf_tables_newrule+0x152c/0x28b0 [ 663.293040][T17893] ? __kmalloc_noprof+0x1b8/0x760 [ 663.293073][T17893] nf_tables_newrule+0x17ac/0x28b0 [ 663.293120][T17893] ? __pfx_nf_tables_newrule+0x10/0x10 [ 663.293147][T17893] ? nfnl_pernet+0x23/0x240 [ 663.293178][T17893] ? nfnl_pernet+0x23/0x240 [ 663.293218][T17893] ? __nla_parse+0x40/0x60 [ 663.293248][T17893] nfnetlink_rcv+0x123e/0x27b0 [ 663.293302][T17893] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 663.293339][T17893] ? ref_tracker_free+0x693/0x840 [ 663.293398][T17893] ? __netlink_deliver_tap+0x807/0x850 [ 663.293429][T17893] ? netlink_deliver_tap+0x2e/0x1b0 [ 663.293451][T17893] ? netlink_deliver_tap+0x2e/0x1b0 [ 663.293476][T17893] netlink_unicast+0x75c/0x8e0 [ 663.293504][T17893] netlink_sendmsg+0x813/0xb40 [ 663.293534][T17893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.293558][T17893] ? aa_sock_msg_perm+0xf1/0x1b0 [ 663.293587][T17893] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.293617][T17893] ____sys_sendmsg+0x972/0x9f0 [ 663.293639][T17893] ? __might_fault+0xaf/0x130 [ 663.293670][T17893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.293701][T17893] ? import_iovec+0x73/0xa0 [ 663.293727][T17893] ___sys_sendmsg+0x2a5/0x360 [ 663.293746][T17893] ? __lock_acquire+0x6b5/0x2cf0 [ 663.293770][T17893] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.293829][T17893] ? __fget_files+0x2a/0x420 [ 663.293851][T17893] ? __fget_files+0x3a0/0x420 [ 663.293883][T17893] __x64_sys_sendmsg+0x1bd/0x2a0 [ 663.293907][T17893] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 663.293937][T17893] ? __pfx_ksys_write+0x10/0x10 [ 663.293972][T17893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.293992][T17893] do_syscall_64+0x174/0xf80 [ 663.294009][T17893] ? trace_irq_disable+0x3b/0x140 [ 663.294037][T17893] ? clear_bhb_loop+0x40/0x90 [ 663.294061][T17893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.294079][T17893] RIP: 0033:0x7f2d5659ce59 [ 663.294096][T17893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.294113][T17893] RSP: 002b:00007f2d574ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.294135][T17893] RAX: ffffffffffffffda RBX: 00007f2d56815fa0 RCX: 00007f2d5659ce59 [ 663.294148][T17893] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 663.294161][T17893] RBP: 00007f2d574ba090 R08: 0000000000000000 R09: 0000000000000000 [ 663.294172][T17893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.294183][T17893] R13: 00007f2d56816038 R14: 00007f2d56815fa0 R15: 00007ffd34508ce8 [ 663.294214][T17893] [ 663.737156][T17781] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.748081][T17781] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.823223][T17895] block nbd0: NBD_DISCONNECT [ 663.899072][T17897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3059'. [ 664.053721][T17897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3059'. [ 664.725268][T17781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 664.758572][T17781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 664.792189][T17781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 664.828906][T17781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 664.849307][T17781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 664.877045][T17781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 664.903320][T17781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 664.943265][T17781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 665.161386][T17931] FAULT_INJECTION: forcing a failure. [ 665.161386][T17931] name failslab, interval 1, probability 0, space 0, times 0 [ 665.225583][T17931] CPU: 1 UID: 0 PID: 17931 Comm: syz.2.3067 Not tainted syzkaller #0 PREEMPT(full) [ 665.225612][T17931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 665.225624][T17931] Call Trace: [ 665.225633][T17931] [ 665.225641][T17931] dump_stack_lvl+0xe8/0x150 [ 665.225680][T17931] should_fail_ex+0x412/0x560 [ 665.225709][T17931] should_failslab+0xa8/0x100 [ 665.225730][T17931] __kmalloc_cache_noprof+0x88/0x660 [ 665.225758][T17931] ? net_generic+0x1e/0x240 [ 665.225778][T17931] ? tee_tg_check+0x164/0x460 [ 665.225804][T17931] tee_tg_check+0x164/0x460 [ 665.225830][T17931] xt_check_target+0x61a/0xca0 [ 665.225855][T17931] ? arch_stack_walk+0xfb/0x150 [ 665.225890][T17931] ? __pfx_xt_check_target+0x10/0x10 [ 665.225916][T17931] ? nft_pernet+0x23/0x240 [ 665.225947][T17931] ? nft_pernet+0x23/0x240 [ 665.225988][T17931] ? flush_work+0xd/0x30 [ 665.226015][T17931] nft_target_init+0x6b4/0xa50 [ 665.226035][T17931] ? do_syscall_64+0x174/0xf80 [ 665.226054][T17931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.226084][T17931] ? __pfx_nft_target_init+0x10/0x10 [ 665.226141][T17931] ? __kmalloc_noprof+0x37d/0x760 [ 665.226169][T17931] ? nf_tables_newrule+0x152c/0x28b0 [ 665.226195][T17931] ? __kmalloc_noprof+0x1b8/0x760 [ 665.226228][T17931] nf_tables_newrule+0x17ac/0x28b0 [ 665.226274][T17931] ? __pfx_nf_tables_newrule+0x10/0x10 [ 665.226302][T17931] ? nfnl_pernet+0x23/0x240 [ 665.226333][T17931] ? nfnl_pernet+0x23/0x240 [ 665.226374][T17931] ? __nla_parse+0x40/0x60 [ 665.226406][T17931] nfnetlink_rcv+0x123e/0x27b0 [ 665.226461][T17931] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 665.226499][T17931] ? ref_tracker_free+0x693/0x840 [ 665.226553][T17931] ? __netlink_deliver_tap+0x807/0x850 [ 665.226587][T17931] ? netlink_deliver_tap+0x2e/0x1b0 [ 665.226610][T17931] ? netlink_deliver_tap+0x2e/0x1b0 [ 665.226638][T17931] netlink_unicast+0x75c/0x8e0 [ 665.226681][T17931] netlink_sendmsg+0x813/0xb40 [ 665.226715][T17931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 665.226742][T17931] ? aa_sock_msg_perm+0xf1/0x1b0 [ 665.226773][T17931] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 665.226804][T17931] ____sys_sendmsg+0x972/0x9f0 [ 665.226826][T17931] ? __might_fault+0xaf/0x130 [ 665.226859][T17931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 665.226891][T17931] ? import_iovec+0x73/0xa0 [ 665.226919][T17931] ___sys_sendmsg+0x2a5/0x360 [ 665.226940][T17931] ? __lock_acquire+0x6b5/0x2cf0 [ 665.226967][T17931] ? __pfx____sys_sendmsg+0x10/0x10 [ 665.227028][T17931] ? __fget_files+0x2a/0x420 [ 665.227054][T17931] ? __fget_files+0x3a0/0x420 [ 665.227090][T17931] __x64_sys_sendmsg+0x1bd/0x2a0 [ 665.227115][T17931] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 665.227145][T17931] ? __pfx_ksys_write+0x10/0x10 [ 665.227184][T17931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.227205][T17931] do_syscall_64+0x174/0xf80 [ 665.227223][T17931] ? trace_irq_disable+0x3b/0x140 [ 665.227252][T17931] ? clear_bhb_loop+0x40/0x90 [ 665.227276][T17931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.227296][T17931] RIP: 0033:0x7fb29cb9ce59 [ 665.227315][T17931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.227332][T17931] RSP: 002b:00007fb29da60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 665.227353][T17931] RAX: ffffffffffffffda RBX: 00007fb29ce15fa0 RCX: 00007fb29cb9ce59 [ 665.227367][T17931] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 665.227379][T17931] RBP: 00007fb29da60090 R08: 0000000000000000 R09: 0000000000000000 [ 665.227390][T17931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 665.227401][T17931] R13: 00007fb29ce16038 R14: 00007fb29ce15fa0 R15: 00007ffdd6959388 [ 665.227434][T17931] [ 665.282483][ T50] Bluetooth: hci1: command tx timeout [ 665.795659][T17937] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3069'. [ 665.805237][T17937] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3069'. [ 665.866582][T17781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.927888][T17781] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.977447][T15034] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.984691][T15034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.994257][T15034] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.001441][T15034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.129672][T17950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3072'. [ 666.627778][T17965] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3073'. [ 666.861212][T17971] syzkaller0: entered promiscuous mode [ 666.867072][T17971] syzkaller0: entered allmulticast mode [ 667.573153][T17983] veth1: entered promiscuous mode [ 667.604444][T17983] macsec1: entered promiscuous mode [ 667.610372][T17983] macsec1: entered allmulticast mode [ 667.616897][T17983] veth1: entered allmulticast mode [ 667.631262][T17985] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3078'. [ 667.645150][T17983] veth1: left allmulticast mode [ 667.650369][T17983] veth1: left promiscuous mode [ 667.663769][T17985] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3078'. [ 667.715937][T17781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.763330][ T50] Bluetooth: hci1: command tx timeout [ 667.832311][T17781] veth0_vlan: entered promiscuous mode [ 667.850920][T17781] veth1_vlan: entered promiscuous mode [ 667.936620][T17781] veth0_macvtap: entered promiscuous mode [ 667.968104][T17781] veth1_macvtap: entered promiscuous mode [ 667.986023][T17995] FAULT_INJECTION: forcing a failure. [ 667.986023][T17995] name failslab, interval 1, probability 0, space 0, times 0 [ 668.039911][T17995] CPU: 0 UID: 0 PID: 17995 Comm: syz.2.3080 Not tainted syzkaller #0 PREEMPT(full) [ 668.039939][T17995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 668.039952][T17995] Call Trace: [ 668.039961][T17995] [ 668.039970][T17995] dump_stack_lvl+0xe8/0x150 [ 668.040000][T17995] should_fail_ex+0x412/0x560 [ 668.040028][T17995] should_failslab+0xa8/0x100 [ 668.040051][T17995] __kmalloc_cache_noprof+0x88/0x660 [ 668.040080][T17995] ? nft_pernet+0x23/0x240 [ 668.040111][T17995] ? nf_tables_commit+0x936/0xa7c0 [ 668.040144][T17995] nf_tables_commit+0x936/0xa7c0 [ 668.040174][T17995] ? do_raw_spin_lock+0x12b/0x2f0 [ 668.040201][T17995] ? lock_acquire+0x106/0x350 [ 668.040235][T17995] ? lock_acquire+0x106/0x350 [ 668.040270][T17995] ? __pfx_nf_tables_commit+0x10/0x10 [ 668.040303][T17995] ? __free_frozen_pages+0x749/0xd30 [ 668.040347][T17995] ? nf_tables_newrule+0x2590/0x28b0 [ 668.040394][T17995] ? __pfx_nf_tables_newrule+0x10/0x10 [ 668.040421][T17995] ? nfnl_pernet+0x23/0x240 [ 668.040478][T17995] nfnetlink_rcv+0x1c19/0x27b0 [ 668.040536][T17995] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 668.040574][T17995] ? ref_tracker_free+0x693/0x840 [ 668.040630][T17995] ? __netlink_deliver_tap+0x807/0x850 [ 668.040664][T17995] ? netlink_deliver_tap+0x2e/0x1b0 [ 668.040685][T17995] ? netlink_deliver_tap+0x2e/0x1b0 [ 668.040714][T17995] netlink_unicast+0x75c/0x8e0 [ 668.040746][T17995] netlink_sendmsg+0x813/0xb40 [ 668.040780][T17995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 668.040807][T17995] ? aa_sock_msg_perm+0xf1/0x1b0 [ 668.040840][T17995] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 668.040871][T17995] ____sys_sendmsg+0x972/0x9f0 [ 668.040894][T17995] ? __might_fault+0xaf/0x130 [ 668.040926][T17995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 668.040970][T17995] ? import_iovec+0x73/0xa0 [ 668.040998][T17995] ___sys_sendmsg+0x2a5/0x360 [ 668.041019][T17995] ? __lock_acquire+0x6b5/0x2cf0 [ 668.041046][T17995] ? __pfx____sys_sendmsg+0x10/0x10 [ 668.041107][T17995] ? __fget_files+0x2a/0x420 [ 668.041130][T17995] ? __fget_files+0x3a0/0x420 [ 668.041167][T17995] __x64_sys_sendmsg+0x1bd/0x2a0 [ 668.041192][T17995] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 