last executing test programs: 3.305192768s ago: executing program 2 (id=1691): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) r4 = gettid() sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x10}}], 0x30}, 0x0) pwritev(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @xdp, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r0, 0x100000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, r0, 0x0, 0x3, &(0x7f0000000000)='/)\x00'}, 0x30) 3.144802057s ago: executing program 1 (id=1693): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002580)={0x6, 0x8, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0x98}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff}], &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 3.119189092s ago: executing program 2 (id=1695): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000200000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000ea010000f8ffffffb702000008000000b70300000000008385000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079101c0000000000610408000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="cb", 0x1}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000840005a305000000000000000900000034000000000000008400000001000000500005000002000007000000000000000700000003000000070000007695e3d7c24f05cfd8d3d6e9b9ab8a88f6a3cfe94ea47cc59dac0c8ee79bec0974ce0caea9b5c2e8aac123bb1488dd0007b659c21ee3383471c187805f5d04", @ANYRES32=0x0], 0x48, 0x40}, 0x4040040) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000000040)=0x7) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r12) sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe8000000000000000000000000000bb060001000a00000008000600777272000c0007002e00000005000000080009002700feff060002001100000008000b0073697000080008000900000006000400"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) r14 = socket(0x1, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000580)='f2fs_iostat\x00', r1, 0x0, 0x80000000}, 0x18) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000340)={"908363d22079de6abe8f859279687f02", 0x0, 0x0, {0x9, 0x5}, {0x0, 0x9}, 0x3, [0x8001, 0x7, 0x5, 0x9, 0x2, 0x5, 0x6, 0x100000001, 0x100, 0x616e, 0x7, 0xffffffffffffffff, 0x3, 0x3, 0x8d, 0x1]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001480)={{r2}, r15, 0x10, @inherit={0x90, &(0x7f0000000440)={0x0, 0x9, 0x37fffffffc, 0xb, {0x30, 0x3, 0x6, 0x5, 0x5}, [0x400, 0x7, 0x401, 0x3, 0x5, 0x63c, 0x8000, 0x9, 0x80000000]}}, @name="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"}) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_tcp_int(r8, 0x6, 0x4, &(0x7f00000001c0)=0x251, 0x4) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2b, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.985613865s ago: executing program 1 (id=1698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x248000, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'geneve1\x00', 0x200}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c001400"], 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd61fb183afffe8000000000000000000000000000aaff020000000000230000000000000001840090780005c00000000000000000ad12c84ea876866b9f725300"/89], 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd", 0x69}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r10}, 0x18) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xffdffffe}) write$bt_hci(r9, &(0x7f0000000080)=ANY=[], 0x6) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x14) 2.970067412s ago: executing program 3 (id=1699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000027c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x10, 0xf}, {}, {0x7, 0x3}}, [@TCA_RATE={0x6, 0x5, {0xd3, 0x7}}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x10, 0xffe0}, {}, {0x7, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048150) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x8, 0x0, &(0x7f0000000080)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000010a054b"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4804) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r10}, 0x18) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110e22fff6) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r6}, 0x8) preadv(r6, &(0x7f0000000280)=[{&(0x7f0000000600)=""/161, 0xa1}, {&(0x7f0000000800)=""/206, 0xce}], 0x2, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b7050000000000006110960000000000040f000007000000956e74601b722000000000000000"], &(0x7f00000002c0)='GPL\x00', 0x8005, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) close(r6) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r8, &(0x7f00000001c0)={0x40000008}) 2.316600505s ago: executing program 2 (id=1702): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x27c8}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000006c0)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value=r6}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @random="86ce0e44222e", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @broadcast, @multicast1}, {0x11, 0xff, 0x0, @rand_addr=0x64010102}}}}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000"], 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=r7, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0]}, 0x89) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)={0x3c, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x80000001}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6daa000000000000711015000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 1.971382535s ago: executing program 4 (id=1703): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r6 = socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r6, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d479", 0xf5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, 0x0, 0xff00) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001c40)=ANY=[@ANYRES8=r7, @ANYRES16, @ANYRES64=0x0, @ANYBLOB="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", @ANYRESHEX=r5, @ANYRES8=r2, @ANYBLOB="54fad7d29435025b12a0589ab09427279b6db1ed507028d5011abfea4df66009909f766268a94f8e0d4c86ea973eaeb7bfcbde75446a3f6e296ed62f890c8adcfeba64c189498c0569f449df100bfc6cf05eee90730cef1ea94856a27207bc14cd50aa2fe0c3584a423a9ca15c5e60e910db8111f86ee4082d4bbb315e9eaf831276f775db0a81bd1c15dc", @ANYRESHEX=r5], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) pwritev(r3, 0x0, 0x0, 0x8001, 0x80) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000310000080000000001000000181200f5", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008500000082000000850000002e00000018220000", @ANYRES16=r9, @ANYBLOB="0000000003000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000027935000ffffffff1840000008000000000000000000000018200000", @ANYRES32, @ANYBLOB="0000000005000000"], &(0x7f0000000180)='GPL\x00', 0x6, 0xf9, &(0x7f00000001c0)=""/249, 0x41100, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xe, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x1], &(0x7f0000000380)=[{0x0, 0x3, 0x1, 0x6}, {0x0, 0x2, 0x200, 0xb}], 0x10, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='io_uring_poll_arm\x00', r10, 0x0, 0x1}, 0x18) r11 = socket$nl_rdma(0x10, 0x3, 0x14) pwritev(0xffffffffffffffff, &(0x7f0000001bc0)=[{&(0x7f0000000580)="6ed928a142b7cd436c24f00a5e3dfd2268739b52f75ae31406ea82495cf5965b26306b0fcd1dc69fb202d07c311dc1cbe2ac55a0764e70ad2c3c46834837922837a4aa7f0e9787909063", 0x4a}, {&(0x7f0000000600)="ae1316acbf30cf3d6887b510429825add9ceeb542b072703e6478a6ccca25c6ff2ac3336429bdb09a6b32a2cfe5bba2317a4cb61963fa64f437ffa81d800407950d167d33d2fed23d1b8d32d25e4cb13b4cb598b7ea5a34065a28419460aa380e5923135a5d2f93769ee34f98ec41545c0ab27922d251376d5b1a002c4b32967c64f6d9fd723eda19374c39a09c65e4a06507006f3de7badd792", 0x9a}, {&(0x7f00000006c0)="eb8904f88a7203b43bb809dc1f63d34126d6c4b13ca0edad92d19144b3a7930717ec170e37c8523a4e7380c7969ab2eaaf03ccdccc80ebe2863c470ee0c14736a71204df91f6c00b", 0x48}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000000740)="daee009996439a9295afab58ec81882f1b45181711af917e2f1a7c5d61ea4ba98a34ac41ff8863641680e146063f81d14a0fc0edbb725308573962e61a017427fc9a604880baeb19bd661aff3cb4f3487dc8cbef893157ddff4087c8b3f7e5c8295e5bfa8f4ae175fcdfb9c65de5e662d3d064d4d935c71e2a45bbeedd4b560489fd5a8a7dd03e6f22be0608af0c5a5be33545c61ca4cbb93894204cdaeee51a78a871f0ce2234c4cc1b877a266574c1bc45198be5a0299482c4d8f797779588930a6621f2fd091ecdbb768893454e62a4de01281fbe04a9a2", 0xd9}, {&(0x7f0000000a00)="d221462c745f002947591250f88f858055f6798878f88499f1c4836d04082c04aa0dc649d40afe3bcc4a3bbf3e334bc8d09246b867daf75c0720a7752bd68c13c7225e0d78d3742ee66f3b1e2b84d37bc0f280212fae5670aa6683971896707ab8127fe8e4e46df8752ab3a8bbb934ff37b665ea87b49e1f358ed0247f5952907121bffd1f3a6e9098604f3c442cc49659e25ee35d0705df76654b45eb104b", 0x9f}, {&(0x7f0000000840)="9a2a200b065f72632216051ef5c94d74c488432cef2c237b7bc1cff8448b9ad28579d51cfd309eeff4a384476ee717f25a5756f45aed56c0f29a08cb226d832a301725dc00868b623ddf2f222aade25398bfe499a760d5b537e74e2bb7d93401d46509", 0x63}], 0x7, 0x6, 0x81) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r11], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) 1.904323499s ago: executing program 3 (id=1704): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@mcast2, 0x78, r1}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.800474401s ago: executing program 3 (id=1705): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYRES16, @ANYRES32], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000540)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES16=r4, @ANYRES32=r8, @ANYRESOCT=r3, @ANYRES64=r1, @ANYRESDEC, @ANYRES64=r4], 0x20) (async, rerun: 32) bind$netlink(r3, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc) (async, rerun: 64) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) (async, rerun: 64) r9 = socket(0x10, 0x3, 0x0) r10 = socket(0x40000000015, 0x5, 0x0) getsockname$netrom(r10, 0x0, &(0x7f0000000140)=0xe0) (async) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000100)={r3, 0x0, 0x9, 0x7}) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1c0000000100008099a1000007000000301c0200", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="040200003d020000001600"/30], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r14, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0xffffffff, 0x4) (async) r15 = socket(0x28, 0x3, 0x80000001) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) sendmsg$nl_route_sched(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x14, 0x30, 0xffff, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 1.800077535s ago: executing program 1 (id=1706): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x13, &(0x7f0000000000)=@framed={{}, [@map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @tail_call, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x6a, &(0x7f0000000240)=""/106, 0x41000, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x2, 0xc2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000380)=[0x1, 0x1], &(0x7f00000003c0)=[{0x0, 0x2, 0x9, 0x1}, {0x1, 0x1, 0x4, 0x3}, {0x2, 0x1, 0x3, 0x61f7db1330d0f0b2}, {0x0, 0x3, 0x5, 0x6}, {0x2, 0x5, 0xc, 0x2}, {0x0, 0x2, 0xc, 0x2}, {0x2, 0x1, 0x5, 0xc}, {0x2, 0x3, 0x3, 0x5}]}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611889000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000006c0)={0x0, @remote, @loopback}, &(0x7f0000000700)=0xc) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup, 0x7, 0x0, 0x2, &(0x7f0000000500)=[0x0], 0x1, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0}, 0x40) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@cgroup, r0, 0x1c, 0x400b, r1, @void, @value=r4, @void, @void, r3}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000380), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 1.769573611s ago: executing program 1 (id=1707): r0 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="17", 0x1, 0x804, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbacf, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x52}]}, &(0x7f0000000400)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x4, @empty, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000de9c92935640d0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000054}, 0x4004904) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r8, 0x1) listen(r8, 0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) 1.755340749s ago: executing program 3 (id=1708): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xfffffffffffffffd, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa}]}}}]}, 0x40}}, 0x4008000) 1.597602269s ago: executing program 2 (id=1710): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000005000000080000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000284bdb58a575d80c6c502adbcb006b"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x8, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000011146ff90000050000000000080001000000000008004b00"], 0x28}}, 0x0) r4 = accept4(r0, 0x0, &(0x7f0000000100), 0x100800) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0x0, 0x3}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x5, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5, 0x4120}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x9, 0x1, {0x1ff, 0x71d, 0x7, 0x8100}}]}]}]}, @IFLA_MASTER={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 1.561983901s ago: executing program 3 (id=1711): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c4000000400007012dbd7000dbdbdf25047c000004000000ab000180b32639645db61e0bb7d0332aeb54c66c725807655051da3a40b14879534531754bc7516ddb4cf819f9162f5b379796111579cad165942424433e787ac2aeffc0f5dd25a951d474951d2f33747ac73fdd7c814ae94b1fe181c58def6c6d1ed071a795234adb6a8d8425c58efe4322f8d949c2de71cfd22a09090de67670dbef7056b4c95af275337e8686c8665fcaa9b316027c6a6b2b6a0812f4830c001700300000000000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.508607689s ago: executing program 0 (id=1712): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x5, 0x6d, {{0x1a, 0x4, 0x1, 0x4, 0x68, 0x66, 0x0, 0x8e, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010100, {[@noop, @timestamp={0x44, 0x1c, 0xc9, 0x0, 0x6, [0x4, 0x200, 0x4, 0x7, 0x5aba, 0x2]}, @rr={0x7, 0x1b, 0x31, [@multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @loopback, @private=0xa010100]}, @rr={0x7, 0x7, 0xcf, [@multicast1]}, @ssrr={0x89, 0x13, 0xef, [@rand_addr=0x64010100, @remote, @rand_addr=0x64010100, @rand_addr=0x64010101]}]}}}}}) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000000), 0x4) (async) sendmmsg$inet(r2, &(0x7f00000004c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000340)="9451", 0x2}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000180)="4bf7dd", 0x3}, {&(0x7f0000000780)="50c4d35385994451b9250000000000", 0xf}, {&(0x7f0000000280)="fb5c088c0a09d3e02fd95e6632ce91db7a24b0c2cb851dc8b12472bf7331a9e9eb1e76f3f6156e78adb797b1812d1ec1c033bef0fb643ad3137233273c10f4", 0x3f}], 0x3}}, {{&(0x7f0000000c00)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000440)="0000b024", 0x4}], 0x1}}], 0x3, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv4_getaddr={0x58, 0x16, 0x20, 0x70bd2b, 0x25dfdbfd, {0x2, 0x8, 0x10, 0xff, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010101}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_FLAGS={0x8, 0x8, 0x50}]}, 0x58}, 0x1, 0x0, 0x0, 0x1055}, 0x0) 1.462286282s ago: executing program 3 (id=1713): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = socket(0x3, 0x5, 0x3) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r7], 0x20}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r11}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) 1.450297884s ago: executing program 0 (id=1714): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@rand_addr, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x5, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x700, 0x8000, 0xf}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x10, 0x20, 0x9, 0x1d5d, {{0x24, 0x4, 0x2, 0x8, 0x90, 0x68, 0x0, 0x5c, 0x29, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x34, 0x92, 0x1, 0x0, [{@private=0xa010101, 0x8}, {@remote, 0x1a}, {@remote, 0x9}, {@rand_addr=0x64010102, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0x80000000}]}, @timestamp_prespec={0x44, 0xc, 0xdf, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @rr={0x7, 0x1b, 0x91, [@local, @remote, @multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @generic={0x82, 0x12, "13af75c24c57d4fa3a325fd6f3d070ae"}, @timestamp={0x44, 0x8, 0x7d, 0x0, 0x7, [0x7]}, @generic={0x89, 0x6, "05abba52"}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x10, 0x20, 0x9, 0x1d5d, {{0x24, 0x4, 0x2, 0x8, 0x90, 0x68, 0x0, 0x5c, 0x29, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x34, 0x92, 0x1, 0x0, [{@private=0xa010101, 0x8}, {@remote, 0x1a}, {@remote, 0x9}, {@rand_addr=0x64010102, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0x80000000}]}, @timestamp_prespec={0x44, 0xc, 0xdf, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @rr={0x7, 0x1b, 0x91, [@local, @remote, @multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @generic={0x82, 0x12, "13af75c24c57d4fa3a325fd6f3d070ae"}, @timestamp={0x44, 0x8, 0x7d, 0x0, 0x7, [0x7]}, @generic={0x89, 0x6, "05abba52"}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x7, 0x20, 0x9, 0x92b1, {{0x1d, 0x4, 0x0, 0x7, 0x74, 0x68, 0x0, 0xfe, 0x2f, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x32, 0x3, [{0x5, 0xc, "4159c6ebe86eeb1227c6"}, {0x6, 0xe, "6fbdaf94fc793c3ddafa3eb1"}, {0x0, 0xa, "6a1eae6c525ae150"}, {0x7, 0x8, "b0b09717c663"}]}, @timestamp={0x44, 0x18, 0x78, 0x0, 0x1, [0x80000001, 0x6, 0x0, 0x1, 0x38df]}, @end, @lsrr={0x83, 0xf, 0x71, [@rand_addr=0x64010102, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @multicast2, @local}, &(0x7f0000000480)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x7800, 0x0, 0x4, 0xa, {{0xb, 0x4, 0x2, 0x3d, 0x2c, 0x65, 0x0, 0x8b, 0x29, 0x0, @empty, @local, {[@rr={0x7, 0x17, 0x1e, [@multicast1, @remote, @empty, @remote, @private=0xa010100]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000580)={@remote, @rand_addr, 0x0}, &(0x7f00000005c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x4, 0x3, 0x23, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8, 0x7, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x8000, 0x710, 0x9, 0x9, {{0xa, 0x4, 0x2, 0x3a, 0x28, 0x68, 0x0, 0x7f, 0x4, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x14, 0x19, 0x0, 0x6, [0x4a9, 0x4, 0x9, 0xfffffffe]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x8000, 0x710, 0x9, 0x9, {{0xa, 0x4, 0x2, 0x3a, 0x28, 0x68, 0x0, 0x7f, 0x4, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x14, 0x19, 0x0, 0x6, [0x4a9, 0x4, 0x9, 0xfffffffe]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1d8, r1, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1d8}}, 0x24000883) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000ec0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8002000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000ac0)=@updpolicy={0x384, 0x19, 0x4, 0x70bd27, 0x25dfdbff, {{@in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0xfff7, 0x4e23, 0x5, 0xa, 0x120, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {0x5, 0x1, 0xfffffffffffffffb, 0x4000000000000000, 0x2, 0x6}, {0x6, 0xfffffffffffffff8, 0x40000000000}, 0xf0, 0x0, 0x1, 0x1, 0x1}, [@proto={0x5, 0x19, 0xe7}, @migrate={0x180, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@private1, @in=@private=0xa010102, @in=@empty, 0x3c, 0x2, 0x0, 0x3505, 0x2, 0x2}, {@in=@multicast2, @in=@multicast1, @in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6c, 0x4, 0x0, 0x3503, 0xf, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3d}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x2b, 0x4, 0x0, 0x3505, 0x2, 0xa}, {@in=@multicast2, @in6=@mcast2, @in6=@mcast1, @in6=@loopback, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@local, @in=@private=0xa010102, @in6=@mcast2, 0x0, 0x7, 0x0, 0x3501, 0xa, 0x2}]}, @algo_comp={0x127, 0x3, {{'lzs\x00'}, 0x6f8, "2377f36a7ebefbc831bd38fa187c78b0996b0156b104dd738bf808d5364b2a549fb95e818245d73fdc500efc5ceac61914040806af1d8d55910161b34f06d60bfc012f3e71b007bdd0b6641ad079d6dc19af06b40f76e1eaf4e4f27a4c3960a0d2a4a725eb9035f316477808008a529e5b35358207d6ea1a2d673a100fa0b3b666a2dcfbb0f883f6205c0f824de8cc6402dd50caa97645266e9746eb8ded5b1b48270faa6152a47e0f4acc2634b163db585ef4d3cfd3bbe3b2fc531e3698ca7be2c880d97630fc2a3fac59b879c02ce3ea34019ad2a9024296fdf554ea4da3"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e20, 0x4e20, @in6=@local}}]}, 