last executing test programs: 4.372358851s ago: executing program 0 (id=4185): syz_emit_ethernet(0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd7012000800703afffe8000000000000000000000000000bbff02000000000000000000000000000186009078ff0000020000000007000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e44afc5538a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020001ffffffffff60000000000000"], 0x0) 4.127015762s ago: executing program 0 (id=4188): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001100)="0dda2dfa03009ffadfa4bfb48c76fb296526ae98655ee4c429d1f245af4d9bcc0b787eb0619e69f27ab98c3754b47c0b61fc44d54945aa0179", 0x39}], 0x1, &(0x7f0000000b00)=[@assoc={0x18, 0x117, 0x4, 0x1a}], 0x18, 0x10}], 0x1, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/40, 0x28}, {&(0x7f0000000400)=""/50, 0x32}], 0x2}, 0x40000223) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000000000001"], 0x40}, 0x20000000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x84, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x108, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x218, 0x20a, 0x278, 0x218, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, [0xffffff00, 0xff, 0x0, 0xff], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x2f, 0x0, 0x4}, 0x7a, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010102, [0x0, 0xff000000, 0xffffff00, 0xffffff00], 0x4e22, 0x4e23, 0x4e21, 0x4e24, 0xc1d5, 0x6, 0x6, 0x10000, 0xf}}}, {{@ipv6={@private2, @private1, [0x0, 0xff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {0xff}, {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x0, 0x0, 0x1, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) close(0x3) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='filter'], &(0x7f0000000100)=0x28) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockname$ax25(r5, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000080)={0x0, 0x6}) 2.937952668s ago: executing program 2 (id=4198): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.756332826s ago: executing program 2 (id=4200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}}, 0x0) 2.347802994s ago: executing program 1 (id=4202): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0c001b0000020000"], 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r5, 0x0, 0x380}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r4}, 0x8) accept(r0, 0x0, &(0x7f0000000040)) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000200)={0x0, 0x3, [0xcae, 0x9ee, 0x74, 0x625]}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0xba01}, 0x0) 2.347519058s ago: executing program 2 (id=4203): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xd, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x1402, 0x300, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x10001) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf", 0x50}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x1, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2b, 0x0) shutdown(r0, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000040)={@none}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000002c000100000000000000000004000080f6ab464eb4699310000c800c007a00ff00000000000000"], 0x24}], 0x1}, 0x0) 2.202781131s ago: executing program 0 (id=4204): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="1243bb4fa53e", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0xffff}}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x51, 0x0, @vifc_lcl_addr=@private=0xa010101, @local}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000040)={r4}, &(0x7f0000000100)=0x8) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="240000000000005579bead11291ae280e413b8ea00290000003200000000000062889e35ff925a1b4bda93a549c860b98438a9770268215acd250e55e50e8137b323843b915410102872dd97340e534fea859c2bffc5fe19", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50}}], 0x1, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x80, 0x204, 0x44e, 0x1008}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x8000000}], 0x600, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x1c, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, {[@dstopts={0x4}], "1ce302d74f6ae54b8ea6c756cdf9a157b64679a9"}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@empty, @remote}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r9, 0xffffffffffffffff, 0x14, 0x0, 0x4000, @void, @value}, 0x10) 1.463923789s ago: executing program 3 (id=4206): socket$unix(0x1, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000040)="05d067743f7bd66cb8742fc258af35e120f6757872a720a61c2f7b7577d1578e64187b3be21693c17004feda6ec11bb5e58e1255297095cd421291dcfaa4f905fa8510f1034bb2a187436367963a7c5d33baa58c", 0x54}, {&(0x7f00000000c0)="eedbbd35332f0c052fd234a9d8e8d8a642be3257533b81f7617f711cf88dbf330adf4414199601e3d67cf1e63e3993b99ff947697459cc5dd5c0a5e3c90e6185f2002d8e8859272ea7bfaa8544813f0ed949a7bf1520dc832205e6c2b81c10bebb7acca28ff9d5fe831433de4bd24fe0c50e1af72ea606cda022820070a6403068485a92458d765fe05f7be7b7df20b2004d99ec77bacd8a691c4ad66d78ec7aaeaf1295ce6c6ab147c32d113c92732aa6d867513c76e8435d8c10658d3787928b6beae51fde360a3d82e9ca789cd0d02de5798533e86ae0e30bfe0658d20d0f445a33e7af", 0xe5}, {&(0x7f00000001c0)="7a5aa653de0cd3a9b1f18805696532f16dfe8ce7d6d87d0af99ddf4255d04883419cc6f06486ce49e39785bf2d9edef933e88fc1049b56e468735a0f62de5be6130b6891bef4516b38c2e83d198b72b7b78d7e1756f0b104488be72d3acd29cfe3d9e3bb7473081d0bc2b5553dc2509fac6eafd7d7105be9d4a654fc01201b6d833a7cb10453d3c92953c73abd1455948918947a7ca2723a7cd23c12c7125b607d71a7e522173d48bad2f057613965ce4b4c055b74edc8dd3ce4", 0xba}, {&(0x7f0000000280)="11cc03122a2e41c08cb85a5b2fe1df64a649be01876d64251502165821", 0x1d}], 0x4, &(0x7f0000000300)=[@ip_retopts={{0x11c, 0x0, 0x7, {[@cipso={0x86, 0x1d, 0x0, [{0x6, 0xa, "85a7a18ed7c746d2"}, {0x2, 0xd, "a287524466467adba50aec"}]}, @timestamp_prespec={0x44, 0x44, 0x43, 0x3, 0x0, [{@multicast2, 0x1ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@local, 0x4}, {@local, 0x3bee2887}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x6}, {@empty, 0xa}, {@local, 0x3}, {@private=0xa010101, 0x9}]}, @lsrr={0x83, 0x27, 0xae, [@multicast2, @local, @multicast1, @multicast1, @loopback, @loopback, @remote, @broadcast, @loopback]}, @timestamp_prespec={0x44, 0x24, 0xb4, 0x3, 0x7, [{@rand_addr=0x64010101, 0x6}, {@empty, 0x4}, {@multicast1, 0x7}, {@remote, 0x2}]}, @timestamp_addr={0x44, 0x44, 0xaf, 0x1, 0x2, [{@rand_addr=0x64010101, 0x8}, {@broadcast, 0x1}, {@multicast2}, {@multicast2, 0x6}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x3ff}, {@multicast1, 0x1000}, {@broadcast}]}, @lsrr={0x83, 0x1b, 0x70, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast, @private=0xa010101, @rand_addr=0x64010100, @private=0xa010101]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x168}, 0x48044) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={0xffffffffffffffff, r1}, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0x2b0, 0x15, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x59, 0x8, "bd2a6aaff3753e25734797ac9cef6bce451e0df88a24c98fe3f5faeb3d8e7f8825876443fc6802a21c2316931f110216608693692b8855851568902ebfa192ab816c4376afb98e9155c46515a49e1af1767d966453"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_OBJ_USERDATA={0x91, 0x8, "7adfa6b37d68182984abf03a329a75c89c618f852ece2ee566aee35aaaae729a6186e0d85c4ae9d1e918b62fb2165bbe77375f4ad1ca53cef3ae22eb7ac8822431440d3b2858efd8b1d211d5d751c2adc1598416b9bb1af1143828f0018fd7fdb9471e609ef47b50bbd53063bdee68a5208bd994225fe60af360cd1e1a9b45d70c8120992808255453035ca86d"}, @NFTA_OBJ_USERDATA={0xec, 0x8, "7d4084660adefa51fed75d23959e3c448af1a631db3f4cc4f6806e0abc0d694a23379cc23608f2ef9c6f5150a17abf237cd0a248cccd4737532ee98c8438938480a434cca6134045f2afdc09f557e33ef1ba28ec57fdacf767b7a2308d68b6ebc71e67f18972096a3df39b72eae8c3e704829bf593c58d5710d645d845221729cbfa550d80f9eab4c11143e3307c324e7d5bdea9e43a62f3b6bde236d611f274488c6a0c265a0c3acce25f431ff0e9e8b2de584a9f3d8bd6e71cee65c8c4a707d01761e8c59831e2204b27ea7f3231bebb868d4e58cd6f9ce6cab44b167f4809cdfe36afe3d24afe"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_USERDATA={0x8b, 0x8, "215310ebc20a1d83fbe4a3e7e65769e4dd74d1dafa4a5e587d110f4705add4cf78fba930d51c5da88d3b5966e429c5c1e326cc71ca31e8e85e60025648ff9a896bf861c69f71e0a693f062f510a6c1a1ddce1e2dbe1259b3814deee5306612cb4543a404a60dffd386c3e3514231816d6804567b821bfa106f272b00ea9e98afe9a3eb30e847ee"}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4001}, 0x6000c080) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000008c0)={'team0\x00', 0x1}) close(r1) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r1) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x8c, r2, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x8c}}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000b80)={'ip6tnl0\x00', &(0x7f0000000b00)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x1, 0x4000, 0x8, @dev={0xfe, 0x80, '\x00', 0x2f}, @mcast1, 0x1, 0x80, 0x8000, 0x1}}) sendmsg$nl_route(r1, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@ipv6_delroute={0x40, 0x19, 0x800, 0x70bd2a, 0x25dfdbfd, {0xa, 0x1fa6a870a3b8ea57, 0x0, 0x3, 0xff, 0x1, 0xff, 0x9, 0xf00}, [@RTA_PREF={0x5, 0x14, 0x5}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8, 0x7, 0x6}}, @RTA_PREF={0x5, 0x14, 0x5}, @RTA_IIF={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x50, 0x1, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2c}]}]}, 0x50}}, 0x20008000) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000dc0)="5ff4de5039244a42c59cfce137f8acd4f7173ec5ff612fc4b6a0c6b0ac2ea707534442ebdb1e59396c9a2f6c0aa9a57711dfa9d83a1d9a29763fdab40cf41a374241cde340d7d7470372469c1314728c1e606d83ca9ca2f981e8d1e35caebfdebf60542b37af2bd66a25b88abceca11ba7ea720f8c4af9b1f77e94e2d0b66dd130584c549c45498cd883017f4e34062a39a2708a5740f84d14289608f528f52261d0d7ce8a2d2737383329b688b74d443cc72daee5b8ddb245b5d325460a54fef3028e515b1637277c0dd891b5bd5a4c2b6015e12ca81f152759900a286ef4eb40a621096bf01978130ecec5e58b80db3dea5b021695cb", 0xf7) sendmmsg(r0, &(0x7f0000003940)=[{{&(0x7f0000000ec0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x4, 0x1, 0x0, 0x3}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)}, {&(0x7f0000001f80)="9920a99d405f6e436375f34e83d4a313bcc9302c3ddbb29c335461ac70c0e9cd22f24e4005ad4fd6d257d7368b6572d27374df22a1d99d8b486f2eebbb18487de0354638e2d78a321b43d855dfe871ba494c265902b16eb55f43f77d056e66a467ecd0a7e523fb2b295e996866fe2f8c5240b791c067e6279dfde10a759444b7c696142c5a158d884e3ebd38bd0c35c111731067265167c8ff0acc1365b0a854", 0xa0}, {&(0x7f0000002040)="6dea187022c12bb01f620ba7b0d7130f2a319b8237576104a0a8570cdf0b8204ce76b0e0d672de8b48a5f83544180b91e191055f42df807f2b168c7920f23958d59df1cedef16ff7c250a671530a6a54b9547b36e722807069144b2551c854c17c1e13c24c67a552cecd33884c3b9b577822e6967f6e5694e078cb3f4b26e00d11228c5fcc0d92024cc0df3882ba1958ee2beb1ca1b6c1c867a7c67a6ab4bd51317fe4fdcdf8609b1d5de8e11d265639a22b6fa87b6ff1cb12380c387cc3d12fdbfd259495db1c2597e116ea5768a8d87de6088c3847c0f1db445a360d975cf3141c0354bd20740d9137", 0xea}, {&(0x7f0000002140)="85565e9660419985707d1c4447522489755295b2f673e2a4623ac94cc5858b7cec4fa254b1fe20743a03a0077f76c4a0923ae9bc3a26d343f931", 0x3a}, {&(0x7f0000002180)="2fc7a150352579bfd74f4e477321aabf5e2c39abfb492eb8705c041bc3b5439684ee97176fc8dade4438c4445ec62fab08fb4a2e59659e3b17599aecd4e70f9ae654143c53194b92e1f9af956de50186acfe5fc5560507744a4f21b8c23ac4d771909c687289402befcad751f64a49528b4b015f140945c53786b24250ece68b78e7fc8e421f1969bb114b165ebda4bd11897b3dcff47a0299b20cf163404ee7db20f546f4fe6db6b0c1c7e93cc89557cae30c4ab7e8dd2a36df5f901ff6", 0xbe}, {&(0x7f0000002240)="2ca982777e94eeba8f9c2c4f5fc8aa7f51e16fcb8f406eea73b5c849d3fb2db90d6dd59cac9864642941e85ab7cebb2b29f268bcf68878ac294ad2d46b0706ae0316e149cca924214d7040db3bfa9003e68d3864617f8e4d609e8d05acdfb7f5203eadbc636f7f20385b0ee8d61bf33fd9c5fb02ddb3f24f67faf0f57e283b52b8d35e3d849639bd4fb0fbf0758f66a7c65f9641218ffc73b76b8e20b58afabbf0176b5638970dd48d2fa238ed5150519183d5c04727", 0xb6}, {&(0x7f0000002300)="bc4749b99befc4df556bb4cd5dc0fb1fa833b2b90031b1c9b05050bf3e2d2b0779f1692c8ad8455dc41795481660981821628543b81a262747d5540620f9167ccf59ec898975904d9e25a2a513c846d7962158879e43bb21e067d3a8fe79eb8888fdc76dbdb18c9c7737a96ebbb01766e2a6935c0b076636d03f0577aabdf9fa045e0df199e5a582929a4039dc9105e4710ac3afaf613dbc9a73d45de8ad79de6ee44d6c72ce913d6ce496fbc2c128d2d11ca94af431db7e9690436f59e362c49b95d8359ba17fbcc6159d578eb1", 0xce}], 0x8, &(0x7f0000002480)=[{0x58, 0x11, 0x9, "fabfbd0d0048e280ec33bf2d481695bbbae0674cc1ffdfafcb75e926f59c13b485f00769d8a9f2587b84d63fe9a9f29e9b266c6abe121b0d7864a3ea0f0dafd052087519960b7d1a"}, {0x68, 0x10d, 0x2, "1f26db9ce7d66bb236d7a5231b1d9dbd61b0b9d0e39d4a1b29aac290b95f94310fc4edcdc5a435dc14c091acb32fe76a4b4ff919e60d3f12162bb7b02387ed11b98b379fe6ba6c2acf3a08da472b237054"}, {0x70, 0xff, 0x9, "7cc53d722e5a7fc0e44126a34964c9b1cd4a831e6412706474910040f0668de73f11f2694ba33d150bbe441617f21f72ad3774d76aac34dd9b1befa477ad3e4953323ddbd3bd0ca3adf54da6f0c6cb7125820b26cf3adb5d957569"}, {0x30, 0x113, 0x4, "e00b7d41241e7b7d37a6bb817af63b492dc7ea4e058b8e826a0965a25876"}, {0x80, 0x114, 0x5, "c3b005e5abcf528e75d364ae079935b3b75bbd6d4a34678cc6c4ca92fcf2aa28fbade55c4724f998c5d69169bd9d61656d27ee107a53b4aa91efdf5c08d1ef9b6cbb2e98510187c62ade8034167e3f25a0f315fc61818ca8666af82ccca00d70c4dfdb0700e2c51a3cc00528081245"}], 0x1e0}}, {{&(0x7f0000002680)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002700)="b018d9b167d770ef97e7abea0685cd189f83ab886d4e12b9f0e2372bc512d32b02c7a38e97aa56a52f88811217842f77faacdde40f8858aae798ccb81001bbe7e78c95495e0c66bce8b7d51f4d68582519f940683c8aa9f1c29f98bf7a628f9190490e7412a01876b8fc71009806f84f7fc05ee89ff5e5c7cf0767d6db5abfc66315ee80761a82025e03a13875623f0497d4b3aaa6cbb545f32499c70dad13e9266a5644c37a18010560e586d6711988124a8c63c301c5ff44bc136998d1b58455c5da55652137ec27f3", 0xca}], 0x1, &(0x7f0000002840)=[{0xe0, 0x116, 0x1, "b38902c2fc7675478ef4f5f68ae6de719c34e441175decff73c57b1c154f1a3d0d4ca434c23d682328a4c9a62c9f299065fc6d3031a414bf06a7c4d86b5e1b06575ae236a404ec920c2bb5ae623891d500cba96d6ecaabcd3f56d101ac69ded67a1584eba56a5d6b11bbe2d53960d4c5cbd841188d9c52285e304b554716a88f8420fb273994de6999157f8728a74e7c133c65dcadca38a7a5a8836981224a15efe065314e9bb4f69cc72dfea73cd233c09b8d130b83d1a866b62ae060a5f826a9d298dfffceeaccd7074475ca"}, {0x1010, 0x130, 0x2, "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"}], 0x10f0}}], 0x2, 0x5) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f00000039c0)=0x1) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003a40), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000003b40)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003a80)={0x54, r5, 0x0, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd081}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000003b80)={0x3f51, 0xfffffffffffffffc, 0x1, 0x0, 0x2, 0x0, [{0x7fffffffffffffff, 0x0, 0x8, '\x00', 0x100}, {0xfffffffffffffffc, 0xb, 0x4, '\x00', 0x1008}]}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003c80), r1) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000003d80)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f0000003d40)={&(0x7f0000003cc0)={0x58, r6, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x491}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x30040000) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000003ec0)={&(0x7f0000003dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003e80)={&(0x7f0000003e00)={0x50, r2, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000011}, 0x4884) sendmsg$nl_generic(r1, &(0x7f0000004180)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004140)={&(0x7f0000003f40)={0x1f8, 0x36, 0x1, 0x70bd29, 0x25dfdbfc, {0x6}, [@nested={0x21, 0x34, 0x0, 0x1, [@typed={0x8, 0x134, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xe}, @nested={0x4, 0x1}, @nested={0x4, 0x129}, @nested={0x4, 0x64}, @generic="94ca497d02"]}, @nested={0xe2, 0xa1, 0x0, 0x1, [@nested={0x4, 0x7a}, @nested={0x4, 0x39}, @generic="5736a7b0c5ab4af700c6ebbbdf4cd8522cfddfbd4eb9dcc623b2d7ab046cc7a421eb59e537bddc31fd41a7bd3cab2bcb1fc0918796d3b0294392420995c9efb62a9ee525fc2e69fae654a1304da25d407985d519bf9d15ddd4697fe3ed97880acc95d93de08674e890f5b0fbad490205c2f829e7bf375e5b59e290d72c73898cabb4f5559977c1cbd85ea592234d84161b51dc838fa4fc9dd146790b09592b5d2c98d9a01fa02947e47af477304a017656167f2fdcec3e768f66fd09cddad5ab481f96933df5616c80db4b176fc6b0f41f42560bb302"]}, @generic="3f9ff2d55c8776b28c33d829496ac394742802c427b19c02b4be838422f4d9aaa1a572d77a89b8624d95f9eb198a1c35710badddc0b3635345a77c5ba59ddd058f007a62ecf04da43e309de78a9b810df6a1b9b84d028ad8c93710d999bb7bcfc74444fbc1230b016752d5382be9f9bcb5d50e9e84fabb6c82ff77e08deb63c39e85b09e0671e13958b5545e5b8dea4f889492a53d5295ed4a6dac454ebf98c1877680ca48308e883ed1641860ab1d671da7eabe4bc6ae7209412fbe191eea2a3fea64dba3dfe9d9bb0a11797d8a2bbe66623418d10fe5e6c049039e"]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000}, 0x4010816) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004200), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000004300)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000042c0)={&(0x7f0000004280)={0x24, r7, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x40d0) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000004340)={@rand_addr=0x64010102, @remote, 0x1, "5039b4919737cdab269fa986f67dd46db3419f8bdab8255beefaa8aba3b5b230", 0x5, 0x5, 0x1, 0x5}, 0x3c) syz_genetlink_get_family_id$devlink(&(0x7f0000004380), r1) socket$vsock_stream(0x28, 0x1, 0x0) 1.4049821s ago: executing program 1 (id=4207): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x18010, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8048001) 1.393164179s ago: executing program 4 (id=4208): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) 1.22439305s ago: executing program 2 (id=4209): select(0x300, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) r0 = accept(0xffffffffffffffff, &(0x7f0000000580)=@isdn, &(0x7f0000000340)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f00000003c0)={0x77359400}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) syz_emit_ethernet(0x3e, &(0x7f0000000600)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @empty, @local, {[], {0x0, 0x3b, 0x8}}}}}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xffff0001, 0x0, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000400000000000000000000000000000094000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) r7 = accept$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000006c0)=0x14) getsockname$packet(r7, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x100, 0xac}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1e, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x401}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @ldst={0x2, 0x7, 0x0, 0x5, 0x7, 0x30, 0x9}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x1, 0x1, 0x6, 0xb, 0x40, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)=@ipv6_deladdrlabel={0x44, 0x49, 0x20, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x8, 0x0, r8, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4080800) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000480), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r9}, 0x8) unshare(0x480) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000005980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x3a) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x0, 0x6}]}}]}]}, 0x3c}}, 0x0) 1.206253798s ago: executing program 4 (id=4210): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x28000600) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {0x0, 0x2000}}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 1.185054881s ago: executing program 1 (id=4211): socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040), 