668.041226][T17995] ? __pfx_ksys_write+0x10/0x10 [ 668.041265][T17995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.041288][T17995] do_syscall_64+0x174/0xf80 [ 668.041308][T17995] ? trace_irq_disable+0x3b/0x140 [ 668.041344][T17995] ? clear_bhb_loop+0x40/0x90 [ 668.041370][T17995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.041392][T17995] RIP: 0033:0x7fb29cb9ce59 [ 668.041411][T17995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.041429][T17995] RSP: 002b:00007fb29da60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.041451][T17995] RAX: ffffffffffffffda RBX: 00007fb29ce15fa0 RCX: 00007fb29cb9ce59 [ 668.041465][T17995] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 668.041478][T17995] RBP: 00007fb29da60090 R08: 0000000000000000 R09: 0000000000000000 [ 668.041491][T17995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 668.041503][T17995] R13: 00007fb29ce16038 R14: 00007fb29ce15fa0 R15: 00007ffdd6959388 [ 668.041537][T17995] [ 668.363070][T17781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.375560][T17781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.522567][ T3322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.539361][ T3322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.563845][ T3322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.572639][ T3322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.654856][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.662782][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.890500][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.898486][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.954793][T18000] lo speed is unknown, defaulting to 1000 [ 669.617998][T18016] netlink: 'syz.4.3085': attribute type 13 has an invalid length. [ 669.625908][T18016] netlink: 'syz.4.3085': attribute type 17 has an invalid length. [ 670.858786][T14558] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 670.876752][T14558] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 670.886922][T14558] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 670.897413][T14558] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 670.905945][T14558] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 671.794291][T18015] bond9: left promiscuous mode [ 671.799168][T18015] gretap2: left promiscuous mode [ 672.184136][T18016] 8021q: adding VLAN 0 to HW filter on device  [ 672.202863][T18016] 8021q: adding VLAN 0 to HW filter on device ` [ 672.276000][T18016] veth1_vlan: left promiscuous mode [ 672.283823][T18016] veth0_vlan: left promiscuous mode [ 672.290361][T18016] veth0_vlan: entered promiscuous mode [ 672.302457][T18016] veth1_vlan: entered promiscuous mode [ 672.316217][T18016] veth1_macvtap: left promiscuous mode [ 672.323635][T18016] veth0_macvtap: left allmulticast mode [ 672.331262][T18016] veth1_macvtap: entered promiscuous mode [ 672.346939][T18016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 672.373993][T18016] 8021q: adding VLAN 0 to HW filter on device bond2 [ 672.385296][T18016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 672.393943][T18016] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 672.407997][T18016] bridge2: left promiscuous mode [ 672.414707][T18016] 8021q: adding VLAN 0 to HW filter on device bond4 [ 672.435691][T18016] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 672.446906][T18016] 8021q: adding VLAN 0 to HW filter on device bond5 [ 672.459289][T18016] 8021q: adding VLAN 0 to HW filter on device bond6 [ 672.481044][T18016] 8021q: adding VLAN 0 to HW filter on device bond7 [ 672.489390][T18016] 8021q: adding VLAN 0 to HW filter on device bond8 [ 672.499895][T18016] 8021q: adding VLAN 0 to HW filter on device bond9 [ 672.513698][T18016] bond9: entered promiscuous mode [ 672.518810][T18016] gretap2: entered promiscuous mode [ 672.525275][T18016] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 672.961879][ T50] Bluetooth: hci4: command tx timeout [ 673.803162][T18016] 8021q: adding VLAN 0 to HW filter on device bond10 [ 673.827937][T18016] 8021q: adding VLAN 0 to HW filter on device bond11 [ 673.844538][T18016] team0: left promiscuous mode [ 673.849361][T18016] team0: left allmulticast mode [ 673.855811][T18016] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.864369][T18016] team1: left promiscuous mode [ 673.869216][T18016] team1: left allmulticast mode [ 673.875128][T18016] 8021q: adding VLAN 0 to HW filter on device team1 [ 673.883646][T18016] erspan1: left allmulticast mode [ 673.895886][T18016] sit2: left promiscuous mode [ 673.903345][T18016] ip6tnl2: left allmulticast mode [ 673.909905][T18016] bridge7: left allmulticast mode [ 673.918264][T18016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.946341][T18016] 8021q: adding VLAN 0 to HW filter on device eth0 [ 673.960127][T18016] 8021q: adding VLAN 0 to HW filter on device eth1 [ 673.973896][T18016] 8021q: adding VLAN 0 to HW filter on device eth2 [ 673.987245][T18016] 8021q: adding VLAN 0 to HW filter on device eth3 [ 674.000397][T18016] gre1: left allmulticast mode [ 674.008778][T18016] 8021q: adding VLAN 0 to HW filter on device bond12 [ 674.018788][T18016] 8021q: adding VLAN 0 to HW filter on device bond13 [ 674.039027][T18016] bond14: left promiscuous mode [ 674.044983][T18016] bond14: left allmulticast mode [ 674.051032][T18016] 8021q: adding VLAN 0 to HW filter on device bond14 [ 674.126601][T18025] bridge2: entered promiscuous mode [ 674.270275][T18068] netlink: 'syz.2.3093': attribute type 3 has an invalid length. [ 674.281189][T18070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3091'. [ 674.385830][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3091'. [ 674.395087][T18071] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3091'. [ 674.412046][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3091'. [ 674.421234][T18071] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3091'. [ 674.430411][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3091'. [ 674.866359][T18074] lo speed is unknown, defaulting to 1000 [ 675.027331][T18088] netlink: 'syz.4.3095': attribute type 4 has an invalid length. [ 675.071352][ T50] Bluetooth: hci4: command tx timeout [ 675.081292][T18090] netlink: 'syz.4.3095': attribute type 4 has an invalid length. [ 675.377376][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3096'. [ 675.409958][T18100] : renamed from bond0 (while UP) [ 675.414672][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3096'. [ 675.452574][T18095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3096'. [ 675.514225][T18105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3098'. [ 675.679367][T18044] lo speed is unknown, defaulting to 1000 [ 675.839276][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 676.378371][T18141] netlink: 'syz.2.3105': attribute type 6 has an invalid length. [ 676.816495][T18044] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.823779][T18044] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.845695][T18044] bridge_slave_0: entered allmulticast mode [ 676.853926][T18044] bridge_slave_0: entered promiscuous mode [ 676.863427][T18044] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.870735][T18044] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.878173][T18044] bridge_slave_1: entered allmulticast mode [ 676.886228][T18044] bridge_slave_1: entered promiscuous mode [ 676.990174][T18153] netlink: 'syz.4.3107': attribute type 15 has an invalid length. [ 677.079991][T18044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.124827][T18044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.146181][T18159] netlink: 'syz.3.3108': attribute type 21 has an invalid length. [ 677.177675][ T50] Bluetooth: hci4: command tx timeout [ 677.183257][T18159] netlink: 'syz.3.3108': attribute type 21 has an invalid length. [ 677.207229][T18156] netlink: 'syz.1.3109': attribute type 5 has an invalid length. [ 677.249162][T18044] team0: Port device team_slave_0 added [ 677.292308][T18044] team0: Port device team_slave_1 added [ 677.360095][T18156] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 677.371283][T18156] bond1 (unregistering): Released all slaves [ 677.416367][T18166] tipc: Started in network mode [ 677.421304][T18166] tipc: Node identity ac1414aa, cluster identity 4711 [ 677.428876][T18166] tipc: Enabled bearer , priority 10 [ 677.436082][T18044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.446180][T18044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.473049][T18044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.509222][T18044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.516245][T18044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.542169][T18044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.626567][T18044] hsr_slave_0: entered promiscuous mode [ 677.636265][T18044] hsr_slave_1: entered promiscuous mode [ 677.643134][T18044] debugfs: 'hsr0' already exists in 'hsr' [ 677.649169][T18044] Cannot create hsr debugfs directory [ 677.716453][T18173] veth0: entered promiscuous mode [ 677.784895][T18171] bond1 (unregistering): Released all slaves [ 677.824181][T18172] veth0: left promiscuous mode [ 678.185543][T18185] lo speed is unknown, defaulting to 1000 [ 678.202037][T18044] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.212318][T18044] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.417507][T18044] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.452765][T18044] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.874991][T18032] tipc: Node number set to 2886997162 [ 678.978264][T18044] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.014852][T18044] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.263413][T18044] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.289180][T18044] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.323563][ T50] Bluetooth: hci4: command tx timeout [ 679.432800][T18234] netlink: 'syz.4.3133': attribute type 10 has an invalid length. [ 679.527880][ T30] audit: type=1804 audit(1779958250.061:17): pid=18243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3136" name="/newroot/15/cgroup.controllers" dev="tmpfs" ino=98 res=1 errno=0 [ 679.566460][ T30] audit: type=1800 audit(1779958250.061:18): pid=18243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3136" name="cgroup.controllers" dev="tmpfs" ino=98 res=0 errno=0 [ 679.935095][T18044] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 679.977584][T18044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 679.986522][T18044] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 680.010525][T18044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 680.019950][T18044] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 680.033855][T18044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 680.043150][T18044] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 680.071390][T18044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 680.224566][T18274] ip6erspan0: entered promiscuous mode [ 680.230259][T18274] ip6erspan0: entered allmulticast mode [ 680.352711][T18044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.373178][T18044] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.429004][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.436236][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.464667][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.471975][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.526653][T18044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 