last executing test programs: 3.196369969s ago: executing program 3 (id=3362): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000050025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="00000000010400000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) splice(r4, 0x0, r3, 0x0, 0x1100000000f336, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="b4090000000008956910b40000000000c409000000000000950074000000000007fa1346fc036e732b21a514ddd30dcca82eda5d9f51a6fa9aefc925afacb2e7639519b4653f07abae8ffaf38aeff896aabef225204b85ea9bde"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffc}, 0x10}, 0x94) 2.761787768s ago: executing program 1 (id=3369): unshare(0x6a060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x200) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000080)=0xfff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) unshare(0x400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r3, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r3, r2, 0x0, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x98, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000000}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x98}, 0x1, 0x0, 0x0, 0x14}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x8, 0x5, 0x9, 0x8b, 0xc]}, &(0x7f0000000100)=0x54) 2.30979855s ago: executing program 0 (id=3372): syz_emit_ethernet(0x46, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x67, 0x48, 0x0, 0x11, 0x0, @multicast1}, "341517c1b7df60c7"}}}}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[@mark={{0x14, 0x1, 0x4f, 0x10a}}], 0x18}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000400000000", @ANYRES32=0x0, @ANYBLOB="937b010021000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00\\'], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xe8) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000008d80)={0x64ac, 0x19, 0x1, 0x70bd28, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x49, 0xd5, 0x0, 0x1, [@generic="33ac20d9db2597515873def3351bf11d66e8632c47544ac4a8a74aec90d7faba3dc1cdbd588d2dccd5f20dc35eb9a20452580c01ca5021c7bf57b3cb27d51cf9e00e6c4264"]}]}, @nested={0x6448, 0x6, 0x0, 0x1, [@nested={0x6444, 0xa9, 0x0, 0x1, [@nested={0x6440, 0x13e, 0x0, 0x1, [@nested={0x643c, 0x10a0, 0x0, 0x1, [@nested={0x6438, 0x61, 0x0, 0x1, [@nested={0x6431, 0x6d, 0x0, 0x1, [@generic="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", @typed={0x8, 0xb6, 0x0, 0x0, @u32=0x4}, @nested={0x576d, 0x68, 0x0, 0x1, [@nested={0x1031, 0x2, 0x0, 0x1, [@generic="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", @typed={0x8, 0x131, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2c}}, @nested={0x4, 0x1f}, @typed={0x8, 0xea, 0x0, 0x0, @pid}, @nested={0x4, 0x10a}, @nested={0x4, 0xd3}, @nested={0x4, 0xae}, @typed={0xc, 0x9e, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0x5a}]}, @nested={0xe9, 0x13b, 0x0, 0x1, [@generic="826a26f69b490b585dcf6158d740953b2f610dfe7e62e0288a830dc57e4f225960128d198c13e348fefe274b3eda32298013a3d89490cd28b145bc903691723b6c72c46d542b12eeb9724ba8b6096e06329b2d65b73ee94c98b4c3a1c469333499614ae4bda609e892694b1d573f44499817abb1c2599c340d25f809744dcf25a2af8c47bf0586f3a1b7bf7b468b6556e9bedc0f3e0f91cf30ac4080c3e21f93541485e51572880485cafc13ca646e203a56e54805c4e8a82f22327c8dce6bf7834a953eead56257d0fd316bef399897c3", @typed={0x14, 0x35, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @nested={0x1015, 0x169, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @fd=r5}, @nested={0x4, 0x117}, @typed={0xc, 0xc6, 0x0, 0x0, @u64=0x629}, @generic="48e8289f9fe296437d0c53f8b28c93b3a08c13da32d66b8620dffe50f05f92e277d7fe487e0f440b7db19167a3445effd8bb1b25ed1e61b31760ea473f41fce9c8a9efd1e55e418288638a4a29f05296d1e8b8d8a4281b9296ec7a94445c6e1f827f32595ad6901266f8b19de523281beefae02480c5c4e064da7f7ca7430e8c6fa2fd10ea19f3627c3bfa2a8fe7f39ac4cf0fd9e9a3dea96572663df982673d5be8828e570e82976f729d18f3ef36d6edc54a1e118837f911bc85eda559c582c1412101c1acb72aae7b420e94504e06cd47151bd22461e544c05954274811565f04299786d71bd2e8a8270667c2d07aa3041b27ca4fa6b5e7be7f1e1a9a977e147384ad6518bd91a6bd6bd0de67c4b28e98a9cce5584f26fbd2f8a373a801fd089dcea6e053ec4560acbc8173f83a631b9ffd0ce40cf5e47b80a5faf177c6c926cf566530457c311470372bdd7a705df7c72752b20ee8c4904ee1da6d83516523ea74ccbced2619b9e12a55c66edc81c25a13c2268287d6cef72e4310218f9adf5b4f0b366f7f372c0d9088ebae76a9b9d5593bfa37b2a7251e00645ec48154e4a98cb6e3d13548f582c9a582431b7ee80cabdb2b8c1ba78f79e6eae71892e662348550a50429eeb88c031152fb43835fd17f309291dd636a2e3f242e27a4628cb25d88a4d6a92ce2578bbdc24783673ba70aed7f2f063d046535f6725f461a0fe1eef18a221fa4e652adb8b7b15d0d180e0bfa804b453d49311268c0a762ab3aafb1313f5df1b95dd26b49dea664fda63b264f1104f3035a57b2f5d354a6320420de1d730a5feb3c119a32a90f1bb2b8720a1e42aad2c9454faf29db318ab9451f66c734485166d1e34694670136f2f137c4a7a2277447f9b8311bb459515459c0a391d26b8e05875f5fd2886f206855fb813d2a982296971654d0cae7973f53a9a73f993cb93a0ab0682a54b05b523d9c8231defe64cb3470160e02f0629dfd1b6605b2bc9f82a04116cc0d103480e1435906166ae48dc93709aa556088b3265ce1694a86f3599f6559ce0b21c269329b8c462b82800e9e489584402a85de50bd3662fb01c676b0a17d29e5a93534e05a000079c11b31606c3f53127c331f4e390fcda63775f4b98c40a7b80fad30f350cb8355a143367ab6269392f0fcc302cfd3ac262cd6dbab815e1ab8a3cf49372048a96c1ac046a9bb30b4cc408e2f263d1f7036ff3b7886b11f8e91a0e41951efec4c20846e4d39ca87ba3c68ff3e90bfdda4fa8e6dd4f3b63aa514efbc6cf457cd879dc7500a862d5a50494e384738ab60b283a6c93707cf41314b3a458f067bfb594d82014989ec8ad5ada6157f3cb2693f1e05181eac5ec5dd7cde7225f810dd8d883a926d79cf8527ee9dab14dc314e907595a2119a5ac0f558cb0a41887f98dca1fd2d19779fcab7938c76a612bf516f1860cb759168ee17c75ba86eebfc9962ee17a956ef978c6542788f986966aaa604a2b0d3be647e914f550092f0ce6aa25e849adf23f8b06ece5d7239e251d96f5afecd258d0574e9db1558386a0dbd52db2d6ada40e177d079febede2b2611d2cb8cbea7985774e8652a4ea63e31379fbb7c3d85a9991adf35f34b1ec802202ca9113dcc1fa4136660a166a57ab60fefa9ed91c72ba5ab0dfaba22c18cd2744192fcb28c1b2060035f6501f0b943caa35c556f0f86b6f91d62d5f48aaf6d4230a29fe8d22dcf81f1d7e39807b601590b67924c11d6de7a7a36cd33cbe69ba2aff8163f1acdd8a10d960e06010f5e6e7928982c3928ef2b8bdcf00b5dea2fbf32195a3738c9e0c91e68eedeb34395f0306d7c2cffe5a876f0072af9a58951014b1f8d9a499706649a7576f971dbc26cc111e9307a0bc70ed3f2d70827efd238b52851dd39457cc7bc8f90c6a4d56f9804f2da0d6c6e2389b51360f4a9f6a16fb954a2a31b7cbe0b5d79af339f392c268a94e6bd1f13d7ab866599499de04efeded73170f611ea40d3efe3243f6f938675cded48b7824637a5565c6468754d63361b7fc83d488abf63b1c90359e1d47ce05b52435c484cd42d44ee95272dd9b300a398cef6c1a5448abd46ef45799bb963b411ec229cb58abe59d62128c794a65399d4663fc710838e69f2392722b32240774921c5482829eb5bce553fac7010f11ff2cf3309692076c6218011d8e6890db41aa4c02553b676c57d6d1b65acd40e35859bd85eab85f2cf794ff1b567df8a85b1fb13191c2d5238218bd6a22a52e257b3fbcad5ccbc679ffd1991a687aed9b2566a55d90f335a490637d96427dfb065bd4f9fd45d3b5111bbcedfa590035ed0fdf893b208244dd509479c05e3d22b2d45ba7b839169fadc652c396b4af15d62711193eec2580f30611d07904803e0749a13d5bdf63013bbae95cf7632a03f648659091fc05a39626fa82e7ff2a7476c1af9dbb4bc343a579294d35965796f7ce01d7890db857a7e0965b74899c76374f2dd0cc6b01cea5fc07c9cded7834f402b9b92e5721d7e488bb4c5fa96f4b53d29d53ce6a82b89505dbf0f8276146c478f0155ea0287834cbaac2f7e1b162bac9dedd290a6448d5a5d84241cbeb83ba1829771b7d825bbbf0245358c5817d7a1c5ccc9ecba29c3613e229b3410a37b7a83ed23ba00579958aa5a04c166b9c734ea8f3335a32e9c4928b97b6e54574d2d91bd35474a4e427b0a615831a6db22ec6a478f9917a299c4cf7a235e71a5e3155dc0c54392655cd2e58c1b0ba4ff1aae40ab560fb57ee89ff706f276284df6bb810681f946ac4373af578b70e5ecf4e108a1d6c72a1dd3e8950ee15ba57d3c2e2a390db35f4399d3a12f7522584350a1edd72f62d0ae745da249d54bcf0f9450bcaa5f52fe567247c328f1e9420d9fce0869e41ca5d5cf474ce4959a7677500780861e89bbd57077e684ede93677b7041586c2fb2e8c45ca3bff26ca387ecb3c98bf8a881a659e637c864cb8c211520f07c15e823b678eaef92a68e9af988e20c28b15f116a58592b77ecf0c4402c26d4ab7f68ddb771dbbd8bc33ea4a736ee2d9aab487eb1af31ab6431e2843638dd3c86a1be0cc3d1dbccbfb17bf103161d4e87e60acc769dbbb50a51d4db154fc971028959100fa0459eb7633a3ba7db170199585664310c7eed7d16a1a56d9b2b40b20dbdf3498bdff428ffd1b7444bcf2d99b54deeb78f3dd303113c52dd0aa81e8a6bd9f1c5a20ff00da9bbf13b5a6c1b281c5f1badfdfd67aaad91d4faf832f6492675682111221dc929f248a817126281288a477de383eef7b638841bee36a015b3adabdf52d020cbadd5362a6f498228e169e80a80b4f2ff348bf929bf3be1aa4863aa405c45edf1865233c11527eab9aa7d0a0b9b01a62bf24ffde64d6b8f6ff71bd1d9ff6e252c6004620b14a526f9fa2f8145ec3d867073b4e00761f0bcfab3b5bcc7874519fdb5fdde07e040f6a3a22f40687fd200201886fd7e8d227a1b16b1bd68bca19ddebd92df02ccf808433e296e99a52afb4ef389a5c82b19b004dca2894e059f0a7533fbf72a30744714167252d7714c7619bc0a4f79730273a69356b81853dc3575390856a11e60842aee95004792d058b1be63fbf2d64e66d08907b70a37fd7dc6d20016a466b0536e68cae02c685c179670384107f6379c7fedab3c24bc6cd4dd0d609067eec0ea40f0e9a1e56c9ce3281dc3596b247e16f51f0e64df506ae98043e17cf27ecb06979f78591174c8887d102a730dce05be78fb64ca66f00fcfef8599b762e6c563e14882d938d17dc6740af37bdd7b560d8319bd0855a28fed88ed273cdccb3b8cb593456c06adcf0d8eb9422ef338e0cd1c8bc5d5b9536f64b6aea3708650994b2b6a382c05b1d8297acf71e30b39919387ac0bd0d07552b6be8da820dca648a46b4d4b54388fa1033c67b8222ff76cfaf8c2134634b34dfc3785ad1d5596b18a69b16fcd45c418d6874a041da66a8f630d740e94b09d2187cbfbea0bd719e7d7bf26fd48b389157a8478877da1dfa762512c5c047bfc6c850768277c9cd713d151bddc62bb628f6ff619603dab1ffd5b462ae2bf43e55c9a9ce41efeb3d74f9623443abc62ccb815871228ec752575043d1d07997a338281b26f58c29a202096d6f342e2bdeadf07762809b595a986db278ef4522c0902396459312ddb270d8eeefd01b7990a958f1204d640fc08acd5d5194d85b85c9bb093e0ed03441b139a678985d160baf99b56f6ac89cde1d00932474c021b73e704998f218cf7a0608b9da73d51cd0dfbd32a637daf92dd634368210a02eb8da99eb93a45c01270ee10ad18128bc606c36e14be832b9a7800dca12b7ec879f761e7942a2916da9e72c2a126e29849db88708b4591b236e0d9ecb451b03b5e52839aae806fa1ae1616cb78d38f2385b872763111a7a0ef9f5aca64a875e4b6979804a8fe60015c0b942839db2b3a42144e1e58f0d001d4f23e102f3b0b34e4503a8ee79738dd432588d36cf80d2401d65b2901eab060b8c1cca074723f679f1acfbc14e6c871946683c7dc1130e9cec8fc3a5727a2ac42593df2aded51d117f3f415d30371d8bfc70f44754d725efa80d518d0be53fad149c98c85dc53fcc1708ae910e0ae0f608345b151b51074e3993a5b0f8cfb0f084dbde3a54abf82f45cfb74b041904a7ace5a18d6ad8d00b0aa8b28480b6938f8f33e0a9c72edcbdf257b7a1cb83f097c33b33c46d947747a4210dcb7160d34507c21fa7ebd07b31d9c8236fe23767e687f953539ffb5e8caff55c00256b29f991b111f9d9c19b3e6c3b4ba0bee2f0d37a129c48bd465cbb8df7e2f5ebd1c067bdb7e919c387fdbc773ac1a1a330ca72bbcd9ed472c83cebe09cacef76f04eabcea97da0fc90c79206e5b529139674d37dc932e5e40d4eada1e8ab5c57514738191b1d9e2bec074df2b63891e6626667381ef6136d8a9c49dd0197b380beff70e24cb4c517cd6ec928d1287783970fe2af1d0908fd8bf01d7a08801112aa643b8f76e7d4046174c8df5d29ea430bad62605dc9cd0a6f2489d89dc1d8996929c4327942f321433456d4c6b2f09251ead440c9da58422445e86d8b0c270b941fcfb5c3cf58382eb62f86156ba6be892f4e4b107bf91ac0ec4c1097fbcaa6bd3094bcbb30d6634029166648e1efa4826c500873bce27a027dfbaaa31d9688f09b975488dcaeffa9cdfb31ab7024987c3f6a4eeae1fb87ed0b9b74fe4376fbbf53397f5a98e4ef757d21131a4694f6700b300d3b600bd8efc8231a2d48c6438da56ec829707c6c4359b82722323b42586707f15b9fba51de912991d49bc89fe77fb58a1a21eac420d8e24d86ef10260d9231c870838345ea0d8c2eda61472389a39bfe7925512bf405e2ca75cace7e99c3aaa4cbf3a8e713fd6157a3029c656dcfd2f63f87a7a32781a4c81afbf10fb7f4253526c096cb4733dd632553bdd6d1feff71d992381e81f05df01c1d1b32ec8b270411d8eaa9407defc22cc563756e7ab4292a4acfa413ef311bc8e300e3aa64dc7a5e499baf344b34bf19cc61a53711fc84e81c831056bf70536244e81979875ed3874c4a4377f1721d3f77e1856bc2462d6d91cdcb031ee564986d25ad62a5db33d3ad38e04e022d176f1a6cff1f6a9de11e343acd732d345f65ce07a93461208065722dc2c9fee6af09171d0c03c024bfda7563424f9b086353753ff86a593b8329ee93b3000bb97ef975660074b861db461080130d7c1471e30375de975c2065305f0a5f7aa1"]}, @generic="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", @nested={0x2622, 0x38, 0x0, 0x1, [@typed={0x8, 0x10a, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x15c}, @nested={0x4, 0x9e}, @generic='Ch', @typed={0x14, 0x107, 0x0, 0x0, @ipv6=@loopback}, @nested={0x1a9, 0x140, 0x0, 0x1, [@typed={0x4, 0x4}, @generic="6e2d41bb59532839f29a26e8eb74e625ac907a03ced2b417ca9835b689db73583141e2a65dce177275a22dace0a0f9866a9cf9bc76aadba706e8e3c97c7b35c2498d260b92c1b51f0388ddfcc4b6d750e4066c90c307934716e668746f9f6dc0c5732b02407a593b6827404c8e47ff7b70363cf31752b35ca662fa2e0924cb8ec384318959855c065ec5da4da8d17fae5f18e613756efa0ab0089157ee8640f70753ab74f1c8d196a49ddfcd9888849bf276d1d6221aa86fdf27b9135424c66456fc1a53a2c7095e2d", @typed={0x8, 0xb0, 0x0, 0x0, @fd}, @generic="9f5346598fded17238e0d875d7f3fd653ce140a3a809b55f6189a26c6668286da2858f4457c2ea05d528a5764ebd45e757cdbfc99b7e49e5d64cc1706ae0add4cf040227ca9d09d44ac37e8820c0b0eb0da9251c534a2b4852e6d74d87913d581e2b85fb4a91244ceb67e340e74daab5ab49cd6778e5a4ed3b3986271ec8ddd2393c1329225cf040d35866395148c8f34d342701f3039cacc63e307c987c3e82027fbbff5ee5dc9c58d8d40d8b7a40ae108be46575fd57c606e092acdf741bfb123ea5604cec1ec75cb9de1c42b0f63e"]}, @typed={0x8, 0xf7, 0x0, 0x0, @fd=r5}, @nested={0x2441, 0x13, 0x0, 0x1, [@nested={0x21f7, 0x54, 0x0, 0x1, [@generic="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", @typed={0x5, 0x62, 0x0, 0x0, @str='\x00'}, @typed={0x5, 0x4e, 0x0, 0x0, @str='\x00'}, @typed={0x1002, 0x4c, 0x0, 0x0, @binary="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"}, @typed={0x14, 0x111, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0xae, 0x140, 0x0, 0x0, @binary="7801c334cfa5aa0f57869a64dea63e5a66673c3520fd6e476f898e9799b5f35478b377735856e85f00847cd5b11386ec9e1573ce0597b3427107264e46a689437efa76c7062dbdcc08d5819078f773044b40e2bdea64305120e0825161140adc5d8d13c49fb3e828f7b046cc3933bd6910818661ba9494c2ff7ff85da7a131569ae7d8756d00a21136d44dad7619c6410c0dfa5b23afaef0794e388b7aacec191446edcf3596a0f4cd07"}, @generic="1d4ae0ec9bb1e7964a7211cf02a7f50ccc28e9ba667117075ef3ddd490", @typed={0x8, 0x10b, 0x0, 0x0, @uid=r6}, @typed={0xc, 0xd6, 0x0, 0x0, @u64=0x9d}, @generic="a00a1cb34248f70eb1a827da401b77b1a0e9ea400f4ee3e06459ae99f5e3f0c1a020aff6357388c728a1a49d8b8696a81f0f08fe6a4e2ebfb8b5ade0d58c4f068517935649ce651f2a357d7f5cd70e3a084e89d13869de51a2fb73cbc6ac1e48a3522d8c9da6e07430330ca87df515f100b667f1fa8b810a5fdfa86b69f3ae485c2454b9a323bce1acbf2e6bc221a5355f0ad716cf67046dd542f950e9a8fa97799aed6a63db8145d73921d8abe1fdbaa5a01298be5b0bd411b2003776c523d7edbf16a083579a22716f82721ce91dc2083c1708658da59d25775764b96710da4f0521583fa8047954b1"]}, @generic="2069748b89c6d73d722e04bdc0eade447efcb4cb42da5e9162cc539769747ce6811646e3ed127f4fd9d0ab42f63efd2483b27aed2028de46a6dcd0c55c3802cb6a3aa17c08b8648d6017bcba05bb00b0b0632e6a6ebe11bd5f6970ae3d61ce7e9e57493dcf4b9299efd0df8dd6e2717219af8de337a0a51472a069bb3a4f3bb5e158458204501d54cc861c6ca80272eaa3143c54900fff500ff692ebdd7119fc8f02ad97379e9984e7da7cfb7398a235ae567edc611049c15839734a70c92a4bf98da5cac7f0ee45e48a224acf5c27caf4", @nested={0x174, 0xfe, 0x0, 0x1, [@typed={0x34, 0x16b, 0x0, 0x0, @binary="108f711194a8f037cb3822035914728801c1d42648dd08a09b55fcf23b6c8596d4aeeb51f17c0cb595ba9c9192a8d4a6"}, @typed={0x6f, 0x139, 0x0, 0x0, @binary="c318f7d4e35bf65c5250777fe2818af127bff9f4b62a79549fd602206f0808c5e8bf0ca62842a0901cc3bb1dc358c0802450f9aefa846c85c54459d9613914363032b6b165f36b284b6f89ba0a8b86c75a434216aa20a94e94125c03f09c311b800a6d20395f9f2a10dbd5"}, @typed={0x8, 0x74, 0x0, 0x0, @u32=0x81}, @typed={0x8, 0xb4, 0x0, 0x0, @fd=r4}, @typed={0x8, 0xb0, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="a8641e79f133a03fe54e28815bcb57072a49404c3711b0b5e53e1aa5d3489590f84bddcfbeddd4b54e2596d51039d2c118e05d43ba250ff1d89f193642665516eecb6d0dd0c4fdd27ac75b35cc344fedb4a8b776d85b8c602b09e96d5dc77518318d35877946ff44141e5b8d8f87480f", @nested={0x4, 0x48}, @generic="79aeb10c3e3c7009552d9518623d2c2fa84d1e98be967efd6bba6e4ac944400ea5a41472", @typed={0x8, 0x31, 0x0, 0x0, @u32=0x8}, @typed={0x14, 0xa1, 0x0, 0x0, @ipv6=@loopback}]}]}]}, @typed={0xf, 0xbf, 0x0, 0x0, @str='ip6gretap0\x00'}]}, @nested={0xb0c, 0x4b, 0x0, 0x1, [@nested={0xafd, 0xb5, 0x0, 0x1, [@nested={0x4, 0x1d}, @nested={0x4, 0x153}, @nested={0x4, 0x131}, @generic="ff7e501f75612cdced64f42f2bd6927b2f7616805d6041d1c2663ca9abfe92a5f6b082c8e0e91591445f23ed6abf3003d3ca3c1280bf23d038cd467c5db3f0d10b85ef3b27b630ff2ce6251746a4986c1393a53f3f5a1e9da7", @typed={0x14, 0xa1, 0x0, 0x0, @ipv6=@mcast1}, @generic="48baf0eedc3f8e2d3e313fbd7240101a794ca57e662d6201d41f94a3b2e99cdd0c5754b47183a2fe7ae5bb269cd95117aed87df67767740176748c325dbdd280335aae24b0a648e2ec4d7b98c294d44aef126206a34e8c6030ce0b320a6b6cda170a159497f8e0699e739515033ea07de8274789d12f54c5db", @nested={0x4, 0x13c}, @generic="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", @typed={0x8, 0x120, 0x0, 0x0, @u32=0xf}]}, @typed={0x8, 0x9a, 0x0, 0x0, @u32=0x10}]}]}]}]}]}]}]}]}, 0x64ac}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@migrate={0x68, 0x21, 0x400, 0x70bd2d, 0x25dfdbfb, {{@in=@empty, @in=@private=0xa010102, 0x4e20, 0x6, 0x4e24, 0x200, 0xa, 0x0, 0x0, 0x3b, r3, r6}, 0x6e6bb0, 0x1}, [@XFRMA_SET_MARK={0x8}, @etimer_thresh={0x8, 0xc, 0x1ff}, @etimer_thresh={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4081}, 0x800) 2.309189948s ago: executing program 2 (id=3373): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r0) r2 = socket(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x60, r1, 0x1, 0x70bd30, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400}, 0x4040894) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfe, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={r6, 0x80}, 0x8) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) 2.177007603s ago: executing program 3 (id=3374): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x6, '\x00', 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.922604275s ago: executing program 3 (id=3376): openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r1, 0x952de000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r5) sendmsg$NFC_CMD_DEP_LINK_UP(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6gre0\x00', r4, 0x2f, 0x2, 0x2, 0x3, 0x6a, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x700, 0x8, 0x7ff}}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0xf2f, 0x70fd2e, 0x25dddbbd, {0x0, 0x0, 0x0, r7, {0x8, 0xa}, {0xf}, {0x7, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5084}, 0x4880) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r12, 0x300, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020004}, 0x40) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000000600)={&(0x7f0000000440), 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="000327bd7000fedbdf251700000008000300", @ANYRES32=r14, @ANYBLOB="0c000658a1c7a228ebe391d500c22300030000000000000aecf4dcb85b791b6481e1967b21e9ae820867b09291ef876321bec1df1902a0d4544c"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x54) 1.751328016s ago: executing program 2 (id=3377): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008b00000000000000013e110018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000086000000bf0900000000000055090100000000009500000000000000ad0a060000000000b500ffff0000f3ff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x24, '\x00', 0x0, 0x6000000}, 0x94) 1.691442294s ago: executing program 0 (id=3378): recvmmsg(0xffffffffffffffff, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/66, 0x42}, {&(0x7f0000000080)}, {&(0x7f00000000c0)=""/239, 0xef}, {&(0x7f00000001c0)=""/148, 0x94}, {&(0x7f0000000280)=""/194, 0xc2}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000000400)=""/71, 0x47}], 0x7, &(0x7f0000000500)=""/72, 0x48}, 0xc}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000580)=""/203, 0xcb}, {&(0x7f0000000680)=""/167, 0xa7}, {&(0x7f0000000740)=""/145, 0x91}], 0x3, &(0x7f0000000840)=""/48, 0x30}, 0x4}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000002d40)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/227, 0xe3}, {&(0x7f0000001a00)=""/57, 0x39}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/190, 0xbe}, {&(0x7f0000002b00)=""/27, 0x1b}, {&(0x7f0000002b40)=""/107, 0x6b}, {&(0x7f0000002bc0)=""/116, 0x74}, {&(0x7f0000002c40)=""/252, 0xfc}], 0x9}, 0xc057}, {{&(0x7f0000002e00)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/194, 0xc2}], 0x2, &(0x7f0000003fc0)=""/4096, 0x1000}, 0x400}], 0x4, 0x20, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000050c0)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000005100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000052c0)={&(0x7f0000005140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005280)={&(0x7f0000005180)={0xd0, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_SEC_DEVKEY={0xa8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x37124000000}]}, @NL802154_DEVKEY_ATTR_ID={0x78, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x10) pipe(&(0x7f0000005300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000005340)={0x3, 0x95f, 0x8, 0x83, 0x9, 0x0, 0x13, "c77ab453bcad7c45d6055f67c89c3f55b0e315a8", "afe42215980875c4644461db2577b5b5041ccb69"}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000053c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000005400)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000054c0)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005480)={&(0x7f0000005440)={0x24, r5, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000005500)) r7 = accept4(r4, 0x0, &(0x7f0000005540), 0x800) getsockname$packet(r7, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000055c0)=0x14) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000005600)={'wpan4\x00'}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000005640), &(0x7f0000005680)=0x4) accept4(r4, &(0x7f00000056c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000005740)=0x80, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000005840)={&(0x7f0000005780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005800)={&(0x7f00000057c0)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x8804}, 0x0) r9 = accept(r3, &(0x7f0000005880)=@l2, &(0x7f0000005900)=0x80) ioctl$SIOCGETVIFCNT(r9, 0x89e0, &(0x7f0000005940)={0x1}) sendmsg$nl_route_sched(r8, &(0x7f0000005a40)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005a00)={&(0x7f00000059c0)=@newtfilter={0x2c, 0x2c, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x6, 0xf}, {0xfff2}, {0xf, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44080}, 0x800) sendmsg$nl_generic(r9, &(0x7f0000005bc0)={&(0x7f0000005a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005b80)={&(0x7f0000005ac0)={0x9c, 0x11, 0x300, 0x70bd29, 0x25dfdbfb, {0xc}, [@typed={0x8, 0xaf, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x34}}, @generic, @typed={0x10, 0x11f, 0x0, 0x0, @str='.