0x384}}, 0x8080) (async) sendmsg$nl_xfrm(r14, &(0x7f0000000ec0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8002000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000ac0)=@updpolicy={0x384, 0x19, 0x4, 0x70bd27, 0x25dfdbff, {{@in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0xfff7, 0x4e23, 0x5, 0xa, 0x120, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {0x5, 0x1, 0xfffffffffffffffb, 0x4000000000000000, 0x2, 0x6}, {0x6, 0xfffffffffffffff8, 0x40000000000}, 0xf0, 0x0, 0x1, 0x1, 0x1}, [@proto={0x5, 0x19, 0xe7}, @migrate={0x180, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@private1, @in=@private=0xa010102, @in=@empty, 0x3c, 0x2, 0x0, 0x3505, 0x2, 0x2}, {@in=@multicast2, @in=@multicast1, @in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6c, 0x4, 0x0, 0x3503, 0xf, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3d}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x2b, 0x4, 0x0, 0x3505, 0x2, 0xa}, {@in=@multicast2, @in6=@mcast2, @in6=@mcast1, @in6=@loopback, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@local, @in=@private=0xa010102, @in6=@mcast2, 0x0, 0x7, 0x0, 0x3501, 0xa, 0x2}]}, @algo_comp={0x127, 0x3, {{'lzs\x00'}, 0x6f8, "2377f36a7ebefbc831bd38fa187c78b0996b0156b104dd738bf808d5364b2a549fb95e818245d73fdc500efc5ceac61914040806af1d8d55910161b34f06d60bfc012f3e71b007bdd0b6641ad079d6dc19af06b40f76e1eaf4e4f27a4c3960a0d2a4a725eb9035f316477808008a529e5b35358207d6ea1a2d673a100fa0b3b666a2dcfbb0f883f6205c0f824de8cc6402dd50caa97645266e9746eb8ded5b1b48270faa6152a47e0f4acc2634b163db585ef4d3cfd3bbe3b2fc531e3698ca7be2c880d97630fc2a3fac59b879c02ce3ea34019ad2a9024296fdf554ea4da3"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e20, 0x4e20, @in6=@local}}]}, 0x384}}, 0x8080) r15 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000f00)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000f00)) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001100)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f80)={0x104, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001100)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f80)={0x104, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) r16 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000001140), 0x80800) getsockopt$inet_IP_XFRM_POLICY(r14, 0x0, 0x11, &(0x7f0000001180)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f0000001280)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r16, 0x0, 0x11, &(0x7f00000012c0)={{{@in6=@remote, @in6=@loopback, 0x4e20, 0xe, 0x4e20, 0x800, 0xa, 0x80, 0x20, 0x5c, r4, r17}, {0x9, 0x200, 0x7, 0x3, 0xfffffffffffff815, 0x1, 0x4, 0x3}, {0x0, 0x0, 0x9, 0xb}, 0x2, 0x6e6bb6, 0x0, 0x0, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0x32}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3505, 0x1, 0x0, 0x9, 0x3, 0xffffffff, 0x2}}, 0xe8) getsockopt$PNPIPE_IFINDEX(r15, 0x113, 0x2, &(0x7f00000013c0), &(0x7f0000001400)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x3c, r1, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x8010) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r18 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$qrtr(0x2a, 0x2, 0x0) (async) r19 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r18, 0x400448c8, &(0x7f0000001600)={r19, r15, 0xfffd, 0x94, &(0x7f0000001540)="633067cc3ec46a44a0cef0ae47edac4ad085f2ad11b7ba4d8083a2ccab061ebb5747d04c5d062712247f4980868f0afb77df52f832f5742b50d54b6171fa7e7f7727b7bfc132b8e848cb7d259a03e5b75c3cce0e994510df5a06ababbd203c35e7bc2fb536dab1cc088a51c36a2018e43a8b4d6eb1fcefbb7214f3afa9402b6ee38c77343497b6fc3c342f6249977aca30a76212", 0x7f, 0xff, 0x6, 0x1, 0xfffe, 0x1, 0x1, 'syz0\x00'}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r20 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r20, 0x0, 0x1, &(0x7f00000016c0)=0x1, 0x4) (async) setsockopt$WPAN_SECURITY(r20, 0x0, 0x1, &(0x7f00000016c0)=0x1, 0x4) 1.368569834s ago: executing program 2 (id=1715): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xffff, @loopback, 0x9, 0x10004}, 0x80, 0x0, 0x0, 0x0, 0xffffff30}, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000fc020000000000000000000000000001000000020000000000000000000000004e2300004e2600000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffff00000000000000000000000000000000000001000000000001000000000000000000000000000000000000000000000006000000000000000100000000000080000000000000000000000000000000000000000000000000010100000000080000000000000000000c00080049ff0800010800aa"], 0xc4}}, 0x20004800) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0x10000}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="c427bf4117e1ddef286527dd180900"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000000400)={&(0x7f0000000140)=@qipcrtr, 0x80, &(0x7f0000000300)=[{&(0x7f0000001dc0)=""/4095, 0xfff}, {&(0x7f00000001c0)=""/244, 0xf4}, {&(0x7f00000002c0)=""/29, 0x1d}], 0x3, &(0x7f0000000340)=""/169, 0xa9}, 0x40010120) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000440)) close(0x3) close(0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xa1, 0x0, &(0x7f0000000840)="259a53f271a76d2608004c6588a80aeccbfc12a5d17d5049af6d474630ebca44bc2d7500ad65487a991fa5cfbc2db13db26decfbd7654c42f41776ca7ae90a03ca4289c8f0083769521931627948b565e33435bf99ac5c72dc817b841bb7a4c352c69ed745acefa35c25eae7042aca59dbb9570460d68dbd71e96b05248dbab3aefec402ff759b02adf82b292d60673b715879a032f69cfba55f6402e4f4a4936c", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r8, 0x80000000) 1.355968508s ago: executing program 0 (id=1716): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a0000040900010073797a310000000038000480100001800c0001006e6f747261636b00240001800b0001006578746864720000140002800800064000000005080007400000000b0900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.2727416s ago: executing program 0 (id=1717): syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1606, 0x5) r1 = socket(0x40000000015, 0x5, 0x0) syz_extract_tcp_res(&(0x7f0000000100), 0xd, 0x8) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa1553ff41cf56cf1186dd60000000f75306fffc000000002000000000000000000000fe80000000dc000000000000000000aa0000", @ANYRES32=r0, @ANYRES32=0x41424344, @ANYBLOB="e002fffd907800001312be00000080deae1159bf0ddcef2238d00002050e00000005000000050000007f00001babdff3be2f952b11444895fbbb00067d8b68429f2b0753f9d781ba"], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 1.060656287s ago: executing program 0 (id=1718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000000), 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f892f", 0x12}], 0x1) 1.038160299s ago: executing program 4 (id=1719): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x28}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) accept4$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @remote, @netrom, 0x1, @rose}, &(0x7f0000000140)=0x1c, 0x400) (async) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @remote, @netrom, 0x1, @rose}, &(0x7f0000000140)=0x1c, 0x400) ioctl$SIOCRSACCEPT(r1, 0x89e3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000180)=0x2, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r4, 0x600, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6bb634e9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_NET={0x4}]}, 0x3c}}, 0x8004) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x81}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ecf0ff6e67f6be7df81efedec97e05aac982f7eeab6be9d8"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x48888}, 0x20008010) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r5) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r5) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r7) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r7) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r0}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f00000005c0)={0x0, 0x2a, "5ac022e0f90076901019b3aa26a1449c2a666af6cebeeeab0f93a91bfad7e2abb1c6ea3a5251a8950ed2"}, &(0x7f0000000600)=0x32) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f00000005c0)={0x0, 0x2a, "5ac022e0f90076901019b3aa26a1449c2a666af6cebeeeab0f93a91bfad7e2abb1c6ea3a5251a8950ed2"}, &(0x7f0000000600)=0x32) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8000}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40095) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r8, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x80000001, 0x1f}}}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000401}, 0x20000041) sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x6c, r8, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x38, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x18}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x24}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000001}, 0x880) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x6c, r8, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x38, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x18}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x24}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000001}, 0x880) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r2) getpeername$packet(r9, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b00)=0x14) (async) getpeername$packet(r9, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b00)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xdc, r12, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xb0, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0xdc}}, 0x4004) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xdc, r12, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xb0, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0xdc}}, 0x4004) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40044) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x40, 0x140d, 0x2, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400}, 0x40008c0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000ec0)={r10, 0x68}, &(0x7f0000000f00)=0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000f40)={r5, 0x8be3, 0x7f00000000000, 0x8}) sendmsg$TIPC_NL_MON_GET(r14, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xdc, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "bc012ef1e03fd4c64b3da86854d036c0bc1d9e7bfb"}}, @TIPC_NLA_NODE_ID={0x50, 0x3, "192911e6f3be2e272d9d7dda773cb1c2dc6c249051a6ef4d5665711b04b2cf9f8fba6790a786e552be3ae31788e264505b79d4178e5052f5f1b2106574ac64171b7c3e2116c696921392f847"}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7cb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x811}, 0x0) 931.888726ms ago: executing program 4 (id=1720): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000001080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004}}, {{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}}], 0x2, 0x0) unshare(0x20000400) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xdc, 0xffff}, 0x8) (async) sendto$inet6(r0, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) unshare(0x22020600) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x0, 0x2, 0x7}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={0x1c, r6, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4, 0x33}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) shutdown(r0, 0x1) 764.210177ms ago: executing program 1 (id=1721): syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780000080a00000009000000090000"], 0x0) (async) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780000080a00000009000000090000"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000020000040000000000000000020000000000000fab6ff0f2f127886c6e28954c36e4000000009a7c00000000000018a39e000034e000"/95], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000040000000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000040000000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='pstate_sample\x00', r0, 0x0, 0x3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000000000000000000de00000061100800090000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x2, 0x0) (async) r3 = socket(0x400000000010, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x4e, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}}, 0x20}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x4e, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}}, 0x20}}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c40)={0x3, 0x2, {0x5626, @usage=0xffffffff, 0x0, 0x3, 0x31d0f84c, 0x8000, 0x8, 0xb8, 0x22, @struct={0x233, 0x6}, 0x9, 0x2, [0x401, 0x0, 0x200, 0x8, 0x401, 0x6]}, {0xa, @struct={0x1, 0x10}, 0x0, 0x0, 0x1, 0x8, 0x3, 0x4, 0x51, @usage=0x1, 0xffffc80f, 0x3, [0x6, 0xfffffffffffffeff, 0x4, 0x3, 0xfffffffeffffffff, 0x100000001]}, {0x92, @usage=0x7, 0x0, 0x6, 0x21, 0x4, 0x7, 0x8, 0x6dc, @struct={0x99, 0xfffffffc}, 0x2, 0x1, [0x2, 0x93, 0xf659, 0xffffffffffffffff, 0xe73, 0xf03]}, {0x0, 0x0, 0x1}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c40)={0x3, 0x2, {0x5626, @usage=0xffffffff, 0x0, 0x3, 0x31d0f84c, 0x8000, 0x8, 0xb8, 0x22, @struct={0x233, 0x6}, 0x9, 0x2, [0x401, 0x0, 0x200, 0x8, 0x401, 0x6]}, {0xa, @struct={0x1, 0x10}, 0x0, 0x0, 0x1, 0x8, 0x3, 0x4, 0x51, @usage=0x1, 0xffffc80f, 0x3, [0x6, 0xfffffffffffffeff, 0x4, 0x3, 0xfffffffeffffffff, 0x100000001]}, {0x92, @usage=0x7, 0x0, 0x6, 0x21, 0x4, 0x7, 0x8, 0x6dc, @struct={0x99, 0xfffffffc}, 0x2, 0x1, [0x2, 0x93, 0xf659, 0xffffffffffffffff, 0xe73, 0xf03]}, {0x0, 0x0, 0x1}}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r8, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @local, 0x10007}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @loopback, 0x5}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r9}, &(0x7f0000000180), &(0x7f0000000500)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r9}, &(0x7f0000000180), &(0x7f0000000500)}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0xa, @empty, 0x9f}, 0x1c) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001300)={r7, 0x8000000000000001, 0xd}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42, 0x20}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3, 0xc}, {0x0, 0xfff1}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004890}, 0x4041080) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 424.576395ms ago: executing program 4 (id=1722): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x2, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x35288}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8}]}, 0x48}}, 0x0) 315.18455ms ago: executing program 2 (id=1723): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d0000000000950003"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008001240000000080500010006000000050005000a00000005000400000000000900020073797a3100000000c50a0300686173683a6970246d656300c6c44d5172973cd103c2ab4fc411d90c5590cc27e2e8f8f476e8181f2ee30930a225e25e92b9d3c005dba3d6f775f8e5eccdf56f5ea6bcb8f024181f745db0bbf193c9e4980576eb1d00a00ea282e1ad7962d39a081dc0a70f04da16754912f3d227e7357ac4b7af63628e08c40efb1861d2b246df9bfc26a8e354c969893f619252fb26f41666527e05f67143d8b3804175a2f0f3d1fea59d98", @ANYRES16=0x0, @ANYRESDEC=r3], 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x10, 0x2, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a80000001000030500004088ee25db4bce7c12", @ANYRES32, @ANYBLOB="1000020000000000600012800b00010065727370616e00005000028006000f00e6f2000008000700ff"], 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xfc, 0x1b, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {}, 0x0, 0x200, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x4d5, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x2}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES16=r9, @ANYBLOB='$\x00\x00\x00', @ANYBLOB="050008000000000000000600000008000700", @ANYRES32=r11, @ANYBLOB="0800050003000000", @ANYRESOCT=r9], 0x24}}, 0x0) accept4(r3, 0x0, 0x0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) 158.556026ms ago: executing program 4 (id=1724): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r2, r1}, 0xc) 158.289409ms ago: executing program 1 (id=1725): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x6) accept4(r0, 0x0, 0x0, 0x80800) shutdown(r0, 0x0) socket(0x8, 0x3, 0x0) socket(0x8, 0x0, 0x8000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000200)=0x54) r2 = socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000a0000000800200000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [0x0, 0x0, 0x0, 0xff000000], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x2, {0x5}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @remote}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x2, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e8) 129.188337ms ago: executing program 4 (id=1726): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x5, 0x3, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) 0s ago: executing program 0 (id=1727): unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x3, 0x9, 0x3, 0x9, 0x1, 0x3da6, 0xb6, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x100, 0x3, 0x8000, 0x0, 0xff, 0x3, 0x17, 0x7663, r3}, 0x20) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x8, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x33, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRES16=r2, @ANYRES32=r5, @ANYRESHEX=r6], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @broadcast}, 0x14) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4006850}, 0x40) r12 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0)=r12, 0xa) sendmsg$kcm(r12, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9ae}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f4000900062b3b25fe80000000000000dc8b850f238466ccfe8000000000e82ff6ed88672eb00944", 0x28}, {0x0}], 0x2}, 0x20000884) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x840, 0x0) write$ppp(r13, &(0x7f0000000240)="caa61f4a3ec740a1e559b0671d9393b18b5990d270af66d1d27a27412bb841e70d5a1c87ff0ea62d41bd306ba5e50804eac009519413e83665ffe342d850ab7c63e51c3e20ca7276cabc77c27768f575df157dc1e25200fecbb870474d14d2e19cddd25833a34e1fd438c725d4409e54e342dd7f", 0x74) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) kernel console output (not intermixed with test programs): nd scheduled to be removed in 2025, please contact the netdev mailing list [ 95.068018][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 95.162268][ T5964] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.180859][ T5968] bridge_slave_1: left allmulticast mode [ 95.188334][ T5968] bridge_slave_1: left promiscuous mode [ 95.194612][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.205971][ T5968] bridge_slave_0: left allmulticast mode [ 95.212412][ T5968] bridge_slave_0: left promiscuous mode [ 95.218363][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.319887][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.327790][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.336039][ T5971] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 95.349842][ T5971] Zero length message leads to an empty skb [ 95.393762][ T5964] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.528408][ T5964] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.612836][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.650283][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.698290][ T5964] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.759694][ T5994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15'. [ 95.771410][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.779260][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.798205][ T5846] Bluetooth: hci1: command tx timeout [ 95.873170][ T5846] Bluetooth: hci4: command tx timeout [ 95.874632][ T52] Bluetooth: hci3: command tx timeout [ 95.878713][ T5846] Bluetooth: hci0: command tx timeout [ 95.884104][ T5840] Bluetooth: hci2: command tx timeout [ 96.044933][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 96.231894][ T6000] netlink: 'syz.1.17': attribute type 3 has an invalid length. [ 96.240369][ T6000] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17'. [ 96.289450][ T6015] tipc: Enabling of bearer rejected, failed to enable media [ 96.421836][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 96.640733][ T6044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.25'. [ 96.933291][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'. [ 97.003364][ T10] IPVS: starting estimator thread 0... [ 97.103605][ T6060] IPVS: using max 25 ests per chain, 60000 per kthread [ 97.188154][ T6063] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.303997][ T6063] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.304587][ T6078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.39'. [ 97.406044][ T6081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.467871][ T6063] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.624136][ T6063] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.756004][ T6096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.41'. [ 97.916753][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 98.150582][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.190631][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.247882][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.284205][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.364028][ T6115] bond0: (slave bond_slave_0): Releasing backup interface [ 98.398040][ T6120] netlink: 'syz.3.51': attribute type 9 has an invalid length. [ 98.417636][ T6115] bond0: (slave bond_slave_1): Releasing backup interface [ 98.455916][ T6115] team0: Port device team_slave_0 removed [ 98.498256][ T6115] team0: Port device team_slave_1 removed [ 98.515905][ T6115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.531772][ T6115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.549040][ T6128] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.558898][ T6115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.568476][ T6115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.581077][ T6115] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 98.680057][ T6139] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 98.688690][ T6139] NCSI netlink: No device for ifindex 0 [ 98.728759][ T6123] bond1: entered promiscuous mode [ 98.741495][ T6123] bond1: entered allmulticast mode [ 98.763191][ T6123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.879405][ T6147] x_tables: unsorted underflow at hook 2 [ 98.988880][ T5918] IPVS: starting estimator thread 0... [ 99.042584][ T6156] netlink: 'syz.4.60': attribute type 1 has an invalid length. [ 99.101293][ T6154] IPVS: using max 27 ests per chain, 64800 per kthread [ 99.122174][ T6159] netlink: 'syz.4.60': attribute type 11 has an invalid length. [ 99.796951][ T6183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.832756][ T6185] bond_slave_0: entered promiscuous mode [ 99.838630][ T6185] bond_slave_1: entered promiscuous mode [ 99.845482][ T6185] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 99.856470][ T6185] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 99.945504][ T6183] bridge0: entered allmulticast mode [ 99.972209][ T6183] bridge_slave_1: left allmulticast mode [ 99.979375][ T6183] bridge_slave_1: left promiscuous mode [ 99.996977][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.033934][ T6183] bridge_slave_0: left allmulticast mode [ 100.050423][ T6183] bridge_slave_0: left promiscuous mode [ 100.056433][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.124258][ T6183] bridge0 (unregistering): left allmulticast mode [ 100.237411][ T6205] __nla_validate_parse: 73 callbacks suppressed [ 100.237430][ T6205] netlink: 3 bytes leftover after parsing attributes in process `syz.1.73'. [ 100.291572][ T6205] 0ªX¹¦À: renamed from caif0 [ 100.347104][ T6205] 0ªX¹¦À: entered allmulticast mode [ 100.393217][ T6205] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 100.460163][ T6201] syz.1.73 (6201) used greatest stack depth: 17000 bytes left [ 100.484606][ T6217] Illegal XDP return value 4294967294 on prog (id 33) dev N/A, expect packet loss! [ 101.233142][ T6257] netlink: 'syz.0.89': attribute type 1 has an invalid length. [ 101.240890][ T6257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.89'. [ 101.482807][ T6273] tipc: Can't bind to reserved service type 1 [ 101.505630][ T6273] netlink: 288 bytes leftover after parsing attributes in process `syz.0.93'. [ 101.517778][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 101.528174][ T6274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.91'. [ 102.058123][ T6289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.204846][ T6304] netlink: 'syz.1.100': attribute type 33 has an invalid length. [ 102.213644][ T6305] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 102.249189][ T6311] netlink: 'syz.0.101': attribute type 10 has an invalid length. [ 102.257203][ T6304] netlink: 152 bytes leftover after parsing attributes in process `syz.1.100'. [ 102.266565][ T6310] netlink: 'syz.0.101': attribute type 10 has an invalid length. [ 102.325177][ T6318] netlink: 'syz.3.103': attribute type 1 has an invalid length. [ 102.405276][ T6311] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 102.600918][ T6328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.106'. [ 102.654171][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.106'. [ 102.673172][ T6334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.109'. [ 102.947339][ T6349] netlink: 36 bytes leftover after parsing attributes in process `syz.0.115'. [ 103.199897][ T6368] geneve2: entered promiscuous mode [ 103.726689][ T6379] tipc: Enabling of bearer rejected, failed to enable media [ 103.751657][ T6379] tipc: Enabling of bearer rejected, failed to enable media [ 103.890325][ T6393] netlink: 'syz.4.126': attribute type 1 has an invalid length. [ 104.061308][ T6400] netlink: 'syz.3.129': attribute type 1 has an invalid length. [ 104.127628][ T6402] netlink: 'syz.0.130': attribute type 2 has an invalid length. [ 104.135526][ T6402] netlink: 'syz.0.130': attribute type 1 has an invalid length. [ 104.144054][ T6402] netlink: 'syz.0.130': attribute type 2 has an invalid length. [ 104.151795][ T6402] netlink: 'syz.0.130': attribute type 2 has an invalid length. [ 104.529464][ T6411] bond3: entered promiscuous mode [ 104.544078][ T6411] bond3: entered allmulticast mode [ 104.550069][ T6411] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.558210][ T6418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.636946][ T6418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.857837][ T6481] __nla_validate_parse: 7 callbacks suppressed [ 105.857855][ T6481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 105.889608][ T6478] syzkaller1: entered allmulticast mode [ 106.442175][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 106.461410][ T6491] tipc: Started in network mode [ 106.466590][ T6491] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 106.491489][ T6494] netlink: 36 bytes leftover after parsing attributes in process `syz.0.155'. [ 106.500832][ T6491] tipc: Enabled bearer , priority 18 [ 106.524406][ T6494] netlink: 36 bytes leftover after parsing attributes in process `syz.0.155'. [ 106.638877][ T6495] bond1: entered promiscuous mode [ 106.644539][ T6495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.733079][ T6495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.740659][ T6495] IPv6: NLM_F_CREATE should be set when creating new route [ 106.747979][ T6495] IPv6: NLM_F_CREATE should be set when creating new route [ 106.770861][ T6504] netlink: 428 bytes leftover after parsing attributes in process `syz.2.157'. [ 106.787521][ T6495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.852371][ T6502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.903845][ T6502] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 106.947170][ T6502] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 106.968855][ T6502] bond1: (slave wireguard0): making interface the new active one [ 106.978280][ T6502] wireguard0: entered promiscuous mode [ 106.986121][ T6502] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 107.022913][ T6495] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 107.064407][ T6495] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 107.074104][ T6504] netlink: 104 bytes leftover after parsing attributes in process `syz.2.157'. [ 107.106724][ T6512] ip6erspan0: entered allmulticast mode [ 107.261772][ T6517] validate_nla: 6 callbacks suppressed [ 107.261790][ T6517] netlink: 'syz.1.160': attribute type 10 has an invalid length. [ 107.294889][ T6518] batadv1: entered promiscuous mode [ 107.301611][ T6517] netlink: 228 bytes leftover after parsing attributes in process `syz.1.160'. [ 107.612695][ T44] tipc: Node number set to 10005162 [ 107.738394][ T6547] sit1: entered promiscuous mode [ 108.160859][ T6566] netlink: 'syz.1.169': attribute type 16 has an invalid length. [ 108.169037][ T6566] netlink: 'syz.1.169': attribute type 17 has an invalid length. [ 108.984133][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'. [ 108.998221][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'. [ 109.031055][ T37] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.068220][ T37] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.164820][ T6599] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 109.225586][ T6599] batman_adv: batadv0: Adding interface: gretap1 [ 109.245727][ T6599] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.274837][ T6599] batman_adv: batadv0: Interface activated: gretap1 [ 109.286004][ T37] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.296866][ T6610] netlink: 32 bytes leftover after parsing attributes in process `syz.1.179'. [ 109.352372][ T37] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.583856][ T6623] netlink: 'syz.3.183': attribute type 1 has an invalid length. [ 109.638139][ T6623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.664676][ T6623] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 109.674255][ T6623] bond1: (slave batadv1): making interface the new active one [ 109.683412][ T6623] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 109.881105][ T6623] bond1 (unregistering): (slave batadv1): Releasing active interface [ 109.905037][ T6623] bond1 (unregistering): Released all slaves [ 110.232193][ T6666] netlink: 'syz.0.193': attribute type 39 has an invalid length. [ 110.861556][ T6692] __nla_validate_parse: 5 callbacks suppressed [ 110.861576][ T6692] netlink: 52 bytes leftover after parsing attributes in process `syz.4.200'. [ 111.577601][ T6715] pim6reg1: entered promiscuous mode [ 111.682310][ T6715] pim6reg1: entered allmulticast mode [ 112.267066][ T6710] delete_channel: no stack [ 112.300948][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 112.313327][ T6767] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.208'. [ 112.426165][ T6777] veth0: entered promiscuous mode [ 112.466381][ T6777] netlink: 28 bytes leftover after parsing attributes in process `syz.3.211'. [ 112.676167][ T6790] ipvlan1: entered promiscuous mode [ 112.682092][ T6790] ipvlan1: entered allmulticast mode [ 112.687419][ T6790] veth0_vlan: entered allmulticast mode [ 112.926898][ T6798] sctp: [Deprecated]: syz.3.214 (pid 6798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.926898][ T6798] Use struct sctp_sack_info instead [ 113.652231][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 113.874528][ T983] IPVS: starting estimator thread 0... [ 113.917444][ T6837] netlink: 'syz.2.224': attribute type 1 has an invalid length. [ 113.991328][ T6838] IPVS: using max 27 ests per chain, 64800 per kthread [ 114.065131][ T6842] bond4: (slave gretap1): making interface the new active one [ 114.068971][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 114.084294][ T6842] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 114.114457][ T6837] vlan2: entered allmulticast mode [ 114.135330][ T6837] bond4: entered allmulticast mode [ 114.142914][ T6837] gretap1: entered allmulticast mode [ 114.161688][ T6837] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 114.263312][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'. [ 114.296149][ T6845] bridge0: port 1(vlan2) entered blocking state [ 114.313246][ T6845] bridge0: port 1(vlan2) entered disabled state [ 114.321679][ T6845] vlan2: entered allmulticast mode [ 114.326963][ T6845] bridge0: entered allmulticast mode [ 114.353447][ T6845] vlan2: left allmulticast mode [ 114.358457][ T6845] bridge0: left allmulticast mode [ 114.589555][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 114.606740][ T6868] netlink: 48 bytes leftover after parsing attributes in process `syz.0.232'. [ 114.849154][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 115.012283][ T6883] batman_adv: batadv0: Adding interface: dummy0 [ 115.018578][ T6883] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.054274][ T6883] batman_adv: batadv0: Interface activated: dummy0 [ 115.106848][ T6890] netlink: 'syz.2.240': attribute type 13 has an invalid length. [ 115.115061][ T6890] macvtap0: entered promiscuous mode [ 115.142657][ T6890] macvtap0: refused to change device tx_queue_len [ 115.258294][ T6895] tipc: Started in network mode [ 115.269941][ T6895] tipc: Node identity aeb3f1c549f, cluster identity 4711 [ 115.292303][ T6895] tipc: Enabled bearer , priority 0 [ 115.328745][ T6904] syzkaller0: entered promiscuous mode [ 115.335838][ T6904] syzkaller0: entered allmulticast mode [ 115.372821][ T6903] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 115.449758][ T6895] bond0: (slave rose0): Error: Device can not be enslaved while up [ 116.012578][ T6929] __nla_validate_parse: 1 callbacks suppressed [ 116.012597][ T6929] netlink: 1020 bytes leftover after parsing attributes in process `syz.0.251'. [ 116.033491][ T6894] tipc: Resetting bearer [ 116.076786][ T6894] tipc: Disabling bearer [ 116.197246][ T6932] erspan0: entered promiscuous mode [ 116.262888][ T6940] batadv_slave_0: entered promiscuous mode [ 116.299143][ T6939] batadv_slave_0: left promiscuous mode [ 116.444227][ T6949] netlink: 16 bytes leftover after parsing attributes in process `syz.3.259'. [ 116.472858][ T6949] netlink: 16 bytes leftover after parsing attributes in process `syz.3.259'. [ 116.789113][ T6973] batadv1: entered allmulticast mode [ 116.810246][ T6973] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 116.941831][ T6979] netlink: 'syz.0.267': attribute type 1 has an invalid length. [ 116.956927][ T6980] netlink: 'syz.0.267': attribute type 1 has an invalid length. [ 117.108279][ T6979] bond1 (unregistering): Released all slaves [ 117.174594][ T6980] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 117.219058][ T6987] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 117.234469][ T6989] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 117.380923][ T7004] netlink: 'syz.0.272': attribute type 33 has an invalid length. [ 117.427532][ T7004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.272'. [ 117.435004][ T7006] netlink: 28 bytes leftover after parsing attributes in process `syz.4.273'. [ 117.467493][ T7004] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 117.640629][ T7016] bridge1: entered promiscuous mode [ 117.660952][ T7016] bridge1: entered allmulticast mode [ 117.662172][ T7019] netlink: 'syz.4.276': attribute type 1 has an invalid length. [ 117.674580][ T7019] netlink: 224 bytes leftover after parsing attributes in process `syz.4.276'. [ 117.757076][ T7021] netlink: 'syz.2.275': attribute type 1 has an invalid length. [ 117.886793][ T7027] syz_tun: entered allmulticast mode [ 117.953079][ T7026] syz_tun: left allmulticast mode [ 118.195888][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 118.328451][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 118.350038][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 118.467510][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 118.484940][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 118.682099][ T7066] batadv2: entered promiscuous mode [ 119.539717][ T7096] wg1: entered promiscuous mode [ 119.544966][ T7096] wg1: entered allmulticast mode [ 120.130384][ T7118] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.204804][ T7118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.237724][ T7124] vxlan0: entered promiscuous mode [ 120.243965][ T7124] vxlan0: entered allmulticast mode [ 120.254662][ T6738] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.297330][ T6738] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.335846][ T6738] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.368426][ T6738] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.519112][ T7144] delete_channel: no stack [ 120.921398][ T7157] netlink: 'syz.4.303': attribute type 12 has an invalid length. [ 121.080205][ T7166] trusted_key: syz.2.309 sent an empty control message without MSG_MORE. [ 121.349576][ T7175] bond_slave_0: entered promiscuous mode [ 121.355389][ T7175] bond_slave_1: entered promiscuous mode [ 121.431821][ T7175] macvlan2: entered promiscuous mode [ 121.437286][ T7175] bond0: entered promiscuous mode [ 121.444410][ T7175] macvlan2: entered allmulticast mode [ 121.459480][ T7175] bond0: entered allmulticast mode [ 121.489497][ T7175] bond_slave_0: entered allmulticast mode [ 121.510757][ T7175] bond_slave_1: entered allmulticast mode [ 121.548120][ T7175] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 121.586692][ T7175] bond0: left allmulticast mode [ 121.609152][ T7175] bond_slave_0: left allmulticast mode [ 121.626975][ T7175] bond_slave_1: left allmulticast mode [ 121.641733][ T30] audit: type=1800 audit(1763315393.402:2): pid=7173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.310" name="cgroup.controllers" dev="tmpfs" ino=367 res=0 errno=0 [ 121.663892][ T7175] bond0: left promiscuous mode [ 121.675866][ T7175] bond_slave_0: left promiscuous mode [ 121.681412][ T7175] bond_slave_1: left promiscuous mode [ 121.696015][ T7188] netlink: 'syz.4.313': attribute type 7 has an invalid length. [ 122.219735][ T7209] __nla_validate_parse: 8 callbacks suppressed [ 122.219754][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 122.236878][ T7209] tipc: Enabling of bearer rejected, already enabled [ 122.248870][ T7212] netlink: 'syz.1.316': attribute type 39 has an invalid length. [ 122.258018][ T7206] tipc: Started in network mode [ 122.266161][ T7206] tipc: Node identity 8a3538aa5da2, cluster identity 4711 [ 122.269082][ T7211] Cannot find del_set index 2 as target [ 122.280220][ T7206] tipc: Enabled bearer , priority 0 [ 122.414635][ T7206] syzkaller0: entered promiscuous mode [ 122.426803][ T7206] syzkaller0: entered allmulticast mode [ 122.484940][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 122.495835][ T7209] tipc: Enabling of bearer rejected, already enabled [ 122.508817][ T7206] tipc: Resetting bearer [ 122.531663][ T7204] tipc: Resetting bearer [ 122.553578][ T7204] tipc: Disabling bearer [ 122.858039][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.324'. [ 123.142798][ T7254] netlink: 'syz.4.325': attribute type 1 has an invalid length. [ 123.174472][ T7254] netlink: 'syz.4.325': attribute type 3 has an invalid length. [ 123.186856][ T7254] netlink: 172 bytes leftover after parsing attributes in process `syz.4.325'. [ 123.199867][ T7254] NCSI netlink: No device for ifindex 813332851 [ 123.236246][ T7260] netlink: 308 bytes leftover after parsing attributes in process `syz.3.327'. [ 123.278443][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'. [ 123.800917][ T7291] netlink: 'syz.4.332': attribute type 13 has an invalid length. [ 123.821272][ T7291] netlink: 'syz.4.332': attribute type 17 has an invalid length. [ 124.000308][ T7310] SET target dimension over the limit! [ 124.020079][ T7312] netlink: 40 bytes leftover after parsing attributes in process `syz.4.332'. [ 124.165896][ T7314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.244357][ T7281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.254315][ T7291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.282510][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'. [ 124.387070][ T7339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.340'. [ 124.463244][ T7332] bond5: option min_links: invalid value (18446744073709551612) [ 124.472007][ T7332] bond5: option min_links: allowed values 0 - 2147483647 [ 124.482526][ T7332] bond5 (unregistering): Released all slaves [ 125.343458][ T7388] netlink: 36 bytes leftover after parsing attributes in process `syz.4.351'. [ 125.480963][ T7399] netlink: 'syz.2.355': attribute type 11 has an invalid length. [ 125.521247][ T7400] netlink: 'syz.2.355': attribute type 11 has an invalid length. [ 126.397480][ T7464] netlink: 'syz.0.367': attribute type 6 has an invalid length. [ 126.424115][ T7464] netlink: 'syz.0.367': attribute type 6 has an invalid length. [ 126.690051][ T7488] openvswitch: netlink: Message has 16 unknown bytes. [ 126.996338][ T7508] syzkaller1: entered promiscuous mode [ 127.017755][ T7508] syzkaller1: entered allmulticast mode [ 