680.561183][T18044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 680.650604][T18283] xt_connbytes: Forcing CT accounting to be enabled [ 681.134420][T18302] __nla_validate_parse: 10 callbacks suppressed [ 681.134442][T18302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3149'. [ 681.349119][T18044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.424162][T18044] veth0_vlan: entered promiscuous mode [ 681.438753][T18044] veth1_vlan: entered promiscuous mode [ 681.477241][T18044] veth0_macvtap: entered promiscuous mode [ 681.489431][T18044] veth1_macvtap: entered promiscuous mode [ 681.563071][T18044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.585879][T18044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.593484][T18309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3151'. [ 681.612848][T15048] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.640621][T15034] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.651013][ T141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.659938][ T141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.794851][T15048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.802761][T15048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.887644][T15048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.896538][T15048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.953742][T18319] xt_bpf: check failed: parse error [ 682.207777][T18330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3158'. [ 682.428161][T18030] page_pool_release_retry() stalled pool shutdown: id 35, 1 inflight 543 sec [ 682.548554][T18350] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3163'. [ 682.619990][T18354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.681414][T18356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3165'. [ 682.690361][T18356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3165'. [ 682.713750][T18359] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3166'. [ 682.763550][T18359] hsr0: entered allmulticast mode [ 682.768671][T18359] hsr_slave_0: entered allmulticast mode [ 682.774348][T18359] hsr_slave_1: entered allmulticast mode [ 682.967005][T18370] Bluetooth: MGMT ver 1.23 [ 683.135783][T18375] netlink: 'syz.2.3171': attribute type 9 has an invalid length. [ 683.318455][T18384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3173'. [ 683.375156][T18388] netlink: 'syz.2.3175': attribute type 11 has an invalid length. [ 683.393671][T18381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3174'. [ 684.112033][T18405] : renamed from bond0 (while UP) [ 684.123287][T18405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3181'. [ 684.260438][T18394] infiniband syz2: set active [ 684.267440][T18394] infiniband syz2: added veth0_virt_wifi [ 684.297493][T18394] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 684.314726][T18394] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 684.333216][T18394] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 684.390452][T18394] RDS/IB: syz2: added [ 684.395903][T18394] smc: adding ib device syz2 with port count 1 [ 684.403776][T18394] smc: ib device syz2 port 1 has no pnetid [ 684.498149][T18411] netlink: 'syz.1.3182': attribute type 1 has an invalid length. [ 685.719299][T18443] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 685.829161][T18444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 686.088990][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.089476][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 686.289090][T18453] lo speed is unknown, defaulting to 1000 [ 686.760247][T18458] netlink: 'syz.1.3193': attribute type 2 has an invalid length. [ 686.770456][T18458] __nla_validate_parse: 6 callbacks suppressed [ 686.770474][T18458] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3193'. [ 688.051518][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3201'. [ 688.093966][T18488] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 688.116462][T18488] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 688.142915][T18488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3201'. [ 688.329415][T18492] netlink: 'syz.1.3204': attribute type 4 has an invalid length. [ 688.607916][T18509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3208'. [ 688.660762][T18509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3208'. [ 688.915834][T18514] : renamed from bond0 (while UP) [ 692.214899][T18533] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3216'. [ 692.240775][T18533] netlink: 'syz.2.3216': attribute type 9 has an invalid length. [ 692.249655][T18533] netlink: 'syz.2.3216': attribute type 6 has an invalid length. [ 692.258275][T18533] netlink: 'syz.2.3216': attribute type 7 has an invalid length. [ 692.266068][T18533] netlink: 'syz.2.3216': attribute type 8 has an invalid length. [ 692.355014][T18543] netlink: 'syz.2.3218': attribute type 2 has an invalid length. [ 692.374264][T18543] syzkaller0: entered promiscuous mode [ 692.379814][T18543] syzkaller0: entered allmulticast mode [ 692.584201][T18550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3222'. [ 692.593604][T18550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3222'. [ 692.603819][T18550] netlink: 'syz.1.3222': attribute type 14 has an invalid length. [ 692.611965][T18550] netlink: 'syz.1.3222': attribute type 11 has an invalid length. [ 692.681521][T18554] netlink: zone id is out of range [ 692.687504][T18554] netlink: zone id is out of range [ 692.693812][T18554] netlink: zone id is out of range [ 692.699005][T18554] netlink: zone id is out of range [ 692.705385][T18554] netlink: zone id is out of range [ 692.710670][T18554] netlink: zone id is out of range [ 692.716937][T18554] netlink: zone id is out of range [ 692.724282][T18554] netlink: zone id is out of range [ 692.730556][T18554] netlink: zone id is out of range [ 692.738032][T18554] netlink: zone id is out of range [ 693.275644][T18569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3226'. [ 693.488037][T18572] syzkaller0: entered promiscuous mode [ 693.493602][T18572] syzkaller0: entered allmulticast mode [ 693.585817][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3230'. [ 693.612377][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3229'. [ 693.634403][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3229'. [ 693.958197][T18589] netlink: 1100 bytes leftover after parsing attributes in process `syz.4.3233'. [ 694.434673][T18610] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3241'. [ 694.460849][T18610] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3241'. [ 695.139061][T18622] netlink: 'syz.1.3245': attribute type 14 has an invalid length. [ 695.393210][T18624] block nbd7: server does not support multiple connections per device. [ 695.474968][T18624] block nbd7: shutting down sockets [ 695.721982][T18649] netlink: 'syz.1.3255': attribute type 39 has an invalid length. [ 695.874996][T18632] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.882988][T18632] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.068145][T18632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.085327][T18632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.379277][T18658] lo speed is unknown, defaulting to 1000 [ 696.388135][T15030] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.404202][T18062] syz2: Port: 1 Link DOWN [ 696.405091][T15030] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.418404][T15030] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.427439][T15030] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.526250][T18668] netlink: 'syz.2.3256': attribute type 1 has an invalid length. [ 696.537310][T18668] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 696.792520][T18680] netlink: 'syz.2.3259': attribute type 2 has an invalid length. [ 697.380319][T18704] __nla_validate_parse: 1 callbacks suppressed [ 697.380341][T18704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3267'. [ 697.428384][T18704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3267'. [ 697.609738][T18718] netlink: 'syz.1.3272': attribute type 13 has an invalid length. [ 697.671271][T18718] tbf_change: 46 callbacks suppressed [ 697.671375][T18718] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 697.714509][T18057] IPVS: starting estimator thread 0... [ 698.028869][T18725] IPVS: using max 26 ests per chain, 62400 per kthread [ 698.228203][T18732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.237803][T18732] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.260838][T18732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.311507][T18732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.320772][T18732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.333789][T18732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 698.344338][T18732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 698.372177][T18732] net_ratelimit: 170 callbacks suppressed [ 698.372197][T18732] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 698.413946][T15030] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.421252][T15030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.439381][T15030] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.446581][T15030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.002253][T18771] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3287'. [ 699.011420][T18771] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3287'. [ 699.020395][T18771] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3287'. [ 699.117984][T18775] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3288'. [ 699.143754][T18775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3288'. [ 699.663029][T18800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3292'. [ 699.697221][T18799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3292'. [ 700.511278][T18814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3295'. [ 700.622828][T18816] ip6tnl0: Caught tx_queue_len zero misconfig [ 701.320257][T18843] bond15: entered allmulticast mode [ 701.337181][T18843] macvlan4: entered promiscuous mode [ 701.342558][T18843] macvlan4: entered allmulticast mode [ 701.367025][T18843] bond15: (slave macvlan4): Opening slave failed [ 702.661693][T18874] __nla_validate_parse: 15 callbacks suppressed [ 702.661719][T18874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3308'. [ 702.696183][T18876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3310'. [ 702.731131][T18876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 702.880214][T18848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 703.211138][T18891] lo speed is unknown, defaulting to 1000 [ 703.464771][T14558] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 703.476537][T14558] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 703.557035][T14558] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 703.658764][T18914] netlink: 'syz.2.3323': attribute type 13 has an invalid length. [ 703.672299][T14558] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 703.702857][T18914] netlink: 'syz.2.3323': attribute type 17 has an invalid length. [ 703.713685][T14558] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 704.060745][T18914] 8021q: adding VLAN 0 to HW filter on device  [ 