\xc3-(\xe9]{^!}\\\x00'}, @generic="49330cade6a37e5ac31979cc94229e56d25dc2c6aab5713b29a9c984b9a7afcc40f55d5a0f4be23799104966aaee9e8e4952d8d4017433f19c19a5471c10a339f1054815437f75e86b9d48043305b83aac8cf2b1cf2ea4bc068aa7341640ae238cd9434c34d51b3d7df053151310"]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000801}, 0x90) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000005c40), r1) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000005d40)={&(0x7f0000005c00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005d00)={&(0x7f0000005c80)={0x58, r10, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:scsi_generic_device_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x20008004) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000005dc0), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000005e00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000005e40)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r11, &(0x7f0000005f40)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0xa1559800}, 0xc, &(0x7f0000005f00)={&(0x7f0000005e80)={0x44, r12, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005fc0), r7) sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000006180)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000006140)={&(0x7f0000006000)={0x124, r15, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x7a}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xe4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x14, 0x12, 0x0, 0x1, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x98, 0x12, 0x0, 0x1, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7f}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_IE={0x51, 0x2a, [@mic={0x8c, 0x10, {0xdea, "443b10258197", @short="a6ef9c3ba34b46f5"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x6e, 0x5}}, @cf={0x4, 0x6, {0x66, 0x4, 0x5a, 0xff73}}, @dsss={0x3, 0x1, 0xa1}, @gcr_ga={0xbd, 0x6, @broadcast}, @ssid={0x0, 0x2, @random="3e11"}, @mic={0x8c, 0x10, {0x8e5, "a6311c65754f", @short="71109b4cb02598d5"}}, @chsw_timing={0x68, 0x4, {0x1, 0x2}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x1c, 0x12, 0x0, 0x1, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x20, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x10, 0x12, 0x0, 0x1, [@NL80211_ATTR_MAC={0xa}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000808}, 0xc000) 1.613631937s ago: executing program 3 (id=3379): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="180000001600010a00000000000000000a0000000c00008008"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000540)=0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYRESHEX=r2], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r6, 0x84, 0x72, 0xfffffffffffffffe, &(0x7f0000000040)=0x18) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)={0x4, {{0x2, 0x0, @multicast2}}}, 0x90) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff90850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8}, 0xc) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x3, @private2, 0x8}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000280)='1', 0x1}], 0x1}}], 0x2, 0x20000012) shutdown(r9, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x40, 0x4000, 0x8, 0x9, 0xdcd, 0xc3}, &(0x7f0000000100)=0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x9e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000160007012cbd7000fddbdf251d7c00000c00018008000100", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000b7080000020000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400003800000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r12, 0x0, 0xe, 0x0, &(0x7f0000000640)="9922530100d1be95646155eefbf4", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.505904158s ago: executing program 1 (id=3380): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x509, @loopback, 0x4, 0x1}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000086082b9827c186dd60cb3e0200303a00fc020000000000000000000000000000ff02000000000000000000000000000104009078000000006097476700001100fe880000000000000000000000000001fe8000000000000000000000000000aa"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500"], 0xd0}}, 0x571f68543cec8180) socket$l2tp6(0xa, 0x2, 0x73) (async) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x509, @loopback, 0x4, 0x1}, 0x20) (async) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000086082b9827c186dd60cb3e0200303a00fc020000000000000000000000000000ff02000000000000000000000000000104009078000000006097476700001100fe880000000000000000000000000001fe8000000000000000000000000000aa"], 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500"], 0xd0}}, 0x571f68543cec8180) (async) 1.433967881s ago: executing program 2 (id=3382): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000000, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x4000) (async) setsockopt$sock_int(r3, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) (async) bind$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0xfffe, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) listen(0xffffffffffffffff, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}}, 0x44080) (async) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000780)=""/147, 0x93}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x4}, 0x1}], 0x1, 0x20, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 1.270507622s ago: executing program 1 (id=3383): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) (async, rerun: 64) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) (async) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000010000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.257045662s ago: executing program 2 (id=3384): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000003a40)={0x0, 0xa4, "321d0f9f3665d066f01a80f21eb3bcd47683a57897333925239080d391e14b466c3d6f7750f2d74b72baf2512077728e63703cd440d8921aacf25f5934a613fc84f71dedfb189cc93aa4ff01e7e8934905775fc0f0312b3fd70290882c4c6f172fa3ea2c6a8633982a29f07700961803eb13a0e84dfcd0edc256d96d26f746a177266bd53b3290dca2e455adda8b6a7c9d86a39111f82c0f0d6cb43691101f86b6deeb6f"}, &(0x7f0000003b00)=0xac) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000003b40)={r7, 0x28, "f745acd47e808adc41d4b6b57ba905e2b01320c88b4be1f94f550537168ff8f83b12a7392597a5b1"}, &(0x7f0000003b80)=0x30) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r9, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r8, @ANYBLOB="0500330002000000080032000700000008003100fc030000080034"], 0x44}}, 0x80) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000003a00)={0x3c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xdecb}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x33}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r11, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DONE(r11, 0x29, 0xc9, 0x0, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r10) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1e, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r13}, {}, {0x46, 0x0, 0x0, 0x76}}, @map_fd={0x18, 0x4, 0x1, 0x0, r14}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r15, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500070000001400040073"], 0x58}}, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r16) 1.237332251s ago: executing program 0 (id=3385): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)={0x30, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x8, 0x7c}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x10, 0x0, 0x0, @u64=0xfffffffffffffff3}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@empty}]}]}, 0x30}}, 0x4008030) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000000000000000340000"], 0x40}, 0x20008024) 1.194718843s ago: executing program 4 (id=3386): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c8d6}, 0x1010) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x40d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x99ffef750d96a51f, 0x40300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x10}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x7}]}}}]}, 0x44}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 1.138902163s ago: executing program 1 (id=3387): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r0 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x10d, 0x0, &(0x7f00000006c0)="259a001472a76d2688a2000000800000000063954df011da52d1cd77837daa9a89d6696682f6a667f7f819a0770c2500be415f653c888aab525865fa9c876775da5c418986a9effed58d7e287c495e908b43facc3bb01559842065c62ee9b281d0ec99c3730974cc8df7383b2db83d7a525a7092c1912d71bc450ae13993783d3fb27688759039e94db365308a48802a489314de25e5bf9b7ef22bfcc0b8b3ae9bb6c1b99a3b915b3b34c69a8b77250588bf1ca488faa2e48bf5b6634a0038f6c5e0dbf22b68614dd2b8511a789bb76de98e5c07ae1c18f334fbcb7dc4d98850d225e5d2753840a8d2ec94d558da682be8cb741b44c529ed041d3117cb04ddf0211a959e5cdf15090603aed0d4", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x81e091}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="180b2bbd7000fedbdf251400000008002900490900000500190000000000f76b47e13dc32b3af3e06da53b8c33cbd85b2ef189ce580d916104d94d4df728400bf861ee47ab4b34d90056f56f0f"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async, rerun: 64) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0000380004802c2c"], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (rerun: 64) 1.055617213s ago: executing program 0 (id=3388): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x90ffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 917.893424ms ago: executing program 0 (id=3389): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000001aa0b00009004"], 0x48) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='bbr', 0x3) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000003c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x5}, 0xc, 0x3, 0xa000, 0x3, 0x14, 'syz0\x00', "3f5a4b4b07bb6dc6429ecc6c43cd068b28d2d2e51689a1d99c2d42a59fdc62b8", "fcd24d468918b853e8e0df8098bd105f3f60dfbdad018ac95bd5c7f2c26cb5d7", [{0x2, 0x9, {0x3, 0x4}}, {0x5, 0x28, {0x2, 0x7}}, {0x78, 0x200, {0x1}}, {0x3ff, 0xb76, {0x3, 0x10}}, {0x2000, 0xa, {0x3}}, {0x5, 0x8e7, {0x1, 0x2}}, {0x4, 0x8000, {0x0, 0x5}}, {0xfffa, 0x0, {0x3, 0x80000001}}, {0x3, 0x7, {0x0, 0x722c}}, {0x4, 0x3ff, {0x0, 0x40}}, {0x800, 0x5, {0x2, 0x523490a8}}, {0x7, 0xbd9, {0x3, 0x5}}, {0x7, 0x5, {0x2}}, {0x4, 0x4, {0x1, 0x8b8}}, {0xf74, 0x800, {0x0, 0x1}}, {0x5, 0x1, {0x3, 0x7}}, {0x1, 0xfff, {0x0, 0x1}}, {0x6, 0x2, {0x1}}, {0x7, 0x2, {0x0, 0x1}}, {0x9, 0xe5, {0x0, 0x5}}, {0x4, 0x6b, {0x3}}, {0x2, 0x800, {0x1, 0x45f}}, {0xfff9, 0x4, {0x0, 0xa}}, {0x1, 0x56ee, {0x3, 0xfffff5a5}}, {0x2, 0xfffb, {0x3, 0x3}}, {0x33, 0x6, {0x1, 0xf8f4}}, {0xfff2, 0x1, {0x0, 0xd6b}}, {0x40, 0x7e7e, {0x1, 0xa0}}, {0x9, 0xb, {0x1, 0x800}}, {0x8, 0x7, {0x2}}, {0xfffd, 0x3, {0x3, 0x2}}, {0x2, 0x5, {0x3, 0x6a}}, {0x4, 0x0, {0x3, 0x3}}, {0x8000, 0x2, {0x3, 0x8001}}, {0x101, 0x6, {0x1, 0x10000}}, {0x5, 0x8000, {0x2, 0x36}}, {0x3ff, 0x81, {0x1}}, {0x4, 0x7, {0x1, 0x89}}, {0x1, 0xfff5, {0x0, 0x9}}, {0x1, 0x7, {0x0, 0xa3}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20001}, 0x44008) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) 907.024338ms ago: executing program 0 (id=3390): unshare(0x6a060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x200) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) unshare(0x400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r3, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r3, r2, 0x0, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x98, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000000}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x98}, 0x1, 0x0, 0x0, 0x14}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x8, 0x5, 0x9, 0x8b, 0xc]}, &(0x7f0000000100)=0x54) 613.050528ms ago: executing program 4 (id=3391): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x4a, 0x0, &(0x7f0000000200)=0x28) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000680)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="00000000000000002e800000000000001800000008000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 462.112458ms ago: executing program 4 (id=3392): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008b00000000000000013e110018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000086000000bf0900000000000055090100000000009500000000000000ad0a060000000000b500ffff0000f3ff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x24, '\x00', 0x0, 0x7000000}, 0x94) 459.261025ms ago: executing program 3 (id=3393): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000980)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0xe8, 0x1c8, 0x1c8, 0x290, 0x378, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x200, 0x0, @loopback, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xde}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfe}}}, {{@ip={@multicast2, @local, 0xff, 0xffffffff, 'pimreg\x00', 'ip6erspan0\x00', {}, {0xff}, 0x32, 0x2, 0x48}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2a}}}, {{@ip={@broadcast, @broadcast, 0x3c1f00084daf9c0a, 0xffffffff, 'pim6reg0\x00', 'dvmrp1\x00', {0xff}, {0x101}, 0x62, 0x3, 0x1f}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "03722f53329555cbf1c4cb9313a5bc155d175e3901afd36d28847eece9d9"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002f00090027bd70000200000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 452.801755ms ago: executing program 2 (id=3394): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r4, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r2], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="147ffffffe"], 0x48}}, 0x4800) 362.693465ms ago: executing program 1 (id=3395): r0 = socket$kcm(0x21, 0x2, 0xa) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 258.124998ms ago: executing program 4 (id=3396): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x800000) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, 0x0, &(0x7f0000000000)) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x4000, 0x800, 0x0, 0x3}, 0x20) 158.632218ms ago: executing program 3 (id=3397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d1000000fbdbdf3a3300000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0x3c}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x2, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80008000}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000001020103000000000000000002000009240001800c000290050001002f000a0014000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x4001000}, 0x804) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x30, 0x3, 0x51, 0xfffff014}, {0x6, 0x4, 0x5, 0x5}]}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 158.194244ms ago: executing program 1 (id=3398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket$inet(0x2, 0x3, 0x101) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000400)='\b', 0xa}, {0x0}, {&(0x7f0000000440)="20dd602cb2f70c7d9ad341adad9a391625c1d3b59dbf6452f7c91a5abeedb2ce26db1ac18b1ca468239622fc964ca387dc580da6e3502d9bf4eadb55c85bfc1241479b48aece2cd85f5e2320422ed58ec866"}], 0x2}, 0x2402c018) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r3, 0x8995, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth1_to_bond\x00'}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_flash={0x33, 0xffff, './file0\x00'}}) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r6], 0x3c}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/4, 0x4}, {0x0}], 0x2, &(0x7f0000001180)=""/4096, 0x1000}, 0xfffff453}], 0x1, 0x10120, 0x0) setsockopt$inet_int(r7, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r7, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x42, &(0x7f0000000200)=0x7, 0x4) getsockopt$inet6_buf(r8, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f0000000000)=0x5c) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x13, r3, 0x54c3d000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@migrate={0x138, 0x21, 0x1, 0x70bd2d, 0x0, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0xe8, 0x11, [{@in=@empty, @in=@broadcast, @in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@empty, @in6=@remote, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x1a}}, {@in=@empty, @in=@private, @in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}]}, 0x138}}, 0x0) 157.549022ms ago: executing program 4 (id=3399): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008b00000000000000013e110018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000086000000bf0900000000000055090100000000009500000000000000ad0a060000000000b500fffffffffff31801000020646c2500000000002020207b1af8ff00000004bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x24}, 0x94) 124.340423ms ago: executing program 2 (id=3400): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0xffffffffffffff71, &(0x7f00000005c0)=[{&(0x7f0000000240)="89ed69b562bde42c5b91e565d5b510e80aa75ecb4069f6a0322374a22760ebdc403ac631edde2c780782112d98d0480da52a23fb420e9ff37cc16f7cf78575b9335c4e4aebdefa44e679f58208f683c3bb6cbe28087492d10601ec0f2f1c028ffc570c605064889a67c077d210a200301b8ff26eff409b4929edb04d65108d7ebd686ce1eccd57dc3e15309b76e3e5bd752ee4e54360d728da9aaa41d502e756"}, {&(0x7f0000000300)="4f6d2e69804c35ab7751691ce91c12a4e1d2e8d47a48bdf757c4bbf231499b1530e5b1a21db5d12b583357ad533e08e8d84a407261a94d295dbacb02f3694975ecdb247ffb90ab8f6e5e4854c4e2e859053f458f9f738bd9d78d7004857e286313cf9df0c6ab8df34a6df758da6a8715161fd92ccbd16cae7717f1e258f0c128c9ac376571a460df67c51be7e6c0bddd5ee7d6c256e3152b509e614074bd760f844f01"}, {&(0x7f0000000500)="dd5536b58893f5166715b75c9ba510384a13ade1d591daa4ee367c896287578c497879a6bbb11fef2d52f30c85e88d63773706aa79562f7a2ee4f7c5bd9fd501b957e263b25bba1b3ac3ff31f220d6f92a5183e7fa04def0c4925d2f98e08d6d625eea2d4947d4d0178535bcea4fe6336cb4d310d15f832085f024a9f280e3346328dfbd"}]}, 0x20048812) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) unshare(0x600) socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) r3 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r0, 0x0, 0x6, 0x6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000f40)=ANY=[], 0x10448) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r7, @ANYBLOB="08008db000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="010000000400"/28], 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) close(r5) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x7fff, 0x8001, 0x10201, 0x7, 0x47, 0x9, 0x0, 0x3}, &(0x7f0000000140)=0x20) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r6, 0x0) getsockopt$inet_mreqn(r3, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c) 0s ago: executing program 4 (id=3401): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r3, &(0x7f0000000280), &(0x7f0000000340)=""/124}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00'}) (async) sendfile(r0, r4, 0x0, 0xffffffff000) getsockopt$llc_int(r0, 0x10c, 0x7, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): red disabled state [ 352.072045][T15727] bond2: (slave veth3): Releasing active interface [ 352.094907][T15727] bond4: (slave gre1): Releasing backup interface [ 352.110510][T15727] gre1: left promiscuous mode [ 352.129922][T15727] bond5: (slave bridge1): Releasing active interface [ 352.218680][T15738] IPVS: Unknown mcast interface: vcan0 [ 352.273202][T15739] ±ÿ speed is unknown, defaulting to 1000 [ 352.297531][T15739] lo speed is unknown, defaulting to 1000 [ 352.539671][T15749] bond8: entered promiscuous mode [ 352.561725][T15749] 8021q: adding VLAN 0 to HW filter on device bond8 [ 352.920209][T15781] netdevsim netdevsim3: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 352.971975][T15781] netlink: 'syz.3.2599': attribute type 1 has an invalid length. [ 353.100320][T15781] 8021q: adding VLAN 0 to HW filter on device bond8 [ 353.141188][T15788] tap0: tun_chr_ioctl cmd 1074025692 [ 353.160855][T15782] tipc: New replicast peer: 172.20.20.170 [ 353.170387][T15782] tipc: Enabled bearer , priority 10 [ 353.215312][T15779] tipc: New replicast peer: 0.0.0.0 [ 353.450322][T15798] netlink: 'syz.1.2604': attribute type 5 has an invalid length. [ 353.516287][T15799] netlink: 'syz.1.2604': attribute type 2 has an invalid length. [ 355.007644][ T24] tipc: Node number set to 1560933053 [ 355.757452][T15849] netlink: 'syz.3.2618': attribute type 1 has an invalid length. [ 355.859445][T15849] 8021q: adding VLAN 0 to HW filter on device bond9 [ 355.925746][T15849] __nla_validate_parse: 4 callbacks suppressed [ 355.925762][T15849] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2618'. [ 355.948078][T15853] netlink: 83 bytes leftover after parsing attributes in process `syz.3.2618'. [ 356.047810][T15849] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2618'. [ 356.149212][T15863] tipc: Failed to remove unknown binding: 66,1,1/2092968831:3808237166/3808237168 [ 356.279612][T15866] ±ÿ speed is unknown, defaulting to 1000 [ 356.280508][T15870] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 356.298868][T15868] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2623'. [ 356.316171][T15866] lo speed is unknown, defaulting to 1000 [ 356.325355][T15873] FAULT_INJECTION: forcing a failure. [ 356.325355][T15873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.358562][T15873] CPU: 1 UID: 0 PID: 15873 Comm: syz.0.2625 Not tainted syzkaller #0 PREEMPT(full) [ 356.358588][T15873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 356.358613][T15873] Call Trace: [ 356.358621][T15873] [ 356.358629][T15873] dump_stack_lvl+0xe8/0x150 [ 356.358663][T15873] should_fail_ex+0x40c/0x560 [ 356.358693][T15873] _copy_from_iter+0x1d3/0x1660 [ 356.358719][T15873] ? kmem_cache_alloc_node_noprof+0x111/0x610 [ 356.358746][T15873] ? rcu_is_watching+0x15/0xb0 [ 356.358767][T15873] ? trace_kmem_cache_alloc+0x29/0xe0 [ 356.358793][T15873] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 356.358818][T15873] ? __pfx__copy_from_iter+0x10/0x10 [ 356.358845][T15873] ? __alloc_skb+0x276/0x7a0 [ 356.358863][T15873] ? __alloc_skb+0x276/0x7a0 [ 356.358888][T15873] ? netlink_sendmsg+0x650/0xb40 [ 356.358912][T15873] ? skb_put+0x112/0x210 [ 356.358935][T15873] netlink_sendmsg+0x6c0/0xb40 [ 356.358969][T15873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.358997][T15873] ? aa_sock_msg_perm+0xf1/0x1b0 [ 356.359024][T15873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.359048][T15873] sock_sendmsg_nosec+0x13a/0x180 [ 356.359078][T15873] ____sys_sendmsg+0x54e/0x850 [ 356.359107][T15873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.359140][T15873] ? import_iovec+0x73/0xa0 [ 356.359173][T15873] ___sys_sendmsg+0x2a5/0x360 [ 356.359195][T15873] ? __lock_acquire+0x683/0x2cf0 [ 356.359227][T15873] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.359284][T15873] ? __fget_files+0x2a/0x420 [ 356.359310][T15873] ? __fget_files+0x3a2/0x420 [ 356.359347][T15873] __x64_sys_sendmsg+0x1b1/0x290 [ 356.359373][T15873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.359420][T15873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.359442][T15873] do_syscall_64+0x174/0x580 [ 356.359466][T15873] ? trace_irq_disable+0x3b/0x140 [ 356.359492][T15873] ? clear_bhb_loop+0x40/0x90 [ 356.359516][T15873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.359537][T15873] RIP: 0033:0x7f7cb539de99 [ 356.359554][T15873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.359572][T15873] RSP: 002b:00007f7cb6354028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.359593][T15873] RAX: ffffffffffffffda RBX: 00007f7cb5625fa0 RCX: 00007f7cb539de99 [ 356.359608][T15873] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 356.359620][T15873] RBP: 00007f7cb6354090 R08: 0000000000000000 R09: 0000000000000000 [ 356.359632][T15873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.359643][T15873] R13: 00007f7cb5626038 R14: 00007f7cb5625fa0 R15: 00007ffd67e63928 [ 356.359675][T15873] [ 356.658311][T15878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.116005][T15902] netlink: 'syz.2.2632': attribute type 1 has an invalid length. [ 357.152670][T15902] netlink: 'syz.2.2632': attribute type 1 has an invalid length. [ 357.258142][T15909] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 357.274963][T15909] syzkaller0: linktype set to 0 [ 357.290435][T15909] xt_hashlimit: overflow, rate too high: 0 [ 357.666736][T15922] FAULT_INJECTION: forcing a failure. [ 357.666736][T15922] name failslab, interval 1, probability 0, space 0, times 0 [ 357.681395][T15922] CPU: 1 UID: 0 PID: 15922 Comm: syz.3.2638 Not tainted syzkaller #0 PREEMPT(full) [ 357.681418][T15922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 357.681429][T15922] Call Trace: [ 357.681436][T15922] [ 357.681444][T15922] dump_stack_lvl+0xe8/0x150 [ 357.681475][T15922] should_fail_ex+0x40c/0x560 [ 357.681502][T15922] should_failslab+0xa8/0x100 [ 357.681532][T15922] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 357.681555][T15922] ? skb_clone+0x212/0x3a0 [ 357.681575][T15922] ? skb_clone+0x212/0x3a0 [ 357.681603][T15922] skb_clone+0x212/0x3a0 [ 357.681623][T15922] ? nfnetlink_rcv+0x4b0/0x28c0 [ 357.681647][T15922] nfnetlink_rcv+0x4de/0x28c0 [ 357.681669][T15922] ? kernel_text_address+0xa5/0xe0 [ 357.681688][T15922] ? __kernel_text_address+0xd/0x30 [ 357.681706][T15922] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 357.681730][T15922] ? arch_stack_walk+0xfb/0x150 [ 357.681760][T15922] ? stack_trace_save+0xa9/0x100 [ 357.681786][T15922] ? __lock_acquire+0x683/0x2cf0 [ 357.681821][T15922] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 357.681858][T15922] ? __lock_acquire+0x683/0x2cf0 [ 357.681895][T15922] ? __netlink_lookup+0xc6/0x8b0 [ 357.681927][T15922] ? netlink_deliver_tap+0x2e/0x1b0 [ 357.681950][T15922] ? netlink_deliver_tap+0x2e/0x1b0 [ 357.681978][T15922] ? netlink_deliver_tap+0x2e/0x1b0 [ 357.682000][T15922] ? netlink_deliver_tap+0x2e/0x1b0 [ 357.682027][T15922] netlink_unicast+0x7bb/0x940 [ 357.682056][T15922] netlink_sendmsg+0x813/0xb40 [ 357.682088][T15922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.682115][T15922] ? aa_sock_msg_perm+0xf1/0x1b0 [ 357.682141][T15922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.682162][T15922] sock_sendmsg_nosec+0x13a/0x180 [ 357.682191][T15922] ____sys_sendmsg+0x54e/0x850 [ 357.682217][T15922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.682248][T15922] ? import_iovec+0x73/0xa0 [ 357.682280][T15922] ___sys_sendmsg+0x2a5/0x360 [ 357.682301][T15922] ? __lock_acquire+0x683/0x2cf0 [ 357.682331][T15922] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.682381][T15922] ? __fget_files+0x2a/0x420 [ 357.682400][T15922] ? __fget_files+0x3a2/0x420 [ 357.682425][T15922] __x64_sys_sendmsg+0x1b1/0x290 [ 357.682442][T15922] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.682469][T15922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.682483][T15922] do_syscall_64+0x174/0x580 [ 357.682499][T15922] ? trace_irq_disable+0x3b/0x140 [ 357.682516][T15922] ? clear_bhb_loop+0x40/0x90 [ 357.682532][T15922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.682545][T15922] RIP: 0033:0x7fe7f059de99 [ 357.682557][T15922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.682569][T15922] RSP: 002b:00007fe7f14f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.682582][T15922] RAX: ffffffffffffffda RBX: 00007fe7f0825fa0 RCX: 00007fe7f059de99 [ 357.682592][T15922] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 357.682601][T15922] RBP: 00007fe7f14f6090 R08: 0000000000000000 R09: 0000000000000000 [ 357.682609][T15922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.682616][T15922] R13: 00007fe7f0826038 R14: 00007fe7f0825fa0 R15: 00007ffecf59fc38 [ 357.682636][T15922] [ 357.684955][T15920] tipc: Enabling of bearer rejected, already enabled [ 358.249167][T15931] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2642'. [ 358.259771][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807e964800: rx timeout, send abort [ 358.271493][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807e964800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 358.315270][T15940] tipc: Enabling of bearer rejected, failed to enable media [ 358.552270][T15954] FAULT_INJECTION: forcing a failure. [ 358.552270][T15954] name failslab, interval 1, probability 0, space 0, times 0 [ 358.567945][T15955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2647'. [ 358.588628][T15954] CPU: 1 UID: 0 PID: 15954 Comm: syz.4.2649 Not tainted syzkaller #0 PREEMPT(full) [ 358.588656][T15954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 358.588669][T15954] Call Trace: [ 358.588677][T15954] [ 358.588686][T15954] dump_stack_lvl+0xe8/0x150 [ 358.588734][T15954] should_fail_ex+0x40c/0x560 [ 358.588768][T15954] should_failslab+0xa8/0x100 [ 358.588815][T15954] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 358.588842][T15954] ? skb_clone+0x212/0x3a0 [ 358.588866][T15954] ? skb_clone+0x212/0x3a0 [ 358.588897][T15954] skb_clone+0x212/0x3a0 [ 358.588921][T15954] ? nfnetlink_rcv+0x4b0/0x28c0 [ 358.588947][T15954] nfnetlink_rcv+0x4de/0x28c0 [ 358.588974][T15954] ? __dev_queue_xmit+0x29b/0x3820 [ 358.589004][T15954] ? __local_bh_enable_ip+0xd0/0x130 [ 358.589030][T15954] ? lockdep_hardirqs_on+0x7a/0x110 [ 358.589055][T15954] ? __dev_queue_xmit+0x29b/0x3820 [ 358.589080][T15954] ? __local_bh_enable_ip+0xd0/0x130 [ 358.589103][T15954] ? __dev_queue_xmit+0x29b/0x3820 [ 358.589129][T15954] ? __dev_queue_xmit+0x1edc/0x3820 [ 358.589154][T15954] ? do_syscall_64+0x174/0x580 [ 358.589179][T15954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.589212][T15954] ? __dev_queue_xmit+0x29b/0x3820 [ 358.589240][T15954] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 358.589280][T15954] ? ref_tracker_free+0x689/0x830 [ 358.589312][T15954] ? __pfx_ref_tracker_free+0x10/0x10 [ 358.589350][T15954] ? __skb_clone+0x449/0x6c0 [ 358.589381][T15954] ? skb_clone+0x246/0x3a0 [ 358.589428][T15954] ? __netlink_deliver_tap+0x811/0x860 [ 358.589451][T15954] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.589481][T15954] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.589504][T15954] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.589534][T15954] netlink_unicast+0x7bb/0x940 [ 358.589565][T15954] netlink_sendmsg+0x813/0xb40 [ 358.589597][T15954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.589625][T15954] ? aa_sock_msg_perm+0xf1/0x1b0 [ 358.589653][T15954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.589675][T15954] sock_sendmsg_nosec+0x13a/0x180 [ 358.589707][T15954] ____sys_sendmsg+0x54e/0x850 [ 358.589744][T15954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.589776][T15954] ? import_iovec+0x73/0xa0 [ 358.589810][T15954] ___sys_sendmsg+0x2a5/0x360 [ 358.589832][T15954] ? __lock_acquire+0x683/0x2cf0 [ 358.589868][T15954] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.589925][T15954] ? __fget_files+0x2a/0x420 [ 358.589953][T15954] ? __fget_files+0x3a2/0x420 [ 358.589990][T15954] __x64_sys_sendmsg+0x1b1/0x290 [ 358.590016][T15954] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.590058][T15954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.590079][T15954] do_syscall_64+0x174/0x580 [ 358.590102][T15954] ? trace_irq_disable+0x3b/0x140 [ 358.590129][T15954] ? clear_bhb_loop+0x40/0x90 [ 358.590153][T15954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.590173][T15954] RIP: 0033:0x7f53a059de99 [ 358.590191][T15954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.590208][T15954] RSP: 002b:00007f53a1414028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.590229][T15954] RAX: ffffffffffffffda RBX: 00007f53a0825fa0 RCX: 00007f53a059de99 [ 358.590244][T15954] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 358.590257][T15954] RBP: 00007f53a1414090 R08: 0000000000000000 R09: 0000000000000000 [ 358.590268][T15954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.590280][T15954] R13: 00007f53a0826038 R14: 00007f53a0825fa0 R15: 00007ffd1e744ac8 [ 358.590311][T15954] [ 358.989239][T15958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2650'. [ 359.062466][T15958] ip6gre6: entered promiscuous mode [ 359.094199][T15958] ip6gre6: entered allmulticast mode [ 359.240630][T15973] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2656'. [ 359.259186][T15972] netlink: 'syz.3.2654': attribute type 1 has an invalid length. [ 359.394044][T15972] 8021q: adding VLAN 0 to HW filter on device bond10 [ 359.426565][T15981] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 359.467830][T15987] bond10: (slave gretap2): making interface the new active one [ 359.505909][T15987] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 359.577782][T15993] bond10 (unregistering): (slave gretap2): Releasing active interface [ 359.595614][T16004] FAULT_INJECTION: forcing a failure. [ 359.595614][T16004] name failslab, interval 1, probability 0, space 0, times 0 [ 359.613327][T16004] CPU: 0 UID: 0 PID: 16004 Comm: syz.0.2662 Not tainted syzkaller #0 PREEMPT(full) [ 359.613352][T16004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 359.613375][T16004] Call Trace: [ 359.613382][T16004] [ 359.613390][T16004] dump_stack_lvl+0xe8/0x150 [ 359.613422][T16004] should_fail_ex+0x40c/0x560 [ 359.613450][T16004] should_failslab+0xa8/0x100 [ 359.613481][T16004] __kmalloc_noprof+0xfe/0x720 [ 359.613505][T16004] ? nft_pernet+0x23/0x240 [ 359.613524][T16004] ? nf_tables_newrule+0x1524/0x28a0 [ 359.613548][T16004] ? nf_tables_newrule+0x1524/0x28a0 [ 359.613584][T16004] nf_tables_newrule+0x1524/0x28a0 [ 359.613628][T16004] ? __pfx_nf_tables_newrule+0x10/0x10 [ 359.613683][T16004] ? nfnl_pernet+0x23/0x240 [ 359.613717][T16004] ? nfnl_pernet+0x23/0x240 [ 359.613745][T16004] ? __nla_parse+0x40/0x60 [ 359.613775][T16004] nfnetlink_rcv+0x1288/0x28c0 [ 359.613828][T16004] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 359.613893][T16004] ? netlink_deliver_tap+0x2e/0x1b0 [ 359.613925][T16004] ? netlink_deliver_tap+0x2e/0x1b0 [ 359.613947][T16004] ? netlink_deliver_tap+0x2e/0x1b0 [ 359.613975][T16004] netlink_unicast+0x7bb/0x940 [ 359.614004][T16004] netlink_sendmsg+0x813/0xb40 [ 359.614036][T16004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.614066][T16004] ? aa_sock_msg_perm+0xf1/0x1b0 [ 359.614092][T16004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.614114][T16004] sock_sendmsg_nosec+0x13a/0x180 [ 359.614143][T16004] ____sys_sendmsg+0x54e/0x850 [ 359.614171][T16004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.614202][T16004] ? import_iovec+0x73/0xa0 [ 359.614234][T16004] ___sys_sendmsg+0x2a5/0x360 [ 359.614254][T16004] ? __lock_acquire+0x683/0x2cf0 [ 359.614285][T16004] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.614338][T16004] ? __fget_files+0x2a/0x420 [ 359.614364][T16004] ? __fget_files+0x3a2/0x420 [ 359.614400][T16004] __x64_sys_sendmsg+0x1b1/0x290 [ 359.614425][T16004] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.614466][T16004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.614486][T16004] do_syscall_64+0x174/0x580 [ 359.614507][T16004] ? trace_irq_disable+0x3b/0x140 [ 359.614531][T16004] ? clear_bhb_loop+0x40/0x90 [ 359.614554][T16004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.614573][T16004] RIP: 0033:0x7f7cb539de99 [ 359.614590][T16004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.614606][T16004] RSP: 002b:00007f7cb6354028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.614626][T16004] RAX: ffffffffffffffda RBX: 00007f7cb5625fa0 RCX: 00007f7cb539de99 [ 359.614640][T16004] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 359.614661][T16004] RBP: 00007f7cb6354090 R08: 0000000000000000 R09: 0000000000000000 [ 359.614673][T16004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.614684][T16004] R13: 00007f7cb5626038 R14: 00007f7cb5625fa0 R15: 00007ffd67e63928 [ 359.614714][T16004] [ 359.912724][T15993] bond10 (unregistering): Released all slaves [ 360.011503][T16011] FAULT_INJECTION: forcing a failure. [ 360.011503][T16011] name failslab, interval 1, probability 0, space 0, times 0 [ 360.024788][T16011] CPU: 0 UID: 0 PID: 16011 Comm: syz.4.2665 Not tainted syzkaller #0 PREEMPT(full) [ 360.024811][T16011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 360.024822][T16011] Call Trace: [ 360.024830][T16011] [ 360.024837][T16011] dump_stack_lvl+0xe8/0x150 [ 360.024868][T16011] should_fail_ex+0x40c/0x560 [ 360.024896][T16011] should_failslab+0xa8/0x100 [ 360.024924][T16011] __kmalloc_cache_noprof+0xa8/0x660 [ 360.024950][T16011] ? sctp_association_new+0x89/0x25d0 [ 360.024973][T16011] ? sctp_association_new+0x89/0x25d0 [ 360.025003][T16011] sctp_association_new+0x89/0x25d0 [ 360.025036][T16011] sctp_connect_new_asoc+0x2e4/0x6b0 [ 360.025062][T16011] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 360.025091][T16011] ? __local_bh_enable_ip+0xd0/0x130 [ 360.025112][T16011] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 360.025133][T16011] ? security_sctp_bind_connect+0x7e/0x2c0 [ 360.025163][T16011] sctp_sendmsg+0x159b/0x2d00 [ 360.025210][T16011] ? __pfx_sctp_sendmsg+0x10/0x10 [ 360.025238][T16011] ? aa_sk_perm+0x6d5/0x900 [ 360.025261][T16011] ? __might_fault+0xaf/0x130 [ 360.025287][T16011] ? sock_rps_record_flow+0x19/0x350 [ 360.025308][T16011] ? inet_sendmsg+0x298/0x320 [ 360.025328][T16011] ? __pfx_inet_sendmsg+0x10/0x10 [ 360.025345][T16011] sock_sendmsg_nosec+0x10e/0x180 [ 360.025374][T16011] __sys_sendto+0x408/0x5a0 [ 360.025391][T16011] ? ksys_write+0x1e6/0x270 [ 360.025412][T16011] ? __pfx___sys_sendto+0x10/0x10 [ 360.025428][T16011] ? __mutex_unlock_slowpath+0x731/0x900 [ 360.025477][T16011] ? __pfx_ksys_write+0x10/0x10 [ 360.025500][T16011] __x64_sys_sendto+0xde/0x100 [ 360.025519][T16011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.025540][T16011] do_syscall_64+0x174/0x580 [ 360.025560][T16011] ? trace_irq_disable+0x3b/0x140 [ 360.025584][T16011] ? clear_bhb_loop+0x40/0x90 [ 360.025606][T16011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.025624][T16011] RIP: 0033:0x7f53a059de99 [ 360.025641][T16011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.025656][T16011] RSP: 002b:00007f53a1414028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 360.025677][T16011] RAX: ffffffffffffffda RBX: 00007f53a0825fa0 RCX: 00007f53a059de99 [ 360.025689][T16011] RDX: 0000000000000004 RSI: 0000200000000400 RDI: 0000000000000003 [ 360.025700][T16011] RBP: 00007f53a1414090 R08: 00002000000014c0 R09: 0000000000000010 [ 360.025711][T16011] R10: 0000000020004000 R11: 0000000000000246 R12: 0000000000000001 [ 360.025721][T16011] R13: 00007f53a0826038 R14: 00007f53a0825fa0 R15: 00007ffd1e744ac8 [ 360.025753][T16011] [ 360.340961][T16013] netlink: 'syz.0.2666': attribute type 7 has an invalid length. [ 360.358802][T16013] netlink: 'syz.0.2666': attribute type 3 has an invalid length. [ 360.366556][T16013] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2666'. [ 360.752035][T16043] smc: removing ib device syz1 [ 360.822642][T16051] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 360.838015][T16043] smbdirect: ib_dev[syz1] removed [ 360.843640][T16051] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.345955][T16066] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 361.353228][T16068] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 361.361732][T16068] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 361.414088][T16071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'. [ 