127.089370][ T7513] netlink: 'syz.3.379': attribute type 1 has an invalid length. [ 127.322790][ T7513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.416415][ T7515] bond1: (slave geneve2): making interface the new active one [ 127.432613][ T7515] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 127.444988][ T7523] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 127.478190][ T7523] team1: entered promiscuous mode [ 127.483646][ T7523] team1: entered allmulticast mode [ 127.490363][ T7523] 8021q: adding VLAN 0 to HW filter on device team1 [ 127.747039][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.758993][ T7541] __nla_validate_parse: 14 callbacks suppressed [ 127.759013][ T7541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.388'. [ 127.786131][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.807852][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.832434][ T7549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.390'. [ 127.854013][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.886442][ T7552] netlink: 28 bytes leftover after parsing attributes in process `syz.4.390'. [ 128.137301][ T7570] ipt_REJECT: TCP_RESET invalid for non-tcp [ 128.176925][ T7574] x_tables: duplicate underflow at hook 2 [ 128.183024][ T7573] veth0_to_bridge: entered promiscuous mode [ 128.203557][ T7571] veth0_to_bridge: left promiscuous mode [ 128.280305][ T7579] netlink: 'syz.3.399': attribute type 1 has an invalid length. [ 128.422259][ T7579] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.486204][ T7587] ip6gretap1: entered allmulticast mode [ 128.503273][ T7587] bond2: (slave ip6gretap1): making interface the new active one [ 128.512754][ T7587] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 128.583661][ T7600] netlink: 'syz.4.403': attribute type 2 has an invalid length. [ 128.624484][ T7600] !: entered promiscuous mode [ 128.644764][ T7600] netlink: 'syz.4.403': attribute type 2 has an invalid length. [ 128.673468][ T7609] netlink: zone id is out of range [ 128.678916][ T7609] netlink: zone id is out of range [ 128.686878][ T7600] !: left promiscuous mode [ 128.693487][ T7609] netlink: zone id is out of range [ 128.698887][ T7609] netlink: zone id is out of range [ 128.719996][ T7609] netlink: zone id is out of range [ 128.725721][ T7609] netlink: zone id is out of range [ 128.734129][ T7609] netlink: zone id is out of range [ 128.779093][ T7609] netlink: zone id is out of range [ 128.885828][ T7613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.409'. [ 128.964465][ T7620] netlink: 'syz.2.411': attribute type 41 has an invalid length. [ 129.147831][ T7628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.412'. [ 129.573786][ T7643] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 130.296717][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 130.332942][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 130.349115][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 130.365397][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 130.376791][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 130.413456][ T7693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.421860][ T7693] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.433421][ T7693] 0ªX¹¦À: left allmulticast mode [ 130.438410][ T7693] net_ratelimit: 3 callbacks suppressed [ 130.438426][ T7693] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 130.485057][ T7704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.015893][ T7729] tipc: Enabled bearer , priority 0 [ 131.046308][ T7729] syzkaller0: entered promiscuous mode [ 131.071623][ T7729] syzkaller0: entered allmulticast mode [ 131.137092][ T7729] tipc: Resetting bearer [ 131.208224][ T7727] tipc: Resetting bearer [ 131.264090][ T7727] tipc: Disabling bearer [ 131.558266][ T7757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.682523][ T7802] tun0: tun_chr_ioctl cmd 1074025675 [ 132.699482][ T7802] tun0: persist enabled [ 132.717457][ T7802] tun0: tun_chr_ioctl cmd 1074025675 [ 132.767470][ T7802] tun0: persist enabled [ 133.245157][ T7828] netlink: 'syz.4.457': attribute type 15 has an invalid length. [ 133.294220][ T7833] __nla_validate_parse: 20 callbacks suppressed [ 133.294240][ T7833] netlink: 144 bytes leftover after parsing attributes in process `syz.2.459'. [ 134.074204][ T7860] bond1: option arp_all_targets: invalid value (3) [ 134.107665][ T7860] bond1 (unregistering): Released all slaves [ 134.155095][ T7863] netlink: 'syz.2.464': attribute type 1 has an invalid length. [ 134.666121][ T7895] netlink: 'syz.3.471': attribute type 32 has an invalid length. [ 134.715219][ T7897] hsr0: entered promiscuous mode [ 134.740534][ T7897] macsec1: entered promiscuous mode [ 134.757345][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'. [ 134.764457][ T7897] macsec1: entered allmulticast mode [ 134.795838][ T7897] hsr0: entered allmulticast mode [ 134.802707][ T7897] hsr_slave_0: entered allmulticast mode [ 134.823665][ T7897] hsr_slave_1: entered allmulticast mode [ 134.855333][ T7897] hsr0: left allmulticast mode [ 134.862445][ T7897] hsr_slave_0: left allmulticast mode [ 134.891262][ T7897] hsr_slave_1: left allmulticast mode [ 135.004249][ T7898] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 135.045008][ T7905] macsec1: entered promiscuous mode [ 135.050755][ T7905] macsec1: entered allmulticast mode [ 135.057632][ T7905] hsr0: entered allmulticast mode [ 135.063349][ T7905] hsr_slave_0: entered allmulticast mode [ 135.069136][ T7905] hsr_slave_1: entered allmulticast mode [ 135.082310][ T7905] hsr0: left allmulticast mode [ 135.087409][ T7905] hsr_slave_0: left allmulticast mode [ 135.095443][ T7905] hsr_slave_1: left allmulticast mode [ 135.146179][ T7919] bond0: entered promiscuous mode [ 135.152633][ T7919] bond_slave_0: entered promiscuous mode [ 135.158681][ T7919] bond_slave_1: entered promiscuous mode [ 135.168211][ T7919] batadv0: entered promiscuous mode [ 135.178515][ T7919] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 135.190915][ T7919] bond0: left promiscuous mode [ 135.196060][ T7919] bond_slave_0: left promiscuous mode [ 135.202741][ T7919] bond_slave_1: left promiscuous mode [ 135.221335][ T7919] batadv0: left promiscuous mode [ 135.280218][ T7914] netlink: 32 bytes leftover after parsing attributes in process `syz.3.471'. [ 135.544537][ T7939] netlink: 40 bytes leftover after parsing attributes in process `syz.4.478'. [ 135.714339][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 135.843608][ T7950] netlink: 'syz.2.483': attribute type 1 has an invalid length. [ 136.072296][ T7962] netlink: 830 bytes leftover after parsing attributes in process `syz.0.486'. [ 136.263583][ T7964] netlink: 'syz.2.487': attribute type 6 has an invalid length. [ 136.308330][ T7964] netlink: 'syz.2.487': attribute type 6 has an invalid length. [ 136.585244][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 136.642511][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'. [ 136.707725][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 136.733162][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'. [ 137.020998][ T7997] netlink: 'syz.4.497': attribute type 1 has an invalid length. [ 137.048094][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.496'. [ 137.152487][ T8000] lo: entered promiscuous mode [ 137.168806][ T8000] tunl0: entered promiscuous mode [ 137.175267][ T8000] gre0: entered promiscuous mode [ 137.212701][ T8000] gretap0: entered promiscuous mode [ 137.224895][ T8000] erspan0: entered promiscuous mode [ 137.230835][ T8000] ip_vti0: entered promiscuous mode [ 137.263799][ T8000] ip6_vti0: entered promiscuous mode [ 137.270284][ T8000] sit0: entered promiscuous mode [ 137.312295][ T8000] ip6tnl0: entered promiscuous mode [ 137.342964][ T8000] ip6gre0: entered promiscuous mode [ 137.349147][ T8000] syz_tun: entered promiscuous mode [ 137.382944][ T8000] ip6gretap0: entered promiscuous mode [ 137.389143][ T8000] bridge0: entered promiscuous mode [ 137.406208][ T8000] vcan0: entered promiscuous mode [ 137.412891][ T8000] bond0: entered promiscuous mode [ 137.418350][ T8000] bond_slave_0: entered promiscuous mode [ 137.424694][ T8000] bond_slave_1: entered promiscuous mode [ 137.450675][ T8000] team0: entered promiscuous mode [ 137.457183][ T8000] team_slave_0: entered promiscuous mode [ 137.463324][ T8000] team_slave_1: entered promiscuous mode [ 137.470647][ T8000] dummy0: entered promiscuous mode [ 137.511099][ T8000] nlmon0: entered promiscuous mode [ 137.531674][ T8000] caif0: entered promiscuous mode [ 137.537958][ T8000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.572525][ T8014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.579979][ T8014] IPv6: NLM_F_CREATE should be set when creating new route [ 137.587284][ T8014] IPv6: NLM_F_CREATE should be set when creating new route [ 137.610411][ T8005] bond3: option arp_all_targets: invalid value (3) [ 137.620804][ T8005] bond3 (unregistering): Released all slaves [ 138.037388][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.046025][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.201449][ T8050] netlink: 'syz.1.511': attribute type 30 has an invalid length. [ 138.515920][ T8056] netlink: 'syz.3.513': attribute type 1 has an invalid length. [ 138.527362][ T8056] __nla_validate_parse: 2 callbacks suppressed [ 138.527380][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'. [ 139.209444][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.517'. [ 139.385970][ T8079] tipc: Enabled bearer , priority 0 [ 139.570138][ T8079] tipc: Disabling bearer [ 139.889085][ T8094] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 140.047538][ T8094] netlink: 'syz.2.523': attribute type 5 has an invalid length. [ 140.102909][ T8103] netlink: 'syz.1.526': attribute type 2 has an invalid length. [ 140.113420][ T8104] netlink: 'syz.1.526': attribute type 298 has an invalid length. [ 140.132539][ T8103] netlink: 'syz.1.526': attribute type 2 has an invalid length. [ 140.397204][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.531'. [ 140.459818][ T8121] IPv6: NLM_F_REPLACE set, but no existing node found! [ 140.532873][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.533'. [ 140.604814][ T8129] netlink: 'syz.4.534': attribute type 10 has an invalid length. [ 140.613876][ T8124] vlan2: entered allmulticast mode [ 140.622280][ T8124] bridge0: entered allmulticast mode [ 140.627892][ T8124] bridge2: port 1(vlan2) entered blocking state [ 140.634774][ T8124] bridge2: port 1(vlan2) entered disabled state [ 140.644077][ T8124] vlan2: entered promiscuous mode [ 140.649380][ T8124] bridge0: entered promiscuous mode [ 140.698785][ T8129] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 140.840097][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.539'. [ 141.136951][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 141.224797][ T8158] xt_hashlimit: size too large, truncated to 1048576 [ 141.595750][ T8178] netlink: 68 bytes leftover after parsing attributes in process `syz.1.547'. [ 141.617850][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'. [ 141.630555][ T8178] hsr_slave_0: left promiscuous mode [ 141.643149][ T8178] hsr_slave_1: left promiscuous mode [ 141.898315][ T8199] netlink: 5 bytes leftover after parsing attributes in process `syz.2.557'. [ 141.941650][ T8199] netlink: 72 bytes leftover after parsing attributes in process `syz.2.557'. [ 142.285419][ T8221] netlink: 'syz.2.563': attribute type 5 has an invalid length. [ 142.328067][ T8221] batman_adv: batadv0: Adding interface: vxlan0 [ 142.487627][ T8221] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.546146][ T8221] batman_adv: batadv0: Interface activated: vxlan0 [ 143.069589][ T8215] netlink: 'syz.4.562': attribute type 10 has an invalid length. [ 144.444256][ T8259] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 144.566546][ T8269] __nla_validate_parse: 5 callbacks suppressed [ 144.566568][ T8269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.578'. [ 144.654273][ T8269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.578'. [ 144.677624][ T8269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.578'. [ 144.707043][ T8269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.578'. [ 144.716990][ T8269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.578'. [ 144.753833][ T8269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.578'. [ 144.764238][ T8269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.578'. [ 144.808445][ T8289] netlink: 36 bytes leftover after parsing attributes in process `syz.0.583'. [ 144.813763][ T8269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.578'. [ 144.828457][ T8269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.578'. [ 144.885610][ T8269] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.893454][ T8269] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.036598][ T8269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.058190][ T8269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.207835][ T8269] batman_adv: batadv0: Interface deactivated: gretap1 [ 145.257365][ T6738] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.354533][ T6736] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.366709][ T6736] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.376166][ T6736] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.883444][ T8359] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.106443][ T8376] batman_adv: batadv0: Adding interface: vlan2 [ 148.113571][ T8376] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.139624][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.173894][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.218119][ T8376] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 149.761001][ T8429] batadv0: entered promiscuous mode [ 149.788224][ T8429] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 149.809382][ T8429] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 149.833938][ T8429] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 149.862074][ T8429] batadv0: left promiscuous mode [ 150.152158][ T8441] __nla_validate_parse: 154 callbacks suppressed [ 150.152178][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'. [ 150.172999][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.624'. [ 150.183485][ T8445] netlink: 44 bytes leftover after parsing attributes in process `syz.3.626'. [ 150.195555][ T8445] netlink: 43 bytes leftover after parsing attributes in process `syz.3.626'. [ 150.205708][ T8445] netlink: 'syz.3.626': attribute type 6 has an invalid length. [ 150.213724][ T8445] netlink: 'syz.3.626': attribute type 5 has an invalid length. [ 150.281302][ T8445] netlink: 43 bytes leftover after parsing attributes in process `syz.3.626'. [ 150.623401][ T8469] tipc: Enabled bearer , priority 0 [ 150.648435][ T8469] syzkaller0: entered promiscuous mode [ 150.659839][ T8469] syzkaller0: entered allmulticast mode [ 150.730175][ T8469] tipc: Resetting bearer [ 150.809810][ T8477] netlink: 176 bytes leftover after parsing attributes in process `syz.3.633'. [ 151.065561][ T8491] syz_tun: entered allmulticast mode [ 151.134800][ T8486] syz_tun: left allmulticast mode [ 151.217765][ T8499] Bluetooth: MGMT ver 1.23 [ 151.224504][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.642'. [ 151.287541][ T8501] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.297310][ T8497] tipc: Started in network mode [ 151.302955][ T8497] tipc: Node identity a2fb4e41444b, cluster identity 4711 [ 151.310410][ T8497] tipc: Enabled bearer , priority 0 [ 151.321473][ T8496] tipc: Resetting bearer [ 151.339310][ T8496] tipc: Disabling bearer [ 151.435888][ T8468] tipc: Resetting bearer [ 151.453443][ T8468] tipc: Disabling bearer [ 151.582203][ T8513] FAULT_INJECTION: forcing a failure. [ 151.582203][ T8513] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 151.611468][ T8513] CPU: 0 UID: 0 PID: 8513 Comm: syz.1.646 Not tainted syzkaller #0 PREEMPT(full) [ 151.611499][ T8513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.611519][ T8513] Call Trace: [ 151.611527][ T8513] [ 151.611535][ T8513] dump_stack_lvl+0x189/0x250 [ 151.611570][ T8513] ? __pfx____ratelimit+0x10/0x10 [ 151.611603][ T8513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.611631][ T8513] ? __pfx__printk+0x10/0x10 [ 151.611666][ T8513] should_fail_ex+0x414/0x560 [ 151.611759][ T8513] _copy_from_user+0x2d/0xb0 [ 151.611788][ T8513] __copy_msghdr+0x3c5/0x5b0 [ 151.611816][ T8513] ___sys_sendmsg+0x1a5/0x2a0 [ 151.611843][ T8513] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.611913][ T8513] ? __fget_files+0x2a/0x420 [ 151.611933][ T8513] ? __fget_files+0x3a0/0x420 [ 151.611964][ T8513] __sys_sendmmsg+0x227/0x430 [ 151.611995][ T8513] ? __pfx___sys_sendmmsg+0x10/0x10 [ 151.612029][ T8513] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.612071][ T8513] ? ksys_write+0x22a/0x250 [ 151.612104][ T8513] ? __pfx_ksys_write+0x10/0x10 [ 151.612139][ T8513] __x64_sys_sendmmsg+0xa0/0xc0 [ 151.612166][ T8513] do_syscall_64+0xfa/0xfa0 [ 151.612185][ T8513] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.612205][ T8513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.612237][ T8513] ? clear_bhb_loop+0x60/0xb0 [ 151.612261][ T8513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.612280][ T8513] RIP: 0033:0x7f0dfb78f6c9 [ 151.612307][ T8513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.612324][ T8513] RSP: 002b:00007f0dfc6c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 151.612345][ T8513] RAX: ffffffffffffffda RBX: 00007f0dfb9e5fa0 RCX: 00007f0dfb78f6c9 [ 151.612360][ T8513] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000003 [ 151.612372][ T8513] RBP: 00007f0dfc6c8090 R08: 0000000000000000 R09: 0000000000000000 [ 151.612384][ T8513] R10: 0000000000004880 R11: 0000000000000246 R12: 0000000000000001 [ 151.612395][ T8513] R13: 00007f0dfb9e6038 R14: 00007f0dfb9e5fa0 R15: 00007ffec93ca358 [ 151.612429][ T8513] [ 151.920606][ T8518] bond3: ARP target 9.0.0.0 is already present [ 151.926910][ T8518] bond3: option arp_ip_target: invalid value (9) [ 151.933730][ T8525] netlink: 176 bytes leftover after parsing attributes in process `syz.1.650'. [ 151.946510][ T8518] bond3 (unregistering): Released all slaves [ 152.239641][ T8540] nicvf0: entered promiscuous mode [ 152.278328][ T6740] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 152.300389][ T8549] netlink: 40 bytes leftover after parsing attributes in process `syz.1.654'. [ 152.321671][ T6740] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 152.330004][ T6740] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 152.366125][ T6740] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 152.431798][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.659'. [ 152.611866][ T8558] x_tables: duplicate underflow at hook 1 [ 152.619922][ T8550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.966904][ T8586] raw_sendmsg: syz.2.664 forgot to set AF_INET. Fix it! [ 152.992687][ T8588] wg2: entered promiscuous mode [ 152.997832][ T8588] wg2: entered allmulticast mode [ 153.499204][ T8608] bond3: option tlb_dynamic_lb: invalid value (5) [ 153.521035][ T8608] bond3 (unregistering): Released all slaves [ 153.592771][ T8615] No such timeout policy "syz0" [ 153.595006][ T8613] netlink: 'syz.3.673': attribute type 3 has an invalid length. [ 153.768748][ T8621] xt_TPROXY: Can be used only with -p tcp or -p udp [ 153.974817][ T8637] sctp: [Deprecated]: syz.3.681 (pid 8637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.974817][ T8637] Use struct sctp_sack_info instead [ 154.004222][ T8619] wg1 speed is unknown, defaulting to 1000 [ 154.010458][ T8619] wg1 speed is unknown, defaulting to 1000 [ 154.035038][ T8619] wg1 speed is unknown, defaulting to 1000 [ 154.072336][ T8619] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 154.126071][ T8619] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 154.169094][ T8619] wg1 speed is unknown, defaulting to 1000 [ 154.178400][ T8619] wg1 speed is unknown, defaulting to 1000 [ 154.204488][ T8619] wg1 speed is unknown, defaulting to 1000 [ 154.216683][ T8619] wg1 speed is unknown, defaulting to 1000 [ 154.224666][ T8619] wg1 speed is unknown, defaulting to 1000 [ 155.070531][ T8684] batadv1: entered promiscuous mode [ 155.204455][ T8692] netlink: 'syz.1.696': attribute type 13 has an invalid length. [ 155.215546][ T8692] netlink: 'syz.1.696': attribute type 17 has an invalid length. [ 