704.114691][T18914] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.191656][T18930] openvswitch: netlink: Actions may not be safe on all matching packets [ 704.212612][T18914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.311917][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3327'. [ 704.418129][T18914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.428748][T18914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.447582][T18914] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 704.458486][T18914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 704.469546][T18914] hsr0: left allmulticast mode [ 704.474914][T18914] hsr_slave_0: left allmulticast mode [ 704.480361][T18914] hsr_slave_1: left allmulticast mode [ 704.524947][T18914] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 704.578023][T15034] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.585956][T15034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.595738][T15034] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.602953][T15034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.758646][T18943] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3328'. [ 704.803993][ T5861] syz2: Port: 1 Link ACTIVE [ 705.313972][T18960] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3333'. [ 705.392329][T18964] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3334'. [ 705.476164][T18966] netlink: 'syz.0.3335': attribute type 13 has an invalid length. [ 705.523588][T18906] lo speed is unknown, defaulting to 1000 [ 705.595312][T18969] netlink: 'syz.1.3336': attribute type 1 has an invalid length. [ 705.763869][T14558] Bluetooth: hci0: command tx timeout [ 705.774817][T18969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 705.782443][T18970] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 705.796482][T18970] bond2: entered allmulticast mode [ 706.476575][T18987] lo speed is unknown, defaulting to 1000 [ 706.708346][T18988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3340'. [ 706.911095][T18992] lo speed is unknown, defaulting to 1000 [ 707.599836][T18906] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.635517][T18906] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.642962][T18906] bridge_slave_0: entered allmulticast mode [ 707.651124][T18906] bridge_slave_0: entered promiscuous mode [ 707.659941][T18906] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.667136][T18906] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.674436][T18906] bridge_slave_1: entered allmulticast mode [ 707.682349][T18906] bridge_slave_1: entered promiscuous mode [ 707.913777][T14558] Bluetooth: hci0: command tx timeout [ 707.944536][T19013] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3346'. [ 707.957352][T18906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.969803][T18906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.306752][T19023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3348'. [ 708.318061][T18906] team0: Port device team_slave_0 added [ 708.447438][T18906] team0: Port device team_slave_1 added [ 708.649341][T18906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.656366][T18906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.682278][T18906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.694981][T18906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.701987][T18906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.832467][T18906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.164037][T19037] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.3352'. [ 709.183992][T18906] hsr_slave_0: entered promiscuous mode [ 709.190668][T19037] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 709.191069][T18906] hsr_slave_1: entered promiscuous mode [ 709.205312][T18906] debugfs: 'hsr0' already exists in 'hsr' [ 709.211094][T18906] Cannot create hsr debugfs directory [ 709.230706][T19037] netlink: 'syz.3.3352': attribute type 1 has an invalid length. [ 709.696924][T19050] xt_bpf: check failed: parse error [ 709.900874][T19056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3360'. [ 710.017648][T14558] Bluetooth: hci0: command tx timeout [ 710.134124][T19069] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3362'. [ 710.144174][T19069] netlink: 'syz.0.3362': attribute type 9 has an invalid length. [ 710.626614][T18906] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.638283][T18906] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.061472][T19085] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3366'. [ 711.107461][T18906] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.117791][T18906] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.445144][T19094] netlink: 'syz.0.3368': attribute type 10 has an invalid length. [ 711.454010][T19094] syz_tun: entered promiscuous mode [ 711.466072][T19094] : (slave syz_tun): Enslaving as an active interface with an up link [ 711.699377][T18906] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.709264][T18906] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.124106][T14558] Bluetooth: hci0: command tx timeout [ 712.172201][T18906] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.182029][T18906] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.564962][T19123] ip6tnl1: entered allmulticast mode [ 712.573314][T15035] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 712.587384][T15035] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 712.612313][T18061] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 712.792272][T19126] lo speed is unknown, defaulting to 1000 [ 712.880396][T18906] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 712.893870][T18061] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 712.947364][T18906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 712.955524][T18906] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 713.015478][T18906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 713.112844][T18662] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 713.119080][T18906] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 713.162560][T19141] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3383'. [ 713.263209][T18906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 713.277778][T19146] netlink: 'syz.1.3384': attribute type 21 has an invalid length. [ 713.285662][T19146] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3384'. [ 713.294854][T19146] netlink: 'syz.1.3384': attribute type 5 has an invalid length. [ 713.302623][T19146] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3384'. [ 713.312234][T18906] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 713.372590][T18906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 713.868212][T18906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.988042][T18906] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.027633][T15035] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.034839][T15035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.045079][T15035] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.052268][T15035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.270714][T18906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.469440][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3398'. [ 716.146094][T18906] veth0_vlan: entered promiscuous mode [ 716.171972][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3403'. [ 716.181099][T19243] netlink: 'syz.0.3403': attribute type 29 has an invalid length. [ 716.189142][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3403'. [ 716.241706][T18906] veth1_vlan: entered promiscuous mode [ 716.270547][T18906] veth0_macvtap: entered promiscuous mode [ 716.281064][T18906] veth1_macvtap: entered promiscuous mode [ 716.308803][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3403'. [ 716.317946][T19243] netlink: 'syz.0.3403': attribute type 29 has an invalid length. [ 716.388814][T18906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.398790][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3403'. [ 716.412431][T18906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.441428][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.451777][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.486921][ T30] audit: type=1804 audit(1779958287.021:19): pid=19251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3406" name="/newroot/89/cgroup.controllers" dev="tmpfs" ino=471 res=1 errno=0 [ 716.487195][ T30] audit: type=1800 audit(1779958287.021:20): pid=19251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3406" name="cgroup.controllers" dev="tmpfs" ino=471 res=0 errno=0 [ 716.624913][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.633833][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.909411][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.917307][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.028837][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.041872][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 717.060687][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.545151][T19287] bond3: Removing last ns target with arp_interval on [ 717.620906][T19295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3414'. [ 717.744825][T19299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3414'. [ 718.278517][T19313] netlink: 'syz.1.3419': attribute type 105 has an invalid length. [ 718.310346][T19311] lo speed is unknown, defaulting to 1000 [ 718.318172][T19315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3420'. [ 718.383092][T19315] bridge0: port 3(batadv1) entered blocking state [ 718.419482][T19308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.430959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.446599][T19315] bridge0: port 3(batadv1) entered disabled state [ 718.476239][T19315] batadv1: entered allmulticast mode [ 718.496523][T19308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.549938][T19315] batadv1: entered promiscuous mode [ 718.572807][T19316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.584458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.596892][T19316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.606077][T19316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.652559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.664220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.675604][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.867199][ T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 718.877982][ T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 719.417185][T19358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3431'. [ 719.495771][T19363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3431'. [ 719.674242][T19368] netlink: 'syz.4.3435': attribute type 1 has an invalid length. [ 719.701077][T19368] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3435'. [ 719.817404][T19368] dummy0: entered promiscuous mode [ 719.868512][T19369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3435'. [ 719.902401][T19368] dummy0: entered allmulticast mode [ 720.598182][T19407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3446'. [ 720.657502][T19414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3446'. [ 720.786972][T19416] IPv6: sit1: Disabled Multicast RS [ 720.858427][T19421] macvlan2: entered promiscuous mode [ 720.864266][T19421] macvlan2: entered allmulticast mode [ 720.870110][T19421] team0: Device macvlan2 is already an upper