361.490413][T16075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2681'. [ 361.591183][T16066] bond9: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 361.621577][T16066] bond9 (unregistering): Released all slaves [ 362.710113][T16093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2685'. [ 362.794733][T16099] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2689'. [ 362.849908][T16071] batman_adv: batadv0: Interface deactivated: gretap3 [ 363.024502][T13152] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.062323][T13152] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.106810][T13152] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.142283][T13152] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.176315][T13152] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.212049][T13152] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.246316][T13152] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.288811][T13152] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.497513][T16133] FAULT_INJECTION: forcing a failure. [ 363.497513][T16133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.514453][T16131] netlink: 'syz.0.2697': attribute type 1 has an invalid length. [ 363.528342][T16133] CPU: 1 UID: 0 PID: 16133 Comm: syz.2.2698 Not tainted syzkaller #0 PREEMPT(full) [ 363.528364][T16133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 363.528375][T16133] Call Trace: [ 363.528383][T16133] [ 363.528390][T16133] dump_stack_lvl+0xe8/0x150 [ 363.528429][T16133] should_fail_ex+0x40c/0x560 [ 363.528458][T16133] _copy_from_user+0x2d/0xb0 [ 363.528478][T16133] kstrtouint_from_user+0xd6/0x180 [ 363.528504][T16133] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 363.528543][T16133] proc_fail_nth_write+0x8e/0x210 [ 363.528570][T16133] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 363.528604][T16133] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 363.528630][T16133] vfs_write+0x296/0xba0 [ 363.528657][T16133] ? __pfx_vfs_write+0x10/0x10 [ 363.528677][T16133] ? __fget_files+0x2a/0x420 [ 363.528705][T16133] ? __fget_files+0x3a2/0x420 [ 363.528730][T16133] ? __fget_files+0x2a/0x420 [ 363.528763][T16133] ksys_write+0x150/0x270 [ 363.528784][T16133] ? __pfx_ksys_write+0x10/0x10 [ 363.528836][T16133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.528859][T16133] do_syscall_64+0x174/0x580 [ 363.528882][T16133] ? trace_irq_disable+0x3b/0x140 [ 363.528919][T16133] ? clear_bhb_loop+0x40/0x90 [ 363.528941][T16133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.528960][T16133] RIP: 0033:0x7efd9a75e6ce [ 363.528977][T16133] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 363.528993][T16133] RSP: 002b:00007efd9b6cdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 363.529012][T16133] RAX: ffffffffffffffda RBX: 00007efd9b6ce6c0 RCX: 00007efd9a75e6ce [ 363.529026][T16133] RDX: 0000000000000001 RSI: 00007efd9b6ce0a0 RDI: 0000000000000004 [ 363.529037][T16133] RBP: 00007efd9b6ce090 R08: 0000000000000000 R09: 0000000000000000 [ 363.529048][T16133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 363.529059][T16133] R13: 00007efd9aa26038 R14: 00007efd9aa25fa0 R15: 00007ffc7e257bf8 [ 363.529090][T16133] [ 363.884103][T16138] ip6gre7: entered promiscuous mode [ 363.894601][T16138] ip6gre7: entered allmulticast mode [ 364.303542][T16165] netlink: 'syz.2.2702': attribute type 21 has an invalid length. [ 364.357801][T16166] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2702'. [ 364.383572][T16159] ±ÿ speed is unknown, defaulting to 1000 [ 364.393671][T16164] xt_CT: You must specify a L4 protocol and not use inversions on it [ 364.577484][T16180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2706'. [ 364.662494][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2705'. [ 365.088100][T16217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2715'. [ 365.127987][T16216] ip6tnl0: Caught tx_queue_len zero misconfig [ 365.144842][T16226] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 365.269940][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2711'. [ 365.324738][T16210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2711'. [ 365.418855][T16220] ±ÿ speed is unknown, defaulting to 1000 [ 367.055668][T16307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2732'. [ 367.152905][T16311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2734'. [ 367.254208][T16316] x_tables: duplicate underflow at hook 2 [ 367.260776][T16314] netlink: 'syz.3.2734': attribute type 10 has an invalid length. [ 367.383519][T16326] netlink: 'syz.4.2736': attribute type 58 has an invalid length. [ 367.480261][T16332] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2738'. [ 367.509963][T16331] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2738'. [ 367.567201][T16314] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 367.591683][T16314] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 367.845497][T16347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2743'. [ 368.014799][T16363] batadv_slave_1: entered promiscuous mode [ 368.111219][T16359] batadv_slave_1: left promiscuous mode [ 368.529087][T16386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2753'. [ 368.627590][T16391] syzkaller0: entered promiscuous mode [ 368.645137][T16391] syzkaller0: entered allmulticast mode [ 368.661362][T16397] sctp: [Deprecated]: syz.3.2753 (pid 16397) Use of int in max_burst socket option. [ 368.661362][T16397] Use struct sctp_assoc_value instead [ 368.678116][T16391] tipc: Enabled bearer , priority 0 [ 368.700392][T16399] IPVS: Unknown mcast interface: syz_tun [ 368.732554][T16391] tipc: Resetting bearer [ 368.773090][T16389] tipc: Resetting bearer [ 368.845965][T16389] tipc: Disabling bearer [ 368.951613][T16407] Bluetooth: MGMT ver 1.23 [ 369.133774][T16416] tap0: tun_chr_ioctl cmd 1074025692 [ 369.148890][T16416] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2760'. [ 369.231612][T16420] FAULT_INJECTION: forcing a failure. [ 369.231612][T16420] name failslab, interval 1, probability 0, space 0, times 0 [ 369.245059][ T29] audit: type=1800 audit(1784934529.302:9): pid=16418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2762" name=B702 dev="tmpfs" ino=2660 res=0 errno=0 [ 369.265870][T16420] CPU: 1 UID: 0 PID: 16420 Comm: syz.1.2761 Not tainted syzkaller #0 PREEMPT(full) [ 369.265899][T16420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 369.265911][T16420] Call Trace: [ 369.265918][T16420] [ 369.265926][T16420] dump_stack_lvl+0xe8/0x150 [ 369.265958][T16420] should_fail_ex+0x40c/0x560 [ 369.265987][T16420] should_failslab+0xa8/0x100 [ 369.266018][T16420] __kmalloc_cache_noprof+0xa8/0x660 [ 369.266042][T16420] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 369.266062][T16420] ? __kmalloc_cache_noprof+0x150/0x660 [ 369.266086][T16420] ? sctp_add_bind_addr+0x8c/0x370 [ 369.266120][T16420] ? sctp_add_bind_addr+0x8c/0x370 [ 369.266146][T16420] sctp_add_bind_addr+0x8c/0x370 [ 369.266170][T16420] sctp_copy_local_addr_list+0x31a/0x4e0 [ 369.266212][T16420] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 369.266237][T16420] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 369.266265][T16420] ? sctp_v4_is_any+0x35/0x60 [ 369.266289][T16420] ? sctp_copy_one_addr+0x93/0x360 [ 369.266315][T16420] sctp_bind_addr_copy+0xb3/0x3c0 [ 369.266339][T16420] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 369.266375][T16420] sctp_connect_new_asoc+0x2ff/0x6b0 [ 369.266408][T16420] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 369.266444][T16420] ? __local_bh_enable_ip+0xd0/0x130 [ 369.266468][T16420] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 369.266492][T16420] ? security_sctp_bind_connect+0x7e/0x2c0 [ 369.266528][T16420] sctp_sendmsg+0x159b/0x2d00 [ 369.266573][T16420] ? __pfx_sctp_sendmsg+0x10/0x10 [ 369.266607][T16420] ? aa_sk_perm+0x6d5/0x900 [ 369.266635][T16420] ? __might_fault+0xaf/0x130 [ 369.266665][T16420] ? sock_rps_record_flow+0x19/0x350 [ 369.266690][T16420] ? inet_sendmsg+0x298/0x320 [ 369.266714][T16420] ? __pfx_inet_sendmsg+0x10/0x10 [ 369.266734][T16420] sock_sendmsg_nosec+0x10e/0x180 [ 369.266772][T16420] __sys_sendto+0x408/0x5a0 [ 369.266794][T16420] ? ksys_write+0x1e6/0x270 [ 369.266819][T16420] ? __pfx___sys_sendto+0x10/0x10 [ 369.266840][T16420] ? __mutex_unlock_slowpath+0x731/0x900 [ 369.266905][T16420] ? __pfx_ksys_write+0x10/0x10 [ 369.266931][T16420] __x64_sys_sendto+0xde/0x100 [ 369.266954][T16420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.266979][T16420] do_syscall_64+0x174/0x580 [ 369.267004][T16420] ? trace_irq_disable+0x3b/0x140 [ 369.267031][T16420] ? clear_bhb_loop+0x40/0x90 [ 369.267058][T16420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.267080][T16420] RIP: 0033:0x7f08ec19de99 [ 369.267100][T16420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.267119][T16420] RSP: 002b:00007f08ed116028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 369.267141][T16420] RAX: ffffffffffffffda RBX: 00007f08ec425fa0 RCX: 00007f08ec19de99 [ 369.267156][T16420] RDX: 0000000000000004 RSI: 0000200000000400 RDI: 0000000000000003 [ 369.267169][T16420] RBP: 00007f08ed116090 R08: 00002000000014c0 R09: 0000000000000010 [ 369.267183][T16420] R10: 0000000020004000 R11: 0000000000000246 R12: 0000000000000001 [ 369.267196][T16420] R13: 00007f08ec426038 R14: 00007f08ec425fa0 R15: 00007ffe98e90478 [ 369.267232][T16420] [ 370.357170][T16472] bridge10: entered allmulticast mode [ 370.373146][T16473] bridge11: entered allmulticast mode [ 370.675938][T16486] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 370.686063][T16486] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 370.704108][T16486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2778'. [ 370.843915][T16490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2779'. [ 370.868480][T16490] openvswitch: netlink: Flow key attr not present in new flow. [ 370.986619][T16495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2781'. [ 371.276247][T16505] xt_l2tp: wrong L2TP version: 0 [ 371.538728][T16515] 8021q: adding VLAN 0 to HW filter on device bond10 [ 371.547551][T16515] bond9: (slave bond10): Enslaving as an active interface with an up link [ 371.785676][T16529] netlink: 'syz.2.2789': attribute type 30 has an invalid length. [ 371.891715][T16539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.076541][T16546] __nla_validate_parse: 9 callbacks suppressed [ 372.076560][T16546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2794'. [ 372.145528][T16554] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2793'. [ 372.191294][T16554] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2793'. [ 372.315486][T16559] netlink: 'syz.3.2796': attribute type 1 has an invalid length. [ 372.497062][T16559] 8021q: adding VLAN 0 to HW filter on device bond10 [ 372.754785][T16568] syzkaller1: entered promiscuous mode [ 372.765886][T16580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2802'. [ 372.782153][T16568] syzkaller1: entered allmulticast mode [ 373.012479][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2806'. [ 373.040410][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2806'. [ 373.060367][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2806'. [ 373.097075][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2806'. [ 373.169887][T16599] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2808'. [ 373.327076][T16605] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2812'. [ 373.352440][T16601] bond14: (slave bond_slave_1): Device is not bonding slave [ 373.366299][T16601] bond14: option active_slave: invalid value (bond_slave_1) [ 373.386327][T16601] bond14 (unregistering): Released all slaves [ 373.574494][T16622] bond0: left allmulticast mode [ 373.588284][T16625] netlink: 'syz.3.2814': attribute type 13 has an invalid length. [ 373.640462][T16628] FAULT_INJECTION: forcing a failure. [ 373.640462][T16628] name failslab, interval 1, probability 0, space 0, times 0 [ 373.669236][T16628] CPU: 0 UID: 0 PID: 16628 Comm: syz.4.2816 Not tainted syzkaller #0 PREEMPT(full) [ 373.669261][T16628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 373.669272][T16628] Call Trace: [ 373.669280][T16628] [ 373.669287][T16628] dump_stack_lvl+0xe8/0x150 [ 373.669320][T16628] should_fail_ex+0x40c/0x560 [ 373.669350][T16628] should_failslab+0xa8/0x100 [ 373.669381][T16628] __kmalloc_cache_noprof+0xa8/0x660 [ 373.669405][T16628] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 373.669425][T16628] ? __kmalloc_cache_noprof+0x150/0x660 [ 373.669448][T16628] ? sctp_add_bind_addr+0x8c/0x370 [ 373.669466][T16628] ? sctp_add_bind_addr+0x8c/0x370 [ 373.669492][T16628] sctp_add_bind_addr+0x8c/0x370 [ 373.669515][T16628] sctp_copy_local_addr_list+0x31a/0x4e0 [ 373.669541][T16628] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 373.669562][T16628] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 373.669586][T16628] ? sctp_v4_is_any+0x35/0x60 [ 373.669605][T16628] ? sctp_copy_one_addr+0x93/0x360 [ 373.669628][T16628] sctp_bind_addr_copy+0xb3/0x3c0 [ 373.669649][T16628] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 373.669680][T16628] sctp_connect_new_asoc+0x2ff/0x6b0 [ 373.669707][T16628] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 373.669738][T16628] ? __local_bh_enable_ip+0xd0/0x130 [ 373.669759][T16628] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 373.669781][T16628] ? security_sctp_bind_connect+0x7e/0x2c0 [ 373.669812][T16628] sctp_sendmsg+0x159b/0x2d00 [ 373.669849][T16628] ? __pfx_sctp_sendmsg+0x10/0x10 [ 373.669879][T16628] ? aa_sk_perm+0x6d5/0x900 [ 373.669904][T16628] ? __might_fault+0xaf/0x130 [ 373.669930][T16628] ? sock_rps_record_flow+0x19/0x350 [ 373.669952][T16628] ? inet_sendmsg+0x298/0x320 [ 373.669973][T16628] ? __pfx_inet_sendmsg+0x10/0x10 [ 373.669989][T16628] sock_sendmsg_nosec+0x10e/0x180 [ 373.670018][T16628] __sys_sendto+0x408/0x5a0 [ 373.670036][T16628] ? ksys_write+0x1e6/0x270 [ 373.670057][T16628] ? __pfx___sys_sendto+0x10/0x10 [ 373.670075][T16628] ? __mutex_unlock_slowpath+0x731/0x900 [ 373.670133][T16628] ? __pfx_ksys_write+0x10/0x10 [ 373.670157][T16628] __x64_sys_sendto+0xde/0x100 [ 373.670177][T16628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.670198][T16628] do_syscall_64+0x174/0x580 [ 373.670220][T16628] ? trace_irq_disable+0x3b/0x140 [ 373.670244][T16628] ? clear_bhb_loop+0x40/0x90 [ 373.670267][T16628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.670286][T16628] RIP: 0033:0x7f53a059de99 [ 373.670304][T16628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.670320][T16628] RSP: 002b:00007f53a1414028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 373.670340][T16628] RAX: ffffffffffffffda RBX: 00007f53a0825fa0 RCX: 00007f53a059de99 [ 373.670354][T16628] RDX: 0000000000000004 RSI: 0000200000000400 RDI: 0000000000000003 [ 373.670365][T16628] RBP: 00007f53a1414090 R08: 00002000000014c0 R09: 0000000000000010 [ 373.670377][T16628] R10: 0000000020004000 R11: 0000000000000246 R12: 0000000000000002 [ 373.670388][T16628] R13: 00007f53a0826038 R14: 00007f53a0825fa0 R15: 00007ffd1e744ac8 [ 373.670419][T16628] [ 374.152396][T16623] tipc: Enabling of bearer rejected, already enabled [ 374.750271][T16652] ±ÿ speed is unknown, defaulting to 1000 [ 374.817694][T16660] bridge0: port 1(vlan3) entered blocking state [ 374.839688][T16660] bridge0: port 1(vlan3) entered disabled state [ 374.859472][T16660] vlan3: entered allmulticast mode [ 374.893349][T16660] geneve0: entered allmulticast mode [ 374.942307][T16670] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 374.955331][T16670] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 375.165083][T16681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.468274][T16706] netlink: 'syz.0.2840': attribute type 1 has an invalid length. [ 375.533762][T16706] bond8: entered promiscuous mode [ 375.539690][T16706] 8021q: adding VLAN 0 to HW filter on device bond8 [ 375.547177][T16710] bond8: entered allmulticast mode [ 375.567003][T16706] bond8: (slave bridge6): making interface the new active one [ 375.577580][T16706] bridge6: entered promiscuous mode [ 375.588957][T16706] bridge6: entered allmulticast mode [ 375.611226][T16706] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 376.011460][T16730] netlink: 'syz.4.2846': attribute type 8 has an invalid length. [ 376.287540][T16745] netlink: 'syz.3.2852': attribute type 1 has an invalid length. [ 376.306650][T16745] netlink: 'syz.3.2852': attribute type 12 has an invalid length. [ 376.466512][T16747] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 376.482970][T16747] bridge5: entered allmulticast mode [ 376.851880][ T5642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 376.870043][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 376.882864][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 376.896543][ T5642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 376.905796][ T5642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 376.943223][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 376.951135][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 376.958462][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 376.966852][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 376.974564][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.166165][T16782] __nla_validate_parse: 4 callbacks suppressed [ 377.166182][T16782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2865'. [ 377.320818][T16791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2865'. [ 377.485710][T16786] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2866'. [ 377.536866][ T5623] bond6: (slave syz_tun): Removing an active aggregator [ 377.547746][T16786] netlink: 'syz.2.2866': attribute type 7 has an invalid length. [ 377.562470][ T5623] bond6: (slave syz_tun): Releasing backup interface [ 377.568198][T16786] netlink: 'syz.2.2866': attribute type 8 has an invalid length. [ 377.590609][T16786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2866'. [ 377.659772][T16794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.676412][T16794] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.728181][T16794] batman_adv: 60ªX¹¦À: Interface activated: dummy0 [ 377.748053][T16794] 0ªX¹¦À: mtu less than device minimum [ 377.756651][T16794] batman_adv: 60ªX¹¦À: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.768459][T16794] batman_adv: 60ªX¹¦À: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.780154][T16794] batman_adv: 60ªX¹¦À: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.792018][T16794] batman_adv: 60ªX¹¦À: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.803770][T16794] batman_adv: 60ªX¹¦À: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.815319][T16794] batman_adv: 60ªX¹¦À: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.827204][T16794] batman_adv: 60ªX¹¦À: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.839005][T16794] batman_adv: 60ªX¹¦À: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.850751][T16794] batman_adv: 60ªX¹¦À: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.904125][T16794] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 377.972973][T16794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 377.989435][T16794] veth1_macvtap: left promiscuous mode [ 377.995823][T16794] veth0_macvtap: left promiscuous mode [ 378.002421][T16794] veth0_macvtap: entered promiscuous mode [ 378.009188][T16794] veth1_macvtap: entered promiscuous mode [ 378.019045][T16794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 378.027184][T16794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 378.035901][T16794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 378.044914][T16794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 378.058621][T16818] block nbd5: server does not support multiple connections per device. [ 378.068280][T16818] block nbd5: shutting down sockets [ 378.073809][T16794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.082921][T16794] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 378.109792][T16794] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.118313][T16794] 8021q: adding VLAN 0 to HW filter on device bond3 [ 378.129269][T16794] 8021q: adding VLAN 0 to HW filter on device bond4 [ 378.141192][ T5728] bridge0: entered promiscuous mode [ 378.203075][ T1024] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.223340][ T1024] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.256656][ T1024] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.295484][ T1024] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.319822][ T1024] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.340508][ T1024] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.349866][ T1024] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.366063][ T1024] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.525564][T16833] syzkaller0: entered promiscuous mode [ 378.552092][T16833] syzkaller0: entered allmulticast mode [ 378.777888][T16847] ip6t_srh: unknown srh match flags 4000 [ 378.810101][T16847] ip6t_srh: unknown srh match flags 4000 [ 378.830925][T16767] ±ÿ speed is unknown, defaulting to 1000 [ 378.881067][T16858] netlink: 'syz.3.2881': attribute type 6 has an invalid length. [ 378.923658][T16859] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2881'. [ 379.069416][ T50] Bluetooth: hci5: command tx timeout [ 379.094418][T16868] netlink: 'syz.0.2885': attribute type 2 has an invalid length. [ 379.114284][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2885'. [ 379.123351][T16868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2885'. [ 379.181122][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2885'. [ 379.204631][T16868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2885'. [ 379.451285][T16891] IPv6: Can't replace route, no match found [ 379.479707][T16891] IPv6: Can't replace route, no match found [ 379.524024][T16891] x_tables: duplicate underflow at hook 2 [ 379.552289][T16891] xt_NFQUEUE: number of total queues is 0 [ 379.760242][T16907] xt_connbytes: Forcing CT accounting to be enabled [ 379.778879][T16911] xt_connbytes: Forcing CT accounting to be enabled [ 379.860246][T16767] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.867538][T16767] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.882437][T16767] bridge_slave_0: entered allmulticast mode [ 379.901679][T16767] bridge_slave_0: entered promiscuous mode [ 379.914402][T16767] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.929576][T16767] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.948259][T16914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2895'. [ 379.959592][T16767] bridge_slave_1: entered allmulticast mode [ 379.979815][T16767] bridge_slave_1: entered promiscuous mode [ 380.086041][T16767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.125610][T16767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.170038][T16921] netlink: 'syz.0.2897': attribute type 1 has an invalid length. [ 380.303147][T16921] 8021q: adding VLAN 0 to HW filter on device bond9 [ 380.329757][T16923] bond9: (slave gretap0): making interface the new active one [ 380.342846][T16923] bond9: (slave gretap0): Enslaving as an active interface with an up link [ 380.399303][T16767] team0: Port device team_slave_0 added [ 380.434454][T16767] team0: Port device team_slave_1 added [ 380.554943][T16767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.581745][T16767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.659172][T16767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.683559][T16940] netlink: 'syz.0.2905': attribute type 11 has an invalid length. [ 380.693891][T16767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.701023][T16767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.729606][T16767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.752500][T16941] bond0: entered promiscuous mode [ 380.757857][T16941] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 380.770891][T16941] batadv0: entered promiscuous mode [ 380.777361][T16941] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 380.795449][T16941] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 380.826067][T16941] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 380.875528][T16941] bond0: left promiscuous mode [ 380.909269][T16941] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 380.929404][T16941] batadv0: left promiscuous mode [ 380.996533][T16949] ip_vti0: left allmulticast mode [ 381.026215][T16949] bond0: entered promiscuous mode [ 381.032938][T16949] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 381.042204][T16949] batadv0: entered promiscuous mode [ 381.049865][T16949] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 381.060298][T16949] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 381.071770][T16949] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 381.087782][T16949] bond0: left promiscuous mode [ 381.093028][T16949] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 381.109908][T16949] batadv0: left promiscuous mode [ 381.158738][ T50] Bluetooth: hci5: command tx timeout [ 381.198325][T16767] hsr_slave_0: entered promiscuous mode [ 381.218233][T16767] hsr_slave_1: entered promiscuous mode [ 381.562801][T16982] xt_l2tp: v2 doesn't support IP mode [ 381.639434][T16767] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.673636][T16987] netlink: 'syz.1.2916': attribute type 9 has an invalid length. [ 381.812063][T16767] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.011164][T16767] bond0: (slave netdevsim1): Releasing backup interface [ 382.043844][T16767] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 382.074602][T16767] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode [ 382.132367][T16767] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.323628][T16767] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.502867][T17027] __nla_validate_parse: 11 callbacks suppressed [ 382.502883][T17027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2925'. [ 382.702249][T17047] bridge0: port 1(vlan0) entered blocking state [ 382.733200][T17058] sock: sock_timestamping_bind_phc: sock not bind to device [ 382.748576][T17047] bridge0: port 1(vlan0) entered disabled state [ 382.764695][T17047] vlan0: entered allmulticast mode [ 382.777963][T17047] geneve0: entered allmulticast mode [ 382.838686][ T155] net_ratelimit: 20 callbacks suppressed [ 382.838700][ T155] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 382.929566][T16767] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 382.953120][T16767] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.986691][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2935'. [ 383.047710][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2935'. [ 383.132103][T17067] bond9: (slave bond10): Releasing backup interface [ 383.152086][T16767] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 383.174063][T16767] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.189119][T16767] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 383.212952][T16767] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.221302][T16767] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 383.231284][ T50] Bluetooth: hci5: command tx timeout [ 383.241510][T16767] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.260388][ T1121] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.269459][ T1121] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 383.278057][ T1121] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 383.287498][ T1121] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.296046][ T1121] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 383.304876][ T1121] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 383.349149][ T1121] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.366713][ T1121] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 383.376640][ T1121] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 383.385946][ T1121] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.388729][T13157] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 383.394842][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 383.421985][ T1121] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 383.431605][ T1121] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 383.583383][T16767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.626592][T16767] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.646889][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.654108][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.683096][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.690295][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.820852][T17107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2942'. [ 383.879619][T17107] ip6gre7: entered promiscuous mode [ 383.884940][T17107] ip6gre7: entered allmulticast mode [ 383.953930][ T1024] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 384.133376][T17122] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 384.144334][T17122] vlan0: entered promiscuous mode [ 384.159848][T17122] hsr0: entered promiscuous mode [ 384.279299][T17125] ±ÿ speed is unknown, defaulting to 1000 [ 384.456764][T17132] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2950'. [ 384.461951][T17139] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2950'. [ 384.509710][ T1024] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 384.746722][T17156] team0: entered allmulticast mode [ 384.844614][T17164] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2955'. [ 384.893668][T17164] ip6gre3: entered promiscuous mode [ 384.917054][T17164] ip6gre3: entered allmulticast mode [ 385.030096][T16767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.079388][T13152] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 385.296941][T17183] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 385.308598][ T50] Bluetooth: hci5: command tx timeout [ 385.619740][ T8893] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 385.706334][T17201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2965'. [ 385.742954][T17201] ip6gre8: entered promiscuous mode [ 385.750938][T17201] ip6gre8: entered allmulticast mode [ 385.918013][T16767] veth0_vlan: entered promiscuous mode [ 385.945224][T16767] veth1_vlan: entered promiscuous mode [ 385.968248][T17213] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2969'. [ 386.033370][T17216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2970'. [ 386.110406][T16767] veth0_macvtap: entered promiscuous mode [ 386.146151][T16767] veth1_macvtap: entered promiscuous mode [ 386.168552][ T47] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 386.193439][T16767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.232758][T16767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.263127][T13152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.312759][T13152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.334855][T13152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.358322][T13152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.589973][T17231] ±ÿ speed is unknown, defaulting to 1000 [ 386.593932][T17238] ip6tnl0: Caught tx_queue_len zero misconfig [ 386.623616][T17240] ip6gre8: entered promiscuous mode [ 386.629037][T17240] ip6gre8: entered allmulticast mode [ 386.708708][ T8893] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 386.742857][T17241] geneve4: entered allmulticast mode [ 386.763653][T13152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.784907][T13152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.994615][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.014307][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.047295][T17258] netlink: 'syz.0.2984': attribute type 1 has an invalid length. [ 387.234992][ T155] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 387.301357][T17268] syzkaller1: entered promiscuous mode [ 387.312592][T17268] syzkaller1: entered allmulticast mode [ 387.411059][T17275] xt_hashlimit: size too large, truncated to 1048576 [ 387.461681][T17277] netlink: 'syz.0.2987': attribute type 11 has an invalid length. [ 387.563748][T17231] dvmrp0: entered allmulticast mode [ 387.666520][ T5642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 387.681089][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 387.690135][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 387.705784][ T5642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 387.714351][ T5642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 387.803286][ T155] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 388.160228][T13152] dvmrp0: left allmulticast mode [ 388.360155][ T1024] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 388.466973][T17292] __nla_validate_parse: 5 callbacks suppressed [ 388.466992][T17292] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2992'. [ 388.564289][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2992'. [ 388.937058][ T47] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 388.986466][T17279] ±ÿ speed is unknown, defaulting to 1000 [ 389.041180][T17319] x_tables: duplicate underflow at hook 2 [ 389.094837][T17319] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2997'. [ 389.243443][T17328] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 389.429514][T17335] netlink: 1432 bytes leftover after parsing attributes in process `syz.3.3004'. [ 389.489639][T13157] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 389.555488][T17338] tipc: Enabling of bearer rejected, already enabled [ 389.790567][ T5642] Bluetooth: hci1: command tx timeout [ 389.797549][T17355] netlink: 'syz.2.3010': attribute type 29 has an invalid length. [ 389.831321][T17356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3010'. [ 389.882390][T17279] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.918122][T17279] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.942815][T17279] bridge_slave_0: entered allmulticast mode [ 389.969814][T17279] bridge_slave_0: entered promiscuous mode [ 390.003448][T17279] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.019091][ T155] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 390.025010][T17279] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.065482][T17279] bridge_slave_1: entered allmulticast mode [ 390.085055][T17279] bridge_slave_1: entered promiscuous mode [ 390.186813][T17374] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 390.211760][T17374] vlan0: entered promiscuous mode [ 390.217766][T17374] team0: entered promiscuous mode [ 390.230292][T17279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.272398][T17279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.369539][T17384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3015'. [ 390.492233][T17279] team0: Port device team_slave_0 added [ 390.579934][ T47] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 390.629779][T17279] team0: Port device team_slave_1 added [ 390.635656][T17391] syzkaller1: entered promiscuous mode [ 390.641343][T17391] syzkaller1: entered allmulticast mode [ 390.747359][T17279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.756396][T17279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.785013][T17279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.798050][T17279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.805418][T17279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.838642][T17279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.863526][T17404] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3022'. [ 390.889011][T17406] netlink: 'syz.0.3023': attribute type 1 has an invalid length. [ 390.934199][T17279] hsr_slave_0: entered promiscuous mode [ 390.942580][T17279] hsr_slave_1: entered promiscuous mode [ 390.950751][T17279] debugfs: 'hsr0' already exists in 'hsr' [ 390.956670][T17279] Cannot create hsr debugfs directory [ 390.978155][T17407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3023'. [ 391.076481][T17410] netlink: 'syz.3.3024': attribute type 63 has an invalid length. [ 391.093367][T17411] netlink: 'syz.3.3024': attribute type 63 has an invalid length. [ 391.118934][ T47] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 391.453748][T17421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3026'. [ 391.472978][T17421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3026'. [ 391.659551][T13152] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 391.822584][T17421] ±ÿ speed is unknown, defaulting to 1000 [ 391.869354][ T5642] Bluetooth: hci1: command tx timeout [ 392.059396][T17443] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 392.106168][T17443] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 392.133275][T17443] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 392.200309][ T155] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 392.555206][T17454] syzkaller1: entered promiscuous mode [ 392.561424][T17454] syzkaller1: entered allmulticast mode [ 392.572488][T17454] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 392.628142][T17279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 392.641023][T17279] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.649017][T17279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 392.658360][T17279] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.667816][T17279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 392.683373][T17279] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.691616][T17279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 392.703487][T17279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.728557][ T47] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 392.839759][T17279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.881686][T17279] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.936984][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.944220][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.974241][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.978784][T17469] FAULT_INJECTION: forcing a failure. [ 392.978784][T17469] name failslab, interval 1, probability 0, space 0, times 0 [ 392.981618][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.010292][T17469] CPU: 1 UID: 0 PID: 17469 Comm: syz.2.3037 Not tainted syzkaller #0 PREEMPT(full) [ 393.010313][T17469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 393.010324][T17469] Call Trace: [ 393.010331][T17469] [ 393.010338][T17469] dump_stack_lvl+0xe8/0x150 [ 393.010371][T17469] should_fail_ex+0x40c/0x560 [ 393.010399][T17469] should_failslab+0xa8/0x100 [ 393.010429][T17469] __kmalloc_cache_noprof+0xa8/0x660 [ 393.010454][T17469] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 393.010473][T17469] ? __kmalloc_cache_noprof+0x150/0x660 [ 393.010497][T17469] ? sctp_add_bind_addr+0x8c/0x370 [ 393.010515][T17469] ? sctp_add_bind_addr+0x8c/0x370 [ 393.010540][T17469] sctp_add_bind_addr+0x8c/0x370 [ 393.010564][T17469] sctp_copy_local_addr_list+0x31a/0x4e0 [ 393.010594][T17469] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 393.010614][T17469] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 393.010638][T17469] ? sctp_v4_is_any+0x35/0x60 [ 393.010658][T17469] ? sctp_copy_one_addr+0x93/0x360 [ 393.010681][T17469] sctp_bind_addr_copy+0xb3/0x3c0 [ 393.010701][T17469] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 393.010732][T17469] sctp_connect_new_asoc+0x2ff/0x6b0 [ 393.010759][T17469] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 393.010790][T17469] ? __local_bh_enable_ip+0xd0/0x130 [ 393.010811][T17469] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 393.010833][T17469] ? security_sctp_bind_connect+0x7e/0x2c0 [ 393.010864][T17469] sctp_sendmsg+0x159b/0x2d00 [ 393.010902][T17469] ? __pfx_sctp_sendmsg+0x10/0x10 [ 393.010932][T17469] ? aa_sk_perm+0x6d5/0x900 [ 393.010957][T17469] ? __might_fault+0xaf/0x130 [ 393.010983][T17469] ? sock_rps_record_flow+0x19/0x350 [ 393.011005][T17469] ? inet_sendmsg+0x298/0x320 [ 393.011026][T17469] ? __pfx_inet_sendmsg+0x10/0x10 [ 393.011044][T17469] sock_sendmsg_nosec+0x10e/0x180 [ 393.011073][T17469] __sys_sendto+0x408/0x5a0 [ 393.011093][T17469] ? ksys_write+0x1e6/0x270 [ 393.011114][T17469] ? __pfx___sys_sendto+0x10/0x10 [ 393.011130][T17469] ? __mutex_unlock_slowpath+0x731/0x900 [ 393.011180][T17469] ? __pfx_ksys_write+0x10/0x10 [ 393.011203][T17469] __x64_sys_sendto+0xde/0x100 [ 393.011222][T17469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.011243][T17469] do_syscall_64+0x174/0x580 [ 393.011264][T17469] ? trace_irq_disable+0x3b/0x140 [ 393.011288][T17469] ? clear_bhb_loop+0x40/0x90 [ 393.011311][T17469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.011333][T17469] RIP: 0033:0x7efd9a79de99 [ 393.011350][T17469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.011366][T17469] RSP: 002b:00007efd9b6ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 393.011385][T17469] RAX: ffffffffffffffda RBX: 00007efd9aa25fa0 RCX: 00007efd9a79de99 [ 393.011398][T17469] RDX: 0000000000000004 RSI: 0000200000000400 RDI: 0000000000000003 [ 393.011409][T17469] RBP: 00007efd9b6ce090 R08: 00002000000014c0 