0x8) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000140)={0x1ff, 0x1}, 0x0, 0x0) shutdown(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) unshare(0x600) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x22, 0x0, 0x0) 1.1165824s ago: executing program 0 (id=4212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000140a0101000000003c233fab03347b870900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008400000000c0a010300000000000000000100000008000440000000000900010073797a300000000018000380"], 0xc4}}, 0x0) 1.116166877s ago: executing program 3 (id=4213): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'gre0\x00'}}, 0x1e) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x213, 0x0) getsockname(r0, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) 1.061850888s ago: executing program 2 (id=4214): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0xfffffffd, 0x44, 0x0, 0xfffffffd, 0x4000, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa00000, 0x0, 0x80000000, 0xfffffffa, 0x237, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x364d, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x40100000, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x2, 0x0, 0x0, 0x92]}, @TCA_TBF_RATE64={0xc, 0x4, 0x82ad5814e3ff5953}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x33a1d72acaba34e4}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) 995.456534ms ago: executing program 4 (id=4215): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004c00)=[{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)="a9861869a75f66ef7d128ae4230965648a021cdf93508c9706dc1e4d9e1d4c436faf1d2786e53d4c8b827fc9174b67dab67acb28c76f6310145b3bfb0804675b44f3372615", 0x45}, {&(0x7f0000000240)="eeb9ff4efd6ce05a6ccd7c232e4442ec0660f89aeac6d45aea60e560bd9dd945dfc8e65ad2cf2e4d55fb59ee276f5e40e07f7b37b86e88c65190565d726b079d4043e88acbc549f5d3291ba8e35c906d22091ac5b87485aab22c1c9723fe9e1fdc8dd53b5e20ff5f2aa43f29cb053bba51958b69b6a5196c75f6c4c10e213afd12e617eceab1020c9c814d456046a1", 0x8f}, {&(0x7f0000001380)="5e4f1b8edaca0fbbb2d381bca66efabb97e5ec4f21ea39add4576b3f6cee354e296c63411644984be95ec4dfde61530d76d658d948193630128904e3d521b1a9d999a23d", 0x44}], 0x3, &(0x7f0000001480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r5, &(0x7f0000000000)="2e000300010000", 0x7) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x8, 0x7}, {}, {0x7, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff0411"], 0x528}}, 0xc000) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x4, 0x80000000, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}) (async) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x1, @random="f3a4bcb14173", 'vlan0\x00'}}, 0x1e) (async) sendmmsg$sock(r2, &(0x7f0000001dc0), 0x213, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e21, 0x369, @remote, 0x1}}, 0x0, 0x0, 0x4a, 0x0, "f2f33e8ea0ba9765738ae3cf4e1e3623459f3c94fd2d10c0c2b836ad3250eee154df459d826cb3e0521d82deb1ba289123b1ec7904c88d7af6b1b99211bfea099492c2e1e3fde5b467ba4f35b0e0f578"}, 0xd8) recvmsg(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000004dc0)=""/108, 0x6c}, {&(0x7f0000000080)=""/138, 0x8a}, {&(0x7f0000000180)=""/19, 0x13}], 0x3}, 0x0) 880.486084ms ago: executing program 0 (id=4216): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x104}, 0x8) sendto$inet6(r2, &(0x7f0000000580)="81", 0x1, 0x40000, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYRES64=0x0], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400f18009000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 880.233362ms ago: executing program 1 (id=4217): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x600, 0x1d8, 0x202, 0x2a8, 0x220, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private2, @mcast2, [0x2000000], [0x0, 0x0, 0x2000000], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x3, 0xd43e, 'netbios-ns\x00', {0x2}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 785.788972ms ago: executing program 2 (id=4218): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000008000)=@newtfilter={0x34, 0x2c, 0xd27, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0, 0x10}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x801) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x3b, 0x4, 0x5, 0x8, 0x2074a, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x21, 0x0, 0x5b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x2, 0x101}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r5, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x9c) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @empty, 0x4000000}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$inet_dccp(0x2, 0x6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(r7, 0x40000000) getsockopt$IPT_SO_GET_REVISION_MATCH(r6, 0x0, 0x42, &(0x7f0000003a40)={'ipvs\x00'}, &(0x7f0000003a80)=0x1e) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000000c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000008300ae8102f3663d33d51c800000bf0900000000000055090100000000009500000000000000bf91000000000000f73d9e05b7020000010000008500000084000000b70000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 721.357664ms ago: executing program 3 (id=4219): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/12, 0xc, 0x1, &(0x7f0000000140)=""/17, 0x11}, &(0x7f00000001c0)=0x40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0xffe0}, {}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0x8, 0x6, 0x7, {0x0, 0x2, 0xfffc, 0xf, 0xff}, {0x8, 0x1, 0x1, 0x9, 0x0, 0x3f}, 0x9, 0x9, 0x4}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x20008840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000280)={'team_slave_1\x00', {0x2, 0x0, @multicast2}}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100003052abd7000010000dc00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c000280080001000200000008000700f7ffffff080003000300000008000500", @ANYRES32=r13, @ANYBLOB], 0x54}}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x100}, 0x0) bind$rds(r4, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r14, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000001100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r16, 0x8933, &(0x7f0000001140)) 568.484941ms ago: executing program 4 (id=4220): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 568.198722ms ago: executing program 1 (id=4221): r0 = socket$netlink(0x10, 0x3, 0x7) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000015c0)=""/4084, 0xff4}, {&(0x7f00000005c0)=""/4091, 0xffb}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f00000004c0)=""/213, 0xd5}, {&(0x7f0000000200)=""/153, 0x99}, {&(0x7f0000000380)=""/123, 0x7b}], 0x6}, 0x102) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x14, 0x0, 0xfbfffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket(0x18, 0xa, 0x4) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f0000019380)=""/102399, &(0x7f0000000000)=0xc80) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$TUNGETDEVNETNS(r5, 0x5460, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000003d000d8632cd6bdccc8d0000047c0000040000000c00018006000600800a0000040002"], 0x28}}, 0x20008000) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000240)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000003c0)={"d65199b2182e97b6db009ef4aeacd6c9", 0x0, 0x0, {0x5, 0x2}, {0x401, 0x8001}, 0xffff, [0xceb9, 0x2a7, 0x1, 0x4, 0x14, 0x3, 0x8, 0x2, 0x7, 0x0, 0x0, 0x2, 0x2, 0x0, 0x943b, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000640)={"b66a58585b62dfb8540a6b7b767adf5e", r7, r8, {0x9, 0x7}, {0xc5, 0x4}, 0x8, [0x6, 0x6, 0x0, 0x741, 0x8, 0x391, 0x507974cd, 0x3ff, 0x7, 0x8, 0x6, 0xf, 0x8, 0x9, 0xc, 0x200000000000000]}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x20000400) pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0x5, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x7, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600)={0x0, 0x989680}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40d0}, 0x40000) r10 = socket$inet6(0xa, 0x3, 0x8000000003c) bind$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e22, 0x8000000, @remote}, 0x1b) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000000000800000000000000d3eca695637e10be733d097f0f558f097aed9638054e1008ea1e68987390a71000c0fc162d367fba8fd7d862ca091f0044758ea8be9ebfdfe9b11cba0384ba1af78d811f31589b7aca75de10bcecaf9d46ad65c5834f0c6672a3c45e8c1ccec127d25555830b5e8e8b35b7af84d6ba346336e07825dd553f51472bd653428de658d5", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 393.323977ms ago: executing program 3 (id=4222): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000014c0)={0x420, 0x3f4, 0x1, 0x0, 0x0, {0x10, 0x3e9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x746a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, 0x420}}, 0x0) 373.041657ms ago: executing program 4 (id=4223): bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000019000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, @void, @value}, 0x94) 252.613706ms ago: executing program 1 (id=4224): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000500000000008004000000ffe809000000fff5dd000000418e030006010000418e01400004fcff", 0x58}], 0x1) 252.406819ms ago: executing program 3 (id=4225): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffff5e, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000240)='cpu.pressure\x00', 0x2, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x8000, 0xc, 0x8, 0x6}, &(0x7f0000000040)=0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001640), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0x38, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x80) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r4) sendfile(r1, r1, 0x0, 0x40000000000004) 152.824037ms ago: executing program 4 (id=4226): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="26000000180000fedbdf251d0185fa5202868d22000008000a0000000000", @ANYRES32=r2, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$unix(r5, &(0x7f0000002b40)=[{{&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000780)="52e1cadc3f6852ebbf7ca7f736146193f94f12777f23981dfce6decf1e6323608b6de1c76157ebad31eff7ed12e17b03f760d3cc8310cd859167b77fc3b38d19d2dd7fbd8bb88d10e1975f8fb4bf8811c888210b", 0x54}], 0x2, 0x0, 0x0, 0x4000094}}, {{&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24040848}}], 0x2, 0x24044002) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000200)=[{&(0x7f00000003c0)="c228860d7bda8e26920bbd5671097a6d8a2632dfacc36ac6f6f5eeb578ca0547abf8e4dc2069133bfc3c9e76a54d6b256c6a93349cd92708ceef5a332e3f15a4bd948b181d0272ae8683e6b34a15e8", 0x4f}, {&(0x7f0000000600)="210eb13aa964789cd72e5429115c6fce7c4fe2eed52942668f7b9048bc449685be05b93c4d43209e5ea8e7b1d0d664b4e10ed76ea0f09f2a01f647c89738c01b6b754f43a1f19cda3567c557ef69aee5992fad2bc3c2d9ffcd611f00d288a4e5dbf7b9f477009606d0e4b343e22d811d305792ac04ced3eb400faadfdf422590392e8c4ff2cf7963da15c5a07565e7669d5d201959e7fdb6b75b6ba239c17adad6dd7a71cbc9", 0xa6}, {&(0x7f00000006c0)="fd0361ba8348689ed9c126700664353ecad34ab0ae22d015ef460a68ef85eb4d666dd261e9e14401d0e05b7d845eb130a8c966f735ccdb9ecf757be3ab64fee93f680efd830e50c888bbc5c75c62c7effff520fb9ec76e026084847835f074a606eb3d8c683ecc6630ec49c0ec1b57a6d966a63c016c73a63e7018fe009f13511aa4ea5fd02007", 0x87}], 0x3, &(0x7f00000001c0)=ANY=[@ANYRES32=r5], 0x188}, 0x2000) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r8, &(0x7f0000000140)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004081}, 0x20000000) 61.033483ms ago: executing program 3 (id=4227): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x5) r3 = accept(0xffffffffffffffff, &(0x7f0000000080)=@can, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) connect$caif(r3, &(0x7f0000000240)=@dbg={0x25, 0x1, 0x5}, 0x18) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x1, @private0, 0x5}}, 0x0, 0x0, 0x27, 0x0, "c67807ad1cac3774510a21f9dfd5746fc6dca4fea2cdc1ccf652b9da815edb5be1a6cf163f02c973af24f2c53aafc123189b7e2e0ff1f2911441e5752cf78450ce3e40de7cf9160ef09954cd205cddb3"}, 0xd8) 0s ago: executing program 0 (id=4228): syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x30, 0x3a, 0x0, @remote, @mcast1, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x0, 0x0, @private1, @empty}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r3, 0x0, 0x1}, 0x18) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x2}, 0x18) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r4) sendmmsg$unix(r4, 0x0, 0x0, 0xc0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0x1c) r8 = accept$alg(r6, 0x0, 0x0) read$alg(r8, &(0x7f0000000280)=""/241, 0xf1) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r0, 0x0, 0x0, 0x80000) recvmmsg(r9, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000d80)=""/157, 0x9d}], 0x2}, 0x10}], 0x2, 0x10002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): 48 [ 508.625647][T16625] RSP: 002b:00007f01eeff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.625671][T16625] RAX: ffffffffffffffda RBX: 00007f01f13a6080 RCX: 00007f01f118d169 [ 508.625686][T16625] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000005 [ 508.625699][T16625] RBP: 00007f01eeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 508.625713][T16625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 508.625726][T16625] R13: 0000000000000000 R14: 00007f01f13a6080 R15: 00007ffca9e77608 [ 508.625757][T16625] [ 509.057615][T16629] xt_socket: unknown flags 0x4 [ 509.097679][T16491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.105584][T16491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.131749][T16491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.146797][T16491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.154074][T16491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.180341][T16491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.392003][T16491] hsr_slave_0: entered promiscuous mode [ 509.419125][T16491] hsr_slave_1: entered promiscuous mode [ 509.435459][T16491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.443162][T16491] Cannot create hsr debugfs directory [ 509.539436][ T11] batadv_slave_0: left promiscuous mode [ 509.563504][ T11] hsr_slave_0: left promiscuous mode [ 509.585181][ T11] hsr_slave_1: left promiscuous mode [ 509.591093][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.604974][T16642] openvswitch: netlink: Key type 216 is out of range max 32 [ 509.614640][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.660449][T16645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3189'. [ 509.713651][ T5846] Bluetooth: hci2: command tx timeout [ 509.720736][ T11] pimreg (unregistering): left allmulticast mode [ 509.975131][T16649] xt_socket: unknown flags 0x4 [ 510.188837][ T11] team_slave_1 (unregistering): left promiscuous mode [ 510.204691][ T11] team0 (unregistering): Port device team_slave_1 removed [ 510.258856][ T11] team_slave_0 (unregistering): left promiscuous mode [ 510.269135][ T11] team0 (unregistering): Port device team_slave_0 removed [ 511.032191][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3192'. [ 511.101296][T16667] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input26 [ 511.435099][T16670] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 511.538121][T16656] lo speed is unknown, defaulting to 1000 [ 511.586025][T16656] lo speed is unknown, defaulting to 1000 [ 511.806760][T16682] syzkaller1: entered promiscuous mode [ 511.812492][T16682] syzkaller1: entered allmulticast mode [ 511.826932][T16679] netlink: 'syz.1.3196': attribute type 10 has an invalid length. [ 511.880387][T16679] bond0: (slave bridge0): Releasing backup interface [ 511.914623][T16679] bond0: (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 511.943779][T16679] bridge0: left promiscuous mode [ 512.006540][T16663] xt_HMARK: spi-set and port-set can't be combined [ 512.155488][T16687] xt_hashlimit: size too large, truncated to 1048576 [ 512.191690][T16656] lo speed is unknown, defaulting to 1000 [ 512.218786][ T11] IPVS: stop unused estimator thread 0... [ 512.262756][T16692] xt_socket: unknown flags 0x4 [ 512.325444][T16695] __nla_validate_parse: 3 callbacks suppressed [ 512.325465][T16695] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3201'. [ 512.354823][T16687] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 512.362721][T16696] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3201'. [ 512.609623][T16699] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 512.639278][T16699] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3204'. [ 512.680647][T16491] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 512.874931][T16707] xt_CT: You must specify a L4 protocol and not use inversions on it [ 512.890155][T16709] netlink: 'syz.4.3206': attribute type 10 has an invalid length. [ 513.034355][T16491] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 513.055050][T16491] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 513.067749][T16709] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.075264][T16709] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.109345][T16709] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.116584][T16709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.124089][T16709] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.131263][T16709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.167135][T16709] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 513.214956][T16491] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 513.588768][T16491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.680149][T16491] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.723583][T16722] syzkaller1: entered promiscuous mode [ 513.733163][T16724] xt_CT: No such helper "syz0" [ 513.754070][T16722] syzkaller1: entered allmulticast mode [ 513.763812][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.771004][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.813923][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.821243][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.846130][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3213'. [ 513.876733][T16729] netlink: 'syz.0.3212': attribute type 10 has an invalid length. [ 514.024187][T16734] xt_socket: unknown flags 0x4 [ 514.161601][T16743] xt_CT: You must specify a L4 protocol and not use inversions on it [ 514.199049][T16742] lo speed is unknown, defaulting to 1000 [ 514.276151][T16742] lo speed is unknown, defaulting to 1000 [ 514.400445][T16753] xt_CT: You must specify a L4 protocol and not use inversions on it [ 514.450370][T16491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.609088][T16755] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3219'. [ 514.612714][T16491] veth0_vlan: entered promiscuous mode [ 514.628783][T16759] netlink: 'syz.3.3220': attribute type 16 has an invalid length. [ 514.644211][T16759] netlink: 'syz.3.3220': attribute type 17 has an invalid length. [ 514.653272][T16755] 0·: renamed from hsr0 (while UP) [ 514.677856][T16755] 0·: entered allmulticast mode [ 514.705019][T16755] hsr_slave_0: entered allmulticast mode [ 514.716270][T16755] hsr_slave_1: entered allmulticast mode [ 514.724698][T16755] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 514.770933][T16759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.825259][T16742] lo speed is unknown, defaulting to 1000 [ 514.865160][T16491] veth1_vlan: entered promiscuous mode [ 514.894368][T16761] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 514.907298][T16764] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 515.086574][T16491] veth0_macvtap: entered promiscuous mode [ 515.100902][T16745] xt_HMARK: spi-set and port-set can't be combined [ 515.118933][T16491] veth1_macvtap: entered promiscuous mode [ 