device of the team interface [ 722.462739][T19482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3463'. [ 722.578967][T19489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3463'. [ 722.735670][T19471] batadv_slave_0: entered promiscuous mode [ 722.752554][T19479] syzkaller1: entered promiscuous mode [ 722.768460][T19479] syzkaller1: entered allmulticast mode [ 722.840690][T19470] batadv_slave_0: left promiscuous mode [ 723.031329][T19499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3467'. [ 723.162797][T19500] syzkaller0: entered promiscuous mode [ 723.169554][T19500] syzkaller0: entered allmulticast mode [ 723.608938][T19520] netlink: 'syz.4.3472': attribute type 1 has an invalid length. [ 723.628138][T19520] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3472'. [ 723.646788][T19520] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3472'. [ 723.998481][T19541] : renamed from bond0 (while UP) [ 724.059135][T19545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3478'. [ 724.143193][T19554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3478'. [ 724.326504][T19559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3482'. [ 724.720766][T19577] syzkaller1: entered promiscuous mode [ 724.726417][T19577] syzkaller1: entered allmulticast mode [ 725.096632][T19590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3491'. [ 725.371227][T19607] syzkaller0: entered promiscuous mode [ 725.404060][T19607] syzkaller0: entered allmulticast mode [ 725.681971][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 726.028660][T19637] veth0_macvtap: entered allmulticast mode [ 726.035429][T19637] net_ratelimit: 4 callbacks suppressed [ 726.035446][T19637] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 726.317851][T19641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3501'. [ 726.377503][T19643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3501'. [ 726.619428][T19646] syzkaller0: entered promiscuous mode [ 726.624982][T19646] syzkaller0: entered allmulticast mode [ 728.239216][T19599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 728.266929][T19613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3497'. [ 728.284672][T19617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3497'. [ 728.634118][T19654] __nla_validate_parse: 1 callbacks suppressed [ 728.634137][T19654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3504'. [ 728.765415][T19669] netlink: 'syz.1.3509': attribute type 3 has an invalid length. [ 728.799078][T19666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3507'. [ 728.819078][T19669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3509'. [ 728.924408][T19676] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3511'. [ 728.944983][T19678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3512'. [ 729.475465][T19697] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3516'. [ 729.889833][T19680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 730.075906][T19706] gtp0: entered promiscuous mode [ 730.081166][T19706] gtp0: entered allmulticast mode [ 730.089233][T19706] team0: Device gtp0 is of different type [ 730.215357][T19712] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3521'. [ 730.268901][T19714] netlink: 'syz.1.3522': attribute type 1 has an invalid length. [ 730.277034][T19715] netlink: 'syz.1.3522': attribute type 1 has an invalid length. [ 730.330825][T19714] 8021q: adding VLAN 0 to HW filter on device bond4 [ 730.350528][T19714] bond4: (slave ip6gretap1): making interface the new active one [ 730.478148][T19714] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 730.548232][T19722] netlink: 'syz.0.3525': attribute type 1 has an invalid length. [ 730.556042][T19722] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3525'. [ 730.565172][T19722] netlink: 658 bytes leftover after parsing attributes in process `syz.0.3525'. [ 730.574318][T19722] netlink: 'syz.0.3525': attribute type 1 has an invalid length. [ 730.827245][T19737] netlink: 'syz.0.3528': attribute type 1 has an invalid length. [ 730.835083][T19737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.317854][T19763] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.3536'. [ 731.787727][T19777] ip6gre1: entered promiscuous mode [ 731.817556][T19777] ip6gre1: entered allmulticast mode [ 731.833331][T19777] netlink: 'syz.0.3541': attribute type 6 has an invalid length. [ 732.084290][T19784] netlink: 'syz.2.3544': attribute type 11 has an invalid length. [ 732.290852][T19792] lo: Caught tx_queue_len zero misconfig [ 732.374453][T19799] netlink: 'syz.3.3546': attribute type 10 has an invalid length. [ 732.395880][T19799] dummy0: entered promiscuous mode [ 732.422931][T19804] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 732.641406][T19808] bond0: entered promiscuous mode [ 732.760836][T19808] syzkaller1: entered promiscuous mode [ 732.770982][T19808] syzkaller1: entered allmulticast mode [ 732.788913][T19808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 732.890817][T19825] netlink: 'syz.1.3558': attribute type 11 has an invalid length. [ 733.076019][T19835] netlink: 'syz.3.3562': attribute type 1 has an invalid length. [ 733.123070][T19835] bond0: entered promiscuous mode [ 733.129870][T19835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.424052][T19843] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 733.750115][T19856] netlink: 'syz.3.3566': attribute type 30 has an invalid length. [ 733.889697][T19863] __nla_validate_parse: 10 callbacks suppressed [ 733.889719][T19863] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3568'. [ 733.961661][T19868] dummy0: left promiscuous mode [ 733.989657][T19868] bond0: left promiscuous mode [ 733.996529][T19868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 734.089448][T19870] netlink: 200232 bytes leftover after parsing attributes in process `syz.0.3570'. [ 734.140420][T19853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 734.207427][T19872] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3571'. [ 734.518595][T19877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3572'. [ 734.624691][T19879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3572'. [ 734.756995][T19893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3578'. [ 734.794076][T19895] macvtap1: entered promiscuous mode [ 734.799577][T19895] macvtap1: entered allmulticast mode [ 734.835183][T19895] veth1_vlan: entered allmulticast mode [ 734.890107][T19898] macvtap2: entered promiscuous mode [ 734.895627][T19898] macvtap2: entered allmulticast mode [ 735.009560][T19903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3582'. [ 735.019564][T19903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3582'. [ 735.029832][T19903] netlink: 'syz.2.3582': attribute type 14 has an invalid length. [ 735.038692][T19903] netlink: 'syz.2.3582': attribute type 13 has an invalid length. [ 735.518974][T19923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3589'. [ 735.626697][T19929] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 735.805753][T19943] xt_hashlimit: size too large, truncated to 1048576 [ 735.867929][T19947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3594'. [ 735.971333][T19950] netlink: 'syz.2.3591': attribute type 1 has an invalid length. [ 736.105149][T19948] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.131782][T19948] bridge_slave_0 (unregistering): left allmulticast mode [ 736.138974][T19948] bridge_slave_0 (unregistering): left promiscuous mode [ 736.182984][T19948] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.207903][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 737.244041][T19995] netlink: 'syz.1.3605': attribute type 11 has an invalid length. [ 737.298119][T19999] sit2: entered promiscuous mode [ 737.858423][T20023] : option downdelay: invalid value (18446744073709547007) [ 737.866787][T20023] : option downdelay: allowed values 0 - 2147483647 [ 738.074184][T20023]  (unregistering): Released all slaves [ 738.171359][T20034] syzkaller0: entered promiscuous mode [ 738.177041][T20034] syzkaller0: entered allmulticast mode [ 738.457532][T20043] syzkaller0: entered promiscuous mode [ 738.490882][T20043] syzkaller0: entered allmulticast mode [ 738.558768][ T5294] veth0_vlan: left promiscuous mode [ 738.628348][ T5294] veth0_vlan: entered promiscuous mode [ 738.996745][T20067] openvswitch: netlink: Key type 52 is out of range max 32 [ 739.121373][T20075] netlink: 'syz.1.3625': attribute type 11 has an invalid length. [ 739.335053][T20083] netlink: 'syz.0.3627': attribute type 7 has an invalid length. [ 739.367311][T15030] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.400481][T15030] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.419335][T15030] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.431353][T20083] netlink: 'syz.0.3627': attribute type 7 has an invalid length. [ 739.444879][T15030] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.456488][T20083] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 739.657950][T20091] __nla_validate_parse: 7 callbacks suppressed [ 739.657969][T20091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3631'. [ 739.713381][T20091] vlan2: entered promiscuous mode [ 739.718495][T20091] geneve1: entered promiscuous mode [ 739.723914][T20091] vlan2: entered allmulticast mode [ 739.729071][T20091] geneve1: entered allmulticast mode [ 739.737261][T20095] netlink: 'syz.0.3632': attribute type 4 has an invalid length. [ 739.829357][T20096] netlink: 'syz.0.3632': attribute type 4 has an invalid length. [ 739.957045][T20105] netlink: 'syz.2.3636': attribute type 12 has an invalid length. [ 740.081104][T20111] netlink: 'syz.4.3638': attribute type 11 has an invalid length. [ 740.176279][T20116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3639'. [ 740.668318][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3641'. [ 740.878331][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3641'. [ 740.933947][T20135] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3643'. [ 740.946321][T20135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3643'. [ 740.955918][T20135] netlink: 'syz.1.3643': attribute type 11 has an invalid length. [ 740.963784][T20135] netlink: 'syz.1.3643': attribute type 5 has an invalid length. [ 740.980642][T20136] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3644'. [ 740.989505][T20136] ip6gre1: entered promiscuous mode [ 740.989530][T20136] ip6gre1: entered allmulticast mode [ 741.039224][T20135] netlink: 6548 bytes leftover after parsing attributes in process `syz.1.3643'. [ 741.382972][T20153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3650'. [ 741.394058][T20153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3650'. [ 741.456979][T20157] netlink: 'syz.2.3651': attribute type 6 has an invalid length. [ 741.790447][T20167] tipc: New replicast peer: 255.255.255.255 [ 741.835907][T20167] tipc: Enabled bearer , priority 10 [ 742.081460][T20176] team0: Port device team_slave_0 removed [ 742.205540][T20189] netlink: 'syz.3.3662': attribute type 17 has an invalid length. [ 742.476105][T20202] netlink: 'syz.3.3666': attribute type 1 has an invalid length. [ 742.507270][ T6871] page_pool_release_retry() stalled pool shutdown: id 35, 1 inflight 603 sec [ 742.518062][T20202] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 742.912268][T20225] netlink: 'syz.1.3672': attribute type 22 has an invalid length. [ 