R09: 0000000000000010 [ 393.011421][T17469] R10: 0000000020004000 R11: 0000000000000246 R12: 0000000000000002 [ 393.011432][T17469] R13: 00007efd9aa26038 R14: 00007efd9aa25fa0 R15: 00007ffc7e257bf8 [ 393.011462][T17469] [ 393.330900][ T155] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 393.344918][T17472] batman_adv: batadv0: Adding interface: vlan2 [ 393.351823][T17472] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.377166][T17472] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 393.428601][T17279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 393.439307][T17279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.573033][T17480] tipc: Enabling of bearer rejected, already enabled [ 393.610383][T17483] __nla_validate_parse: 2 callbacks suppressed [ 393.610399][T17483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3041'. [ 393.787822][T17491] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3044'. [ 393.809108][T17491] 0<¢w,³ªî: renamed from gretap0 [ 393.826183][T17491] 0<¢w,³ªî: entered allmulticast mode [ 393.839746][T17493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3045'. [ 393.848799][T13157] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 393.880314][T17491] A link change request failed with some changes committed already. Interface 30<¢w,³ªî may have been left with an inconsistent configuration, please check. [ 393.921008][T17493] netlink: 'syz.0.3045': attribute type 1 has an invalid length. [ 393.948561][ T5642] Bluetooth: hci1: command tx timeout [ 394.064798][T17502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3045'. [ 394.147480][T17493] bond11: entered promiscuous mode [ 394.167572][T17493] 8021q: adding VLAN 0 to HW filter on device bond11 [ 394.207130][T17508] netlink: 'syz.2.3048': attribute type 4 has an invalid length. [ 394.239583][T17498] bond11: (slave veth9): making interface the new active one [ 394.247028][T17498] veth9: entered promiscuous mode [ 394.254737][T17498] bond11: (slave veth9): Enslaving as an active interface with an up link [ 394.264771][T17511] netlink: 'syz.2.3048': attribute type 4 has an invalid length. [ 394.279648][T17502] bond11 (unregistering): (slave veth9): Releasing backup interface [ 394.287706][T17502] veth9: left promiscuous mode [ 394.294692][T17502] bond11 (unregistering): Released all slaves [ 394.368215][ T155] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 394.813395][T17279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.903302][T17279] veth0_vlan: entered promiscuous mode [ 394.919657][ T47] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 394.935309][T17279] veth1_vlan: entered promiscuous mode [ 395.003393][T17279] veth0_macvtap: entered promiscuous mode [ 395.048157][T17544] bridge7: entered promiscuous mode [ 395.054035][T17544] bridge7: entered allmulticast mode [ 395.065275][T17279] veth1_macvtap: entered promiscuous mode [ 395.093208][T17547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3058'. [ 395.154271][T17279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.189626][T17279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.241350][ T47] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.274031][ T47] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.322568][ T47] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.337005][T17560] xt_l2tp: invalid flags combination: 8 [ 395.357855][ T47] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.459559][T13152] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 395.481666][T17564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3065'. [ 395.534361][T17564] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3065'. [ 395.607184][T13152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.640209][T13152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.749239][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.774177][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.897403][T17577] tipc: Enabling of bearer rejected, already enabled [ 395.920617][T17572] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 395.963787][T17584] 8021q: VLANs not supported on ip_vti0 [ 396.022246][T13152] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 396.038775][ T5642] Bluetooth: hci1: command tx timeout [ 396.524325][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 396.544259][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 396.554865][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 396.563378][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 396.571492][ T155] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 396.597488][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 396.689309][T17605] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.801126][T17620] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3079'. [ 396.832761][T17592] batman_adv: batadv0: Removing interface: vlan2 [ 397.070251][T17601] ±ÿ speed is unknown, defaulting to 1000 [ 397.149906][ T155] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 397.364612][T17639] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3083'. [ 397.406468][T17636] IPVS: Unknown mcast interface: vcan0 [ 397.576684][T17653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3086'. [ 397.604007][T17653] ip6gre1: entered promiscuous mode [ 397.615045][T17653] ip6gre1: entered allmulticast mode [ 397.632079][T17608] ±ÿ speed is unknown, defaulting to 1000 [ 397.710476][T13152] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 397.729398][T17657] netlink: 'syz.0.3087': attribute type 1 has an invalid length. [ 397.757259][T17659] vlan1: entered promiscuous mode [ 397.991325][T17669] syzkaller0: entered promiscuous mode [ 397.997013][T17669] syzkaller0: entered allmulticast mode [ 398.269099][ T47] batman_adv: 60ªX¹¦À: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 398.462531][T17676] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 398.512818][T17676] vlan0: left promiscuous mode [ 398.522388][T17676] hsr0: left promiscuous mode [ 398.581193][T17676] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 398.619804][T17699] __nla_validate_parse: 3 callbacks suppressed [ 398.619820][T17699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3096'. [ 398.669516][ T50] Bluetooth: hci4: command tx timeout [ 398.794819][T17692] bond11: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 398.836156][T17692] bond11 (unregistering): Released all slaves [ 399.121934][T17708] syzkaller1: entered promiscuous mode [ 399.127709][T17708] syzkaller1: entered allmulticast mode [ 399.152996][T17712] tipc: Enabling of bearer rejected, failed to enable media [ 399.330866][T17716] batman_adv: 60ªX¹¦À: Interface deactivated: dummy0 [ 399.775093][T17756] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 400.014129][T17716] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 400.047928][T17716] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 400.124239][T17716] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 400.137990][T17716] bond8: left promiscuous mode [ 400.144850][T17716] bridge6: left promiscuous mode [ 400.150114][T17716] bond8: left allmulticast mode [ 400.155146][T17716] bridge6: left allmulticast mode [ 400.173480][T17716] ip6gre3: left promiscuous mode [ 400.178928][T17716] ip6gre3: left allmulticast mode [ 400.186166][T17716] geneve4: left allmulticast mode [ 400.194366][T17716] bridge7: left promiscuous mode [ 400.200672][T17716] bridge7: left allmulticast mode [ 400.242784][ T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.259129][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.280099][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.295878][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.386413][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.421536][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.443535][T17608] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.451381][T17608] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.459604][T17608] bridge_slave_0: entered allmulticast mode [ 400.467515][T17608] bridge_slave_0: entered promiscuous mode [ 400.480089][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.500897][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.520065][T17769] netlink: 'syz.2.3104': attribute type 4 has an invalid length. [ 400.534051][T17608] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.552031][T17608] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.582643][T17608] bridge_slave_1: entered allmulticast mode [ 400.602069][T17608] bridge_slave_1: entered promiscuous mode [ 400.736901][T17775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3106'. [ 400.748951][ T50] Bluetooth: hci4: command tx timeout [ 400.762817][T17608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.806881][T17608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.966606][T17608] team0: Port device team_slave_0 added [ 400.973895][T17783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3108'. [ 401.001449][T17608] team0: Port device team_slave_1 added [ 401.013641][T17783] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.022441][T17783] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.145441][T17608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.168662][T17608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.220282][T17608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.247361][T17608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.264884][T17608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.338194][T17608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.585987][T17608] hsr_slave_0: entered promiscuous mode [ 401.606750][T17608] hsr_slave_1: entered promiscuous mode [ 401.635010][T17608] debugfs: 'hsr0' already exists in 'hsr' [ 401.653403][T17608] Cannot create hsr debugfs directory [ 401.869249][T17806] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 402.047723][T17816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3115'. [ 402.188917][T17608] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.347498][T17608] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.535494][T17608] bond0: (slave netdevsim1): Releasing backup interface [ 402.550664][T17608] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.592860][T17827] syzkaller0: entered promiscuous mode [ 402.598548][T17827] syzkaller0: entered allmulticast mode [ 402.705389][T17608] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.830130][ T50] Bluetooth: hci4: command tx timeout [ 402.959560][T17608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 403.069856][T17848] netlink: 'syz.0.3122': attribute type 1 has an invalid length. [ 403.079219][T17850] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 403.088942][T17848] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3122'. [ 403.241396][T17608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 403.249698][T17608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 403.266109][T17608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 403.280114][T17608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 403.297758][T17608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 403.306251][T17608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 403.321523][T17608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.505297][T17608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.545314][T17608] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.593277][T17751] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.600474][T17751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.646075][T17807] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.653260][T17807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.753911][T17879] geneve2: entered promiscuous mode [ 403.859103][T17886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3133'. [ 403.933578][T17896] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3132'. [ 403.948866][T17896] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3132'. [ 403.957980][T17896] netlink: 'syz.1.3132': attribute type 5 has an invalid length. [ 403.966616][T17896] netlink: 'syz.1.3132': attribute type 6 has an invalid length. [ 403.974942][T17896] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3132'. [ 403.986922][T17886] bond11: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 404.022571][T17886] bond11 (unregistering): Released all slaves [ 404.237488][T17910] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 404.261437][T17910] vlan0: entered promiscuous mode [ 404.273785][T17910] hsr0: entered promiscuous mode [ 404.385124][T17919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3137'. [ 404.407039][T17916] vlan2: entered allmulticast mode [ 404.415964][T17916] bond0: entered allmulticast mode [ 404.433487][T17919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3137'. [ 404.433871][T13157] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.455343][T13152] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.465483][T17916] netlink: 'syz.0.3138': attribute type 8 has an invalid length. [ 404.480798][T13152] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.499219][T13152] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.613035][T17608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.782256][T17608] veth0_vlan: entered promiscuous mode [ 404.837457][T17608] veth1_vlan: entered promiscuous mode [ 404.867385][T17935] tipc: Started in network mode [ 404.874755][T17935] tipc: Node identity 2a43c85b2eee, cluster identity 4711 [ 404.882167][T17935] tipc: Enabled bearer , priority 0 [ 404.908801][ T50] Bluetooth: hci4: command tx timeout [ 404.959796][T17608] veth0_macvtap: entered promiscuous mode [ 405.002108][T17608] veth1_macvtap: entered promiscuous mode [ 405.042006][T17608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.087969][T17608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.137031][ T155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.180971][ T155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.207321][ T155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.230405][ T155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.371722][T17934] tipc: Disabling bearer [ 405.485130][ T1024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.508242][ T1024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.544741][T17957] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 405.626692][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.649918][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.336856][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 406.352340][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 406.360180][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 406.375932][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 406.387098][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 406.727073][T18010] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 407.034089][T17990] ±ÿ speed is unknown, defaulting to 1000 [ 407.102632][T18014] ±ÿ speed is unknown, defaulting to 1000 [ 407.624649][T18034] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3165'. [ 407.716555][T18034] bond0: (slave bond_slave_1): Releasing backup interface [ 407.812232][T18037] netlink: 'syz.4.3164': attribute type 1 has an invalid length. [ 408.341392][T18067] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3171'. [ 408.395232][T18072] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3172'. [ 408.439127][ T5642] Bluetooth: hci3: command tx timeout [ 408.460786][T18072] 0ªX¹¦À: renamed from batadv0 (while UP) [ 408.494284][T18072] 0ªX¹¦À: entered allmulticast mode [ 408.533483][T18072] net_ratelimit: 2 callbacks suppressed [ 408.533497][T18072] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 408.577666][T17990] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.594744][T17990] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.609866][T17990] bridge_slave_0: entered allmulticast mode [ 408.633710][T17990] bridge_slave_0: entered promiscuous mode [ 408.651453][T17990] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.678626][T17990] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.694430][T17990] bridge_slave_1: entered allmulticast mode [ 408.704588][T17990] bridge_slave_1: entered promiscuous mode [ 408.721241][T18060] ±ÿ speed is unknown, defaulting to 1000 [ 408.740679][T18079] siw: device registration error -23 [ 408.754222][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3177'. [ 408.780798][T18084] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 408.876003][T17990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.924624][T17990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.049893][T17990] team0: Port device team_slave_0 added [ 409.144093][T17990] team0: Port device team_slave_1 added [ 409.273723][T18102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3180'. [ 409.307925][T18102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3180'. [ 409.325658][T17990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.337326][T17990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.378870][T17990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.451993][T17990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.467474][T17990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.521018][T17990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.685728][T17990] hsr_slave_0: entered promiscuous mode [ 409.713423][T17990] hsr_slave_1: entered promiscuous mode [ 409.748264][T17990] debugfs: 'hsr0' already exists in 'hsr' [ 409.774481][T17990] Cannot create hsr debugfs directory [ 409.822037][T18116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3184'. [ 409.832266][T18116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3184'. [ 409.869213][ T5825] IPVS: starting estimator thread 0... [ 409.893915][T18124] netlink: 'syz.4.3186': attribute type 2 has an invalid length. [ 409.902237][T18124] netlink: 'syz.4.3186': attribute type 5 has an invalid length. [ 409.910043][T18116] geneve4: entered promiscuous mode [ 409.917212][T18124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3186'. [ 409.940559][T18128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3185'. [ 409.972626][T18119] IPVS: using max 29 ests per chain, 69600 per kthread [ 410.025723][T18124] geneve0: entered promiscuous mode [ 410.061310][T18124] geneve0: left promiscuous mode [ 410.122387][T18128] ip6gre1: entered promiscuous mode [ 410.130311][T18128] ip6gre1: entered allmulticast mode [ 410.315808][T18145] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3193'. [ 410.340061][T18139] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 410.510128][ T5642] Bluetooth: hci3: command tx timeout [ 410.528369][T18150] netdevsim netdevsim3: Direct firmware load for .® failed with error -2 [ 410.543314][T18150] netdevsim netdevsim3: Falling back to sysfs fallback for: .® [ 410.606102][T18156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3196'. [ 410.659836][T18156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3196'. [ 410.659857][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3199'. [ 410.683195][T18156] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 410.767170][T18161] netlink: 'syz.2.3198': attribute type 4 has an invalid length. [ 410.780287][T18164] ip6gre2: entered promiscuous mode [ 410.785544][T18164] ip6gre2: entered allmulticast mode [ 410.823190][T18165] netlink: 'syz.2.3198': attribute type 4 has an invalid length. [ 411.306762][T18185] tc_dump_action: action bad kind [ 411.448993][T17990] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 411.487443][T17990] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 411.513302][T17990] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 411.534076][T17990] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.536321][T18192] xt_socket: unknown flags 0x4 [ 411.559223][T17990] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 411.586861][T17990] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 411.609364][T17990] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 411.630960][T17990] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 411.667636][T18197] macsec1: entered promiscuous mode [ 411.678645][T18197] geneve1: entered promiscuous mode [ 411.691335][T18197] macsec1: entered allmulticast mode [ 411.702955][T18197] geneve1: entered allmulticast mode [ 411.723845][T18197] geneve1: left allmulticast mode [ 411.736234][T18197] geneve1: left promiscuous mode [ 411.872678][T18194] syzkaller0: entered promiscuous mode [ 411.886548][T18194] syzkaller0: entered allmulticast mode [ 412.380755][T18219] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 412.591802][ T5642] Bluetooth: hci3: command tx timeout [ 414.285281][T18234] netlink: 'syz.4.3222': attribute type 3 has an invalid length. [ 414.347996][T17990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.361652][T18239] __nla_validate_parse: 6 callbacks suppressed [ 414.361666][T18239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3224'. [ 414.379289][T18238] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3223'. [ 414.393550][T17990] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.422840][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.430048][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.466866][T18239] IPVS: Scheduler module ip_vs_sip not found [ 414.483663][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.490873][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.669416][ T5642] Bluetooth: hci3: command tx timeout [ 414.684654][T18247] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 414.702958][T18247] syzkaller1: linktype set to 769 [ 414.847877][T18259] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3229'. [ 415.033834][T18266] Bluetooth: MGMT ver 1.23 [ 415.150318][T18271] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 415.172866][T18271] FAULT_INJECTION: forcing a failure. [ 415.172866][T18271] name failslab, interval 1, probability 0, space 0, times 0 [ 415.186411][T18271] CPU: 0 UID: 0 PID: 18271 Comm: syz.3.3232 Not tainted syzkaller #0 PREEMPT(full) [ 415.186438][T18271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 415.186451][T18271] Call Trace: [ 415.186460][T18271] [ 415.186469][T18271] dump_stack_lvl+0xe8/0x150 [ 415.186507][T18271] should_fail_ex+0x40c/0x560 [ 415.186540][T18271] should_failslab+0xa8/0x100 [ 415.186576][T18271] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 415.186605][T18271] ? skb_clone+0x212/0x3a0 [ 415.186630][T18271] ? skb_clone+0x212/0x3a0 [ 415.186663][T18271] skb_clone+0x212/0x3a0 [ 415.186694][T18271] __netlink_deliver_tap+0x413/0x860 [ 415.186734][T18271] ? netlink_deliver_tap+0x2e/0x1b0 [ 415.186763][T18271] netlink_deliver_tap+0x19c/0x1b0 [ 415.186791][T18271] netlink_unicast+0x77f/0x940 [ 415.186827][T18271] netlink_sendmsg+0x813/0xb40 [ 415.186863][T18271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.186895][T18271] ? aa_sock_msg_perm+0xf1/0x1b0 [ 415.186926][T18271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.186952][T18271] sock_sendmsg_nosec+0x13a/0x180 [ 415.186986][T18271] ____sys_sendmsg+0x54e/0x850 [ 415.187018][T18271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.187058][T18271] ? import_iovec+0x73/0xa0 [ 415.187096][T18271] ___sys_sendmsg+0x2a5/0x360 [ 415.187120][T18271] ? __lock_acquire+0x683/0x2cf0 [ 415.187156][T18271] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.187229][T18271] ? __fget_files+0x2a/0x420 [ 415.187258][T18271] ? __fget_files+0x3a2/0x420 [ 415.187300][T18271] __x64_sys_sendmsg+0x1b1/0x290 [ 415.187328][T18271] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 415.187375][T18271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.187399][T18271] do_syscall_64+0x174/0x580 [ 415.187434][T18271] ? trace_irq_disable+0x3b/0x140 [ 415.187460][T18271] ? clear_bhb_loop+0x40/0x90 [ 415.187485][T18271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.187505][T18271] RIP: 0033:0x7fb68c79de99 [ 415.187522][T18271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.187539][T18271] RSP: 002b:00007fb68d739028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.187561][T18271] RAX: ffffffffffffffda RBX: 00007fb68ca25fa0 RCX: 00007fb68c79de99 [ 415.187575][T18271] RDX: 0000000024004004 RSI: 00002000000003c0 RDI: 000000000000000a [ 415.187588][T18271] RBP: 00007fb68d739090 R08: 0000000000000000 R09: 0000000000000000 [ 415.187600][T18271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.187612][T18271] R13: 00007fb68ca26038 R14: 00007fb68ca25fa0 R15: 00007fff0578ce58 [ 415.187644][T18271] [ 415.187864][T18271] vlan0: entered promiscuous mode [ 415.619971][T18284] Cannot find add_set index 0 as target [ 415.709889][T17990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.835763][T18292] syzkaller0: entered promiscuous mode [ 415.846478][T18292] syzkaller0: entered allmulticast mode [ 416.041851][T17990] veth0_vlan: entered promiscuous mode [ 416.067904][T17990] veth1_vlan: entered promiscuous mode [ 416.147220][T17990] veth0_macvtap: entered promiscuous mode [ 416.184636][T17990] veth1_macvtap: entered promiscuous mode [ 416.315689][T18308] sctp: [Deprecated]: syz.2.3244 (pid 18308) Use of int in maxseg socket option. [ 416.315689][T18308] Use struct sctp_assoc_value instead [ 416.353281][T18308] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 416.493297][T18310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3244'. [ 416.549879][T17990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.587187][T17990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.623230][ T155] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.659724][ T155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.702532][ T155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.739585][ T155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.750843][T18316] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 416.786641][T18316] FAULT_INJECTION: forcing a failure. [ 416.786641][T18316] name failslab, interval 1, probability 0, space 0, times 0 [ 416.843270][T18316] CPU: 1 UID: 0 PID: 18316 Comm: syz.4.3246 Not tainted syzkaller #0 PREEMPT(full) [ 416.843295][T18316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 416.843307][T18316] Call Trace: [ 416.843315][T18316] [ 416.843323][T18316] dump_stack_lvl+0xe8/0x150 [ 416.843357][T18316] should_fail_ex+0x40c/0x560 [ 416.843384][T18316] ? alloc_netdev_mqs+0xa9/0x12b0 [ 416.843412][T18316] should_failslab+0xa8/0x100 [ 416.843444][T18316] __kvmalloc_node_noprof+0x176/0x860 [ 416.843473][T18316] ? do_raw_spin_lock+0x12b/0x2f0 [ 416.843498][T18316] ? alloc_netdev_mqs+0xa9/0x12b0 [ 416.843532][T18316] alloc_netdev_mqs+0xa9/0x12b0 [ 416.843574][T18316] ? __pfx_vlan_setup+0x10/0x10 [ 416.843623][T18316] rtnl_create_link+0x321/0xd70 [ 416.843659][T18316] rtnl_newlink_create+0x258/0x7b0 [ 416.843692][T18316] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 416.843729][T18316] ? __pfx___mutex_lock+0x10/0x10 [ 416.843778][T18316] ? full_name_hash+0x92/0xe0 [ 416.843809][T18316] rtnl_newlink+0x166d/0x1c30 [ 416.843846][T18316] ? __pfx_rtnl_newlink+0x10/0x10 [ 416.843864][T18316] ? do_syscall_64+0x174/0x580 [ 416.843926][T18316] ? kasan_quarantine_put+0xbb/0x1f0 [ 416.843951][T18316] ? lockdep_hardirqs_on+0x7a/0x110 [ 416.843978][T18316] ? nlmon_xmit+0xb0/0x100 [ 416.844006][T18316] ? kmem_cache_free+0x182/0x650 [ 416.844045][T18316] ? __lock_acquire+0x683/0x2cf0 [ 416.844077][T18316] ? __dev_queue_xmit+0x29b/0x3820 [ 416.844105][T18316] ? __local_bh_enable_ip+0xd0/0x130 [ 416.844129][T18316] ? lockdep_hardirqs_on+0x7a/0x110 [ 416.844151][T18316] ? __dev_queue_xmit+0x29b/0x3820 [ 416.844174][T18316] ? __local_bh_enable_ip+0xd0/0x130 [ 416.844196][T18316] ? __dev_queue_xmit+0x29b/0x3820 [ 416.844228][T18316] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 416.844265][T18316] ? __pfx_rtnl_newlink+0x10/0x10 [ 416.844284][T18316] rtnetlink_rcv_msg+0x802/0xc00 [ 416.844309][T18316] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 416.844328][T18316] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 416.844346][T18316] ? ref_tracker_free+0x689/0x830 [ 416.844376][T18316] ? __pfx_ref_tracker_free+0x10/0x10 [ 416.844414][T18316] netlink_rcv_skb+0x226/0x4a0 [ 416.844439][T18316] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 416.844461][T18316] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 416.844498][T18316] ? netlink_deliver_tap+0x2e/0x1b0 [ 416.844521][T18316] ? netlink_deliver_tap+0x2e/0x1b0 [ 416.844551][T18316] netlink_unicast+0x7bb/0x940 [ 416.844587][T18316] netlink_sendmsg+0x813/0xb40 [ 416.844621][T18316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.844649][T18316] ? aa_sock_msg_perm+0xf1/0x1b0 [ 416.844676][T18316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.844704][T18316] sock_sendmsg_nosec+0x13a/0x180 [ 416.844735][T18316] ____sys_sendmsg+0x54e/0x850 [ 416.844764][T18316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.844797][T18316] ? import_iovec+0x73/0xa0 [ 416.844841][T18316] ___sys_sendmsg+0x2a5/0x360 [ 416.844861][T18316] ? __lock_acquire+0x683/0x2cf0 [ 416.844890][T18316] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.844947][T18316] ? __fget_files+0x2a/0x420 [ 416.844971][T18316] ? __fget_files+0x3a2/0x420 [ 416.845006][T18316] __x64_sys_sendmsg+0x1b1/0x290 [ 416.845031][T18316] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 416.845071][T18316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.845092][T18316] do_syscall_64+0x174/0x580 [ 416.845113][T18316] ? trace_irq_disable+0x3b/0x140 [ 416.845137][T18316] ? clear_bhb_loop+0x40/0x90 [ 416.845160][T18316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.845178][T18316] RIP: 0033:0x7f55f8d9de99 [ 416.845196][T18316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.845211][T18316] RSP: 002b:00007f55f9b8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.845231][T18316] RAX: ffffffffffffffda RBX: 00007f55f9025fa0 RCX: 00007f55f8d9de99 [ 416.845244][T18316] RDX: 0000000024004004 RSI: 00002000000003c0 RDI: 000000000000000a [ 416.845256][T18316] RBP: 00007f55f9b8b090 R08: 0000000000000000 R09: 0000000000000000 [ 416.845267][T18316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.845277][T18316] R13: 00007f55f9026038 R14: 00007f55f9025fa0 R15: 00007ffcd528f678 [ 416.845307][T18316] [ 417.442670][T18333] macvlan2: entered promiscuous mode [ 417.448139][T18333] macvlan2: entered allmulticast mode [ 417.481976][T17751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.490859][T17751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.574186][T18337] syzkaller0: entered promiscuous mode [ 417.588752][T18337] syzkaller0: entered allmulticast mode [ 417.645852][T17807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.661356][T17807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.778095][T18341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3254'. [ 417.892231][T18351] netlink: 'syz.0.3153': attribute type 10 has an invalid length. [ 417.901646][T18351] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3153'. [ 417.912740][T18344] netlink: 'syz.1.3255': attribute type 23 has an invalid length. [ 418.021749][T18346] netlink: 'syz.3.3256': attribute type 1 has an invalid length. [ 418.053868][T18346] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3256'. [ 418.188432][T18368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3258'. [ 418.661460][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 418.672858][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 418.681051][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 418.695391][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 418.703624][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 418.852565][T18396] netlink: 'syz.3.3264': attribute type 1 has an invalid length. [ 418.892338][T18396] gretap1: entered allmulticast mode [ 419.101450][T18403] syzkaller0: entered promiscuous mode [ 419.116769][T18403] syzkaller0: entered allmulticast mode [ 419.160146][T18405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3267'. [ 419.203440][T18407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3268'. [ 419.232998][T18408] netlink: 'syz.3.3268': attribute type 1 has an invalid length. [ 419.441600][T18385] ±ÿ speed is unknown, defaulting to 1000 [ 419.451493][T18413] syzkaller0: entered promiscuous mode [ 419.464351][T18417] FAULT_INJECTION: forcing a failure. [ 419.464351][T18417] name failslab, interval 1, probability 0, space 0, times 0 [ 419.488449][T18413] syzkaller0: entered allmulticast mode [ 419.498867][T18417] CPU: 1 UID: 0 PID: 18417 Comm: syz.3.3271 Not tainted syzkaller #0 PREEMPT(full) [ 419.498888][T18417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 419.498898][T18417] Call Trace: [ 419.498905][T18417] [ 419.498912][T18417] dump_stack_lvl+0xe8/0x150 [ 419.498943][T18417] should_fail_ex+0x40c/0x560 [ 419.498970][T18417] should_failslab+0xa8/0x100 [ 419.498999][T18417] __kmalloc_cache_noprof+0xa8/0x660 [ 419.499023][T18417] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 419.499042][T18417] ? __kmalloc_cache_noprof+0x150/0x660 [ 419.499066][T18417] ? sctp_add_bind_addr+0x8c/0x370 [ 419.499084][T18417] ? sctp_add_bind_addr+0x8c/0x370 [ 419.499109][T18417] sctp_add_bind_addr+0x8c/0x370 [ 419.499133][T18417] sctp_copy_local_addr_list+0x31a/0x4e0 [ 419.499154][T18417] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 419.499176][T18417] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 419.499199][T18417] ? sctp_v4_is_any+0x35/0x60 [ 419.499219][T18417] ? sctp_copy_one_addr+0x93/0x360 [ 419.499240][T18417] sctp_bind_addr_copy+0xb3/0x3c0 [ 419.499260][T18417] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 419.499291][T18417] sctp_connect_new_asoc+0x2ff/0x6b0 [ 419.499318][T18417] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 419.499350][T18417] ? __local_bh_enable_ip+0xd0/0x130 [ 419.499381][T18417] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 419.499405][T18417] ? security_sctp_bind_connect+0x7e/0x2c0 [ 419.499436][T18417] sctp_sendmsg+0x159b/0x2d00 [ 419.499475][T18417] ? __pfx_sctp_sendmsg+0x10/0x10 [ 419.499504][T18417] ? aa_sk_perm+0x6d5/0x900 [ 419.499529][T18417] ? __might_fault+0xaf/0x130 [ 419.499556][T18417] ? sock_rps_record_flow+0x19/0x350 [ 419.499578][T18417] ? inet_sendmsg+0x298/0x320 [ 419.499599][T18417] ? __pfx_inet_sendmsg+0x10/0x10 [ 419.499617][T18417] sock_sendmsg_nosec+0x10e/0x180 [ 419.499648][T18417] __sys_sendto+0x408/0x5a0 [ 419.499667][T18417] ? ksys_write+0x1e6/0x270 [ 419.499688][T18417] ? __pfx___sys_sendto+0x10/0x10 [ 419.499705][T18417] ? __mutex_unlock_slowpath+0x731/0x900 [ 419.499757][T18417] ? __pfx_ksys_write+0x10/0x10 [ 419.499781][T18417] __x64_sys_sendto+0xde/0x100 [ 419.499801][T18417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.499822][T18417] do_syscall_64+0x174/0x580 [ 419.499844][T18417] ? trace_irq_disable+0x3b/0x140 [ 419.499869][T18417] ? clear_bhb_loop+0x40/0x90 [ 419.499893][T18417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.499913][T18417] RIP: 0033:0x7fb68c79de99 [ 419.499930][T18417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.499946][T18417] RSP: 002b:00007fb68d739028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 419.499966][T18417] RAX: ffffffffffffffda RBX: 00007fb68ca25fa0 RCX: 00007fb68c79de99 [ 419.499979][T18417] RDX: 0000000000000004 RSI: 0000200000000400 RDI: 0000000000000003 [ 419.499991][T18417] RBP: 00007fb68d739090 R08: 00002000000014c0 R09: 0000000000000010 [ 419.500003][T18417] R10: 0000000020004000 R11: 0000000000000246 R12: 0000000000000002 [ 419.500015][T18417] R13: 00007fb68ca26038 R14: 00007fb68ca25fa0 R15: 00007fff0578ce58 [ 419.500046][T18417] [ 419.886685][T18419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3272'. [ 420.495523][T18450] netlink: 'syz.1.3280': attribute type 2 has an invalid length. [ 420.513545][T18454] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3281'. [ 420.513790][T18450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3280'. [ 420.623627][T18385] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.633167][T18385] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.640934][T18385] bridge_slave_0: entered allmulticast mode [ 420.648960][T18385] bridge_slave_0: entered promiscuous mode [ 420.656944][T18385] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.664239][T18385] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.671788][T18385] bridge_slave_1: entered allmulticast mode [ 420.680259][T18385] bridge_slave_1: entered promiscuous mode [ 420.701329][T18462] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 420.748871][ T5642] Bluetooth: hci0: command tx timeout [ 420.804003][T18385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.833841][T18385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.893271][T18465] sctp: [Deprecated]: syz.0.3284 (pid 18465) Use of int in maxseg socket option. [ 420.893271][T18465] Use struct sctp_assoc_value instead [ 420.941023][T18461] ±ÿ speed is unknown, defaulting to 1000 [ 420.952582][T18385] team0: Port device team_slave_0 added [ 420.974793][T18385] team0: Port device team_slave_1 added [ 420.998988][T18467] netlink: 'syz.3.3285': attribute type 22 has an invalid length. [ 421.018759][T18468] netlink: 'syz.3.3285': attribute type 22 has an invalid length. [ 421.036933][T18468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3285'. [ 421.049564][T18467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3285'. [ 421.136896][T18385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.150112][T18385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.206701][T18385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.235840][T18385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.264966][T18385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.340122][T18385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.358331][T18478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'. [ 421.437272][T18483] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3290'. [ 421.469599][T18483] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3290'. [ 421.686462][T18385] hsr_slave_0: entered promiscuous mode [ 421.693455][T18385] hsr_slave_1: entered promiscuous mode [ 421.702125][T18385] debugfs: 'hsr0' already exists in 'hsr' [ 421.708047][T18385] Cannot create hsr debugfs directory [ 422.034372][T18507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3296'. [ 422.055136][T18507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3296'. [ 422.296587][T18517] netlink: 'syz.0.3299': attribute type 10 has an invalid length. [ 422.320533][T18517] team0: Device veth1_virt_wifi failed to register rx_handler [ 422.333824][T18517] xt_HMARK: spi-set and port-set can't be combined [ 422.601036][T18539] netlink: 'syz.4.3304': attribute type 1 has an invalid length. [ 422.732232][T18543] bond1: (slave bridge1): making interface the new active one [ 422.740639][T18543] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 422.828871][ T5642] Bluetooth: hci0: command tx timeout [ 422.857798][T18550] bridge_slave_1: left allmulticast mode [ 422.863760][T18550] bridge_slave_1: left promiscuous mode [ 422.870385][T18550] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.903225][T18550] bridge_slave_0: left allmulticast mode [ 422.910186][T18550] bridge_slave_0: left promiscuous mode [ 422.916153][T18550] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.964899][T18385] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 422.977886][T18385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.985882][T18547] ±ÿ speed is unknown, defaulting to 1000 [ 422.987219][T18385] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 423.025082][T18385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.054665][T18385] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 423.093270][T18385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.154549][T18385] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 423.184371][T18385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.339197][T18573] netlink: 'syz.1.3314': attribute type 13 has an invalid length. [ 423.436016][T18576] netlink: 'syz.0.3312': attribute type 1 has an invalid length. [ 423.999865][T18385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.070736][T18385] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.104989][T17807] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.112173][T17807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.156837][T17807] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.164052][T17807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.908966][ T5642] Bluetooth: hci0: command tx timeout [ 425.341896][T18632] ±ÿ speed is unknown, defaulting to 1000 [ 425.421633][T18385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.829626][T18385] veth0_vlan: entered promiscuous mode [ 425.882007][T18385] veth1_vlan: entered promiscuous mode [ 426.005736][T18385] veth0_macvtap: entered promiscuous mode [ 426.040842][T18385] veth1_macvtap: entered promiscuous mode [ 