155.227185][ T8691] wg1 speed is unknown, defaulting to 1000 [ 155.336327][ T8692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.346105][ T8692] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.364764][ T8692] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 155.492981][ T8695] wg1 speed is unknown, defaulting to 1000 [ 155.528746][ T8692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.772938][ T6734] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 155.804402][ T8706] __nla_validate_parse: 8 callbacks suppressed [ 155.804420][ T8706] netlink: 48 bytes leftover after parsing attributes in process `syz.3.699'. [ 155.825991][ T8708] netlink: 36 bytes leftover after parsing attributes in process `syz.3.699'. [ 156.088792][ T8724] netlink: 44 bytes leftover after parsing attributes in process `syz.0.704'. [ 156.400655][ T8734] wg1 speed is unknown, defaulting to 1000 [ 156.453341][ T8735] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 157.258212][ T8769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.331073][ T8771] bridge_slave_1: left allmulticast mode [ 157.358939][ T8771] bridge_slave_1: left promiscuous mode [ 157.394581][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.868952][ T8786] wg1 speed is unknown, defaulting to 1000 [ 158.036505][ T8792] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig [ 158.363910][ T8798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.725'. [ 158.604476][ T8806] netlink: 20 bytes leftover after parsing attributes in process `syz.4.725'. [ 158.628646][ T8806] nbd: device at index 64 is going down [ 158.823951][ T8809] bond1: entered promiscuous mode [ 158.829112][ T8809] bond1: entered allmulticast mode [ 158.835740][ T8809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.012900][ T5841] IPVS: starting estimator thread 0... [ 159.021349][ T8818] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 159.145987][ T8809] bond1 (unregistering): Released all slaves [ 159.164003][ T8821] IPVS: using max 24 ests per chain, 57600 per kthread [ 159.295583][ T8826] 8021q: VLANs not supported on ip_vti0 [ 159.433386][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'. [ 159.451342][ T8836] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 159.597298][ T8838] netlink: 56 bytes leftover after parsing attributes in process `syz.0.735'. [ 159.669210][ T8838] netlink: 19 bytes leftover after parsing attributes in process `syz.0.735'. [ 159.731766][ T8838] netlink: 19 bytes leftover after parsing attributes in process `syz.0.735'. [ 159.999635][ T8852] netlink: 80 bytes leftover after parsing attributes in process `syz.1.738'. [ 160.111395][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 160.339149][ T8863] syzkaller1: entered promiscuous mode [ 160.349623][ T8863] syzkaller1: entered allmulticast mode [ 160.391600][ T8863] Bluetooth: MGMT ver 1.23 [ 160.403078][ T8863] netlink: 'syz.4.742': attribute type 1 has an invalid length. [ 160.473722][ T8863] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.857468][ T8899] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 160.915782][ T8895] wg1 speed is unknown, defaulting to 1000 [ 160.937342][ T8899] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 161.123208][ T8899] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 161.452373][ T8899] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 161.755260][ T8899] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 161.812982][ T8931] wg1 speed is unknown, defaulting to 1000 [ 161.958759][ T6736] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 162.079003][ T6736] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 162.118393][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 162.200236][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 162.350684][ T8947] netlink: 'syz.3.765': attribute type 83 has an invalid length. [ 162.473125][ T8952] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 162.585944][ T8962] netlink: 'syz.3.768': attribute type 21 has an invalid length. [ 162.617380][ T8962] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 162.647808][ T8962] netlink: 132 bytes leftover after parsing attributes in process `syz.3.768'. [ 162.862089][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 162.897015][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 163.305232][ T8994] netlink: 60 bytes leftover after parsing attributes in process `syz.3.778'. [ 164.048629][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.786'. [ 164.152705][ T9019] bridge_slave_1: left allmulticast mode [ 164.169060][ T9019] bridge_slave_1: left promiscuous mode [ 164.183756][ T9019] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.222799][ T9019] bridge_slave_0: left allmulticast mode [ 164.228923][ T9019] bridge_slave_0: left promiscuous mode [ 164.235269][ T9019] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.475438][ T9036] netlink: 'syz.2.790': attribute type 1 has an invalid length. [ 164.512082][ T52] Bluetooth: hci0: command tx timeout [ 164.614322][ T9036] bond5: entered promiscuous mode [ 164.619612][ T9036] bond5: entered allmulticast mode [ 164.633547][ T9036] 8021q: adding VLAN 0 to HW filter on device bond5 [ 164.664157][ T9040] syzkaller0: entered promiscuous mode [ 164.670201][ T9040] syzkaller0: entered allmulticast mode [ 165.003839][ T9061] wg1 speed is unknown, defaulting to 1000 [ 165.069135][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'. [ 165.079838][ T9069] nbd: socks must be embedded in a SOCK_ITEM attr [ 165.118035][ T9067] netlink: 56 bytes leftover after parsing attributes in process `syz.0.800'. [ 165.128297][ T9067] netlink: 19 bytes leftover after parsing attributes in process `syz.0.800'. [ 165.148169][ T9067] netlink: 19 bytes leftover after parsing attributes in process `syz.0.800'. [ 165.555205][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'. [ 165.914697][ T9109] lo: left promiscuous mode [ 165.928840][ T9109] tunl0: left promiscuous mode [ 165.942512][ T9109] gre0: left promiscuous mode [ 165.966847][ T9109] gretap0: left promiscuous mode [ 165.982003][ T9109] erspan0: left promiscuous mode [ 165.989616][ T9109] ip_vti0: left promiscuous mode [ 165.996707][ T9109] ip6_vti0: left promiscuous mode [ 166.004355][ T9109] sit0: left promiscuous mode [ 166.042846][ T9109] ip6tnl0: left promiscuous mode [ 166.050178][ T9109] ip6gre0: left promiscuous mode [ 166.065176][ T9109] syz_tun: left promiscuous mode [ 166.093879][ T9109] ip6gretap0: left promiscuous mode [ 166.101918][ T9109] bridge0: left promiscuous mode [ 166.108348][ T9109] vcan0: left promiscuous mode [ 166.116373][ T9109] bond0: left promiscuous mode [ 166.121366][ T9109] bond_slave_0: left promiscuous mode [ 166.127166][ T9109] bond_slave_1: left promiscuous mode [ 166.135879][ T9109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.143733][ T9109] team0: left promiscuous mode [ 166.148779][ T9109] team_slave_0: left promiscuous mode [ 166.154780][ T9109] team_slave_1: left promiscuous mode [ 166.162057][ T9109] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.170101][ T9109] dummy0: left promiscuous mode [ 166.181131][ T9109] nlmon0: left promiscuous mode [ 166.188075][ T9109] caif0: left promiscuous mode [ 166.194064][ T9109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.508706][ T9135] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 166.518014][ T9132] wg1 speed is unknown, defaulting to 1000 [ 166.749263][ T9150] netlink: 'syz.4.821': attribute type 4 has an invalid length. [ 166.749517][ T9146] netlink: 'syz.4.821': attribute type 4 has an invalid length. [ 166.799379][ T9142] netlink: 'syz.4.821': attribute type 4 has an invalid length. [ 166.950155][ T9157] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 166.956948][ T9157] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 166.978439][ T9157] netlink: 'syz.4.825': attribute type 2 has an invalid length. [ 167.917776][ T9209] netlink: 'syz.1.839': attribute type 12 has an invalid length. [ 168.236468][ T9222] __nla_validate_parse: 13 callbacks suppressed [ 168.236487][ T9222] netlink: 56 bytes leftover after parsing attributes in process `syz.3.842'. [ 168.270619][ T9222] netlink: 19 bytes leftover after parsing attributes in process `syz.3.842'. [ 168.299884][ T9222] netlink: 19 bytes leftover after parsing attributes in process `syz.3.842'. [ 168.642539][ T9232] pim6reg1: entered promiscuous mode [ 168.651272][ T9232] pim6reg1: entered allmulticast mode [ 168.751610][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 168.865844][ T9236] wg1 speed is unknown, defaulting to 1000 [ 169.363099][ T9254] FAULT_INJECTION: forcing a failure. [ 169.363099][ T9254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.393730][ T9254] CPU: 0 UID: 0 PID: 9254 Comm: syz.2.850 Not tainted syzkaller #0 PREEMPT(full) [ 169.393758][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.393771][ T9254] Call Trace: [ 169.393779][ T9254] [ 169.393789][ T9254] dump_stack_lvl+0x189/0x250 [ 169.393824][ T9254] ? __pfx____ratelimit+0x10/0x10 [ 169.393854][ T9254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.393881][ T9254] ? __pfx__printk+0x10/0x10 [ 169.393902][ T9254] ? __might_fault+0xb0/0x130 [ 169.393942][ T9254] should_fail_ex+0x414/0x560 [ 169.393991][ T9254] _copy_from_iter+0x1de/0x1790 [ 169.394020][ T9254] ? rcu_is_watching+0x15/0xb0 [ 169.394048][ T9254] ? kmalloc_reserve+0xbd/0x290 [ 169.394068][ T9254] ? __pfx__copy_from_iter+0x10/0x10 [ 169.394093][ T9254] ? __build_skb_around+0x262/0x3f0 [ 169.394117][ T9254] ? netlink_sendmsg+0x642/0xb30 [ 169.394136][ T9254] ? skb_put+0x11b/0x210 [ 169.394161][ T9254] netlink_sendmsg+0x6b2/0xb30 [ 169.394193][ T9254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.394218][ T9254] ? aa_sock_msg_perm+0xf1/0x1d0 [ 169.394250][ T9254] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 169.394270][ T9254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.394292][ T9254] __sock_sendmsg+0x21c/0x270 [ 169.394336][ T9254] ____sys_sendmsg+0x505/0x830 [ 169.394370][ T9254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.394401][ T9254] ? import_iovec+0x74/0xa0 [ 169.394429][ T9254] ___sys_sendmsg+0x21f/0x2a0 [ 169.394454][ T9254] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.394512][ T9254] ? __fget_files+0x2a/0x420 [ 169.394529][ T9254] ? __fget_files+0x3a0/0x420 [ 169.394558][ T9254] __x64_sys_sendmsg+0x19b/0x260 [ 169.394583][ T9254] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.394616][ T9254] ? __pfx_ksys_write+0x10/0x10 [ 169.394647][ T9254] ? do_syscall_64+0xbe/0xfa0 [ 169.394669][ T9254] do_syscall_64+0xfa/0xfa0 [ 169.394690][ T9254] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.394709][ T9254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.394728][ T9254] ? clear_bhb_loop+0x60/0xb0 [ 169.394750][ T9254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.394768][ T9254] RIP: 0033:0x7f1fef58f6c9 [ 169.394798][ T9254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.394817][ T9254] RSP: 002b:00007f1ff0448038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.394837][ T9254] RAX: ffffffffffffffda RBX: 00007f1fef7e5fa0 RCX: 00007f1fef58f6c9 [ 169.394851][ T9254] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 169.394863][ T9254] RBP: 00007f1ff0448090 R08: 0000000000000000 R09: 0000000000000000 [ 169.394874][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.394886][ T9254] R13: 00007f1fef7e6038 R14: 00007f1fef7e5fa0 R15: 00007ffc03216d18 [ 169.394918][ T9254] [ 169.921765][ T9261] netlink: 'syz.4.854': attribute type 4 has an invalid length. [ 169.939874][ T9262] netlink: 56 bytes leftover after parsing attributes in process `syz.3.853'. [ 169.971697][ T9262] netlink: 19 bytes leftover after parsing attributes in process `syz.3.853'. [ 170.016272][ T9263] netlink: 'syz.4.854': attribute type 4 has an invalid length. [ 170.041611][ T9262] netlink: 19 bytes leftover after parsing attributes in process `syz.3.853'. [ 170.252579][ T9270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.854'. [ 170.266715][ T9261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.288344][ T9261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.511653][ T6738] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.529860][ T6738] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.551554][ T6738] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.560753][ T6738] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.583321][ T6738] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.612489][ T6738] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.650226][ T6738] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.689369][ T6738] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.846256][ T9290] FAULT_INJECTION: forcing a failure. [ 170.846256][ T9290] name failslab, interval 1, probability 0, space 0, times 0 [ 170.891897][ T9287] wg1 speed is unknown, defaulting to 1000 [ 170.921241][ T9290] CPU: 0 UID: 0 PID: 9290 Comm: syz.1.862 Not tainted syzkaller #0 PREEMPT(full) [ 170.921268][ T9290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.921280][ T9290] Call Trace: [ 170.921288][ T9290] [ 170.921296][ T9290] dump_stack_lvl+0x189/0x250 [ 170.921328][ T9290] ? __pfx____ratelimit+0x10/0x10 [ 170.921360][ T9290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.921388][ T9290] ? __pfx__printk+0x10/0x10 [ 170.921414][ T9290] ? __lock_acquire+0xab9/0xd20 [ 170.921442][ T9290] should_fail_ex+0x414/0x560 [ 170.921477][ T9290] should_failslab+0xa8/0x100 [ 170.921500][ T9290] kmem_cache_alloc_noprof+0x74/0x6e0 [ 170.921529][ T9290] ? skb_clone+0x212/0x3a0 [ 170.921560][ T9290] skb_clone+0x212/0x3a0 [ 170.921588][ T9290] __netlink_deliver_tap+0x404/0x850 [ 170.921623][ T9290] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.921647][ T9290] netlink_deliver_tap+0x19c/0x1b0 [ 170.921670][ T9290] netlink_unicast+0x7fa/0x9e0 [ 170.921711][ T9290] ? __pfx_netlink_unicast+0x10/0x10 [ 170.921744][ T9290] ? netlink_sendmsg+0x642/0xb30 [ 170.921763][ T9290] ? skb_put+0x11b/0x210 [ 170.921788][ T9290] netlink_sendmsg+0x805/0xb30 [ 170.921821][ T9290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.921847][ T9290] ? aa_sock_msg_perm+0xf1/0x1d0 [ 170.921879][ T9290] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 170.921899][ T9290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.921922][ T9290] __sock_sendmsg+0x21c/0x270 [ 170.921953][ T9290] ____sys_sendmsg+0x505/0x830 [ 170.921982][ T9290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.922014][ T9290] ? import_iovec+0x74/0xa0 [ 170.922043][ T9290] ___sys_sendmsg+0x21f/0x2a0 [ 170.922068][ T9290] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.922130][ T9290] ? __fget_files+0x2a/0x420 [ 170.922148][ T9290] ? __fget_files+0x3a0/0x420 [ 170.922178][ T9290] __x64_sys_sendmsg+0x19b/0x260 [ 170.922211][ T9290] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.922245][ T9290] ? __pfx_ksys_write+0x10/0x10 [ 170.922278][ T9290] ? do_syscall_64+0xbe/0xfa0 [ 170.922300][ T9290] do_syscall_64+0xfa/0xfa0 [ 170.922318][ T9290] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.922336][ T9290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.922355][ T9290] ? clear_bhb_loop+0x60/0xb0 [ 170.922378][ T9290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.922397][ T9290] RIP: 0033:0x7f0dfb78f6c9 [ 170.922415][ T9290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.922430][ T9290] RSP: 002b:00007f0dfc6c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.922451][ T9290] RAX: ffffffffffffffda RBX: 00007f0dfb9e5fa0 RCX: 00007f0dfb78f6c9 [ 170.922465][ T9290] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 170.922477][ T9290] RBP: 00007f0dfc6c8090 R08: 0000000000000000 R09: 0000000000000000 [ 170.922488][ T9290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.922499][ T9290] R13: 00007f0dfb9e6038 R14: 00007f0dfb9e5fa0 R15: 00007ffec93ca358 [ 170.922532][ T9290] [ 171.438225][ T9303] dummy0: entered promiscuous mode [ 171.444886][ T9303] vlan0: entered promiscuous mode [ 171.644293][ T9287] netlink: 32 bytes leftover after parsing attributes in process `syz.3.861'. [ 171.747846][ T9318] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 171.790444][ T9287] wg1 speed is unknown, defaulting to 1000 [ 171.880919][ T9323] macvtap1: entered promiscuous mode [ 171.891507][ T9323] veth1_to_hsr: entered promiscuous mode [ 171.897393][ T9323] macvtap1: entered allmulticast mode [ 171.905585][ T9323] veth1_to_hsr: entered allmulticast mode [ 171.919081][ T9327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.875'. [ 171.940086][ T9327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.875'. [ 171.957936][ T9329] netlink: 'syz.0.876': attribute type 4 has an invalid length. [ 172.228236][ T9337] erspan0: entered promiscuous mode [ 172.261311][ T9337] erspan0: entered allmulticast mode [ 172.387039][ T6740] IPVS: stopping backup sync thread 9318 ... [ 172.534210][ T9364] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 172.543005][ T9364] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 172.625171][ T9372] tipc: Enabled bearer , priority 10 [ 172.633397][ T9372] netlink: 'syz.3.888': attribute type 2 has an invalid length. [ 172.641183][ T9372] netlink: 'syz.3.888': attribute type 3 has an invalid length. [ 172.865582][ T9379] syzkaller0: entered promiscuous mode [ 172.871467][ T9379] syzkaller0: entered allmulticast mode [ 172.951830][ T9391] netlink: 'syz.0.894': attribute type 1 has an invalid length. [ 173.096742][ T9398] netlink: 'syz.1.897': attribute type 1 has an invalid length. [ 173.278350][ T9405] netlink: 'syz.2.896': attribute type 10 has an invalid length. [ 174.287667][ T9393] bond1: (slave bridge4): making interface the new active one [ 174.296087][ T9393] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 174.318423][ T9405] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.328825][ T9405] team_slave_0: entered promiscuous mode [ 174.334819][ T9405] team_slave_1: entered promiscuous mode [ 174.343757][ T9405] bond0: (slave team0): Enslaving as an active interface with an up link [ 174.364569][ T10] tipc: Node number set to 3879989701 [ 174.435825][ T9396] wg1 speed is unknown, defaulting to 1000 [ 174.968404][ T9451] netlink: 'syz.2.905': attribute type 13 has an invalid length. [ 174.995313][ T9452] __nla_validate_parse: 6 callbacks suppressed [ 174.995332][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'. [ 175.028130][ T9451] hsr0: left promiscuous mode [ 175.104585][ T9453] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 175.112962][ T9453] syzkaller0: entered promiscuous mode [ 175.118480][ T9453] syzkaller0: entered allmulticast mode [ 175.250435][ T9428] nbd: must specify at least one socket [ 175.958377][ T9495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.978994][ T9495] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.917'. [ 176.597689][ T9518] wg1 speed is unknown, defaulting to 1000 [ 176.979343][ T9543] netlink: 164 bytes leftover after parsing attributes in process `syz.3.927'. [ 177.105438][ T9549] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 177.596478][ T9567] tipc: Enabled bearer , priority 0 [ 177.643492][ T9567] ipvlan3: entered promiscuous mode [ 177.648984][ T9567] ipvlan3: entered allmulticast mode [ 177.654839][ T9567] geneve1: entered allmulticast mode [ 177.875703][ T9566] tipc: Disabling bearer [ 178.239454][ T9587] Bluetooth: MGMT ver 1.23 [ 178.370398][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 178.411403][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.942'. [ 178.599340][ T9597] netlink: 'syz.3.945': attribute type 3 has an invalid length. [ 178.716058][ T5841] hid-generic 0005:0C45:05DF.0001: item fetching failed at offset 0/1 [ 178.736916][ T5841] hid-generic 0005:0C45:05DF.0001: probe with driver hid-generic failed with error -22 [ 179.596151][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.614628][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.626485][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.648872][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.648943][ T9642] netlink: 20 bytes leftover after parsing attributes in process `syz.4.956'. [ 179.666862][ T6740] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.681635][ T6740] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.709073][ T9644] IPv6: Can't replace route, no match found [ 179.719083][ T6740] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.732855][ T6740] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.746791][ T9642] netlink: 25 bytes leftover after parsing attributes in process `syz.4.956'. [ 179.833212][ T9642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.956'. [ 180.227620][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.959'. [ 180.642845][ T9685] netlink: 44 bytes leftover after parsing attributes in process `syz.0.967'. [ 180.653151][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.969'. [ 180.670313][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.969'. [ 180.754601][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.969'. [ 180.787068][ T9687] team0: Device ipvlan0 failed to register rx_handler [ 180.800285][ T9692] netlink: 48 bytes leftover after parsing attributes in process `syz.2.973'. [ 180.802732][ T9693] netlink: 'syz.0.972': attribute type 12 has an invalid length. [ 181.270505][ T9722] netlink: 'syz.2.979': attribute type 3 has an invalid length. [ 181.322283][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'. [ 181.335710][ T9727] netlink: 48 bytes leftover after parsing attributes in process `syz.0.980'. [ 181.339204][ T9724] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.357739][ T9724] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.386178][ T9722] erspan0: entered promiscuous mode [ 181.426445][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 181.442076][ T9727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.980'. [ 181.534565][ T9724] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.554865][ T9724] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.853718][ T9724] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.870204][ T9724] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.996149][ T9724] bond0: (slave netdevsim0): Releasing backup interface [ 182.009425][ T9724] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.061293][ T9724] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.334958][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.343410][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.363014][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.384533][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.439736][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.461540][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.550975][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.564049][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.946577][ T9793] bridge0: port 1(veth0_to_bridge) entered blocking state [ 182.961389][ T9793] bridge0: port 1(veth0_to_bridge) entered disabled state [ 182.971511][ T9793] veth0_to_bridge: entered allmulticast mode [ 182.995065][ T9793] veth0_to_bridge: entered promiscuous mode [ 183.416446][ T9815] bond2 (unregistering): Released all slaves [ 183.599745][ T9835] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 183.651108][ T9834] tipc: Enabled bearer , priority 0 [ 183.665908][ T9838] syzkaller0: entered promiscuous mode [ 183.673238][ T9838] syzkaller0: entered allmulticast mode [ 183.704190][ T9838] tipc: Resetting bearer [ 183.756427][ T9838] tipc: Disabling bearer [ 183.767719][ T9843] lo: Caught tx_queue_len zero misconfig [ 184.167944][ T9862] 0ªX¹¦À: renamed from caif0 [ 184.175613][ T9862] 0ªX¹¦À: entered allmulticast mode [ 184.180970][ T9862] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 184.578890][ T9881] netlink: 'syz.4.1022': attribute type 1 has an invalid length. [ 184.599639][ T9884] netlink: 'syz.1.1019': attribute type 2 has an invalid length. [ 184.907638][ T9903] netlink: 'syz.0.1028': attribute type 9 has an invalid length. [ 184.920762][ T9904] netlink: 'syz.0.1028': attribute type 9 has an invalid length. [ 184.937425][ T9905] netlink: 'syz.2.1029': attribute type 23 has an invalid length. [ 185.010363][ T9903] team_slave_0: entered promiscuous mode [ 185.016391][ T9903] team_slave_1: entered promiscuous mode [ 185.023468][ T9903] team0: Device macsec2 is already an upper device of the team interface [ 185.033689][ T9903] team_slave_0: left promiscuous mode [ 185.039189][ T9903] team_slave_1: left promiscuous mode [ 185.339814][ T9913] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 185.489726][ T9921] __nla_validate_parse: 8 callbacks suppressed [ 185.489744][ T9921] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1035'. [ 185.510792][ T9921] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 185.521874][ T9921] pim6reg1: linktype set to 805 [ 185.540135][ T9925] netlink: 'syz.3.1034': attribute type 30 has an invalid length. [ 185.643855][ T9932] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 185.657796][ T9932] netlink: 'syz.2.1037': attribute type 2 has an invalid length. [ 185.752840][ T9939] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1033'. [ 185.767024][ T9933] dummy0: entered allmulticast mode [ 185.781416][ T9935] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1038'. [ 185.811240][ T9935] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1038'. [ 185.998796][ T9949] bond6: option min_links: invalid value (18446744073709551612) [ 186.006805][ T9949] bond6: option min_links: allowed values 0 - 2147483647 [ 186.016553][ T9949] bond6 (unregistering): Released all slaves [ 186.031357][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 186.243461][ T9968] wg1 speed is unknown, defaulting to 1000 [ 186.318110][ T9969] wg1 speed is unknown, defaulting to 1000 [ 186.355331][ T9930] dummy0: left allmulticast mode [ 186.358422][ T9984] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1050'. [ 186.446336][ T9986] netlink: 'syz.2.1049': attribute type 39 has an invalid length. [ 193.290415][ T9994] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 193.330886][T10007] netlink: 'syz.3.1055': attribute type 1 has an invalid length. [ 193.467621][T10007] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.501970][T10016] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1060'. [ 193.573000][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 193.784670][ T9994] bond4: (slave ip6gretap2): making interface the new active one [ 193.836913][ T9994] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 193.907110][T10017] veth1: entered promiscuous mode [ 193.916621][T10017] bond4: (slave veth1): Enslaving as an active interface with a down link [ 193.926537][T10007] erspan0: entered allmulticast mode [ 193.949410][T10007] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 193.970031][T10024] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 194.020293][T10041] netlink: 'syz.0.1064': attribute type 1 has an invalid length. [ 194.096620][T10041] bond2: entered promiscuous mode [ 194.102781][T10041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.212227][T10051] netlink: 'syz.2.1067': attribute type 1 has an invalid length. [ 194.226480][T10051] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1067'. [ 194.336750][T10064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1071'. [ 194.522138][T10080] netlink: 'syz.0.1075': attribute type 4 has an invalid length. [ 194.535310][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1075'. [ 194.544946][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'. [ 194.564979][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1075'. [ 194.574330][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'. [ 194.832738][T10097] netlink: 'syz.0.1080': attribute type 21 has an invalid length. [ 194.853444][T10097] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1080'. [ 195.077262][T10106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1081'. [ 195.157284][T10106] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.169978][T10109] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 195.179524][T10109] netlink: 'syz.2.1085': attribute type 1 has an invalid length. [ 195.823139][T10127] ip6gretap0: entered promiscuous mode [ 195.841921][T10127] macsec2: entered promiscuous mode [ 195.851929][T10127] macsec2: entered allmulticast mode [ 195.858642][T10127] ip6gretap0: entered allmulticast mode [ 195.890876][T10127] ip6gretap0: left allmulticast mode [ 195.896956][T10127] ip6gretap0: left promiscuous mode [ 195.947413][T10134] syzkaller0: entered promiscuous mode [ 195.976903][T10134] syzkaller0: entered allmulticast mode [ 196.205284][T10137] IPVS: Scheduler module ip_vs_ not found [ 196.214688][T10139] IPVS: length: 24 != 12792 [ 196.246020][T10142] netlink: 'syz.1.1095': attribute type 28 has an invalid length. [ 196.254172][T10142] netlink: 'syz.1.1095': attribute type 3 has an invalid length. [ 196.378305][T10152] vlan0: entered allmulticast mode [ 196.390697][T10152] dummy0: entered allmulticast mode [ 197.653175][T10217] wg1 speed is unknown, defaulting to 1000 [ 198.022292][T10229] wg1 speed is unknown, defaulting to 1000 [ 198.766921][T10271] netlink: 'syz.4.1138': attribute type 3 has an invalid length. [ 198.775156][T10271] netlink: 'syz.4.1138': attribute type 3 has an invalid length. [ 198.783689][T10271] netlink: 'syz.4.1138': attribute type 3 has an invalid length. [ 199.035429][T10286] __nla_validate_parse: 5 callbacks suppressed [ 199.035446][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1140'. [ 199.103649][T10286] : entered promiscuous mode [ 199.224429][T10298] wg1 speed is unknown, defaulting to 1000 [ 199.485607][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.492368][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.784763][T10328] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1151'. [ 199.794459][T10328] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1151'. [ 199.806862][T10328] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1151'. [ 199.820141][T10327] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1152'. [ 199.829460][T10327] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1152'. [ 199.840367][T10327] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1152'. [ 200.025709][T10341] 8021q: VLANs not supported on caif0 [ 200.792639][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 200.906896][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 201.129946][T10391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1169'. [ 201.421577][T10398] netlink: 'syz.4.1171': attribute type 11 has an invalid length. [ 201.764405][T10409] batadv2: entered allmulticast mode [ 201.791567][T10409] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 201.834980][T10413] batman_adv: batadv0: Interface deactivated: dummy0 [ 202.795437][T10458] tipc: Enabled bearer , priority 0 [ 202.910575][T10456] tipc: Resetting bearer [ 202.928573][T10454] tipc: Resetting bearer [ 202.978116][T10454] tipc: Disabling bearer [ 203.405214][T10495] sctp: [Deprecated]: syz.0.1198 (pid 10495) Use of int in max_burst socket option. [ 203.405214][T10495] Use struct sctp_assoc_value instead [ 203.446684][T10495] sctp: [Deprecated]: syz.0.1198 (pid 10495) Use of int in maxseg socket option. [ 203.446684][T10495] Use struct sctp_assoc_value instead [ 204.156994][T10514] __nla_validate_parse: 9 callbacks suppressed [ 204.157015][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'. [ 204.320195][T10517] wg1 speed is unknown, defaulting to 1000 [ 204.468449][T10514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1206'. [ 204.481562][T10514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1206'. [ 204.726713][T10524] x_tables: duplicate underflow at hook 2 [ 204.770540][T10527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1209'. [ 205.156577][T10540] batman_adv: batadv0: Interface activated: dummy0 [ 205.184217][T10540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.238012][T10536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1210'. [ 205.253479][T10536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1210'. [ 205.775947][T10562] netlink: 'syz.1.1218': attribute type 1 has an invalid length. [ 205.811251][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 205.894721][T10565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1219'. [ 205.906506][T10565] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.914884][T10565] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.039518][T10568] netlink: 'syz.2.1220': attribute type 32 has an invalid length. [ 206.075529][T10568] netlink: 'syz.2.1220': attribute type 32 has an invalid length. [ 206.093996][T10572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 206.384471][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1223'. [ 206.519208][T10581] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 206.588808][T10581] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 206.678948][T10585] macvlan0: entered promiscuous mode [ 206.684437][T10585] macvlan0: entered allmulticast mode [ 206.690493][T10585] bond4: (slave macvlan0): Error -98 calling set_mac_address [ 206.916484][T10596] netlink: 'syz.2.1227': attribute type 96 has an invalid length. [ 206.964590][ T30] audit: type=1800 audit(1763315478.792:3): pid=10588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1226" name="memory.events" dev="tmpfs" ino=1196 res=0 errno=0 [ 207.209117][T10606] netlink: 'syz.0.1229': attribute type 2 has an invalid length. [ 207.552925][T10610] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 207.593833][T10609] wg1 speed is unknown, defaulting to 1000 [ 208.285657][T10639] wg1 speed is unknown, defaulting to 1000 [ 208.307689][T10643] netlink: 'syz.2.1239': attribute type 10 has an invalid length. [ 208.382219][T10643] team_slave_0: left promiscuous mode [ 208.388184][T10643] team_slave_1: left promiscuous mode [ 208.734659][T10653] netlink: 'syz.0.1241': attribute type 8 has an invalid length. [ 208.855775][T10655] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.877833][T10655] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.943042][T10655] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.971249][T10655] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.051045][T10655] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.077984][T10655] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.228558][T10655] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.251280][T10655] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.375957][T10667] netlink: 'syz.0.1245': attribute type 4 has an invalid length. [ 209.433638][T10670] netlink: 'syz.0.1245': attribute type 4 has an invalid length. [ 209.477816][ T6738] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.499762][ T6738] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.536343][T10669] wg1 speed is unknown, defaulting to 1000 [ 209.587743][ T6738] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.613300][ T6738] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.684054][ T6738] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.698035][ T6738] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.803866][ T6736] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.816133][ T6736] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.195376][T10691] __nla_validate_parse: 3 callbacks suppressed [ 210.195434][T10691] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1253'. [ 210.517129][T10695] batadv_slave_1: entered promiscuous mode [ 210.525378][T10695] batadv_slave_1: left promiscuous mode [ 211.029388][T10718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1261'. [ 211.069251][T10718] netlink: 'syz.2.1261': attribute type 2 has an invalid length. [ 211.099564][T10718] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1261'. [ 211.160629][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1262'. [ 211.230740][T10729] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1263'. [ 211.260964][T10733] syzkaller1: entered promiscuous mode [ 211.267459][T10733] syzkaller1: entered allmulticast mode [ 211.279965][T10733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1264'. [ 211.402185][T10736] syzkaller0: entered promiscuous mode [ 211.411259][T10736] syzkaller0: entered allmulticast mode [ 211.678168][T10748] nbd: couldn't find device at index 536870912 [ 211.692012][T10748] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1268'. [ 211.701260][T10748] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1268'. [ 211.776376][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 211.785522][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 211.794570][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 211.794644][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 211.794680][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 212.091983][T10761] 8021q: adding VLAN 0 to HW filter on device bond5 [ 212.271918][T10767] netlink: 'syz.3.1274': attribute type 2 has an invalid length. [ 212.284966][T10767] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 212.425402][T10773] ip6gretap1: entered promiscuous mode [ 212.432345][T10773] ip6gretap1: entered allmulticast mode [ 212.672608][ C0] af_packet: tpacket_rcv: packet too big, clamped from 104 to 4294967272. macoff=96 [ 213.227557][T10804] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 213.302201][T10805] wg1 speed is unknown, defaulting to 1000 [ 213.546124][T10821] batman_adv: batadv0: Interface deactivated: dummy0 [ 213.590242][T10821] batman_adv: batadv0: Removing interface: dummy0 [ 213.635221][T10826] netlink: 'syz.0.1290': attribute type 12 has an invalid length. [ 213.643511][T10826] netlink: 'syz.0.1290': attribute type 14 has an invalid length. [ 213.658346][T10821] bridge_slave_0: left allmulticast mode [ 213.668442][T10821] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.680117][T10821] bridge_slave_1: left allmulticast mode [ 213.688532][T10821] bridge_slave_1: left promiscuous mode [ 213.695077][T10821] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.708410][T10821] bond0: (slave bond_slave_0): Releasing backup interface [ 213.727905][T10821] bond0: (slave bond_slave_1): Releasing backup interface [ 213.777045][T10821] team0: Port device team_slave_0 removed [ 213.796325][T10821] team0: Port device team_slave_1 removed [ 213.812029][T10821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.819604][T10821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.829526][T10821] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.860410][ T8298] wg1 speed is unknown, defaulting to 1000 [ 214.194820][T10843] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 214.397423][T10848] vlan0: entered promiscuous mode [ 214.962743][T10874] xt_TCPMSS: Only works on TCP SYN packets [ 215.511946][T10905] __nla_validate_parse: 13 callbacks suppressed [ 215.511966][T10905] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1313'. [ 216.064143][T10906] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 216.147754][T10927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1317'. [ 216.157302][T10927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1317'. [ 216.178419][T10927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1317'. [ 216.210247][T10927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1317'. [ 216.239390][T10927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1317'. [ 216.301705][T10927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1317'. [ 216.388457][T10939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1321'. [ 216.713491][T10958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.720866][T10958] IPv6: NLM_F_CREATE should be set when creating new route [ 216.723966][T10959] sctp: [Deprecated]: syz.0.1328 (pid 10959) Use of int in max_burst socket option. [ 216.723966][T10959] Use struct sctp_assoc_value instead [ 216.728170][T10958] IPv6: NLM_F_CREATE should be set when creating new route [ 216.796283][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1328'. [ 216.821814][T10959] tipc: New replicast peer: 255.255.255.255 [ 216.839563][T10959] tipc: Enabled bearer , priority 10 [ 216.876260][T10964] netlink: 'syz.1.1329': attribute type 12 has an invalid length. [ 217.000854][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'. [ 217.269321][T10984] netlink: 'syz.2.1335': attribute type 6 has an invalid length. [ 217.934832][T11005] [†’Ì: entered promiscuous mode [ 217.967257][ T8298] tipc: Node number set to 3617011882 [ 218.187523][T11017] netlink: 'syz.3.1344': attribute type 4 has an invalid length. [ 218.265458][T11020] wg1 speed is unknown, defaulting to 1000 [ 218.617503][T11032] x_tables: duplicate underflow at hook 2 [ 218.981207][T11043] netem: change failed [ 219.003894][T11050] wg1 