742.965315][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 743.559759][T20252] ip6gretap0: entered promiscuous mode [ 743.633888][T20250] lo speed is unknown, defaulting to 1000 [ 744.319099][T20261] lo speed is unknown, defaulting to 1000 [ 744.704120][T20282] __nla_validate_parse: 11 callbacks suppressed [ 744.704141][T20282] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3689'. [ 744.791190][T20282] batadv0: entered promiscuous mode [ 744.836615][T20281] batadv0: left promiscuous mode [ 744.937618][ T5861] IPVS: starting estimator thread 0... [ 745.033545][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3691'. [ 745.049543][T20294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3691'. [ 745.274360][T20289] IPVS: using max 24 ests per chain, 57600 per kthread [ 745.477344][T20306] netlink: 'syz.4.3695': attribute type 11 has an invalid length. [ 745.968965][T20320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3701'. [ 746.227667][T20332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3706'. [ 746.315293][T20335] netlink: 'syz.2.3708': attribute type 11 has an invalid length. [ 746.327818][T20332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 746.360768][T20332] tipc: Started in network mode [ 746.365727][T20332] tipc: Node identity 060ac09df7af, cluster identity 4711 [ 746.409375][T20332] tipc: Enabled bearer , priority 0 [ 746.496269][T20332] netlink: 'syz.0.3706': attribute type 2 has an invalid length. [ 746.521003][T20332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3706'. [ 746.620065][T20331] tipc: Disabling bearer [ 747.548895][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.923933][T20391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3725'. [ 747.940665][T20395] sch_tbf: peakrate 6001563007346280268 is lower than or equals to rate 13887388117024825908 ! [ 748.169796][T20404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3726'. [ 748.414791][T20414] FAULT_INJECTION: forcing a failure. [ 748.414791][T20414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.459303][T20414] CPU: 1 UID: 0 PID: 20414 Comm: syz.0.3731 Not tainted syzkaller #0 PREEMPT(full) [ 748.459340][T20414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 748.459353][T20414] Call Trace: [ 748.459362][T20414] [ 748.459372][T20414] dump_stack_lvl+0xe8/0x150 [ 748.459405][T20414] should_fail_ex+0x412/0x560 [ 748.459434][T20414] _copy_from_user+0x2d/0xb0 [ 748.459461][T20414] sock_do_ioctl+0x195/0x320 [ 748.459493][T20414] ? __pfx_sock_do_ioctl+0x10/0x10 [ 748.459517][T20414] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 748.459558][T20414] sock_ioctl+0x5c6/0x7f0 [ 748.459586][T20414] ? __pfx_sock_ioctl+0x10/0x10 [ 748.459612][T20414] ? __fget_files+0x2a/0x420 [ 748.459638][T20414] ? __fget_files+0x3a0/0x420 [ 748.459662][T20414] ? __fget_files+0x2a/0x420 [ 748.459690][T20414] ? bpf_lsm_file_ioctl+0x9/0x20 [ 748.459722][T20414] ? __pfx_sock_ioctl+0x10/0x10 [ 748.459748][T20414] __se_sys_ioctl+0xfc/0x170 [ 748.459778][T20414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.459802][T20414] do_syscall_64+0x174/0xf80 [ 748.459821][T20414] ? trace_irq_disable+0x3b/0x140 [ 748.459852][T20414] ? clear_bhb_loop+0x40/0x90 [ 748.459877][T20414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.459898][T20414] RIP: 0033:0x7f51f2f9ce59 [ 748.459917][T20414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.459939][T20414] RSP: 002b:00007f51f3dbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 748.459961][T20414] RAX: ffffffffffffffda RBX: 00007f51f3215fa0 RCX: 00007f51f2f9ce59 [ 748.459976][T20414] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 748.459989][T20414] RBP: 00007f51f3dbd090 R08: 0000000000000000 R09: 0000000000000000 [ 748.460002][T20414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.460013][T20414] R13: 00007f51f3216038 R14: 00007f51f3215fa0 R15: 00007fff1515a588 [ 748.460048][T20414] [ 748.907220][T20416] netlink: 'syz.4.3729': attribute type 1 has an invalid length. [ 748.948657][T20416] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3729'. [ 748.985120][T20416] netlink: 'syz.4.3729': attribute type 1 has an invalid length. [ 748.992935][T20416] netlink: 638 bytes leftover after parsing attributes in process `syz.4.3729'. [ 749.050451][T20429] xt_TPROXY: Can be used only with -p tcp or -p udp [ 749.271191][ T30] audit: type=1107 audit(1779958319.801:21): pid=20433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 749.406164][T20442] bridge0: port 3(vlan2) entered blocking state [ 749.560163][T20447] FAULT_INJECTION: forcing a failure. [ 749.560163][T20447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.574463][T20442] bridge0: port 3(vlan2) entered disabled state [ 749.592533][T20442] vlan2: entered allmulticast mode [ 749.597861][T20447] CPU: 0 UID: 0 PID: 20447 Comm: syz.4.3742 Not tainted syzkaller #0 PREEMPT(full) [ 749.597887][T20447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 749.597901][T20447] Call Trace: [ 749.597909][T20447] [ 749.597917][T20447] dump_stack_lvl+0xe8/0x150 [ 749.597947][T20447] should_fail_ex+0x412/0x560 [ 749.597976][T20447] _copy_from_user+0x2d/0xb0 [ 749.598003][T20447] dev_ethtool+0xcf/0x1ae0 [ 749.598119][T20447] ? kasan_quarantine_put+0xbb/0x1f0 [ 749.598152][T20447] ? __pfx_dev_ethtool+0x10/0x10 [ 749.598176][T20447] ? dev_load+0x21/0x1f0 [ 749.598253][T20447] ? dev_load+0x21/0x1f0 [ 749.598285][T20447] ? dev_load+0x21/0x1f0 [ 749.598316][T20447] dev_ioctl+0x392/0x1150 [ 749.598351][T20447] sock_do_ioctl+0x23e/0x320 [ 749.598382][T20447] ? __pfx_sock_do_ioctl+0x10/0x10 [ 749.598405][T20447] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 749.598446][T20447] sock_ioctl+0x5c6/0x7f0 [ 749.598474][T20447] ? __pfx_sock_ioctl+0x10/0x10 [ 749.598500][T20447] ? __fget_files+0x2a/0x420 [ 749.598524][T20447] ? __fget_files+0x3a0/0x420 [ 749.598547][T20447] ? __fget_files+0x2a/0x420 [ 749.598575][T20447] ? bpf_lsm_file_ioctl+0x9/0x20 [ 749.598606][T20447] ? __pfx_sock_ioctl+0x10/0x10 [ 749.598630][T20447] __se_sys_ioctl+0xfc/0x170 [ 749.598673][T20447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.598697][T20447] do_syscall_64+0x174/0xf80 [ 749.598716][T20447] ? trace_irq_disable+0x3b/0x140 [ 749.598746][T20447] ? clear_bhb_loop+0x40/0x90 [ 749.598772][T20447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.598792][T20447] RIP: 0033:0x7f4a0e59ce59 [ 749.598812][T20447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.598829][T20447] RSP: 002b:00007f4a0f458028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 749.598851][T20447] RAX: ffffffffffffffda RBX: 00007f4a0e815fa0 RCX: 00007f4a0e59ce59 [ 749.598866][T20447] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 749.598879][T20447] RBP: 00007f4a0f458090 R08: 0000000000000000 R09: 0000000000000000 [ 749.598892][T20447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.598903][T20447] R13: 00007f4a0e816038 R14: 00007f4a0e815fa0 R15: 00007ffd228f40e8 [ 749.598938][T20447] [ 749.836033][T20442] geneve0: entered allmulticast mode [ 749.844423][T20442] vlan2: entered promiscuous mode [ 749.849681][T20442] geneve0: entered promiscuous mode [ 749.908799][T20445] tipc: Enabled bearer , priority 0 [ 749.917241][T20448] tipc: Enabling of bearer rejected, already enabled [ 750.010397][T20448] tipc: Disabling bearer [ 750.134171][T20466] __nla_validate_parse: 3 callbacks suppressed [ 750.134192][T20466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3744'. [ 750.260764][T20454] lo speed is unknown, defaulting to 1000 [ 750.270003][T20469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3748'. [ 750.330086][T20453] lo speed is unknown, defaulting to 1000 [ 751.114226][T20481] lo speed is unknown, defaulting to 1000 [ 751.331424][T20501] netlink: 'syz.2.3755': attribute type 1 has an invalid length. [ 751.377655][T20501] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3755'. [ 751.431124][T20501] tipc: Started in network mode [ 751.436052][T20501] tipc: Node identity , cluster identity 4711 [ 751.442159][T20501] tipc: Failed to obtain node identity [ 751.447680][T20501] tipc: Enabling of bearer rejected, failed to enable media [ 751.552565][T20510] xt_bpf: check failed: parse error [ 751.588026][T20511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3756'. [ 751.596972][T20511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3756'. [ 751.966822][T20520] syzkaller1: entered promiscuous mode [ 751.972372][T20520] syzkaller1: entered allmulticast mode [ 752.228579][T20531] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3761'. [ 752.683717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.693060][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.524160][ T50] Bluetooth: hci0: command 0x0405 tx timeout [ 754.114709][T20579] lo speed is unknown, defaulting to 1000 [ 754.332645][T20584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3773'. [ 754.723712][T20595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3776'. [ 754.798730][T20595] bridge4: port 1(gretap1) entered blocking state [ 754.806011][T20595] bridge4: port 1(gretap1) entered disabled state [ 754.812842][T20595] gretap1: entered allmulticast mode [ 754.820380][T20595] gretap1: entered promiscuous mode [ 755.084942][T20607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3782'. [ 755.207576][T20614] xt_bpf: check failed: parse error [ 755.496771][T20625] netlink: 'syz.2.3786': attribute type 1 has an invalid length. [ 755.591141][T20625] bond2: entered promiscuous mode [ 755.596749][T20625] 8021q: adding VLAN 0 to HW filter on device bond2 [ 755.840083][ T30] audit: type=1107 audit(1779958326.371:22): pid=20637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 755.909665][T20612] xt_hashlimit: size too large, truncated to 1048576 [ 756.010914][T20642] bond0: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 756.075251][T20653] x_tables: duplicate underflow at hook 1 [ 756.087027][T20652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3786'. [ 756.105165][T20642] bond0 (unregistering): Released all slaves [ 756.188702][T20641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3786'. [ 756.244225][T20641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3786'. [ 756.251376][T20652] bond2: entered allmulticast mode [ 756.374011][T20659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3794'. [ 756.429393][T20663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3793'. [ 756.470910][T20663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3793'. [ 756.546659][T20663] netlink: 'syz.3.3793': attribute type 14 has an invalid length. [ 756.613918][T20663] netlink: 'syz.3.3793': attribute type 13 has an invalid length. [ 756.834635][T20665] lo: entered allmulticast mode [ 756.839622][T20665] lo: left allmulticast mode [ 756.862976][T20667] netlink: 'syz.0.3796': attribute type 1 has an invalid length. [ 756.958244][T20672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3797'. [ 756.981112][T20675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3796'. [ 757.002470][T20676] xt_bpf: check failed: parse error [ 757.105996][T20680] x_tables: duplicate underflow at hook 2 [ 757.309440][T20667] 8021q: adding VLAN 0 to HW filter on device bond2 [ 757.316993][T20673] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 757.378059][T20691] geneve2: entered promiscuous mode [ 757.390784][T20691] geneve2: entered allmulticast mode [ 