426.057715][T18659] FAULT_INJECTION: forcing a failure. [ 426.057715][T18659] name failslab, interval 1, probability 0, space 0, times 0 [ 426.100140][T18385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.107496][T18659] CPU: 1 UID: 0 PID: 18659 Comm: syz.3.3335 Not tainted syzkaller #0 PREEMPT(full) [ 426.107519][T18659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 426.107530][T18659] Call Trace: [ 426.107537][T18659] [ 426.107545][T18659] dump_stack_lvl+0xe8/0x150 [ 426.107577][T18659] should_fail_ex+0x40c/0x560 [ 426.107606][T18659] should_failslab+0xa8/0x100 [ 426.107637][T18659] __kmalloc_cache_noprof+0xa8/0x660 [ 426.107663][T18659] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 426.107682][T18659] ? __kmalloc_cache_noprof+0x150/0x660 [ 426.107706][T18659] ? sctp_add_bind_addr+0x8c/0x370 [ 426.107724][T18659] ? sctp_add_bind_addr+0x8c/0x370 [ 426.107749][T18659] sctp_add_bind_addr+0x8c/0x370 [ 426.107773][T18659] sctp_copy_local_addr_list+0x31a/0x4e0 [ 426.107795][T18659] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 426.107816][T18659] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 426.107840][T18659] ? sctp_v4_is_any+0x35/0x60 [ 426.107861][T18659] ? sctp_copy_one_addr+0x93/0x360 [ 426.107883][T18659] sctp_bind_addr_copy+0xb3/0x3c0 [ 426.107904][T18659] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 426.107936][T18659] sctp_connect_new_asoc+0x2ff/0x6b0 [ 426.107963][T18659] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 426.107994][T18659] ? __local_bh_enable_ip+0xd0/0x130 [ 426.108015][T18659] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 426.108038][T18659] ? security_sctp_bind_connect+0x7e/0x2c0 [ 426.108068][T18659] sctp_sendmsg+0x159b/0x2d00 [ 426.108106][T18659] ? __pfx_sctp_sendmsg+0x10/0x10 [ 426.108136][T18659] ? aa_sk_perm+0x6d5/0x900 [ 426.108161][T18659] ? __might_fault+0xaf/0x130 [ 426.108186][T18659] ? sock_rps_record_flow+0x19/0x350 [ 426.108209][T18659] ? inet_sendmsg+0x298/0x320 [ 426.108228][T18659] ? __pfx_inet_sendmsg+0x10/0x10 [ 426.108245][T18659] sock_sendmsg_nosec+0x10e/0x180 [ 426.108274][T18659] __sys_sendto+0x408/0x5a0 [ 426.108293][T18659] ? ksys_write+0x1e6/0x270 [ 426.108315][T18659] ? __pfx___sys_sendto+0x10/0x10 [ 426.108338][T18659] ? __mutex_unlock_slowpath+0x731/0x900 [ 426.108393][T18659] ? __pfx_ksys_write+0x10/0x10 [ 426.108418][T18659] __x64_sys_sendto+0xde/0x100 [ 426.108438][T18659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.108458][T18659] do_syscall_64+0x174/0x580 [ 426.108479][T18659] ? trace_irq_disable+0x3b/0x140 [ 426.108503][T18659] ? clear_bhb_loop+0x40/0x90 [ 426.108526][T18659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.108544][T18659] RIP: 0033:0x7fb68c79de99 [ 426.108561][T18659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.108575][T18659] RSP: 002b:00007fb68d739028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 426.108593][T18659] RAX: ffffffffffffffda RBX: 00007fb68ca25fa0 RCX: 00007fb68c79de99 [ 426.108606][T18659] RDX: 0000000000000004 RSI: 0000200000000400 RDI: 0000000000000003 [ 426.108617][T18659] RBP: 00007fb68d739090 R08: 00002000000014c0 R09: 0000000000000010 [ 426.108628][T18659] R10: 0000000020004000 R11: 0000000000000246 R12: 0000000000000002 [ 426.108638][T18659] R13: 00007fb68ca26038 R14: 00007fb68ca25fa0 R15: 00007fff0578ce58 [ 426.108668][T18659] [ 426.425182][T18385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.483002][T18661] __nla_validate_parse: 8 callbacks suppressed [ 426.483020][T18661] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3336'. [ 426.688589][T18666] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3338'. [ 426.704894][T13157] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.714017][T13157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.778229][T18666] netlink: 'syz.3.3338': attribute type 58 has an invalid length. [ 426.800657][T18666] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3338'. [ 426.862609][T18671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3338'. [ 426.989309][ T5642] Bluetooth: hci0: command tx timeout [ 427.033840][T13157] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.100229][T13157] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.141192][T18665] ±ÿ speed is unknown, defaulting to 1000 [ 427.330675][ T1024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.349124][ T1024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.462644][T13157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.482538][T13157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.941792][T18679] veth0_macvtap: entered allmulticast mode [ 427.967692][T18679] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 428.020872][T18685] tc_dump_action: action bad kind [ 428.339499][T18703] ±ÿ speed is unknown, defaulting to 1000 [ 428.521584][T18718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3349'. [ 428.692700][T18723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3351'. [ 429.051482][T18740] syzkaller1: entered promiscuous mode [ 429.063635][T18740] syzkaller1: entered allmulticast mode [ 429.371410][T18749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3358'. [ 429.438674][T18756] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20003 [ 429.538336][T18762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3362'. [ 429.587478][T18763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3361'. [ 429.603337][T18767] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3364'. [ 429.751756][T18774] netlink: 'syz.4.3365': attribute type 28 has an invalid length. [ 429.902307][T18783] ±ÿ speed is unknown, defaulting to 1000 [ 430.063175][T18789] vlan2: entered allmulticast mode [ 430.076481][T18789] bridge1: entered allmulticast mode [ 430.092483][T18792] bridge1: port 1(erspan0) entered blocking state [ 430.110333][T18792] bridge1: port 1(erspan0) entered disabled state [ 430.128589][T18792] erspan0: entered allmulticast mode [ 430.147030][T18792] erspan0: entered promiscuous mode [ 430.163548][T18792] bridge1: port 1(erspan0) entered blocking state [ 430.170102][T18792] bridge1: port 1(erspan0) entered forwarding state [ 430.327526][T18797] bridge_slave_0: left allmulticast mode [ 430.333867][T18797] bridge_slave_0: left promiscuous mode [ 430.341545][T18797] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.354917][T18797] bridge_slave_1: left allmulticast mode [ 430.361835][T18797] bridge_slave_1: left promiscuous mode [ 430.367977][T18800] sctp: [Deprecated]: syz.2.3373 (pid 18800) Use of int in max_burst socket option. [ 430.367977][T18800] Use struct sctp_assoc_value instead [ 430.372380][T18797] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.404542][T18797] bond0: (slave bond_slave_0): Releasing backup interface [ 430.435778][T18797] bond0: (slave bond_slave_1): Releasing backup interface [ 430.466536][T18800] netlink: 'syz.2.3373': attribute type 10 has an invalid length. [ 430.477488][T18797] team0: Port device team_slave_0 removed [ 430.491857][T18797] team0: Port device team_slave_1 removed [ 430.501635][T18797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.510084][T18797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.520225][T18797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.538610][T18797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.550887][T18797] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 430.701802][T18800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.709902][T18806] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000 [ 430.731705][ T29] audit: type=1804 audit(1784934590.802:10): pid=18808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3376" name="/newroot/48/memory.events" dev="tmpfs" ino=261 res=1 errno=0 [ 430.758178][T18800] team0: Port device netdevsim1 added [ 430.774516][ T29] audit: type=1800 audit(1784934590.802:11): pid=18808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3376" name="memory.events" dev="tmpfs" ino=261 res=0 errno=0 [ 430.830673][T18806] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20001 [ 430.859519][ T29] audit: type=1804 audit(1784934590.842:12): pid=18808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3376" name="/newroot/48/memory.events" dev="tmpfs" ino=261 res=1 errno=0 [ 431.441598][T18843] hsr0: entered allmulticast mode [ 431.448803][T18845] netlink: 'syz.0.3385': attribute type 1 has an invalid length. [ 431.462985][T18843] hsr_slave_0: entered allmulticast mode [ 431.485891][T18843] hsr_slave_1: entered allmulticast mode [ 431.512161][T18843] __nla_validate_parse: 3 callbacks suppressed [ 431.512177][T18843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3384'. [ 431.550025][T18844] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 431.565506][T18844] bond2 (unregistering): Released all slaves [ 431.610298][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3384'. [ 431.723398][T18858] netlink: 'syz.2.3384': attribute type 11 has an invalid length. [ 431.903311][T18843] hsr_slave_0: left promiscuous mode [ 431.942628][T18843] hsr_slave_1: left promiscuous mode [ 431.973252][T18843] hsr0 (unregistering): left allmulticast mode [ 432.190258][T18860] ±ÿ speed is unknown, defaulting to 1000 [ 432.260513][T18871] netlink: 'syz.2.3394': attribute type 6 has an invalid length. [ 432.298544][T18871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3394'. [ 432.554013][T18882] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 432.579292][T18880] nbd5: detected capacity change from 0 to 63 [ 432.613042][ T1624] [ 432.615414][ T1624] ====================================================== [ 432.622542][ T1624] WARNING: possible circular locking dependency detected [ 432.629577][ T1624] syzkaller #0 Not tainted [ 432.633996][ T1624] ------------------------------------------------------ [ 432.641024][ T1624] kworker/1:1H/1624 is trying to acquire lock: [ 432.647193][ T1624] ffff888076a23068 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0x1150 [ 432.656290][ T1624] [ 432.656290][ T1624] but task is already holding lock: [ 432.663762][ T1624] ffff8880275351f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 432.672336][ T1624] [ 432.672336][ T1624] which lock already depends on the new lock. [ 432.672336][ T1624] [ 432.682759][ T1624] [ 432.682759][ T1624] the existing dependency chain (in reverse order) is: [ 432.691783][ T1624] [ 432.691783][ T1624] -> #7 (&cmd->lock){+.+.}-{4:4}: [ 432.699038][ T1624] __mutex_lock+0x19d/0x1550 [ 432.704192][ T1624] nbd_queue_rq+0xc1/0x1150 [ 432.709228][ T1624] blk_mq_dispatch_rq_list+0x499/0x1990 [ 432.714582][T18880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3397'. [ 432.715318][ T1624] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 432.731028][ T1624] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 432.737553][ T1624] blk_mq_run_work_fn+0x16c/0x300 [ 432.743116][ T1624] process_scheduled_works+0xa8e/0x14e0 [ 432.749295][ T1624] worker_thread+0xa47/0xfb0 [ 432.754427][ T1624] kthread+0x388/0x470 [ 432.759031][ T1624] ret_from_fork+0x514/0xb70 [ 432.764151][ T1624] ret_from_fork_asm+0x1a/0x30 [ 432.769444][ T1624] [ 432.769444][ T1624] -> #6 (set->srcu){.+.+}-{0:0}: [ 432.776578][ T1624] __synchronize_srcu+0xc9/0x2f0 [ 432.782061][ T1624] elevator_switch+0x1e8/0x7b0 [ 432.787380][ T1624] elevator_change+0x2fa/0x480 [ 432.792703][ T1624] elevator_set_default+0x375/0x440 [ 432.798434][ T1624] blk_register_queue+0x3f3/0x4e0 [ 432.803993][ T1624] __add_disk+0x6cb/0xe30 [ 432.808845][ T1624] add_disk_fwnode+0x100/0x3a0 [ 432.814135][ T1624] nbd_dev_add+0x733/0xb60 [ 432.819069][ T1624] nbd_init+0x15f/0x1e0 [ 432.823752][ T1624] do_one_initcall+0x250/0x870 [ 432.829050][ T1624] do_initcall_level+0x10a/0x1a0 [ 432.834518][ T1624] do_initcalls+0x59/0xa0 [ 432.839371][ T1624] kernel_init_freeable+0x29d/0x3e0 [ 432.845093][ T1624] kernel_init+0x1d/0x1d0 [ 432.849951][ T1624] ret_from_fork+0x514/0xb70 [ 432.855073][ T1624] ret_from_fork_asm+0x1a/0x30 [ 432.860362][ T1624] [ 432.860362][ T1624] -> #5 (&q->elevator_lock){+.+.}-{4:4}: [ 432.868179][ T1624] __mutex_lock+0x19d/0x1550 [ 432.873292][ T1624] elevator_change+0x1af/0x480 [ 432.878594][ T1624] elevator_set_none+0xb5/0x140 [ 432.883974][ T1624] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 432.890305][ T1624] nbd_start_device+0x189/0xb30 [ 432.895688][ T1624] nbd_genl_connect+0x1597/0x1c10 [ 432.901235][ T1624] genl_family_rcv_msg_doit+0x233/0x340 [ 432.907317][ T1624] genl_rcv_msg+0x614/0x7a0 [ 432.912384][ T1624] netlink_rcv_skb+0x226/0x4a0 [ 432.917694][ T1624] genl_rcv+0x28/0x40 [ 432.922208][ T1624] netlink_unicast+0x7bb/0x940 [ 432.927526][ T1624] netlink_sendmsg+0x813/0xb40 [ 432.932813][ T1624] sock_sendmsg_nosec+0x13a/0x180 [ 432.938368][ T1624] ____sys_sendmsg+0x54e/0x850 [ 432.943664][ T1624] ___sys_sendmsg+0x2a5/0x360 [ 432.948869][ T1624] __x64_sys_sendmsg+0x1b1/0x290 [ 432.954330][ T1624] do_syscall_64+0x174/0x580 [ 432.959458][ T1624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.965880][ T1624] [ 432.965880][ T1624] -> #4 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 432.974488][ T1624] blk_alloc_queue+0x544/0x690 [ 432.979778][ T1624] __blk_mq_alloc_disk+0x194/0x390 [ 432.985413][ T1624] nbd_dev_add+0x494/0xb60 [ 432.990351][ T1624] nbd_init+0x15f/0x1e0 [ 432.995040][ T1624] do_one_initcall+0x250/0x870 [ 433.000331][ T1624] do_initcall_level+0x10a/0x1a0 [ 433.005800][ T1624] do_initcalls+0x59/0xa0 [ 433.010654][ T1624] kernel_init_freeable+0x29d/0x3e0 [ 433.016387][ T1624] kernel_init+0x1d/0x1d0 [ 433.021257][ T1624] ret_from_fork+0x514/0xb70 [ 433.026386][ T1624] ret_from_fork_asm+0x1a/0x30 [ 433.031685][ T1624] [ 433.031685][ T1624] -> #3 (fs_reclaim){+.+.}-{0:0}: [ 433.038909][ T1624] fs_reclaim_acquire+0x71/0x100 [ 433.044383][ T1624] kmem_cache_alloc_noprof+0x64/0x5f0 [ 433.050283][ T1624] mas_alloc_nodes+0x291/0x350 [ 433.055567][ T1624] mas_preallocate+0x2cf/0x630 [ 433.060855][ T1624] vma_link+0x123/0x470 [ 433.065618][ T1624] insert_vm_struct+0x1bf/0x290 [ 433.070999][ T1624] create_init_stack_vma+0x5c1/0x9b0 [ 433.076816][ T1624] alloc_bprm+0x506/0x640 [ 433.081680][ T1624] kernel_execve+0x85/0x9c0 [ 433.086725][ T1624] try_to_run_init_process+0x13/0x60 [ 433.092549][ T1624] kernel_init+0xad/0x1d0 [ 433.097413][ T1624] ret_from_fork+0x514/0xb70 [ 433.102553][ T1624] ret_from_fork_asm+0x1a/0x30 [ 433.107850][ T1624] [ 433.107850][ T1624] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 433.115416][ T1624] __might_fault+0xcb/0x130 [ 433.120470][ T1624] _copy_from_iter+0x100/0x1660 [ 433.125852][ T1624] tcp_sendmsg_locked+0x2620/0x55c0 [ 433.131587][ T1624] tcp_sendmsg+0x2f/0x50 [ 433.136445][ T1624] sock_sendmsg_nosec+0x10e/0x180 [ 433.142006][ T1624] __sys_sendto+0x408/0x5a0 [ 433.147046][ T1624] __x64_sys_sendto+0xde/0x100 [ 433.152334][ T1624] do_syscall_64+0x174/0x580 [ 433.157463][ T1624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.163874][ T1624] [ 433.163874][ T1624] -> #1 (sk_lock-AF_INET-NBD){+.+.}-{0:0}: [ 433.171873][ T1624] lock_sock_nested+0x41/0x100 [ 433.177175][ T1624] inet_shutdown+0x6a/0x390 [ 433.182204][ T1624] nbd_mark_nsock_dead+0x2cb/0x550 [ 433.187847][ T1624] recv_work+0x1cee/0x1e10 [ 433.192780][ T1624] process_scheduled_works+0xa8e/0x14e0 [ 433.198848][ T1624] worker_thread+0xa47/0xfb0 [ 433.203965][ T1624] kthread+0x388/0x470 [ 433.208563][ T1624] ret_from_fork+0x514/0xb70 [ 433.213680][ T1624] ret_from_fork_asm+0x1a/0x30 [ 433.218966][ T1624] [ 433.218966][ T1624] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 433.226620][ T1624] __lock_acquire+0x1520/0x2cf0 [ 433.232011][ T1624] lock_acquire+0x106/0x350 [ 433.237044][ T1624] __mutex_lock+0x19d/0x1550 [ 433.242165][ T1624] nbd_queue_rq+0x373/0x1150 [ 433.247278][ T1624] blk_mq_dispatch_rq_list+0x499/0x1990 [ 433.253365][ T1624] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 433.260243][ T1624] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 433.266760][ T1624] blk_mq_run_work_fn+0x16c/0x300 [ 433.272317][ T1624] process_scheduled_works+0xa8e/0x14e0 [ 433.278389][ T1624] worker_thread+0xa47/0xfb0 [ 433.283507][ T1624] kthread+0x388/0x470 [ 433.288101][ T1624] ret_from_fork+0x514/0xb70 [ 433.293222][ T1624] ret_from_fork_asm+0x1a/0x30 [ 433.298509][ T1624] [ 433.298509][ T1624] other info that might help us debug this: [ 433.298509][ T1624] [ 433.308736][ T1624] Chain exists of: [ 433.308736][ T1624] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 433.308736][ T1624] [ 433.320837][ T1624] Possible unsafe locking scenario: [ 433.320837][ T1624] [ 433.328287][ T1624] CPU0 CPU1 [ 433.333655][ T1624] ---- ---- [ 433.339025][ T1624] lock(&cmd->lock); [ 433.343027][ T1624] lock(set->srcu); [ 433.349448][ T1624] lock(&cmd->lock); [ 433.355952][ T1624] lock(&nsock->tx_lock); [ 433.360367][ T1624] [ 433.360367][ T1624] *** DEADLOCK *** [ 433.360367][ T1624] [ 433.368503][ T1624] 4 locks held by kworker/1:1H/1624: [ 433.373783][ T1624] #0: ffff8880206d4540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 433.384840][ T1624] #1: ffffc90006bb7c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 433.397713][ T1624] #2: ffff888026760598 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 433.407136][ T1624] #3: ffff8880275351f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 433.416118][ T1624] [ 433.416118][ T1624] stack backtrace: [ 433.422007][ T1624] CPU: 1 UID: 0 PID: 1624 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 433.422026][ T1624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 433.422037][ T1624] Workqueue: kblockd blk_mq_run_work_fn [ 433.422057][ T1624] Call Trace: [ 433.422062][ T1624] [ 433.422068][ T1624] dump_stack_lvl+0xe8/0x150 [ 433.422092][ T1624] print_circular_bug+0x2e1/0x300 [ 433.422110][ T1624] check_noncircular+0x12e/0x150 [ 433.422128][ T1624] __lock_acquire+0x1520/0x2cf0 [ 433.422154][ T1624] ? irqentry_exit+0x218/0x8f0 [ 433.422173][ T1624] ? lockdep_hardirqs_on+0x7a/0x110 [ 433.422191][ T1624] ? irqentry_exit+0x218/0x8f0 [ 433.422208][ T1624] ? trace_irq_disable+0x3b/0x140 [ 433.422241][ T1624] ? nbd_queue_rq+0x373/0x1150 [ 433.422255][ T1624] lock_acquire+0x106/0x350 [ 433.422276][ T1624] ? nbd_queue_rq+0x373/0x1150 [ 433.422297][ T1624] __mutex_lock+0x19d/0x1550 [ 433.422315][ T1624] ? nbd_queue_rq+0x373/0x1150 [ 433.422331][ T1624] ? hrtimer_start_range_ns_common+0x812/0xb90 [ 433.422350][ T1624] ? nbd_queue_rq+0x373/0x1150 [ 433.422366][ T1624] ? __pfx___mutex_lock+0x10/0x10 [ 433.422387][ T1624] ? rcu_is_watching+0x15/0xb0 [ 433.422401][ T1624] ? trace_sched_exit_tp+0x3a/0x130 [ 433.422421][ T1624] nbd_queue_rq+0x373/0x1150 [ 433.422435][ T1624] ? __hrtimer_rearm_deferred+0x99/0x420 [ 433.422456][ T1624] ? __pfx_nbd_queue_rq+0x10/0x10 [ 433.422472][ T1624] ? irqentry_exit+0x218/0x8f0 [ 433.422490][ T1624] ? __pfx___schedule+0x10/0x10 [ 433.422505][ T1624] ? irqentry_exit+0x218/0x8f0 [ 433.422525][ T1624] blk_mq_dispatch_rq_list+0x499/0x1990 [ 433.422554][ T1624] ? sbitmap_get+0x229/0x390 [ 433.422578][ T1624] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 433.422601][ T1624] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 433.422626][ T1624] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 433.422659][ T1624] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 433.422686][ T1624] ? blk_mq_run_work_fn+0x144/0x300 [ 433.422704][ T1624] ? blk_mq_run_work_fn+0x144/0x300 [ 433.422724][ T1624] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 433.422754][ T1624] ? blk_mq_run_work_fn+0x144/0x300 [ 433.422770][ T1624] blk_mq_run_work_fn+0x16c/0x300 [ 433.422787][ T1624] ? process_scheduled_works+0xa20/0x14e0 [ 433.422805][ T1624] process_scheduled_works+0xa8e/0x14e0 [ 433.422833][ T1624] ? __pfx_process_scheduled_works+0x10/0x10 [ 433.422853][ T1624] ? assign_work+0x3cf/0x5d0 [ 433.422872][ T1624] worker_thread+0xa47/0xfb0 [ 433.422895][ T1624] ? __kthread_parkme+0x71/0x1f0 [ 433.422919][ T1624] kthread+0x388/0x470 [ 433.422941][ T1624] ? __pfx_worker_thread+0x10/0x10 [ 433.422958][ T1624] ? __pfx_kthread+0x10/0x10 [ 433.422980][ T1624] ret_from_fork+0x514/0xb70 [ 433.423004][ T1624] ? __pfx_ret_from_fork+0x10/0x10 [ 433.423026][ T1624] ? __switch_to+0xc89/0x1420 [ 433.423046][ T1624] ? __pfx_kthread+0x10/0x10 [ 433.423069][ T1624] ret_from_fork_asm+0x1a/0x30 [ 433.423089][ T1624] [ 433.724325][T18880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3397'. [ 433.733262][T18880] netlink: 'syz.3.3397': attribute type 18 has an invalid length. [ 433.767076][T18886] ±ÿ speed is unknown, defaulting to 1000 [ 433.821169][ T5642] block nbd5: Receive control failed (result -104)