515.138232][T16491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.150231][T16491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.160817][T16491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.172220][T16491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.186573][T16491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.227950][T16491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.277052][T16491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.305934][T16491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.324031][T16491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.342814][T16491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.407544][T16491] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.434030][T16491] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.455178][T16491] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.476599][T16491] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.751991][T16787] xt_CT: You must specify a L4 protocol and not use inversions on it [ 516.181707][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.219540][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.322051][T16799] ipt_REJECT: TCP_RESET invalid for non-tcp [ 516.353261][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.381740][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.392892][T16804] netlink: 'syz.0.3234': attribute type 16 has an invalid length. [ 516.425506][T16804] netlink: 'syz.0.3234': attribute type 17 has an invalid length. [ 516.495148][T16804] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.502370][T16804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.509959][T16804] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.517189][T16804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.585951][T16804] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.614129][ T5890] lo speed is unknown, defaulting to 1000 [ 516.768878][T16811] xt_CT: You must specify a L4 protocol and not use inversions on it [ 516.957614][T16819] lo speed is unknown, defaulting to 1000 [ 517.046762][T16819] lo speed is unknown, defaulting to 1000 [ 517.327846][T16828] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.337563][T16828] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.576608][T16819] lo speed is unknown, defaulting to 1000 [ 518.087151][T16819] xt_HMARK: spi-set and port-set can't be combined [ 518.126301][T16838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 518.133593][T16838] IPv6: NLM_F_CREATE should be set when creating new route [ 518.140923][T16838] IPv6: NLM_F_CREATE should be set when creating new route [ 518.148214][T16838] IPv6: NLM_F_CREATE should be set when creating new route [ 518.550329][T16842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3244'. [ 518.575104][T16842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3244'. [ 518.593444][T16842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3244'. [ 518.929969][T16848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3247'. [ 518.939489][T16848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3247'. [ 519.415001][T16862] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 519.686637][T16867] pimreg: entered allmulticast mode [ 519.693092][T16870] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 519.906072][T16873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 519.913378][T16873] IPv6: NLM_F_CREATE should be set when creating new route [ 519.920735][T16873] IPv6: NLM_F_CREATE should be set when creating new route [ 519.928035][T16873] IPv6: NLM_F_CREATE should be set when creating new route [ 520.223465][T16876] netlink: 'syz.1.3258': attribute type 4 has an invalid length. [ 520.280984][T16876] netlink: 'syz.1.3258': attribute type 4 has an invalid length. [ 520.789718][T16895] netlink: 137456 bytes leftover after parsing attributes in process `syz.1.3265'. [ 520.834399][T16895] netlink: zone id is out of range [ 520.850796][T16895] netlink: zone id is out of range [ 520.905214][T16895] netlink: zone id is out of range [ 520.910407][T16895] netlink: zone id is out of range [ 520.924367][T16895] netlink: zone id is out of range [ 520.931388][T16895] netlink: zone id is out of range [ 520.940720][T16895] netlink: zone id is out of range [ 520.956338][T16895] netlink: zone id is out of range [ 520.972875][T16895] netlink: zone id is out of range [ 520.989363][T16895] netlink: zone id is out of range [ 521.430091][T16920] netlink: 'syz.2.3272': attribute type 10 has an invalid length. [ 521.741648][T16931] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3277'. [ 522.020389][T16944] vlan2: entered allmulticast mode [ 522.032166][T16944] macsec0: entered allmulticast mode [ 522.057298][T16944] veth1_macvtap: entered allmulticast mode [ 522.080358][T16944] bridge0: port 3(vlan2) entered blocking state [ 522.106848][T16944] bridge0: port 3(vlan2) entered disabled state [ 522.123549][T16944] vlan2: entered promiscuous mode [ 522.134595][T16944] macsec0: entered promiscuous mode [ 522.148662][T16944] bridge0: port 3(vlan2) entered blocking state [ 522.155155][T16944] bridge0: port 3(vlan2) entered forwarding state [ 522.179582][T16950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3282'. [ 522.380541][T16957] netlink: 'syz.0.3284': attribute type 10 has an invalid length. [ 522.390034][T16957] bridge0: port 3(vlan2) entered disabled state [ 522.396580][T16957] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.403901][T16957] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.414568][T16959] FAULT_INJECTION: forcing a failure. [ 522.414568][T16959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.418573][T16957] bridge0: port 3(vlan2) entered blocking state [ 522.434164][T16957] bridge0: port 3(vlan2) entered forwarding state [ 522.440846][T16957] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.448041][T16957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.455548][T16957] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.458417][T16959] CPU: 0 UID: 0 PID: 16959 Comm: syz.2.3285 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 522.458453][T16959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 522.458469][T16959] Call Trace: [ 522.458478][T16959] [ 522.458489][T16959] dump_stack_lvl+0x241/0x360 [ 522.458527][T16959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.458553][T16959] ? __pfx__printk+0x10/0x10 [ 522.458580][T16959] ? __pfx_lock_release+0x10/0x10 [ 522.458622][T16959] should_fail_ex+0x40a/0x550 [ 522.458663][T16959] _copy_from_user+0x2d/0xb0 [ 522.458694][T16959] bpf_test_init+0xfc/0x160 [ 522.458731][T16959] bpf_prog_test_run_xdp+0x48e/0x11e0 [ 522.458770][T16959] ? __pfx_lock_release+0x10/0x10 [ 522.458814][T16959] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 522.458848][T16959] ? __fget_files+0x2a/0x410 [ 522.458885][T16959] ? __fget_files+0x2a/0x410 [ 522.458922][T16959] ? fput+0x21b/0x290 [ 522.458952][T16959] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 522.458986][T16959] bpf_prog_test_run+0x2e4/0x360 [ 522.459025][T16959] __sys_bpf+0x487/0x820 [ 522.459058][T16959] ? __pfx___sys_bpf+0x10/0x10 [ 522.459104][T16959] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 522.459141][T16959] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 522.459186][T16959] ? do_syscall_64+0x100/0x230 [ 522.459220][T16959] __x64_sys_bpf+0x7c/0x90 [ 522.459250][T16959] do_syscall_64+0xf3/0x230 [ 522.459278][T16959] ? clear_bhb_loop+0x35/0x90 [ 522.459314][T16959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.459344][T16959] RIP: 0033:0x7f1e4878d169 [ 522.459364][T16959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.459384][T16959] RSP: 002b:00007f1e49543038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 522.459410][T16959] RAX: ffffffffffffffda RBX: 00007f1e489a5fa0 RCX: 00007f1e4878d169 [ 522.459427][T16959] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 522.459442][T16959] RBP: 00007f1e49543090 R08: 0000000000000000 R09: 0000000000000000 [ 522.459456][T16959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.459470][T16959] R13: 0000000000000000 R14: 00007f1e489a5fa0 R15: 00007ffc7726dea8 [ 522.459503][T16959] [ 522.494863][T16961] netlink: 'syz.3.3286': attribute type 4 has an invalid length. [ 522.499899][T16957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.650359][T16965] netlink: 'syz.3.3286': attribute type 4 has an invalid length. [ 522.682192][T16957] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 522.936889][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3290'. [ 522.957484][T16975] netlink: 'syz.0.3291': attribute type 10 has an invalid length. [ 522.964235][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3290'. [ 523.296339][T16983] lo speed is unknown, defaulting to 1000 [ 523.324844][T16983] lo speed is unknown, defaulting to 1000 [ 523.352937][T16989] ip6tnl1: entered promiscuous mode [ 523.515991][T16983] lo speed is unknown, defaulting to 1000 [ 523.829333][T17002] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 524.188891][T17008] __nla_validate_parse: 1 callbacks suppressed [ 524.188912][T17008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'. [ 524.337992][T17014] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3305'. [ 524.393714][T17012] syzkaller1: entered promiscuous mode [ 524.404129][T17012] syzkaller1: entered allmulticast mode [ 524.422625][T17017] netlink: 'syz.3.3304': attribute type 16 has an invalid length. [ 524.430947][T17017] netlink: 'syz.3.3304': attribute type 17 has an invalid length. [ 524.473773][T17020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3307'. [ 524.533220][T17018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3308'. [ 524.539929][T17020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3307'. [ 524.545036][T17018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.588339][T17021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3308'. [ 524.624605][T17021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3308'. [ 524.704656][T17025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3309'. [ 524.755155][T17018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.061470][T17041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3314'. [ 525.083123][T17041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3314'. [ 525.282152][T17048] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 525.300989][T17048] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 525.369536][T17052] netlink: 'syz.3.3318': attribute type 10 has an invalid length. [ 525.415214][T17052] bond0: (slave bridge0): Releasing backup interface [ 525.527836][T17055] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 525.575594][T17056] syzkaller1: entered promiscuous mode [ 525.604769][T17056] syzkaller1: entered allmulticast mode [ 525.701631][T17058] lo speed is unknown, defaulting to 1000 [ 525.723795][T17058] lo speed is unknown, defaulting to 1000 [ 525.730441][T17062] lo speed is unknown, defaulting to 1000 [ 525.827304][T17061] lo speed is unknown, defaulting to 1000 [ 525.928270][T17068] lo speed is unknown, defaulting to 1000 [ 526.278717][T17078] FAULT_INJECTION: forcing a failure. [ 526.278717][T17078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.302312][T17078] CPU: 0 UID: 0 PID: 17078 Comm: syz.0.3327 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 526.302348][T17078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 526.302362][T17078] Call Trace: [ 526.302370][T17078] [ 526.302380][T17078] dump_stack_lvl+0x241/0x360 [ 526.302413][T17078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 526.302438][T17078] ? __pfx__printk+0x10/0x10 [ 526.302467][T17078] ? snprintf+0xda/0x120 [ 526.302501][T17078] should_fail_ex+0x40a/0x550 [ 526.302537][T17078] _copy_to_user+0x31/0xb0 [ 526.302567][T17078] simple_read_from_buffer+0xca/0x150 [ 526.302599][T17078] proc_fail_nth_read+0x1e9/0x250 [ 526.302629][T17078] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 526.302663][T17078] ? rw_verify_area+0x243/0x630 [ 526.302685][T17078] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 526.302714][T17078] vfs_read+0x1f8/0xb40 [ 526.302737][T17078] ? fdget_pos+0x254/0x320 [ 526.302767][T17078] ? __pfx___mutex_lock+0x10/0x10 [ 526.302794][T17078] ? __pfx_vfs_read+0x10/0x10 [ 526.302813][T17078] ? do_sys_openat2+0x17a/0x1d0 [ 526.302847][T17078] ? __fget_files+0x2a/0x410 [ 526.302878][T17078] ? __fget_files+0x395/0x410 [ 526.302905][T17078] ? __fget_files+0x2a/0x410 [ 526.302944][T17078] ksys_read+0x18f/0x2b0 [ 526.302967][T17078] ? __pfx_ksys_read+0x10/0x10 [ 526.302988][T17078] ? do_syscall_64+0x100/0x230 [ 526.303018][T17078] ? do_syscall_64+0xb6/0x230 [ 526.303047][T17078] do_syscall_64+0xf3/0x230 [ 526.303074][T17078] ? clear_bhb_loop+0x35/0x90 [ 526.303108][T17078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.303135][T17078] RIP: 0033:0x7f7cb578bb7c [ 526.303153][T17078] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 526.303184][T17078] RSP: 002b:00007f7cb6671030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 526.303206][T17078] RAX: ffffffffffffffda RBX: 00007f7cb59a5fa0 RCX: 00007f7cb578bb7c [ 526.303222][T17078] RDX: 000000000000000f RSI: 00007f7cb66710a0 RDI: 0000000000000004 [ 526.303235][T17078] RBP: 00007f7cb6671090 R08: 0000000000000000 R09: 0000000000000000 [ 526.303248][T17078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 526.303260][T17078] R13: 0000000000000000 R14: 00007f7cb59a5fa0 R15: 00007ffc232a38e8 [ 526.303291][T17078] [ 526.551644][T17058] lo speed is unknown, defaulting to 1000 [ 526.594816][T17062] lo speed is unknown, defaulting to 1000 [ 526.702222][T17062] lo speed is unknown, defaulting to 1000 [ 526.745522][T17061] lo speed is unknown, defaulting to 1000 [ 526.883332][T17084] lo speed is unknown, defaulting to 1000 [ 527.030704][T17068] lo speed is unknown, defaulting to 1000 [ 527.297738][T17084] lo speed is unknown, defaulting to 1000 [ 527.517242][T17097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 527.525027][T17061] lo speed is unknown, defaulting to 1000 [ 527.624859][T17068] lo speed is unknown, defaulting to 1000 [ 527.712951][T17084] lo speed is unknown, defaulting to 1000 [ 527.997658][T17101] syzkaller1: entered promiscuous mode [ 528.003195][T17101] syzkaller1: entered allmulticast mode [ 528.843743][T17115] netlink: 'syz.3.3338': attribute type 1 has an invalid length. [ 528.937188][T17115] bond1: entered promiscuous mode [ 528.965880][T17115] bond1: entered allmulticast mode [ 528.999617][T17119] batadv0: entered allmulticast mode [ 529.028464][T17125] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input27 [ 529.053746][T17119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.069621][T17119] bond1: (slave batadv0): making interface the new active one [ 529.101313][T17119] batadv0: entered promiscuous mode [ 529.153398][T17124] netlink: 'syz.3.3338': attribute type 1 has an invalid length. [ 529.188049][T17119] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 529.189183][T17130] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input28 [ 529.207520][T17124] net_ratelimit: 2095 callbacks suppressed [ 529.207542][T17124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.226617][T17122] __nla_validate_parse: 2 callbacks suppressed [ 529.226640][T17122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3341'. [ 529.287579][T17119] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3338'. [ 529.420535][T17127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3342'. [ 529.477653][T17119] bond1: left promiscuous mode [ 529.484462][T17119] batadv0: left promiscuous mode [ 529.490615][T17119] bond1: left allmulticast mode [ 529.515300][T17119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 529.538110][T17133] bond0: entered promiscuous mode [ 529.543424][T17133] bond_slave_0: entered promiscuous mode [ 529.550399][T17133] bond_slave_1: entered promiscuous mode [ 529.556775][T17133] bridge0: entered promiscuous mode [ 529.583826][T17133] bond0: left promiscuous mode [ 529.596069][T17133] bond_slave_0: left promiscuous mode [ 529.605056][T17133] bond_slave_1: left promiscuous mode [ 529.610790][T17133] bridge0: left promiscuous mode [ 529.642096][T17134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3342'. [ 529.793770][T17140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 529.876927][T17142] syzkaller1: entered promiscuous mode [ 529.892816][T17142] syzkaller1: entered allmulticast mode [ 529.970464][T17149] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 530.138783][T17154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3349'. [ 530.259998][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3352'. [ 530.866481][T17176] netlink: 'syz.2.3354': attribute type 10 has an invalid length. [ 531.222311][T17182] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input29 [ 531.269974][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3357'. [ 531.352184][T17188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3357'. [ 531.431288][T17192] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3355'. [ 531.815090][T17204] netlink: 'syz.2.3360': attribute type 6 has an invalid length. [ 531.965037][T17209] syzkaller1: entered promiscuous mode [ 531.976528][T17209] syzkaller1: entered allmulticast mode [ 532.022621][T17215] FAULT_INJECTION: forcing a failure. [ 532.022621][T17215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.049134][T17215] CPU: 0 UID: 0 PID: 17215 Comm: syz.4.3364 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 532.049167][T17215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 532.049181][T17215] Call Trace: [ 532.049189][T17215] [ 532.049199][T17215] dump_stack_lvl+0x241/0x360 [ 532.049233][T17215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.049257][T17215] ? __pfx__printk+0x10/0x10 [ 532.049282][T17215] ? __pfx_lock_release+0x10/0x10 [ 532.049323][T17215] should_fail_ex+0x40a/0x550 [ 532.049362][T17215] _copy_from_user+0x2d/0xb0 [ 532.049392][T17215] copy_msghdr_from_user+0xae/0x680 [ 532.049429][T17215] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 532.049476][T17215] __sys_sendmsg+0x209/0x350 [ 532.049505][T17215] ? __pfx___sys_sendmsg+0x10/0x10 [ 532.049540][T17215] ? __pfx_vfs_write+0x10/0x10 [ 532.049560][T17215] ? do_sys_openat2+0x17a/0x1d0 [ 532.049618][T17215] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 532.049651][T17215] ? do_syscall_64+0x100/0x230 [ 532.049681][T17215] ? do_syscall_64+0xb6/0x230 [ 532.049710][T17215] do_syscall_64+0xf3/0x230 [ 532.049737][T17215] ? clear_bhb_loop+0x35/0x90 [ 532.049770][T17215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.049799][T17215] RIP: 0033:0x7f01f118d169 [ 532.049830][T17215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.049849][T17215] RSP: 002b:00007f01f1eff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.049871][T17215] RAX: ffffffffffffffda RBX: 00007f01f13a5fa0 RCX: 00007f01f118d169 [ 532.049887][T17215] RDX: 0000000000000000 RSI: 0000400000000480 RDI: 0000000000000007 [ 532.049901][T17215] RBP: 00007f01f1eff090 R08: 0000000000000000 R09: 0000000000000000 [ 532.049914][T17215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.049927][T17215] R13: 0000000000000000 R14: 00007f01f13a5fa0 R15: 00007ffca9e77608 [ 532.049958][T17215] [ 532.056773][T17214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3366'. [ 532.572853][T17235] xt_socket: unknown flags 0x4 [ 532.735025][T17240] FAULT_INJECTION: forcing a failure. [ 532.735025][T17240] name failslab, interval 1, probability 0, space 0, times 0 [ 532.764547][T17240] CPU: 1 UID: 0 PID: 17240 Comm: syz.1.3373 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 532.764581][T17240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 532.764596][T17240] Call Trace: [ 532.764604][T17240] [ 532.764614][T17240] dump_stack_lvl+0x241/0x360 [ 532.764647][T17240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.764671][T17240] ? __pfx__printk+0x10/0x10 [ 532.764707][T17240] ? ref_tracker_alloc+0x332/0x490 [ 532.764746][T17240] should_fail_ex+0x40a/0x550 [ 532.764783][T17240] should_failslab+0xac/0x100 [ 532.764813][T17240] ? skb_clone+0x20c/0x390 [ 532.764835][T17240] kmem_cache_alloc_noprof+0x70/0x380 [ 532.764872][T17240] skb_clone+0x20c/0x390 [ 532.764901][T17240] __netlink_deliver_tap+0x3c4/0x7f0 [ 532.764945][T17240] ? netlink_deliver_tap+0x2e/0x1b0 [ 532.764974][T17240] netlink_deliver_tap+0x19d/0x1b0 [ 532.765006][T17240] netlink_sendskb+0x68/0x140 [ 532.765034][T17240] netlink_unicast+0x39d/0x990 [ 532.765070][T17240] ? __pfx_netlink_unicast+0x10/0x10 [ 532.765102][T17240] ? nfnl_pernet+0x23/0x240 [ 532.765128][T17240] nfnetlink_unicast+0x51/0x80 [ 532.765151][T17240] nfnl_compat_get_rcu+0x995/0xcb0 [ 532.765188][T17240] ? nfnl_compat_get_rcu+0x394/0xcb0 [ 532.765213][T17240] ? __pfx_nfnl_compat_get_rcu+0x10/0x10 [ 532.765245][T17240] ? __nla_parse+0x40/0x60 [ 532.765269][T17240] ? nfnetlink_rcv_msg+0x225/0x1180 [ 532.765290][T17240] ? __pfx_nfnl_compat_get_rcu+0x10/0x10 [ 532.765316][T17240] nfnetlink_rcv_msg+0x8a2/0x1180 [ 532.765339][T17240] ? nfnetlink_rcv_msg+0x225/0x1180 [ 532.765387][T17240] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 532.765408][T17240] ? stack_trace_save+0x118/0x1d0 [ 532.765462][T17240] ? dev_hard_start_xmit+0x27a/0x7d0 [ 532.765486][T17240] ? __dev_queue_xmit+0x1b73/0x3f40 [ 532.765509][T17240] ? __netlink_deliver_tap+0x561/0x7f0 [ 532.765542][T17240] ? netlink_deliver_tap+0x19d/0x1b0 [ 532.765571][T17240] ? netlink_unicast+0x7c4/0x990 [ 532.765596][T17240] ? netlink_sendmsg+0x8de/0xcb0 [ 532.765623][T17240] ? __sock_sendmsg+0x221/0x270 [ 532.765650][T17240] ? ____sys_sendmsg+0x53a/0x860 [ 532.765671][T17240] ? __sys_sendmsg+0x269/0x350 [ 532.765717][T17240] netlink_rcv_skb+0x206/0x480 [ 532.765748][T17240] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 532.765774][T17240] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.765819][T17240] ? apparmor_capable+0x13b/0x1b0 [ 532.765848][T17240] ? bpf_lsm_capable+0x9/0x10 [ 532.765879][T17240] ? security_capable+0x7e/0x2d0 [ 532.765919][T17240] nfnetlink_rcv+0x297/0x2ab0 [ 532.765948][T17240] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 532.765982][T17240] ? __dev_queue_xmit+0x2f4/0x3f40 [ 532.766010][T17240] ? __dev_queue_xmit+0x1775/0x3f40 [ 532.766034][T17240] ? kasan_save_track+0x51/0x80 [ 532.766065][T17240] ? ____sys_sendmsg+0x53a/0x860 [ 532.766091][T17240] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 532.766113][T17240] ? __dev_queue_xmit+0x2f4/0x3f40 [ 532.766144][T17240] ? __pfx___dev_queue_xmit+0x10/0x10 [ 532.766188][T17240] ? ref_tracker_free+0x643/0x7e0 [ 532.766210][T17240] ? __asan_memcpy+0x40/0x70 [ 532.766231][T17240] ? __pfx_ref_tracker_free+0x10/0x10 [ 532.766269][T17240] ? netlink_deliver_tap+0x2e/0x1b0 [ 532.766298][T17240] ? skb_clone+0x240/0x390 [ 532.766322][T17240] ? __pfx_lock_release+0x10/0x10 [ 532.766356][T17240] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 532.766399][T17240] ? netlink_deliver_tap+0x2e/0x1b0 [ 532.766432][T17240] netlink_unicast+0x7f6/0x990 [ 532.766468][T17240] ? __pfx_netlink_unicast+0x10/0x10 [ 532.766494][T17240] ? __virt_addr_valid+0x45f/0x530 [ 532.766516][T17240] ? __phys_addr_symbol+0x2f/0x70 [ 532.766536][T17240] ? __check_object_size+0x47a/0x730 [ 532.766570][T17240] netlink_sendmsg+0x8de/0xcb0 [ 532.766615][T17240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.766651][T17240] ? aa_sock_msg_perm+0x91/0x160 [ 532.766698][T17240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.766727][T17240] __sock_sendmsg+0x221/0x270 [ 532.766760][T17240] ____sys_sendmsg+0x53a/0x860 [ 532.766793][T17240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.766815][T17240] ? __fget_files+0x2a/0x410 [ 532.766850][T17240] ? __fget_files+0x2a/0x410 [ 532.766890][T17240] __sys_sendmsg+0x269/0x350 [ 532.766920][T17240] ? __pfx___sys_sendmsg+0x10/0x10 [ 532.766958][T17240] ? do_sys_openat2+0x17a/0x1d0 [ 532.767017][T17240] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 532.767052][T17240] ? do_syscall_64+0x100/0x230 [ 532.767081][T17240] ? do_syscall_64+0xb6/0x230 [ 532.767111][T17240] do_syscall_64+0xf3/0x230 [ 532.767137][T17240] ? clear_bhb_loop+0x35/0x90 [ 532.767171][T17240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.767200][T17240] RIP: 0033:0x7ff2a838d169 [ 532.767219][T17240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.767238][T17240] RSP: 002b:00007ff2a91cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.767262][T17240] RAX: ffffffffffffffda RBX: 00007ff2a85a5fa0 RCX: 00007ff2a838d169 [ 532.767279][T17240] RDX: 0000000024040800 RSI: 00004000000017c0 RDI: 0000000000000004 [ 532.767294][T17240] RBP: 00007ff2a91cd090 R08: 0000000000000000 R09: 0000000000000000 [ 532.767308][T17240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.767321][T17240] R13: 0000000000000000 R14: 00007ff2a85a5fa0 R15: 00007ffdbc8d0ce8 [ 532.767355][T17240] [ 533.489466][T17250] xt_socket: unknown flags 0x4 [ 533.589547][T17253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 533.596995][T17253] IPv6: NLM_F_CREATE should be set when creating new route [ 533.604313][T17253] IPv6: NLM_F_CREATE should be set when creating new route [ 533.611597][T17253] IPv6: NLM_F_CREATE should be set when creating new route [ 533.676123][T17257] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 533.708102][T17257] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 533.799780][T17263] netlink: 'syz.2.3381': attribute type 15 has an invalid length. [ 533.945257][T17265] netlink: 'syz.3.3382': attribute type 10 has an invalid length. [ 533.995895][T17271] lo speed is unknown, defaulting to 1000 [ 533.996623][T17273] FAULT_INJECTION: forcing a failure. [ 533.996623][T17273] name failslab, interval 1, probability 0, space 0, times 0 [ 534.046999][T17273] CPU: 0 UID: 0 PID: 17273 Comm: syz.1.3384 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 534.047037][T17273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 534.047051][T17273] Call Trace: [ 534.047060][T17273] [ 534.047070][T17273] dump_stack_lvl+0x241/0x360 [ 534.047104][T17273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.047130][T17273] ? __pfx__printk+0x10/0x10 [ 534.047156][T17273] ? kmem_cache_alloc_noprof+0x48/0x380 [ 534.047188][T17273] ? __pfx___might_resched+0x10/0x10 [ 534.047224][T17273] should_fail_ex+0x40a/0x550 [ 534.047263][T17273] should_failslab+0xac/0x100 [ 534.047294][T17273] ? __kernfs_new_node+0xd8/0x870 [ 534.047322][T17273] kmem_cache_alloc_noprof+0x70/0x380 [ 534.047359][T17273] __kernfs_new_node+0xd8/0x870 [ 534.047398][T17273] ? up_write+0x1a9/0x590 [ 534.047430][T17273] ? __pfx___kernfs_new_node+0x10/0x10 [ 534.047459][T17273] ? up_write+0x1a9/0x590 [ 534.047490][T17273] ? __pfx_up_write+0x10/0x10 [ 534.047529][T17273] kernfs_new_node+0x137/0x240 [ 534.047565][T17273] __kernfs_create_file+0x49/0x2e0 [ 534.047593][T17273] sysfs_add_file_mode_ns+0x24a/0x310 [ 534.047628][T17273] internal_create_group+0x782/0x12d0 [ 534.047676][T17273] ? __pfx_internal_create_group+0x10/0x10 [ 534.047720][T17273] sysfs_create_groups+0x56/0x120 [ 534.047751][T17273] device_add_attrs+0xe5/0x600 [ 534.047790][T17273] ? __pfx_device_add_attrs+0x10/0x10 [ 534.047835][T17273] device_add+0x576/0xbf0 [ 534.047870][T17273] ? device_initialize+0x266/0x460 [ 534.047906][T17273] netdev_register_kobject+0x157/0x2f0 [ 534.047936][T17273] register_netdevice+0x12c3/0x1b70 [ 534.047981][T17273] ? __pfx_register_netdevice+0x10/0x10 [ 534.048011][T17273] ? __pfx_l2tp_session_register+0x10/0x10 [ 534.048057][T17273] l2tp_eth_create+0x828/0xc30 [ 534.048091][T17273] ? l2tp_eth_create+0x38d/0xc30 [ 534.048124][T17273] ? __pfx_l2tp_eth_create+0x10/0x10 [ 534.048163][T17273] l2tp_nl_cmd_session_create+0x828/0xf40 [ 534.048202][T17273] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 534.048238][T17273] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 534.048273][T17273] genl_rcv_msg+0xb1f/0xec0 [ 534.048307][T17273] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.048364][T17273] ? __pfx_lock_acquire+0x10/0x10 [ 534.048403][T17273] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 534.048432][T17273] ? __pfx___might_resched+0x10/0x10 [ 534.048473][T17273] netlink_rcv_skb+0x206/0x480 [ 534.048505][T17273] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.048531][T17273] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 534.048577][T17273] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 534.048625][T17273] genl_rcv+0x28/0x40 [ 534.048646][T17273] netlink_unicast+0x7f6/0x990 [ 534.048684][T17273] ? __pfx_netlink_unicast+0x10/0x10 [ 534.048709][T17273] ? __virt_addr_valid+0x45f/0x530 [ 534.048732][T17273] ? __phys_addr_symbol+0x2f/0x70 [ 534.048752][T17273] ? __check_object_size+0x47a/0x730 [ 534.048787][T17273] netlink_sendmsg+0x8de/0xcb0 [ 534.048833][T17273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.048869][T17273] ? aa_sock_msg_perm+0x91/0x160 [ 534.048910][T17273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.048938][T17273] __sock_sendmsg+0x221/0x270 [ 534.048972][T17273] ____sys_sendmsg+0x53a/0x860 [ 534.049007][T17273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.049029][T17273] ? __fget_files+0x2a/0x410 [ 534.049063][T17273] ? __fget_files+0x2a/0x410 [ 534.049106][T17273] __sys_sendmsg+0x269/0x350 [ 534.049136][T17273] ? __pfx___sys_sendmsg+0x10/0x10 [ 534.049176][T17273] ? do_sys_openat2+0x17a/0x1d0 [ 534.049239][T17273] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 534.049274][T17273] ? do_syscall_64+0x100/0x230 [ 534.049306][T17273] ? do_syscall_64+0xb6/0x230 [ 534.049336][T17273] do_syscall_64+0xf3/0x230 [ 534.049362][T17273] ? clear_bhb_loop+0x35/0x90 [ 534.049406][T17273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.049435][T17273] RIP: 0033:0x7ff2a838d169 [ 534.049454][T17273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.049473][T17273] RSP: 002b:00007ff2a91cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.049496][T17273] RAX: ffffffffffffffda RBX: 00007ff2a85a5fa0 RCX: 00007ff2a838d169 [ 534.049512][T17273] RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000005 [ 534.049526][T17273] RBP: 00007ff2a91cd090 R08: 0000000000000000 R09: 0000000000000000 [ 534.049539][T17273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 534.049552][T17273] R13: 0000000000000000 R14: 00007ff2a85a5fa0 R15: 00007ffdbc8d0ce8 [ 534.049585][T17273] [ 534.537078][T17265] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 534.550497][T17271] lo speed is unknown, defaulting to 1000 [ 534.787496][T17284] xt_CT: You must specify a L4 protocol and not use inversions on it [ 534.823636][T17286] __nla_validate_parse: 7 callbacks suppressed [ 534.823662][T17286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3389'. [ 534.852181][T17271] lo speed is unknown, defaulting to 1000 [ 534.875116][T17286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3389'. [ 534.899220][T17286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3389'. [ 535.057393][T17292] netlink: 'syz.3.3394': attribute type 1 has an invalid length. [ 535.172789][T17292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3394'. [ 535.228328][T17296] tipc: Enabling of bearer rejected, failed to enable media [ 535.248085][T17292] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.460929][T17301] lo speed is unknown, defaulting to 1000 [ 535.534808][T17301] lo speed is unknown, defaulting to 1000 [ 535.596989][T17310] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3398'. [ 535.973781][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3401'. [ 536.010346][T17312] vlan3: entered promiscuous mode [ 536.060116][T17312] bond0: entered promiscuous mode [ 536.068482][T17312] bridge0: entered promiscuous mode [ 536.114931][T17312] bond0: left promiscuous mode [ 536.121075][T17312] bridge0: left promiscuous mode [ 536.230557][T17301] lo speed is unknown, defaulting to 1000 [ 536.624348][T17340] netlink: 'syz.3.3407': attribute type 16 has an invalid length. [ 536.632241][T17340] netlink: 'syz.3.3407': attribute type 17 has an invalid length. [ 536.699897][T17340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 536.745424][T17342] netlink: 'syz.4.3408': attribute type 16 has an invalid length. [ 536.761390][T17342] netlink: 'syz.4.3408': attribute type 17 has an invalid length. [ 536.819982][T17342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 537.378811][T17349] netlink: 'syz.0.3412': attribute type 4 has an invalid length. [ 537.406031][T11502] lo speed is unknown, defaulting to 1000 [ 537.422918][T17349] netlink: 'syz.0.3412': attribute type 4 has an invalid length. [ 537.484519][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 537.486377][T11502] lo speed is unknown, defaulting to 1000 [ 537.502875][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 537.514826][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 537.535854][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 537.554941][ T5857] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 537.564460][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 537.630360][T17350] syzkaller0: entered promiscuous mode [ 537.654448][T17350] syzkaller0: entered allmulticast mode [ 537.679553][T17351] lo speed is unknown, defaulting to 1000 [ 537.687593][T17351] lo speed is unknown, defaulting to 1000 [ 537.769072][T17361] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 537.780947][T17355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3413'. [ 537.804487][T17361] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3415'. [ 537.950710][T17366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3417'. [ 539.627508][ T5846] Bluetooth: hci0: command tx timeout [ 540.594110][T17351] lo speed is unknown, defaulting to 1000 [ 540.833214][T17369] tap0: tun_chr_ioctl cmd 2180551740 [ 540.846539][T17369] tap0: tun_chr_ioctl cmd 2147767507 [ 540.852248][T17369] tap0: tun_chr_ioctl cmd 1074025677 [ 540.864243][T17369] tap0: linktype set to 804 [ 540.926301][T17376] netlink: 'syz.2.3420': attribute type 16 has an invalid length. [ 540.945033][T17376] netlink: 'syz.2.3420': attribute type 17 has an invalid length. [ 540.980200][T17351] chnl_net:caif_netlink_parms(): no params data found [ 541.043480][T17376] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.050843][T17376] bridge0: port 2(bridge_slave_1) entered listening state [ 541.058264][T17376] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.065475][T17376] bridge0: port 1(bridge_slave_0) entered listening state [ 541.097078][T17376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 541.118164][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3422'. [ 541.349762][T17381] xt_socket: unknown flags 0x4 [ 541.411205][T17351] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.419048][T17351] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.426520][T17351] bridge_slave_0: entered allmulticast mode [ 541.434286][T17351] bridge_slave_0: entered promiscuous mode [ 541.445603][T17351] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.452967][T17351] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.465571][T17351] bridge_slave_1: entered allmulticast mode [ 541.475743][T17351] bridge_slave_1: entered promiscuous mode [ 541.483382][T17397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3426'. [ 541.545663][T17351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.565714][T17397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3426'. [ 541.582415][T17351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.704026][ T5846] Bluetooth: hci0: command tx timeout [ 541.774237][T17407] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3430'. [ 541.898044][T17405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3429'. [ 541.913824][T17351] team0: Port device team_slave_0 added [ 542.006897][T17351] team0: Port device team_slave_1 added [ 542.042678][T17416] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3432'. [ 542.156325][T17351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.175701][T17351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.240385][T17351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.266642][T17421] Cannot find del_set index 2 as target [ 542.286001][T17351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.309738][T17351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.387519][T17351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.468414][T17426] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 542.692750][T17351] hsr_slave_0: entered promiscuous mode [ 542.700356][T17351] hsr_slave_1: entered promiscuous mode [ 542.753171][T17430] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3439'. [ 542.785983][T17430] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3439'. [ 542.885936][T17434] lo speed is unknown, defaulting to 1000 [ 542.937867][T17434] lo speed is unknown, defaulting to 1000 [ 543.111122][T17351] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.125455][T17442] netlink: 'syz.4.3441': attribute type 16 has an invalid length. [ 543.144381][T17442] netlink: 'syz.4.3441': attribute type 17 has an invalid length. [ 543.200933][T17442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 543.245191][T17444] netlink: 'syz.3.3443': attribute type 10 has an invalid length. [ 543.267703][T17351] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.331487][T17351] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.467889][T17351] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.534438][T17434] lo speed is unknown, defaulting to 1000 [ 543.784385][ T5846] Bluetooth: hci0: command tx timeout [ 543.914304][T17457] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3448'. [ 544.037321][T17459] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 544.059664][T17461] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3449'. [ 544.074220][T17351] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 544.198748][T17351] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 544.379254][T17465] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.386644][T17465] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.456282][T17476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.609174][T17477] xt_CT: No such helper "syz0" [ 544.662183][T17465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.994577][T17465] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.003528][T17465] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.033932][T17465] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.043211][T17465] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.163705][T17461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.216482][T17461] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.244150][T17461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.261730][T17351] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 545.346063][T17351] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 545.491833][T17498] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 545.662831][T17351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.719363][T17351] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.750367][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.757588][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.804260][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.811558][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.815722][T17506] netlink: 'syz.0.3463': attribute type 16 has an invalid length. [ 545.829594][T17506] netlink: 'syz.0.3463': attribute type 17 has an invalid length. [ 545.864905][ T5846] Bluetooth: hci0: command tx timeout [ 545.905492][T17506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.097592][T17351] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 546.108589][T17351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 546.169505][T17509] ip6tnl1: entered promiscuous mode [ 546.184606][T17509] ip6tnl1: entered allmulticast mode [ 546.220467][T17513] __nla_validate_parse: 2 callbacks suppressed [ 546.220487][T17513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3467'. [ 546.242259][T11502] IPVS: starting estimator thread 0... [ 546.264552][T17509] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 546.293180][T17517] xt_CT: You must specify a L4 protocol and not use inversions on it [ 546.304728][T17509] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 546.342845][T17518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3468'. [ 546.352130][T17514] IPVS: using max 18 ests per chain, 43200 per kthread [ 546.523124][T17351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.562274][T17525] xt_socket: unknown flags 0x4 [ 546.627851][T17532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3471'. [ 546.663074][T17351] veth0_vlan: entered promiscuous mode [ 546.712461][T17532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3471'. [ 546.721899][T17351] veth1_vlan: entered promiscuous mode [ 546.755568][T17532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3471'. [ 546.820006][T17351] veth0_macvtap: entered promiscuous mode [ 546.843457][T17351] veth1_macvtap: entered promiscuous mode [ 546.888031][T17351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.905406][T17351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.920223][T17351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.954241][T17351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.995418][T17351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.023371][T17351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.062452][T17351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.088737][T17351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.109624][T17351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.122553][T17551] Cannot find del_set index 2 as target [ 547.155255][T17351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.186804][T17351] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.224128][T17351] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.253261][T17351] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.273501][T17351] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.318596][T17557] team0: No ports can be present during mode change [ 547.545060][T17565] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 547.642312][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.686611][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.727873][T17569] xt_CT: No such helper "syz0" [ 547.735235][T17573] netlink: 'syz.3.3486': attribute type 4 has an invalid length. [ 547.783729][T17573] netlink: 'syz.3.3486': attribute type 4 has an invalid length. [ 547.819888][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.847939][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.982270][T17580] netlink: 'syz.2.3488': attribute type 10 has an invalid length. [ 548.168618][T17589] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 548.187579][T17588] netlink: 'syz.3.3493': attribute type 3 has an invalid length. [ 548.196447][T17589] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 548.415032][T17601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3495'. [ 548.443214][T17604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3497'. [ 548.478527][T17604] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3497'. [ 548.677525][T17615] vlan3: entered allmulticast mode [ 548.696978][T17615] netlink: 1264 bytes leftover after parsing attributes in process `syz.0.3501'. [ 548.981966][ T29] audit: type=1800 audit(1741698106.762:3): pid=17616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3500" name="memory.events" dev="tmpfs" ino=348 res=0 errno=0 [ 549.477427][T17637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.485405][T17638] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3507'. [ 549.596844][T17643] bond0: (slave bridge0): Releasing backup interface [ 549.760712][T17650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 549.837910][T17652] Cannot find set identified by id 0 to match [ 549.907321][T17643] bond1: (slave batadv0): Releasing active interface [ 550.276511][T17659] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 550.460371][T17665] Bluetooth: MGMT ver 1.23 [ 550.718291][T17677] xt_CT: No such helper "syz0" [ 550.746752][T17685] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.755830][T17685] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.764768][T17685] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.773613][T17685] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.804372][T17685] vxlan0: entered promiscuous mode [ 550.809590][T17685] vxlan0: entered allmulticast mode [ 551.000103][T17693] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 551.164230][T17699] netlink: 'syz.2.3531': attribute type 16 has an invalid length. [ 551.172126][T17699] netlink: 'syz.2.3531': attribute type 17 has an invalid length. [ 551.204114][T17699] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 551.280582][T17705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3534'. [ 551.313617][T17705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3534'. [ 551.407224][T17710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3535'. [ 551.520519][T17709] netlink: 'syz.3.3537': attribute type 10 has an invalid length. [ 551.573037][T17715] syzkaller1: entered promiscuous mode [ 551.582683][T17715] syzkaller1: entered allmulticast mode [ 551.869307][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3542'. [ 552.151315][T17737] netlink: 'syz.3.3546': attribute type 10 has an invalid length. [ 552.163787][T17740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 552.165045][T17737] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 552.208260][T17745] netlink: 'syz.4.3549': attribute type 4 has an invalid length. [ 552.275193][T17745] netlink: 'syz.4.3549': attribute type 4 has an invalid length. [ 552.330517][T17752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3551'. [ 552.389444][T17752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3551'. [ 552.424678][T17752] vlan2: left promiscuous mode [ 552.454880][T17752] macsec0: left promiscuous mode [ 552.474926][T17752] bridge0: port 3(vlan2) entered disabled state [ 552.517934][T17752] bridge_slave_1: left allmulticast mode [ 552.546787][T17752] bridge_slave_1: left promiscuous mode [ 552.568620][T17752] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.638022][T17752] bridge_slave_0: left allmulticast mode [ 552.659182][T17752] bridge_slave_0: left promiscuous mode [ 552.682211][T17752] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.736706][T17769] xt_hashlimit: size too large, truncated to 1048576 [ 552.844648][T17752] bond0: (slave bridge0): Releasing backup interface [ 552.885503][T17772] nbd: must specify a size in bytes for the device [ 553.072112][T17770] : renamed from bond0 (while UP) [ 553.483265][ T3490] tipc: Subscription rejected, illegal request [ 553.577530][T17795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3564'. [ 553.861835][T17793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3567'. [ 554.355068][T17807] netlink: 'syz.1.3570': attribute type 4 has an invalid length. [ 554.558552][T17812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3573'. [ 556.294235][T17855] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3592'. [ 556.656350][T17861] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3595'. [ 557.037204][T17869] netlink: 'syz.4.3598': attribute type 10 has an invalid length. [ 557.055249][T17869] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.062722][T17869] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.133809][T17871] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 557.207404][T17873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3600'. [ 557.495276][T17882] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3602'. [ 557.869526][T17887] netlink: 'syz.1.3603': attribute type 16 has an invalid length. [ 557.898420][T17887] netlink: 'syz.1.3603': attribute type 17 has an invalid length. [ 558.013391][T17887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 558.170901][T17894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3606'. [ 558.378215][T17901] tipc: Enabling of bearer rejected, failed to enable media [ 558.394414][T17904] xt_CT: You must specify a L4 protocol and not use inversions on it [ 558.443483][T17905] netlink: 'syz.4.3610': attribute type 10 has an invalid length. [ 558.461252][T17905] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.472350][T17905] : (slave team0): Enslaving as an active interface with an up link [ 558.642870][T17911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3613'. [ 558.706289][T17918] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input30 [ 558.789077][T17918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3613'. [ 558.885328][T17908] lo speed is unknown, defaulting to 1000 [ 559.012993][T17908] lo speed is unknown, defaulting to 1000 [ 559.426382][T17941] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3621'. [ 559.545935][T17946] FAULT_INJECTION: forcing a failure. [ 559.545935][T17946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.579625][T17946] CPU: 1 UID: 0 PID: 17946 Comm: syz.4.3624 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 559.579660][T17946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 559.579674][T17946] Call Trace: [ 559.579682][T17946] [ 559.579692][T17946] dump_stack_lvl+0x241/0x360 [ 559.579726][T17946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.579751][T17946] ? __pfx__printk+0x10/0x10 [ 559.579775][T17946] ? __pfx_lock_release+0x10/0x10 [ 559.579817][T17946] should_fail_ex+0x40a/0x550 [ 559.579854][T17946] _copy_from_iter+0x1df/0x1c40 [ 559.579881][T17946] ? __virt_addr_valid+0x183/0x530 [ 559.579904][T17946] ? __pfx_lock_release+0x10/0x10 [ 559.579943][T17946] ? __alloc_skb+0x28f/0x440 [ 559.579964][T17946] ? __pfx__copy_from_iter+0x10/0x10 [ 559.579991][T17946] ? __virt_addr_valid+0x183/0x530 [ 559.580011][T17946] ? __virt_addr_valid+0x183/0x530 [ 559.580030][T17946] ? __virt_addr_valid+0x45f/0x530 [ 559.580052][T17946] ? __phys_addr_symbol+0x2f/0x70 [ 559.580072][T17946] ? __check_object_size+0x47a/0x730 [ 559.580107][T17946] netlink_sendmsg+0x742/0xcb0 [ 559.580152][T17946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.580187][T17946] ? aa_sock_msg_perm+0x91/0x160 [ 559.580227][T17946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.580256][T17946] __sock_sendmsg+0x221/0x270 [ 559.580290][T17946] ____sys_sendmsg+0x53a/0x860 [ 559.580323][T17946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 559.580345][T17946] ? __fget_files+0x2a/0x410 [ 559.580380][T17946] ? __fget_files+0x2a/0x410 [ 559.580420][T17946] __sys_sendmsg+0x269/0x350 [ 559.580449][T17946] ? __pfx___sys_sendmsg+0x10/0x10 [ 559.580486][T17946] ? do_sys_openat2+0x17a/0x1d0 [ 559.580542][T17946] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 559.580578][T17946] ? do_syscall_64+0x100/0x230 [ 559.580616][T17946] ? do_syscall_64+0xb6/0x230 [ 559.580645][T17946] do_syscall_64+0xf3/0x230 [ 559.580672][T17946] ? clear_bhb_loop+0x35/0x90 [ 559.580705][T17946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.580734][T17946] RIP: 0033:0x7f01f118d169 [ 559.580754][T17946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.580774][T17946] RSP: 002b:00007f01f1eff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.580797][T17946] RAX: ffffffffffffffda RBX: 00007f01f13a5fa0 RCX: 00007f01f118d169 [ 559.580814][T17946] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000003 [ 559.580828][T17946] RBP: 00007f01f1eff090 R08: 0000000000000000 R09: 0000000000000000 [ 559.580842][T17946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.580856][T17946] R13: 0000000000000000 R14: 00007f01f13a5fa0 R15: 00007ffca9e77608 [ 559.580887][T17946] [ 559.583031][T17908] lo speed is unknown, defaulting to 1000 [ 559.952334][T17953] netlink: 'syz.2.3627': attribute type 16 has an invalid length. [ 559.960528][T17953] netlink: 'syz.2.3627': attribute type 17 has an invalid length. [ 559.976022][T17953] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 560.055677][T17958] xt_CT: You must specify a L4 protocol and not use inversions on it [ 560.084460][T17955] : (slave bridge0): Releasing backup interface [ 560.114750][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 560.185058][T17955] : (slave team0): Releasing backup interface [ 560.217161][T17955] bridge_slave_0: left allmulticast mode [ 560.222870][T17955] bridge_slave_0: left promiscuous mode [ 560.246899][T17955] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.298360][T17955] bridge_slave_1: left allmulticast mode [ 560.304492][T17955] bridge_slave_1: left promiscuous mode [ 560.310270][T17955] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.430937][T17955] : (slave bond_slave_0): Releasing backup interface [ 560.440080][T17969] netlink: 'syz.0.3632': attribute type 11 has an invalid length. [ 560.521342][T17955] : (slave bond_slave_1): Releasing backup interface [ 560.564513][T17973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 560.618596][T17955] team0: Port device team_slave_0 removed [ 560.646038][T17955] team0: Port device team_slave_1 removed [ 560.652585][T17955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.704703][T17955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.729748][T17955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.737637][T17955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.997740][T17982] xt_CT: No such helper "syz0" [ 561.115243][T17988] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3637'. [ 561.159773][T17988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3637'. [ 561.182577][T17988] netlink: 'syz.4.3637': attribute type 6 has an invalid length. [ 561.699492][T17999] lo speed is unknown, defaulting to 1000 [ 561.730842][T17999] lo speed is unknown, defaulting to 1000 [ 561.756360][T18002] team0: No ports can be present during mode change [ 561.970024][T18006] FAULT_INJECTION: forcing a failure. [ 561.970024][T18006] name failslab, interval 1, probability 0, space 0, times 0 [ 562.024486][T18006] CPU: 0 UID: 0 PID: 18006 Comm: syz.2.3645 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 562.024520][T18006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 562.024538][T18006] Call Trace: [ 562.024547][T18006] [ 562.024557][T18006] dump_stack_lvl+0x241/0x360 [ 562.024590][T18006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.024615][T18006] ? __pfx__printk+0x10/0x10 [ 562.024652][T18006] should_fail_ex+0x40a/0x550 [ 562.024690][T18006] should_failslab+0xac/0x100 [ 562.024722][T18006] __kmalloc_cache_noprof+0x70/0x390 [ 562.024752][T18006] ? sctp_add_bind_addr+0x89/0x3a0 [ 562.024783][T18006] sctp_add_bind_addr+0x89/0x3a0 [ 562.024814][T18006] sctp_copy_local_addr_list+0x311/0x500 [ 562.024843][T18006] ? sctp_copy_local_addr_list+0xab/0x500 [ 562.024870][T18006] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 562.024899][T18006] ? sctp_v6_is_any+0x60/0x70 [ 562.024928][T18006] ? sctp_copy_one_addr+0x94/0x360 [ 562.024960][T18006] sctp_bind_addr_copy+0xad/0x3b0 [ 562.024987][T18006] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 562.025028][T18006] sctp_connect_new_asoc+0x2f3/0x6c0 [ 562.025064][T18006] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 562.025094][T18006] ? sctp_sendmsg+0xf1a/0x35d0 [ 562.025131][T18006] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 562.025161][T18006] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 562.025196][T18006] sctp_sendmsg+0x1f64/0x35d0 [ 562.025247][T18006] ? __pfx_sctp_sendmsg+0x10/0x10 [ 562.025282][T18006] ? aa_sk_perm+0x96d/0xab0 [ 562.025331][T18006] ? inet_sendmsg+0x330/0x390 [ 562.025361][T18006] __sock_sendmsg+0x1a6/0x270 [ 562.025395][T18006] __sys_sendto+0x363/0x4c0 [ 562.025423][T18006] ? __pfx___sys_sendto+0x10/0x10 [ 562.025460][T18006] ? __fget_files+0x2a/0x410 [ 562.025509][T18006] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 562.025546][T18006] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 562.025587][T18006] __x64_sys_sendto+0xde/0x100 [ 562.025612][T18006] do_syscall_64+0xf3/0x230 [ 562.025640][T18006] ? clear_bhb_loop+0x35/0x90 [ 562.025675][T18006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.025704][T18006] RIP: 0033:0x7f1e4878d169 [ 562.025724][T18006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.025742][T18006] RSP: 002b:00007f1e49543038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 562.025766][T18006] RAX: ffffffffffffffda RBX: 00007f1e489a5fa0 RCX: 00007f1e4878d169 [ 562.025782][T18006] RDX: 0000000000000001 RSI: 0000400000000240 RDI: 0000000000000005 [ 562.025796][T18006] RBP: 00007f1e49543090 R08: 0000400000000080 R09: 000000000000001c [ 562.025810][T18006] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 562.025824][T18006] R13: 0000000000000000 R14: 00007f1e489a5fa0 R15: 00007ffc7726dea8 [ 562.025856][T18006] [ 562.117181][T18010] __nla_validate_parse: 1 callbacks suppressed [ 562.117205][T18010] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3646'. [ 562.181394][T17999] lo speed is unknown, defaulting to 1000 [ 562.225666][T18012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3647'. [ 562.430071][T18012] ip6tnl2: entered promiscuous mode [ 562.466545][T18012] ip6tnl2: entered allmulticast mode [ 562.720988][T18025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3646'. [ 562.787874][T18027] xt_CT: You must specify a L4 protocol and not use inversions on it [ 563.037987][T18034] xt_CT: You must specify a L4 protocol and not use inversions on it [ 563.095109][T17999] xt_HMARK: spi-set and port-set can't be combined [ 563.155003][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.499276][T18045] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 563.585752][T18044] bridge_slave_0: left allmulticast mode [ 563.592579][T18044] bridge_slave_0: left promiscuous mode [ 563.605153][T18044] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.660616][T18044] bridge_slave_1: left allmulticast mode [ 563.666757][T18044] bridge_slave_1: left promiscuous mode [ 563.672630][T18044] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.708518][T18044] bond0: (slave bond_slave_0): Releasing backup interface [ 563.718785][T18044] bond0: (slave bond_slave_1): Releasing backup interface [ 563.764802][T18044] team0: Failed to send options change via netlink (err -105) [ 563.787226][T18044] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 563.818702][T18044] team0: Port device team_slave_0 removed [ 563.827963][T18044] team0: Failed to send options change via netlink (err -105) [ 563.854482][T18044] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 563.884571][T18044] team0: Port device team_slave_1 removed [ 563.890869][T18044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.359363][T18072] lo speed is unknown, defaulting to 1000 [ 564.380770][T18072] lo speed is unknown, defaulting to 1000 [ 564.381149][T18075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3668'. [ 564.407697][T18078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3670'. [ 564.414992][T18075] netlink: 'syz.4.3668': attribute type 10 has an invalid length. [ 564.446478][T18075] : (slave bridge0): Enslaving as an active interface with an up link [ 564.475305][T18080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3668'. [ 564.549573][T18080] : (slave bridge0): Releasing backup interface [ 564.605735][T18083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 564.859082][T18090] netlink: 'syz.4.3674': attribute type 1 has an invalid length. [ 564.875292][T18091] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 564.899318][T18090] netlink: 'syz.4.3674': attribute type 1 has an invalid length. [ 564.945893][T18072] lo speed is unknown, defaulting to 1000 [ 565.104179][T18102] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3676'. [ 565.439068][T18113] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input31 [ 565.590559][T18120] netlink: 'syz.1.3682': attribute type 16 has an invalid length. [ 565.615924][T18072] xt_HMARK: spi-set and port-set can't be combined [ 565.642362][T18120] netlink: 'syz.1.3682': attribute type 17 has an invalid length. [ 565.756510][T18120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 565.763592][T18122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3683'. [ 565.841487][T18122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3683'. [ 566.059205][T18128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3685'. [ 566.359120][T18131] xt_socket: unknown flags 0x4 [ 567.038708][T18158] lo speed is unknown, defaulting to 1000 [ 567.115482][T18158] lo speed is unknown, defaulting to 1000 [ 567.221204][T18167] netlink: 'syz.0.3696': attribute type 16 has an invalid length. [ 567.240177][T18167] netlink: 'syz.0.3696': attribute type 17 has an invalid length. [ 567.298930][T18167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.843341][T18158] lo speed is unknown, defaulting to 1000 [ 568.217467][T18187] __nla_validate_parse: 5 callbacks suppressed [ 568.217493][T18187] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3703'. [ 568.269381][T18187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3703'. [ 568.312300][T18158] xt_HMARK: spi-set and port-set can't be combined [ 568.364521][T18189] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3704'. [ 569.052008][T18202] mac80211_hwsim hwsim113 wlan0: entered promiscuous mode [ 569.076621][T18202] macsec1: entered promiscuous mode [ 569.092522][T18202] macsec1: entered allmulticast mode [ 569.122322][T18202] mac80211_hwsim hwsim113 wlan0: entered allmulticast mode [ 569.277269][T18223] FAULT_INJECTION: forcing a failure. [ 569.277269][T18223] name failslab, interval 1, probability 0, space 0, times 0 [ 569.336013][T18223] CPU: 0 UID: 0 PID: 18223 Comm: syz.1.3713 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 569.336047][T18223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 569.336060][T18223] Call Trace: [ 569.336069][T18223] [ 569.336078][T18223] dump_stack_lvl+0x241/0x360 [ 569.336110][T18223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.336134][T18223] ? __pfx__printk+0x10/0x10 [ 569.336172][T18223] should_fail_ex+0x40a/0x550 [ 569.336209][T18223] should_failslab+0xac/0x100 [ 569.336241][T18223] __kmalloc_cache_noprof+0x70/0x390 [ 569.336270][T18223] ? sctp_add_bind_addr+0x89/0x3a0 [ 569.336302][T18223] sctp_add_bind_addr+0x89/0x3a0 [ 569.336332][T18223] sctp_copy_local_addr_list+0x311/0x500 [ 569.336361][T18223] ? sctp_copy_local_addr_list+0xab/0x500 [ 569.336389][T18223] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 569.336419][T18223] ? sctp_v6_is_any+0x60/0x70 [ 569.336449][T18223] ? sctp_copy_one_addr+0x94/0x360 [ 569.336480][T18223] sctp_bind_addr_copy+0xad/0x3b0 [ 569.336506][T18223] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 569.336547][T18223] sctp_connect_new_asoc+0x2f3/0x6c0 [ 569.336582][T18223] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 569.336613][T18223] ? sctp_sendmsg+0xf1a/0x35d0 [ 569.336649][T18223] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 569.336678][T18223] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 569.336712][T18223] sctp_sendmsg+0x1f64/0x35d0 [ 569.336763][T18223] ? __pfx_sctp_sendmsg+0x10/0x10 [ 569.336798][T18223] ? aa_sk_perm+0x96d/0xab0 [ 569.336847][T18223] ? inet_sendmsg+0x330/0x390 [ 569.336877][T18223] __sock_sendmsg+0x1a6/0x270 [ 569.336911][T18223] __sys_sendto+0x363/0x4c0 [ 569.336938][T18223] ? __pfx___sys_sendto+0x10/0x10 [ 569.336982][T18223] ? __fget_files+0x2a/0x410 [ 569.337028][T18223] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 569.337065][T18223] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 569.337106][T18223] __x64_sys_sendto+0xde/0x100 [ 569.337132][T18223] do_syscall_64+0xf3/0x230 [ 569.337159][T18223] ? clear_bhb_loop+0x35/0x90 [ 569.337193][T18223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.337222][T18223] RIP: 0033:0x7f23a498d169 [ 569.337242][T18223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.337261][T18223] RSP: 002b:00007f23a5760038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 569.337284][T18223] RAX: ffffffffffffffda RBX: 00007f23a4ba5fa0 RCX: 00007f23a498d169 [ 569.337301][T18223] RDX: 0000000000000001 RSI: 0000400000000240 RDI: 0000000000000005 [ 569.337316][T18223] RBP: 00007f23a5760090 R08: 0000400000000080 R09: 000000000000001c [ 569.337331][T18223] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 569.337344][T18223] R13: 0000000000000000 R14: 00007f23a4ba5fa0 R15: 00007fff0b9de478 [ 569.337378][T18223] [ 569.793081][T18229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3715'. [ 569.904326][T18231] lo speed is unknown, defaulting to 1000 [ 569.940655][T18235] xt_socket: unknown flags 0x4 [ 569.956722][T18231] lo speed is unknown, defaulting to 1000 [ 569.967052][T18236] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3718'. [ 570.491282][T18231] lo speed is unknown, defaulting to 1000 [ 570.923966][T18231] xt_HMARK: spi-set and port-set can't be combined [ 571.504807][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3731'. [ 571.527166][T18275] xt_hashlimit: max too large, truncated to 1048576 [ 571.537207][T18275] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 571.563068][T18275] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3732'. [ 571.748650][T18260] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.764129][T18260] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.791001][T18260] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.811265][T18260] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.838975][T18282] xt_socket: unknown flags 0x4 [ 571.872391][T18260] mac80211_hwsim hwsim113 wlan0: left allmulticast mode [ 571.921637][T18256] 8021q: adding VLAN 0 to HW filter on device  [ 571.931812][T18256] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.945848][T18256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.017442][T18271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3730'. [ 572.065557][T18285] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3733'. [ 572.247091][T18290] netlink: 'syz.0.3735': attribute type 10 has an invalid length. [ 572.368969][T18293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3736'. [ 572.431315][T18297] lo speed is unknown, defaulting to 1000 [ 572.452341][T18297] lo speed is unknown, defaulting to 1000 [ 573.035648][T18318] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 573.051068][T18318] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 573.266997][T18297] lo speed is unknown, defaulting to 1000 [ 573.455862][T18327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3747'. [ 573.469105][T18328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3746'. [ 573.747961][T18297] xt_HMARK: spi-set and port-set can't be combined [ 573.788341][T18334] trusted_key: syz.2.3749 sent an empty control message without MSG_MORE. [ 573.826055][T18334] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3749'. [ 573.832135][T18337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3750'. [ 574.092139][T18341] FAULT_INJECTION: forcing a failure. [ 574.092139][T18341] name failslab, interval 1, probability 0, space 0, times 0 [ 574.143343][T18341] CPU: 1 UID: 0 PID: 18341 Comm: syz.2.3752 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 574.143378][T18341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 574.143392][T18341] Call Trace: [ 574.143401][T18341] [ 574.143411][T18341] dump_stack_lvl+0x241/0x360 [ 574.143445][T18341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.143469][T18341] ? __pfx__printk+0x10/0x10 [ 574.143506][T18341] should_fail_ex+0x40a/0x550 [ 574.143545][T18341] should_failslab+0xac/0x100 [ 574.143575][T18341] __kmalloc_cache_noprof+0x70/0x390 [ 574.143606][T18341] ? sctp_add_bind_addr+0x89/0x3a0 [ 574.143636][T18341] sctp_add_bind_addr+0x89/0x3a0 [ 574.143668][T18341] sctp_copy_local_addr_list+0x311/0x500 [ 574.143697][T18341] ? sctp_copy_local_addr_list+0xab/0x500 [ 574.143725][T18341] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 574.143755][T18341] ? sctp_v6_is_any+0x60/0x70 [ 574.143784][T18341] ? sctp_copy_one_addr+0x94/0x360 [ 574.143819][T18341] sctp_bind_addr_copy+0xad/0x3b0 [ 574.143844][T18341] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 574.143890][T18341] sctp_connect_new_asoc+0x2f3/0x6c0 [ 574.143924][T18341] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 574.143953][T18341] ? sctp_sendmsg+0xf1a/0x35d0 [ 574.143987][T18341] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 574.144017][T18341] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 574.144051][T18341] sctp_sendmsg+0x1f64/0x35d0 [ 574.144102][T18341] ? __pfx_sctp_sendmsg+0x10/0x10 [ 574.144137][T18341] ? aa_sk_perm+0x96d/0xab0 [ 574.144186][T18341] ? inet_sendmsg+0x330/0x390 [ 574.144216][T18341] __sock_sendmsg+0x1a6/0x270 [ 574.144250][T18341] __sys_sendto+0x363/0x4c0 [ 574.144278][T18341] ? __pfx___sys_sendto+0x10/0x10 [ 574.144315][T18341] ? __fget_files+0x2a/0x410 [ 574.144356][T18341] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 574.144393][T18341] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 574.144434][T18341] __x64_sys_sendto+0xde/0x100 [ 574.144459][T18341] do_syscall_64+0xf3/0x230 [ 574.144487][T18341] ? clear_bhb_loop+0x35/0x90 [ 574.144521][T18341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.144551][T18341] RIP: 0033:0x7f1e4878d169 [ 574.144571][T18341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.144589][T18341] RSP: 002b:00007f1e49543038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 574.144612][T18341] RAX: ffffffffffffffda RBX: 00007f1e489a5fa0 RCX: 00007f1e4878d169 [ 574.144628][T18341] RDX: 0000000000000001 RSI: 0000400000000240 RDI: 0000000000000005 [ 574.144643][T18341] RBP: 00007f1e49543090 R08: 0000400000000080 R09: 000000000000001c [ 574.144658][T18341] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 574.144671][T18341] R13: 0000000000000000 R14: 00007f1e489a5fa0 R15: 00007ffc7726dea8 [ 574.144705][T18341] [ 574.758283][T18352] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 574.809143][T18347] lo speed is unknown, defaulting to 1000 [ 574.845307][T18347] lo speed is unknown, defaulting to 1000 [ 574.969495][T18355] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3757'. [ 575.132802][T18361] team0: No ports can be present during mode change [ 575.195487][T18347] lo speed is unknown, defaulting to 1000 [ 575.576582][T18375] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 575.695808][T18377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3764'. [ 575.766444][T18380] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input32 [ 575.877616][T18385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3764'. [ 576.067160][T18396] netlink: zone id is out of range [ 576.108642][T18396] netlink: zone id is out of range [ 576.141758][T18396] netlink: zone id is out of range [ 576.151612][T18396] netlink: zone id is out of range [ 576.167499][T18396] netlink: zone id is out of range [ 576.183141][T18396] netlink: zone id is out of range [ 576.198576][T18396] netlink: zone id is out of range [ 576.215064][T18396] netlink: zone id is out of range [ 576.864908][T18410] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3772'. [ 577.009919][T18417] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3776'. [ 577.178989][T18426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3780'. [ 577.216452][T18432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 577.256916][T18433] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input33 [ 577.322889][T18437] xt_hashlimit: max too large, truncated to 1048576 [ 577.331358][T18437] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 577.747217][T18457] netlink: 'syz.4.3785': attribute type 10 has an invalid length. [ 577.886487][T18464] team0: No ports can be present during mode change [ 578.539253][T18483] netlink: 'syz.0.3796': attribute type 1 has an invalid length. [ 578.553343][T18483] __nla_validate_parse: 3 callbacks suppressed [ 578.553364][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3796'. [ 578.630551][T18487] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3798'. [ 579.127998][T18498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.128347][T18499] SET target dimension over the limit! [ 579.163608][T18498] batadv_slave_1: entered promiscuous mode [ 579.395889][T18507] xt_hashlimit: max too large, truncated to 1048576 [ 579.403529][T18507] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 579.447943][T18510] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3805'. [ 579.515731][T18515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3808'. [ 579.934420][T18529] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 579.944174][T18529] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 580.216305][T18539] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 580.245090][T18542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3817'. [ 580.266294][T18542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3817'. [ 580.671105][T18558] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3824'. [ 580.683629][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3822'. [ 580.754881][T18560] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input34 [ 580.868418][T18567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3822'. [ 580.971977][T18570] xt_hashlimit: max too large, truncated to 1048576 [ 581.015061][T18570] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 581.106031][T18574] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3827'. [ 581.653453][T18594] lo speed is unknown, defaulting to 1000 [ 581.698577][T18594] lo speed is unknown, defaulting to 1000 [ 581.898057][T18607] netlink: 'syz.2.3839': attribute type 10 has an invalid length. [ 582.275366][T18594] lo speed is unknown, defaulting to 1000 [ 582.653344][T18631] netlink: 'syz.2.3849': attribute type 10 has an invalid length. [ 582.725251][T18631] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 583.747091][T18671] Bluetooth: MGMT ver 1.23 [ 584.130091][T18683] netlink: 'syz.3.3869': attribute type 4 has an invalid length. [ 584.202321][T18683] netlink: 'syz.3.3869': attribute type 4 has an invalid length. [ 584.207970][T18690] __nla_validate_parse: 6 callbacks suppressed [ 584.207994][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3872'. [ 584.267111][T18690] netlink: 'syz.4.3872': attribute type 6 has an invalid length. [ 584.328991][T18692] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3873'. [ 584.741225][T18715] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 584.775577][T18715] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 584.801050][T18721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3881'. [ 584.807867][T18720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3883'. [ 584.978830][T18727] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3884'. [ 585.450318][T18742] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3891'. [ 585.525063][T18746] netlink: 'syz.4.3893': attribute type 10 has an invalid length. [ 585.533096][T18746] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3893'. [ 585.542223][T18746] team0: entered promiscuous mode [ 585.737569][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3896'. [ 585.792225][T18756] netlink: 'syz.3.3894': attribute type 10 has an invalid length. [ 585.848257][T18755] lo speed is unknown, defaulting to 1000 [ 585.857136][T18756] syz_tun: entered promiscuous mode [ 585.890939][T18756] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 585.925598][T18755] lo speed is unknown, defaulting to 1000 [ 585.952889][T18762] netlink: 'syz.0.3898': attribute type 10 has an invalid length. [ 585.973692][T18764] lo speed is unknown, defaulting to 1000 [ 586.284519][T18755] lo speed is unknown, defaulting to 1000 [ 586.292685][T18764] lo speed is unknown, defaulting to 1000 [ 586.359826][T18777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3903'. [ 586.558044][T18786] xt_socket: unknown flags 0x4 [ 586.836165][T18794] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3907'. [ 587.048324][T18764] lo speed is unknown, defaulting to 1000 [ 587.350182][T18806] netlink: 'syz.1.3895': attribute type 11 has an invalid length. [ 587.362858][T18806] netlink: 'syz.1.3895': attribute type 5 has an invalid length. [ 587.432796][T18765] lo speed is unknown, defaulting to 1000 [ 587.455999][T18765] lo speed is unknown, defaulting to 1000 [ 587.730533][T18765] lo speed is unknown, defaulting to 1000 [ 587.881798][T18831] xt_socket: unknown flags 0x4 [ 587.899863][T18826] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 587.934801][T18826] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 588.172720][T18835] bridge0: entered allmulticast mode [ 588.615988][T18844] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.637112][T18846] net_ratelimit: 76 callbacks suppressed [ 588.637132][T18846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 588.670077][T18857] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input35 [ 588.860889][T18844] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.896422][T18861] netlink: 'syz.4.3927': attribute type 10 has an invalid length. [ 589.016611][T18844] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.217748][T18844] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.372396][T18869] __nla_validate_parse: 7 callbacks suppressed [ 589.372418][T18869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3931'. [ 589.498273][T18844] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.555762][T18844] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.607412][T18844] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.616392][T18881] netlink: 'syz.4.3933': attribute type 10 has an invalid length. [ 589.624906][ T5857] Bluetooth: hci0: command 0x0405 tx timeout [ 589.646929][T18844] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.660946][T18883] xt_socket: unknown flags 0x4 [ 589.709931][T18880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3934'. [ 589.870808][T18888] xt_CT: You must specify a L4 protocol and not use inversions on it [ 589.881726][T18880] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3934'. [ 589.943168][T18889] FAULT_INJECTION: forcing a failure. [ 589.943168][T18889] name failslab, interval 1, probability 0, space 0, times 0 [ 589.955997][T18889] CPU: 0 UID: 0 PID: 18889 Comm: syz.3.3937 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 589.956024][T18889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 589.956037][T18889] Call Trace: [ 589.956045][T18889] [ 589.956055][T18889] dump_stack_lvl+0x241/0x360 [ 589.956086][T18889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.956110][T18889] ? __pfx__printk+0x10/0x10 [ 589.956140][T18889] ? __pfx_lock_acquire+0x10/0x10 [ 589.956173][T18889] should_fail_ex+0x40a/0x550 [ 589.956210][T18889] should_failslab+0xac/0x100 [ 589.956240][T18889] kmem_cache_alloc_bulk_noprof+0x7d/0x7c0 [ 589.956277][T18889] ? pfn_valid+0xf6/0x450 [ 589.956306][T18889] ? pfn_valid+0xf6/0x450 [ 589.956339][T18889] bpf_test_run_xdp_live+0x1a05/0x2220 [ 589.956369][T18889] ? __pfx_lock_release+0x10/0x10 [ 589.956441][T18889] ? bpf_test_run_xdp_live+0x5d6/0x2220 [ 589.956477][T18889] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 589.956506][T18889] ? synchronize_rcu+0x11b/0x360 [ 589.956532][T18889] ? __pfx_synchronize_rcu+0x10/0x10 [ 589.956581][T18889] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 589.956638][T18889] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 589.956686][T18889] ? _copy_from_user+0x95/0xb0 [ 589.956715][T18889] ? bpf_test_init+0x137/0x160 [ 589.956741][T18889] ? xdp_convert_md_to_buff+0x5b/0x330 [ 589.956773][T18889] bpf_prog_test_run_xdp+0x805/0x11e0 [ 589.956817][T18889] ? __pfx_lock_release+0x10/0x10 [ 589.956857][T18889] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 589.956888][T18889] ? __fget_files+0x2a/0x410 [ 589.956921][T18889] ? __fget_files+0x2a/0x410 [ 589.956955][T18889] ? fput+0x21b/0x290 [ 589.956984][T18889] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 589.957015][T18889] bpf_prog_test_run+0x2e4/0x360 [ 589.957049][T18889] __sys_bpf+0x487/0x820 [ 589.957081][T18889] ? __pfx___sys_bpf+0x10/0x10 [ 589.957125][T18889] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 589.957160][T18889] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 589.957193][T18889] ? do_syscall_64+0x100/0x230 [ 589.957224][T18889] __x64_sys_bpf+0x7c/0x90 [ 589.957251][T18889] do_syscall_64+0xf3/0x230 [ 589.957275][T18889] ? clear_bhb_loop+0x35/0x90 [ 589.957308][T18889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.957335][T18889] RIP: 0033:0x7f79fa58d169 [ 589.957353][T18889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.957370][T18889] RSP: 002b:00007f79fb3eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 589.957392][T18889] RAX: ffffffffffffffda RBX: 00007f79fa7a5fa0 RCX: 00007f79fa58d169 [ 589.957407][T18889] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 589.957421][T18889] RBP: 00007f79fb3eb090 R08: 0000000000000000 R09: 0000000000000000 [ 589.957433][T18889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 589.957445][T18889] R13: 0000000000000000 R14: 00007f79fa7a5fa0 R15: 00007fff8756ece8 [ 589.957477][T18889] [ 590.519482][T18908] Cannot find del_set index 2 as target [ 590.606894][T18913] netlink: 'syz.3.3948': attribute type 10 has an invalid length. [ 590.808097][T18920] xt_CT: No such helper "syz0" [ 591.029731][T18933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3954'. [ 591.178377][T18939] FAULT_INJECTION: forcing a failure. [ 591.178377][T18939] name failslab, interval 1, probability 0, space 0, times 0 [ 591.218111][T18939] CPU: 1 UID: 0 PID: 18939 Comm: syz.2.3957 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 591.218144][T18939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 591.218156][T18939] Call Trace: [ 591.218165][T18939] [ 591.218174][T18939] dump_stack_lvl+0x241/0x360 [ 591.218203][T18939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.218227][T18939] ? __pfx__printk+0x10/0x10 [ 591.218250][T18939] ? fs_reclaim_acquire+0x93/0x130 [ 591.218272][T18939] ? __pfx___might_resched+0x10/0x10 [ 591.218297][T18939] ? dynamic_dname+0x144/0x1b0 [ 591.218320][T18939] should_fail_ex+0x40a/0x550 [ 591.218355][T18939] should_failslab+0xac/0x100 [ 591.218383][T18939] __kmalloc_noprof+0xdd/0x4c0 [ 591.218408][T18939] ? tomoyo_encode+0x26f/0x540 [ 591.218431][T18939] tomoyo_encode+0x26f/0x540 [ 591.218451][T18939] ? __pfx_sockfs_dname+0x10/0x10 [ 591.218482][T18939] tomoyo_realpath_from_path+0x59e/0x5e0 [ 591.218514][T18939] tomoyo_path_number_perm+0x239/0x770 [ 591.218542][T18939] ? __lock_acquire+0x1397/0x2100 [ 591.218574][T18939] ? tomoyo_path_number_perm+0x209/0x770 [ 591.218604][T18939] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 591.218671][T18939] ? __fget_files+0x2a/0x410 [ 591.218703][T18939] ? __fget_files+0x2a/0x410 [ 591.218746][T18939] security_file_ioctl+0xc6/0x2a0 [ 591.218774][T18939] __se_sys_ioctl+0x46/0x170 [ 591.218799][T18939] do_syscall_64+0xf3/0x230 [ 591.218824][T18939] ? clear_bhb_loop+0x35/0x90 [ 591.218855][T18939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.218882][T18939] RIP: 0033:0x7f1e4878d169 [ 591.218900][T18939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.218917][T18939] RSP: 002b:00007f1e49543038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 591.218939][T18939] RAX: ffffffffffffffda RBX: 00007f1e489a5fa0 RCX: 00007f1e4878d169 [ 591.218954][T18939] RDX: 00004000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 591.218967][T18939] RBP: 00007f1e49543090 R08: 0000000000000000 R09: 0000000000000000 [ 591.218980][T18939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.218993][T18939] R13: 0000000000000000 R14: 00007f1e489a5fa0 R15: 00007ffc7726dea8 [ 591.219023][T18939] [ 591.219040][T18939] ERROR: Out of memory at tomoyo_realpath_from_path. [ 591.244590][T18943] FAULT_INJECTION: forcing a failure. [ 591.244590][T18943] name failslab, interval 1, probability 0, space 0, times 0 [ 591.421337][T18943] CPU: 0 UID: 0 PID: 18943 Comm: syz.1.3958 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 591.421368][T18943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 591.421382][T18943] Call Trace: [ 591.421390][T18943] [ 591.421400][T18943] dump_stack_lvl+0x241/0x360 [ 591.421433][T18943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.421459][T18943] ? __pfx__printk+0x10/0x10 [ 591.421500][T18943] should_fail_ex+0x40a/0x550 [ 591.421537][T18943] should_failslab+0xac/0x100 [ 591.421569][T18943] __kmalloc_cache_noprof+0x70/0x390 [ 591.421606][T18943] ? sctp_add_bind_addr+0x89/0x3a0 [ 591.421662][T18943] sctp_add_bind_addr+0x89/0x3a0 [ 591.421701][T18943] sctp_copy_local_addr_list+0x311/0x500 [ 591.421733][T18943] ? sctp_copy_local_addr_list+0xab/0x500 [ 591.421762][T18943] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 591.421794][T18943] ? sctp_v6_is_any+0x60/0x70 [ 591.421826][T18943] ? sctp_copy_one_addr+0x94/0x360 [ 591.421859][T18943] sctp_bind_addr_copy+0xad/0x3b0 [ 591.421886][T18943] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 591.421929][T18943] sctp_connect_new_asoc+0x2f3/0x6c0 [ 591.421967][T18943] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 591.421999][T18943] ? sctp_sendmsg+0xf1a/0x35d0 [ 591.422038][T18943] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 591.422070][T18943] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 591.422106][T18943] sctp_sendmsg+0x1f64/0x35d0 [ 591.422159][T18943] ? __pfx_sctp_sendmsg+0x10/0x10 [ 591.422196][T18943] ? aa_sk_perm+0x96d/0xab0 [ 591.422248][T18943] ? inet_sendmsg+0x330/0x390 [ 591.422281][T18943] __sock_sendmsg+0x1a6/0x270 [ 591.422316][T18943] __sys_sendto+0x363/0x4c0 [ 591.422345][T18943] ? __pfx___sys_sendto+0x10/0x10 [ 591.422383][T18943] ? __fget_files+0x2a/0x410 [ 591.422427][T18943] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 591.422466][T18943] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 591.422507][T18943] __x64_sys_sendto+0xde/0x100 [ 591.422535][T18943] do_syscall_64+0xf3/0x230 [ 591.422564][T18943] ? clear_bhb_loop+0x35/0x90 [ 591.422600][T18943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.422631][T18943] RIP: 0033:0x7f23a498d169 [ 591.422652][T18943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.422672][T18943] RSP: 002b:00007f23a5760038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 591.422703][T18943] RAX: ffffffffffffffda RBX: 00007f23a4ba5fa0 RCX: 00007f23a498d169 [ 591.422720][T18943] RDX: 0000000000000001 RSI: 0000400000000240 RDI: 0000000000000005 [ 591.422735][T18943] RBP: 00007f23a5760090 R08: 0000400000000080 R09: 000000000000001c [ 591.422751][T18943] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 591.422765][T18943] R13: 0000000000000000 R14: 00007f23a4ba5fa0 R15: 00007fff0b9de478 [ 591.422801][T18943] [ 591.771830][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3962'. [ 591.780928][T18957] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3962'. [ 591.874994][T18954] netlink: 'syz.0.3960': attribute type 2 has an invalid length. [ 591.904101][T18954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3960'. [ 592.057388][T18964] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 592.095397][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3967'. [ 592.178523][T18967] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input36 [ 592.255247][T18967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3967'. [ 592.393270][T18972] team0: left promiscuous mode [ 592.406530][T18980] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:0 [ 592.469698][T18972] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 592.483446][T18972] ip6tnl1: left promiscuous mode [ 592.491209][T18972] ip6tnl1: left allmulticast mode [ 592.497431][T18972] macsec1: left promiscuous mode [ 592.503066][T18972] macsec1: left allmulticast mode [ 592.639255][T18989] Cannot find del_set index 2 as target [ 592.674324][ T5857] Bluetooth: hci0: command 0x0405 tx timeout [ 592.874900][T18993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3974'. [ 593.136791][T19010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 593.287966][T19015] xt_CT: You must specify a L4 protocol and not use inversions on it [ 593.363590][T19018] netlink: 'syz.0.3985': attribute type 16 has an invalid length. [ 593.505171][T19022] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 593.635444][T19029] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input37 [ 593.946351][T19039] netlink: 'syz.2.3993': attribute type 9 has an invalid length. [ 594.186778][T19043] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 594.236591][T19043] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 594.341131][T19049] bridge0: port 2(bridge_slave_1) entered listening state [ 594.366446][T19049] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.376366][T19054] netlink: 'syz.3.3998': attribute type 16 has an invalid length. [ 594.405658][T19057] Cannot find del_set index 2 as target [ 594.522018][T19061] __nla_validate_parse: 7 callbacks suppressed [ 594.522042][T19061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4000'. [ 594.552155][T19065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 594.565096][T19061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4000'. [ 594.574495][T19061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4000'. [ 595.205526][T19095] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 595.307495][T19099] vlan2: entered allmulticast mode [ 595.312707][T19099] hsr0: entered allmulticast mode [ 595.336430][T19099] hsr_slave_0: entered allmulticast mode [ 595.355649][T19099] hsr_slave_1: entered allmulticast mode [ 595.375337][T19099] hsr0: left allmulticast mode [ 595.380190][T19099] hsr_slave_0: left allmulticast mode [ 595.396214][T19099] hsr_slave_1: left allmulticast mode [ 595.427181][T19104] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 595.467004][T19110] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4016'. [ 595.577568][T19105] netlink: 'syz.1.4014': attribute type 12 has an invalid length. [ 595.592830][T19105] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4014'. [ 595.659528][T19099] netlink: 'syz.1.4014': attribute type 12 has an invalid length. [ 595.668465][T19099] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4014'. [ 595.807231][T19120] xt_hashlimit: max too large, truncated to 1048576 [ 595.830969][T19120] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 595.868865][T19123] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4019'. [ 596.223610][T19133] Cannot find del_set index 2 as target [ 596.364830][T19143] netlink: 'syz.4.4026': attribute type 16 has an invalid length. [ 596.405018][T19142] lo speed is unknown, defaulting to 1000 [ 596.416286][T19142] lo speed is unknown, defaulting to 1000 [ 596.455689][T19146] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4030'. [ 596.527791][T19148] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 596.542078][T19146] lo speed is unknown, defaulting to 1000 [ 596.557376][T19150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4032'. [ 596.580642][T19151] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4031'. [ 596.657219][T19153] xt_socket: unknown flags 0x4 [ 596.862525][T19146] lo speed is unknown, defaulting to 1000 [ 596.884634][T19142] lo speed is unknown, defaulting to 1000 [ 597.157875][T19146] lo speed is unknown, defaulting to 1000 [ 597.198747][T19164] xt_CT: No such helper "syz0" [ 598.236699][T19194] xt_CT: No such helper "syz0" [ 598.312612][T19202] xt_CT: You must specify a L4 protocol and not use inversions on it [ 598.907505][T19231] netlink: 'syz.0.4058': attribute type 10 has an invalid length. [ 599.117620][T19226] netlink: 'syz.4.4052': attribute type 15 has an invalid length. [ 599.135195][T19231] team0: entered promiscuous mode [ 599.140562][T19231] team_slave_0: entered promiscuous mode [ 599.163698][T19231] team_slave_1: entered promiscuous mode [ 599.319516][T19237] tipc: Started in network mode [ 599.334143][T19237] tipc: Node identity f2698a6cb4ae, cluster identity 4711 [ 599.345683][T19237] tipc: Enabled bearer , priority 0 [ 599.656164][ T35] tipc: Resetting bearer [ 599.662512][T19248] tipc: Enabling of bearer rejected, failed to enable media [ 599.671210][T19251] lo speed is unknown, defaulting to 1000 [ 599.679558][T19251] lo speed is unknown, defaulting to 1000 [ 599.867556][T19222] tipc: Resetting bearer [ 600.438031][ T5949] tipc: Node number set to 1187482220 [ 602.858895][T19222] tipc: Disabling bearer [ 602.868393][T19251] lo speed is unknown, defaulting to 1000 [ 602.900899][T19252] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 602.902255][T19251] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 602.915817][T19269] __nla_validate_parse: 3 callbacks suppressed [ 602.915841][T19269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4068'. [ 602.960626][T19251] lo speed is unknown, defaulting to 1000 [ 603.002763][T19251] lo speed is unknown, defaulting to 1000 [ 603.025327][T19251] lo speed is unknown, defaulting to 1000 [ 603.045087][T19251] lo speed is unknown, defaulting to 1000 [ 603.055886][T19251] lo speed is unknown, defaulting to 1000 [ 603.063527][T19251] lo speed is unknown, defaulting to 1000 [ 603.105112][T19251] lo speed is unknown, defaulting to 1000 [ 603.111997][T19251] lo speed is unknown, defaulting to 1000 [ 603.147262][T19251] lo speed is unknown, defaulting to 1000 [ 603.229854][T19282] vlan3: entered promiscuous mode [ 603.236921][T19282] vlan3: entered allmulticast mode [ 603.465091][T19293] xt_CT: You must specify a L4 protocol and not use inversions on it [ 603.646436][T19306] netlink: 'syz.0.4080': attribute type 29 has an invalid length. [ 603.663266][T19304] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input38 [ 603.685283][T19306] netlink: 'syz.0.4080': attribute type 29 has an invalid length. [ 603.766270][T19301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4078'. [ 604.037742][T19320] netlink: 'syz.2.4084': attribute type 1 has an invalid length. [ 604.062421][T19320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4084'. [ 604.081838][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4083'. [ 604.299953][T19325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4086'. [ 604.334157][T19331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4087'. [ 604.360235][T19331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4087'. [ 604.402452][T19325] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input39 [ 604.569600][T19325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4086'. [ 604.811766][T19347] lo speed is unknown, defaulting to 1000 [ 604.820596][T19347] lo speed is unknown, defaulting to 1000 [ 605.040588][T19347] lo speed is unknown, defaulting to 1000 [ 605.049465][T19347] lo speed is unknown, defaulting to 1000 [ 605.472019][T19347] xt_HMARK: spi-set and port-set can't be combined [ 605.801407][T19363] netlink: 'syz.1.4098': attribute type 2 has an invalid length. [ 605.946589][T19367] dccp_invalid_packet: P.Data Offset(170) too large [ 606.048014][T19367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4101'. [ 606.186551][ T5857] Bluetooth: hci5: command 0x0405 tx timeout [ 606.352354][T19385] veth1_virt_wifi: entered promiscuous mode [ 606.358805][T19385] veth1_virt_wifi: entered allmulticast mode [ 606.417951][T19388] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 606.980454][T19394] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4111'. [ 606.995778][T19401] syzkaller1: entered promiscuous mode [ 607.001539][T19401] syzkaller1: entered allmulticast mode [ 607.329076][T19424] netlink: 'syz.4.4121': attribute type 10 has an invalid length. [ 607.356065][T19424] : (slave veth0_to_bond): Enslaving as an active interface with an up link [ 607.762082][T19442] xt_CT: You must specify a L4 protocol and not use inversions on it [ 607.859488][T19446] syzkaller1: entered promiscuous mode [ 607.884137][T19446] syzkaller1: entered allmulticast mode [ 607.935378][T19448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4131'. [ 608.210543][T19456] lo speed is unknown, defaulting to 1000 [ 608.237943][T19456] lo speed is unknown, defaulting to 1000 [ 608.502336][T19467] netlink: 'syz.2.4136': attribute type 10 has an invalid length. [ 608.525232][T19467] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4136'. [ 608.552564][T19467] team0: entered promiscuous mode [ 608.575829][T19467] bridge0: port 1(team0) entered blocking state [ 608.614224][T19467] bridge0: port 1(team0) entered disabled state [ 608.644281][T19467] team0: entered allmulticast mode [ 608.709773][T19471] ÿÿÿÿÿÿ: renamed from bond_slave_0 (while UP) [ 608.895673][T19456] lo speed is unknown, defaulting to 1000 [ 608.925618][T19456] lo speed is unknown, defaulting to 1000 [ 608.935524][T19479] syzkaller1: entered promiscuous mode [ 608.952387][T19479] syzkaller1: entered allmulticast mode [ 609.050841][T19486] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4145'. [ 609.342363][T19491] team0: Mode "" not found [ 609.513736][T19502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 609.528300][T19501] ip6tnl3: entered promiscuous mode [ 609.554177][T19501] ip6tnl3: entered allmulticast mode [ 609.561108][T19501] team0: Device ip6tnl3 is of different type [ 609.860021][T19504] lo speed is unknown, defaulting to 1000 [ 609.868699][T19509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4154'. [ 609.970160][T19504] lo speed is unknown, defaulting to 1000 [ 610.168077][T19518] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 610.200700][T19518] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 610.457072][T19533] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4163'. [ 610.602581][T19536] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 610.645183][T19505] netlink: 'syz.3.4152': attribute type 11 has an invalid length. [ 610.649057][T19538] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4165'. [ 610.653349][T19505] netlink: 'syz.3.4152': attribute type 5 has an invalid length. [ 610.674765][T19536] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4164'. [ 610.721961][T19504] lo speed is unknown, defaulting to 1000 [ 610.747000][T19504] lo speed is unknown, defaulting to 1000 [ 610.784647][T19505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4152'. [ 610.817203][T19541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4166'. [ 610.880070][T19505] netlink: 'syz.3.4152': attribute type 1 has an invalid length. [ 610.890705][T19505] netlink: 'syz.3.4152': attribute type 2 has an invalid length. [ 610.910071][T19505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4152'. [ 611.339971][T19556] FAULT_INJECTION: forcing a failure. [ 611.339971][T19556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.388175][T19561] netlink: 'syz.3.4170': attribute type 16 has an invalid length. [ 611.408394][T19556] CPU: 0 UID: 0 PID: 19556 Comm: syz.2.4169 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 611.408428][T19556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 611.408442][T19556] Call Trace: [ 611.408449][T19556] [ 611.408460][T19556] dump_stack_lvl+0x241/0x360 [ 611.408493][T19556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.408518][T19556] ? __pfx__printk+0x10/0x10 [ 611.408543][T19556] ? __pfx_lock_release+0x10/0x10 [ 611.408586][T19556] should_fail_ex+0x40a/0x550 [ 611.408623][T19556] _copy_from_user+0x2d/0xb0 [ 611.408654][T19556] copy_msghdr_from_user+0xae/0x680 [ 611.408690][T19556] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 611.408718][T19556] ? __fget_files+0x2a/0x410 [ 611.408753][T19556] ? __fget_files+0x2a/0x410 [ 611.408793][T19556] __sys_sendmsg+0x209/0x350 [ 611.408823][T19556] ? __pfx___sys_sendmsg+0x10/0x10 [ 611.408859][T19556] ? do_sys_openat2+0x17a/0x1d0 [ 611.408914][T19556] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 611.408950][T19556] ? do_syscall_64+0x100/0x230 [ 611.408981][T19556] ? do_syscall_64+0xb6/0x230 [ 611.409010][T19556] do_syscall_64+0xf3/0x230 [ 611.409036][T19556] ? clear_bhb_loop+0x35/0x90 [ 611.409069][T19556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.409098][T19556] RIP: 0033:0x7f1e4878d169 [ 611.409117][T19556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.409136][T19556] RSP: 002b:00007f1e49543038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.409160][T19556] RAX: ffffffffffffffda RBX: 00007f1e489a5fa0 RCX: 00007f1e4878d169 [ 611.409176][T19556] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 611.409190][T19556] RBP: 00007f1e49543090 R08: 0000000000000000 R09: 0000000000000000 [ 611.409204][T19556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.409217][T19556] R13: 0000000000000000 R14: 00007f1e489a5fa0 R15: 00007ffc7726dea8 [ 611.409248][T19556] [ 612.429791][T19579] xt_CT: You must specify a L4 protocol and not use inversions on it [ 612.696193][T19585] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 612.724083][T19585] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 613.096976][T19594] tipc: Enabling of bearer rejected, failed to enable media [ 613.302987][T19599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 613.343316][T19599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 613.470190][T19603] lo speed is unknown, defaulting to 1000 [ 613.488283][T19603] lo speed is unknown, defaulting to 1000 [ 613.767263][T19614] lo speed is unknown, defaulting to 1000 [ 614.040900][T19603] lo speed is unknown, defaulting to 1000 [ 614.044784][T19614] lo speed is unknown, defaulting to 1000 [ 614.055659][T19621] xt_TCPMSS: Only works on TCP SYN packets [ 614.072872][T19603] lo speed is unknown, defaulting to 1000 [ 614.093203][T19622] IPv6: sit1: Disabled Multicast RS [ 614.481477][T19632] xt_CT: You must specify a L4 protocol and not use inversions on it [ 614.552918][T19636] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4196'. [ 614.780430][T19639] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 614.814502][T19639] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 614.873948][T19614] lo speed is unknown, defaulting to 1000 [ 614.909128][T19614] lo speed is unknown, defaulting to 1000 [ 615.081147][T19637] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4186'. [ 615.231552][T19647] tipc: Enabling of bearer rejected, failed to enable media [ 615.457689][T19651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4202'. [ 615.586693][T19651] vlan2: entered allmulticast mode [ 615.606522][T19651] macsec0: entered allmulticast mode [ 615.634136][T19651] veth1_macvtap: entered allmulticast mode [ 615.646060][T19651] bridge0: port 3(vlan2) entered blocking state [ 615.655671][T19656] FAULT_INJECTION: forcing a failure. [ 615.655671][T19656] name failslab, interval 1, probability 0, space 0, times 0 [ 615.658099][T19657] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input40 [ 615.694905][T19651] bridge0: port 3(vlan2) entered disabled state [ 615.711882][T19656] CPU: 1 UID: 0 PID: 19656 Comm: syz.3.4205 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 615.711915][T19656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 615.711929][T19656] Call Trace: [ 615.711938][T19656] [ 615.711947][T19656] dump_stack_lvl+0x241/0x360 [ 615.711981][T19656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 615.712013][T19656] ? __pfx__printk+0x10/0x10 [ 615.712055][T19656] should_fail_ex+0x40a/0x550 [ 615.712095][T19656] should_failslab+0xac/0x100 [ 615.712127][T19656] __kmalloc_cache_noprof+0x70/0x390 [ 615.712158][T19656] ? sctp_add_bind_addr+0x89/0x3a0 [ 615.712190][T19656] sctp_add_bind_addr+0x89/0x3a0 [ 615.712221][T19656] sctp_copy_local_addr_list+0x311/0x500 [ 615.712251][T19656] ? sctp_copy_local_addr_list+0xab/0x500 [ 615.712278][T19656] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 615.712308][T19656] ? sctp_v6_is_any+0x60/0x70 [ 615.712339][T19656] ? sctp_copy_one_addr+0x94/0x360 [ 615.712370][T19656] sctp_bind_addr_copy+0xad/0x3b0 [ 615.712397][T19656] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 615.712438][T19656] sctp_connect_new_asoc+0x2f3/0x6c0 [ 615.712474][T19656] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 615.712509][T19656] ? sctp_sendmsg+0xf1a/0x35d0 [ 615.712546][T19656] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 615.712577][T19656] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 615.712611][T19656] sctp_sendmsg+0x1f64/0x35d0 [ 615.712661][T19656] ? __pfx_sctp_sendmsg+0x10/0x10 [ 615.712697][T19656] ? aa_sk_perm+0x96d/0xab0 [ 615.712746][T19656] ? inet_sendmsg+0x330/0x390 [ 615.712777][T19656] __sock_sendmsg+0x1a6/0x270 [ 615.712811][T19656] __sys_sendto+0x363/0x4c0 [ 615.712839][T19656] ? __pfx___sys_sendto+0x10/0x10 [ 615.712889][T19656] ? __fget_files+0x2a/0x410 [ 615.712935][T19656] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 615.712971][T19656] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 615.713016][T19656] __x64_sys_sendto+0xde/0x100 [ 615.713040][T19656] do_syscall_64+0xf3/0x230 [ 615.713086][T19656] ? clear_bhb_loop+0x35/0x90 [ 615.713119][T19656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.713149][T19656] RIP: 0033:0x7f79fa58d169 [ 615.713168][T19656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.713188][T19656] RSP: 002b:00007f79fb3eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 615.713212][T19656] RAX: ffffffffffffffda RBX: 00007f79fa7a5fa0 RCX: 00007f79fa58d169 [ 615.713229][T19656] RDX: 0000000000000001 RSI: 0000400000000240 RDI: 0000000000000005 [ 615.713243][T19656] RBP: 00007f79fb3eb090 R08: 0000400000000080 R09: 000000000000001c [ 615.713259][T19656] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 615.713272][T19656] R13: 0000000000000000 R14: 00007f79fa7a5fa0 R15: 00007fff8756ece8 [ 615.713306][T19656] [ 616.006832][T19651] vlan2: entered promiscuous mode [ 616.012021][T19651] macsec0: entered promiscuous mode [ 616.018208][T19651] bridge0: port 3(vlan2) entered blocking state [ 616.024620][T19651] bridge0: port 3(vlan2) entered forwarding state [ 616.076381][T19661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4203'. [ 616.208121][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4203'. [ 616.827486][T19682] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 616.927775][T19686] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 616.944145][T19686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.007220][T19692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 617.218613][T19700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4216'. [ 617.286303][T19700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4216'. [ 617.803170][T19723] [ 617.805559][T19723] ====================================================== [ 617.812603][T19723] WARNING: possible circular locking dependency detected [ 617.819650][T19723] 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 Not tainted [ 617.826782][T19723] ------------------------------------------------------ [ 617.833814][T19723] syz.3.4227/19723 is trying to acquire lock: [ 617.839895][T19723] ffff888029bf8d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: __dev_open+0x5cb/0x8a0 [ 617.849556][T19723] [ 617.849556][T19723] but task is already holding lock: [ 617.857034][T19723] ffff8880309c8e00 (team->team_lock_key#6){+.+.}-{4:4}, at: team_add_slave+0xb3/0x28a0 [ 617.866762][T19723] [ 617.866762][T19723] which lock already depends on the new lock. [ 617.866762][T19723] [ 617.877182][T19723] [ 617.877182][T19723] the existing dependency chain (in reverse order) is: [ 617.886213][T19723] [ 617.886213][T19723] -> #2 (team->team_lock_key#6){+.+.}-{4:4}: [ 617.894453][T19723] lock_acquire+0x1ed/0x550 [ 617.899534][T19723] __mutex_lock+0x19c/0x1010 [ 617.904685][T19723] team_set_mac_address+0x122/0x280 [ 617.910439][T19723] netif_set_mac_address+0x327/0x510 [ 617.916274][T19723] do_setlink+0xaa6/0x40f0 [ 617.921236][T19723] rtnl_newlink+0x15a6/0x1d90 [ 617.926470][T19723] rtnetlink_rcv_msg+0x791/0xcf0 [ 617.931965][T19723] netlink_rcv_skb+0x206/0x480 [ 617.937281][T19723] netlink_unicast+0x7f6/0x990 [ 617.942598][T19723] netlink_sendmsg+0x8de/0xcb0 [ 617.947922][T19723] __sock_sendmsg+0x221/0x270 [ 617.953153][T19723] __sys_sendto+0x363/0x4c0 [ 617.958209][T19723] __x64_sys_sendto+0xde/0x100 [ 617.963519][T19723] do_syscall_64+0xf3/0x230 [ 617.968574][T19723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.975026][T19723] [ 617.975026][T19723] -> #1 (&dev_instance_lock_key#12){+.+.}-{4:4}: [ 617.983599][T19723] lock_acquire+0x1ed/0x550 [ 617.988681][T19723] __mutex_lock+0x19c/0x1010 [ 617.993814][T19723] dev_set_mac_address+0x2a/0x50 [ 617.999298][T19723] bond_set_mac_address+0x28e/0x830 [ 618.005048][T19723] netif_set_mac_address+0x327/0x510 [ 618.010879][T19723] do_setlink+0xaa6/0x40f0 [ 618.015840][T19723] rtnl_newlink+0x15a6/0x1d90 [ 618.021060][T19723] rtnetlink_rcv_msg+0x791/0xcf0 [ 618.026531][T19723] netlink_rcv_skb+0x206/0x480 [ 618.031833][T19723] netlink_unicast+0x7f6/0x990 [ 618.037135][T19723] netlink_sendmsg+0x8de/0xcb0 [ 618.042430][T19723] __sock_sendmsg+0x221/0x270 [ 618.047642][T19723] ____sys_sendmsg+0x53a/0x860 [ 618.052933][T19723] __sys_sendmsg+0x269/0x350 [ 618.058065][T19723] do_syscall_64+0xf3/0x230 [ 618.063096][T19723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.069522][T19723] [ 618.069522][T19723] -> #0 (&dev_instance_lock_key#2){+.+.}-{4:4}: [ 618.077971][T19723] validate_chain+0x18ef/0x5920 [ 618.083357][T19723] __lock_acquire+0x1397/0x2100 [ 618.088738][T19723] lock_acquire+0x1ed/0x550 [ 618.093773][T19723] __mutex_lock+0x19c/0x1010 [ 618.098892][T19723] __dev_open+0x5cb/0x8a0 [ 618.103779][T19723] netif_open+0xae/0x1b0 [ 618.108907][T19723] dev_open+0x13e/0x260 [ 618.113772][T19723] team_add_slave+0xabe/0x28a0 [ 618.119346][T19723] do_set_master+0x579/0x730 [ 618.124744][T19723] do_setlink+0xfee/0x40f0 [ 618.129893][T19723] rtnl_newlink+0x15a6/0x1d90 [ 618.135383][T19723] rtnetlink_rcv_msg+0x791/0xcf0 [ 618.141046][T19723] netlink_rcv_skb+0x206/0x480 [ 618.146466][T19723] netlink_unicast+0x7f6/0x990 [ 618.151773][T19723] netlink_sendmsg+0x8de/0xcb0 [ 618.157423][T19723] __sock_sendmsg+0x221/0x270 [ 618.162725][T19723] ____sys_sendmsg+0x53a/0x860 [ 618.168026][T19723] __sys_sendmsg+0x269/0x350 [ 618.173183][T19723] do_syscall_64+0xf3/0x230 [ 618.178470][T19723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.185960][T19723] [ 618.185960][T19723] other info that might help us debug this: [ 618.185960][T19723] [ 618.197971][T19723] Chain exists of: [ 618.197971][T19723] &dev_instance_lock_key#2 --> &dev_instance_lock_key#12 --> team->team_lock_key#6 [ 618.197971][T19723] [ 618.213426][T19723] Possible unsafe locking scenario: [ 618.213426][T19723] [ 618.220890][T19723] CPU0 CPU1 [ 618.226708][T19723] ---- ---- [ 618.232201][T19723] lock(team->team_lock_key#6); [ 618.237267][T19723] lock(&dev_instance_lock_key#12); [ 618.245727][T19723] lock(team->team_lock_key#6); [ 618.253327][T19723] lock(&dev_instance_lock_key#2); [ 618.258562][T19723] [ 618.258562][T19723] *** DEADLOCK *** [ 618.258562][T19723] [ 618.266893][T19723] 2 locks held by syz.3.4227/19723: [ 618.272182][T19723] #0: ffffffff8fed6908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 618.281272][T19723] #1: ffff8880309c8e00 (team->team_lock_key#6){+.+.}-{4:4}, at: team_add_slave+0xb3/0x28a0 [ 618.291846][T19723] [ 618.291846][T19723] stack backtrace: [ 618.297827][T19723] CPU: 0 UID: 0 PID: 19723 Comm: syz.3.4227 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 618.297852][T19723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 618.297864][T19723] Call Trace: [ 618.297873][T19723] [ 618.297880][T19723] dump_stack_lvl+0x241/0x360 [ 618.297907][T19723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 618.297927][T19723] ? __pfx__printk+0x10/0x10 [ 618.297950][T19723] print_circular_bug+0x13a/0x1b0 [ 618.297974][T19723] check_noncircular+0x36a/0x4a0 [ 618.297996][T19723] ? __pfx_check_noncircular+0x10/0x10 [ 618.298017][T19723] ? lockdep_lock+0x123/0x2b0 [ 618.298045][T19723] ? __pfx_validate_chain+0x10/0x10 [ 618.298065][T19723] validate_chain+0x18ef/0x5920 [ 618.298092][T19723] ? validate_chain+0x11e/0x5920 [ 618.298113][T19723] ? __pfx_validate_chain+0x10/0x10 [ 618.298132][T19723] ? __pfx_validate_chain+0x10/0x10 [ 618.298155][T19723] ? __pfx_validate_chain+0x10/0x10 [ 618.298174][T19723] ? __pfx_validate_chain+0x10/0x10 [ 618.298194][T19723] ? mark_lock+0x9a/0x360 [ 618.298213][T19723] ? mark_lock+0x9a/0x360 [ 618.298233][T19723] ? mark_lock+0x9a/0x360 [ 618.298250][T19723] __lock_acquire+0x1397/0x2100 [ 618.298284][T19723] lock_acquire+0x1ed/0x550 [ 618.298309][T19723] ? __dev_open+0x5cb/0x8a0 [ 618.298337][T19723] ? __pfx_lock_acquire+0x10/0x10 [ 618.298364][T19723] ? __pfx_lock_acquire+0x10/0x10 [ 618.298390][T19723] ? __pfx___might_resched+0x10/0x10 [ 618.298413][T19723] ? __pfx_lock_release+0x10/0x10 [ 618.298441][T19723] ? net_generic+0x1f/0x240 [ 618.298461][T19723] ? net_generic+0x1f0/0x240 [ 618.298482][T19723] __mutex_lock+0x19c/0x1010 [ 618.298504][T19723] ? __dev_open+0x5cb/0x8a0 [ 618.298527][T19723] ? ib_device_get_by_netdev+0x595/0x5e0 [ 618.298553][T19723] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 618.298582][T19723] ? netdev_lower_get_next_private+0x9d/0xb0 [ 618.298610][T19723] ? __dev_open+0x5cb/0x8a0 [ 618.298641][T19723] ? __pfx___mutex_lock+0x10/0x10 [ 618.298670][T19723] __dev_open+0x5cb/0x8a0 [ 618.298698][T19723] ? __pfx___dev_open+0x10/0x10 [ 618.298723][T19723] ? ref_tracker_alloc+0x332/0x490 [ 618.298753][T19723] netif_open+0xae/0x1b0 [ 618.298777][T19723] ? __pfx_netif_open+0x10/0x10 [ 618.298805][T19723] dev_open+0x13e/0x260 [ 618.298834][T19723] team_add_slave+0xabe/0x28a0 [ 618.298866][T19723] ? __pfx_team_add_slave+0x10/0x10 [ 618.298888][T19723] ? __dev_notify_flags+0x316/0x400 [ 618.298905][T19723] ? dev_set_rx_mode+0x233/0x2e0 [ 618.298923][T19723] ? __pfx___dev_notify_flags+0x10/0x10 [ 618.298940][T19723] ? __dev_change_flags+0x515/0x6f0 [ 618.298959][T19723] ? __pfx___dev_change_flags+0x10/0x10 [ 618.298975][T19723] ? validate_linkmsg+0x828/0xa40 [ 618.298998][T19723] ? mutex_is_locked+0x17/0x50 [ 618.299017][T19723] do_set_master+0x579/0x730 [ 618.299037][T19723] do_setlink+0xfee/0x40f0 [ 618.299063][T19723] ? __pfx_do_setlink+0x10/0x10 [ 618.299096][T19723] ? __pfx___might_resched+0x10/0x10 [ 618.299120][T19723] ? __pfx___mutex_trylock_common+0x10/0x10 [ 618.299143][T19723] ? rcu_is_watching+0x15/0xb0 [ 618.299163][T19723] ? trace_contention_end+0x3c/0x120 [ 618.299183][T19723] ? __mutex_lock+0x397/0x1010 [ 618.299205][T19723] ? __pfx_aa_get_newest_label+0x10/0x10 [ 618.299235][T19723] ? rtnl_newlink+0xc4c/0x1d90 [ 618.299260][T19723] ? __pfx___mutex_lock+0x10/0x10 [ 618.299283][T19723] ? nla_strscpy+0x100/0x180 [ 618.299302][T19723] ? full_name_hash+0x93/0xe0 [ 618.299331][T19723] rtnl_newlink+0x15a6/0x1d90 [ 618.299356][T19723] ? stack_depot_save_flags+0x37/0x940 [ 618.299388][T19723] ? __pfx_rtnl_newlink+0x10/0x10 [ 618.299412][T19723] ? __netlink_deliver_tap+0x561/0x7f0 [ 618.299449][T19723] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 618.299477][T19723] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 618.299507][T19723] ? mark_lock+0x9a/0x360 [ 618.299526][T19723] ? __lock_acquire+0x1397/0x2100 [ 618.299565][T19723] ? __pfx_lock_release+0x10/0x10 [ 618.299597][T19723] ? __pfx_rtnl_newlink+0x10/0x10 [ 618.299623][T19723] rtnetlink_rcv_msg+0x791/0xcf0 [ 618.299655][T19723] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 618.299682][T19723] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 618.299711][T19723] ? ref_tracker_free+0x643/0x7e0 [ 618.299730][T19723] netlink_rcv_skb+0x206/0x480 [ 618.299756][T19723] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 618.299782][T19723] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 618.299816][T19723] ? netlink_deliver_tap+0x2e/0x1b0 [ 618.299841][T19723] netlink_unicast+0x7f6/0x990 [ 618.299866][T19723] ? __pfx_netlink_unicast+0x10/0x10 [ 618.299889][T19723] ? __virt_addr_valid+0x45f/0x530 [ 618.299907][T19723] ? __phys_addr_symbol+0x2f/0x70 [ 618.299923][T19723] ? __check_object_size+0x47a/0x730 [ 618.299949][T19723] netlink_sendmsg+0x8de/0xcb0 [ 618.299979][T19723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.300006][T19723] ? aa_sock_msg_perm+0x91/0x160 [ 618.300034][T19723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.300059][T19723] __sock_sendmsg+0x221/0x270 [ 618.300085][T19723] ____sys_sendmsg+0x53a/0x860 [ 618.300108][T19723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 618.300126][T19723] ? __fget_files+0x2a/0x410 [ 618.300152][T19723] ? __fget_files+0x2a/0x410 [ 618.300182][T19723] __sys_sendmsg+0x269/0x350 [ 618.300203][T19723] ? __pfx___sys_sendmsg+0x10/0x10 [ 618.300239][T19723] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 618.300267][T19723] ? do_syscall_64+0x100/0x230 [ 618.300290][T19723] ? do_syscall_64+0xb6/0x230 [ 618.300313][T19723] do_syscall_64+0xf3/0x230 [ 618.300334][T19723] ? clear_bhb_loop+0x35/0x90 [ 618.300360][T19723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.300384][T19723] RIP: 0033:0x7f79fa58d169 [ 618.300401][T19723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.300416][T19723] RSP: 002b:00007f79fb3eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.300436][T19723] RAX: ffffffffffffffda RBX: 00007f79fa7a5fa0 RCX: 00007f79fa58d169 [ 618.300449][T19723] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000004 [ 618.300461][T19723] RBP: 00007f79fa60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 618.300473][T19723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.300484][T19723] R13: 0000000000000000 R14: 00007f79fa7a5fa0 R15: 00007fff8756ece8 [ 618.300503][T19723] [ 618.744484][ T5857] Bluetooth: hci0: command 0x0405 tx timeout [ 618.791098][T19723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.950834][T19723] bond0: entered allmulticast mode [ 618.956055][T19723] syz_tun: entered allmulticast mode [ 618.961942][T19723] team0: Port device bond0 added [ 618.973642][T19727] bridge0: port 1(team0) entered blocking state [ 618.989774][T19727] bridge0: port 1(team0) entered disabled state [ 624.587941][ T1296] ieee802154 phy0 wpan0: encryption failed: -22