757.489006][T20702] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3800'. [ 757.569068][T20689] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3800'. [ 757.743837][T20708] lo speed is unknown, defaulting to 1000 [ 758.446960][T20735] xt_bpf: check failed: parse error [ 758.524941][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.533335][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.210880][T15048] bond9 (unregistering): (slave gretap2): Releasing active interface [ 759.219017][T15048] gretap2 (unregistering): left promiscuous mode [ 759.315099][T15048]  (unregistering): (slave bridge1): Releasing backup interface [ 759.329086][T15048] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 759.387480][T15048] bond11 (unregistering): (slave bridge6): Releasing active interface [ 759.509515][T15048]  (unregistering): Released all slaves [ 759.522982][T15048] bond1 (unregistering): Released all slaves [ 759.544209][T15048] bond2 (unregistering): Released all slaves [ 759.596935][T15048] bond3 (unregistering): Released all slaves [ 759.654531][T15048] bond4 (unregistering): Released all slaves [ 759.670564][T15048] bond5 (unregistering): Released all slaves [ 759.688381][T15048] bond6 (unregistering): Released all slaves [ 759.707163][T15048] bond7 (unregistering): Released all slaves [ 759.756662][T15048] bond8 (unregistering): Released all slaves [ 759.777260][T15048] bond9 (unregistering): left promiscuous mode [ 759.790303][T15048] bond9 (unregistering): Released all slaves [ 759.809710][T15048] bond10 (unregistering): Released all slaves [ 759.829441][T15048] bond11 (unregistering): Released all slaves [ 759.882643][T15048] bond0 (unregistering): Released all slaves [ 759.899599][T15048] bond12 (unregistering): Released all slaves [ 759.919750][T15048] bond13 (unregistering): Released all slaves [ 759.939354][T15048] bond14 (unregistering): Released all slaves [ 759.957470][T15048] bond15 (unregistering): Released all slaves [ 760.445252][T15048] : left promiscuous mode [ 760.709246][T20768] lo speed is unknown, defaulting to 1000 [ 761.381695][T20792] __nla_validate_parse: 5 callbacks suppressed [ 761.381716][T20792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3821'. [ 761.403158][T20793] xt_bpf: check failed: parse error [ 761.410708][T20792] netlink: 'syz.1.3821': attribute type 13 has an invalid length. [ 761.419104][T15048] tipc: Disabling bearer [ 761.439142][T15048] tipc: Disabling bearer [ 761.452330][T15048] tipc: Left network mode [ 761.637392][ T5861] IPVS: starting estimator thread 0... [ 761.762871][T20799] IPVS: using max 23 ests per chain, 55200 per kthread [ 762.662308][T20817] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3829'. [ 762.857190][T20811] lo speed is unknown, defaulting to 1000 [ 763.429472][T20839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3837'. [ 763.619446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.627899][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.636326][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.661243][T20841] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3837'. [ 763.756103][T20839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3837'. [ 763.814502][T20851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3840'. [ 764.258305][T15048] hsr_slave_0: left promiscuous mode [ 764.265411][T15048] hsr_slave_1: left promiscuous mode [ 764.288453][T15048] veth1_macvtap: left promiscuous mode [ 764.296865][T15048] veth1_vlan: left promiscuous mode [ 764.302995][T15048] veth0_vlan: left promiscuous mode [ 764.589826][T20865] Bluetooth: MGMT ver 1.23 [ 769.257737][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.266304][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.001631][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 770.982339][T20876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3844'. [ 771.162786][T20892] sctp: [Deprecated]: syz.1.3848 (pid 20892) Use of int in maxseg socket option. [ 771.162786][T20892] Use struct sctp_assoc_value instead [ 771.240387][T20894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3849'. [ 771.564878][T20907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3851'. [ 771.723342][T20918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3854'. [ 771.795119][T20902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3849'. [ 771.796220][T20899] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3851'. [ 771.827339][T20905] netlink: 5560 bytes leftover after parsing attributes in process `syz.1.3852'. [ 771.838128][T20905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3852'. [ 772.128500][T20923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3854'. [ 772.408978][T20938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3856'. [ 772.550686][T20940] syzkaller1: entered promiscuous mode [ 772.577609][T20940] syzkaller1: entered allmulticast mode [ 772.881040][T20894] bridge0: port 1(vlan4) entered blocking state [ 772.889348][T20894] bridge0: port 1(vlan4) entered disabled state [ 772.900238][T20894] vlan4: entered allmulticast mode [ 772.906801][T20894] geneve0: entered allmulticast mode [ 772.915992][T20894] vlan4: entered promiscuous mode [ 772.921143][T20894] geneve0: entered promiscuous mode [ 773.346956][T20964] xt_hashlimit: size too large, truncated to 1048576 [ 773.380576][T20969] netlink: 'syz.3.3864': attribute type 1 has an invalid length. [ 773.421066][T20969] netlink: 'syz.3.3864': attribute type 2 has an invalid length. [ 773.448530][T20969] netlink: 'syz.3.3864': attribute type 2 has an invalid length. [ 773.701213][T20988] netlink: 'syz.4.3869': attribute type 1 has an invalid length. [ 773.756338][T20988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.816704][T20992] netlink: 'syz.4.3871': attribute type 18 has an invalid length. [ 773.927699][T20994] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 774.293671][T14558] block nbd7: Receive control failed (result -1) [ 775.063581][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.072044][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.080470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.521369][T21046] openvswitch: netlink: Invalid VLAN frame [ 775.926548][T21056] netlink: 'syz.1.3890': attribute type 7 has an invalid length. [ 775.934396][T21056] netlink: 'syz.1.3890': attribute type 8 has an invalid length. [ 776.147433][T21065] __nla_validate_parse: 14 callbacks suppressed [ 776.147454][T21065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3888'. [ 776.319727][T21057] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3887'. [ 776.408757][ T30] audit: type=1804 audit(1779958346.941:23): pid=21075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3893" name="/newroot/193/cgroup.controllers" dev="tmpfs" ino=1000 res=1 errno=0 [ 776.444320][T21075] [ 776.446735][T21075] ====================================================== [ 776.453870][T21075] WARNING: possible circular locking dependency detected [ 776.461069][T21075] syzkaller #0 Not tainted [ 776.465647][T21075] ------------------------------------------------------ [ 776.472757][T21075] syz.2.3893/21075 is trying to acquire lock: [ 776.478862][T21075] ffffffff8ea855a0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 776.488343][T21075] [ 776.488343][T21075] but task is already holding lock: [ 776.495753][T21075] ffff888098378260 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x142/0x800 [ 776.506822][T21075] [ 776.506822][T21075] which lock already depends on the new lock. [ 776.506822][T21075] [ 776.517264][T21075] [ 776.517264][T21075] the existing dependency chain (in reverse order) is: [ 776.526361][T21075] [ 776.526361][T21075] -> #7 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}: [ 776.534632][T21075] lock_sock_nested+0x41/0x100 [ 776.538149][ T30] audit: type=1800 audit(1779958346.941:24): pid=21075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3893" name="cgroup.controllers" dev="tmpfs" ino=1000 res=0 errno=0 [ 776.539968][T21075] mptcp_subflow_create_socket+0x142/0x800 [ 776.540000][T21075] __mptcp_nmpc_sk+0x155/0x790 [ 776.573395][T21075] mptcp_sendmsg_fastopen+0xd4/0x580 [ 776.579332][T21075] mptcp_sendmsg+0x1b0c/0x1dc0 [ 776.584731][T21075] ____sys_sendmsg+0x5c7/0x9f0 [ 776.590060][T21075] ___sys_sendmsg+0x2a5/0x360 [ 776.595311][T21075] __x64_sys_sendmsg+0x1bd/0x2a0 [ 776.600824][T21075] do_syscall_64+0x174/0xf80 [ 776.605988][T21075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.612450][T21075] [ 776.612450][T21075] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 776.620241][T21075] lock_sock_nested+0x41/0x100 [ 776.625573][T21075] inet_shutdown+0x6a/0x390 [ 776.630748][T21075] nbd_mark_nsock_dead+0x2e9/0x560 [ 776.636476][T21075] recv_work+0x1c2e/0x1d40 [ 776.641440][T21075] process_scheduled_works+0xb5d/0x1860 [ 776.647535][T21075] worker_thread+0xa53/0xfc0 [ 776.652768][T21075] kthread+0x389/0x470 [ 776.657395][T21075] ret_from_fork+0x514/0xb70 [ 776.662543][T21075] ret_from_fork_asm+0x1a/0x30 [ 776.667861][T21075] [ 776.667861][T21075] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 776.675618][T21075] __mutex_lock+0x1a3/0x1550 [ 776.680751][T21075] nbd_queue_rq+0x37b/0x1100 [ 776.685975][T21075] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 776.692161][T21075] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 776.699100][T21075] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 776.705625][T21075] blk_mq_run_hw_queue+0x348/0x4f0 [ 776.711281][T21075] blk_mq_dispatch_list+0xd16/0xe10 [ 776.717023][T21075] blk_mq_flush_plug_list+0x48d/0x570 [ 776.722973][T21075] __blk_flush_plug+0x3ed/0x4d0 [ 776.728524][T21075] __submit_bio+0x28d/0x580 [ 776.733569][T21075] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 776.739741][T21075] block_read_full_folio+0x599/0x830 [ 776.745592][T21075] filemap_read_folio+0x137/0x3b0 [ 776.751196][T21075] do_read_cache_folio+0x358/0x590 [ 776.756857][T21075] read_part_sector+0xb6/0x2b0 [ 776.762230][T21075] adfspart_check_ICS+0xb1/0x960 [ 776.767806][T21075] bdev_disk_changed+0x817/0x1770 [ 776.773376][T21075] blkdev_get_whole+0x380/0x510 [ 776.778926][T21075] bdev_open+0x31e/0xd30 [ 776.783709][T21075] blkdev_open+0x470/0x610 [ 776.788810][T21075] do_dentry_open+0x822/0x13a0 [ 776.794113][T21075] vfs_open+0x3b/0x340 [ 776.798723][T21075] path_openat+0x2e08/0x3860 [ 776.803866][T21075] do_file_open+0x23e/0x4a0 [ 776.808924][T21075] do_sys_openat2+0x113/0x200 [ 776.814145][T21075] __x64_sys_openat+0x138/0x170 [ 776.819544][T21075] do_syscall_64+0x174/0xf80 [ 776.824671][T21075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.831106][T21075] [ 776.831106][T21075] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 776.838347][T21075] __mutex_lock+0x1a3/0x1550 [ 776.843489][T21075] nbd_queue_rq+0xc6/0x1100 [ 776.848553][T21075] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 776.854648][T21075] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 776.861529][T21075] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 776.868243][T21075] blk_mq_run_hw_queue+0x348/0x4f0 [ 776.873907][T21075] blk_mq_dispatch_list+0xd16/0xe10 [ 776.879651][T21075] blk_mq_flush_plug_list+0x48d/0x570 [ 776.885975][T21075] __blk_flush_plug+0x3ed/0x4d0 [ 776.891378][T21075] __submit_bio+0x28d/0x580 [ 776.896435][T21075] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 776.902714][T21075] block_read_full_folio+0x599/0x830 [ 776.908563][T21075] filemap_read_folio+0x137/0x3b0 [ 776.914148][T21075] do_read_cache_folio+0x358/0x590 [ 776.919816][T21075] read_part_sector+0xb6/0x2b0 [ 776.925129][T21075] adfspart_check_ICS+0xb1/0x960 [ 776.930615][T21075] bdev_disk_changed+0x817/0x1770 [ 776.936183][T21075] blkdev_get_whole+0x380/0x510 [ 776.941580][T21075] bdev_open+0x31e/0xd30 [ 776.946379][T21075] blkdev_open+0x470/0x610 [ 776.951339][T21075] do_dentry_open+0x822/0x13a0 [ 776.956642][T21075] vfs_open+0x3b/0x340 [ 776.961260][T21075] path_openat+0x2e08/0x3860 [ 776.966489][T21075] do_file_open+0x23e/0x4a0 [ 776.971546][T21075] do_sys_openat2+0x113/0x200 [ 776.976860][T21075] __x64_sys_openat+0x138/0x170 [ 776.982257][T21075] do_syscall_64+0x174/0xf80 [ 776.988351][T21075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.994802][T21075] [ 776.994802][T21075] -> #3 (set->srcu){.