speed is unknown, defaulting to 1000 [ 219.521024][T11071] netlink: 'syz.2.1357': attribute type 13 has an invalid length. [ 219.591334][T11071] netlink: 'syz.2.1357': attribute type 17 has an invalid length. [ 219.861897][T11071] team_slave_0: entered promiscuous mode [ 219.868002][T11071] team_slave_1: entered promiscuous mode [ 219.923678][T11071] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.934527][T11071] 0ªX¹¦À: left allmulticast mode [ 219.950367][T11071] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 220.578494][T11122] __nla_validate_parse: 16 callbacks suppressed [ 220.578514][T11122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1371'. [ 220.595012][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 220.856772][T11101] netlink: 'syz.1.1365': attribute type 4 has an invalid length. [ 220.930527][T11101] IPv6: NLM_F_REPLACE set, but no existing node found! [ 220.950568][T11143] wg1 speed is unknown, defaulting to 1000 [ 222.205017][T11194] netlink: 'syz.1.1392': attribute type 12 has an invalid length. [ 222.514466][T11174] bond0: (slave netdevsim0): Releasing backup interface [ 222.556259][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1397'. [ 223.149215][T11230] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1401'. [ 223.187105][T11230] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1401'. [ 223.405530][T11244] geneve2: entered promiscuous mode [ 223.413147][T11241] wg1 speed is unknown, defaulting to 1000 [ 223.415012][ T6738] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 57707 - 0 [ 223.431029][ T6738] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 57707 - 0 [ 223.446169][ T6738] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 57707 - 0 [ 223.476365][ T6738] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 57707 - 0 [ 223.589305][T11251] sctp: [Deprecated]: syz.2.1407 (pid 11251) Use of int in max_burst socket option. [ 223.589305][T11251] Use struct sctp_assoc_value instead [ 223.776631][T11254] xt_limit: Overflow, try lower: 271964/0 [ 223.785177][T11254] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1409'. [ 223.833692][T11254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1409'. [ 224.105959][T11270] vlan2: entered promiscuous mode [ 224.111040][T11270] bond0: entered promiscuous mode [ 224.117316][T11270] team0: entered promiscuous mode [ 224.387078][T11275] wg1 speed is unknown, defaulting to 1000 [ 224.516593][T11276] netlink: 'syz.4.1413': attribute type 1 has an invalid length. [ 224.606730][T11276] 8021q: adding VLAN 0 to HW filter on device bond3 [ 224.648627][T11277] vlan3: entered promiscuous mode [ 224.654128][T11277] bond3: entered promiscuous mode [ 224.659506][T11277] vlan3: entered allmulticast mode [ 224.665868][T11277] bond3: entered allmulticast mode [ 224.681607][T11289] netlink: 'syz.2.1417': attribute type 3 has an invalid length. [ 225.027547][T11288] vxcan3: entered allmulticast mode [ 225.272509][T11326] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1420'. [ 225.535402][T11309] netlink: 'syz.4.1420': attribute type 29 has an invalid length. [ 225.544222][T11314] netlink: 'syz.4.1420': attribute type 29 has an invalid length. [ 225.557634][T11318] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1423'. [ 225.757595][T11326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.772517][T11326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.782900][T11326] bond0 (unregistering): Released all slaves [ 225.838083][T11316] netlink: 'syz.4.1420': attribute type 29 has an invalid length. [ 225.863558][T11316] netlink: 'syz.4.1420': attribute type 29 has an invalid length. [ 225.881851][T11316] netlink: 'syz.4.1420': attribute type 29 has an invalid length. [ 225.911373][T11316] netlink: 'syz.4.1420': attribute type 29 has an invalid length. [ 225.929232][T11316] netlink: 'syz.4.1420': attribute type 29 has an invalid length. [ 226.004651][T11342] team0: Port device dummy0 added [ 226.015491][T11345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1429'. [ 226.031861][T11345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1429'. [ 226.045605][T11342] team0: Port device dummy0 removed [ 226.077320][T11342] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 226.101570][T11345] macvlan0: entered allmulticast mode [ 226.107094][T11345] veth1_vlan: entered allmulticast mode [ 226.265129][T11350] erspan0: left allmulticast mode [ 226.347652][T11365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1433'. [ 226.372650][T11350] wg1: left promiscuous mode [ 226.378868][T11350] wg1: left allmulticast mode [ 226.390953][T11350] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 226.400416][T11350] ip6gretap1: left allmulticast mode [ 226.407941][T11350] nicvf0: left promiscuous mode [ 226.453293][T11350] veth1: left promiscuous mode [ 226.464153][T11350] batadv2: left allmulticast mode [ 226.538895][T11356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.547637][T11356] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.562368][T11356] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.711294][T11365] vlan0: entered promiscuous mode [ 226.716551][T11365] bond0: entered promiscuous mode [ 226.743041][T11382] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1439'. [ 226.754193][ T153] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 226.755319][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1439'. [ 226.769272][ T153] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 226.780838][ T153] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 226.820109][T11385] tunl0: entered allmulticast mode [ 226.844653][ T153] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 226.850046][T11379] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1438'. [ 226.873600][T11379] NCSI netlink: No device for ifindex 0 [ 226.987680][T11394] FAULT_INJECTION: forcing a failure. [ 226.987680][T11394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.002331][T11394] CPU: 1 UID: 0 PID: 11394 Comm: syz.2.1442 Not tainted syzkaller #0 PREEMPT(full) [ 227.002359][T11394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.002372][T11394] Call Trace: [ 227.002383][T11394] [ 227.002392][T11394] dump_stack_lvl+0x189/0x250 [ 227.002431][T11394] ? __pfx____ratelimit+0x10/0x10 [ 227.002463][T11394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.002489][T11394] ? __pfx__printk+0x10/0x10 [ 227.002510][T11394] ? __might_fault+0xb0/0x130 [ 227.002550][T11394] should_fail_ex+0x414/0x560 [ 227.002587][T11394] _copy_from_user+0x2d/0xb0 [ 227.002613][T11394] ___sys_sendmsg+0x158/0x2a0 [ 227.002640][T11394] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.002703][T11394] ? __fget_files+0x2a/0x420 [ 227.002722][T11394] ? __fget_files+0x3a0/0x420 [ 227.002753][T11394] __x64_sys_sendmsg+0x19b/0x260 [ 227.002779][T11394] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.002813][T11394] ? __pfx_ksys_write+0x10/0x10 [ 227.002846][T11394] ? do_syscall_64+0xbe/0xfa0 [ 227.002885][T11394] do_syscall_64+0xfa/0xfa0 [ 227.002903][T11394] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.002922][T11394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.002942][T11394] ? clear_bhb_loop+0x60/0xb0 [ 227.002966][T11394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.002985][T11394] RIP: 0033:0x7f1fef58f6c9 [ 227.003003][T11394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.003019][T11394] RSP: 002b:00007f1ff0448038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.003051][T11394] RAX: ffffffffffffffda RBX: 00007f1fef7e5fa0 RCX: 00007f1fef58f6c9 [ 227.003066][T11394] RDX: 0000000000004000 RSI: 0000200000000380 RDI: 0000000000000003 [ 227.003079][T11394] RBP: 00007f1ff0448090 R08: 0000000000000000 R09: 0000000000000000 [ 227.003092][T11394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.003103][T11394] R13: 00007f1fef7e6038 R14: 00007f1fef7e5fa0 R15: 00007ffc03216d18 [ 227.003137][T11394] [ 227.046508][T11391] wg1 speed is unknown, defaulting to 1000 [ 227.289483][T11397] validate_nla: 5 callbacks suppressed [ 227.289501][T11397] netlink: 'syz.1.1444': attribute type 9 has an invalid length. [ 227.355789][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1443'. [ 227.503444][T11405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1445'. [ 227.659795][T11412] tipc: Started in network mode [ 227.665441][T11412] tipc: Node identity 9a1c7910cdd9, cluster identity 4711 [ 227.672920][T11412] tipc: Enabled bearer , priority 0 [ 227.680689][T11412] syzkaller0: entered promiscuous mode [ 227.686483][T11412] syzkaller0: entered allmulticast mode [ 227.723421][T11412] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1447'. [ 227.748126][T11412] tipc: Resetting bearer [ 227.785204][T11411] tipc: Resetting bearer [ 227.797407][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1448'. [ 227.829185][T11411] tipc: Disabling bearer [ 227.942459][T11414] tipc: Resetting bearer [ 228.101545][T11430] FAULT_INJECTION: forcing a failure. [ 228.101545][T11430] name failslab, interval 1, probability 0, space 0, times 0 [ 228.132528][T11414] tipc: Disabling bearer [ 228.144072][T11430] CPU: 0 UID: 0 PID: 11430 Comm: syz.1.1453 Not tainted syzkaller #0 PREEMPT(full) [ 228.144101][T11430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.144114][T11430] Call Trace: [ 228.144122][T11430] [ 228.144131][T11430] dump_stack_lvl+0x189/0x250 [ 228.144165][T11430] ? __pfx____ratelimit+0x10/0x10 [ 228.144198][T11430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.144225][T11430] ? __pfx__printk+0x10/0x10 [ 228.144253][T11430] ? __pfx___might_resched+0x10/0x10 [ 228.144274][T11430] ? fs_reclaim_acquire+0x7d/0x100 [ 228.144298][T11430] should_fail_ex+0x414/0x560 [ 228.144336][T11430] should_failslab+0xa8/0x100 [ 228.144360][T11430] kmem_cache_alloc_node_noprof+0x77/0x710 [ 228.144390][T11430] ? __alloc_skb+0x112/0x2d0 [ 228.144409][T11430] ? netlink_autobind+0xdb/0x300 [ 228.144439][T11430] __alloc_skb+0x112/0x2d0 [ 228.144465][T11430] netlink_sendmsg+0x5c6/0xb30 [ 228.144498][T11430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.144526][T11430] ? aa_sock_msg_perm+0xf1/0x1d0 [ 228.144560][T11430] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 228.144580][T11430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.144604][T11430] __sock_sendmsg+0x21c/0x270 [ 228.144646][T11430] ____sys_sendmsg+0x505/0x830 [ 228.144678][T11430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.144713][T11430] ? import_iovec+0x74/0xa0 [ 228.144744][T11430] ___sys_sendmsg+0x21f/0x2a0 [ 228.144778][T11430] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.144844][T11430] ? __fget_files+0x2a/0x420 [ 228.144863][T11430] ? __fget_files+0x3a0/0x420 [ 228.144896][T11430] __x64_sys_sendmsg+0x19b/0x260 [ 228.144924][T11430] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.144960][T11430] ? __pfx_ksys_write+0x10/0x10 [ 228.144998][T11430] ? do_syscall_64+0xbe/0xfa0 [ 228.145025][T11430] do_syscall_64+0xfa/0xfa0 [ 228.145044][T11430] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.145071][T11430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.145092][T11430] ? clear_bhb_loop+0x60/0xb0 [ 228.145117][T11430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.145137][T11430] RIP: 0033:0x7f0dfb78f6c9 [ 228.145156][T11430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.145174][T11430] RSP: 002b:00007f0dfc6c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.145197][T11430] RAX: ffffffffffffffda RBX: 00007f0dfb9e5fa0 RCX: 00007f0dfb78f6c9 [ 228.145212][T11430] RDX: 0000000000004000 RSI: 0000200000000380 RDI: 0000000000000003 [ 228.145225][T11430] RBP: 00007f0dfc6c8090 R08: 0000000000000000 R09: 0000000000000000 [ 228.145239][T11430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.145251][T11430] R13: 00007f0dfb9e6038 R14: 00007f0dfb9e5fa0 R15: 00007ffec93ca358 [ 228.145287][T11430] [ 228.517248][T11414] veth1_vlan (unregistering): left allmulticast mode [ 228.825052][T11454] netlink: 'syz.0.1462': attribute type 18 has an invalid length. [ 228.966292][T11471] xt_TCPMSS: Only works on TCP SYN packets [ 229.036080][T11462] tipc: Enabled bearer , priority 0 [ 229.057451][T11462] syzkaller0: entered allmulticast mode [ 229.074525][T11461] tipc: Disabling bearer [ 229.359050][T11497] syzkaller1: entered promiscuous mode [ 229.374593][T11497] syzkaller1: entered allmulticast mode [ 229.729087][T11513] macvtap3: entered promiscuous mode [ 229.741338][T11513] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 237.031335][T11538] netlink: 'syz.1.1487': attribute type 1 has an invalid length. [ 237.112017][T11538] 8021q: adding VLAN 0 to HW filter on device bond6 [ 237.134282][T11550] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.157877][T11550] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.251029][T11550] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.264524][T11550] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.355085][T11550] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.365590][T11550] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.452779][T11550] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.466098][T11550] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.565679][T11580] netlink: 'syz.0.1498': attribute type 1 has an invalid length. [ 237.574270][T11580] __nla_validate_parse: 9 callbacks suppressed [ 237.574286][T11580] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1498'. [ 237.653166][ T6738] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.675211][ T6738] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.699979][ T6738] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.746956][ T6738] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.765226][ T6738] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.782413][ T6738] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.800397][ T6738] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.819041][ T6738] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.125141][T11602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1506'. [ 238.428097][T11613] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1509'. [ 238.543821][T11624] netlink: 'syz.3.1512': attribute type 7 has an invalid length. [ 238.670183][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1514'. [ 238.904461][T11635] wg1 speed is unknown, defaulting to 1000 [ 239.070546][T11653] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1517'. [ 239.542114][T11668] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1514'. [ 239.610082][T11672] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1523'. [ 239.636570][T11668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1514'. [ 239.691237][T11672] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1523'. [ 239.704298][T11672] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1523'. [ 239.949994][T11689] netlink: 'syz.0.1528': attribute type 2 has an invalid length. [ 239.983768][T11689] !: entered promiscuous mode [ 240.190078][T11692] syz_tun: entered allmulticast mode [ 240.266081][T11698] syz_tun: left allmulticast mode [ 240.709867][T11722] netlink: 'syz.4.1540': attribute type 13 has an invalid length. [ 240.732269][T11722] netlink: 'syz.4.1540': attribute type 17 has an invalid length. [ 240.750602][T11722] erspan0: left promiscuous mode [ 240.759930][T11728] netlink: zone id is out of range [ 240.763281][T11722] erspan0: left allmulticast mode [ 240.777661][T11728] netlink: zone id is out of range [ 240.791746][T11728] netlink: set zone limit has 8 unknown bytes [ 240.836883][T11722] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.901462][T11722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.085354][T11751] veth0: entered promiscuous mode [ 241.139091][T11751] veth0: left promiscuous mode [ 241.263304][T11761] syz_tun: entered allmulticast mode [ 241.288182][T11761] dvmrp6: entered allmulticast mode [ 241.295481][T11760] syz_tun: left allmulticast mode [ 241.323740][T11769] sctp: [Deprecated]: syz.4.1545 (pid 11769) Use of int in maxseg socket option. [ 241.323740][T11769] Use struct sctp_assoc_value instead [ 241.712681][T11783] wg1 speed is unknown, defaulting to 1000 [ 242.817261][T11837] __nla_validate_parse: 11 callbacks suppressed [ 242.817280][T11837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1567'. [ 242.944305][T11849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1569'. [ 242.954484][T11843] wg1 speed is unknown, defaulting to 1000 [ 243.087671][T11848] tipc: Enabled bearer , priority 0 [ 243.250528][T11848] syzkaller0: entered promiscuous mode [ 243.295947][T11868] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1576'. [ 243.311937][T11848] syzkaller0: entered allmulticast mode [ 243.321666][T11868] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1576'. [ 244.864490][T11873] tipc: Resetting bearer [ 244.902830][T11885] tipc: Enabled bearer , priority 0 [ 244.922005][T11889] syzkaller0: entered promiscuous mode [ 244.927506][T11889] syzkaller0: entered allmulticast mode [ 244.972055][T11845] tipc: Resetting bearer [ 245.052168][T11845] tipc: Disabling bearer [ 245.059284][T11903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1582'. [ 245.081092][T11897] tipc: Resetting bearer [ 245.169823][T11897] tipc: Disabling bearer [ 245.269586][T11902] geneve2: entered promiscuous mode [ 245.285464][T11902] geneve2: entered allmulticast mode [ 245.315599][T11899] wg1 speed is unknown, defaulting to 1000 [ 245.315927][ T6734] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 245.339826][ T6734] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 245.367444][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1588'. [ 245.434658][ T6734] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 245.436194][T11930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1589'. [ 245.447030][ T6734] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 245.753514][T11942] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 245.769499][T11942] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 245.928726][T11937] wg1 speed is unknown, defaulting to 1000 [ 246.288507][T11972] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1601'. [ 246.300285][T11971] delete_channel: no stack [ 246.368656][T11982] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1602'. [ 246.402821][T11978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1599'. [ 246.700109][T11999] netlink: 'syz.4.1605': attribute type 39 has an invalid length. [ 247.476411][T12022] netlink: 'syz.3.1613': attribute type 13 has an invalid length. [ 247.728395][T12022] wg1 speed is unknown, defaulting to 1000 [ 248.059273][T12044] __nla_validate_parse: 39 callbacks suppressed [ 248.059292][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1620'. [ 248.113291][T12044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.242372][T12048] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1618'. [ 248.324791][T12056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1621'. [ 248.335191][T12056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1621'. [ 248.385778][T12050] wg1 speed is unknown, defaulting to 1000 [ 249.019513][T12073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1626'. [ 249.028856][T12073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1626'. [ 249.126945][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1628'. [ 249.458149][T12105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1634'. [ 249.492489][T12105] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1634'. [ 250.274174][T12149] FAULT_INJECTION: forcing a failure. [ 250.274174][T12149] name failslab, interval 1, probability 0, space 0, times 0 [ 250.293347][T12149] CPU: 1 UID: 0 PID: 12149 Comm: syz.3.1641 Not tainted syzkaller #0 PREEMPT(full) [ 250.293375][T12149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.293388][T12149] Call Trace: [ 250.293396][T12149] [ 250.293405][T12149] dump_stack_lvl+0x189/0x250 [ 250.293439][T12149] ? __pfx____ratelimit+0x10/0x10 [ 250.293477][T12149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.293505][T12149] ? __pfx__printk+0x10/0x10 [ 250.293528][T12149] ? __pfx___might_resched+0x10/0x10 [ 250.293551][T12149] ? fs_reclaim_acquire+0x7d/0x100 [ 250.293576][T12149] should_fail_ex+0x414/0x560 [ 250.293612][T12149] should_failslab+0xa8/0x100 [ 250.293635][T12149] __kmalloc_noprof+0xcb/0x7f0 [ 250.293663][T12149] ? bpf_test_init+0x9f/0x150 [ 250.293690][T12149] bpf_test_init+0x9f/0x150 [ 250.293714][T12149] bpf_prog_test_run_xdp+0x503/0x10e0 [ 250.293754][T12149] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 250.293781][T12149] ? __fget_files+0x2a/0x420 [ 250.293807][T12149] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 250.293830][T12149] bpf_prog_test_run+0x2c7/0x340 [ 250.293855][T12149] __sys_bpf+0x562/0x860 [ 250.293878][T12149] ? __pfx___sys_bpf+0x10/0x10 [ 250.293914][T12149] ? ksys_write+0x22a/0x250 [ 250.293944][T12149] ? __pfx_ksys_write+0x10/0x10 [ 250.293978][T12149] __x64_sys_bpf+0x7c/0x90 [ 250.294016][T12149] do_syscall_64+0xfa/0xfa0 [ 250.294035][T12149] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.294055][T12149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.294074][T12149] ? clear_bhb_loop+0x60/0xb0 [ 250.294099][T12149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.294118][T12149] RIP: 0033:0x7fb1ea18f6c9 [ 250.294136][T12149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.294153][T12149] RSP: 002b:00007fb1eb104038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.294175][T12149] RAX: ffffffffffffffda RBX: 00007fb1ea3e5fa0 RCX: 00007fb1ea18f6c9 [ 250.294190][T12149] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 250.294202][T12149] RBP: 00007fb1eb104090 R08: 0000000000000000 R09: 0000000000000000 [ 250.294215][T12149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.294226][T12149] R13: 00007fb1ea3e6038 R14: 00007fb1ea3e5fa0 R15: 00007ffe0689d3d8 [ 250.294260][T12149] [ 250.554567][T12152] netlink: 'syz.1.1642': attribute type 3 has an invalid length. [ 250.568664][T12145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1640'. [ 250.872110][T12175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.108573][T12185] netlink: 'syz.0.1646': attribute type 2 has an invalid length. [ 251.119455][T12186] ieee802154 phy0 wpan0: encryption failed: -22 [ 251.131971][T12186] netlink: 'syz.2.1648': attribute type 1 has an invalid length. [ 251.234760][T12186] 8021q: adding VLAN 0 to HW filter on device bond6 [ 251.868926][T12194] bond6: entered promiscuous mode [ 252.150353][T12209] bond5: entered promiscuous mode [ 252.163275][T12209] bond5: entered allmulticast mode [ 252.168935][T12209] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.231937][ T30] audit: type=1800 audit(1763315524.052:4): pid=12218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1659" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1800 res=0 errno=0 [ 252.392476][T12209] bond5 (unregistering): Released all slaves [ 252.425418][T12227] IPv6: Can't replace route, no match found [ 252.543421][T12236] nbd: must specify at least one socket [ 252.562362][T12239] sctp: [Deprecated]: syz.3.1664 (pid 12239) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.562362][T12239] Use struct sctp_sack_info instead [ 252.596470][T12239] netlink: 'syz.3.1664': attribute type 14 has an invalid length. [ 252.607716][T12239] netlink: 'syz.3.1664': attribute type 13 has an invalid length. [ 252.637196][T12233] wg1: entered promiscuous mode [ 252.647388][T12233] wg1: entered allmulticast mode [ 252.899188][T12247] netlink: zone id is out of range [ 252.936234][T12247] netlink: zone id is out of range [ 252.977603][T12247] netlink: zone id is out of range [ 252.997584][T12247] netlink: zone id is out of range [ 253.003420][T12247] netlink: zone id is out of range [ 253.008787][T12247] netlink: zone id is out of range [ 253.014288][T12247] netlink: zone id is out of range [ 253.019498][T12247] netlink: zone id is out of range [ 253.233763][T12269] __nla_validate_parse: 8 callbacks suppressed [ 253.233784][T12269] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1673'. [ 253.285755][T12271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1675'. [ 253.406380][T12271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1675'. [ 253.428712][T12274] wg1 speed is unknown, defaulting to 1000 [ 253.452663][T12280] veth0: entered promiscuous mode [ 253.536915][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'. [ 253.581318][T12284] tipc: New replicast peer: 255.255.255.255 [ 253.588180][T12284] tipc: Enabled bearer , priority 10 [ 253.599823][T12284] netlink: 'syz.2.1680': attribute type 1 has an invalid length. [ 253.615982][T12284] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1680'. [ 253.717723][T12289] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1682'. [ 253.759453][T12280] veth0: left promiscuous mode [ 254.482000][T12326] bond2: option mode: unable to set because the bond device has slaves [ 254.545127][T12326] bond2: (slave macvlan0): Error -98 calling set_mac_address [ 254.582005][T12331] netlink: 'syz.4.1697': attribute type 1 has an invalid length. [ 254.601404][T12331] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1697'. [ 254.624739][T12335] bond0: (slave team0): Releasing backup interface [ 254.643531][T12335] team0: left promiscuous mode [ 254.649093][T12335] team_slave_0: left promiscuous mode [ 254.654623][T12335] team_slave_1: left promiscuous mode [ 254.707089][T12335] veth0_to_bridge: left allmulticast mode [ 254.713178][T12335] veth0_to_bridge: left promiscuous mode [ 254.719158][T12335] bridge0: port 1(veth0_to_bridge) entered disabled state [ 254.766822][T12335] bond0: (slave bond_slave_0): Releasing backup interface [ 254.796128][T12335] bond_slave_0: left promiscuous mode [ 254.828536][T12335] bond0: (slave bond_slave_1): Releasing backup interface [ 254.833883][T12344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1699'. [ 254.867805][T12335] bond_slave_1: left promiscuous mode [ 254.898097][T12335] team0: Port device team_slave_0 removed [ 254.924918][T12335] team0: Port device team_slave_1 removed [ 255.031509][T12335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.042661][T12335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.052489][T12335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.060196][T12335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.073087][T12335] net_ratelimit: 7 callbacks suppressed [ 255.073104][T12335] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 255.222958][T12360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1701'. [ 255.241294][T12360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1701'. [ 255.503642][ T153] bond2: (slave macvlan2): speed changed to 0 on port 1 [ 255.582897][ T6732] bond2: (slave macvlan2): link status definitely down, disabling slave [ 255.702498][T12370] ip6tnl0: Caught tx_queue_len zero misconfig [ 255.885409][T12384] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 255.982824][T12391] openvswitch: netlink: Message has 167 unknown bytes. [ 256.177391][T12405] netlink: 'syz.0.1716': attribute type 21 has an invalid length. [ 256.201704][T12403] tunl0: left allmulticast mode [ 257.106092][T12403] wg1: left promiscuous mode [ 257.110861][T12403] wg1: left allmulticast mode [ 257.169064][T12410] hsr_slave_0: left promiscuous mode [ 257.185517][T12410] hsr_slave_1: left promiscuous mode [ 257.280237][T12445] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.290304][T12445] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.389283][T12445] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.412111][T12445] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.445285][ T6738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.468001][T12445] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.471542][ T6738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.478700][T12445] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.537028][ T5974] ------------[ cut here ]------------ [ 257.542971][ T5974] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 257.544848][T12450] wg1 speed is unknown, defaulting to 1000 [ 257.553956][ T5974] WARNING: CPU: 1 PID: 5974 at net/mac80211/rate.c:406 __rate_control_send_low+0x5e2/0x820 [ 257.568922][ T5974] Modules linked in: [ 257.573164][ T5974] CPU: 1 UID: 0 PID: 5974 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 257.582584][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 257.592702][ T5974] Workqueue: mld mld_ifc_work [ 257.597421][ T5974] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 257.603727][ T5974] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 00 97 89 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 6f 39 c5 f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 257.623392][ T5974] RSP: 0018:ffffc900048f6438 EFLAGS: 00010246 [ 257.629491][ T5974] RAX: f854f1bf4b6d9a00 RBX: 000000000000000c RCX: ffff888025693c80 [ 257.637520][ T5974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 257.645639][ T5974] RBP: dffffc0000000000 R08: ffffffff8f7cfd77 R09: 1ffffffff1ef9fae [ 257.653668][ T5974] R10: dffffc0000000000 R11: fffffbfff1ef9faf R12: ffff888057710de8 [ 257.661695][ T5974] R13: 0000000000000000 R14: ffff88807e3b0e80 R15: ffff88807e3b3138 [ 257.669696][ T5974] FS: 0000000000000000(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 257.678697][ T5974] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.685343][ T5974] CR2: 00007fbee2318f60 CR3: 0000000027c5e000 CR4: 00000000003526f0 [ 257.693377][ T5974] Call Trace: [ 257.696676][ T5974] [ 257.699653][ T5974] rate_control_send_low+0x1a7/0x7b0 [ 257.705003][ T5974] ? __pfx_bond_start_xmit+0x10/0x10 [ 257.710370][ T5974] rate_control_get_rate+0x20b/0x5d0 [ 257.715735][ T5974] ieee80211_tx_h_rate_ctrl+0xae0/0x1750 [ 257.721448][ T5974] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 257.727585][ T5974] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 257.733913][ T5974] invoke_tx_handlers_late+0xba/0x18a0 [ 257.739431][ T5974] ? ieee80211_tx_h_select_key+0xd1b/0x19f0 [ 257.745402][ T5974] ieee80211_tx_dequeue+0x308e/0x4360 [ 257.750880][ T5974] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 257.756664][ T5974] ? __local_bh_enable_ip+0x12d/0x1c0 [ 257.762177][ T5974] ieee80211_handle_wake_tx_queue+0x125/0x2a0 [ 257.768299][ T5974] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 257.774975][ T5974] ? __local_bh_enable_ip+0x12d/0x1c0 [ 257.780384][ T5974] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 257.786190][ T5974] ? do_raw_spin_unlock+0x122/0x240 [ 257.791473][ T5974] ieee80211_queue_skb+0x1a31/0x21c0 [ 257.796823][ T5974] ieee80211_tx+0x297/0x460 [ 257.801390][ T5974] ? __pfx_ieee80211_tx+0x10/0x10 [ 257.806476][ T5974] ? ieee80211_xmit+0x315/0x400 [ 257.811393][ T5974] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 257.817526][ T5974] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 257.823764][ T5974] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 257.830216][ T5974] ? netif_skb_features+0xa69/0x1540 [ 257.835655][ T5974] ? validate_xmit_xfrm+0xbf/0x1160 [ 257.840888][ T5974] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 257.847216][ T5974] ieee80211_subif_start_xmit+0xe0/0x510 [ 257.852920][ T5974] ? __pfx_netif_skb_features+0x10/0x10 [ 257.858504][ T5974] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 257.864807][ T5974] ? call_rcu+0x6ff/0x9c0 [ 257.869181][ T5974] ? __lock_acquire+0xab9/0xd20 [ 257.874105][ T5974] dev_hard_start_xmit+0x2d7/0x830 [ 257.879275][ T5974] __dev_queue_xmit+0x172a/0x3740 [ 257.884361][ T5974] ? look_up_lock_class+0x74/0x170 [ 257.889515][ T5974] ? register_lock_class+0x51/0x320 [ 257.894777][T12467] netlink: 'syz.0.1727': attribute type 10 has an invalid length. [ 257.894803][ T5974] ? __dev_queue_xmit+0x284/0x3740 [ 257.907766][ T5974] ? __pfx___dev_queue_xmit+0x10/0x10 [ 257.913210][ T5974] ? read_seqbegin+0x122/0x250 [ 257.918015][ T5974] ? neigh_resolve_output+0x438/0x750 [ 257.923472][ T5974] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.928703][ T5974] ? read_seqbegin+0x1ac/0x250 [ 257.933529][ T5974] ? __pfx_read_seqbegin+0x10/0x10 [ 257.938675][ T5974] ? __local_bh_enable_ip+0x12d/0x1c0 [ 257.944111][ T5974] ? eth_header+0x11b/0x200 [ 257.948650][ T5974] ? __asan_memcpy+0x40/0x70 [ 257.953352][ T5974] ip6_finish_output2+0xfb3/0x1480 [ 257.958518][ T5974] ? __pfx_ip6_finish_output2+0x10/0x10 [ 257.964217][ T5974] ? ip6_mtu+0x7d/0x490 [ 257.968417][ T5974] ? ip6_mtu+0x38c/0x490 [ 257.972745][ T5974] ? ip6_finish_output+0x2ef/0x4e0 [ 257.977915][ T5974] ? ip6_output+0x126/0x550 [ 257.982487][ T5974] ip6_output+0x340/0x550 [ 257.986860][ T5974] NF_HOOK+0x9e/0x380 [ 257.990864][ T5974] ? NF_HOOK+0x101/0x380 [ 257.995165][ T5974] ? __pfx_NF_HOOK+0x10/0x10 [ 257.999788][ T5974] ? __pfx_dst_output+0x10/0x10 [ 258.004722][ T5974] ? icmp6_dst_alloc+0x3a5/0x420 [ 258.009705][ T5974] ? icmp6_dst_alloc+0x3a5/0x420 [ 258.014716][ T5974] mld_sendpack+0x8d4/0xe60 [ 258.019277][ T5974] ? mld_sendpack+0x1e7/0xe60 [ 258.024011][ T5974] ? __pfx_mld_sendpack+0x10/0x10 [ 258.029120][ T5974] mld_ifc_work+0x83e/0xd60 [ 258.033697][ T5974] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.038941][ T5974] ? process_scheduled_works+0x9ef/0x17b0 [ 258.044726][ T5974] process_scheduled_works+0xae1/0x17b0 [ 258.050344][ T5974] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.056417][ T5974] worker_thread+0x8a0/0xda0 [ 258.061047][ T5974] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 258.067463][ T5974] ? __kthread_parkme+0x7b/0x200 [ 258.072476][ T5974] kthread+0x711/0x8a0 [ 258.076594][ T5974] ? __pfx_worker_thread+0x10/0x10 [ 258.081762][ T5974] ? __pfx_kthread+0x10/0x10 [ 258.086389][ T5974] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.091665][ T5974] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.096885][ T5974] ? __pfx_kthread+0x10/0x10 [ 258.101547][ T5974] ret_from_fork+0x4bc/0x870 [ 258.106185][ T5974] ? __pfx_ret_from_fork+0x10/0x10 [ 258.111379][ T5974] ? __switch_to_asm+0x39/0x70 [ 258.116175][ T5974] ? __switch_to_asm+0x33/0x70 [ 258.120966][ T5974] ? __pfx_kthread+0x10/0x10 [ 258.125622][ T5974] ret_from_fork_asm+0x1a/0x30 [ 258.130439][ T5974] [ 258.133523][ T5974] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 258.140824][ T5974] CPU: 1 UID: 0 PID: 5974 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 258.150211][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 258.160289][ T5974] Workqueue: mld mld_ifc_work [ 258.165017][ T5974] Call Trace: [ 258.168324][ T5974] [ 258.171279][ T5974] dump_stack_lvl+0x99/0x250 [ 258.175908][ T5974] ? __asan_memcpy+0x40/0x70 [ 258.180530][ T5974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.185767][ T5974] ? __pfx__printk+0x10/0x10 [ 258.190407][ T5974] vpanic+0x237/0x6d0 [ 258.194428][ T5974] ? __pfx_vpanic+0x10/0x10 [ 258.198976][ T5974] panic+0xb9/0xc0 [ 258.202726][ T5974] ? __pfx_panic+0x10/0x10 [ 258.207200][ T5974] __warn+0x31b/0x4b0 [ 258.211222][ T5974] ? __rate_control_send_low+0x5e2/0x820 [ 258.216883][ T5974] ? __rate_control_send_low+0x5e2/0x820 [ 258.222525][ T5974] report_bug+0x2be/0x4f0 [ 258.226860][ T5974] ? __rate_control_send_low+0x5e2/0x820 [ 258.232502][ T5974] ? __rate_control_send_low+0x5e2/0x820 [ 258.238140][ T5974] ? __rate_control_send_low+0x5e4/0x820 [ 258.243776][ T5974] handle_bug+0x84/0x160 [ 258.248065][ T5974] exc_invalid_op+0x1a/0x50 [ 258.252575][ T5974] asm_exc_invalid_op+0x1a/0x20 [ 258.257421][ T5974] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 258.263669][ T5974] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 00 97 89 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 6f 39 c5 f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 258.283302][ T5974] RSP: 0018:ffffc900048f6438 EFLAGS: 00010246 [ 258.289380][ T5974] RAX: f854f1bf4b6d9a00 RBX: 000000000000000c RCX: ffff888025693c80 [ 258.297356][ T5974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 258.305351][ T5974] RBP: dffffc0000000000 R08: ffffffff8f7cfd77 R09: 1ffffffff1ef9fae [ 258.313332][ T5974] R10: dffffc0000000000 R11: fffffbfff1ef9faf R12: ffff888057710de8 [ 258.321309][ T5974] R13: 0000000000000000 R14: ffff88807e3b0e80 R15: ffff88807e3b3138 [ 258.329301][ T5974] ? __rate_control_send_low+0x5e1/0x820 [ 258.334955][ T5974] rate_control_send_low+0x1a7/0x7b0 [ 258.340245][ T5974] ? __pfx_bond_start_xmit+0x10/0x10 [ 258.345544][ T5974] rate_control_get_rate+0x20b/0x5d0 [ 258.350849][ T5974] ieee80211_tx_h_rate_ctrl+0xae0/0x1750 [ 258.356519][ T5974] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 258.362601][ T5974] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 258.368855][ T5974] invoke_tx_handlers_late+0xba/0x18a0 [ 258.374335][ T5974] ? ieee80211_tx_h_select_key+0xd1b/0x19f0 [ 258.380253][ T5974] ieee80211_tx_dequeue+0x308e/0x4360 [ 258.385689][ T5974] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 258.391415][ T5974] ? __local_bh_enable_ip+0x12d/0x1c0 [ 258.397016][ T5974] ieee80211_handle_wake_tx_queue+0x125/0x2a0 [ 258.403100][ T5974] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 258.409692][ T5974] ? __local_bh_enable_ip+0x12d/0x1c0 [ 258.415092][ T5974] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 258.420814][ T5974] ? do_raw_spin_unlock+0x122/0x240 [ 258.426034][ T5974] ieee80211_queue_skb+0x1a31/0x21c0 [ 258.431352][ T5974] ieee80211_tx+0x297/0x460 [ 258.435884][ T5974] ? __pfx_ieee80211_tx+0x10/0x10 [ 258.440928][ T5974] ? ieee80211_xmit+0x315/0x400 [ 258.445796][ T5974] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 258.451804][ T5974] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 258.457991][ T5974] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 258.464422][ T5974] ? netif_skb_features+0xa69/0x1540 [ 258.469716][ T5974] ? validate_xmit_xfrm+0xbf/0x1160 [ 258.474932][ T5974] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 258.481195][ T5974] ieee80211_subif_start_xmit+0xe0/0x510 [ 258.486894][ T5974] ? __pfx_netif_skb_features+0x10/0x10 [ 258.492469][ T5974] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 258.498815][ T5974] ? call_rcu+0x6ff/0x9c0 [ 258.503162][ T5974] ? __lock_acquire+0xab9/0xd20 [ 258.508030][ T5974] dev_hard_start_xmit+0x2d7/0x830 [ 258.513167][ T5974] __dev_queue_xmit+0x172a/0x3740 [ 258.518201][ T5974] ? look_up_lock_class+0x74/0x170 [ 258.523321][ T5974] ? register_lock_class+0x51/0x320 [ 258.528537][ T5974] ? __dev_queue_xmit+0x284/0x3740 [ 258.533670][ T5974] ? __pfx___dev_queue_xmit+0x10/0x10 [ 258.539142][ T5974] ? read_seqbegin+0x122/0x250 [ 258.543923][ T5974] ? neigh_resolve_output+0x438/0x750 [ 258.549341][ T5974] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.554564][ T5974] ? read_seqbegin+0x1ac/0x250 [ 258.559423][ T5974] ? __pfx_read_seqbegin+0x10/0x10 [ 258.564546][ T5974] ? __local_bh_enable_ip+0x12d/0x1c0 [ 258.569923][ T5974] ? eth_header+0x11b/0x200 [ 258.574436][ T5974] ? __asan_memcpy+0x40/0x70 [ 258.579360][ T5974] ip6_finish_output2+0xfb3/0x1480 [ 258.584493][ T5974] ? __pfx_ip6_finish_output2+0x10/0x10 [ 258.590048][ T5974] ? ip6_mtu+0x7d/0x490 [ 258.594215][ T5974] ? ip6_mtu+0x38c/0x490 [ 258.598468][ T5974] ? ip6_finish_output+0x2ef/0x4e0 [ 258.603608][ T5974] ? ip6_output+0x126/0x550 [ 258.608121][ T5974] ip6_output+0x340/0x550 [ 258.612471][ T5974] NF_HOOK+0x9e/0x380 [ 258.616459][ T5974] ? NF_HOOK+0x101/0x380 [ 258.620700][ T5974] ? __pfx_NF_HOOK+0x10/0x10 [ 258.625828][ T5974] ? __pfx_dst_output+0x10/0x10 [ 258.630708][ T5974] ? icmp6_dst_alloc+0x3a5/0x420 [ 258.635663][ T5974] ? icmp6_dst_alloc+0x3a5/0x420 [ 258.640618][ T5974] mld_sendpack+0x8d4/0xe60 [ 258.645169][ T5974] ? mld_sendpack+0x1e7/0xe60 [ 258.649850][ T5974] ? __pfx_mld_sendpack+0x10/0x10 [ 258.654924][ T5974] mld_ifc_work+0x83e/0xd60 [ 258.659430][ T5974] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.664648][ T5974] ? process_scheduled_works+0x9ef/0x17b0 [ 258.670385][ T5974] process_scheduled_works+0xae1/0x17b0 [ 258.675966][ T5974] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.681984][ T5974] worker_thread+0x8a0/0xda0 [ 258.686584][ T5974] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 258.692964][ T5974] ? __kthread_parkme+0x7b/0x200 [ 258.697932][ T5974] kthread+0x711/0x8a0 [ 258.702020][ T5974] ? __pfx_worker_thread+0x10/0x10 [ 258.707136][ T5974] ? __pfx_kthread+0x10/0x10 [ 258.711741][ T5974] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.716946][ T5974] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.722237][ T5974] ? __pfx_kthread+0x10/0x10 [ 258.726835][ T5974] ret_from_fork+0x4bc/0x870 [ 258.731433][ T5974] ? __pfx_ret_from_fork+0x10/0x10 [ 258.736641][ T5974] ? __switch_to_asm+0x39/0x70 [ 258.741401][ T5974] ? __switch_to_asm+0x33/0x70 [ 258.746166][ T5974] ? __pfx_kthread+0x10/0x10 [ 258.750778][ T5974] ret_from_fork_asm+0x1a/0x30 [ 258.755819][ T5974] [ 258.759322][ T5974] Kernel Offset: disabled [ 258.763649][ T5974] Rebooting in 86400 seconds..