last executing test programs: 1.930575639s ago: executing program 2 (id=2354): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file1\x00', 0x0, 0x18, r0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40e00, 0x52, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @void}, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x2e, 0xb, 0x3, 0x3c}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x101}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, [0x0, 0x0, 0x0, 0xff], [0xffffffff], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x8, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) unshare(0x22020600) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x67, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r5}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) 1.703359256s ago: executing program 2 (id=2357): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) close(0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8024, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x37c) 1.680646998s ago: executing program 4 (id=2358): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x54, 0x0, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 1.5266276s ago: executing program 4 (id=2362): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x21, 0x2b, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x48}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x228c92809f6cae87}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x3, &(0x7f0000000100)=""/3, 0x40f00, 0x0, '\x00', r2, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x3, 0xa, 0xffffffff, 0x39}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x2, 0x5, 0x5, 0x7}, {0x5, 0x5, 0xd, 0x2}, {0x5, 0x3, 0x6, 0x4}, {0x1, 0x2, 0x10, 0x7}, {0x1, 0x1, 0xc, 0x1}, {0x2, 0x405, 0x2, 0x5}, {0x0, 0x3, 0x4, 0xd}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={0xffffffffffffffff}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r4, 0x0, 0x7f}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x26e1, 0x0) connect(r5, &(0x7f0000001700)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x80) close(r5) connect$unix(r5, &(0x7f0000000280)=@file={0x0, './file1\x00'}, 0xc7) connect$unix(r5, &(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x6e) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x12, &(0x7f0000000540)=@raw=[@jmp={0x5, 0x1, 0x2, 0x0, 0x4, 0xc, 0x1}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x5}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], &(0x7f0000000600)='GPL\x00', 0x38, 0x1000, &(0x7f0000000640)=""/4096, 0x41100, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001640)={0x4, 0x5, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f00000016c0)=[{0x2, 0x1, 0x5, 0xb}, {0x2, 0x3, 0x2, 0xa}, {0x1, 0x5, 0xd, 0xa}], 0x10, 0x5}, 0x94) pipe(&(0x7f00000017c0)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=@bridge_setlink={0x80, 0x13, 0x400, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x10801, 0x11021}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ip6tnl0\x00'}, @IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x9}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}]}, @IFLA_PROP_LIST={0x4}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1a18}, @IFLA_PHYS_SWITCH_ID={0xa, 0x24, "bc80fc71f804"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) 1.373099635s ago: executing program 4 (id=2365): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x1, @remote}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x94}]}, 0x10) setsockopt(r2, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) sendmsg$can_bcm(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x0, 0x321, 0x10, {0x77359400}, {}, {0x2, 0x1, 0x1}, 0x1, @can={{0x3, 0x1}, 0x4, 0x2, 0x0, 0x0, "ded39d03587af1bf"}}, 0x48}}, 0x48080) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r5, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close(r4) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x4, 0x3}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x48010}, 0x4889) socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r7) getsockname$packet(r7, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r8, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @local}, 0x14) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000180)=0x4) sendmsg$key(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02110d00200000002cbd7000fcdbdf2508001800060837007837dd625da3e69e5a5918439760f3e16e4f3c795ae3f27dc2d8031a9216b045e61783d6cd7f84eff6d9eda5e417cbae58700f063080b800040002000e000000030056000000000000d0060000000000000700000000000000010015004e20000002001000000004d3000004d200000000010014000700000002001300050000002abd70000435000002001000000004d5000004d200000000010015004e2100000900180008003a00e0f0e29b3253e4735432a2a75329c86f3f11fe983728cee06b2d2c602e8cefd790a7fc01a83cff189c08fff6f128ee8141da6022346a18487f66000000000000"], 0x100}}, 0x800) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.299833755s ago: executing program 0 (id=2367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000050009"], 0x184}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32, @ANYBLOB="0000d40000000000a5"], 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22041, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x4}]}, 0x68}}, 0x0) 1.255614495s ago: executing program 1 (id=2369): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x88, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a540000d90200000100000480240001800b000100736f636b65740000140002800800023f00000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006d0001000000000000000000003c0000", @ANYRES32=r4, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x401, @dev={0xfe, 0x80, '\x00', 0x24}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@rthdrdstopts={{0x11, 0x29, 0x37, {0x1}}}], 0x18}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x12) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000015c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="050327ad7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0xa4, r8, 0xddd160fc81213198, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x8}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 1.115981131s ago: executing program 4 (id=2370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004894}, 0x20000810) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x34004000) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) close(0x3) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000300)=0xd, 0x4) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="4337c0a4746d31e8d446a8849ed55b1565c6df1d43798fc5bdc1df98f2a119e237b86d3f4c75db963f707cee69f8fd303dfdbc6481ad96d4441dc42d0b1a15b83f7d5c973384677eaaefa259ea480d1457f862b48c94770e96c2f9626e6706afd389960b2664f77cc5cd773c592a6e48fc98ec31853a6c74978bfee3efddae5b404ff23871fa5661342f964c51d3", 0x8e}, {&(0x7f0000000480)="4928dc4e350fcf9bd67d15c042a02cf102a57c9681246ba453ad6d0e0893f6ae2f5406af0f768ab7eb9b76cfef63519a23cf5758a9ee48bfce5cad2bcadd96ac38b3361cdc11f0fe29025c4cee294da0d1d63c1520a2eed863c23cfb0bedd716625320e3e2f74c7a7a847bd708f82e675fd82d406de66d2386161e8a5e5f051186e22be63ede3c2f66d5f71c58bc0b72f29ae37fb3a285c2c36017afb308421b", 0xa0}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="babea11f1400000000000000290000003e0000000800000000000000140000000000000029000000340000000e00000000000000"], 0x170}}], 0x1, 0x804) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) shutdown(0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f00000001c0)='GPL\x00'}, 0x90) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000440)={r3}, &(0x7f00000001c0)=0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000ffdbdf256c00000008000300db7de8bacbbd22e85a2be505d058efc8269ac314d2e2600bdef074c76a493e1a1c4fba1607c3846a7ca239b6099fe3c79c38a8057dd9eca8b1a16a55d5be2ea2e28ce2abaa1cf8030c036a2e70b5b4095651aa93513a8a3543f31ca1b972cd7b02095e5af045f204176593de7f59d614c2e4053a5c80365c57bcba75ee806dc7f7efd3ed375f83b7e56231189f1f5cfc0d420b59c5", @ANYRES32=r8, @ANYBLOB='\b\x00&\x00l\t\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x2404c044}, 0x20008054) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 1.115314142s ago: executing program 0 (id=2371): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x1a0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x170, 0x2, [@TCA_GRED_LIMIT={0x8}, @TCA_GRED_DPS={0x10}, @TCA_GRED_STAB={0xfffffffffffffdaa, 0x2, "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"}, @TCA_GRED_DPS={0x10}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x1a0}}, 0x0) connect$rose(r0, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x3, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x568, 0x3c8, 0x12, 0x600, 0x0, 0x202, 0x498, 0x2e8, 0x2e8, 0x498, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {0xff}}, 0x0, 0x398, 0x3c8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa0318236000000c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b50700", 0x2}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x3f, 0x0, [{0x8, 0xb, 0x7}, {0x1, 0x4, 0x80, 0x2}, {0x9, 0x4, 0xf8, 0xfffffff5}, {0x3, 0x8d, 0x5, 0xfffffc93}, {0x3, 0x0, 0x0, 0x4}, {0xa, 0x60, 0xee, 0xb}, {0x81, 0x0, 0xf3, 0x100}, {0x0, 0xff, 0x81, 0xed65}, {0x1bd4, 0x0, 0x6, 0xa}, {0x800, 0x1, 0xf1, 0x1}, {0x8000, 0x82, 0x9, 0x3}, {0x617, 0x9, 0xb9, 0x864}, {0x2, 0x5, 0x10, 0x1}, {0xdb8b, 0xb, 0x9, 0x2}, {0x8, 0x40, 0x8}, {0xfff1, 0x2, 0x5, 0x2}, {0x10, 0xc7, 0x2, 0x8}, {0x6, 0x0, 0xd, 0x80}, {0x95f1, 0x8, 0x2, 0x600000}, {0x1, 0x2f, 0xfb, 0x6}, {0x6, 0x4c, 0xfc, 0x80}, {0x4c24, 0x83, 0x7, 0xcbf4d91}, {0x3, 0x7, 0x9, 0xc9}, {0x3, 0x2, 0x7, 0x7fff}, {0x9, 0x6, 0x3, 0x6a9}, {0x3, 0x3, 0x10, 0x7}, {0x400, 0x1, 0x7, 0x8000}, {0x5a8a, 0x3, 0x5, 0x8}, {0x9d5, 0xff, 0xb, 0xedc6}, {0x9, 0xc, 0xfa, 0x1}, {0x2, 0x9, 0xae, 0xb478}, {0x5, 0x9, 0x0, 0x3}, {0x7fff, 0xd, 0x2, 0x9}, {0x1, 0x96, 0x5, 0xfffffffe}, {0x4, 0xeb, 0x10}, {0x8, 0x4, 0x0, 0x5}, {0x9, 0x0, 0xd, 0x4}, {0x6, 0xd6, 0xe, 0x3}, {0x5, 0xc, 0xc, 0x3}, {0x0, 0x6, 0x3, 0x3}, {0xd90, 0x2, 0x0, 0x1}, {0x2, 0xfd, 0x7f, 0x400000}, {0xaa0, 0xc, 0xff}, {0x7, 0x9, 0x1, 0xa6c}, {0x8, 0x9, 0x3, 0x5}, {0x7db0, 0xf6, 0x4, 0x6}, {0x7, 0x3, 0x8, 0xfffff6d9}, {0x8e35, 0x0, 0x5, 0x3ff}, {0xcfa6, 0x9, 0x9, 0x7}, {0x4be, 0x7, 0x1, 0x3ff}, {0x16bd, 0xff, 0xa, 0x47c}, {0xd8b, 0x3, 0x6, 0xd635}, {0x5, 0x3, 0x0, 0x6}, {0x2, 0x9, 0x5, 0x49}, {0x8, 0x3, 0x31, 0x3de}, {0xaa7, 0x0, 0xff, 0xfffffc4a}, {0x400, 0x81, 0xc, 0x1}, {0x1, 0x9, 0x4, 0x81}, {0x30, 0x6, 0x9, 0x6}, {0x8, 0x81, 0xd, 0x149}, {0x7f, 0x7, 0x3, 0x59b}, {0x9, 0x1d, 0x7, 0x3}, {0xf, 0x4d, 0x1, 0x6}, {0x6, 0x3, 0x1, 0xfffffffb}], {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) sendmsg$alg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="02000000751acbc37e3f3c975ca42ff9eaca612497c4490d2f6f5c815bfdd938e5474531a3210bcf0d99b96375692e0ce6bfb89eb2a07d3645c05c1adb1ca4688feee47ca8b22b354ccf7cfae7", 0x4d}], 0x1}, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x1ce, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x198, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0xff, 0x2b, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x88, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}]}}}}}}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x1a0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x170, 0x2, [@TCA_GRED_LIMIT={0x8}, @TCA_GRED_DPS={0x10}, @TCA_GRED_STAB={0xfffffffffffffdaa, 0x2, "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"}, @TCA_GRED_DPS={0x10}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x1a0}}, 0x0) (async) connect$rose(r0, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x3, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x568, 0x3c8, 0x12, 0x600, 0x0, 0x202, 0x498, 0x2e8, 0x2e8, 0x498, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {0xff}}, 0x0, 0x398, 0x3c8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa0318236000000c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b50700", 0x2}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x3f, 0x0, [{0x8, 0xb, 0x7}, {0x1, 0x4, 0x80, 0x2}, {0x9, 0x4, 0xf8, 0xfffffff5}, {0x3, 0x8d, 0x5, 0xfffffc93}, {0x3, 0x0, 0x0, 0x4}, {0xa, 0x60, 0xee, 0xb}, {0x81, 0x0, 0xf3, 0x100}, {0x0, 0xff, 0x81, 0xed65}, {0x1bd4, 0x0, 0x6, 0xa}, {0x800, 0x1, 0xf1, 0x1}, {0x8000, 0x82, 0x9, 0x3}, {0x617, 0x9, 0xb9, 0x864}, {0x2, 0x5, 0x10, 0x1}, {0xdb8b, 0xb, 0x9, 0x2}, {0x8, 0x40, 0x8}, {0xfff1, 0x2, 0x5, 0x2}, {0x10, 0xc7, 0x2, 0x8}, {0x6, 0x0, 0xd, 0x80}, {0x95f1, 0x8, 0x2, 0x600000}, {0x1, 0x2f, 0xfb, 0x6}, {0x6, 0x4c, 0xfc, 0x80}, {0x4c24, 0x83, 0x7, 0xcbf4d91}, {0x3, 0x7, 0x9, 0xc9}, {0x3, 0x2, 0x7, 0x7fff}, {0x9, 0x6, 0x3, 0x6a9}, {0x3, 0x3, 0x10, 0x7}, {0x400, 0x1, 0x7, 0x8000}, {0x5a8a, 0x3, 0x5, 0x8}, {0x9d5, 0xff, 0xb, 0xedc6}, {0x9, 0xc, 0xfa, 0x1}, {0x2, 0x9, 0xae, 0xb478}, {0x5, 0x9, 0x0, 0x3}, {0x7fff, 0xd, 0x2, 0x9}, {0x1, 0x96, 0x5, 0xfffffffe}, {0x4, 0xeb, 0x10}, {0x8, 0x4, 0x0, 0x5}, {0x9, 0x0, 0xd, 0x4}, {0x6, 0xd6, 0xe, 0x3}, {0x5, 0xc, 0xc, 0x3}, {0x0, 0x6, 0x3, 0x3}, {0xd90, 0x2, 0x0, 0x1}, {0x2, 0xfd, 0x7f, 0x400000}, {0xaa0, 0xc, 0xff}, {0x7, 0x9, 0x1, 0xa6c}, {0x8, 0x9, 0x3, 0x5}, {0x7db0, 0xf6, 0x4, 0x6}, {0x7, 0x3, 0x8, 0xfffff6d9}, {0x8e35, 0x0, 0x5, 0x3ff}, {0xcfa6, 0x9, 0x9, 0x7}, {0x4be, 0x7, 0x1, 0x3ff}, {0x16bd, 0xff, 0xa, 0x47c}, {0xd8b, 0x3, 0x6, 0xd635}, {0x5, 0x3, 0x0, 0x6}, {0x2, 0x9, 0x5, 0x49}, {0x8, 0x3, 0x31, 0x3de}, {0xaa7, 0x0, 0xff, 0xfffffc4a}, {0x400, 0x81, 0xc, 0x1}, {0x1, 0x9, 0x4, 0x81}, {0x30, 0x6, 0x9, 0x6}, {0x8, 0x81, 0xd, 0x149}, {0x7f, 0x7, 0x3, 0x59b}, {0x9, 0x1d, 0x7, 0x3}, {0xf, 0x4d, 0x1, 0x6}, {0x6, 0x3, 0x1, 0xfffffffb}], {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) (async) sendmsg$alg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="02000000751acbc37e3f3c975ca42ff9eaca612497c4490d2f6f5c815bfdd938e5474531a3210bcf0d99b96375692e0ce6bfb89eb2a07d3645c05c1adb1ca4688feee47ca8b22b354ccf7cfae7", 0x4d}], 0x1}, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) (async) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) syz_emit_ethernet(0x1ce, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x198, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0xff, 0x2b, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x88, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}]}}}}}}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) (async) 1.115117447s ago: executing program 3 (id=2372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x54, r1, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 1.040038918s ago: executing program 3 (id=2373): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271f, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071104100000000009500000000000000a33272ed07fecfa683c7db3a353f62d6cfc9f7a93de571a3e372c15e5efd1aafec45bfe8a03162160ecd007a26716cbf193c6f3e2d6921d1f60d156a5a9e83a4275bc6907fafa1f757d59b4d122826dfe325ee09338dc4cd824bdae8019d0f53af8c9ac607489002211905f67e6c4bec5de4116b3b00bd4ac77c682fc23e8dfb7e512729ec0e9e05dc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$SIOCSIFMTU(r2, 0x891f, &(0x7f0000000000)={'dummy0\x00'}) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/229, 0xe5}, {&(0x7f0000003a80)=""/4104, 0x1008}, {&(0x7f0000000340)=""/240, 0xf0}], 0x4}, 0x2101}, {{0x0, 0xfffffffffffffe4b, 0x0}, 0x20c}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)=""/138, 0x8a}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4100, 0x1004}, {&(0x7f0000006080)=""/4050, 0xfd2}, {&(0x7f0000000100)=""/117, 0x75}], 0x5}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}], 0x8, 0x40010020, 0x0) 978.753584ms ago: executing program 2 (id=2374): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 868.038656ms ago: executing program 4 (id=2375): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write(r2, &(0x7f0000000180)="a899be4bd6aae821dd299aceee3cb3053b1231d7cabb6800880bb92c61531b6d58d92abf173126afaa3411db1ec1fae1398815b69a63d71124247b42cbb145bcf3907f53bf19185ead4d211c60bb", 0x4e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'macvtap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90009118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000140)="09c69e16e160673a133d6164467635bd", 0x10}], 0x2) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000002480)="3c00000058001f000307f4f9002304000a04d6490800010002010002070003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) write(r0, &(0x7f0000000100)="520003000100b8", 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) write(r2, &(0x7f0000000180)="a899be4bd6aae821dd299aceee3cb3053b1231d7cabb6800880bb92c61531b6d58d92abf173126afaa3411db1ec1fae1398815b69a63d71124247b42cbb145bcf3907f53bf19185ead4d211c60bb", 0x4e) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'macvtap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}) (async) writev(r1, &(0x7f0000000200)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90009118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000140)="09c69e16e160673a133d6164467635bd", 0x10}], 0x2) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) socket(0x10, 0x3, 0x0) (async) write(r4, &(0x7f0000002480)="3c00000058001f000307f4f9002304000a04d6490800010002010002070003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) (async) write(r0, &(0x7f0000000100)="520003000100b8", 0x7) (async) 867.781359ms ago: executing program 0 (id=2376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0400000000000000f91200000008000300", @ANYRES32=r2, @ANYBLOB="040013000a000600080211000001000006001000800500000600120001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 866.264677ms ago: executing program 1 (id=2377): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071103100000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x6933}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) 827.001242ms ago: executing program 2 (id=2378): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x298, 0x98, 0x168, 0x200, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x1}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) accept4(r0, &(0x7f0000000000)=@ieee802154={0x24, @short}, &(0x7f0000000080)=0x80, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x6, @private1, 0x7ff}], 0x2c) 800.171548ms ago: executing program 3 (id=2379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x42, 0x4, 0x2c0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {0xff}, {}, 0x73, 0x0, 0x48}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x60010000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@state={{0x28}, {0x5d0e4fb0}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x7f, 0xa, 0xe, 0xb, 0x153b, 0xd4, 0x2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x42, 0x4, 0x2c0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {0xff}, {}, 0x73, 0x0, 0x48}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x60010000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@state={{0x28}, {0x5d0e4fb0}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x7f, 0xa, 0xe, 0xb, 0x153b, 0xd4, 0x2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) (async) 798.812031ms ago: executing program 0 (id=2380): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x4, 0x2, 0x9, 0xefeb, 0x8, 0x6, 0x1, 0x9}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x60}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) 695.454382ms ago: executing program 1 (id=2381): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100003040000000004000000000000002cf65ad1030250f32501a3f87760ccc257c1b8c7769754af205952fe1bc9012dcbea7a9973f19d3db74ed5790000000000000000000000000000000000000069ba98dbc8f99f6dc76ad873a31352312060d96793910e511fe0811a9ffecc26811dd1bf932e4b13ac9a2f230ef3225a5d079ebe1d0c5bff222eaa63e946af9c590c083abbb337292af61da3faef674ca1c0ca694007d582ca4b3ee6ed1a33d73d06e77e108df077df6d6458b124a2c6eefe1e821e7b31897b006315409f408cf6ddba845d1dc5b7d75b6370e5aa64b40eae865618", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001e0001000000"], 0x3c}, 0x1, 0x2000000000000000}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000040)={0x6, 'veth1_to_batadv\x00', {0x4000}, 0x38}) 661.687544ms ago: executing program 2 (id=2382): r0 = socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x84, 0x2, 0x4}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) (async) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x4, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd26, 0xffffffff, {0xa, 0x14, 0x20, 0x40, 0x3, 0x0, 0x0, 0x7}, [@FRA_DST={0x14, 0x1, @mcast2}, @FRA_SRC={0x14, 0x2, @private2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 623.87584ms ago: executing program 3 (id=2383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x54, r1, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 531.70818ms ago: executing program 1 (id=2384): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207f00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r0, r1, 0xf, 0x0, @val=@perf_event={0x8000000}}, 0x18) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3e}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x4c}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000000c0)={@empty, r6}, 0x14) 261.932508ms ago: executing program 0 (id=2385): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000064c0)=0x40) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 75.91569ms ago: executing program 3 (id=2386): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0xffff, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000140001000000000000000000e0000002000000000000000000000000000000000000344f0e1e6c32d929000000000000000000000a"], 0xb8}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000004dc0), &(0x7f0000004e00)=0x8) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x5f, 0x5f, 0xa0]}}, &(0x7f0000000200)=""/146, 0x31, 0x92, 0x1}, 0x20) ioctl$SIOCSIFMTU(r6, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000040)=0x3, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x100, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32, @ANYBLOB="180006"], 0x34}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000400), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x2, [@enum={0x8, 0x6, 0x0, 0x6, 0x4, [{0x6, 0x5}, {0x4}, {0xa}, {0x4, 0x6}, {0x9, 0x8f}, {0xf, 0x9}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x4}, {}, {}, {}]}, @fwd, @type_tag={0x9, 0x0, 0x0, 0x12, 0x5}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0xc2}, 0x28) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3}, 0x80) getsockopt$ARPT_SO_GET_INFO(r7, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0xfffffffa, 0x6, 0x8000]}, &(0x7f0000000100)=0x44) 75.698026ms ago: executing program 1 (id=2387): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f00000032c0)={0x20, r7, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x140a, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x9c, 0x10, 0x503, 0x70bd26, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000009, 0x81}}]}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80000001}}]}]}}}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x9c}}, 0x0) 75.434207ms ago: executing program 2 (id=2388): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f00000000c0)='+7', 0x2, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xfff) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)={0x30, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4040) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x100}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 73.683881ms ago: executing program 4 (id=2389): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket(0x10, 0x80003, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000000), 0x4) close(r2) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlinkprop={0x20, 0x6c, 0xb21, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x34400, 0x10010}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="8000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000580012800b00010067656e6576650000480002800500090001000000140007000000000000000000000000000000000105000d000000000005000c000100000005000400810000000500040009000000060005004e20000008000a00", @ANYRES32=r5], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r6 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x5}, 0x14}}, 0x8081) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) sendmsg$alg(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xc80c0}, 0x1) sendmsg$NL80211_CMD_SET_CHANNEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x40000041) 73.267875ms ago: executing program 0 (id=2390): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0xdb9, 0x7}, &(0x7f0000000180)=0x10) r2 = socket(0x10, 0x3, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newchain={0x48, 0x64, 0x20, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xa, 0xffe0}, {0x10, 0x10}, {0x0, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @local}]}}, @TCA_CHAIN={0x8, 0xb, 0x7b56}]}, 0x48}}, 0x0) 39.596987ms ago: executing program 1 (id=2391): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r0) (async) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xd1}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='workqueue_queue_work\x00', r0, 0x0, 0xe}, 0x18) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 0s ago: executing program 3 (id=2392): r0 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@fallback=r0, 0x14, 0x0, 0x1, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (rerun: 64) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x2, &(0x7f0000000680)=@raw=[@map_fd={0x18, 0x6}], &(0x7f00000006c0)='GPL\x00', 0x4, 0x12, &(0x7f0000000740)=""/18, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x0, 0x2, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, r2, 0x17, 0x0, @val=@netkit={@void, @value=r4, @void, @void, r3}}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x9, 0xb, 0x3, 0x10001, 0x7, 0xf}, {0x3ff, 0x1, 0x9, 0x7, 0x4, 0x47}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) sendto$packet(r0, 0x0, 0x0, 0x8000050, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0xfe}, 0x14) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000030601040000fcffffff000007000008090002007379"], 0x4c}}, 0x0) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002dbd700001dcdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) (async) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, r10, 0x3, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x80000001, 0x5, 0x6, 0x1, r11, 0xa, '\x00', r5, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) kernel console output (not intermixed with test programs): 0] type 1 family 0 port 8472 - 0 [ 130.831281][ T7813] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 131.295452][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.321804][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.386021][ T7838] netlink: 'syz.3.486': attribute type 10 has an invalid length. [ 131.431101][ T7838] dummy0: entered promiscuous mode [ 131.439721][ T7838] bridge0: port 3(dummy0) entered blocking state [ 131.446414][ T7838] bridge0: port 3(dummy0) entered disabled state [ 131.453956][ T7838] dummy0: entered allmulticast mode [ 132.048204][ T7880] tipc: Started in network mode [ 132.053227][ T7880] tipc: Node identity 6e9f58a44231, cluster identity 4711 [ 132.118148][ T7880] tipc: Enabled bearer , priority 0 [ 132.152256][ T7882] syzkaller0: entered promiscuous mode [ 132.175573][ T7882] syzkaller0: entered allmulticast mode [ 132.198497][ T7880] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 132.312038][ T7880] tipc: Resetting bearer [ 132.331350][ T7897] netlink: 'syz.4.503': attribute type 17 has an invalid length. [ 132.357514][ T7897] __nla_validate_parse: 12 callbacks suppressed [ 132.357529][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.503'. [ 132.393360][ T7876] tipc: Resetting bearer [ 132.413167][ T7897] netlink: 28 bytes leftover after parsing attributes in process `syz.4.503'. [ 132.503079][ T7876] tipc: Disabling bearer [ 132.606327][ T7908] netlink: 'syz.3.504': attribute type 5 has an invalid length. [ 132.842961][ T7926] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 132.874210][ T7922] netlink: 'syz.3.507': attribute type 10 has an invalid length. [ 132.905197][ T7922] bond0: (slave wlan1): Opening slave failed [ 132.934786][ T7929] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 132.993003][ T7925] netlink: 10 bytes leftover after parsing attributes in process `syz.2.506'. [ 133.053579][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.275647][ T7949] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 133.323365][ T7949] netlink: 104 bytes leftover after parsing attributes in process `syz.3.514'. [ 133.488136][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 133.587866][ T7964] netlink: 'syz.2.520': attribute type 21 has an invalid length. [ 133.627391][ T7964] netlink: 128 bytes leftover after parsing attributes in process `syz.2.520'. [ 133.638886][ T7964] netlink: 'syz.2.520': attribute type 5 has an invalid length. [ 133.652871][ T7964] netlink: 3 bytes leftover after parsing attributes in process `syz.2.520'. [ 133.750922][ T7975] Bluetooth: MGMT ver 1.23 [ 133.787115][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.522'. [ 134.096063][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 134.151331][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 134.393967][ T8011] netlink: 'syz.1.533': attribute type 8 has an invalid length. [ 134.642919][ T8024] vlan3: entered promiscuous mode [ 134.659180][ T8026] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 134.844217][ T8037] netlink: 'syz.3.542': attribute type 1 has an invalid length. [ 135.049446][ T8049] xt_l2tp: wrong L2TP version: 0 [ 135.055763][ T8050] Cannot find add_set index 0 as target [ 135.298782][ T8064] tipc: Enabling of bearer rejected, failed to enable media [ 135.826153][ T5147] Bluetooth: hci2: command 0x0401 tx timeout [ 135.832305][ T5840] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 136.267173][ T8102] netlink: 'syz.3.558': attribute type 7 has an invalid length. [ 136.320981][ T7639] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.329912][ T8102] netlink: 'syz.3.558': attribute type 7 has an invalid length. [ 136.348905][ T7639] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.378872][ T7639] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.421490][ T7639] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.869466][ T8148] openvswitch: netlink: Missing key (keys=40, expected=80) [ 137.271929][ T8170] xt_connbytes: Forcing CT accounting to be enabled [ 137.280693][ T8170] Cannot find set identified by id 0 to match [ 137.420644][ T8174] __nla_validate_parse: 21 callbacks suppressed [ 137.420660][ T8174] netlink: 80 bytes leftover after parsing attributes in process `syz.1.587'. [ 137.433626][ T8176] netlink: 80 bytes leftover after parsing attributes in process `syz.1.587'. [ 137.913848][ T8198] netlink: 'syz.3.596': attribute type 29 has an invalid length. [ 137.945940][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'. [ 138.183997][ T8222] raw_sendmsg: syz.1.600 forgot to set AF_INET. Fix it! [ 138.285053][ T8228] tipc: Enabled bearer , priority 0 [ 138.301446][ T8228] syzkaller0: entered promiscuous mode [ 138.335895][ T8228] syzkaller0: entered allmulticast mode [ 138.413280][ T8228] tipc: Resetting bearer [ 138.446938][ T8223] tipc: Resetting bearer [ 138.517424][ T8223] tipc: Disabling bearer [ 138.528284][ T8242] netlink: 'syz.0.606': attribute type 1 has an invalid length. [ 138.540677][ T8242] netlink: 224 bytes leftover after parsing attributes in process `syz.0.606'. [ 138.556677][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'. [ 138.601386][ T8242] netlink: 'syz.0.606': attribute type 1 has an invalid length. [ 138.637547][ T8242] netlink: 208 bytes leftover after parsing attributes in process `syz.0.606'. [ 138.756843][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 138.799450][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.607'. [ 139.051835][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 139.088158][ T8260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.610'. [ 139.226252][ T8270] netlink: 'syz.1.614': attribute type 11 has an invalid length. [ 139.312750][ T8267] netlink: 'syz.1.614': attribute type 1 has an invalid length. [ 139.351831][ T8272] syzkaller1: entered promiscuous mode [ 139.366222][ T8272] syzkaller1: entered allmulticast mode [ 139.776001][ T8293] netlink: zone id is out of range [ 139.787904][ T8297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.801215][ T8293] netlink: zone id is out of range [ 139.807405][ T8295] netlink: 'syz.3.622': attribute type 30 has an invalid length. [ 139.809012][ T8293] netlink: zone id is out of range [ 139.837194][ T8293] netlink: zone id is out of range [ 139.844345][ T8293] netlink: zone id is out of range [ 139.850461][ T8293] netlink: zone id is out of range [ 139.856311][ T8293] netlink: zone id is out of range [ 139.883042][ T8293] netlink: zone id is out of range [ 139.895962][ T8293] netlink: zone id is out of range [ 140.850299][ T8351] netlink: 'syz.3.635': attribute type 1 has an invalid length. [ 140.889725][ T8354] netlink: 'syz.0.636': attribute type 1 has an invalid length. [ 140.944754][ T8356] tipc: Started in network mode [ 140.970914][ T8356] tipc: Node identity , cluster identity 4711 [ 141.017844][ T8356] tipc: Failed to set node id, please configure manually [ 141.038328][ T8356] tipc: Enabling of bearer rejected, failed to enable media [ 141.971785][ T8406] xt_l2tp: missing protocol rule (udp|l2tpip) [ 142.154071][ T8417] tipc: Started in network mode [ 142.179207][ T8417] tipc: Node identity 66aa8e8a0dd5, cluster identity 4711 [ 142.188983][ T8417] tipc: Enabled bearer , priority 0 [ 142.229701][ T8425] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 142.373080][ T8417] syzkaller0: entered promiscuous mode [ 142.399722][ T8417] syzkaller0: entered allmulticast mode [ 142.421005][ T8423] batadv1: entered allmulticast mode [ 142.524229][ T8417] tipc: Resetting bearer [ 142.550511][ T8416] tipc: Resetting bearer [ 142.598819][ T8416] tipc: Disabling bearer [ 142.725175][ T8452] __nla_validate_parse: 11 callbacks suppressed [ 142.725192][ T8452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.656'. [ 142.749643][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.656'. [ 142.761006][ T8452] netlink: 16 bytes leftover after parsing attributes in process `syz.0.656'. [ 142.770837][ T8452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.656'. [ 142.780662][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.656'. [ 142.791105][ T8452] netlink: 16 bytes leftover after parsing attributes in process `syz.0.656'. [ 142.807187][ T8452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.656'. [ 142.816847][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.656'. [ 142.831862][ T8452] netlink: 16 bytes leftover after parsing attributes in process `syz.0.656'. [ 142.841700][ T8452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.656'. [ 143.020102][ T8462] tipc: Enabled bearer , priority 0 [ 143.074558][ T8462] syzkaller0: entered promiscuous mode [ 143.094667][ T8465] sctp: [Deprecated]: syz.1.660 (pid 8465) Use of int in maxseg socket option. [ 143.094667][ T8465] Use struct sctp_assoc_value instead [ 143.106378][ T8462] syzkaller0: entered allmulticast mode [ 143.164011][ T8462] tipc: Resetting bearer [ 143.226016][ T8460] tipc: Resetting bearer [ 143.285937][ T8460] tipc: Disabling bearer [ 143.730373][ T8498] netlink: 'syz.4.669': attribute type 1 has an invalid length. [ 143.812950][ T8498] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 144.352708][ T8549] netlink: 'syz.2.679': attribute type 11 has an invalid length. [ 144.531315][ T8553] bridge0: port 3(ipvlan2) entered blocking state [ 144.562333][ T8553] bridge0: port 3(ipvlan2) entered disabled state [ 144.572754][ T8553] ipvlan2: entered allmulticast mode [ 144.579406][ T8553] bridge0: entered allmulticast mode [ 144.591066][ T8553] ipvlan2: left allmulticast mode [ 144.598278][ T8553] bridge0: left allmulticast mode [ 144.652833][ T8555] sch_tbf: burst 3936 is lower than device lo mtu (11337746) ! [ 144.759334][ T8560] netlink: 'syz.2.686': attribute type 3 has an invalid length. [ 145.302303][ T8596] syz_tun: entered allmulticast mode [ 145.792415][ T8629] netlink: 'syz.3.704': attribute type 10 has an invalid length. [ 145.800348][ T5944] IPVS: starting estimator thread 0... [ 145.898933][ T8630] IPVS: using max 32 ests per chain, 76800 per kthread [ 146.555405][ T8671] bond2: entered promiscuous mode [ 146.574173][ T8671] bond2: entered allmulticast mode [ 146.593339][ T8671] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.696913][ T8686] netlink: 'syz.4.718': attribute type 1 has an invalid length. [ 146.795364][ T8690] bond2: (slave gretap1): making interface the new active one [ 146.803993][ T8690] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 146.891457][ T8700] net_ratelimit: 17 callbacks suppressed [ 146.891474][ T8700] openvswitch: netlink: Missing key (keys=40, expected=100) [ 146.929843][ T8706] xt_l2tp: v2 doesn't support IP mode [ 146.936995][ T8706] netlink: 'syz.2.726': attribute type 21 has an invalid length. [ 146.944991][ T8706] netlink: 'syz.2.726': attribute type 1 has an invalid length. [ 147.059179][ T8712] Illegal XDP return value 4294967274 on prog (id 169) dev N/A, expect packet loss! [ 147.485051][ T8735] netlink: 'syz.2.734': attribute type 16 has an invalid length. [ 147.510745][ T8735] netlink: 'syz.2.734': attribute type 17 has an invalid length. [ 147.559114][ T8735] bond0: left promiscuous mode [ 147.564125][ T8735] bond_slave_0: left promiscuous mode [ 147.571062][ T8735] bond_slave_1: left promiscuous mode [ 147.579582][ T8735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.591191][ T8735] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.603443][ T8735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.828206][ T8751] __nla_validate_parse: 192 callbacks suppressed [ 147.828225][ T8751] netlink: 76 bytes leftover after parsing attributes in process `syz.1.741'. [ 147.862404][ T8752] netlink: 'syz.2.740': attribute type 11 has an invalid length. [ 147.877808][ T8752] netlink: 224 bytes leftover after parsing attributes in process `syz.2.740'. [ 147.893279][ T8761] tipc: Enabled bearer , priority 0 [ 147.911304][ T8760] syzkaller0: entered promiscuous mode [ 147.947291][ T8760] syzkaller0: entered allmulticast mode [ 148.019581][ T8764] team_slave_0: entered promiscuous mode [ 148.025458][ T8764] team_slave_1: entered promiscuous mode [ 148.079986][ T8764] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 148.128860][ T8760] tipc: Resetting bearer [ 148.145529][ T8760] tipc: Disabling bearer [ 148.398010][ T8782] netlink: 'syz.0.747': attribute type 2 has an invalid length. [ 148.417672][ T8782] netlink: 132 bytes leftover after parsing attributes in process `syz.0.747'. [ 148.717221][ T8786] tipc: New replicast peer: 0.0.0.0 [ 148.723384][ T8786] tipc: Enabled bearer , priority 10 [ 148.740187][ T8786] tipc: New replicast peer: 255.255.255.255 [ 148.987605][ T8790] validate_nla: 1 callbacks suppressed [ 148.987624][ T8790] netlink: 'syz.3.751': attribute type 1 has an invalid length. [ 149.176537][ T8809] netlink: 165 bytes leftover after parsing attributes in process `syz.2.756'. [ 149.229638][ T8813] netlink: 'syz.0.757': attribute type 2 has an invalid length. [ 149.245491][ T8813] netlink: 'syz.0.757': attribute type 2 has an invalid length. [ 149.287773][ T8813] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 149.324833][ T8813] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 149.352985][ T8819] netlink: 44 bytes leftover after parsing attributes in process `syz.1.760'. [ 149.396891][ T8820] netlink: 'syz.3.758': attribute type 12 has an invalid length. [ 149.404735][ T8820] netlink: 132 bytes leftover after parsing attributes in process `syz.3.758'. [ 149.739453][ T8845] netlink: 'syz.1.769': attribute type 1 has an invalid length. [ 149.747640][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.769'. [ 149.759962][ T8845] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 149.785949][ T8845] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 149.808911][ T8849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.768'. [ 149.818799][ T8845] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 149.837704][ T2152] tipc: Node number set to 1525206117 [ 149.867725][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.768'. [ 150.089899][ T8862] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 150.095790][ T8864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.773'. [ 150.099190][ T8862] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 150.290827][ T8872] netlink: 'syz.4.777': attribute type 1 has an invalid length. [ 150.678994][ T8894] netlink: 'syz.2.784': attribute type 1 has an invalid length. [ 152.423658][ T8970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.443850][ T8973] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 152.616601][ T8982] team0: No ports can be present during mode change [ 152.747289][ T8993] netlink: 'syz.2.813': attribute type 1 has an invalid length. [ 152.819413][ T8993] bond3: (slave gretap1): making interface the new active one [ 152.860663][ T8993] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 152.933827][ T9005] netlink: 'syz.1.815': attribute type 19 has an invalid length. [ 152.949275][ T9005] __nla_validate_parse: 8 callbacks suppressed [ 152.949292][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.815'. [ 152.950110][ T9009] xt_TPROXY: Can be used only with -p tcp or -p udp [ 153.182122][ T9024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.819'. [ 153.195102][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.819'. [ 153.431358][ T9030] netlink: 'syz.0.821': attribute type 3 has an invalid length. [ 153.548086][ T5946] IPVS: starting estimator thread 0... [ 153.568066][ T9033] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 153.581930][ T9033] bond3 (unregistering): Released all slaves [ 153.607402][ T9038] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 153.610932][ T9044] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 153.629473][ T9048] netlink: 666 bytes leftover after parsing attributes in process `syz.0.826'. [ 153.647479][ T9043] IPVS: using max 31 ests per chain, 74400 per kthread [ 153.661957][ T9049] netlink: 666 bytes leftover after parsing attributes in process `syz.0.826'. [ 153.817387][ T9059] veth0: entered promiscuous mode [ 153.834026][ T9059] netlink: zone id is out of range [ 153.846141][ T9059] netlink: del zone limit has 4 unknown bytes [ 153.852840][ T9057] veth0: left promiscuous mode [ 154.056994][ T9075] netlink: 404 bytes leftover after parsing attributes in process `syz.2.834'. [ 154.075413][ T9075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.834'. [ 154.105901][ T9075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.834'. [ 154.119099][ T9079] validate_nla: 2 callbacks suppressed [ 154.119115][ T9079] netlink: 'syz.3.835': attribute type 1 has an invalid length. [ 154.133056][ T9075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.834'. [ 154.160441][ T9083] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 154.317158][ T9091] netlink: 'syz.2.837': attribute type 3 has an invalid length. [ 154.363277][ T9092] netlink: 76 bytes leftover after parsing attributes in process `syz.2.837'. [ 154.820769][ T9126] netlink: 'syz.3.848': attribute type 1 has an invalid length. [ 154.828769][ T9126] netlink: 'syz.3.848': attribute type 1 has an invalid length. [ 154.870039][ T30] audit: type=1107 audit(1760523686.442:3): pid=9127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Eã´”ÐRåÀò4ŽñÚæ%½Èq¸®ª—CÁ¡B]IÁ°Ô»•UÜw÷°}‹)ç"ù(q=õþ†'' [ 155.095527][ T9141] tipc: Enabled bearer , priority 0 [ 155.105373][ T9141] syzkaller0: entered promiscuous mode [ 155.112264][ T9141] syzkaller0: entered allmulticast mode [ 155.141458][ T9141] tipc: Resetting bearer [ 155.161050][ T9143] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 155.172929][ T9140] tipc: Resetting bearer [ 155.209970][ T9140] tipc: Disabling bearer [ 155.478221][ T9171] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 155.481043][ T9168] netlink: 'syz.2.863': attribute type 1 has an invalid length. [ 155.625089][ T9168] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.656398][ T9176] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 155.740046][ T9187] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 155.841799][ T9194] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 155.851551][ T9193] lo: entered allmulticast mode [ 156.003130][ T9204] netlink: 'syz.2.875': attribute type 3 has an invalid length. [ 156.050540][ T9200] vlan0: entered promiscuous mode [ 156.054156][ T9219] netlink: 'syz.0.878': attribute type 10 has an invalid length. [ 156.069325][ T9200] vlan0: entered allmulticast mode [ 156.085903][ T9200] veth0_vlan: entered allmulticast mode [ 156.106834][ T9219] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 156.146057][ T9219] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 156.183242][ T9219] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 156.311724][ T9230] tipc: Enabled bearer , priority 0 [ 156.450280][ T9230] tipc: Resetting bearer [ 156.462865][ T9229] tipc: Disabling bearer [ 156.722351][ T9254] netlink: 'syz.0.887': attribute type 4 has an invalid length. [ 156.797158][ T9254] netlink: 'syz.0.887': attribute type 4 has an invalid length. [ 156.913302][ T9263] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 156.931358][ T9263] bond3 (unregistering): Released all slaves [ 157.112487][ T9276] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 157.512886][ T9304] bridge_slave_0: left allmulticast mode [ 157.529306][ T9304] bridge_slave_0: left promiscuous mode [ 157.535306][ T9304] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.551394][ T9304] bridge_slave_1: left allmulticast mode [ 157.557699][ T9304] bridge_slave_1: left promiscuous mode [ 157.563602][ T9304] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.578256][ T9304] bond0: (slave bond_slave_0): Releasing backup interface [ 157.587328][ T9304] bond_slave_0: left promiscuous mode [ 157.601001][ T9304] bond0: (slave bond_slave_1): Releasing backup interface [ 157.613373][ T9304] bond_slave_1: left promiscuous mode [ 157.628590][ T9304] team_slave_0: left promiscuous mode [ 157.661187][ T9304] team0: Port device team_slave_0 removed [ 157.670246][ T9304] team_slave_1: left promiscuous mode [ 157.718016][ T9304] team0: Port device team_slave_1 removed [ 157.725474][ T9304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.733293][ T9304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.743842][ T9304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.780798][ T9304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.791192][ T9304] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 158.033979][ T9331] __nla_validate_parse: 18 callbacks suppressed [ 158.033998][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'. [ 158.069452][ T9336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.909'. [ 158.088101][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.909'. [ 158.335164][ T9344] syzkaller1: entered promiscuous mode [ 158.352010][ T9344] syzkaller1: entered allmulticast mode [ 158.383147][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.914'. [ 158.394934][ T9344] x_tables: duplicate entry at hook 2 [ 158.441970][ T9348] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 158.454508][ T9348] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 158.553988][ T9354] syzkaller0: entered promiscuous mode [ 158.563009][ T9354] syzkaller0: entered allmulticast mode [ 158.635902][ T9359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.917'. [ 158.889138][ T9376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.923'. [ 158.918934][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.923'. [ 159.278862][ T9400] netlink: 156 bytes leftover after parsing attributes in process `syz.0.928'. [ 159.326234][ T9400] netlink: 156 bytes leftover after parsing attributes in process `syz.0.928'. [ 159.374092][ T9400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.928'. [ 159.445026][ T9418] validate_nla: 3 callbacks suppressed [ 159.445044][ T9418] netlink: 'syz.3.934': attribute type 1 has an invalid length. [ 159.487618][ T9418] 8021q: adding VLAN 0 to HW filter on device bond5 [ 159.585175][ T9429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.655589][ T9436] netlink: 'syz.4.939': attribute type 1 has an invalid length. [ 159.669684][ T9437] netlink: 'syz.4.939': attribute type 1 has an invalid length. [ 159.711338][ T9437] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.968334][ T9453] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.319425][ T9471] syzkaller1: entered promiscuous mode [ 160.347383][ T9471] syzkaller1: entered allmulticast mode [ 160.374479][ T9442] infiniband syz0: set down [ 160.380704][ T9442] infiniband syz0: added bond_slave_0 [ 160.480470][ T9442] RDS/IB: syz0: added [ 160.486504][ T9442] smc: adding ib device syz0 with port count 1 [ 160.492935][ T9442] smc: ib device syz0 port 1 has no pnetid [ 160.633243][ T9483] netlink: 'syz.4.951': attribute type 11 has an invalid length. [ 160.701295][ T9483] team0: Device geneve2 is up. Set it down before adding it as a team port [ 160.711731][ T9449] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 160.736090][ T9449] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 160.815565][ T9449] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 160.822583][ T9449] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 160.900144][ T9449] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 160.926783][ T9449] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 161.184921][ T9495] tipc: Enabled bearer , priority 0 [ 161.246402][ T9492] syzkaller0: entered promiscuous mode [ 161.275405][ T9492] syzkaller0: entered allmulticast mode [ 161.755902][ T9495] tipc: Resetting bearer [ 161.789042][ T9491] tipc: Resetting bearer [ 161.850279][ T9491] tipc: Disabling bearer [ 161.914044][ T9449] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.933298][ T9449] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 162.178676][ T9527] openvswitch: netlink: Message has 1 unknown bytes. [ 162.195913][ T9527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.112408][ T9578] IPVS: set_ctl: invalid protocol: 135 172.20.20.64:20002 [ 163.212744][ T9584] __nla_validate_parse: 7 callbacks suppressed [ 163.212762][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 163.254021][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 163.541121][ T9598] tls_set_device_offload: netdev not found [ 163.573658][ T9599] dvmrp0: entered allmulticast mode [ 163.596378][ T9599] dvmrp0: left allmulticast mode [ 163.956112][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.979'. [ 164.328788][ T9636] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 164.341734][ T9636] bond5: option packets_per_slave: allowed values 0 - 65535 [ 164.385321][ T9636] bond5 (unregistering): Released all slaves [ 164.454947][ T9644] veth1_macvtap: left promiscuous mode [ 164.571833][ T9649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.988'. [ 164.616563][ T9653] lo speed is unknown, defaulting to 1000 [ 164.664648][ T9653] lo speed is unknown, defaulting to 1000 [ 164.687284][ T9653] lo speed is unknown, defaulting to 1000 [ 164.708833][ T9653] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 164.786700][ T9653] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 164.842098][ T9653] lo speed is unknown, defaulting to 1000 [ 164.898383][ T9653] lo speed is unknown, defaulting to 1000 [ 164.910252][ T9653] lo speed is unknown, defaulting to 1000 [ 164.932541][ T9653] lo speed is unknown, defaulting to 1000 [ 164.963883][ T9653] lo speed is unknown, defaulting to 1000 [ 165.864822][ T9724] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1008'. [ 166.197377][ T9743] IPVS: length: 84 != 8 [ 166.319778][ T9752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1013'. [ 166.351533][ T9752] netlink: 'syz.4.1013': attribute type 7 has an invalid length. [ 166.377306][ T9752] netlink: 'syz.4.1013': attribute type 8 has an invalid length. [ 166.404283][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1013'. [ 166.588150][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1018'. [ 166.658653][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1017'. [ 166.977163][ T9790] bridge0: port 3(ipvlan2) entered blocking state [ 167.006008][ T9790] bridge0: port 3(ipvlan2) entered disabled state [ 167.022563][ T9790] ipvlan2: entered allmulticast mode [ 167.073769][ T9790] bridge0: entered allmulticast mode [ 167.094686][ T9790] ipvlan2: left allmulticast mode [ 167.100946][ T9790] bridge0: left allmulticast mode [ 167.303968][ T9799] syzkaller0: entered promiscuous mode [ 167.331241][ T9799] syzkaller0: entered allmulticast mode [ 167.376240][ T9819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1031'. [ 167.650649][ T9838] netlink: 'syz.0.1034': attribute type 1 has an invalid length. [ 167.759505][ T9838] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.948194][ T9865] delete_channel: no stack [ 169.452964][ T9876] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.471430][ T9876] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.559267][ T9897] __nla_validate_parse: 2 callbacks suppressed [ 169.559284][ T9897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1047'. [ 169.575014][ T9897] tipc: Invalid UDP bearer configuration [ 169.575061][ T9897] tipc: Enabling of bearer rejected, failed to enable media [ 169.611466][ T9876] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.622797][ T9876] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.703579][ T9876] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.719458][ T9876] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.782502][ T9899] pim6reg1: entered promiscuous mode [ 169.788938][ T9899] pim6reg1: entered allmulticast mode [ 169.827104][ T9876] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.840038][ T9876] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.860805][ T9915] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1053'. [ 170.003097][ T388] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.025917][ T388] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.120178][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1057'. [ 170.136153][ T9876] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.157269][ T9876] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.405400][ T9942] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1062'. [ 170.566023][ T9949] syzkaller1: entered promiscuous mode [ 170.576554][ T9949] syzkaller1: entered allmulticast mode [ 170.588432][ T9949] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 171.024303][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'. [ 171.040416][ T9967] team0 (unregistering): Port device team_slave_0 removed [ 171.050967][ T9967] team0 (unregistering): Port device team_slave_1 removed [ 171.259396][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1076'. [ 171.287073][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1080'. [ 171.312019][T10004] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1081'. [ 171.623650][T10024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.646652][T10024] batadv_slave_1: entered promiscuous mode [ 171.660398][T10024] batadv_slave_1: entered allmulticast mode [ 171.758839][T10037] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1090'. [ 171.936759][T10048] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1094'. [ 172.075494][T10061] tipc: Enabled bearer , priority 0 [ 172.148963][T10061] tipc: Disabling bearer [ 172.218746][T10068] netlink: 'syz.1.1100': attribute type 32 has an invalid length. [ 172.284684][T10068] bond2: option coupled_control: invalid value (3) [ 172.311951][T10068] bond2 (unregistering): Released all slaves [ 172.401701][T10093] netlink: 'syz.3.1105': attribute type 3 has an invalid length. [ 172.649198][T10114] netlink: 'syz.3.1109': attribute type 6 has an invalid length. [ 172.966617][T10136] netlink: 'syz.3.1114': attribute type 1 has an invalid length. [ 172.976042][T10135] netlink: 'syz.3.1114': attribute type 1 has an invalid length. [ 173.010259][T10142] IPVS: Unknown mcast interface: batadv0 [ 173.328050][T10167] netlink: 'syz.0.1122': attribute type 1 has an invalid length. [ 173.337031][T10168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.353687][T10165] netlink: 'syz.2.1124': attribute type 1 has an invalid length. [ 173.413174][T10174] bond5: (slave bridge4): making interface the new active one [ 173.421680][T10174] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 174.286665][T10239] netlink: 'syz.2.1144': attribute type 1 has an invalid length. [ 174.379967][T10243] macvlan4: entered promiscuous mode [ 174.388692][T10243] macvlan4: entered allmulticast mode [ 174.396612][T10243] bond5: entered promiscuous mode [ 174.402862][T10243] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 174.421898][T10243] bond5: left promiscuous mode [ 174.683179][T10261] __nla_validate_parse: 15 callbacks suppressed [ 174.683196][T10261] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1150'. [ 174.851294][T10267] netlink: 'syz.3.1153': attribute type 21 has an invalid length. [ 174.863356][T10267] netlink: 'syz.3.1153': attribute type 22 has an invalid length. [ 174.905917][T10267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1153'. [ 175.307123][T10286] tipc: Enabled bearer , priority 0 [ 175.324569][T10286] syzkaller0: entered promiscuous mode [ 175.475919][T10286] syzkaller0: entered allmulticast mode [ 175.568258][T10286] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 175.633272][T10286] tipc: Resetting bearer [ 175.664562][T10285] tipc: Resetting bearer [ 175.743295][T10285] tipc: Disabling bearer [ 175.872028][T10277] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1154'. [ 175.975211][T10270] lo speed is unknown, defaulting to 1000 [ 176.152409][T10277] xt_addrtype: ipv6 does not support BROADCAST matching [ 176.838226][T10337] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1171'. [ 176.838236][T10339] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1171'. [ 176.838409][T10339] 0ªî{X¹¦: renamed from gretap0 [ 176.916718][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'. [ 177.008066][T10339] 0ªî{X¹¦: entered allmulticast mode [ 177.015410][T10339] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 177.156517][T10337] 0ªî{X¹¦: left allmulticast mode [ 177.627776][T10372] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1181'. [ 177.735973][T10376] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1184'. [ 177.852962][T10380] validate_nla: 5 callbacks suppressed [ 177.852981][T10380] netlink: 'syz.2.1186': attribute type 21 has an invalid length. [ 177.890586][T10380] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1186'. [ 177.921575][T10382] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.1186'. [ 178.378529][T10406] tipc: Enabled bearer , priority 0 [ 178.403740][T10406] syzkaller0: entered promiscuous mode [ 178.426993][T10406] syzkaller0: entered allmulticast mode [ 178.472862][T10406] tipc: Resetting bearer [ 178.500391][T10402] tipc: Resetting bearer [ 178.593774][T10402] tipc: Disabling bearer [ 178.805261][T10434] dvmrp0: entered allmulticast mode [ 178.872862][T10438] rdma_rxe: rxe_newlink: failed to add wlan1 [ 179.360929][T10466] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.472833][T10477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.528633][T10481] netlink: 'syz.3.1213': attribute type 21 has an invalid length. [ 179.556419][T10482] netlink: 'syz.3.1213': attribute type 21 has an invalid length. [ 179.924322][T10497] bond6: option all_slaves_active: invalid value (5) [ 179.940476][T10497] bond6 (unregistering): Released all slaves [ 180.181437][T10508] tipc: Enabled bearer , priority 0 [ 180.202402][T10508] syzkaller0: entered promiscuous mode [ 180.225383][T10508] syzkaller0: entered allmulticast mode [ 180.228905][T10510] __nla_validate_parse: 15 callbacks suppressed [ 180.228921][T10510] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1222'. [ 180.345180][T10508] syzkaller0: mtu less than device minimum [ 180.369725][T10507] tipc: Resetting bearer [ 180.399675][T10507] tipc: Disabling bearer [ 180.410414][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'. [ 180.551566][T10526] tipc: Cannot configure node identity twice [ 180.700052][T10538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1231'. [ 180.823054][T10544] veth0_to_bridge: entered promiscuous mode [ 180.826815][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1233'. [ 180.874113][T10546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1233'. [ 181.006577][T10546] netlink: 'syz.0.1233': attribute type 2 has an invalid length. [ 181.037512][T10556] veth0_to_bridge: left promiscuous mode [ 181.134548][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'. [ 181.175945][T10544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1232'. [ 181.204876][T10563] netlink: 'syz.3.1238': attribute type 4 has an invalid length. [ 181.256819][T10569] netlink: 'syz.3.1238': attribute type 4 has an invalid length. [ 181.500671][T10580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1241'. [ 181.618846][T10588] SET target dimension over the limit! [ 181.672728][T10590] syzkaller1: entered promiscuous mode [ 181.685789][T10590] syzkaller1: entered allmulticast mode [ 181.708700][T10590] tipc: Enabling of bearer rejected, media not registered [ 181.876182][T10600] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1246'. [ 181.904627][T10600] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1246'. [ 182.473641][T10633] netlink: 'syz.3.1259': attribute type 6 has an invalid length. [ 182.498112][T10636] netlink: 'syz.3.1259': attribute type 6 has an invalid length. [ 182.984337][T10667] veth0: entered promiscuous mode [ 182.989973][T10667] veth0: left promiscuous mode [ 184.141635][T10730] tipc: Enabling of bearer rejected, media not registered [ 184.152264][ T5944] IPVS: starting estimator thread 0... [ 184.266440][T10731] IPVS: using max 32 ests per chain, 76800 per kthread [ 184.371855][T10743] netlink: 'syz.0.1290': attribute type 1 has an invalid length. [ 185.342869][T10795] xt_l2tp: missing protocol rule (udp|l2tpip) [ 185.360684][T10798] __nla_validate_parse: 13 callbacks suppressed [ 185.360703][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1308'. [ 185.575346][T10805] netlink: 'syz.2.1312': attribute type 1 has an invalid length. [ 185.614938][T10808] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 185.656234][T10816] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 185.670467][T10810] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1313'. [ 185.699480][T10810] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1313'. [ 185.741943][T10815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1314'. [ 185.782500][T10815] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1314'. [ 185.859249][T10830] netlink: 'syz.2.1316': attribute type 16 has an invalid length. [ 185.875888][T10830] netlink: 'syz.2.1316': attribute type 3 has an invalid length. [ 185.889650][T10830] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1316'. [ 185.924380][T10826] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1317'. [ 185.949122][T10826] netlink: 'syz.4.1317': attribute type 12 has an invalid length. [ 186.072933][T10826] bond4: option primary_reselect: invalid value (255) [ 186.117906][T10826] bond4 (unregistering): Released all slaves [ 186.330176][T10849] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1323'. [ 186.344559][T10852] netlink: 'syz.0.1324': attribute type 1 has an invalid length. [ 186.358903][T10852] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1324'. [ 186.519199][T10859] x_tables: duplicate underflow at hook 1 [ 186.703682][T10864] netlink: 'syz.2.1329': attribute type 1 has an invalid length. [ 186.864188][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1333'. [ 187.206099][T10899] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 0 [ 187.458182][T10910] netlink: 'syz.4.1344': attribute type 1 has an invalid length. [ 187.587002][T10914] netlink: 'syz.0.1346': attribute type 21 has an invalid length. [ 187.661784][T10914] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 187.689523][T10914] bond7 (unregistering): Released all slaves [ 187.699033][ T9] IPVS: starting estimator thread 0... [ 187.739917][T10930] vlan2: entered allmulticast mode [ 187.745100][T10930] bond0: entered allmulticast mode [ 187.750653][T10930] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 187.818634][T10929] IPVS: using max 34 ests per chain, 81600 per kthread [ 187.909469][T10937] netlink: 'syz.0.1353': attribute type 1 has an invalid length. [ 188.705610][T10978] bond2 (unregistering): Released all slaves [ 189.020784][T10999] bond6 (unregistering): Released all slaves [ 189.844839][T11052] tipc: Enabling of bearer rejected, failed to enable media [ 189.869681][T11054] IPVS: Unknown mcast interface: pim6reg1 [ 189.939107][T11052] gre0: entered promiscuous mode [ 189.944090][T11052] gre0: entered allmulticast mode [ 190.397348][T11084] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.533667][T11097] __nla_validate_parse: 17 callbacks suppressed [ 190.533689][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1399'. [ 190.573534][T11102] 8021q: VLANs not supported on ip_vti0 [ 190.691465][T11106] validate_nla: 3 callbacks suppressed [ 190.691484][T11106] netlink: 'syz.4.1403': attribute type 1 has an invalid length. [ 190.727063][T11106] bond4: entered promiscuous mode [ 190.733273][T11106] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.754343][T11112] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1406'. [ 190.765298][T11111] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1406'. [ 190.773594][T11106] bond4: (slave bridge7): making interface the new active one [ 190.782237][T11106] bridge7: entered promiscuous mode [ 190.792359][T11106] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 191.240733][T11141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1412'. [ 191.383024][T11152] openvswitch: netlink: Message has 1 unknown bytes. [ 191.400543][T11152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.848673][T11187] veth7: entered allmulticast mode [ 192.059029][T11209] tc_dump_action: action bad kind [ 192.174064][T11214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1432'. [ 192.924807][T11240] delete_channel: no stack [ 192.997018][T11243] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 193.192937][T11251] netlink: 'syz.1.1445': attribute type 1 has an invalid length. [ 193.208619][T11251] netlink: 'syz.1.1445': attribute type 4 has an invalid length. [ 193.222181][T11251] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1445'. [ 193.411979][T11265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1448'. [ 194.350177][T11267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1448'. [ 194.491497][T11275] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1452'. [ 194.504395][T11276] netlink: 'syz.1.1450': attribute type 1 has an invalid length. [ 194.505338][T11275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1452'. [ 194.659923][T11275] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 194.695175][T11275] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 194.799719][T11276] veth9: entered promiscuous mode [ 194.852263][T11296] FAULT_INJECTION: forcing a failure. [ 194.852263][T11296] name failslab, interval 1, probability 0, space 0, times 1 [ 194.893925][T11296] CPU: 1 UID: 0 PID: 11296 Comm: syz.2.1457 Not tainted syzkaller #0 PREEMPT(full) [ 194.893952][T11296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.893963][T11296] Call Trace: [ 194.893971][T11296] [ 194.893980][T11296] dump_stack_lvl+0x189/0x250 [ 194.894009][T11296] ? __pfx____ratelimit+0x10/0x10 [ 194.894032][T11296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.894052][T11296] ? __pfx__printk+0x10/0x10 [ 194.894078][T11296] ? __lock_acquire+0xab9/0xd20 [ 194.894105][T11296] should_fail_ex+0x414/0x560 [ 194.894133][T11296] should_failslab+0xa8/0x100 [ 194.894154][T11296] kmem_cache_alloc_noprof+0x74/0x6e0 [ 194.894181][T11296] ? skb_clone+0x212/0x3a0 [ 194.894210][T11296] skb_clone+0x212/0x3a0 [ 194.894237][T11296] __netlink_deliver_tap+0x404/0x850 [ 194.894271][T11296] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.894293][T11296] netlink_deliver_tap+0x19c/0x1b0 [ 194.894315][T11296] netlink_unicast+0x7fa/0x9e0 [ 194.894359][T11296] ? __pfx_netlink_unicast+0x10/0x10 [ 194.894390][T11296] ? netlink_sendmsg+0x642/0xb30 [ 194.894409][T11296] ? skb_put+0x11b/0x210 [ 194.894433][T11296] netlink_sendmsg+0x805/0xb30 [ 194.894463][T11296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.894486][T11296] ? aa_sock_msg_perm+0xf1/0x1d0 [ 194.894513][T11296] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.894531][T11296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.894552][T11296] __sock_sendmsg+0x219/0x270 [ 194.894584][T11296] ____sys_sendmsg+0x52d/0x830 [ 194.894611][T11296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.894644][T11296] ? import_iovec+0x74/0xa0 [ 194.894667][T11296] ___sys_sendmsg+0x21f/0x2a0 [ 194.894693][T11296] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.894755][T11296] ? __fget_files+0x2a/0x420 [ 194.894772][T11296] ? __fget_files+0x3a0/0x420 [ 194.894801][T11296] __sys_sendmmsg+0x227/0x430 [ 194.894830][T11296] ? __pfx___sys_sendmmsg+0x10/0x10 [ 194.894869][T11296] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 194.894914][T11296] ? ksys_write+0x22a/0x250 [ 194.894942][T11296] ? __pfx_ksys_write+0x10/0x10 [ 194.894974][T11296] __x64_sys_sendmmsg+0xa0/0xc0 [ 194.895000][T11296] do_syscall_64+0xfa/0xfa0 [ 194.895021][T11296] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.895044][T11296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.895063][T11296] ? clear_bhb_loop+0x60/0xb0 [ 194.895087][T11296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.895106][T11296] RIP: 0033:0x7f76bc58eec9 [ 194.895123][T11296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.895139][T11296] RSP: 002b:00007f76bd4cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 194.895167][T11296] RAX: ffffffffffffffda RBX: 00007f76bc7e5fa0 RCX: 00007f76bc58eec9 [ 194.895182][T11296] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 194.895195][T11296] RBP: 00007f76bd4cd090 R08: 0000000000000000 R09: 0000000000000000 [ 194.895207][T11296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.895218][T11296] R13: 00007f76bc7e6038 R14: 00007f76bc7e5fa0 R15: 00007fffc3249fa8 [ 194.895252][T11296] [ 195.507331][T11325] netlink: 'syz.3.1467': attribute type 2 has an invalid length. [ 195.602345][T11334] netlink: 'syz.4.1470': attribute type 1 has an invalid length. [ 195.634820][T11334] bond5: (slave ip6gretap1): making interface the new active one [ 195.643817][T11334] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 195.719147][T11339] __nla_validate_parse: 1 callbacks suppressed [ 195.719165][T11339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1471'. [ 195.824961][T11348] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.1474'. [ 195.825003][T11347] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.1474'. [ 195.836382][T11348] openvswitch: netlink: Key type 112 is out of range max 32 [ 195.844627][T11347] openvswitch: netlink: Key type 112 is out of range max 32 [ 196.001822][T11355] x_tables: duplicate underflow at hook 1 [ 196.094290][T11359] tipc: Enabling of bearer rejected, failed to enable media [ 196.134815][T11361] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 196.189054][T11361] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 196.337390][T11368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1482'. [ 196.553980][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1489'. [ 197.100326][T11391] lo speed is unknown, defaulting to 1000 [ 197.126347][T11419] netlink: 'syz.1.1501': attribute type 21 has an invalid length. [ 197.156914][T11419] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1501'. [ 197.431094][T11434] netlink: 'syz.2.1506': attribute type 1 has an invalid length. [ 197.483311][T11443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1506'. [ 197.524313][T11445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1507'. [ 197.720847][T11434] bond6: entered promiscuous mode [ 197.729630][T11434] 8021q: adding VLAN 0 to HW filter on device bond6 [ 198.895108][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'. [ 199.085439][T11468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1512'. [ 199.097541][T11473] tipc: Started in network mode [ 199.102435][T11473] tipc: Node identity f2529709a4c4, cluster identity 4711 [ 199.131504][T11473] tipc: Enabled bearer , priority 0 [ 199.138467][T11476] FAULT_INJECTION: forcing a failure. [ 199.138467][T11476] name failslab, interval 1, probability 0, space 0, times 0 [ 199.139103][T11473] syzkaller0: entered promiscuous mode [ 199.157794][T11476] CPU: 0 UID: 0 PID: 11476 Comm: syz.2.1514 Not tainted syzkaller #0 PREEMPT(full) [ 199.157819][T11476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 199.157831][T11476] Call Trace: [ 199.157838][T11476] [ 199.157846][T11476] dump_stack_lvl+0x189/0x250 [ 199.157871][T11476] ? __pfx____ratelimit+0x10/0x10 [ 199.157894][T11476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.157915][T11476] ? __pfx__printk+0x10/0x10 [ 199.157932][T11476] ? __sock_sendmsg+0x219/0x270 [ 199.157956][T11476] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 199.157976][T11476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.158000][T11476] should_fail_ex+0x414/0x560 [ 199.158023][T11476] should_failslab+0xa8/0x100 [ 199.158044][T11476] kmem_cache_alloc_noprof+0x74/0x6e0 [ 199.158067][T11476] ? skb_clone+0x212/0x3a0 [ 199.158093][T11476] skb_clone+0x212/0x3a0 [ 199.158118][T11476] __netlink_deliver_tap+0x404/0x850 [ 199.158148][T11476] ? netlink_deliver_tap+0x2e/0x1b0 [ 199.158168][T11476] netlink_deliver_tap+0x19c/0x1b0 [ 199.158187][T11476] netlink_sendskb+0x68/0x140 [ 199.158215][T11476] netlink_unicast+0x397/0x9e0 [ 199.158237][T11476] ? __asan_memcpy+0x40/0x70 [ 199.158267][T11476] ? __pfx_netlink_unicast+0x10/0x10 [ 199.158306][T11476] netlink_rcv_skb+0x28c/0x470 [ 199.158326][T11476] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 199.158346][T11476] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 199.158376][T11476] ? netlink_deliver_tap+0x2e/0x1b0 [ 199.158401][T11476] netlink_unicast+0x82c/0x9e0 [ 199.158443][T11476] ? __pfx_netlink_unicast+0x10/0x10 [ 199.158472][T11476] ? netlink_sendmsg+0x642/0xb30 [ 199.158490][T11476] ? skb_put+0x11b/0x210 [ 199.158514][T11476] netlink_sendmsg+0x805/0xb30 [ 199.158541][T11476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.158564][T11476] ? aa_sock_msg_perm+0xf1/0x1d0 [ 199.158591][T11476] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 199.158608][T11476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.158628][T11476] __sock_sendmsg+0x219/0x270 [ 199.158657][T11476] ____sys_sendmsg+0x52d/0x830 [ 199.158680][T11476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.158708][T11476] ? import_iovec+0x74/0xa0 [ 199.158730][T11476] ___sys_sendmsg+0x21f/0x2a0 [ 199.158755][T11476] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.158814][T11476] ? __fget_files+0x2a/0x420 [ 199.158831][T11476] ? __fget_files+0x3a0/0x420 [ 199.158861][T11476] __sys_sendmmsg+0x227/0x430 [ 199.158891][T11476] ? __pfx___sys_sendmmsg+0x10/0x10 [ 199.158920][T11476] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 199.158964][T11476] ? ksys_write+0x22a/0x250 [ 199.158991][T11476] ? __pfx_ksys_write+0x10/0x10 [ 199.159019][T11476] __x64_sys_sendmmsg+0xa0/0xc0 [ 199.159042][T11476] do_syscall_64+0xfa/0xfa0 [ 199.159059][T11476] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.159078][T11476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.159096][T11476] ? clear_bhb_loop+0x60/0xb0 [ 199.159117][T11476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.159133][T11476] RIP: 0033:0x7f76bc58eec9 [ 199.159150][T11476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.159165][T11476] RSP: 002b:00007f76bd4cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 199.159185][T11476] RAX: ffffffffffffffda RBX: 00007f76bc7e5fa0 RCX: 00007f76bc58eec9 [ 199.159199][T11476] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 199.159213][T11476] RBP: 00007f76bd4cd090 R08: 0000000000000000 R09: 0000000000000000 [ 199.159225][T11476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.159236][T11476] R13: 00007f76bc7e6038 R14: 00007f76bc7e5fa0 R15: 00007fffc3249fa8 [ 199.159271][T11476] [ 199.170723][T11473] syzkaller0: entered allmulticast mode [ 199.534391][T11472] tipc: Enabling of bearer rejected, already enabled [ 199.593410][T11482] tipc: Resetting bearer [ 199.679632][T11482] tipc: Disabling bearer [ 199.723456][T11485] tipc: Enabled bearer , priority 0 [ 199.784143][T11484] tipc: Disabling bearer [ 200.052676][ T30] audit: type=1800 audit(1760523731.622:4): pid=11511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1526" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1607 res=0 errno=0 [ 200.163973][T11520] FAULT_INJECTION: forcing a failure. [ 200.163973][T11520] name failslab, interval 1, probability 0, space 0, times 0 [ 200.195943][T11520] CPU: 0 UID: 0 PID: 11520 Comm: syz.1.1529 Not tainted syzkaller #0 PREEMPT(full) [ 200.195971][T11520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 200.195982][T11520] Call Trace: [ 200.195990][T11520] [ 200.195997][T11520] dump_stack_lvl+0x189/0x250 [ 200.196022][T11520] ? __pfx____ratelimit+0x10/0x10 [ 200.196044][T11520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.196065][T11520] ? __pfx__printk+0x10/0x10 [ 200.196082][T11520] ? __sock_sendmsg+0x219/0x270 [ 200.196110][T11520] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 200.196131][T11520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.196160][T11520] should_fail_ex+0x414/0x560 [ 200.196189][T11520] should_failslab+0xa8/0x100 [ 200.196209][T11520] kmem_cache_alloc_noprof+0x74/0x6e0 [ 200.196236][T11520] ? skb_clone+0x212/0x3a0 [ 200.196273][T11520] skb_clone+0x212/0x3a0 [ 200.196298][T11520] __netlink_deliver_tap+0x404/0x850 [ 200.196329][T11520] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.196352][T11520] netlink_deliver_tap+0x19c/0x1b0 [ 200.196372][T11520] netlink_sendskb+0x68/0x140 [ 200.196403][T11520] netlink_unicast+0x397/0x9e0 [ 200.196427][T11520] ? __asan_memcpy+0x40/0x70 [ 200.196461][T11520] ? __pfx_netlink_unicast+0x10/0x10 [ 200.196500][T11520] netlink_rcv_skb+0x28c/0x470 [ 200.196518][T11520] ? rcu_is_watching+0x15/0xb0 [ 200.196540][T11520] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.196561][T11520] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.196593][T11520] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.196622][T11520] netlink_unicast+0x82c/0x9e0 [ 200.196659][T11520] ? __pfx_netlink_unicast+0x10/0x10 [ 200.196688][T11520] ? netlink_sendmsg+0x642/0xb30 [ 200.196706][T11520] ? skb_put+0x11b/0x210 [ 200.196730][T11520] netlink_sendmsg+0x805/0xb30 [ 200.196761][T11520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.196785][T11520] ? aa_sock_msg_perm+0xf1/0x1d0 [ 200.196813][T11520] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 200.196831][T11520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.196853][T11520] __sock_sendmsg+0x219/0x270 [ 200.196883][T11520] ____sys_sendmsg+0x52d/0x830 [ 200.196913][T11520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.196945][T11520] ? import_iovec+0x74/0xa0 [ 200.196968][T11520] ___sys_sendmsg+0x21f/0x2a0 [ 200.196993][T11520] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.197053][T11520] ? __fget_files+0x2a/0x420 [ 200.197070][T11520] ? __fget_files+0x3a0/0x420 [ 200.197099][T11520] __sys_sendmmsg+0x227/0x430 [ 200.197127][T11520] ? __pfx___sys_sendmmsg+0x10/0x10 [ 200.197159][T11520] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 200.197202][T11520] ? ksys_write+0x22a/0x250 [ 200.197227][T11520] ? __pfx_ksys_write+0x10/0x10 [ 200.197265][T11520] __x64_sys_sendmmsg+0xa0/0xc0 [ 200.197289][T11520] do_syscall_64+0xfa/0xfa0 [ 200.197315][T11520] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.197337][T11520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.197355][T11520] ? clear_bhb_loop+0x60/0xb0 [ 200.197377][T11520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.197394][T11520] RIP: 0033:0x7f9fc938eec9 [ 200.197410][T11520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.197424][T11520] RSP: 002b:00007f9fc75ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 200.197444][T11520] RAX: ffffffffffffffda RBX: 00007f9fc95e5fa0 RCX: 00007f9fc938eec9 [ 200.197458][T11520] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 200.197471][T11520] RBP: 00007f9fc75ee090 R08: 0000000000000000 R09: 0000000000000000 [ 200.197481][T11520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.197490][T11520] R13: 00007f9fc95e6038 R14: 00007f9fc95e5fa0 R15: 00007ffd3d683ee8 [ 200.197521][T11520] [ 200.659449][T11526] netlink: 'syz.0.1531': attribute type 1 has an invalid length. [ 200.672636][T11528] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 200.685411][T11526] netlink: 'syz.0.1531': attribute type 4 has an invalid length. [ 200.763694][T11532] __nla_validate_parse: 2 callbacks suppressed [ 200.763711][T11532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1534'. [ 201.817933][T11567] nbd: must specify at least one socket [ 201.833685][T11567] nbd: must specify at least one socket [ 202.228826][T11577] batadv_slave_1: left promiscuous mode [ 202.264187][T11577] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 202.305525][T11577] geneve2: left promiscuous mode [ 202.325668][T11577] bond6: left promiscuous mode [ 202.338203][ T5946] lo speed is unknown, defaulting to 1000 [ 202.344348][T11608] FAULT_INJECTION: forcing a failure. [ 202.344348][T11608] name failslab, interval 1, probability 0, space 0, times 0 [ 202.391936][T11608] CPU: 0 UID: 0 PID: 11608 Comm: syz.3.1555 Not tainted syzkaller #0 PREEMPT(full) [ 202.391962][T11608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 202.391971][T11608] Call Trace: [ 202.391978][T11608] [ 202.391987][T11608] dump_stack_lvl+0x189/0x250 [ 202.392011][T11608] ? __pfx____ratelimit+0x10/0x10 [ 202.392031][T11608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.392051][T11608] ? __pfx__printk+0x10/0x10 [ 202.392083][T11608] ? __pfx___might_resched+0x10/0x10 [ 202.392107][T11608] should_fail_ex+0x414/0x560 [ 202.392133][T11608] should_failslab+0xa8/0x100 [ 202.392152][T11608] kmem_cache_alloc_node_noprof+0x77/0x710 [ 202.392178][T11608] ? __alloc_skb+0x112/0x2d0 [ 202.392203][T11608] __alloc_skb+0x112/0x2d0 [ 202.392226][T11608] netlink_ack+0x146/0xa50 [ 202.392242][T11608] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 202.392278][T11608] netlink_rcv_skb+0x28c/0x470 [ 202.392296][T11608] ? __lock_acquire+0xab9/0xd20 [ 202.392316][T11608] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 202.392335][T11608] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 202.392366][T11608] ? netlink_deliver_tap+0x2e/0x1b0 [ 202.392394][T11608] netlink_unicast+0x82c/0x9e0 [ 202.392433][T11608] ? __pfx_netlink_unicast+0x10/0x10 [ 202.392463][T11608] ? netlink_sendmsg+0x642/0xb30 [ 202.392482][T11608] ? skb_put+0x11b/0x210 [ 202.392505][T11608] netlink_sendmsg+0x805/0xb30 [ 202.392534][T11608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.392557][T11608] ? aa_sock_msg_perm+0xf1/0x1d0 [ 202.392585][T11608] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 202.392603][T11608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.392624][T11608] __sock_sendmsg+0x219/0x270 [ 202.392653][T11608] ____sys_sendmsg+0x52d/0x830 [ 202.392682][T11608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.392714][T11608] ? import_iovec+0x74/0xa0 [ 202.392736][T11608] ___sys_sendmsg+0x21f/0x2a0 [ 202.392761][T11608] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.392831][T11608] ? __might_fault+0xb0/0x130 [ 202.392862][T11608] __sys_sendmmsg+0x227/0x430 [ 202.392890][T11608] ? __pfx___sys_sendmmsg+0x10/0x10 [ 202.392922][T11608] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 202.392971][T11608] ? ksys_write+0x22a/0x250 [ 202.392998][T11608] ? __pfx_ksys_write+0x10/0x10 [ 202.393030][T11608] __x64_sys_sendmmsg+0xa0/0xc0 [ 202.393055][T11608] do_syscall_64+0xfa/0xfa0 [ 202.393083][T11608] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.393106][T11608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.393126][T11608] ? clear_bhb_loop+0x60/0xb0 [ 202.393150][T11608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.393168][T11608] RIP: 0033:0x7f4b5818eec9 [ 202.393185][T11608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.393201][T11608] RSP: 002b:00007f4b590ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 202.393221][T11608] RAX: ffffffffffffffda RBX: 00007f4b583e5fa0 RCX: 00007f4b5818eec9 [ 202.393235][T11608] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 202.393248][T11608] RBP: 00007f4b590ac090 R08: 0000000000000000 R09: 0000000000000000 [ 202.393260][T11608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.393271][T11608] R13: 00007f4b583e6038 R14: 00007f4b583e5fa0 R15: 00007ffc5cb3fea8 [ 202.393303][T11608] [ 202.751501][T11613] sctp: [Deprecated]: syz.1.1556 (pid 11613) Use of int in max_burst socket option deprecated. [ 202.751501][T11613] Use struct sctp_assoc_value instead [ 202.811409][T11616] sctp: [Deprecated]: syz.1.1556 (pid 11616) Use of int in max_burst socket option deprecated. [ 202.811409][T11616] Use struct sctp_assoc_value instead [ 202.837661][T11613] xt_limit: Overflow, try lower: 604147548/4200216962 [ 202.900130][T11616] xt_limit: Overflow, try lower: 604147548/4200216962 [ 202.935338][T11622] netlink: 'syz.3.1560': attribute type 1 has an invalid length. [ 202.969592][T11621] netlink: 'syz.0.1558': attribute type 2 has an invalid length. [ 202.985442][T11624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1561'. [ 203.007551][T11621] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1558'. [ 203.124632][T11632] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1564'. [ 203.352125][T11642] netlink: 'syz.1.1568': attribute type 11 has an invalid length. [ 203.360263][T11642] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1568'. [ 203.668753][T11661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1574'. [ 203.686040][T11665] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1576'. [ 203.713874][T11665] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1576'. [ 203.725325][T11661] bond7 (unregistering): Released all slaves [ 203.762735][T11666] tipc: New replicast peer: 255.255.255.254 [ 203.769356][T11666] tipc: Enabled bearer , priority 10 [ 203.942485][T11678] FAULT_INJECTION: forcing a failure. [ 203.942485][T11678] name failslab, interval 1, probability 0, space 0, times 0 [ 203.966403][T11678] CPU: 0 UID: 0 PID: 11678 Comm: syz.2.1579 Not tainted syzkaller #0 PREEMPT(full) [ 203.966429][T11678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 203.966440][T11678] Call Trace: [ 203.966447][T11678] [ 203.966455][T11678] dump_stack_lvl+0x189/0x250 [ 203.966480][T11678] ? __pfx____ratelimit+0x10/0x10 [ 203.966503][T11678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.966524][T11678] ? __pfx__printk+0x10/0x10 [ 203.966541][T11678] ? netlink_sendmsg+0x805/0xb30 [ 203.966563][T11678] ? __x64_sys_sendmsg+0x19b/0x260 [ 203.966585][T11678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.966615][T11678] should_fail_ex+0x414/0x560 [ 203.966642][T11678] should_failslab+0xa8/0x100 [ 203.966664][T11678] kmem_cache_alloc_noprof+0x74/0x6e0 [ 203.966691][T11678] ? skb_clone+0x212/0x3a0 [ 203.966721][T11678] skb_clone+0x212/0x3a0 [ 203.966749][T11678] __netlink_deliver_tap+0x404/0x850 [ 203.966784][T11678] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.966806][T11678] netlink_deliver_tap+0x19c/0x1b0 [ 203.966829][T11678] netlink_sendskb+0x68/0x140 [ 203.966860][T11678] netlink_unicast+0x397/0x9e0 [ 203.966893][T11678] ? __asan_memcpy+0x40/0x70 [ 203.966927][T11678] ? __pfx_netlink_unicast+0x10/0x10 [ 203.966967][T11678] netlink_rcv_skb+0x28c/0x470 [ 203.966985][T11678] ? __lock_acquire+0xab9/0xd20 [ 203.967006][T11678] ? __pfx_genl_rcv_msg+0x10/0x10 [ 203.967033][T11678] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 203.967076][T11678] ? down_read+0x1ad/0x2e0 [ 203.967106][T11678] genl_rcv+0x28/0x40 [ 203.967130][T11678] netlink_unicast+0x82c/0x9e0 [ 203.967169][T11678] ? __pfx_netlink_unicast+0x10/0x10 [ 203.967201][T11678] ? netlink_sendmsg+0x642/0xb30 [ 203.967228][T11678] netlink_sendmsg+0x805/0xb30 [ 203.967260][T11678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.967285][T11678] ? __lock_acquire+0xab9/0xd20 [ 203.967301][T11678] ? aa_sock_msg_perm+0xf1/0x1d0 [ 203.967331][T11678] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 203.967350][T11678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.967373][T11678] __sock_sendmsg+0x219/0x270 [ 203.967404][T11678] ____sys_sendmsg+0x505/0x830 [ 203.967434][T11678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.967469][T11678] ? import_iovec+0x74/0xa0 [ 203.967492][T11678] ___sys_sendmsg+0x21f/0x2a0 [ 203.967518][T11678] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.967579][T11678] ? __fget_files+0x2a/0x420 [ 203.967595][T11678] ? __fget_files+0x3a0/0x420 [ 203.967623][T11678] __x64_sys_sendmsg+0x19b/0x260 [ 203.967648][T11678] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.967682][T11678] ? __pfx_ksys_write+0x10/0x10 [ 203.967713][T11678] ? do_syscall_64+0xbe/0xfa0 [ 203.967741][T11678] do_syscall_64+0xfa/0xfa0 [ 203.967763][T11678] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.967786][T11678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.967805][T11678] ? clear_bhb_loop+0x60/0xb0 [ 203.967830][T11678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.967849][T11678] RIP: 0033:0x7f76bc58eec9 [ 203.967866][T11678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.967883][T11678] RSP: 002b:00007f76bd4cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.967909][T11678] RAX: ffffffffffffffda RBX: 00007f76bc7e5fa0 RCX: 00007f76bc58eec9 [ 203.967924][T11678] RDX: 0000000000000080 RSI: 0000200000000240 RDI: 0000000000000003 [ 203.967937][T11678] RBP: 00007f76bd4cd090 R08: 0000000000000000 R09: 0000000000000000 [ 203.967949][T11678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.967961][T11678] R13: 00007f76bc7e6038 R14: 00007f76bc7e5fa0 R15: 00007fffc3249fa8 [ 203.967997][T11678] [ 204.376560][T11685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1582'. [ 204.747095][T11697] netlink: 'syz.4.1587': attribute type 1 has an invalid length. [ 204.802068][T11699] netlink: 'syz.2.1586': attribute type 6 has an invalid length. [ 204.885912][ T9] tipc: Node number set to 1526629038 [ 206.587669][T11682] lo speed is unknown, defaulting to 1000 [ 206.593886][T11714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1591'. [ 206.757561][T11716] nftables ruleset with unbound set [ 206.845174][T11723] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1595'. [ 206.860064][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1596'. [ 207.035651][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1596'. [ 207.391641][T11747] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1603'. [ 207.532113][T11755] rdma_rxe: rxe_newlink: failed to add lo [ 207.637605][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1608'. [ 207.649362][T11765] FAULT_INJECTION: forcing a failure. [ 207.649362][T11765] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 207.655254][T11763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1608'. [ 207.676815][T11765] CPU: 1 UID: 0 PID: 11765 Comm: syz.3.1609 Not tainted syzkaller #0 PREEMPT(full) [ 207.676840][T11765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.676851][T11765] Call Trace: [ 207.676859][T11765] [ 207.676867][T11765] dump_stack_lvl+0x189/0x250 [ 207.676892][T11765] ? __pfx____ratelimit+0x10/0x10 [ 207.676915][T11765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.676935][T11765] ? __pfx__printk+0x10/0x10 [ 207.676955][T11765] ? __might_fault+0xb0/0x130 [ 207.676992][T11765] should_fail_ex+0x414/0x560 [ 207.677020][T11765] _copy_from_iter+0x1de/0x1790 [ 207.677054][T11765] ? rcu_is_watching+0x15/0xb0 [ 207.677079][T11765] ? kmalloc_reserve+0xbd/0x290 [ 207.677100][T11765] ? __pfx__copy_from_iter+0x10/0x10 [ 207.677127][T11765] ? __build_skb_around+0x262/0x3f0 [ 207.677148][T11765] ? netlink_sendmsg+0x642/0xb30 [ 207.677165][T11765] ? skb_put+0x11b/0x210 [ 207.677186][T11765] netlink_sendmsg+0x6b2/0xb30 [ 207.677215][T11765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.677239][T11765] ? aa_sock_msg_perm+0xf1/0x1d0 [ 207.677276][T11765] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.677295][T11765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.677316][T11765] __sock_sendmsg+0x219/0x270 [ 207.677349][T11765] ____sys_sendmsg+0x52d/0x830 [ 207.677378][T11765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.677410][T11765] ? import_iovec+0x74/0xa0 [ 207.677433][T11765] ___sys_sendmsg+0x21f/0x2a0 [ 207.677458][T11765] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.677525][T11765] ? __might_fault+0xb0/0x130 [ 207.677555][T11765] __sys_sendmmsg+0x227/0x430 [ 207.677583][T11765] ? __pfx___sys_sendmmsg+0x10/0x10 [ 207.677615][T11765] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 207.677659][T11765] ? ksys_write+0x22a/0x250 [ 207.677686][T11765] ? __pfx_ksys_write+0x10/0x10 [ 207.677718][T11765] __x64_sys_sendmmsg+0xa0/0xc0 [ 207.677743][T11765] do_syscall_64+0xfa/0xfa0 [ 207.677765][T11765] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.677787][T11765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.677806][T11765] ? clear_bhb_loop+0x60/0xb0 [ 207.677829][T11765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.677847][T11765] RIP: 0033:0x7f4b5818eec9 [ 207.677864][T11765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.677881][T11765] RSP: 002b:00007f4b590ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 207.677901][T11765] RAX: ffffffffffffffda RBX: 00007f4b583e5fa0 RCX: 00007f4b5818eec9 [ 207.677915][T11765] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 207.677928][T11765] RBP: 00007f4b590ac090 R08: 0000000000000000 R09: 0000000000000000 [ 207.677940][T11765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.677952][T11765] R13: 00007f4b583e6038 R14: 00007f4b583e5fa0 R15: 00007ffc5cb3fea8 [ 207.677985][T11765] [ 208.002359][T11768] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 208.079663][T11775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1610'. [ 208.100755][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1612'. [ 208.110539][T11777] nbd: must specify a size in bytes for the device [ 208.133885][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1612'. [ 208.462586][T11794] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 208.630316][T11804] FAULT_INJECTION: forcing a failure. [ 208.630316][T11804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.685974][T11804] CPU: 0 UID: 0 PID: 11804 Comm: syz.0.1622 Not tainted syzkaller #0 PREEMPT(full) [ 208.686002][T11804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 208.686014][T11804] Call Trace: [ 208.686022][T11804] [ 208.686030][T11804] dump_stack_lvl+0x189/0x250 [ 208.686056][T11804] ? __pfx____ratelimit+0x10/0x10 [ 208.686078][T11804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.686110][T11804] ? __pfx__printk+0x10/0x10 [ 208.686130][T11804] ? __might_fault+0xb0/0x130 [ 208.686167][T11804] should_fail_ex+0x414/0x560 [ 208.686195][T11804] _copy_from_user+0x2d/0xb0 [ 208.686215][T11804] ___sys_sendmsg+0x158/0x2a0 [ 208.686241][T11804] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.686309][T11804] ? __might_fault+0xb0/0x130 [ 208.686336][T11804] __sys_sendmmsg+0x227/0x430 [ 208.686363][T11804] ? __pfx___sys_sendmmsg+0x10/0x10 [ 208.686395][T11804] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 208.686438][T11804] ? ksys_write+0x22a/0x250 [ 208.686466][T11804] ? __pfx_ksys_write+0x10/0x10 [ 208.686496][T11804] __x64_sys_sendmmsg+0xa0/0xc0 [ 208.686522][T11804] do_syscall_64+0xfa/0xfa0 [ 208.686543][T11804] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.686566][T11804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.686584][T11804] ? clear_bhb_loop+0x60/0xb0 [ 208.686607][T11804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.686625][T11804] RIP: 0033:0x7f585c58eec9 [ 208.686641][T11804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.686656][T11804] RSP: 002b:00007f585d465038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 208.686676][T11804] RAX: ffffffffffffffda RBX: 00007f585c7e5fa0 RCX: 00007f585c58eec9 [ 208.686689][T11804] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 208.686702][T11804] RBP: 00007f585d465090 R08: 0000000000000000 R09: 0000000000000000 [ 208.686714][T11804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.686726][T11804] R13: 00007f585c7e6038 R14: 00007f585c7e5fa0 R15: 00007ffcb2decda8 [ 208.686759][T11804] [ 208.728471][T11810] sctp: [Deprecated]: syz.4.1626 (pid 11810) Use of int in maxseg socket option. [ 208.728471][T11810] Use struct sctp_assoc_value instead [ 208.899240][T11813] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.092569][T11827] sctp: [Deprecated]: syz.1.1632 (pid 11827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.092569][T11827] Use struct sctp_sack_info instead [ 209.111138][T11827] sctp: [Deprecated]: syz.1.1632 (pid 11827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.111138][T11827] Use struct sctp_sack_info instead [ 209.167995][T11831] tipc: Enabled bearer , priority 0 [ 209.169958][T11833] sctp: [Deprecated]: syz.1.1632 (pid 11833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.169958][T11833] Use struct sctp_sack_info instead [ 209.239604][T11827] sctp: [Deprecated]: syz.1.1632 (pid 11827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.239604][T11827] Use struct sctp_sack_info instead [ 209.275983][T11828] tipc: Disabling bearer [ 209.336022][T11844] netlink: 'syz.1.1637': attribute type 10 has an invalid length. [ 209.479215][T11855] FAULT_INJECTION: forcing a failure. [ 209.479215][T11855] name failslab, interval 1, probability 0, space 0, times 0 [ 209.514964][T11855] CPU: 1 UID: 0 PID: 11855 Comm: syz.4.1640 Not tainted syzkaller #0 PREEMPT(full) [ 209.514992][T11855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 209.515005][T11855] Call Trace: [ 209.515013][T11855] [ 209.515021][T11855] dump_stack_lvl+0x189/0x250 [ 209.515047][T11855] ? __pfx____ratelimit+0x10/0x10 [ 209.515070][T11855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.515091][T11855] ? __pfx__printk+0x10/0x10 [ 209.515118][T11855] ? __pfx___might_resched+0x10/0x10 [ 209.515140][T11855] ? fs_reclaim_acquire+0x7d/0x100 [ 209.515174][T11855] should_fail_ex+0x414/0x560 [ 209.515204][T11855] should_failslab+0xa8/0x100 [ 209.515225][T11855] kmem_cache_alloc_node_noprof+0x77/0x710 [ 209.515252][T11855] ? __alloc_skb+0x112/0x2d0 [ 209.515277][T11855] ? __pfx_netlink_unicast+0x10/0x10 [ 209.515311][T11855] __alloc_skb+0x112/0x2d0 [ 209.515335][T11855] netlink_sendmsg+0x5c6/0xb30 [ 209.515365][T11855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.515388][T11855] ? aa_sock_msg_perm+0xf1/0x1d0 [ 209.515415][T11855] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.515432][T11855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.515452][T11855] __sock_sendmsg+0x219/0x270 [ 209.515482][T11855] ____sys_sendmsg+0x52d/0x830 [ 209.515513][T11855] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.515548][T11855] ? import_iovec+0x74/0xa0 [ 209.515572][T11855] ___sys_sendmsg+0x21f/0x2a0 [ 209.515599][T11855] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.515675][T11855] ? __might_fault+0xb0/0x130 [ 209.515706][T11855] __sys_sendmmsg+0x227/0x430 [ 209.515735][T11855] ? __pfx___sys_sendmmsg+0x10/0x10 [ 209.515766][T11855] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 209.515810][T11855] ? ksys_write+0x22a/0x250 [ 209.515838][T11855] ? __pfx_ksys_write+0x10/0x10 [ 209.515870][T11855] __x64_sys_sendmmsg+0xa0/0xc0 [ 209.515895][T11855] do_syscall_64+0xfa/0xfa0 [ 209.515916][T11855] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.515939][T11855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.515958][T11855] ? clear_bhb_loop+0x60/0xb0 [ 209.515983][T11855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.516002][T11855] RIP: 0033:0x7fdacab8eec9 [ 209.516019][T11855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.516036][T11855] RSP: 002b:00007fdacb9e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 209.516057][T11855] RAX: ffffffffffffffda RBX: 00007fdacade5fa0 RCX: 00007fdacab8eec9 [ 209.516071][T11855] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 209.516084][T11855] RBP: 00007fdacb9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 209.516096][T11855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.516107][T11855] R13: 00007fdacade6038 R14: 00007fdacade5fa0 R15: 00007ffc69f76538 [ 209.516144][T11855] [ 209.927833][T11865] tunl0: entered promiscuous mode [ 209.951624][T11865] netlink: 'syz.4.1643': attribute type 3 has an invalid length. [ 210.105178][T11879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.122286][T11879] dvmrp0: entered allmulticast mode [ 210.209707][T11881] netlink: 'syz.4.1650': attribute type 12 has an invalid length. [ 210.453526][T11894] netlink: 'syz.3.1652': attribute type 1 has an invalid length. [ 210.597034][T11903] : entered promiscuous mode [ 210.603509][T11905] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 210.685233][T11905] team1: entered promiscuous mode [ 210.701272][T11905] team1: entered allmulticast mode [ 210.744727][T11913] netlink: 'syz.4.1658': attribute type 1 has an invalid length. [ 210.862626][T11923] netlink: 'syz.3.1661': attribute type 6 has an invalid length. [ 210.873033][T11923] netlink: 'syz.3.1661': attribute type 5 has an invalid length. [ 210.902711][T11923] netlink: 'syz.3.1661': attribute type 27 has an invalid length. [ 210.946957][T11929] netlink: 'syz.4.1662': attribute type 1 has an invalid length. [ 211.036155][T11936] bond6: (slave bridge8): making interface the new active one [ 211.044875][T11936] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 211.186793][T11947] netlink: 'syz.3.1668': attribute type 11 has an invalid length. [ 211.625383][T11964] __nla_validate_parse: 21 callbacks suppressed [ 211.625403][T11964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1672'. [ 211.707961][T11970] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1675'. [ 211.712475][T11964] xt_hashlimit: invalid rate [ 212.087050][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1683'. [ 212.177920][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1684'. [ 212.279382][T12011] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1685'. [ 212.303345][T12011] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1685'. [ 212.362531][T12010] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1687'. [ 212.441730][T12021] netlink: 4892 bytes leftover after parsing attributes in process `syz.3.1691'. [ 212.467458][T12021] openvswitch: netlink: Flow key attr not present in new flow. [ 212.491180][T12024] IPv6: NLM_F_CREATE should be specified when creating new route [ 212.503390][T12024] tipc: Enabling of bearer rejected, failed to enable media [ 212.537364][T12025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.733629][T12035] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1697'. [ 212.743093][T12035] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1697'. [ 212.922684][T12052] Bluetooth: MGMT ver 1.23 [ 212.936754][T12047] tipc: Enabled bearer , priority 0 [ 212.944749][T12047] syzkaller0: entered promiscuous mode [ 212.967532][T12047] syzkaller0: entered allmulticast mode [ 212.991588][T12052] ip6t_REJECT: ECHOREPLY is not supported [ 212.991894][T12047] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 213.028365][T12047] tipc: Resetting bearer [ 213.078225][T12045] tipc: Resetting bearer [ 213.125350][T12045] tipc: Disabling bearer [ 213.854861][T12105] vlan3: entered promiscuous mode [ 213.867234][T12105] bond0: entered promiscuous mode [ 213.872495][T12105] bond_slave_0: entered promiscuous mode [ 213.880004][T12105] bond_slave_1: entered promiscuous mode [ 213.888099][T12105] bond0: (slave vlan3): Opening slave failed [ 214.375030][T12137] tipc: Enabled bearer , priority 0 [ 214.394960][T12137] syzkaller0: entered promiscuous mode [ 214.414315][T12137] syzkaller0: entered allmulticast mode [ 214.439180][T12137] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 214.510317][T12137] tipc: Resetting bearer [ 214.603025][T12135] tipc: Resetting bearer [ 214.683585][T12135] tipc: Disabling bearer [ 214.683592][T12164] openvswitch: netlink: Message has 512 unknown bytes. [ 214.703237][T12164] validate_nla: 8 callbacks suppressed [ 214.703251][T12164] netlink: 'syz.3.1740': attribute type 2 has an invalid length. [ 214.760607][T12169] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.802093][T12169] bridge_slave_1 (unregistering): left allmulticast mode [ 214.810159][T12169] bridge_slave_1 (unregistering): left promiscuous mode [ 214.820582][T12169] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.236811][T12202] FAULT_INJECTION: forcing a failure. [ 215.236811][T12202] name failslab, interval 1, probability 0, space 0, times 0 [ 215.292605][T12202] CPU: 0 UID: 0 PID: 12202 Comm: syz.1.1752 Not tainted syzkaller #0 PREEMPT(full) [ 215.292633][T12202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.292645][T12202] Call Trace: [ 215.292653][T12202] [ 215.292669][T12202] dump_stack_lvl+0x189/0x250 [ 215.292694][T12202] ? __pfx____ratelimit+0x10/0x10 [ 215.292717][T12202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.292737][T12202] ? __pfx__printk+0x10/0x10 [ 215.292764][T12202] ? __pfx___might_resched+0x10/0x10 [ 215.292783][T12202] ? fs_reclaim_acquire+0x7d/0x100 [ 215.292817][T12202] should_fail_ex+0x414/0x560 [ 215.292846][T12202] should_failslab+0xa8/0x100 [ 215.292865][T12202] __kmalloc_cache_noprof+0x6f/0x6f0 [ 215.292893][T12202] ? tcf_proto_create+0x65/0x330 [ 215.292924][T12202] tcf_proto_create+0x65/0x330 [ 215.292953][T12202] tc_new_tfilter+0x11aa/0x15b0 [ 215.293005][T12202] ? __pfx_tc_new_tfilter+0x10/0x10 [ 215.293025][T12202] ? __dev_queue_xmit+0x1d79/0x3b50 [ 215.293085][T12202] ? __pfx_tc_new_tfilter+0x10/0x10 [ 215.293108][T12202] rtnetlink_rcv_msg+0x7cc/0xb70 [ 215.293131][T12202] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 215.293150][T12202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 215.293166][T12202] ? ref_tracker_free+0x63a/0x7d0 [ 215.293192][T12202] ? __asan_memcpy+0x40/0x70 [ 215.293215][T12202] ? __pfx_ref_tracker_free+0x10/0x10 [ 215.293251][T12202] netlink_rcv_skb+0x208/0x470 [ 215.293273][T12202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 215.293295][T12202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 215.293327][T12202] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.293357][T12202] netlink_unicast+0x82c/0x9e0 [ 215.293412][T12202] ? __pfx_netlink_unicast+0x10/0x10 [ 215.293443][T12202] ? netlink_sendmsg+0x642/0xb30 [ 215.293461][T12202] ? skb_put+0x11b/0x210 [ 215.293485][T12202] netlink_sendmsg+0x805/0xb30 [ 215.293517][T12202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.293541][T12202] ? aa_sock_msg_perm+0xf1/0x1d0 [ 215.293569][T12202] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 215.293588][T12202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.293614][T12202] __sock_sendmsg+0x219/0x270 [ 215.293646][T12202] ____sys_sendmsg+0x52d/0x830 [ 215.293680][T12202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.293713][T12202] ? import_iovec+0x74/0xa0 [ 215.293736][T12202] ___sys_sendmsg+0x21f/0x2a0 [ 215.293762][T12202] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.293833][T12202] ? __might_fault+0xb0/0x130 [ 215.293864][T12202] __sys_sendmmsg+0x227/0x430 [ 215.293893][T12202] ? __pfx___sys_sendmmsg+0x10/0x10 [ 215.293927][T12202] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 215.293972][T12202] ? ksys_write+0x22a/0x250 [ 215.294002][T12202] ? __pfx_ksys_write+0x10/0x10 [ 215.294034][T12202] __x64_sys_sendmmsg+0xa0/0xc0 [ 215.294060][T12202] do_syscall_64+0xfa/0xfa0 [ 215.294082][T12202] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.294105][T12202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.294124][T12202] ? clear_bhb_loop+0x60/0xb0 [ 215.294147][T12202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.294166][T12202] RIP: 0033:0x7f9fc938eec9 [ 215.294184][T12202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.294201][T12202] RSP: 002b:00007f9fc75ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 215.294222][T12202] RAX: ffffffffffffffda RBX: 00007f9fc95e5fa0 RCX: 00007f9fc938eec9 [ 215.294237][T12202] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 215.294251][T12202] RBP: 00007f9fc75ee090 R08: 0000000000000000 R09: 0000000000000000 [ 215.294263][T12202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.294274][T12202] R13: 00007f9fc95e6038 R14: 00007f9fc95e5fa0 R15: 00007ffd3d683ee8 [ 215.294303][T12202] [ 216.205492][T12234] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 216.236959][T12233] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 216.289567][T12240] netlink: 'syz.4.1761': attribute type 9 has an invalid length. [ 216.574091][T12251] chnl_net:caif_netlink_parms(): no params data found [ 216.728330][T12257] syzkaller0: entered promiscuous mode [ 216.733847][T12257] syzkaller0: entered allmulticast mode [ 217.200333][T12280] openvswitch: netlink: Missing valid actions attribute. [ 217.225065][T12280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.416252][T12286] syzkaller1: entered promiscuous mode [ 217.426588][T12286] syzkaller1: entered allmulticast mode [ 217.469209][T12298] __nla_validate_parse: 17 callbacks suppressed [ 217.469227][T12298] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1778'. [ 217.527229][T12303] sctp: [Deprecated]: syz.4.1782 (pid 12303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.527229][T12303] Use struct sctp_sack_info instead [ 217.561964][T12307] FAULT_INJECTION: forcing a failure. [ 217.561964][T12307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.580881][T12307] CPU: 1 UID: 0 PID: 12307 Comm: syz.2.1783 Not tainted syzkaller #0 PREEMPT(full) [ 217.580908][T12307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 217.580919][T12307] Call Trace: [ 217.580927][T12307] [ 217.580935][T12307] dump_stack_lvl+0x189/0x250 [ 217.580959][T12307] ? __pfx____ratelimit+0x10/0x10 [ 217.580981][T12307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.581001][T12307] ? __pfx__printk+0x10/0x10 [ 217.581021][T12307] ? __might_fault+0xb0/0x130 [ 217.581059][T12307] should_fail_ex+0x414/0x560 [ 217.581088][T12307] _copy_from_user+0x2d/0xb0 [ 217.581108][T12307] ___sys_sendmsg+0x158/0x2a0 [ 217.581135][T12307] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.581203][T12307] ? __might_fault+0xb0/0x130 [ 217.581231][T12307] __sys_sendmmsg+0x227/0x430 [ 217.581258][T12307] ? __pfx___sys_sendmmsg+0x10/0x10 [ 217.581288][T12307] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.581328][T12307] ? ksys_write+0x22a/0x250 [ 217.581355][T12307] ? __pfx_ksys_write+0x10/0x10 [ 217.581384][T12307] __x64_sys_sendmmsg+0xa0/0xc0 [ 217.581407][T12307] do_syscall_64+0xfa/0xfa0 [ 217.581437][T12307] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.581460][T12307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.581479][T12307] ? clear_bhb_loop+0x60/0xb0 [ 217.581502][T12307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.581520][T12307] RIP: 0033:0x7f76bc58eec9 [ 217.581537][T12307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.581554][T12307] RSP: 002b:00007f76bd4cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 217.581576][T12307] RAX: ffffffffffffffda RBX: 00007f76bc7e5fa0 RCX: 00007f76bc58eec9 [ 217.581591][T12307] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 217.581604][T12307] RBP: 00007f76bd4cd090 R08: 0000000000000000 R09: 0000000000000000 [ 217.581617][T12307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.581629][T12307] R13: 00007f76bc7e6038 R14: 00007f76bc7e5fa0 R15: 00007fffc3249fa8 [ 217.581663][T12307] [ 217.626630][T12309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1784'. [ 217.769918][T12315] tipc: Enabled bearer , priority 0 [ 217.819915][T12315] syzkaller0: entered promiscuous mode [ 217.825423][T12315] syzkaller0: entered allmulticast mode [ 217.835185][T12315] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 217.854486][T12317] netlink: zone id is out of range [ 217.860454][T12317] netlink: del zone limit has 4 unknown bytes [ 217.888242][T12315] tipc: Resetting bearer [ 217.905455][T12314] tipc: Resetting bearer [ 217.923992][T12314] tipc: Disabling bearer [ 217.959235][T12321] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 217.974979][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.061243][T12323] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.1790'. [ 218.093376][T12329] netlink: 'syz.2.1791': attribute type 9 has an invalid length. [ 218.195334][T12332] syzkaller0: entered promiscuous mode [ 218.203682][T12334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1793'. [ 218.203691][T12332] syzkaller0: entered allmulticast mode [ 218.415524][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 218.545307][T12350] netlink: 'syz.3.1801': attribute type 9 has an invalid length. [ 218.682958][T12370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1803'. [ 218.724127][T12369] delete_channel: no stack [ 218.990864][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1807'. [ 219.286837][T12399] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1811'. [ 219.389938][T12404] netlink: 'syz.2.1813': attribute type 2 has an invalid length. [ 219.470703][T12411] xt_ecn: cannot match TCP bits for non-tcp packets [ 219.493750][T12409] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1815'. [ 219.545129][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1817'. [ 219.554829][T12413] netlink: 'syz.0.1817': attribute type 3 has an invalid length. [ 219.765851][T12429] netlink: 'syz.4.1824': attribute type 8 has an invalid length. [ 219.780053][T12430] tc_dump_action: action bad kind [ 219.957840][T12448] netlink: 'syz.0.1829': attribute type 1 has an invalid length. [ 220.307908][T12471] netlink: 'syz.4.1836': attribute type 1 has an invalid length. [ 220.602791][T12484] gretap2: entered promiscuous mode [ 220.611697][T12484] gretap2: entered allmulticast mode [ 221.352342][T12516] tipc: Enabled bearer , priority 0 [ 221.378204][T12514] syzkaller0: entered promiscuous mode [ 221.398059][T12514] syzkaller0: entered allmulticast mode [ 221.603497][T12530] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 221.631466][T12514] tipc: Resetting bearer [ 221.644146][T12514] tipc: Disabling bearer [ 221.918836][T12544] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 221.950826][T12544] netlink: 'syz.0.1858': attribute type 1 has an invalid length. [ 222.138345][T12553] gretap2: entered promiscuous mode [ 222.489823][T12573] IPVS: persistence engine module ip_vs_pe_À not found [ 222.531361][T12573] ksmbd: Unknown IPC event: 3, ignore. [ 222.809042][T12586] tipc: Enabling of bearer rejected, failed to enable media [ 222.978767][T12608] __nla_validate_parse: 81 callbacks suppressed [ 222.978785][T12608] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1880'. [ 223.001980][T12611] sock: sock_set_timeout: `syz.0.1879' (pid 12611) tries to set negative timeout [ 223.023204][T12610] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1880'. [ 223.025933][T12613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1878'. [ 223.237319][T12622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1884'. [ 223.260400][T12618] netlink: 'syz.0.1882': attribute type 2 has an invalid length. [ 223.283569][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1882'. [ 223.360508][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1886'. [ 223.428738][T12635] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1887'. [ 223.457833][T12635] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1887'. [ 223.473009][T12635] netlink: 'syz.1.1887': attribute type 5 has an invalid length. [ 223.486481][T12635] netlink: 'syz.1.1887': attribute type 6 has an invalid length. [ 223.523810][T12635] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1887'. [ 223.557260][T12634] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1887'. [ 223.601562][T12634] netlink: 'syz.1.1887': attribute type 5 has an invalid length. [ 223.638111][T12634] netlink: 'syz.1.1887': attribute type 6 has an invalid length. [ 224.348950][T12694] bridge5: entered promiscuous mode [ 224.357472][T12694] bridge5: entered allmulticast mode [ 224.475157][T12708] netlink: 'syz.1.1909': attribute type 64 has an invalid length. [ 224.543793][T12713] FAULT_INJECTION: forcing a failure. [ 224.543793][T12713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.559678][T12713] CPU: 1 UID: 0 PID: 12713 Comm: syz.2.1913 Not tainted syzkaller #0 PREEMPT(full) [ 224.559703][T12713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 224.559715][T12713] Call Trace: [ 224.559722][T12713] [ 224.559730][T12713] dump_stack_lvl+0x189/0x250 [ 224.559755][T12713] ? __pfx____ratelimit+0x10/0x10 [ 224.559776][T12713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.559796][T12713] ? __pfx__printk+0x10/0x10 [ 224.559815][T12713] ? __might_fault+0xb0/0x130 [ 224.559850][T12713] should_fail_ex+0x414/0x560 [ 224.559875][T12713] _copy_from_user+0x2d/0xb0 [ 224.559895][T12713] ___sys_sendmsg+0x158/0x2a0 [ 224.559921][T12713] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.559981][T12713] ? __fget_files+0x2a/0x420 [ 224.559997][T12713] ? __fget_files+0x3a0/0x420 [ 224.560026][T12713] __x64_sys_sendmsg+0x19b/0x260 [ 224.560051][T12713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.560084][T12713] ? __pfx_ksys_write+0x10/0x10 [ 224.560113][T12713] ? do_syscall_64+0xbe/0xfa0 [ 224.560141][T12713] do_syscall_64+0xfa/0xfa0 [ 224.560162][T12713] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.560185][T12713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.560204][T12713] ? clear_bhb_loop+0x60/0xb0 [ 224.560227][T12713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.560246][T12713] RIP: 0033:0x7f76bc58eec9 [ 224.560261][T12713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.560278][T12713] RSP: 002b:00007f76bd4cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.560299][T12713] RAX: ffffffffffffffda RBX: 00007f76bc7e5fa0 RCX: 00007f76bc58eec9 [ 224.560313][T12713] RDX: 0000000000000080 RSI: 0000200000000240 RDI: 0000000000000003 [ 224.560326][T12713] RBP: 00007f76bd4cd090 R08: 0000000000000000 R09: 0000000000000000 [ 224.560338][T12713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.560350][T12713] R13: 00007f76bc7e6038 R14: 00007f76bc7e5fa0 R15: 00007fffc3249fa8 [ 224.560383][T12713] [ 224.715943][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056aeb800: rx timeout, send abort [ 225.184117][T12752] FAULT_INJECTION: forcing a failure. [ 225.184117][T12752] name failslab, interval 1, probability 0, space 0, times 0 [ 225.204594][T12752] CPU: 0 UID: 0 PID: 12752 Comm: syz.2.1924 Not tainted syzkaller #0 PREEMPT(full) [ 225.204620][T12752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 225.204638][T12752] Call Trace: [ 225.204643][T12752] [ 225.204651][T12752] dump_stack_lvl+0x189/0x250 [ 225.204676][T12752] ? __pfx____ratelimit+0x10/0x10 [ 225.204698][T12752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.204716][T12752] ? __pfx__printk+0x10/0x10 [ 225.204741][T12752] ? __pfx___might_resched+0x10/0x10 [ 225.204760][T12752] ? fs_reclaim_acquire+0x7d/0x100 [ 225.204790][T12752] should_fail_ex+0x414/0x560 [ 225.204816][T12752] should_failslab+0xa8/0x100 [ 225.204836][T12752] kmem_cache_alloc_node_noprof+0x77/0x710 [ 225.204861][T12752] ? __alloc_skb+0x112/0x2d0 [ 225.204879][T12752] ? netlink_autobind+0xdb/0x300 [ 225.204905][T12752] __alloc_skb+0x112/0x2d0 [ 225.204926][T12752] netlink_sendmsg+0x5c6/0xb30 [ 225.204957][T12752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.204980][T12752] ? aa_sock_msg_perm+0xf1/0x1d0 [ 225.205006][T12752] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 225.205024][T12752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.205045][T12752] __sock_sendmsg+0x219/0x270 [ 225.205075][T12752] ____sys_sendmsg+0x505/0x830 [ 225.205103][T12752] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.205134][T12752] ? import_iovec+0x74/0xa0 [ 225.205154][T12752] ___sys_sendmsg+0x21f/0x2a0 [ 225.205179][T12752] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.205237][T12752] ? __fget_files+0x2a/0x420 [ 225.205254][T12752] ? __fget_files+0x3a0/0x420 [ 225.205281][T12752] __x64_sys_sendmsg+0x19b/0x260 [ 225.205307][T12752] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.205340][T12752] ? __pfx_ksys_write+0x10/0x10 [ 225.205366][T12752] ? do_syscall_64+0xbe/0xfa0 [ 225.205391][T12752] do_syscall_64+0xfa/0xfa0 [ 225.205410][T12752] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.205432][T12752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.205450][T12752] ? clear_bhb_loop+0x60/0xb0 [ 225.205473][T12752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.205491][T12752] RIP: 0033:0x7f76bc58eec9 [ 225.205507][T12752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.205524][T12752] RSP: 002b:00007f76bd4cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.205544][T12752] RAX: ffffffffffffffda RBX: 00007f76bc7e5fa0 RCX: 00007f76bc58eec9 [ 225.205559][T12752] RDX: 0000000000000080 RSI: 0000200000000240 RDI: 0000000000000003 [ 225.205570][T12752] RBP: 00007f76bd4cd090 R08: 0000000000000000 R09: 0000000000000000 [ 225.205581][T12752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.205592][T12752] R13: 00007f76bc7e6038 R14: 00007f76bc7e5fa0 R15: 00007fffc3249fa8 [ 225.205631][T12752] [ 225.475629][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805700cc00: rx timeout, send abort [ 225.483899][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056aeb800: abort rx timeout. Force session deactivation [ 225.592881][T12755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.606617][T12755] C: renamed from lo (while UP) [ 225.707967][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880579b8800: rx timeout, send abort [ 225.716792][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880579b8800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 225.983879][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805700cc00: abort rx timeout. Force session deactivation [ 226.360525][T12817] netlink: 'syz.2.1943': attribute type 13 has an invalid length. [ 226.554818][T12831] SET target dimension over the limit! [ 226.603663][T12834] netlink: 'syz.1.1949': attribute type 33 has an invalid length. [ 227.108952][T12879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.176027][T12886] tipc: Enabled bearer , priority 0 [ 227.203384][T12879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.224213][T12886] syzkaller0: entered promiscuous mode [ 227.235696][T12886] syzkaller0: entered allmulticast mode [ 227.268550][T12886] tipc: Resetting bearer [ 227.275639][T12891] x_tables: duplicate underflow at hook 3 [ 227.288411][T12884] tipc: Resetting bearer [ 227.322930][T12884] tipc: Disabling bearer [ 227.337441][T12895] atomic_op ffff88807c4c8998 conn xmit_atomic 0000000000000000 [ 227.351430][T12895] Bluetooth: MGMT ver 1.23 [ 228.096233][T12939] __nla_validate_parse: 14 callbacks suppressed [ 228.096250][T12939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1976'. [ 228.132059][T12939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1976'. [ 228.141285][T12950] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1978'. [ 228.281590][T12959] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004 [ 228.478484][T12975] netlink: 'syz.0.1988': attribute type 11 has an invalid length. [ 228.648703][T12987] netlink: 'syz.3.1992': attribute type 1 has an invalid length. [ 228.658372][T12987] netlink: 14436 bytes leftover after parsing attributes in process `syz.3.1992'. [ 228.667873][T12987] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 228.762812][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1994'. [ 229.255207][T13032] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2008'. [ 229.346764][T13036] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2008'. [ 229.387553][T13036] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2008'. [ 229.428718][T13036] netlink: 'syz.4.2008': attribute type 6 has an invalid length. [ 229.434075][T13046] netlink: 'syz.0.2011': attribute type 3 has an invalid length. [ 229.468988][T13036] netlink: 'syz.4.2008': attribute type 5 has an invalid length. [ 229.476949][T13036] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2008'. [ 229.651227][T13060] tipc: Enabled bearer , priority 0 [ 229.661342][T13060] syzkaller0: entered promiscuous mode [ 229.674139][T13060] syzkaller0: entered allmulticast mode [ 229.683310][T13060] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 229.722224][T13060] tipc: Resetting bearer [ 229.756260][T13060] tipc: Resetting bearer [ 229.796288][T13060] tipc: Disabling bearer [ 229.890183][T13069] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2019'. [ 230.840968][T13113] syzkaller1: entered promiscuous mode [ 230.863524][T13113] syzkaller1: entered allmulticast mode [ 231.098761][T13131] team0: No ports can be present during mode change [ 231.163743][T13133] syzkaller0: entered allmulticast mode [ 231.170280][T13139] netlink: 'syz.0.2035': attribute type 39 has an invalid length. [ 231.550522][T13143] C speed is unknown, defaulting to 1000 [ 231.557119][T13155] tipc: MTU too low for tipc bearer [ 231.754411][T13163] netlink: 'syz.3.2045': attribute type 1 has an invalid length. [ 231.769878][T13165] sctp: [Deprecated]: syz.4.2046 (pid 13165) Use of int in max_burst socket option. [ 231.769878][T13165] Use struct sctp_assoc_value instead [ 231.984425][T13182] FAULT_INJECTION: forcing a failure. [ 231.984425][T13182] name failslab, interval 1, probability 0, space 0, times 0 [ 232.079332][T13182] CPU: 0 UID: 0 PID: 13182 Comm: syz.0.2051 Not tainted syzkaller #0 PREEMPT(full) [ 232.079360][T13182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 232.079372][T13182] Call Trace: [ 232.079380][T13182] [ 232.079388][T13182] dump_stack_lvl+0x189/0x250 [ 232.079414][T13182] ? __pfx____ratelimit+0x10/0x10 [ 232.079438][T13182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.079459][T13182] ? __pfx__printk+0x10/0x10 [ 232.079476][T13182] ? netlink_sendmsg+0x805/0xb30 [ 232.079498][T13182] ? __x64_sys_sendmsg+0x19b/0x260 [ 232.079520][T13182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.079549][T13182] should_fail_ex+0x414/0x560 [ 232.079578][T13182] should_failslab+0xa8/0x100 [ 232.079599][T13182] kmem_cache_alloc_noprof+0x74/0x6e0 [ 232.079624][T13182] ? skb_clone+0x212/0x3a0 [ 232.079651][T13182] skb_clone+0x212/0x3a0 [ 232.079676][T13182] __netlink_deliver_tap+0x404/0x850 [ 232.079707][T13182] ? netlink_deliver_tap+0x2e/0x1b0 [ 232.079728][T13182] netlink_deliver_tap+0x19c/0x1b0 [ 232.079747][T13182] netlink_sendskb+0x68/0x140 [ 232.079777][T13182] netlink_unicast+0x397/0x9e0 [ 232.079803][T13182] ? __asan_memcpy+0x40/0x70 [ 232.079835][T13182] ? __pfx_netlink_unicast+0x10/0x10 [ 232.079874][T13182] netlink_rcv_skb+0x28c/0x470 [ 232.079892][T13182] ? __lock_acquire+0xab9/0xd20 [ 232.079911][T13182] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.079946][T13182] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 232.079987][T13182] ? down_read+0x1ad/0x2e0 [ 232.080016][T13182] genl_rcv+0x28/0x40 [ 232.080038][T13182] netlink_unicast+0x82c/0x9e0 [ 232.080077][T13182] ? __pfx_netlink_unicast+0x10/0x10 [ 232.080108][T13182] ? netlink_sendmsg+0x642/0xb30 [ 232.080126][T13182] ? skb_put+0x11b/0x210 [ 232.080151][T13182] netlink_sendmsg+0x805/0xb30 [ 232.080182][T13182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.080207][T13182] ? aa_sock_msg_perm+0xf1/0x1d0 [ 232.080235][T13182] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 232.080253][T13182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.080275][T13182] __sock_sendmsg+0x219/0x270 [ 232.080306][T13182] ____sys_sendmsg+0x505/0x830 [ 232.080336][T13182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.080370][T13182] ? import_iovec+0x74/0xa0 [ 232.080393][T13182] ___sys_sendmsg+0x21f/0x2a0 [ 232.080418][T13182] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.080482][T13182] ? __fget_files+0x2a/0x420 [ 232.080499][T13182] ? __fget_files+0x3a0/0x420 [ 232.080528][T13182] __x64_sys_sendmsg+0x19b/0x260 [ 232.080554][T13182] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 232.080588][T13182] ? __pfx_ksys_write+0x10/0x10 [ 232.080619][T13182] ? do_syscall_64+0xbe/0xfa0 [ 232.080646][T13182] do_syscall_64+0xfa/0xfa0 [ 232.080667][T13182] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.080689][T13182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.080708][T13182] ? clear_bhb_loop+0x60/0xb0 [ 232.080731][T13182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.080748][T13182] RIP: 0033:0x7f585c58eec9 [ 232.080765][T13182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.080780][T13182] RSP: 002b:00007f585d465038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.080799][T13182] RAX: ffffffffffffffda RBX: 00007f585c7e5fa0 RCX: 00007f585c58eec9 [ 232.080813][T13182] RDX: 0000000000000080 RSI: 0000200000000240 RDI: 0000000000000003 [ 232.080825][T13182] RBP: 00007f585d465090 R08: 0000000000000000 R09: 0000000000000000 [ 232.080835][T13182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.080846][T13182] R13: 00007f585c7e6038 R14: 00007f585c7e5fa0 R15: 00007ffcb2decda8 [ 232.080879][T13182] [ 233.014701][T13215] syzkaller0: entered promiscuous mode [ 233.036498][T13215] syzkaller0: entered allmulticast mode [ 233.497684][T13249] bond7 (unregistering): Released all slaves [ 233.657022][T13256] bond8: option resend_igmp: invalid value (32767) [ 233.663644][T13256] bond8: option resend_igmp: allowed values 0 - 255 [ 233.678643][T13256] bond8 (unregistering): Released all slaves [ 233.724476][T13266] tipc: Enabling of bearer rejected, failed to enable media [ 233.743183][T13272] __nla_validate_parse: 2 callbacks suppressed [ 233.743202][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2077'. [ 233.778297][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2077'. [ 233.902503][T13280] IPVS: set_ctl: invalid protocol: 483 224.0.0.1:20004 [ 233.920139][T13280] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004 [ 234.007232][T13285] bond3: invalid ARP target 0.0.0.0 specified for addition [ 234.014727][T13285] bond3: option arp_ip_target: invalid value (0) [ 234.023627][T13285] bond3 (unregistering): Released all slaves [ 234.054047][T13289] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 234.259384][T13311] netlink: 'syz.3.2090': attribute type 1 has an invalid length. [ 234.259927][T13308] syzkaller1: entered promiscuous mode [ 234.281129][T13308] syzkaller1: entered allmulticast mode [ 234.295004][T13305] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 234.327506][T13311] veth3: entered promiscuous mode [ 234.369430][T13318] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2088'. [ 234.542076][T13328] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2095'. [ 234.606779][ T5840] block nbd0: Receive control failed (result -32) [ 234.632414][T13332] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2097'. [ 234.680521][T13335] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2098'. [ 234.702885][T13338] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2099'. [ 234.800951][T13343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2100'. [ 234.865277][T13342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2101'. [ 235.171894][T13359] tipc: Enabled bearer , priority 0 [ 235.181830][T13363] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 235.217905][T13363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2107'. [ 235.235399][T13359] syzkaller0: entered promiscuous mode [ 235.241461][T13359] syzkaller0: entered allmulticast mode [ 235.251191][T13359] tipc: Resetting bearer [ 235.554615][T13383] netlink: 'syz.1.2113': attribute type 1 has an invalid length. [ 235.562811][T13383] block nbd1: not configured, cannot reconfigure [ 235.704649][ T1145] tipc: Resetting bearer [ 235.824892][T13398] gretap0: entered promiscuous mode [ 235.843920][T13398] 0ªî{X¹¦: renamed from gretap0 [ 235.853405][T13398] 0ªî{X¹¦: left promiscuous mode [ 235.858829][T13398] 0ªî{X¹¦: entered allmulticast mode [ 235.867291][T13398] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 235.978003][T13358] tipc: Resetting bearer [ 237.149445][T13358] tipc: Disabling bearer [ 237.353800][T13430] netlink: 'syz.1.2130': attribute type 1 has an invalid length. [ 237.979089][T13477] netlink: 'syz.1.2145': attribute type 5 has an invalid length. [ 238.255109][T13494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.759721][T13534] netlink: 'syz.4.2165': attribute type 1 has an invalid length. [ 238.805515][T13534] __nla_validate_parse: 12 callbacks suppressed [ 238.805535][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2165'. [ 239.121475][T13555] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 239.138254][T13557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2175'. [ 239.193764][T13555] syzkaller0: entered promiscuous mode [ 239.201360][T13555] syzkaller0: entered allmulticast mode [ 239.425157][T13554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2175'. [ 239.502538][T13574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2179'. [ 240.715319][T13579] ip6tnl3: entered promiscuous mode [ 240.721007][T13579] ip6tnl3: entered allmulticast mode [ 240.911872][T13590] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2184'. [ 240.936579][T13593] tipc: Enabling not permitted [ 240.942656][T13593] tipc: Enabling of bearer rejected, failed to enable media [ 241.112525][T13610] IPVS: set_ctl: invalid protocol: 131 172.20.20.13:21 [ 241.118062][T13603] bond7: entered promiscuous mode [ 241.124703][T13603] bond7: entered allmulticast mode [ 241.135377][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2189'. [ 241.142881][T13603] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.172349][T13609] netlink: 'syz.1.2190': attribute type 1 has an invalid length. [ 241.197235][T13609] veth0: entered promiscuous mode [ 241.216594][T13608] veth0: left promiscuous mode [ 241.385442][T13627] netlink: 'syz.1.2192': attribute type 1 has an invalid length. [ 241.653145][T13650] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 241.659979][T13648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2199'. [ 241.779538][T13653] syzkaller1: entered promiscuous mode [ 241.785137][T13653] syzkaller1: entered allmulticast mode [ 241.795101][T13653] netlink: 'syz.4.2200': attribute type 3 has an invalid length. [ 241.813790][T13653] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2200'. [ 241.943881][T13667] netlink: 'syz.3.2204': attribute type 12 has an invalid length. [ 242.280977][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2211'. [ 242.352831][T13697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2214'. [ 242.362753][T13697] tipc: Invalid UDP bearer configuration [ 242.363054][T13697] tipc: Enabling of bearer rejected, failed to enable media [ 242.451708][T13704] netlink: 'syz.1.2216': attribute type 7 has an invalid length. [ 242.945505][T13737] netlink: 'syz.3.2229': attribute type 1 has an invalid length. [ 242.953658][T13737] netlink: 'syz.3.2229': attribute type 3 has an invalid length. [ 242.961894][T13737] netlink: 'syz.3.2229': attribute type 235 has an invalid length. [ 243.173766][T13745] gre0: left allmulticast mode [ 243.218861][T13748] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 244.234926][T13813] __nla_validate_parse: 3 callbacks suppressed [ 244.234944][T13813] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2254'. [ 244.481802][T13826] tap0: tun_chr_ioctl cmd 1074025672 [ 244.495360][T13826] tap0: ignored: set checksum disabled [ 244.518147][T13836] sctp: [Deprecated]: syz.1.2262 (pid 13836) Use of int in max_burst socket option. [ 244.518147][T13836] Use struct sctp_assoc_value instead [ 244.629871][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2264'. [ 244.778299][T13852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2266'. [ 244.838657][T13856] netlink: 'syz.2.2267': attribute type 11 has an invalid length. [ 245.214610][T13888] netlink: 'syz.2.2277': attribute type 1 has an invalid length. [ 245.223142][T13888] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2277'. [ 245.234582][T13888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2277'. [ 245.234655][T13889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2277'. [ 245.267896][ T5840] Bluetooth: hci0: command tx timeout [ 245.341130][T13897] netlink: 'syz.2.2279': attribute type 15 has an invalid length. [ 245.569010][T13902] tipc: Enabling of bearer rejected, failed to enable media [ 245.580819][T13904] tipc: Enabling of bearer rejected, failed to enable media [ 245.755653][T13918] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 245.856974][T13922] netlink: 'syz.3.2286': attribute type 1 has an invalid length. [ 247.073094][T14002] xt_hashlimit: size too large, truncated to 1048576 [ 247.127138][T13984] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2302'. [ 247.322422][T14011] Bluetooth: hci0: invalid length 39, exp 2 for type 26 [ 247.610977][T14021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2313'. [ 247.612093][T14023] xt_l2tp: unknown flags: 10 [ 247.743277][T14033] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2317'. [ 247.795201][T14033] bond9: Unable to set up delay as MII monitoring is disabled [ 247.819765][T14033] bond9 (unregistering): Released all slaves [ 248.049294][T14058] netlink: 'syz.0.2323': attribute type 1 has an invalid length. [ 248.060189][T14052] x_tables: duplicate underflow at hook 1 [ 248.274492][T14078] bridge_slave_0: invalid flags given to default FDB implementation [ 248.317067][T14074] geneve4: entered promiscuous mode [ 248.322327][T14074] geneve4: entered allmulticast mode [ 248.347583][ T9411] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 248.358220][ T9411] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 248.398539][ T9411] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 248.422413][ T9411] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 248.612073][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2338'. [ 248.669855][T14109] tipc: New replicast peer: 255.255.255.255 [ 248.675422][T14110] netlink: 'syz.4.2340': attribute type 13 has an invalid length. [ 248.676944][T14109] tipc: Enabled bearer , priority 10 [ 248.801271][T14115] netlink: 'syz.0.2343': attribute type 10 has an invalid length. [ 250.432341][T14113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.445366][T14115] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.458187][T14115] bridge_slave_1: left allmulticast mode [ 250.470982][T14115] bridge_slave_1: left promiscuous mode [ 250.487386][T14115] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.503714][T14115] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 250.536280][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.556795][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.575660][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.646110][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.661766][T14154] netlink: 'syz.1.2350': attribute type 1 has an invalid length. [ 250.719169][T14156] netlink: 'syz.3.2352': attribute type 5 has an invalid length. [ 250.750214][T14154] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2350'. [ 250.766808][T14156] netlink: 'syz.3.2352': attribute type 5 has an invalid length. [ 250.829223][T14167] xt_hashlimit: size too large, truncated to 1048576 [ 250.851107][T14167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2354'. [ 251.127291][T14181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.157499][T14187] netlink: 'syz.0.2360': attribute type 1 has an invalid length. [ 251.210834][T14187] bond10: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 251.220604][T14190] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20002 [ 251.237561][T14187] bond10 (unregistering): (slave ip6gretap1): Releasing backup interface [ 251.269079][T14187] bond10 (unregistering): Released all slaves [ 251.425161][T14201] netlink: 'syz.4.2365': attribute type 7 has an invalid length. [ 251.432181][T14207] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2367'. [ 251.438171][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2365'. [ 251.444444][T14207] netlink: 'syz.0.2367': attribute type 9 has an invalid length. [ 251.546389][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'. [ 251.565577][T14214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2369'. [ 251.594463][T14219] netlink: 340 bytes leftover after parsing attributes in process `syz.0.2371'. [ 251.607696][T14220] tipc: New replicast peer: 255.255.255.255 [ 251.608999][T14219] xt_bpf: check failed: parse error [ 251.647812][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2370'. [ 251.704279][T14219] netlink: 340 bytes leftover after parsing attributes in process `syz.0.2371'. [ 251.906300][T14235] netlink: 'syz.4.2375': attribute type 3 has an invalid length. [ 251.942187][T14241] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 251.968300][T14241] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 251.970882][T14242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2380'. [ 252.067722][T14251] xt_hashlimit: size too large, truncated to 1048576 [ 252.567897][T14269] : renamed from bridge_slave_0 [ 252.589519][T14269] netlink: 'syz.3.2386': attribute type 11 has an invalid length. [ 252.605691][T14272] block nbd1: Unsupported socket: should be TCP or UNIX. [ 252.972934][T14283] [ 252.975300][T14283] ============================= [ 252.980131][T14283] [ BUG: Invalid wait context ] [ 252.984970][T14283] syzkaller #0 Not tainted [ 252.989379][T14283] ----------------------------- [ 252.994213][T14283] syz.3.2392/14283 is trying to lock: [ 252.999568][T14283] ffffffff8e27a6b8 (stack_list_lock){-.-.}-{3:3}, at: __set_page_owner+0x2c3/0x4a0 [ 253.008906][T14283] other info that might help us debug this: [ 253.014781][T14283] context-{5:5} [ 253.018231][T14283] 4 locks held by syz.3.2392/14283: [ 253.023418][T14283] #0: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: __queue_work+0x102/0xfb0 [ 253.032654][T14283] #1: ffff8880b86397d8 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x809/0xfb0 [ 253.041716][T14283] #2: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run3+0x19a/0x4e0 [ 253.051144][T14283] #3: ffff8880b8632780 (stream_local_lock){....}-{3:3}, at: __bpf_stream_push_str+0x1db/0xc90 [ 253.061522][T14283] stack backtrace: [ 253.065248][T14283] CPU: 0 UID: 0 PID: 14283 Comm: syz.3.2392 Not tainted syzkaller #0 PREEMPT(full) [ 253.065282][T14283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 253.065305][T14283] Call Trace: [ 253.065315][T14283] [ 253.065324][T14283] dump_stack_lvl+0x189/0x250 [ 253.065350][T14283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.065370][T14283] ? __pfx__printk+0x10/0x10 [ 253.065387][T14283] ? __bpf_stream_push_str+0x329/0xc90 [ 253.065411][T14283] ? print_lock_name+0xde/0x100 [ 253.065431][T14283] __lock_acquire+0xbcb/0xd20 [ 253.065453][T14283] ? __set_page_owner+0x2c3/0x4a0 [ 253.065480][T14283] lock_acquire+0x120/0x360 [ 253.065497][T14283] ? __set_page_owner+0x2c3/0x4a0 [ 253.065530][T14283] _raw_spin_lock_irqsave+0xa7/0xf0 [ 253.065552][T14283] ? __set_page_owner+0x2c3/0x4a0 [ 253.065578][T14283] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 253.065598][T14283] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 253.065626][T14283] ? __set_page_owner+0x25c/0x4a0 [ 253.065660][T14283] __set_page_owner+0x2c3/0x4a0 [ 253.065687][T14283] ? __pfx___set_page_owner+0x10/0x10 [ 253.065716][T14283] post_alloc_hook+0x240/0x2a0 [ 253.065739][T14283] get_page_from_freelist+0x2365/0x2440 [ 253.065766][T14283] ? is_bpf_text_address+0x26/0x2b0 [ 253.065787][T14283] ? lockdep_unlock+0x89/0x120 [ 253.065815][T14283] ? register_lock_class+0x2b7/0x320 [ 253.065834][T14283] ? __pfx_get_page_from_freelist+0x10/0x10 [ 253.065852][T14283] ? __lock_acquire+0xab9/0xd20 [ 253.065870][T14283] ? prepare_alloc_pages+0x153/0x610 [ 253.065902][T14283] alloc_frozen_pages_nolock_noprof+0xac/0x150 [ 253.065929][T14283] ? __bpf_stream_push_str+0x1db/0xc90 [ 253.065951][T14283] alloc_pages_nolock_noprof+0xa/0x30 [ 253.065972][T14283] bpf_stream_page_replace+0x19/0x1e0 [ 253.065995][T14283] ? __bpf_stream_push_str+0x1db/0xc90 [ 253.066017][T14283] __bpf_stream_push_str+0x329/0xc90 [ 253.066043][T14283] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 253.066062][T14283] ? vsnprintf+0x386/0xf00 [ 253.066090][T14283] ? __asan_memcpy+0x40/0x70 [ 253.066115][T14283] ? vsnprintf+0xe11/0xf00 [ 253.066147][T14283] bpf_stream_stage_printk+0x14e/0x1c0 [ 253.066169][T14283] ? __pfx_find_from_stack_cb+0x10/0x10 [ 253.066188][T14283] ? arch_bpf_stack_walk+0x112/0x170 [ 253.066215][T14283] ? find_from_stack_cb+0x2a/0x3d0 [ 253.066233][T14283] ? __pfx_bpf_stream_stage_printk+0x10/0x10 [ 253.066260][T14283] ? free_large_kmalloc+0x13a/0x1f0 [ 253.066291][T14283] bpf_prog_report_may_goto_violation+0xc4/0x190 [ 253.066319][T14283] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 253.066349][T14283] ? read_tsc+0x9/0x20 [ 253.066378][T14283] bpf_check_timed_may_goto+0xaa/0xb0 [ 253.066405][T14283] arch_bpf_timed_may_goto+0x21/0x40 [ 253.066436][T14283] bpf_prog_6fd842a53d323cc5+0x53/0x5f [ 253.066453][T14283] bpf_trace_run3+0x298/0x4e0 [ 253.066482][T14283] ? bpf_trace_run3+0x19a/0x4e0 [ 253.066511][T14283] ? __pfx_bpf_trace_run3+0x10/0x10 [ 253.066540][T14283] ? __mutex_trylock_common+0x153/0x260 [ 253.066565][T14283] ? __bpf_trace_workqueue_queue_work+0x12f/0x1b0 [ 253.066591][T14283] __bpf_trace_workqueue_queue_work+0x147/0x1b0 [ 253.066612][T14283] ? __lock_acquire+0xab9/0xd20 [ 253.066631][T14283] ? __pfx___bpf_trace_workqueue_queue_work+0x10/0x10 [ 253.066662][T14283] ? do_raw_spin_lock+0x121/0x290 [ 253.066688][T14283] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 253.066720][T14283] __queue_work+0xf55/0xfb0 [ 253.066743][T14283] ? __queue_work+0x102/0xfb0 [ 253.066767][T14283] queue_work_on+0x181/0x270 [ 253.066788][T14283] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.066812][T14283] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 253.066833][T14283] ? __pfx_queue_work_on+0x10/0x10 [ 253.066861][T14283] bpf_prog_load+0x14a9/0x19e0 [ 253.066887][T14283] ? __pfx_bpf_prog_load+0x10/0x10 [ 253.066916][T14283] ? bpf_lsm_bpf+0x9/0x20 [ 253.066936][T14283] ? security_bpf+0x7e/0x300 [ 253.066959][T14283] __sys_bpf+0x507/0x860 [ 253.066977][T14283] ? __pfx___sys_bpf+0x10/0x10 [ 253.067004][T14283] ? rcu_is_watching+0x15/0xb0 [ 253.067029][T14283] __x64_sys_bpf+0x7c/0x90 [ 253.067056][T14283] do_syscall_64+0xfa/0xfa0 [ 253.067080][T14283] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.067102][T14283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.067122][T14283] ? clear_bhb_loop+0x60/0xb0 [ 253.067143][T14283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.067162][T14283] RIP: 0033:0x7f4b5818eec9 [ 253.067180][T14283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.067197][T14283] RSP: 002b:00007f4b5906a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.067219][T14283] RAX: ffffffffffffffda RBX: 00007f4b583e6180 RCX: 00007f4b5818eec9 [ 253.067235][T14283] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 253.067249][T14283] RBP: 00007f4b58211f91 R08: 0000000000000000 R09: 0000000000000000 [ 253.067261][T14283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.067273][T14283] R13: 00007f4b583e6218 R14: 00007f4b583e6180 R15: 00007ffc5cb3fea8 [ 253.067297][T14283]