+.+}-{0:0}: [ 777.001953][T21075] __synchronize_srcu+0xca/0x300 [ 777.007450][T21075] elevator_switch+0x1e8/0x7a0 [ 777.013286][T21075] elevator_change+0x2cc/0x450 [ 777.018643][T21075] elevator_set_default+0x36c/0x430 [ 777.024394][T21075] blk_register_queue+0x3e9/0x4e0 [ 777.029975][T21075] __add_disk+0x677/0xd50 [ 777.034856][T21075] add_disk_fwnode+0xfb/0x480 [ 777.040101][T21075] nbd_dev_add+0x72c/0xb50 [ 777.045071][T21075] nbd_init+0x168/0x1f0 [ 777.050005][T21075] do_one_initcall+0x250/0x870 [ 777.055313][T21075] do_initcall_level+0x104/0x190 [ 777.060839][T21075] do_initcalls+0x59/0xa0 [ 777.065756][T21075] kernel_init_freeable+0x2a6/0x3e0 [ 777.071504][T21075] kernel_init+0x1d/0x1d0 [ 777.076472][T21075] ret_from_fork+0x514/0xb70 [ 777.081612][T21075] ret_from_fork_asm+0x1a/0x30 [ 777.086930][T21075] [ 777.086930][T21075] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 777.094777][T21075] __mutex_lock+0x1a3/0x1550 [ 777.099914][T21075] elevator_change+0x1b3/0x450 [ 777.105225][T21075] elevator_set_none+0xb5/0x140 [ 777.110616][T21075] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 777.116967][T21075] nbd_start_device+0x17f/0xb10 [ 777.122376][T21075] nbd_genl_connect+0x165b/0x1cf0 [ 777.127956][T21075] genl_family_rcv_msg_doit+0x22a/0x330 [ 777.134053][T21075] genl_rcv_msg+0x61c/0x7a0 [ 777.139218][T21075] netlink_rcv_skb+0x232/0x4b0 [ 777.144543][T21075] genl_rcv+0x28/0x40 [ 777.149086][T21075] netlink_unicast+0x75c/0x8e0 [ 777.154404][T21075] netlink_sendmsg+0x813/0xb40 [ 777.159711][T21075] ____sys_sendmsg+0x972/0x9f0 [ 777.165108][T21075] ___sys_sendmsg+0x2a5/0x360 [ 777.170342][T21075] __x64_sys_sendmsg+0x1bd/0x2a0 [ 777.175821][T21075] do_syscall_64+0x174/0xf80 [ 777.180953][T21075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.187649][T21075] [ 777.187649][T21075] -> #1 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 777.196445][T21075] blk_alloc_queue+0x546/0x680 [ 777.202030][T21075] __blk_mq_alloc_disk+0x197/0x390 [ 777.207699][T21075] nbd_dev_add+0x499/0xb50 [ 777.212669][T21075] nbd_init+0x168/0x1f0 [ 777.217377][T21075] do_one_initcall+0x250/0x870 [ 777.222688][T21075] do_initcall_level+0x104/0x190 [ 777.228176][T21075] do_initcalls+0x59/0xa0 [ 777.233059][T21075] kernel_init_freeable+0x2a6/0x3e0 [ 777.238977][T21075] kernel_init+0x1d/0x1d0 [ 777.243870][T21075] ret_from_fork+0x514/0xb70 [ 777.249211][T21075] ret_from_fork_asm+0x1a/0x30 [ 777.254644][T21075] [ 777.254644][T21075] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 777.261979][T21075] __lock_acquire+0x15a5/0x2cf0 [ 777.267390][T21075] lock_acquire+0x106/0x350 [ 777.272439][T21075] fs_reclaim_acquire+0x71/0x100 [ 777.278738][T21075] __kmalloc_cache_noprof+0x40/0x660 [ 777.285551][T21075] ref_tracker_alloc+0x15a/0x4c0 [ 777.291038][T21075] get_net_track+0x16e/0x230 [ 777.296177][T21075] sk_net_refcnt_upgrade+0xb2/0x130 [ 777.302273][T21075] mptcp_subflow_create_socket+0x32b/0x800 [ 777.308636][T21075] __mptcp_nmpc_sk+0x155/0x790 [ 777.313949][T21075] mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 777.320540][T21075] genl_family_rcv_msg_doit+0x22a/0x330 [ 777.326649][T21075] genl_rcv_msg+0x61c/0x7a0 [ 777.331716][T21075] netlink_rcv_skb+0x232/0x4b0 [ 777.337026][T21075] genl_rcv+0x28/0x40 [ 777.341557][T21075] netlink_unicast+0x75c/0x8e0 [ 777.346875][T21075] netlink_sendmsg+0x813/0xb40 [ 777.352187][T21075] ____sys_sendmsg+0x972/0x9f0 [ 777.357504][T21075] ___sys_sendmsg+0x2a5/0x360 [ 777.362815][T21075] __x64_sys_sendmsg+0x1bd/0x2a0 [ 777.368305][T21075] do_syscall_64+0x174/0xf80 [ 777.374141][T21075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.382936][T21075] [ 777.382936][T21075] other info that might help us debug this: [ 777.382936][T21075] [ 777.393196][T21075] Chain exists of: [ 777.393196][T21075] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6/1 [ 777.393196][T21075] [ 777.406427][T21075] Possible unsafe locking scenario: [ 777.406427][T21075] [ 777.413945][T21075] CPU0 CPU1 [ 777.419376][T21075] ---- ---- [ 777.424767][T21075] lock(k-sk_lock-AF_INET6/1); [ 777.429647][T21075] lock(sk_lock-AF_INET6); [ 777.436792][T21075] lock(k-sk_lock-AF_INET6/1); [ 777.444222][T21075] lock(fs_reclaim); [ 777.448226][T21075] [ 777.448226][T21075] *** DEADLOCK *** [ 777.448226][T21075] [ 777.456448][T21075] 4 locks held by syz.2.3893/21075: [ 777.461934][T21075] #0: ffffffff8fe38a48 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 777.470198][T21075] #1: ffffffff8fe38880 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 777.479196][T21075] #2: ffff888035ec4ee0 (msk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_pm_nl_add_addr_doit+0xdc7/0x1420 [ 777.490031][T21075] #3: ffff888098378260 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x142/0x800 [ 777.501214][T21075] [ 777.501214][T21075] stack backtrace: [ 777.507139][T21075] CPU: 1 UID: 0 PID: 21075 Comm: syz.2.3893 Not tainted syzkaller #0 PREEMPT(full) [ 777.507164][T21075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 777.507175][T21075] Call Trace: [ 777.507182][T21075] [ 777.507190][T21075] dump_stack_lvl+0xe8/0x150 [ 777.507216][T21075] print_circular_bug+0x2e1/0x300 [ 777.507241][T21075] check_noncircular+0x12e/0x150 [ 777.507266][T21075] __lock_acquire+0x15a5/0x2cf0 [ 777.507285][T21075] ? check_noncircular+0xda/0x150 [ 777.507309][T21075] ? lockdep_unlock+0x5d/0xd0 [ 777.507323][T21075] ? __lock_acquire+0x146e/0x2cf0 [ 777.507342][T21075] ? __kmalloc_cache_noprof+0x40/0x660 [ 777.507365][T21075] lock_acquire+0x106/0x350 [ 777.507381][T21075] ? __kmalloc_cache_noprof+0x40/0x660 [ 777.507410][T21075] fs_reclaim_acquire+0x71/0x100 [ 777.507433][T21075] ? __kmalloc_cache_noprof+0x40/0x660 [ 777.507456][T21075] __kmalloc_cache_noprof+0x40/0x660 [ 777.507480][T21075] ? ref_tracker_alloc+0x15a/0x4c0 [ 777.507498][T21075] ? rcu_is_watching+0x15/0xb0 [ 777.507519][T21075] ref_tracker_alloc+0x15a/0x4c0 [ 777.507538][T21075] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 777.507555][T21075] ? ref_tracker_free+0x522/0x840 [ 777.507574][T21075] ? __pfx_ref_tracker_free+0x10/0x10 [ 777.507591][T21075] ? sk_net_refcnt_upgrade+0x8c/0x130 [ 777.507614][T21075] ? mptcp_subflow_create_socket+0x32b/0x800 [ 777.507632][T21075] ? __mptcp_nmpc_sk+0x155/0x790 [ 777.507667][T21075] ? mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 777.507691][T21075] ? genl_family_rcv_msg_doit+0x22a/0x330 [ 777.507716][T21075] ? net_passive_dec+0x177/0x250 [ 777.507740][T21075] ? __pfx_net_passive_dec+0x10/0x10 [ 777.507766][T21075] get_net_track+0x16e/0x230 [ 777.507783][T21075] sk_net_refcnt_upgrade+0xb2/0x130 [ 777.507801][T21075] mptcp_subflow_create_socket+0x32b/0x800 [ 777.507822][T21075] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 777.507843][T21075] ? do_raw_spin_lock+0x12b/0x2f0 [ 777.507864][T21075] ? lock_sock_nested+0x6a/0x100 [ 777.507887][T21075] __mptcp_nmpc_sk+0x155/0x790 [ 777.507906][T21075] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 777.507923][T21075] ? mptcp_pm_nl_add_addr_doit+0xdc7/0x1420 [ 777.507948][T21075] ? __local_bh_enable_ip+0xd0/0x130 [ 777.507968][T21075] mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 777.507998][T21075] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 777.508039][T21075] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 777.508062][T21075] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 777.508089][T21075] genl_family_rcv_msg_doit+0x22a/0x330 [ 777.508114][T21075] ? __asan_memcpy+0x40/0x70 [ 777.508136][T21075] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 777.508164][T21075] ? bpf_lsm_capable+0x9/0x20 [ 777.508181][T21075] ? security_capable+0x7e/0x2c0 [ 777.508208][T21075] genl_rcv_msg+0x61c/0x7a0 [ 777.508233][T21075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 777.508254][T21075] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 777.508279][T21075] ? __pfx_ref_tracker_free+0x10/0x10 [ 777.508301][T21075] netlink_rcv_skb+0x232/0x4b0 [ 777.508319][T21075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 777.508341][T21075] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 777.508365][T21075] ? down_read+0x270/0x2e0 [ 777.508382][T21075] ? genl_rcv+0xd/0x40 [ 777.508403][T21075] genl_rcv+0x28/0x40 [ 777.508423][T21075] netlink_unicast+0x75c/0x8e0 [ 777.508443][T21075] netlink_sendmsg+0x813/0xb40 [ 777.508465][T21075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.508484][T21075] ? aa_sock_msg_perm+0xf1/0x1b0 [ 777.508511][T21075] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 777.508535][T21075] ____sys_sendmsg+0x972/0x9f0 [ 777.508553][T21075] ? __might_fault+0xaf/0x130 [ 777.508576][T21075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 777.508597][T21075] ? import_iovec+0x73/0xa0 [ 777.508626][T21075] ___sys_sendmsg+0x2a5/0x360 [ 777.508642][T21075] ? __lock_acquire+0x6b5/0x2cf0 [ 777.508661][T21075] ? __pfx____sys_sendmsg+0x10/0x10 [ 777.508681][T21075] ? futex_wake+0x4ac/0x580 [ 777.508716][T21075] ? __fget_files+0x2a/0x420 [ 777.508735][T21075] ? __fget_files+0x3a0/0x420 [ 777.508759][T21075] __x64_sys_sendmsg+0x1bd/0x2a0 [ 777.508777][T21075] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 777.508798][T21075] ? rcu_is_watching+0x15/0xb0 [ 777.508821][T21075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.508837][T21075] do_syscall_64+0x174/0xf80 [ 777.508853][T21075] ? trace_irq_disable+0x3b/0x140 [ 777.508877][T21075] ? clear_bhb_loop+0x40/0x90 [ 777.508896][T21075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.508912][T21075] RIP: 0033:0x7fb29cb9ce59 [ 777.508928][T21075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.508943][T21075] RSP: 002b:00007fb29da3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 777.508962][T21075] RAX: ffffffffffffffda RBX: 00007fb29ce16090 RCX: 00007fb29cb9ce59 [ 777.508974][T21075] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000a [ 777.508985][T21075] RBP: 00007fb29cc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 777.508996][T21075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.509005][T21075] R13: 00007fb29ce16128 R14: 00007fb29ce16090 R15: 00007ffdd6959388 [ 777.509025][T21075] [ 777.522818][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 777.818716][T21071] team_slave_1: Caught tx_queue_len zero misconfig [ 781.202882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.211711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.373163][T14558] Bluetooth: hci1: command 0x0406 tx timeout [ 785.611886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.620825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog