last executing test programs: 6.023310328s ago: executing program 2 (id=2500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="01000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000020000800300000086dcdd5afe6ac19cc2631c2e9ffe25bd4c7e93cb0adc8194224920c0efdd11468f17d78ea13754264edb61a18c0936b8ffe522edbf3e799bf62dc09c853a8cb1013442c30046a3ab395acb121b60f615750c0691e1592007d776eb14260c6e5d6e4ed6a6d840845938f9b1d0d98d32556580c0b3d557fe926396815140e411db91c31973c38aafebdcf1e1cd90c440663f68ff740de75a3567a8f1596f569b7817a0597011a41575eb6595c398dab851e48f18b013cfa44f39101bb78084828568db8c7bdaeb295ec601c4a52171906acc7a659e67"], 0x48}, 0x1, 0x0, 0x0, 0x48485}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRESOCT, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="01080000100400000001000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESOCT=r3], 0x48}, 0x1, 0x0, 0x0, 0x4008850}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004070}, 0x4008000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448c9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r9, 0x1, 0x21, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000000)={0x20000008}) socket$kcm(0x23, 0x2, 0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r12) 4.225251376s ago: executing program 0 (id=2517): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b80000001900010000000000fedbdf25e000000200000000000000000000000000000000000007000000000000000000000000004e2100000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000fffffffffffffffffcffffff00"/112], 0xb8}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xd, 0x1a}}, [@TCA_RATE={0x6, 0x5, {0xb0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffe, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r2) socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x10) 4.20646296s ago: executing program 4 (id=2518): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x300c, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x2000000, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.129521243s ago: executing program 0 (id=2519): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) socket$inet6(0xa, 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000300000064010102000000000000000000000000fc000000000000000000000000000000fffd0000000000000a00000400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000000000000000ffffffffffffffefcb0000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000000ae0f000000000000010004030000000044000500fe880000000000000000000000000101000000003c"], 0xfc}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff) r2 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) write(r2, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000140)={0x3a, 0x10, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x3, 0x10, "90a36ee39d915d9f3b7747237bf67d48"}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x38, {0x0, 0xc, 0x9, 0x6, [0xe8, 0x2850, 0xd9, 0x0, 0x3, 0x128c]}}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x88) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') 4.127372803s ago: executing program 4 (id=2520): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000040000100feffffffffdbdf25017c0c00000042800c00018006000600800a00001c00020018001780140001"], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x8000, 0x7, 0x9, 0xffffffff, 0xf}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x1407, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x91) 4.026515831s ago: executing program 0 (id=2522): socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x11}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000140), &(0x7f0000000280)=r4}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x4, 0x0, r3, 0x2, '\x00', 0x0, r4, 0x3, 0x2, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000300), &(0x7f0000000500)=r4}, 0x20) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x27}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r8, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000011125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0x0, &(0x7f0000000580), &(0x7f00000006c0)='GPL\x00', 0x2, 0x86, &(0x7f0000000700)=""/134, 0x40f00, 0x40, '\x00', r8, @fallback, r4, 0x8, &(0x7f00000007c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x4, 0xd, 0x1}, 0x10, 0x0, r5, 0x1, &(0x7f0000000840)=[r4], &(0x7f0000000880)=[{0x1, 0x2, 0x8, 0xc}], 0x10, 0x81}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014007fffb7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 3.947999749s ago: executing program 4 (id=2523): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 64) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}], 0x1}, 0x4}], 0x2, 0x60, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @multicast2}}}}}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000004a00030029bd7000fddbdf250a00", @ANYRES32=0x0, @ANYBLOB="262cc8"], 0x24}}, 0x40004040) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000000)) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) setsockopt$inet6_mreq(r5, 0x29, 0x14, 0x0, 0x47) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0xa3, @loopback, 0x6}}, [0x8, 0x49c, 0x4, 0x7fffffffffffffff, 0xfffffffffffffffa, 0x412, 0x8001, 0x3c9a, 0x2e, 0x5, 0x7, 0xa7c8, 0xfff, 0x3, 0x4]}, &(0x7f0000000380)=0x100) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000003c0)={r6, 0x1}, 0x8) (async) close(r4) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000010000104fd7fffff0300000000000000", @ANYRES32=0x0, @ANYBLOB="000000000108000024008af4e26499c569a24c999c6906b99a1280110001006272696467655f736c617665000000000c00058005002100010000001400030062878feea272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x4004811}, 0x40080) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$PPPIOCGIDLE32(r8, 0x8008743f, &(0x7f0000000200)) (async) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) 3.946283764s ago: executing program 2 (id=2525): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000180)={'veth1_to_batadv\x00', {0x2, 0x0, @initdev}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x60008805}, 0x44800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, 0x0, 0x0, 0x4060019}, 0x20000041) 3.786126822s ago: executing program 1 (id=2526): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="10010000160011072bbd7000fcdbdf25fe880000000000000000000000000001fe800000000000aa4e2400014e210003020020a03200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d66c000000fe88000000000000000000000000000118010000000000000500000000000000000200000000000008000000000000000300000000000000e10b00000000000025000000000000000010000000000000090000000000000040000000000000000500000000000000000000001c000000000000001d8a0000cb09000027bd7000000000000a0003"], 0x110}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 3.66140637s ago: executing program 4 (id=2527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/37}, 0x20) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) 3.660076821s ago: executing program 3 (id=2528): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3}]}, 0x3c}}, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="c021", 0x2}], 0x1, 0x7, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac4c4e0ac290f83184a1dee3ab05fe64fa746491c4285444ecedc1904f555b996036cb3052a37ed0cb84d890e022099d185d5b3a58b24d4809f05734cef0bef125945b47fa95fa004a711d12673270aaa203dd4a80105ea504f2462d3147169513bb54332f3dfb101f9d80f2fdb417196e1741725c03ac8e31d3cd40314d7ff747a2df80cdb2816719ed66464bbebacf76d4bea97c3ec69195db80"], 0x28}, 0x1, 0x0, 0x0, 0x4004010}, 0x801) 3.630296533s ago: executing program 1 (id=2529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x28, r2, 0x325, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB="60000000020605000000001e00000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640002000000800134000000000050005000a00000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x200040c0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd8200fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r8], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfc) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xb0000009}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000086000001"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r9, 0x0, 0x20000000}, 0x20) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x30, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000800}, 0x4800) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r11, 0x8983, &(0x7f0000000140)={0x8, 'tunl0\x00', {'nicvf0\x00'}, 0x78a}) ppoll(&(0x7f0000000180)=[{}, {r3, 0x4}, {r5, 0x1c}], 0x3, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 3.513642965s ago: executing program 2 (id=2530): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) 3.513356743s ago: executing program 4 (id=2531): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000006911b60000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYRES16=r0, @ANYBLOB="9d0200f65ef4d1164615e30861f8801dba3334f6c16ec8b0160ea6a661388550e31c9c78c31df3bf1ee695f201000000dfcc57c53c3bbb033a938963ff22de9a4c5d92ff6c9fce009aafd5652c9c7241596b930ccfc9745c1e1fca7771b656ad8488fbf5bdd534d434e204a7565982458ee28581666b1cc57a63d2e796c623b3"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4008800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) write$nci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="710509030306002e031f7d0004060300c105"], 0x29) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000002d1033a8cac3a76dc5052b8e10a704d2f5f6b06900e2"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r9], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) epoll_create1(0x0) 3.480028041s ago: executing program 0 (id=2532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r2, 0x8995, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth1_to_bond\x00'}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_flash={0x33, 0xffff, './file0\x00'}}) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r6, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/4, 0x4}, {0x0}], 0x2, &(0x7f0000001180)=""/4096, 0x1000}, 0xfffff453}], 0x1, 0x10120, 0x0) setsockopt$inet_int(r6, 0x0, 0x21, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x42, &(0x7f0000000200)=0x7, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f0000000000)=0x5c) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2a800, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r8, 0x400454ce, 0x19) ioctl$TUNSETOWNER(r8, 0x400454cc, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848430000005e14060002800000129400"/46, 0x2e}], 0x1}, 0x0) 3.476321586s ago: executing program 2 (id=2533): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}}, 0x1) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000004000)=ANY=[@ANYBLOB="140000001000010040000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffb080013"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r9, 0x913e0000) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r10, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r9, 0x0) (async) mmap(&(0x7f0000708000/0x4000)=nil, 0x4000, 0x8fbc0e6f77c18ed3, 0x11, r11, 0x1000) (async) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001200050104000000ffdbdf2528001a00ace3e3cdef48f18dea000000000000000a0101000000000000000000000000000200061005001900ff"], 0x40}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) (async) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r13, 0x6, 0x9, &(0x7f00000003c0)={{0x8, @multicast2, 0x4e21, 0x1, 'nq\x00', 0x28, 0x3a6, 0x3}, {@private=0xa010300, 0xfffd, 0x2000, 0x8, 0x8, 0x81}}, 0x44) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="070000001020000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x20) (async) getsockopt$inet_tcp_int(r13, 0x6, 0x9, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c02000000000000050200090502000005020006c204"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 3.293813109s ago: executing program 3 (id=2534): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x7c, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x68, 0x1, [@m_vlan={0x34, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "6b05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x7c}, 0x1, 0x2b1e}, 0x408d4) 3.078369904s ago: executing program 3 (id=2535): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind(r0, &(0x7f0000000480)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e23, 0x1}}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800010200000000000000001c8e003d43177dc69c0000fc070001", @ANYRES32=0x0], 0x24}}, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) 2.960466004s ago: executing program 3 (id=2536): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x20, r3, 0x801, 0x70bd20, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x2404c000) r4 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = gettid() r6 = syz_open_procfs$namespace(r5, &(0x7f0000000040)) mkdirat$cgroup(r6, &(0x7f0000000000)='syz0\x00', 0x1ff) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000150a03"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x24000040) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 2.665611614s ago: executing program 1 (id=2537): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="d8ba7c43"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xcac7c5895bbe9331}, 0xc010) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) sendmsg$kcm(r8, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r6, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r13, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r14, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2404c040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) 395.709258ms ago: executing program 2 (id=2538): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000100)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffe, 0xff}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x9}}], 0x38, 0x4014}, 0x2c0408d0) (async) socket$inet_udp(0x2, 0x2, 0x0) 382.950278ms ago: executing program 0 (id=2539): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000240008000140000000000900010073797a30000000007c000000060a0104000000000000000001000000540004802000018007000100727400001400028008000240000000030800014000000003240c01800b00010072656a656374000014000280080101400000000105000200000000000c000180080001006669620008000b40000000000900010073797a300000000014000000110001"], 0x104}}, 0x0) 371.234169ms ago: executing program 1 (id=2540): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9000000, '\x00', 0x0, @sched_cls}, 0x48) 310.04762ms ago: executing program 3 (id=2541): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x205}], 0x1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0xa020480) pselect6(0x40, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8000100ffffe}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r2, r3, 0x5}, 0x14) 229.871599ms ago: executing program 2 (id=2542): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000001240)=""/181, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xfeb2}], 0x2) write$cgroup_int(r3, &(0x7f0000000140), 0xfffffdef) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000300)={0x0, 0xa1, &(0x7f0000000040)={&(0x7f00000005c0)={0x2c, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4004004) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) pread64(r6, 0x0, 0x0, 0x1b) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="980000001000010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c000300"], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) r11 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r11, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffffffff}, 0x1c) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r12, &(0x7f0000004b80)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x64, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x0, "954819110bcf22796f6cb28be9a1224c000be94660dd39d2cb40f22ff59e284c", "9432ca32f1884e12b400", {"984b5769ec3117e138db720f57b59775", "08cb0087a738e17dda00000d00"}}}}}}}}}, 0x9e) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08c80d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) 202.064989ms ago: executing program 1 (id=2543): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x300c, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (fail_nth: 5) 113.939501ms ago: executing program 0 (id=2544): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x709d29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xfc, 0x76, 0xfe, 0xff, "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", 0x2, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x4, 0x5, 0x0, 0x0, "508b276597b6c58b"}, 0x5}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000090601020000000000000000000000000900020073797a3100000000050001000700000004000780d2bbc6d9475b6787d27afb58638f452fad5917e6"], 0x2c}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000900)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000001800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x5}}, @enum64={0x5, 0x9, 0x0, 0x13, 0x1, 0xd, [{0x10, 0xf99, 0x2}, {0x6, 0x8, 0xffffffff}, {0xc, 0x0, 0x5}, {0x10, 0x5, 0x3}, {0xd, 0x200, 0x6}, {0x1, 0x949e, 0x7}, {0xd, 0x7, 0x6}, {0xe, 0x18000, 0x40}, {0xa, 0x7, 0x3}]}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000001980)=""/150, 0xac, 0x96, 0x0, 0x4}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a80)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x5, '\x00', 0x0, r7, 0x0, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f0000000440), &(0x7f0000000040)=@udp=r3}, 0x20) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e697cc7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r8 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r8, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1800005255ee90e20000000000840000000000000000800f0005000008"], 0x18, 0x4008000}, 0x28008841) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000000)=0x4ca68b28, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffdee}, 0xb}], 0x1, 0x40000021, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$igmp6(0xa, 0x3, 0x2) 61.973431ms ago: executing program 3 (id=2545): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)}, 0x20000800) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, 0x0, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001081c400170db00000000000000", @ANYRES32=0x0, @ANYBLOB="312000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001900)=ANY=[@ANYRES8=r4, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRESDEC=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x1c00000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) listen(0xffffffffffffffff, 0x1) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) recvmmsg(r7, &(0x7f0000006180)=[{{0x0, 0x0, 0x0}, 0x4}, {{&(0x7f0000000580)=@isdn, 0x80, &(0x7f0000003640)=[{&(0x7f0000000700)=""/254, 0xfe}, {&(0x7f0000000800)=""/85, 0x55}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000002640)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=""/98, 0x62}, 0x80}, {{&(0x7f0000003700)=@sco={0x1f, @none}, 0x80, &(0x7f0000004b00)=[{&(0x7f0000003780)=""/193, 0xc1}, {&(0x7f0000003880)=""/68, 0x44}, {&(0x7f0000003900)=""/234, 0xea}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/222, 0xde}], 0x5, &(0x7f0000004b80)=""/89, 0x59}}, {{&(0x7f0000001880)=@nfc, 0x80, &(0x7f00000060c0)=[{&(0x7f0000004c80)=""/51, 0x33}, {&(0x7f0000004cc0)=""/183, 0xb7}, {&(0x7f0000004d80)=""/4096, 0x1000}, {&(0x7f0000005d80)=""/73, 0x49}, {&(0x7f0000005e00)=""/180, 0xb4}, {&(0x7f0000005ec0)=""/187, 0xbb}, {&(0x7f00000004c0)=""/64, 0x40}, {&(0x7f0000005fc0)=""/237, 0xed}], 0x8, &(0x7f0000006140)=""/3, 0x3}, 0x15048393}], 0x4, 0x2161, 0x0) sendmmsg$inet6(r6, &(0x7f00000025c0)=[{{&(0x7f0000000400)={0xa, 0x0, 0x10, @local, 0x1}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e24, 0xb8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c, &(0x7f0000002440)}}], 0x2, 0x400d0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000500)='cpu.pressure\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="390902000360000008001b0000000000080004"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 41.278992ms ago: executing program 4 (id=2546): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@deltclass={0x2c, 0x29, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x8, 0xfff3}, {0x0, 0x4}, {0xe, 0xa}}, [@tclass_kind_options=@c_sfq={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000005f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004004) socket$inet6(0xa, 0x6, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x64, r4, 0xad610c84e1afc56a, 0x70bd28, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xfffffffe}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}, 0x1, 0x2, 0x0, 0x40000d0}, 0x4010) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@fadd={0x58, 0x114, 0x6, {{0x200, 0xff}, &(0x7f0000000080)=0x721c, &(0x7f00000000c0)=0x4, 0xb9e, 0x8, 0x370d, 0x5, 0x10, 0x200000000000}}], 0x58}, 0x0) 0s ago: executing program 1 (id=2547): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf2501000000140002007767300000000000000000000000000008000500010000003c000880380000801000098004000062040000800400008024000100"], 0x6c}, 0x1, 0x0, 0x0, 0x44001}, 0x2004c0a0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x92, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f00000000c0), 0x0}, 0x20) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x4c02}) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) socket$pptp(0x18, 0x1, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000080)={0x0, 'veth0_to_bond\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) kernel console output (not intermixed with test programs): promiscuous mode [ 497.488151][ T8858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.521186][ T8868] ip6gretap0: entered allmulticast mode [ 497.584942][ T8870] netlink: 'syz.0.836': attribute type 2 has an invalid length. [ 497.595636][ T8870] netlink: 'syz.0.836': attribute type 1 has an invalid length. [ 497.603517][ T8870] netlink: 'syz.0.836': attribute type 2 has an invalid length. [ 497.612637][ T8870] netlink: 'syz.0.836': attribute type 1 has an invalid length. [ 497.701733][ T8880] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.839'. [ 497.755601][ T8883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.840'. [ 497.943172][ T8890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.007469][ T5789] IPVS: starting estimator thread 0... [ 498.108019][ T8895] IPVS: using max 37 ests per chain, 88800 per kthread [ 498.192203][ T8897] lo speed is unknown, defaulting to 1000 [ 498.493705][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'. [ 498.519367][ T8909] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.534736][ T8909] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.662447][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 498.963721][ T8909] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.019536][ T8909] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.182564][ T8928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.852'. [ 499.249074][ T8909] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.296089][ T8909] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.527974][ T8909] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.561706][ T8909] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.520484][ T8942] lo speed is unknown, defaulting to 1000 [ 501.531921][ T5696] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.540267][ T5696] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.623874][ T8954] xt_CT: You must specify a L4 protocol and not use inversions on it [ 502.541887][ T8938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 503.009875][ T5694] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.018603][ T5694] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.270739][ T8504] IPVS: starting estimator thread 0... [ 503.279594][ T8983] IPVS: fo: FWM 3 0x00000003 - no destination available [ 503.299135][ T1169] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.307852][ T1169] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.367376][ T8984] IPVS: using max 41 ests per chain, 98400 per kthread [ 503.410303][ T1169] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.440693][ T1169] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.887072][ T29] audit: type=1800 audit(1781564181.983:2): pid=9026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.874" name="blkio.bfq.time_recursive" dev="tmpfs" ino=724 res=0 errno=0 [ 503.935721][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.880'. [ 503.985317][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'. [ 504.128582][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.882'. [ 504.170782][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.882'. [ 504.206163][ T9040] netlink: 72 bytes leftover after parsing attributes in process `syz.1.882'. [ 504.270291][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.884'. [ 504.333902][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.884'. [ 504.344276][ T9048] netlink: 'syz.1.884': attribute type 3 has an invalid length. [ 504.593508][ T9061] netlink: 'syz.1.888': attribute type 7 has an invalid length. [ 504.601450][ T9061] netlink: 'syz.1.888': attribute type 8 has an invalid length. [ 504.609230][ T9061] netlink: 'syz.1.888': attribute type 7 has an invalid length. [ 504.617416][ T9061] netlink: 'syz.1.888': attribute type 8 has an invalid length. [ 504.625110][ T9061] netlink: 'syz.1.888': attribute type 1 has an invalid length. [ 504.632956][ T9061] netlink: 209084 bytes leftover after parsing attributes in process `syz.1.888'. [ 504.650124][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'. [ 505.077964][ T5696] batadv0: left promiscuous mode [ 505.659021][ T9087] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 505.878737][ T5671] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 506.262296][ T9105] syzkaller0: entered promiscuous mode [ 506.269208][ T9105] syzkaller0: entered allmulticast mode [ 506.289631][ T9105] netlink: 72 bytes leftover after parsing attributes in process `syz.1.902'. [ 506.557361][ T8998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.845307][ T9152] netlink: 32 bytes leftover after parsing attributes in process `syz.1.917'. [ 535.900982][ T9154] syzkaller1: entered promiscuous mode [ 535.904320][ T9156] netlink: 'syz.1.918': attribute type 1 has an invalid length. [ 535.906640][ T9154] syzkaller1: entered allmulticast mode [ 535.953625][ T9156] 8021q: adding VLAN 0 to HW filter on device bond4 [ 536.000447][ T9161] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 538.726052][ T9139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.375485][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 539.436612][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.932'. [ 539.466069][ T9203] netlink: 'syz.1.934': attribute type 1 has an invalid length. [ 539.492240][ T9203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.934'. [ 539.592680][ T9217] sctp: [Deprecated]: syz.4.937 (pid 9217) Use of struct sctp_assoc_value in delayed_ack socket option. [ 539.592680][ T9217] Use struct sctp_sack_info instead [ 539.628149][ T9218] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 542.461550][ T9206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 542.729047][ T9250] syzkaller1: entered promiscuous mode [ 542.735928][ T9254] xt_connbytes: Forcing CT accounting to be enabled [ 542.754760][ T9250] syzkaller1: entered allmulticast mode [ 542.773095][ T9254] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 542.851553][ T9260] lo speed is unknown, defaulting to 1000 [ 542.889810][ T9263] netlink: 36 bytes leftover after parsing attributes in process `syz.2.949'. [ 543.083089][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'. [ 543.091982][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'. [ 543.104357][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.950'. [ 543.136478][ T9275] tc action pedit 'at' offset 9 out of bounds [ 543.753516][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.963'. [ 543.853623][ T9312] netlink: 32 bytes leftover after parsing attributes in process `syz.1.967'. [ 543.962672][ T9322] netlink: 5 bytes leftover after parsing attributes in process `syz.0.968'. [ 543.972294][ T9304] syzkaller0: entered promiscuous mode [ 543.978492][ T9304] syzkaller0: entered allmulticast mode [ 543.993604][ T9307] syzkaller0: entered promiscuous mode [ 544.018259][ T9307] syzkaller0: entered allmulticast mode [ 544.161165][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'. [ 544.480197][ T9326] Bluetooth: MGMT ver 1.23 [ 545.766092][ T9346] netlink: 132 bytes leftover after parsing attributes in process `syz.2.977'. [ 545.899681][ T9351] netlink: 'syz.3.978': attribute type 1 has an invalid length. [ 545.934349][ T9351] netlink: 'syz.3.978': attribute type 2 has an invalid length. [ 545.962120][ T9355] netlink: 5 bytes leftover after parsing attributes in process `syz.2.979'. [ 546.106278][ T9366] netlink: 'syz.0.984': attribute type 1 has an invalid length. [ 546.158780][ T9366] 8021q: adding VLAN 0 to HW filter on device bond3 [ 546.181019][ T9366] macvlan2: entered promiscuous mode [ 546.186522][ T9366] macvlan2: entered allmulticast mode [ 546.193433][ T9366] bond3: entered allmulticast mode [ 546.199388][ T9366] bond3: entered promiscuous mode [ 546.205276][ T9366] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 546.216197][ T9366] team0: Port device macvlan2 added [ 546.902327][ T9428] openvswitch: netlink: Flow key attr not present in new flow. [ 546.989832][ T9430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 549.744619][ T9412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 549.930946][ T9451] __nla_validate_parse: 9 callbacks suppressed [ 549.930964][ T9451] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1009'. [ 550.085331][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 550.109121][ T9466] netlink: 'syz.1.1010': attribute type 4 has an invalid length. [ 550.199068][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1014'. [ 550.213732][ T9469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1014'. [ 550.300508][ T9469] vxlan1: entered promiscuous mode [ 550.642929][ T9494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1018'. [ 550.936046][ T9495] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 551.339713][ T9522] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1028'. [ 552.319317][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'. [ 553.397301][ T9555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1035'. [ 553.569257][ T9488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 553.604443][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 553.638255][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1038'. [ 553.807564][ T9575] FAULT_INJECTION: forcing a failure. [ 553.807564][ T9575] name failslab, interval 1, probability 0, space 0, times 0 [ 553.833345][ T9575] CPU: 1 UID: 0 PID: 9575 Comm: syz.1.1043 Not tainted syzkaller #0 PREEMPT(full) [ 553.833369][ T9575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 553.833379][ T9575] Call Trace: [ 553.833387][ T9575] [ 553.833394][ T9575] dump_stack_lvl+0xe8/0x150 [ 553.833420][ T9575] should_fail_ex+0x40c/0x560 [ 553.833453][ T9575] should_failslab+0xa8/0x100 [ 553.833479][ T9575] ? dst_alloc+0x105/0x170 [ 553.833500][ T9575] kmem_cache_alloc_noprof+0x87/0x650 [ 553.833531][ T9575] dst_alloc+0x105/0x170 [ 553.833555][ T9575] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 553.833588][ T9575] ? ip_route_output_key_hash+0xd8/0x2a0 [ 553.833614][ T9575] ip_route_output_key_hash+0x18d/0x2a0 [ 553.833637][ T9575] ? ns_capable+0x89/0xe0 [ 553.833656][ T9575] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 553.833696][ T9575] ip_route_output_flow+0x2a/0x150 [ 553.833717][ T9575] ? security_sk_classify_flow+0x6d/0x150 [ 553.833741][ T9575] udp_sendmsg+0x144a/0x2140 [ 553.833785][ T9575] ? __pfx_udp_sendmsg+0x10/0x10 [ 553.833818][ T9575] ? format_decode+0x5a1/0xe20 [ 553.833840][ T9575] ? look_up_lock_class+0x57/0x110 [ 553.833867][ T9575] ? __lock_acquire+0x683/0x2cd0 [ 553.833897][ T9575] ? get_random_u32+0x497/0x8b0 [ 553.833922][ T9575] ? lockdep_hardirqs_on+0x7a/0x110 [ 553.833940][ T9575] ? get_random_u32+0x13a/0x8b0 [ 553.833963][ T9575] ? get_random_u32+0x4ce/0x8b0 [ 553.833996][ T9575] udpv6_sendmsg+0x915/0x2610 [ 553.834034][ T9575] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 553.834053][ T9575] ? udp_lib_get_port+0x177b/0x1c60 [ 553.834107][ T9575] ? inet_send_prepare+0x1b4/0x260 [ 553.834131][ T9575] ? inet_send_prepare+0x1b4/0x260 [ 553.834158][ T9575] ? inet_send_prepare+0x1b4/0x260 [ 553.834182][ T9575] ? __local_bh_enable_ip+0xd0/0x130 [ 553.834200][ T9575] ? inet_send_prepare+0x1b4/0x260 [ 553.834227][ T9575] ? inet6_sendmsg+0xe4/0x120 [ 553.834243][ T9575] ? __pfx_inet6_sendmsg+0x10/0x10 [ 553.834263][ T9575] ____sys_sendmsg+0x61f/0xa20 [ 553.834291][ T9575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 553.834318][ T9575] ? import_iovec+0x73/0xa0 [ 553.834349][ T9575] ___sys_sendmsg+0x2a5/0x360 [ 553.834367][ T9575] ? __lock_acquire+0x683/0x2cd0 [ 553.834390][ T9575] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.834443][ T9575] ? __fget_files+0x2a/0x420 [ 553.834463][ T9575] ? __fget_files+0x3a2/0x420 [ 553.834494][ T9575] __x64_sys_sendmsg+0x1bd/0x2a0 [ 553.834516][ T9575] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 553.834544][ T9575] ? __pfx_ksys_write+0x10/0x10 [ 553.834577][ T9575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.834596][ T9575] do_syscall_64+0x174/0x580 [ 553.834614][ T9575] ? trace_irq_disable+0x3b/0x140 [ 553.834638][ T9575] ? clear_bhb_loop+0x40/0x90 [ 553.834661][ T9575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.834679][ T9575] RIP: 0033:0x7fa4a9f9ce59 [ 553.834696][ T9575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.834711][ T9575] RSP: 002b:00007fa4aae41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.834729][ T9575] RAX: ffffffffffffffda RBX: 00007fa4aa215fa0 RCX: 00007fa4a9f9ce59 [ 553.834742][ T9575] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 553.834753][ T9575] RBP: 00007fa4aae41090 R08: 0000000000000000 R09: 0000000000000000 [ 553.834764][ T9575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.834774][ T9575] R13: 00007fa4aa216038 R14: 00007fa4aa215fa0 R15: 00007fff54a8b548 [ 553.834805][ T9575] [ 554.338032][ T9577] lo speed is unknown, defaulting to 1000 [ 554.378461][ T9592] --map-set only usable from mangle table [ 554.610727][ T9607] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 554.694988][ T9607] bond4: entered promiscuous mode [ 554.707547][ T9607] 8021q: adding VLAN 0 to HW filter on device bond4 [ 554.755192][ T9610] tc_dump_action: action bad kind [ 554.904915][ T9620] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 554.974137][ T9625] __nla_validate_parse: 3 callbacks suppressed [ 554.974154][ T9625] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1057'. [ 554.993892][ T9602] 8021q: adding VLAN 0 to HW filter on device bond4 [ 555.008979][ T9602] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 555.025420][ T9602] bond4: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 555.048334][ T9625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1057'. [ 555.106093][ T9602] bond4: (slave gre1): making interface the new active one [ 555.125367][ T9602] gre1: entered promiscuous mode [ 555.138489][ T9602] bond4: (slave gre1): Enslaving as an active interface with an up link [ 555.173814][ T9625] ip6gre2: entered promiscuous mode [ 555.202610][ T9625] ip6gre2: entered allmulticast mode [ 555.390867][ T9641] xt_CT: No such helper "syz1" [ 555.600788][ T9654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.621263][ T9652] lo speed is unknown, defaulting to 1000 [ 555.642986][ T9654] IPv6: Can't replace route, no match found [ 555.812323][ T9667] netlink: 'syz.4.1066': attribute type 32 has an invalid length. [ 556.134197][ T9680] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1066'. [ 556.173166][ T9672] lo speed is unknown, defaulting to 1000 [ 556.364846][ T9687] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 556.416436][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1070'. [ 556.439433][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1070'. [ 556.590133][ T9694] netlink: 'syz.3.1072': attribute type 9 has an invalid length. [ 556.697099][ T9697] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1073'. [ 557.120831][ T9708] bond3: entered allmulticast mode [ 557.216944][ T9714] macvlan2: entered promiscuous mode [ 557.223719][ T9714] macvlan2: entered allmulticast mode [ 557.230832][ T9714] bond3: (slave macvlan2): Opening slave failed [ 557.574938][ T9733] netlink: 'syz.4.1083': attribute type 1 has an invalid length. [ 557.589673][ T9732] SET target dimension over the limit! [ 557.610400][ T9733] netlink: 'syz.4.1083': attribute type 3 has an invalid length. [ 557.647695][ T9733] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1083'. [ 557.690290][ T9741] ipt_REJECT: ECHOREPLY no longer supported. [ 557.891492][ T9743] syzkaller0: entered promiscuous mode [ 557.907102][ T9743] syzkaller0: entered allmulticast mode [ 557.931943][ T9743] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1086'. [ 558.001076][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1089'. [ 558.027402][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1089'. [ 559.392409][ T9798] netlink: 'syz.2.1105': attribute type 13 has an invalid length. [ 559.424112][ T9798] netlink: 'syz.2.1105': attribute type 17 has an invalid length. [ 559.525378][ T9807] netlink: 'syz.0.1108': attribute type 9 has an invalid length. [ 559.614423][ T9798] ip6gretap0: left allmulticast mode [ 559.711455][ T9798] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 559.774560][ T9816] pim6reg0: tun_chr_ioctl cmd 2147767507 [ 560.038918][ T9822] __nla_validate_parse: 136 callbacks suppressed [ 560.038953][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 560.090029][ T9825] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 560.134638][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1111'. [ 560.303491][ T9841] pimreg: left allmulticast mode [ 560.417950][ T9847] IPVS: fo: FWM 3 0x00000003 - no destination available [ 560.515545][ T9848] openvswitch: netlink: IP tunnel dst address not specified [ 560.545739][ T9850] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1122'. [ 560.601067][ T9854] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1124'. [ 560.694784][ T9859] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1125'. [ 560.832903][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 560.896901][ T9865] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.904461][ T9865] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.961789][ T9872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1127'. [ 561.014953][ T9876] nftables ruleset with unbound chain [ 561.191561][ T9865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.224972][ T9865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.401360][ T9865] bond3: left allmulticast mode [ 561.411563][ T9865] bond3: left promiscuous mode [ 561.466523][ T5765] lo speed is unknown, defaulting to 1000 [ 561.488040][ T5765] syz2: Port: 1 Link DOWN [ 561.548069][ T9861] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.741778][ T9861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.011725][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.040350][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.085418][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.125930][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.160876][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.196196][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.228717][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.263384][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.295669][ T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.320657][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.341895][ T9907] netlink: 'syz.1.1136': attribute type 12 has an invalid length. [ 562.368334][ T9907] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1136'. [ 562.413629][ T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.422918][ T9913] netlink: 'syz.0.1139': attribute type 8 has an invalid length. [ 562.449538][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.465640][ T9913] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1139'. [ 562.654178][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1140'. [ 563.157303][ T9944] netlink: 'syz.3.1148': attribute type 1 has an invalid length. [ 563.229359][ T9944] bond4: option mode: invalid value (12) [ 563.241650][ T9944] bond4 (unregistering): Released all slaves [ 563.288777][ T9950] openvswitch: netlink: Geneve option length err (len 263, max 255). [ 564.341485][ T9996] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 564.402269][ T9996] syzkaller1: linktype set to 769 [ 564.444601][T10005] x_tables: duplicate underflow at hook 3 [ 564.747234][T10009] tipc: Enabled bearer , priority 0 [ 564.773292][T10009] syzkaller0: entered promiscuous mode [ 564.802235][T10009] syzkaller0: entered allmulticast mode [ 564.880102][T10018] FAULT_INJECTION: forcing a failure. [ 564.880102][T10018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.967092][T10018] CPU: 1 UID: 0 PID: 10018 Comm: syz.0.1172 Not tainted syzkaller #0 PREEMPT(full) [ 564.967117][T10018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 564.967126][T10018] Call Trace: [ 564.967133][T10018] [ 564.967141][T10018] dump_stack_lvl+0xe8/0x150 [ 564.967166][T10018] should_fail_ex+0x40c/0x560 [ 564.967196][T10018] _copy_from_iter+0x1d3/0x1660 [ 564.967218][T10018] ? rcu_is_watching+0x15/0xb0 [ 564.967243][T10018] ? __pfx__copy_from_iter+0x10/0x10 [ 564.967258][T10018] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 564.967289][T10018] ? netlink_sendmsg+0x650/0xb40 [ 564.967308][T10018] ? skb_put+0x112/0x210 [ 564.967328][T10018] netlink_sendmsg+0x6c0/0xb40 [ 564.967356][T10018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.967378][T10018] ? aa_sock_msg_perm+0xf1/0x1b0 [ 564.967403][T10018] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 564.967424][T10018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.967445][T10018] ____sys_sendmsg+0x9b9/0xa20 [ 564.967464][T10018] ? __might_fault+0xaf/0x130 [ 564.967500][T10018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.967528][T10018] ? import_iovec+0x73/0xa0 [ 564.967550][T10018] ___sys_sendmsg+0x2a5/0x360 [ 564.967568][T10018] ? __lock_acquire+0x683/0x2cd0 [ 564.967590][T10018] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.967656][T10018] ? __fget_files+0x2a/0x420 [ 564.967677][T10018] ? __fget_files+0x3a2/0x420 [ 564.967706][T10018] __x64_sys_sendmsg+0x1bd/0x2a0 [ 564.967728][T10018] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 564.967754][T10018] ? __pfx_ksys_write+0x10/0x10 [ 564.967786][T10018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.967806][T10018] do_syscall_64+0x174/0x580 [ 564.967825][T10018] ? trace_irq_disable+0x3b/0x140 [ 564.967850][T10018] ? clear_bhb_loop+0x40/0x90 [ 564.967872][T10018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.967890][T10018] RIP: 0033:0x7f321f99ce59 [ 564.967905][T10018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.967921][T10018] RSP: 002b:00007f32207f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.967939][T10018] RAX: ffffffffffffffda RBX: 00007f321fc15fa0 RCX: 00007f321f99ce59 [ 564.967953][T10018] RDX: 0000000024044050 RSI: 0000200000000140 RDI: 0000000000000003 [ 564.967965][T10018] RBP: 00007f32207f8090 R08: 0000000000000000 R09: 0000000000000000 [ 564.967975][T10018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.967985][T10018] R13: 00007f321fc16038 R14: 00007f321fc15fa0 R15: 00007fffff2f9018 [ 564.968014][T10018] [ 565.358605][T10023] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20003 [ 565.480092][T10006] tipc: Resetting bearer [ 565.524316][T10006] tipc: Disabling bearer [ 565.585942][T10039] __nla_validate_parse: 9 callbacks suppressed [ 565.585962][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1181'. [ 565.602178][T10039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1181'. [ 565.707606][T10039] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 565.744391][T10039] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1181'. [ 565.984245][T10048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 566.096494][T10052] syzkaller1: entered promiscuous mode [ 566.106388][T10052] syzkaller1: entered allmulticast mode [ 566.352914][T10060] hmó3)ó: entered promiscuous mode [ 566.910615][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1196'. [ 567.000240][T10090] hsr_slave_0: left promiscuous mode [ 567.056379][T10090] hsr_slave_1: left promiscuous mode [ 567.265854][T10100] bond5: entered promiscuous mode [ 567.276215][T10100] 8021q: adding VLAN 0 to HW filter on device bond5 [ 567.748595][T10126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1205'. [ 567.823377][T10132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.914788][T10132] pim6reg1: entered allmulticast mode [ 567.971142][T10136] sctp: [Deprecated]: syz.3.1211 (pid 10136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 567.971142][T10136] Use struct sctp_sack_info instead [ 568.149272][T10144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1212'. [ 568.416144][T10154] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1217'. [ 568.438445][T10154] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1217'. [ 568.465707][T10154] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1217'. [ 568.555018][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1210'. [ 569.417596][T10185] Unsupported ieee802154 address type: 0 [ 569.946766][T10210] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 571.049561][T10254] bridge0: port 3(vlan3) entered blocking state [ 571.062930][T10254] bridge0: port 3(vlan3) entered disabled state [ 571.075345][T10254] vlan3: entered allmulticast mode [ 571.088227][T10254] geneve0: entered allmulticast mode [ 571.109411][T10254] vlan3: entered promiscuous mode [ 571.118380][T10254] geneve0: entered promiscuous mode [ 571.143424][T10263] __nla_validate_parse: 4 callbacks suppressed [ 571.143470][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1248'. [ 571.161891][T10254] netlink: 'syz.1.1247': attribute type 8 has an invalid length. [ 571.804170][T10275] FAULT_INJECTION: forcing a failure. [ 571.804170][T10275] name failslab, interval 1, probability 0, space 0, times 0 [ 571.817179][T10275] CPU: 1 UID: 0 PID: 10275 Comm: syz.4.1255 Not tainted syzkaller #0 PREEMPT(full) [ 571.817204][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 571.817215][T10275] Call Trace: [ 571.817223][T10275] [ 571.817230][T10275] dump_stack_lvl+0xe8/0x150 [ 571.817255][T10275] should_fail_ex+0x40c/0x560 [ 571.817289][T10275] should_failslab+0xa8/0x100 [ 571.817316][T10275] ? sctp_chunkify+0x5a/0x260 [ 571.817335][T10275] kmem_cache_alloc_noprof+0x87/0x650 [ 571.817366][T10275] sctp_chunkify+0x5a/0x260 [ 571.817387][T10275] _sctp_make_chunk+0x122/0x290 [ 571.817409][T10275] sctp_make_init+0x5e9/0xe20 [ 571.817434][T10275] ? is_bpf_text_address+0x292/0x2b0 [ 571.817464][T10275] ? __pfx_sctp_make_init+0x10/0x10 [ 571.817502][T10275] ? stack_trace_save+0xa9/0x100 [ 571.817527][T10275] ? __pfx_stack_trace_save+0x10/0x10 [ 571.817550][T10275] ? ip6_dst_lookup_tail+0x1049/0x1610 [ 571.817577][T10275] sctp_sf_do_prm_asoc+0xcf/0x3f0 [ 571.817603][T10275] sctp_do_sm+0x239/0x5d50 [ 571.817626][T10275] ? __pfx_sctp_pname+0x10/0x10 [ 571.817647][T10275] ? kasan_save_track+0x3e/0x80 [ 571.817668][T10275] ? __kasan_kmalloc+0x93/0xb0 [ 571.817691][T10275] ? sctp_stream_init_ext+0x57/0x180 [ 571.817715][T10275] ? ____sys_sendmsg+0x853/0xa20 [ 571.817732][T10275] ? ___sys_sendmsg+0x2a5/0x360 [ 571.817748][T10275] ? do_syscall_64+0x174/0x580 [ 571.817767][T10275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.817791][T10275] ? __pfx_sctp_do_sm+0x10/0x10 [ 571.817850][T10275] ? __sk_mem_raise_allocated+0x292/0x1250 [ 571.817870][T10275] ? __genradix_ptr+0x1e1/0x220 [ 571.817898][T10275] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 571.817924][T10275] sctp_sendmsg_to_asoc+0x13fb/0x1880 [ 571.817953][T10275] ? sctp_assoc_add_peer+0xcbd/0x1380 [ 571.817987][T10275] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 571.818015][T10275] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 571.818043][T10275] ? __local_bh_enable_ip+0xd0/0x130 [ 571.818061][T10275] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 571.818088][T10275] ? security_sctp_bind_connect+0x7e/0x2c0 [ 571.818114][T10275] sctp_sendmsg+0x1bb5/0x2d00 [ 571.818147][T10275] ? __pfx_sctp_sendmsg+0x10/0x10 [ 571.818171][T10275] ? aa_sk_perm+0x6d5/0x900 [ 571.818203][T10275] ? __pfx_aa_sk_perm+0x10/0x10 [ 571.818230][T10275] ? sock_rps_record_flow+0x19/0x350 [ 571.818256][T10275] ? inet_sendmsg+0x298/0x320 [ 571.818280][T10275] ? __pfx_inet_sendmsg+0x10/0x10 [ 571.818304][T10275] ____sys_sendmsg+0x853/0xa20 [ 571.818331][T10275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 571.818359][T10275] ? import_iovec+0x73/0xa0 [ 571.818382][T10275] ___sys_sendmsg+0x2a5/0x360 [ 571.818400][T10275] ? __lock_acquire+0x683/0x2cd0 [ 571.818423][T10275] ? __pfx____sys_sendmsg+0x10/0x10 [ 571.818476][T10275] ? __fget_files+0x2a/0x420 [ 571.818496][T10275] ? __fget_files+0x3a2/0x420 [ 571.818527][T10275] __x64_sys_sendmsg+0x1bd/0x2a0 [ 571.818549][T10275] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 571.818578][T10275] ? __pfx_ksys_write+0x10/0x10 [ 571.818611][T10275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.818631][T10275] do_syscall_64+0x174/0x580 [ 571.818650][T10275] ? trace_irq_disable+0x3b/0x140 [ 571.818675][T10275] ? clear_bhb_loop+0x40/0x90 [ 571.818697][T10275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.818715][T10275] RIP: 0033:0x7f4b5039ce59 [ 571.818732][T10275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.818747][T10275] RSP: 002b:00007f4b5122d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.818767][T10275] RAX: ffffffffffffffda RBX: 00007f4b50615fa0 RCX: 00007f4b5039ce59 [ 571.818780][T10275] RDX: 00000000240280d1 RSI: 0000200000002dc0 RDI: 0000000000000005 [ 571.818792][T10275] RBP: 00007f4b5122d090 R08: 0000000000000000 R09: 0000000000000000 [ 571.818804][T10275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 571.818814][T10275] R13: 00007f4b50616038 R14: 00007f4b50615fa0 R15: 00007ffe03c18d98 [ 571.818849][T10275] [ 573.001243][T10312] netlink: 'syz.3.1267': attribute type 126 has an invalid length. [ 573.043164][T10312] syzkaller0: entered promiscuous mode [ 573.056887][T10312] syzkaller0: entered allmulticast mode [ 573.080590][T10312] netlink: 'syz.3.1267': attribute type 126 has an invalid length. [ 573.421450][T10314] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 573.527991][T10336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1277'. [ 573.825780][T10347] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1280'. [ 573.905353][T10355] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1283'. [ 574.122077][T10363] FAULT_INJECTION: forcing a failure. [ 574.122077][T10363] name failslab, interval 1, probability 0, space 0, times 0 [ 574.166619][T10363] CPU: 1 UID: 0 PID: 10363 Comm: syz.0.1285 Not tainted syzkaller #0 PREEMPT(full) [ 574.166649][T10363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 574.166659][T10363] Call Trace: [ 574.166667][T10363] [ 574.166674][T10363] dump_stack_lvl+0xe8/0x150 [ 574.166700][T10363] should_fail_ex+0x40c/0x560 [ 574.166730][T10363] should_failslab+0xa8/0x100 [ 574.166759][T10363] __kmalloc_cache_noprof+0x88/0x660 [ 574.166782][T10363] ? __sctp_v6_cmp_addr+0x1d1/0x4f0 [ 574.166801][T10363] ? sctp_add_bind_addr+0x8c/0x370 [ 574.166831][T10363] sctp_add_bind_addr+0x8c/0x370 [ 574.166860][T10363] sctp_copy_local_addr_list+0x31a/0x4e0 [ 574.166888][T10363] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 574.166933][T10363] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 574.166960][T10363] ? sctp_v6_is_any+0x64/0x80 [ 574.166977][T10363] ? sctp_copy_one_addr+0x93/0x360 [ 574.167004][T10363] sctp_bind_addr_copy+0xb3/0x3c0 [ 574.167032][T10363] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 574.167059][T10363] sctp_connect_new_asoc+0x2ff/0x6b0 [ 574.167084][T10363] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 574.167112][T10363] ? __local_bh_enable_ip+0xd0/0x130 [ 574.167129][T10363] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 574.167153][T10363] ? security_sctp_bind_connect+0x7e/0x2c0 [ 574.167178][T10363] sctp_sendmsg+0x159b/0x2d00 [ 574.167215][T10363] ? __pfx_sctp_sendmsg+0x10/0x10 [ 574.167247][T10363] ? aa_sk_perm+0x6d5/0x900 [ 574.167280][T10363] ? __pfx_aa_sk_perm+0x10/0x10 [ 574.167307][T10363] ? sock_rps_record_flow+0x19/0x350 [ 574.167336][T10363] ? inet_sendmsg+0x298/0x320 [ 574.167359][T10363] ? __pfx_inet_sendmsg+0x10/0x10 [ 574.167384][T10363] ____sys_sendmsg+0x853/0xa20 [ 574.167414][T10363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.167441][T10363] ? import_iovec+0x73/0xa0 [ 574.167465][T10363] ___sys_sendmsg+0x2a5/0x360 [ 574.167482][T10363] ? __lock_acquire+0x683/0x2cd0 [ 574.167503][T10363] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.167558][T10363] ? __fget_files+0x2a/0x420 [ 574.167579][T10363] ? __fget_files+0x3a2/0x420 [ 574.167609][T10363] __x64_sys_sendmsg+0x1bd/0x2a0 [ 574.167631][T10363] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.167659][T10363] ? __pfx_ksys_write+0x10/0x10 [ 574.167693][T10363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.167712][T10363] do_syscall_64+0x174/0x580 [ 574.167732][T10363] ? trace_irq_disable+0x3b/0x140 [ 574.167756][T10363] ? clear_bhb_loop+0x40/0x90 [ 574.167779][T10363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.167796][T10363] RIP: 0033:0x7f321f99ce59 [ 574.167814][T10363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.167828][T10363] RSP: 002b:00007f32207f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.167848][T10363] RAX: ffffffffffffffda RBX: 00007f321fc15fa0 RCX: 00007f321f99ce59 [ 574.167861][T10363] RDX: 00000000240280d1 RSI: 0000200000002dc0 RDI: 0000000000000005 [ 574.167872][T10363] RBP: 00007f32207f8090 R08: 0000000000000000 R09: 0000000000000000 [ 574.167884][T10363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 574.167894][T10363] R13: 00007f321fc16038 R14: 00007f321fc15fa0 R15: 00007fffff2f9018 [ 574.167923][T10363] [ 574.179587][T10360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1282'. [ 574.431942][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 575.005887][T10391] veth0_macvtap: entered allmulticast mode [ 575.053480][T10391] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 575.550919][T10412] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1298'. [ 575.601931][T10412] openvswitch: netlink: Flow actions attr not present in new flow. [ 575.670917][T10415] Unsupported ieee802154 address type: 0 [ 575.708136][T10417] netlink: 'syz.4.1301': attribute type 1 has an invalid length. [ 575.732773][T10417] netlink: 'syz.4.1301': attribute type 2 has an invalid length. [ 575.771696][T10417] netlink: 'syz.4.1301': attribute type 2 has an invalid length. [ 575.870268][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'. [ 575.994929][T10423] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 576.263625][T10433] syzkaller0: entered promiscuous mode [ 576.283482][T10433] syzkaller0: entered allmulticast mode [ 576.344076][T10444] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1308'. [ 576.425710][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1308'. [ 576.472892][T10444] openvswitch: netlink: Flow actions attr not present in new flow. [ 576.815438][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1312'. [ 576.854292][T10461] netlink: 'syz.2.1310': attribute type 15 has an invalid length. [ 577.526753][T10487] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1318'. [ 579.105417][T10467] hsr0: entered promiscuous mode [ 579.172771][T10482] bridge3: entered promiscuous mode [ 579.179827][T10482] bridge3: entered allmulticast mode [ 579.572378][T10506] netlink: 'syz.2.1325': attribute type 9 has an invalid length. [ 579.755397][T10514] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1328'. [ 580.029392][T10524] netlink: 'syz.4.1330': attribute type 11 has an invalid length. [ 580.041447][T10524] netlink: 'syz.4.1330': attribute type 11 has an invalid length. [ 580.050740][T10524] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1330'. [ 580.063500][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1326'. [ 580.413727][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'. [ 580.533579][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1332'. [ 581.022380][T10566] hsr0: entered promiscuous mode [ 581.152990][T10574] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1343'. [ 581.176129][T10575] bridge_slave_1: left allmulticast mode [ 581.200214][T10575] bridge_slave_1: left promiscuous mode [ 581.228098][T10575] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.265395][T10575] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 581.303806][T10558] hsr0: left promiscuous mode [ 581.799560][T10603] syzkaller1: entered promiscuous mode [ 581.819838][T10603] syzkaller1: entered allmulticast mode [ 582.033229][T10609] __nla_validate_parse: 1 callbacks suppressed [ 582.033249][T10609] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1352'. [ 582.211507][T10611] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1354'. [ 582.246465][T10611] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1354'. [ 582.455728][T10616] lo speed is unknown, defaulting to 1000 [ 583.189460][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1362'. [ 583.280292][T10649] ipip0: entered promiscuous mode [ 584.561142][T10698] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1375'. [ 585.092780][T10714] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.100423][T10714] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.145041][T10717] xt_l2tp: invalid flags combination: 0 [ 585.164985][T10714] bridge0: entered allmulticast mode [ 585.325265][T10717] lo speed is unknown, defaulting to 1000 [ 585.405676][T10727] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1379'. [ 586.524789][T10771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1391'. [ 586.628227][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1391'. [ 587.231871][T10798] bridge0: port 4(veth0_virt_wifi) entered blocking state [ 587.267229][T10798] bridge0: port 4(veth0_virt_wifi) entered disabled state [ 587.282635][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'. [ 587.299579][T10798] veth0_virt_wifi: entered allmulticast mode [ 587.357869][T10798] veth0_virt_wifi: entered promiscuous mode [ 588.008656][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1407'. [ 588.080235][T10838] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1408'. [ 588.501357][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 588.550384][T10854] netlink: 'syz.0.1414': attribute type 2 has an invalid length. [ 588.585164][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1414'. [ 588.617591][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1416'. [ 588.658047][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1415'. [ 589.012246][T10880] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 589.117304][T10882] netlink: 'syz.1.1420': attribute type 1 has an invalid length. [ 589.192772][T10884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1420'. [ 589.276662][T10891] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1423'. [ 589.286960][T10891] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1423'. [ 591.361418][T10994] netlink: 'syz.4.1450': attribute type 4 has an invalid length. [ 591.386530][T10994] netlink: 'syz.4.1450': attribute type 4 has an invalid length. [ 592.226185][T11033] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 592.756342][T11057] __nla_validate_parse: 12 callbacks suppressed [ 592.756393][T11057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1475'. [ 592.903965][T11065] netlink: 'syz.2.1475': attribute type 12 has an invalid length. [ 592.913423][T11065] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1475'. [ 593.089143][T11070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1480'. [ 593.152573][T11070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1480'. [ 593.200363][T11079] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 593.251952][T11073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1480'. [ 593.269542][T11073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1480'. [ 593.295130][T11073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1480'. [ 593.314432][T11085] netlink: 'syz.1.1484': attribute type 1 has an invalid length. [ 593.330026][T11073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1480'. [ 593.344673][T11085] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1484'. [ 593.348400][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1483'. [ 593.362048][T11085] netlink: 'syz.1.1484': attribute type 1 has an invalid length. [ 593.839361][T11098] bond7: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 593.850439][T11098] bond7: entered promiscuous mode [ 593.855993][T11098] 8021q: adding VLAN 0 to HW filter on device bond7 [ 593.873719][T11105] netlink: 'syz.4.1489': attribute type 1 has an invalid length. [ 595.020756][T11141] ip6gre1: entered promiscuous mode [ 595.051532][T11141] ip6gre1: entered allmulticast mode [ 595.120242][T11145] netlink: 'syz.3.1500': attribute type 6 has an invalid length. [ 595.332929][T11161] openvswitch: netlink: IP tunnel dst address not specified [ 595.452428][T11142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.548577][T11142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.760739][T11164] bond5: option arp_interval: invalid value (18446744073709551615) [ 595.770139][T11164] bond5: option arp_interval: allowed values 0 - 2147483647 [ 595.791292][T11164] bond5 (unregistering): Released all slaves [ 596.196363][T11193] bond5: (slave batadv0): Releasing active interface [ 596.697666][T11206] bond4: Removing last arp target with arp_interval on [ 596.961952][T11227] bridge0: port 5(dummy0) entered blocking state [ 596.977187][T11227] bridge0: port 5(dummy0) entered disabled state [ 596.993837][T11227] dummy0: entered allmulticast mode [ 597.037211][T11227] dummy0: entered promiscuous mode [ 597.107223][T11225] syz_tun: entered allmulticast mode [ 597.992165][T11279] __nla_validate_parse: 16 callbacks suppressed [ 597.992185][T11279] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1543'. [ 598.200124][T11285] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1544'. [ 598.244929][T11285] syzkaller1: entered promiscuous mode [ 598.259565][T11285] syzkaller1: entered allmulticast mode [ 598.483230][T11305] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 598.512736][T11300] IPVS: Scheduler module ip_vs_sip not found [ 599.149280][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1554'. [ 599.213956][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1557'. [ 599.233014][T11342] mac80211_hwsim hwsim27 »»»»»»: renamed from wlan0 [ 599.294769][T11332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1554'. [ 599.394128][T11340] sctp: [Deprecated]: syz.2.1556 (pid 11340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 599.394128][T11340] Use struct sctp_sack_info instead [ 599.446545][T11346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1556'. [ 599.481983][T11349] sctp: [Deprecated]: syz.1.1559 (pid 11349) Use of int in max_burst socket option. [ 599.481983][T11349] Use struct sctp_assoc_value instead [ 599.520841][T11340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1556'. [ 599.794037][T11359] gretap1: entered allmulticast mode [ 599.835971][T11361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1564'. [ 599.848267][T11354] lo speed is unknown, defaulting to 1000 [ 599.903515][T11366] netlink: zone id is out of range [ 599.909210][T11361] 8021q: adding VLAN 0 to HW filter on device bond5 [ 599.988150][T11366] netlink: zone id is out of range [ 599.993447][T11366] netlink: zone id is out of range [ 599.998704][T11366] netlink: zone id is out of range [ 600.003953][T11366] netlink: zone id is out of range [ 600.009311][T11366] netlink: zone id is out of range [ 600.014564][T11366] netlink: zone id is out of range [ 600.019791][T11366] netlink: zone id is out of range [ 600.087774][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1567'. [ 600.106540][T11361] ipvlan3: entered allmulticast mode [ 600.119978][T11361] bond5: entered allmulticast mode [ 600.189269][T11366] bond5: (slave ipip1): refused to change device type [ 600.394139][T11374] tipc: Enabling of bearer rejected, failed to enable media [ 600.562842][T11378] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1569'. [ 601.732864][T11435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.907538][T11439] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 601.965739][T11439] bond6 (unregistering): Released all slaves [ 602.037969][T11446] net_ratelimit: 337 callbacks suppressed [ 602.037998][T11446] netlink: ct family unspecified [ 602.176827][T11444] syzkaller0: entered promiscuous mode [ 602.207333][T11444] syzkaller0: entered allmulticast mode [ 602.641682][T11470] syzkaller0: entered promiscuous mode [ 602.665928][T11470] syzkaller0: entered allmulticast mode [ 602.694970][T11475] netlink: 'syz.1.1595': attribute type 3 has an invalid length. [ 602.825223][T11475] tipc: Enabling of bearer rejected, failed to enable media [ 603.449455][T11510] __nla_validate_parse: 12 callbacks suppressed [ 603.449473][T11510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1605'. [ 603.501871][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'. [ 603.680235][T11519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1608'. [ 603.763576][T11524] netlink: 'syz.0.1609': attribute type 61 has an invalid length. [ 603.828296][T11527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1611'. [ 603.844568][T11527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1611'. [ 603.942335][T11533] netlink: 'syz.3.1611': attribute type 1 has an invalid length. [ 604.083434][T11538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1614'. [ 604.392180][T11548] 8021q: adding VLAN 0 to HW filter on device bond9 [ 604.450921][T11548] bond9 (unregistering): Released all slaves [ 605.153996][T11571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1620'. [ 605.181880][T11574] tc_dump_action: action bad kind [ 606.252966][T11621] erspan0: mtu less than device minimum [ 606.845096][T11655] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.854484][T11655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.863389][T11655] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.871449][T11655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.878759][T11664] netlink: 'syz.2.1642': attribute type 29 has an invalid length. [ 606.923629][T11655] hsr0: left promiscuous mode [ 606.931300][T11655] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 607.396434][T11688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1650'. [ 607.406688][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1650'. [ 609.118560][T11632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 609.455610][T11719] syzkaller0: entered promiscuous mode [ 609.461747][T11719] syzkaller0: entered allmulticast mode [ 609.475361][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1662'. [ 609.507295][T11719] 0: reclassify loop, rule prio 0, protocol 800 [ 609.638362][T11730] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1665'. [ 609.988022][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1669'. [ 610.008436][T11748] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 610.017435][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1671'. [ 610.026837][T11744] netlink: 'syz.2.1669': attribute type 6 has an invalid length. [ 610.145516][T11753] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1672'. [ 610.175223][T11755] syzkaller1: entered promiscuous mode [ 610.191523][T11755] syzkaller1: entered allmulticast mode [ 610.491644][T11774] x_tables: duplicate underflow at hook 2 [ 610.524214][T11772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1677'. [ 610.548001][T11765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1677'. [ 610.585345][T11765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1677'. [ 610.599188][T11772] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1677'. [ 610.682931][T11771] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 611.260614][T11799] netlink: 'syz.2.1688': attribute type 1 has an invalid length. [ 611.339159][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'. [ 611.551040][T11810] netlink: 'syz.2.1691': attribute type 1 has an invalid length. [ 611.785581][T11828] nbd: must specify at least one socket [ 611.865269][T11820] gretap1: entered allmulticast mode [ 612.001182][T11820] bond7: (slave gretap1): making interface the new active one [ 612.146802][T11820] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 612.409152][T11828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.429221][T11828] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.483776][T11828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 612.494354][T11828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 612.506974][T11828] veth1_vlan: left promiscuous mode [ 612.514127][T11828] veth0_vlan: left promiscuous mode [ 612.521587][T11828] veth0_vlan: entered promiscuous mode [ 612.533913][T11828] veth1_vlan: entered promiscuous mode [ 612.546180][T11828] veth1_macvtap: left promiscuous mode [ 612.553139][T11828] veth0_macvtap: left promiscuous mode [ 612.560338][T11828] veth0_macvtap: entered promiscuous mode [ 612.569434][T11828] veth1_macvtap: entered promiscuous mode [ 612.583191][T11828] bridge0: port 3(vlan3) entered blocking state [ 612.589628][T11828] bridge0: port 3(vlan3) entered forwarding state [ 612.602540][T11828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 612.612502][T11828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 612.621852][T11828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 612.630621][T11828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 612.639014][T11828] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 612.801890][T11859] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 612.840482][T11859] netlink: 'syz.4.1695': attribute type 12 has an invalid length. [ 614.661033][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.670238][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.689099][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.696307][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.781043][ T7887] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.811977][ T7887] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.842002][ T7887] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.871061][T11859] netlink: 'syz.4.1695': attribute type 12 has an invalid length. [ 614.875211][T11879] __nla_validate_parse: 1 callbacks suppressed [ 614.875241][T11879] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1702'. [ 614.897218][T11869] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 614.904774][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1695'. [ 614.924694][T11869] team0: Port device batadv1 added [ 614.971626][ T7887] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.003663][ T7887] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.037217][ T7887] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.072512][ T7887] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.103817][ T7887] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.248135][T11893] hsr0: entered promiscuous mode [ 615.375688][T11906] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1709'. [ 615.405274][T11909] netlink: 'syz.2.1704': attribute type 1 has an invalid length. [ 615.437317][T11909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.475070][T11906] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 615.512607][T11911] netlink: 'syz.0.1710': attribute type 1 has an invalid length. [ 615.581489][T11918] netlink: 'syz.4.1711': attribute type 9 has an invalid length. [ 615.595482][T11918] netlink: 'syz.4.1711': attribute type 6 has an invalid length. [ 615.605828][T11918] netlink: 'syz.4.1711': attribute type 7 has an invalid length. [ 615.610195][T11911] bond5: entered promiscuous mode [ 615.620638][T11918] netlink: 'syz.4.1711': attribute type 8 has an invalid length. [ 615.633094][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1711'. [ 615.644070][T11911] 8021q: adding VLAN 0 to HW filter on device bond5 [ 615.698170][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1710'. [ 615.703257][T11922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.814991][T11924] syzkaller0: entered promiscuous mode [ 615.821095][T11924] syzkaller0: entered allmulticast mode [ 616.402044][T11943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1721'. [ 616.411906][T11943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1721'. [ 616.481555][T11944] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1721'. [ 616.496032][T11944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.507655][T11944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.517651][T11944] bond0 (unregistering): Released all slaves [ 617.994491][T11883] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 618.973868][T12004] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1728'. [ 618.991529][T12004] netlink: 'syz.3.1728': attribute type 1 has an invalid length. [ 620.132142][T12055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1740'. [ 620.703428][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1746'. [ 620.785830][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1747'. [ 621.331208][T12094] xfrm1: entered allmulticast mode [ 621.789611][T12112] team0: Device macvlan2 failed to change mtu [ 623.743578][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1775'. [ 623.857608][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1775'. [ 623.881511][T12164] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1762'. [ 623.991892][T12164] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1762'. [ 624.057964][T12199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1776'. [ 624.672699][T12211] hmó3)ó: entered promiscuous mode [ 625.419442][T12244] netlink: 'syz.4.1789': attribute type 1 has an invalid length. [ 625.639496][T12271] netlink: 'syz.4.1789': attribute type 10 has an invalid length. [ 625.664690][T12271] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1789'. [ 625.702335][T12279] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1789'. [ 625.735055][T12244] 8021q: adding VLAN 0 to HW filter on device bond6 [ 625.795459][T12259] bond6: (slave veth7): Enslaving as an active interface with a down link [ 625.841633][T12264] bond6: (slave dummy0): making interface the new active one [ 625.880272][T12264] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 625.922824][T12271] dummy0: entered promiscuous mode [ 625.977952][T12271] bond6: (slave dummy0): Releasing active interface [ 626.213713][T12299] openvswitch: netlink: IPv6 tunnel dst address is zero [ 626.257888][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 626.298646][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 626.321422][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 626.346712][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 626.365049][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 626.382975][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 626.406338][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 626.428599][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 627.075285][T12333] nbd: must specify a size in bytes for the device [ 627.540870][T12359] syzkaller0: entered promiscuous mode [ 627.562381][T12359] syzkaller0: entered allmulticast mode [ 628.020591][T12378] netlink: 'syz.0.1823': attribute type 1 has an invalid length. [ 628.180433][T12378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.566404][T12405] netlink: 'syz.4.1829': attribute type 12 has an invalid length. [ 628.655040][T12407] netlink: 'syz.0.1830': attribute type 1 has an invalid length. [ 628.719673][T12411] netlink: 'syz.3.1831': attribute type 3 has an invalid length. [ 629.087895][T12436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.511093][T12436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.603039][T12446] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.857173][T12482] netlink: 'syz.1.1844': attribute type 12 has an invalid length. [ 631.556009][T12558] __nla_validate_parse: 108 callbacks suppressed [ 631.556044][T12558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1859'. [ 631.750005][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1859'. [ 631.795721][T12571] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 631.816728][T12571] pim6reg0: persist disabled [ 632.652452][T12611] pimreg9: entered allmulticast mode [ 633.004044][T12624] xt_hashlimit: size too large, truncated to 1048576 [ 633.525448][T12645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1877'. [ 633.886275][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1879'. [ 634.029553][T12671] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1881'. [ 634.032598][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1883'. [ 634.049396][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1879'. [ 634.440653][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1884'. [ 634.473895][T12681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1885'. [ 634.641271][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1885'. [ 634.903161][T12698] syzkaller0: entered promiscuous mode [ 634.960188][T12698] syzkaller0: entered allmulticast mode [ 635.133509][T12719] netlink: 'syz.3.1889': attribute type 10 has an invalid length. [ 636.420414][T12775] tipc: Enabling of bearer rejected, failed to enable media [ 636.451061][T12775] netlink: 'syz.3.1905': attribute type 1 has an invalid length. [ 636.490262][T12775] 8021q: adding VLAN 0 to HW filter on device bond4 [ 636.561407][T12772] 8021q: adding VLAN 0 to HW filter on device bond4 [ 636.600701][T12772] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 636.619247][T12772] bond4: (slave gre1): Error -95 calling set_mac_address [ 636.681605][T12775] gretap1: entered promiscuous mode [ 636.699627][T12775] bond4: (slave gretap1): making interface the new active one [ 636.709729][T12775] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 637.229361][ T29] audit: type=1107 audit(1781564315.323:3): pid=12809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 637.303492][T12817] __nla_validate_parse: 5 callbacks suppressed [ 637.303523][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'. [ 637.368932][T12817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1917'. [ 637.478981][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'. [ 637.489258][ T5692] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.510073][ T5692] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.532385][T12817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1917'. [ 637.547096][ T5692] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.562934][ T5692] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.664715][T12827] netlink: 'syz.2.1921': attribute type 1 has an invalid length. [ 637.951298][T12827] 8021q: adding VLAN 0 to HW filter on device bond8 [ 638.620675][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1935'. [ 639.010973][T12911] pim6reg: left allmulticast mode [ 641.127272][T12857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 641.417109][T12947] syzkaller0: entered promiscuous mode [ 641.437281][T12947] syzkaller0: entered allmulticast mode [ 641.594645][T12958] bond7: option ad_user_port_key: invalid value (65535) [ 641.604742][T12958] bond7: option ad_user_port_key: allowed values 0 - 1023 [ 641.629855][T12958] bond7 (unregistering): Released all slaves [ 641.726068][T12971] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1960'. [ 642.033741][T12983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1963'. [ 642.170104][T12999] x_tables: duplicate entry at hook 1 [ 642.281233][T13004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 642.549085][T13015] x_tables: duplicate underflow at hook 2 [ 642.712346][T13025] netlink: 'syz.1.1973': attribute type 1 has an invalid length. [ 642.871138][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1974'. [ 643.088159][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'. [ 643.199791][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1976'. [ 643.371324][T13050] netlink: 'syz.1.1978': attribute type 5 has an invalid length. [ 643.762348][T13067] x_tables: duplicate underflow at hook 1 [ 644.320875][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 644.405068][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1988'. [ 645.032656][T12988] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 645.056768][T13043] netlink: 'syz.4.1977': attribute type 9 has an invalid length. [ 645.613630][T13117] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1998'. [ 645.691020][T13118] (: renamed from bridge_slave_0 (while UP) [ 646.185395][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2006'. [ 646.215789][T13143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2008'. [ 646.233184][T13143] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 646.240480][T13143] IPv6: NLM_F_CREATE should be set when creating new route [ 646.305493][T13144] geneve2: entered allmulticast mode [ 646.338165][T13144] pim6reg1: entered allmulticast mode [ 646.524812][T13149] netlink: 'syz.2.2010': attribute type 1 has an invalid length. [ 646.644789][T13151] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 646.712240][T13160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2010'. [ 646.890551][T13149] bond9: entered promiscuous mode [ 646.896081][T13149] 8021q: adding VLAN 0 to HW filter on device bond9 [ 646.912278][ T5694] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.919852][ T5694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.270908][T13191] netlink: 'syz.3.2018': attribute type 1 has an invalid length. [ 647.289138][T13193] gretap2: entered allmulticast mode [ 647.715494][T13209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2023'. [ 648.136101][T13223] team0: entered promiscuous mode [ 648.156297][T13223] team_slave_0: entered promiscuous mode [ 648.174932][T13223] team_slave_1: entered promiscuous mode [ 648.224543][T13223] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 648.307694][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2030'. [ 648.347129][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2030'. [ 648.573864][T13248] netlink: 'syz.1.2033': attribute type 1 has an invalid length. [ 649.250249][T13273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2043'. [ 649.899476][T13301] geneve0: entered promiscuous mode [ 649.921620][T13301] macvlan3: entered promiscuous mode [ 650.005259][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2053'. [ 650.801109][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2065'. [ 650.833876][T13350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2066'. [ 650.848039][T13348] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 651.061468][T13358] nbd: socks must be embedded in a SOCK_ITEM attr [ 651.086047][T13354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2068'. [ 651.115468][T13354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2068'. [ 651.141065][T13361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2071'. [ 651.195540][T13369] netlink: 'syz.1.2071': attribute type 1 has an invalid length. [ 651.584878][T13372] syzkaller0: entered promiscuous mode [ 651.596399][T13384] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.2076'. [ 651.611730][T13372] syzkaller0: entered allmulticast mode [ 651.626764][T13381] sch_tbf: peakrate 7 is lower than or equals to rate 3382317862848221139 ! [ 654.616490][T13450] __nla_validate_parse: 1 callbacks suppressed [ 654.616510][T13450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2093'. [ 655.310057][T13409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 655.933059][T13488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.971955][T13488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.984278][T13488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.092053][T13492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2103'. [ 656.107127][T13492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2103'. [ 656.301876][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2105'. [ 656.463673][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2105'. [ 656.665872][T13513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.785556][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2109'. [ 657.009106][T13522] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2111'. [ 657.557846][ T4945] Bluetooth: hci4: command 0x0405 tx timeout [ 657.831368][T13539] netlink: 'syz.1.2117': attribute type 1 has an invalid length. [ 658.042594][T13539] 8021q: adding VLAN 0 to HW filter on device bond10 [ 658.071796][T13552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 658.813748][T13576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'. [ 659.100245][T13587] ipt_REJECT: TCP_RESET invalid for non-tcp [ 659.239215][T13594] sctp: [Deprecated]: syz.3.2137 (pid 13594) Use of struct sctp_assoc_value in delayed_ack socket option. [ 659.239215][T13594] Use struct sctp_sack_info instead [ 659.555397][T13608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2142'. [ 659.750618][T13613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2144'. [ 660.062564][T13625] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 660.128514][T13619] bond7 (unregistering): Released all slaves [ 660.295603][T13632] pimreg: entered allmulticast mode [ 660.669398][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2153'. [ 660.801516][ T29] audit: type=1800 audit(1781564338.903:4): pid=13650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2157" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2122 res=0 errno=0 [ 661.188346][T13665] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2161'. [ 661.222275][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2161'. [ 661.256456][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2161'. [ 661.258491][T13667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2162'. [ 661.321001][T13672] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2164'. [ 661.334926][T13665] bond3: (slave bond0): Removing an active aggregator [ 661.346048][T13665] bond3: (slave bond0): Releasing backup interface [ 661.604131][T13681] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 661.621073][T13681] netlink: 'syz.3.2167': attribute type 21 has an invalid length. [ 661.899112][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2172'. [ 662.458490][T13713] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2176'. [ 663.105290][T13731] FAULT_INJECTION: forcing a failure. [ 663.105290][T13731] name failslab, interval 1, probability 0, space 0, times 0 [ 663.120873][T13729] syzkaller0: entered promiscuous mode [ 663.139626][T13729] syzkaller0: entered allmulticast mode [ 663.154780][T13731] CPU: 0 UID: 0 PID: 13731 Comm: syz.0.2183 Not tainted syzkaller #0 PREEMPT(full) [ 663.154804][T13731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 663.154814][T13731] Call Trace: [ 663.154822][T13731] [ 663.154830][T13731] dump_stack_lvl+0xe8/0x150 [ 663.154857][T13731] should_fail_ex+0x40c/0x560 [ 663.154889][T13731] should_failslab+0xa8/0x100 [ 663.154915][T13731] ? skb_clone+0x212/0x3a0 [ 663.154935][T13731] kmem_cache_alloc_noprof+0x87/0x650 [ 663.154957][T13731] ? apparmor_capable+0x126/0x170 [ 663.154984][T13731] skb_clone+0x212/0x3a0 [ 663.155001][T13731] ? nfnetlink_rcv+0x4b0/0x28c0 [ 663.155030][T13731] nfnetlink_rcv+0x4de/0x28c0 [ 663.155055][T13731] ? is_bpf_text_address+0x292/0x2b0 [ 663.155078][T13731] ? kernel_text_address+0xa5/0xe0 [ 663.155103][T13731] ? __kernel_text_address+0xd/0x30 [ 663.155125][T13731] ? unwind_get_return_address+0x4d/0x90 [ 663.155146][T13731] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 663.155171][T13731] ? arch_stack_walk+0xfb/0x150 [ 663.155206][T13731] ? __lock_acquire+0x683/0x2cd0 [ 663.155225][T13731] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 663.155270][T13731] ? __lock_acquire+0x683/0x2cd0 [ 663.155306][T13731] ? __netlink_lookup+0xc6/0x8b0 [ 663.155337][T13731] ? netlink_deliver_tap+0x2e/0x1b0 [ 663.155357][T13731] ? netlink_deliver_tap+0x2e/0x1b0 [ 663.155382][T13731] ? netlink_deliver_tap+0x2e/0x1b0 [ 663.155400][T13731] ? netlink_deliver_tap+0x2e/0x1b0 [ 663.155424][T13731] netlink_unicast+0x7bb/0x940 [ 663.155461][T13731] netlink_sendmsg+0x813/0xb40 [ 663.155489][T13731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.155512][T13731] ? aa_sock_msg_perm+0xf1/0x1b0 [ 663.155538][T13731] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.155559][T13731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.155580][T13731] ____sys_sendmsg+0x9b9/0xa20 [ 663.155600][T13731] ? __might_fault+0xaf/0x130 [ 663.155628][T13731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.155656][T13731] ? import_iovec+0x73/0xa0 [ 663.155679][T13731] ___sys_sendmsg+0x2a5/0x360 [ 663.155697][T13731] ? __lock_acquire+0x683/0x2cd0 [ 663.155719][T13731] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.155772][T13731] ? __fget_files+0x2a/0x420 [ 663.155793][T13731] ? __fget_files+0x3a2/0x420 [ 663.155823][T13731] __x64_sys_sendmsg+0x1bd/0x2a0 [ 663.155845][T13731] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 663.155873][T13731] ? __pfx_ksys_write+0x10/0x10 [ 663.155905][T13731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.155925][T13731] do_syscall_64+0x174/0x580 [ 663.155947][T13731] ? clear_bhb_loop+0x40/0x90 [ 663.155969][T13731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.155987][T13731] RIP: 0033:0x7f321f99ce59 [ 663.156003][T13731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.156018][T13731] RSP: 002b:00007f32207f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.156037][T13731] RAX: ffffffffffffffda RBX: 00007f321fc15fa0 RCX: 00007f321f99ce59 [ 663.156050][T13731] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 663.156061][T13731] RBP: 00007f32207f8090 R08: 0000000000000000 R09: 0000000000000000 [ 663.156073][T13731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.156083][T13731] R13: 00007f321fc16038 R14: 00007f321fc15fa0 R15: 00007fffff2f9018 [ 663.156112][T13731] [ 663.261254][T13729] bridge3: entered allmulticast mode [ 663.516281][T13732] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2181'. [ 663.612401][T13736] netlink: 'syz.0.2184': attribute type 3 has an invalid length. [ 663.878854][T13743] FAULT_INJECTION: forcing a failure. [ 663.878854][T13743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.907005][T13743] CPU: 1 UID: 0 PID: 13743 Comm: syz.1.2186 Not tainted syzkaller #0 PREEMPT(full) [ 663.907031][T13743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 663.907041][T13743] Call Trace: [ 663.907049][T13743] [ 663.907056][T13743] dump_stack_lvl+0xe8/0x150 [ 663.907083][T13743] should_fail_ex+0x40c/0x560 [ 663.907115][T13743] _copy_from_iter+0x1d3/0x1660 [ 663.907137][T13743] ? rcu_is_watching+0x15/0xb0 [ 663.907163][T13743] ? __pfx__copy_from_iter+0x10/0x10 [ 663.907179][T13743] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 663.907210][T13743] ? netlink_sendmsg+0x650/0xb40 [ 663.907229][T13743] ? skb_put+0x112/0x210 [ 663.907249][T13743] netlink_sendmsg+0x6c0/0xb40 [ 663.907277][T13743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.907299][T13743] ? aa_sock_msg_perm+0xf1/0x1b0 [ 663.907326][T13743] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.907347][T13743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.907368][T13743] ____sys_sendmsg+0x9b9/0xa20 [ 663.907387][T13743] ? __might_fault+0xaf/0x130 [ 663.907415][T13743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.907442][T13743] ? import_iovec+0x73/0xa0 [ 663.907465][T13743] ___sys_sendmsg+0x2a5/0x360 [ 663.907483][T13743] ? __lock_acquire+0x683/0x2cd0 [ 663.907506][T13743] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.907557][T13743] ? __fget_files+0x2a/0x420 [ 663.907577][T13743] ? __fget_files+0x3a2/0x420 [ 663.907607][T13743] __x64_sys_sendmsg+0x1bd/0x2a0 [ 663.907629][T13743] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 663.907656][T13743] ? __pfx_ksys_write+0x10/0x10 [ 663.907693][T13743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.907713][T13743] do_syscall_64+0x174/0x580 [ 663.907733][T13743] ? trace_irq_disable+0x3b/0x140 [ 663.907757][T13743] ? clear_bhb_loop+0x40/0x90 [ 663.907779][T13743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.907797][T13743] RIP: 0033:0x7fa4a9f9ce59 [ 663.907814][T13743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.907828][T13743] RSP: 002b:00007fa4aae41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.907847][T13743] RAX: ffffffffffffffda RBX: 00007fa4aa215fa0 RCX: 00007fa4a9f9ce59 [ 663.907860][T13743] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 663.907871][T13743] RBP: 00007fa4aae41090 R08: 0000000000000000 R09: 0000000000000000 [ 663.907882][T13743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.907893][T13743] R13: 00007fa4aa216038 R14: 00007fa4aa215fa0 R15: 00007fff54a8b548 [ 663.907922][T13743] [ 664.460214][T13752] netlink: 'syz.0.2190': attribute type 7 has an invalid length. [ 664.798235][T13767] FAULT_INJECTION: forcing a failure. [ 664.798235][T13767] name failslab, interval 1, probability 0, space 0, times 0 [ 664.827041][T13767] CPU: 1 UID: 0 PID: 13767 Comm: syz.4.2194 Not tainted syzkaller #0 PREEMPT(full) [ 664.827066][T13767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 664.827076][T13767] Call Trace: [ 664.827083][T13767] [ 664.827090][T13767] dump_stack_lvl+0xe8/0x150 [ 664.827115][T13767] should_fail_ex+0x40c/0x560 [ 664.827148][T13767] should_failslab+0xa8/0x100 [ 664.827184][T13767] __kmalloc_cache_noprof+0x88/0x660 [ 664.827209][T13767] ? nfnetlink_rcv+0x1021/0x28c0 [ 664.827240][T13767] nfnetlink_rcv+0x1021/0x28c0 [ 664.827265][T13767] ? is_bpf_text_address+0x292/0x2b0 [ 664.827316][T13767] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 664.827386][T13767] ? netlink_deliver_tap+0x2e/0x1b0 [ 664.827417][T13767] ? netlink_deliver_tap+0x2e/0x1b0 [ 664.827435][T13767] ? netlink_deliver_tap+0x2e/0x1b0 [ 664.827459][T13767] netlink_unicast+0x7bb/0x940 [ 664.827495][T13767] netlink_sendmsg+0x813/0xb40 [ 664.827521][T13767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 664.827543][T13767] ? aa_sock_msg_perm+0xf1/0x1b0 [ 664.827569][T13767] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 664.827591][T13767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 664.827612][T13767] ____sys_sendmsg+0x9b9/0xa20 [ 664.827631][T13767] ? __might_fault+0xaf/0x130 [ 664.827658][T13767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 664.827686][T13767] ? import_iovec+0x73/0xa0 [ 664.827710][T13767] ___sys_sendmsg+0x2a5/0x360 [ 664.827728][T13767] ? __lock_acquire+0x683/0x2cd0 [ 664.827751][T13767] ? __pfx____sys_sendmsg+0x10/0x10 [ 664.827807][T13767] ? __fget_files+0x2a/0x420 [ 664.827828][T13767] ? __fget_files+0x3a2/0x420 [ 664.827859][T13767] __x64_sys_sendmsg+0x1bd/0x2a0 [ 664.827881][T13767] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 664.827910][T13767] ? __pfx_ksys_write+0x10/0x10 [ 664.827943][T13767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.827963][T13767] do_syscall_64+0x174/0x580 [ 664.827983][T13767] ? trace_irq_disable+0x3b/0x140 [ 664.828007][T13767] ? clear_bhb_loop+0x40/0x90 [ 664.828029][T13767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.828047][T13767] RIP: 0033:0x7f4b5039ce59 [ 664.828064][T13767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.828079][T13767] RSP: 002b:00007f4b5122d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 664.828098][T13767] RAX: ffffffffffffffda RBX: 00007f4b50615fa0 RCX: 00007f4b5039ce59 [ 664.828111][T13767] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 664.828123][T13767] RBP: 00007f4b5122d090 R08: 0000000000000000 R09: 0000000000000000 [ 664.828134][T13767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.828144][T13767] R13: 00007f4b50616038 R14: 00007f4b50615fa0 R15: 00007ffe03c18d98 [ 664.828183][T13767] [ 664.942894][T13776] IPVS: set_ctl: invalid protocol: 51 172.20.20.29:20008 [ 665.167860][T13779] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 665.228011][T13780] lo speed is unknown, defaulting to 1000 [ 665.811493][T13788] pim6reg: entered allmulticast mode [ 666.174753][T13797] __nla_validate_parse: 2 callbacks suppressed [ 666.174769][T13797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2201'. [ 666.226496][T13797] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2201'. [ 666.396514][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2204'. [ 666.789575][T13823] netlink: 'syz.0.2209': attribute type 1 has an invalid length. [ 666.803981][T13830] netlink: 'syz.0.2209': attribute type 1 has an invalid length. [ 666.839674][T13833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2211'. [ 666.920178][T13835] netlink: zone id is out of range [ 666.935501][T13835] netlink: zone id is out of range [ 666.947057][T13835] netlink: zone id is out of range [ 666.953487][T13835] netlink: zone id is out of range [ 666.960429][T13835] netlink: zone id is out of range [ 666.985977][T13835] netlink: zone id is out of range [ 666.997751][T13833] netlink: 824 bytes leftover after parsing attributes in process `syz.1.2211'. [ 667.012060][T13835] netlink: zone id is out of range [ 667.017199][T13835] netlink: zone id is out of range [ 667.022306][T13835] netlink: zone id is out of range [ 667.027417][T13835] netlink: zone id is out of range [ 667.327264][T13846] netlink: 'syz.3.2213': attribute type 1 has an invalid length. [ 667.356090][T13846] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2213'. [ 667.626519][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'. [ 667.645002][T13856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2218'. [ 667.876771][T13874] netlink: 'syz.0.2221': attribute type 8 has an invalid length. [ 667.931033][T13879] netlink: 'syz.1.2222': attribute type 1 has an invalid length. [ 667.967443][T13879] 8021q: adding VLAN 0 to HW filter on device bond11 [ 667.978911][T13879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2222'. [ 667.980073][T13882] netlink: 'syz.4.2224': attribute type 10 has an invalid length. [ 668.134726][T13885] hsr0: entered promiscuous mode [ 668.169766][T13883] hsr0: left promiscuous mode [ 668.187247][T13891] bridge_slave_0: left allmulticast mode [ 668.192922][T13891] bridge_slave_0: left promiscuous mode [ 668.198718][T13891] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.215007][T13891] bridge_slave_1: left allmulticast mode [ 668.247482][T13891] bridge_slave_1: left promiscuous mode [ 668.253982][T13891] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.266572][T13891] vlan3: left promiscuous mode [ 668.271542][T13891] geneve0: left promiscuous mode [ 668.287785][T13891] geneve0: entered promiscuous mode [ 668.503197][T13891] bond0: (slave bond_slave_0): Releasing backup interface [ 668.515920][T13891] bond0: (slave bond_slave_1): Releasing backup interface [ 668.526409][T13891] team_slave_0: left promiscuous mode [ 668.561773][T13900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2229'. [ 668.572444][T13891] team0: Port device team_slave_0 removed [ 668.584179][T13891] team_slave_1: left promiscuous mode [ 668.618126][T13891] team0: Port device team_slave_1 removed [ 668.995812][T13912] netlink: 'syz.1.2232': attribute type 10 has an invalid length. [ 669.062241][T13918] netlink: 'syz.1.2232': attribute type 10 has an invalid length. [ 669.139632][T13912] dummy0: entered promiscuous mode [ 669.161166][T13912] team0: Port device dummy0 added [ 669.175446][T13918] dummy0: left promiscuous mode [ 669.186751][T13918] team0: Port device dummy0 removed [ 669.199164][T13918] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 671.134199][T13971] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.141925][T13971] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.163799][T13989] __nla_validate_parse: 2 callbacks suppressed [ 671.163816][T13989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2254'. [ 671.774094][T11980] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.814565][T11980] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.853164][T11980] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.889961][T11980] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.194854][T14019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2262'. [ 672.219745][T14019] erspan0: entered promiscuous mode [ 672.233557][T14019] erspan0: entered allmulticast mode [ 672.804828][T14027] netlink: 'syz.4.2265': attribute type 1 has an invalid length. [ 672.851144][T14027] bond7: entered promiscuous mode [ 672.856868][T14027] 8021q: adding VLAN 0 to HW filter on device bond7 [ 672.914810][T14027] 8021q: adding VLAN 0 to HW filter on device bond7 [ 672.921705][T14027] bond7: (slave vti1): The slave device specified does not support setting the MAC address [ 672.931682][T14027] bond7: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 672.943619][T14027] bond7: (slave vti1): making interface the new active one [ 672.950830][T14027] vti1: entered promiscuous mode [ 672.956785][T14027] bond7: (slave vti1): Enslaving as an active interface with an up link [ 672.967509][T14035] Cannot find del_set index 4 as target [ 673.224442][ T4945] block nbd0: Receive control failed (result -32) [ 673.238081][ T4945] block nbd0: Receive control failed (result -32) [ 673.461146][T14053] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2269'. [ 673.497211][T14056] netlink: 'syz.3.2270': attribute type 5 has an invalid length. [ 673.573650][T14058] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2273'. [ 673.583521][T14053] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2269'. [ 673.610520][T14058] netlink: 'syz.4.2273': attribute type 7 has an invalid length. [ 673.618265][T14058] netlink: 'syz.4.2273': attribute type 8 has an invalid length. [ 673.777527][T14068] syzkaller0: entered promiscuous mode [ 673.790556][T14068] syzkaller0: entered allmulticast mode [ 673.836092][T14068] tc action pedit 'at' offset 2047 out of bounds [ 673.842998][T14068] tc action pedit 'at' offset 2047 out of bounds [ 673.849350][T14068] tc action pedit 'at' offset 2047 out of bounds [ 673.855685][T14068] tc action pedit 'at' offset 2047 out of bounds [ 673.862020][T14068] tc action pedit 'at' offset 2047 out of bounds [ 673.868353][T14068] tc action pedit 'at' offset 2047 out of bounds [ 673.874690][T14068] tc action pedit 'at' offset 2047 out of bounds [ 673.881029][T14068] tc action pedit 'at' offset 2047 out of bounds [ 673.887365][T14068] tc action pedit 'at' offset 2047 out of bounds [ 673.893699][T14068] tc action pedit 'at' offset 2047 out of bounds [ 673.900063][T14068] net_ratelimit: 19 callbacks suppressed [ 673.900076][T14068] TC_ACT_REPEAT abuse ? [ 674.347899][T14092] FAULT_INJECTION: forcing a failure. [ 674.347899][T14092] name failslab, interval 1, probability 0, space 0, times 0 [ 674.371826][T14092] CPU: 0 UID: 0 PID: 14092 Comm: syz.3.2281 Not tainted syzkaller #0 PREEMPT(full) [ 674.371853][T14092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 674.371863][T14092] Call Trace: [ 674.371870][T14092] [ 674.371878][T14092] dump_stack_lvl+0xe8/0x150 [ 674.371911][T14092] should_fail_ex+0x40c/0x560 [ 674.371942][T14092] should_failslab+0xa8/0x100 [ 674.371967][T14092] __kmalloc_cache_noprof+0x88/0x660 [ 674.371989][T14092] ? nft_pernet+0x23/0x240 [ 674.372011][T14092] ? nf_tables_commit+0x9c2/0xad20 [ 674.372038][T14092] nf_tables_commit+0x9c2/0xad20 [ 674.372063][T14092] ? stack_trace_save+0xa9/0x100 [ 674.372101][T14092] ? kasan_save_track+0x3e/0x80 [ 674.372121][T14092] ? __kasan_kmalloc+0x93/0xb0 [ 674.372142][T14092] ? __kmalloc_cache_noprof+0x318/0x660 [ 674.372162][T14092] ? nfnetlink_rcv+0x1021/0x28c0 [ 674.372185][T14092] ? netlink_unicast+0x7bb/0x940 [ 674.372207][T14092] ? netlink_sendmsg+0x813/0xb40 [ 674.372223][T14092] ? ____sys_sendmsg+0x9b9/0xa20 [ 674.372239][T14092] ? ___sys_sendmsg+0x2a5/0x360 [ 674.372254][T14092] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 674.372272][T14092] ? __pfx_nf_tables_commit+0x10/0x10 [ 674.372334][T14092] ? __kasan_kmalloc+0x93/0xb0 [ 674.372368][T14092] nfnetlink_rcv+0x1caf/0x28c0 [ 674.372392][T14092] ? is_bpf_text_address+0x292/0x2b0 [ 674.372441][T14092] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 674.372503][T14092] ? netlink_deliver_tap+0x2e/0x1b0 [ 674.372529][T14092] ? netlink_deliver_tap+0x2e/0x1b0 [ 674.372547][T14092] ? netlink_deliver_tap+0x2e/0x1b0 [ 674.372572][T14092] netlink_unicast+0x7bb/0x940 [ 674.372610][T14092] netlink_sendmsg+0x813/0xb40 [ 674.372639][T14092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.372662][T14092] ? aa_sock_msg_perm+0xf1/0x1b0 [ 674.372688][T14092] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 674.372709][T14092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.372729][T14092] ____sys_sendmsg+0x9b9/0xa20 [ 674.372747][T14092] ? __might_fault+0xaf/0x130 [ 674.372774][T14092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.372802][T14092] ? import_iovec+0x73/0xa0 [ 674.372824][T14092] ___sys_sendmsg+0x2a5/0x360 [ 674.372841][T14092] ? __lock_acquire+0x683/0x2cd0 [ 674.372863][T14092] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.372892][T14092] ? __lock_acquire+0x683/0x2cd0 [ 674.372938][T14092] ? __fget_files+0x2a/0x420 [ 674.372958][T14092] ? __fget_files+0x3a2/0x420 [ 674.372987][T14092] __x64_sys_sendmsg+0x1bd/0x2a0 [ 674.373009][T14092] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 674.373040][T14092] ? handle_softirqs+0x70f/0x840 [ 674.373065][T14092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.373084][T14092] do_syscall_64+0x174/0x580 [ 674.373105][T14092] ? clear_bhb_loop+0x40/0x90 [ 674.373125][T14092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.373139][T14092] RIP: 0033:0x7f5db519ce59 [ 674.373154][T14092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.373165][T14092] RSP: 002b:00007f5db6084028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.373180][T14092] RAX: ffffffffffffffda RBX: 00007f5db5415fa0 RCX: 00007f5db519ce59 [ 674.373193][T14092] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 674.373204][T14092] RBP: 00007f5db6084090 R08: 0000000000000000 R09: 0000000000000000 [ 674.373214][T14092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 674.373224][T14092] R13: 00007f5db5416038 R14: 00007f5db5415fa0 R15: 00007fffd29bea78 [ 674.373255][T14092] [ 674.777965][T14094] erspan0: entered promiscuous mode [ 674.835030][T14094] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2282'. [ 674.870812][T14094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2282'. [ 674.980349][T14098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2284'. [ 675.139347][T14108] sctp: [Deprecated]: syz.3.2289 (pid 14108) Use of int in maxseg socket option. [ 675.139347][T14108] Use struct sctp_assoc_value instead [ 675.673949][T14124] FAULT_INJECTION: forcing a failure. [ 675.673949][T14124] name failslab, interval 1, probability 0, space 0, times 0 [ 675.716287][T14124] CPU: 1 UID: 0 PID: 14124 Comm: syz.3.2294 Not tainted syzkaller #0 PREEMPT(full) [ 675.716312][T14124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 675.716322][T14124] Call Trace: [ 675.716329][T14124] [ 675.716337][T14124] dump_stack_lvl+0xe8/0x150 [ 675.716361][T14124] should_fail_ex+0x40c/0x560 [ 675.716393][T14124] should_failslab+0xa8/0x100 [ 675.716421][T14124] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 675.716446][T14124] ? __alloc_skb+0x189/0x7a0 [ 675.716469][T14124] ? __alloc_skb+0x1d7/0x7a0 [ 675.716491][T14124] ? __local_bh_enable_ip+0xd0/0x130 [ 675.716513][T14124] __alloc_skb+0x1d7/0x7a0 [ 675.716542][T14124] netlink_ack+0x136/0xb30 [ 675.716563][T14124] ? __kasan_kmalloc+0x93/0xb0 [ 675.716599][T14124] nfnetlink_rcv+0x260c/0x28c0 [ 675.716624][T14124] ? is_bpf_text_address+0x292/0x2b0 [ 675.716668][T14124] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 675.716739][T14124] ? netlink_deliver_tap+0x2e/0x1b0 [ 675.716776][T14124] ? netlink_deliver_tap+0x2e/0x1b0 [ 675.716794][T14124] ? netlink_deliver_tap+0x2e/0x1b0 [ 675.716818][T14124] netlink_unicast+0x7bb/0x940 [ 675.716855][T14124] netlink_sendmsg+0x813/0xb40 [ 675.716883][T14124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.716906][T14124] ? aa_sock_msg_perm+0xf1/0x1b0 [ 675.716931][T14124] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 675.716956][T14124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.716977][T14124] ____sys_sendmsg+0x9b9/0xa20 [ 675.716995][T14124] ? __might_fault+0xaf/0x130 [ 675.717023][T14124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 675.717051][T14124] ? import_iovec+0x73/0xa0 [ 675.717075][T14124] ___sys_sendmsg+0x2a5/0x360 [ 675.717093][T14124] ? __lock_acquire+0x683/0x2cd0 [ 675.717115][T14124] ? __pfx____sys_sendmsg+0x10/0x10 [ 675.717168][T14124] ? __fget_files+0x2a/0x420 [ 675.717188][T14124] ? __fget_files+0x3a2/0x420 [ 675.717219][T14124] __x64_sys_sendmsg+0x1bd/0x2a0 [ 675.717240][T14124] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 675.717267][T14124] ? __pfx_ksys_write+0x10/0x10 [ 675.717300][T14124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.717319][T14124] do_syscall_64+0x174/0x580 [ 675.717339][T14124] ? trace_irq_disable+0x3b/0x140 [ 675.717363][T14124] ? clear_bhb_loop+0x40/0x90 [ 675.717385][T14124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.717402][T14124] RIP: 0033:0x7f5db519ce59 [ 675.717420][T14124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.717434][T14124] RSP: 002b:00007f5db6084028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.717453][T14124] RAX: ffffffffffffffda RBX: 00007f5db5415fa0 RCX: 00007f5db519ce59 [ 675.717466][T14124] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 675.717477][T14124] RBP: 00007f5db6084090 R08: 0000000000000000 R09: 0000000000000000 [ 675.717488][T14124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 675.717499][T14124] R13: 00007f5db5416038 R14: 00007f5db5415fa0 R15: 00007fffd29bea78 [ 675.717528][T14124] [ 676.544288][T14132] IPv6: sit1: Disabled Multicast RS [ 676.591524][T14132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2298'. [ 676.611619][T14132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2298'. [ 676.620647][T14132] netlink: 'syz.2.2298': attribute type 4 has an invalid length. [ 676.821406][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2302'. [ 676.959654][T14151] vlan3: entered promiscuous mode [ 676.977215][T14151] hsr0: entered promiscuous mode [ 676.994549][T14151] vlan3: entered allmulticast mode [ 677.013420][T14151] hsr0: entered allmulticast mode [ 677.024244][T14151] hsr_slave_0: entered allmulticast mode [ 677.042827][T14151] hsr_slave_1: entered allmulticast mode [ 677.113683][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2303'. [ 677.160242][T14151] hsr_slave_0: left promiscuous mode [ 677.166212][T14151] hsr_slave_1: left promiscuous mode [ 677.348901][T14153] syzkaller0: entered promiscuous mode [ 679.749615][T14186] netlink: 'syz.1.2312': attribute type 1 has an invalid length. [ 679.827802][T14192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2313'. [ 679.834064][T14186] 8021q: adding VLAN 0 to HW filter on device bond12 [ 679.881234][T14191] bond12: (slave veth9): Enslaving as an active interface with a down link [ 679.911681][T14186] bond0: (slave dummy0): Releasing backup interface [ 679.941112][T14191] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2312'. [ 679.961596][T14186] bond12: (slave dummy0): making interface the new active one [ 679.969862][T14186] dummy0: entered promiscuous mode [ 679.975279][T14186] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 679.990771][T14195] team0: Unable to change to the same mode the team is in [ 680.010731][T14200] (: renamed from bridge_slave_0 (while UP) [ 680.011072][T14197] netlink: 'syz.0.2316': attribute type 1 has an invalid length. [ 680.081198][T14191] bond12: (slave dummy0): Releasing active interface [ 680.097124][T14191] dummy0 (unregistering): left promiscuous mode [ 680.315658][T14207] bond6: (slave gretap1): making interface the new active one [ 680.337821][T14207] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 680.387800][T14209] macvtap1: entered promiscuous mode [ 680.393144][T14209] macvtap1: entered allmulticast mode [ 680.458079][T14213] netlink: 'syz.1.2320': attribute type 1 has an invalid length. [ 680.496327][T14216] lo speed is unknown, defaulting to 1000 [ 681.010099][T14239] syzkaller1: entered promiscuous mode [ 681.015620][T14239] syzkaller1: entered allmulticast mode [ 681.023445][T14239] netlink: 'syz.1.2325': attribute type 1 has an invalid length. [ 681.063041][T14242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2327'. [ 681.080058][T14239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2325'. [ 681.447877][T14252] lo speed is unknown, defaulting to 1000 [ 681.990029][T14263] ip_tunnel_core: Dead loop on virtual device geneve0 (net 38), fix it urgently! [ 682.018765][T14263] ip_tunnel_core: Dead loop on virtual device geneve0 (net 38), fix it urgently! [ 682.032199][T14263] ip_tunnel_core: Dead loop on virtual device geneve0 (net 38), fix it urgently! [ 682.043372][T14263] ip_tunnel_core: Dead loop on virtual device geneve0 (net 38), fix it urgently! [ 682.058963][T14263] ip_tunnel_core: Dead loop on virtual device geneve0 (net 38), fix it urgently! [ 682.069012][T14263] ip_tunnel_core: Dead loop on virtual device geneve0 (net 38), fix it urgently! [ 682.079463][T14263] ip_tunnel_core: Dead loop on virtual device geneve0 (net 38), fix it urgently! [ 682.090879][T14263] ip_tunnel_core: Dead loop on virtual device geneve0 (net 38), fix it urgently! [ 682.101369][T14263] ip_tunnel_core: Dead loop on virtual device geneve0 (net 38), fix it urgently! [ 682.112261][T14263] ip_tunnel_core: Dead loop on virtual device geneve0 (net 38), fix it urgently! [ 682.316492][T14267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2333'. [ 682.369910][T14267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2333'. [ 682.914935][T14276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2337'. [ 683.086636][T14281] sctp: [Deprecated]: syz.0.2338 (pid 14281) Use of struct sctp_assoc_value in delayed_ack socket option. [ 683.086636][T14281] Use struct sctp_sack_info instead [ 683.833501][T14313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2343'. [ 684.652767][T14336] netlink: 'syz.0.2352': attribute type 30 has an invalid length. [ 684.832609][T14336] bond7: option arp_missed_max: invalid value (0) [ 684.848782][T14336] bond7: option arp_missed_max: allowed values 1 - 255 [ 684.877441][T14336] bond7 (unregistering): Released all slaves [ 685.074930][T14343] netlink: 'syz.3.2354': attribute type 11 has an invalid length. [ 685.314205][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2356'. [ 685.349318][T14348] tipc: Enabling of bearer rejected, failed to enable media [ 685.367312][T14348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2356'. [ 685.431582][T14348] netlink: 'syz.0.2356': attribute type 1 has an invalid length. [ 685.607318][T14355] tipc: Started in network mode [ 685.612249][T14355] tipc: Node identity 46546d30939a, cluster identity 4711 [ 685.638887][T14355] tipc: Enabled bearer , priority 0 [ 685.656022][T14354] tipc: Enabling of bearer rejected, already enabled [ 685.669699][T14353] syzkaller0: entered promiscuous mode [ 685.722314][T14353] syzkaller0: entered allmulticast mode [ 686.690341][T12460] tipc: Node number set to 3587075376 [ 686.717969][T14354] tipc: Resetting bearer [ 686.774956][T14354] tipc: Disabling bearer [ 686.872551][T14371] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2362'. [ 686.901349][T14369] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2362'. [ 687.239167][T14383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2368'. [ 687.569346][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2373'. [ 687.625244][T14398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2372'. [ 687.785545][T14402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.826544][T14402] dummy0: left promiscuous mode [ 687.856633][T14402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.900907][T14413] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2378'. [ 687.918262][T14411] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2377'. [ 688.173090][T14402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.182561][T14402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.200062][T14402] veth1_vlan: left promiscuous mode [ 688.206433][T14402] veth0_vlan: left promiscuous mode [ 688.212535][T14402] veth0_vlan: entered promiscuous mode [ 688.261639][T14402] veth1_vlan: entered promiscuous mode [ 688.296983][T14402] veth1_macvtap: left promiscuous mode [ 688.303641][T14402] veth0_macvtap: left promiscuous mode [ 688.310256][T14402] veth0_macvtap: entered promiscuous mode [ 688.317124][T14402] veth1_macvtap: entered promiscuous mode [ 688.330996][T14402] net_ratelimit: 645 callbacks suppressed [ 688.331011][T14402] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 688.355797][ T5692] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.362934][ T5692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.408669][ T93] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.430423][ T93] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.438654][ T93] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.446846][ T93] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.515875][T14420] syzkaller1: entered promiscuous mode [ 688.521383][T14420] syzkaller1: entered allmulticast mode [ 688.628709][T14429] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2384'. [ 688.694618][T14432] netlink: 'syz.0.2386': attribute type 1 has an invalid length. [ 688.739531][T14432] 8021q: adding VLAN 0 to HW filter on device bond7 [ 688.782301][T14433] bond7: (slave veth11): Enslaving as an active interface with a down link [ 689.892342][T14458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2390'. [ 690.067820][T14468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2392'. [ 690.108225][T14470] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2394'. [ 690.118231][T14470] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2394'. [ 690.189196][T14472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2395'. [ 691.171390][T14510] IPv6: addrconf: prefix option has invalid lifetime [ 691.245763][T14512] bond14 (unregistering): Released all slaves [ 691.275393][T14515] netlink: 'syz.2.2409': attribute type 1 has an invalid length. [ 691.652980][T14524] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 691.906928][T14526] netlink: 'syz.2.2412': attribute type 1 has an invalid length. [ 692.093028][T14526] 8021q: adding VLAN 0 to HW filter on device bond10 [ 692.323937][T14544] bond10: (slave geneve2): making interface the new active one [ 692.348411][T14544] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 692.440738][T14564] rdma_op ffff888031cf59f0 conn xmit_rdma 0000000000000000 [ 692.820331][T14589] FAULT_INJECTION: forcing a failure. [ 692.820331][T14589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.833408][T14589] CPU: 0 UID: 0 PID: 14589 Comm: syz.2.2429 Not tainted syzkaller #0 PREEMPT(full) [ 692.833432][T14589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 692.833442][T14589] Call Trace: [ 692.833449][T14589] [ 692.833456][T14589] dump_stack_lvl+0xe8/0x150 [ 692.833482][T14589] should_fail_ex+0x40c/0x560 [ 692.833514][T14589] _copy_from_user+0x2d/0xb0 [ 692.833536][T14589] ___sys_sendmsg+0x1c6/0x360 [ 692.833555][T14589] ? __lock_acquire+0x683/0x2cd0 [ 692.833578][T14589] ? __pfx____sys_sendmsg+0x10/0x10 [ 692.833632][T14589] ? __fget_files+0x2a/0x420 [ 692.833653][T14589] ? __fget_files+0x3a2/0x420 [ 692.833683][T14589] __x64_sys_sendmsg+0x1bd/0x2a0 [ 692.833705][T14589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 692.833733][T14589] ? __pfx_ksys_write+0x10/0x10 [ 692.833766][T14589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.833785][T14589] do_syscall_64+0x174/0x580 [ 692.833804][T14589] ? trace_irq_disable+0x3b/0x140 [ 692.833828][T14589] ? clear_bhb_loop+0x40/0x90 [ 692.833850][T14589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.833867][T14589] RIP: 0033:0x7fd32679ce59 [ 692.833883][T14589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.833898][T14589] RSP: 002b:00007fd327579028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 692.833916][T14589] RAX: ffffffffffffffda RBX: 00007fd326a15fa0 RCX: 00007fd32679ce59 [ 692.833929][T14589] RDX: 000000000800c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 692.833942][T14589] RBP: 00007fd327579090 R08: 0000000000000000 R09: 0000000000000000 [ 692.833952][T14589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.833962][T14589] R13: 00007fd326a16038 R14: 00007fd326a15fa0 R15: 00007fffd98c7d28 [ 692.834000][T14589] [ 693.225587][T14607] bond11: invalid ARP target 0.0.0.0 specified for addition [ 693.232925][T14607] bond11: option arp_ip_target: invalid value (0) [ 693.244443][T14607] bond11 (unregistering): Released all slaves [ 693.336643][T14615] IPVS: set_ctl: invalid protocol: 29 172.30.1.4:20000 [ 693.400230][T14618] __nla_validate_parse: 7 callbacks suppressed [ 693.400247][T14618] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2439'. [ 693.589670][T14632] netlink: 'syz.3.2441': attribute type 1 has an invalid length. [ 693.600541][T14634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2442'. [ 693.631070][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2436'. [ 693.638832][T14634] block nbd0: NBD_DISCONNECT [ 693.644707][T14634] block nbd0: Send disconnect failed -32 [ 693.651720][T14634] block nbd0: Send disconnect failed -32 [ 693.706659][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2442'. [ 693.728135][T14634] block nbd0: shutting down sockets [ 693.839209][T14639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2443'. [ 693.840232][T14643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.860423][T14639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2443'. [ 693.908110][T14639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.953665][T14648] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2446'. [ 693.970930][T14653] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2448'. [ 694.388492][T14673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2454'. [ 694.422433][T14675] syzkaller0: entered promiscuous mode [ 694.430913][T14673] netlink: 'syz.2.2454': attribute type 7 has an invalid length. [ 694.431131][T14675] syzkaller0: entered allmulticast mode [ 694.439424][T14677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2456'. [ 694.469167][T14675] tipc: Started in network mode [ 694.474039][T14675] tipc: Node identity 02fa0a8766d7, cluster identity 4711 [ 694.481310][T14675] tipc: Enabled bearer , priority 0 [ 694.509017][T14673] netlink: 'syz.2.2454': attribute type 13 has an invalid length. [ 694.685649][T14675] tipc: Resetting bearer [ 694.723358][T14675] tipc: Disabling bearer [ 694.798369][T14673] netlink: 'syz.2.2454': attribute type 2 has an invalid length. [ 695.437412][T14721] tipc: Started in network mode [ 695.479330][T14721] tipc: Node identity f68d9aa82c87, cluster identity 4711 [ 695.486726][T14721] tipc: Enabled bearer , priority 0 [ 695.503034][T14722] syzkaller0: entered promiscuous mode [ 695.512652][T14722] syzkaller0: entered allmulticast mode [ 695.592449][T14717] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 695.655825][T14717] tipc: Resetting bearer [ 695.759993][T14733] FAULT_INJECTION: forcing a failure. [ 695.759993][T14733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.787246][T14714] tipc: Resetting bearer [ 695.802955][T14733] CPU: 1 UID: 0 PID: 14733 Comm: syz.1.2472 Not tainted syzkaller #0 PREEMPT(full) [ 695.802980][T14733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 695.802989][T14733] Call Trace: [ 695.802997][T14733] [ 695.803004][T14733] dump_stack_lvl+0xe8/0x150 [ 695.803031][T14733] should_fail_ex+0x40c/0x560 [ 695.803064][T14733] _copy_from_user+0x2d/0xb0 [ 695.803085][T14733] ___sys_sendmsg+0x1c6/0x360 [ 695.803105][T14733] ? __lock_acquire+0x683/0x2cd0 [ 695.803127][T14733] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.803185][T14733] ? __fget_files+0x2a/0x420 [ 695.803206][T14733] ? __fget_files+0x3a2/0x420 [ 695.803237][T14733] __x64_sys_sendmsg+0x1bd/0x2a0 [ 695.803259][T14733] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 695.803287][T14733] ? __pfx_ksys_write+0x10/0x10 [ 695.803328][T14733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.803348][T14733] do_syscall_64+0x174/0x580 [ 695.803368][T14733] ? trace_irq_disable+0x3b/0x140 [ 695.803393][T14733] ? clear_bhb_loop+0x40/0x90 [ 695.803415][T14733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.803432][T14733] RIP: 0033:0x7fa4a9f9ce59 [ 695.803449][T14733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.803464][T14733] RSP: 002b:00007fa4aae41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.803483][T14733] RAX: ffffffffffffffda RBX: 00007fa4aa215fa0 RCX: 00007fa4a9f9ce59 [ 695.803497][T14733] RDX: 0000000020000000 RSI: 0000200000003800 RDI: 0000000000000004 [ 695.803508][T14733] RBP: 00007fa4aae41090 R08: 0000000000000000 R09: 0000000000000000 [ 695.803519][T14733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.803530][T14733] R13: 00007fa4aa216038 R14: 00007fa4aa215fa0 R15: 00007fff54a8b548 [ 695.803559][T14733] [ 696.223273][T14714] tipc: Disabling bearer [ 697.889258][T14783] FAULT_INJECTION: forcing a failure. [ 697.889258][T14783] name failslab, interval 1, probability 0, space 0, times 0 [ 697.903569][T14783] CPU: 0 UID: 0 PID: 14783 Comm: syz.2.2483 Not tainted syzkaller #0 PREEMPT(full) [ 697.903595][T14783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 697.903605][T14783] Call Trace: [ 697.903612][T14783] [ 697.903619][T14783] dump_stack_lvl+0xe8/0x150 [ 697.903646][T14783] should_fail_ex+0x40c/0x560 [ 697.903678][T14783] should_failslab+0xa8/0x100 [ 697.903706][T14783] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 697.903730][T14783] ? __alloc_skb+0x189/0x7a0 [ 697.903754][T14783] ? __alloc_skb+0x1d7/0x7a0 [ 697.903775][T14783] ? __local_bh_enable_ip+0xd0/0x130 [ 697.903798][T14783] __alloc_skb+0x1d7/0x7a0 [ 697.903827][T14783] netlink_sendmsg+0x5d4/0xb40 [ 697.903857][T14783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.903880][T14783] ? aa_sock_msg_perm+0xf1/0x1b0 [ 697.903906][T14783] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 697.903927][T14783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.903948][T14783] ____sys_sendmsg+0x9b9/0xa20 [ 697.903965][T14783] ? __might_fault+0xaf/0x130 [ 697.903993][T14783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 697.904021][T14783] ? import_iovec+0x73/0xa0 [ 697.904044][T14783] ___sys_sendmsg+0x2a5/0x360 [ 697.904062][T14783] ? __lock_acquire+0x683/0x2cd0 [ 697.904083][T14783] ? __pfx____sys_sendmsg+0x10/0x10 [ 697.904106][T14783] ? __lock_acquire+0x683/0x2cd0 [ 697.904153][T14783] ? __fget_files+0x2a/0x420 [ 697.904172][T14783] ? __fget_files+0x3a2/0x420 [ 697.904203][T14783] __x64_sys_sendmsg+0x1bd/0x2a0 [ 697.904224][T14783] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 697.904255][T14783] ? handle_softirqs+0x70f/0x840 [ 697.904279][T14783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.904299][T14783] do_syscall_64+0x174/0x580 [ 697.904321][T14783] ? clear_bhb_loop+0x40/0x90 [ 697.904343][T14783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.904361][T14783] RIP: 0033:0x7fd32679ce59 [ 697.904377][T14783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.904392][T14783] RSP: 002b:00007fd3249f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.904410][T14783] RAX: ffffffffffffffda RBX: 00007fd326a16090 RCX: 00007fd32679ce59 [ 697.904423][T14783] RDX: 0000000020000000 RSI: 0000200000003800 RDI: 0000000000000004 [ 697.904435][T14783] RBP: 00007fd3249f6090 R08: 0000000000000000 R09: 0000000000000000 [ 697.904445][T14783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.904456][T14783] R13: 00007fd326a16128 R14: 00007fd326a16090 R15: 00007fffd98c7d28 [ 697.904486][T14783] [ 699.063616][T14735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 699.454327][T14803] __nla_validate_parse: 9 callbacks suppressed [ 699.454345][T14803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2491'. [ 699.796111][T14821] netlink: 'syz.2.2496': attribute type 1 has an invalid length. [ 699.934319][T14821] 8021q: adding VLAN 0 to HW filter on device bond11 [ 700.071625][T14832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2498'. [ 700.082356][T14822] bond11: (slave veth9): Enslaving as an active interface with a down link [ 700.183866][T14832] 8021q: adding VLAN 0 to HW filter on device bond7 [ 700.227084][T14837] bond7: entered promiscuous mode [ 700.235216][T14837] bond7: entered allmulticast mode [ 700.245314][T14837] 8021q: adding VLAN 0 to HW filter on device bond7 [ 700.254707][T14837] team0: Port device bond7 added [ 700.265438][T14832] team_slave_1: entered promiscuous mode [ 700.274576][T14832] team0: Port device team_slave_1 removed [ 700.283770][T14832] team_slave_1: entered allmulticast mode [ 700.290578][T14832] bond7: (slave team_slave_1): Enslaving as an active interface with an up link [ 700.739676][T14854] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 700.752961][T14854] bond8 (unregistering): Released all slaves [ 700.770356][T14871] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2510'. [ 700.828292][T14875] nbd: couldn't find device at index 0 [ 700.835415][T14871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.837026][T14875] netlink: 'syz.0.2512': attribute type 1 has an invalid length. [ 700.858874][T14871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.872993][T14871] bond0 (unregistering): Released all slaves [ 700.902362][T14875] 8021q: adding VLAN 0 to HW filter on device bond8 [ 700.944566][T14875] bond8: (slave geneve2): making interface the new active one [ 700.953676][T14875] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 700.962320][T11980] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.972145][T11980] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.982096][T11980] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.990848][T11980] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.936376][T14884] netlink: 2860 bytes leftover after parsing attributes in process `syz.0.2514'. [ 701.936478][T14880] ip6tnl3: entered allmulticast mode [ 702.079119][T14892] netlink: 542 bytes leftover after parsing attributes in process `syz.0.2519'. [ 702.164644][T14894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 702.180922][T14839] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 702.356015][T14905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2525'. [ 702.450064][T14910] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2525'. [ 702.495450][T14912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2526'. [ 702.512788][T14910] netlink: Conntrack attr has 4 unknown bytes [ 702.715383][T14921] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 702.751960][T14921] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 702.781212][T14928] bond0: (slave veth1_to_bond): Device is not bonding slave [ 702.788536][T14928] bond0: option active_slave: invalid value (veth1_to_bond) [ 702.937532][T14941] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2532'. [ 702.959031][T14943] netlink: 'syz.3.2534': attribute type 7 has an invalid length. [ 702.979629][T14943] netlink: 'syz.3.2534': attribute type 8 has an invalid length. [ 703.224839][T14945] netlink: 'syz.3.2535': attribute type 1 has an invalid length. [ 703.339127][T14949] netlink: 'syz.3.2536': attribute type 3 has an invalid length. [ 703.347648][T14949] netlink: 'syz.3.2536': attribute type 3 has an invalid length. [ 703.621803][T14952] tc action pedit offset must be on 32 bit boundaries [ 705.741396][T14925] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 706.131836][T14970] FAULT_INJECTION: forcing a failure. [ 706.131836][T14970] name failslab, interval 1, probability 0, space 0, times 0 [ 706.147068][T14970] CPU: 0 UID: 0 PID: 14970 Comm: syz.1.2543 Not tainted syzkaller #0 PREEMPT(full) [ 706.147091][T14970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 706.147102][T14970] Call Trace: [ 706.147108][T14970] [ 706.147115][T14970] dump_stack_lvl+0xe8/0x150 [ 706.147140][T14970] should_fail_ex+0x40c/0x560 [ 706.147172][T14970] should_failslab+0xa8/0x100 [ 706.147198][T14970] ? skb_clone+0x212/0x3a0 [ 706.147218][T14970] kmem_cache_alloc_noprof+0x87/0x650 [ 706.147250][T14970] skb_clone+0x212/0x3a0 [ 706.147271][T14970] __netlink_deliver_tap+0x413/0x860 [ 706.147303][T14970] ? netlink_deliver_tap+0x2e/0x1b0 [ 706.147323][T14970] netlink_deliver_tap+0x19c/0x1b0 [ 706.147343][T14970] netlink_unicast+0x77f/0x940 [ 706.147379][T14970] netlink_sendmsg+0x813/0xb40 [ 706.147406][T14970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 706.147429][T14970] ? aa_sock_msg_perm+0xf1/0x1b0 [ 706.147454][T14970] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 706.147475][T14970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 706.147496][T14970] ____sys_sendmsg+0x9b9/0xa20 [ 706.147514][T14970] ? __might_fault+0xaf/0x130 [ 706.147541][T14970] ? __pfx_____sys_sendmsg+0x10/0x10 [ 706.147568][T14970] ? import_iovec+0x73/0xa0 [ 706.147592][T14970] ___sys_sendmsg+0x2a5/0x360 [ 706.147610][T14970] ? __lock_acquire+0x683/0x2cd0 [ 706.147632][T14970] ? __pfx____sys_sendmsg+0x10/0x10 [ 706.147685][T14970] ? __fget_files+0x2a/0x420 [ 706.147706][T14970] ? __fget_files+0x3a2/0x420 [ 706.147736][T14970] __x64_sys_sendmsg+0x1bd/0x2a0 [ 706.147757][T14970] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 706.147787][T14970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.147813][T14970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.147832][T14970] do_syscall_64+0x174/0x580 [ 706.147853][T14970] ? clear_bhb_loop+0x40/0x90 [ 706.147874][T14970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.147891][T14970] RIP: 0033:0x7fa4a9f9ce59 [ 706.147916][T14970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.147930][T14970] RSP: 002b:00007fa4aae41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 706.147949][T14970] RAX: ffffffffffffffda RBX: 00007fa4aa215fa0 RCX: 00007fa4a9f9ce59 [ 706.147961][T14970] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 706.147971][T14970] RBP: 00007fa4aae41090 R08: 0000000000000000 R09: 0000000000000000 [ 706.147980][T14970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.147987][T14970] R13: 00007fa4aa216038 R14: 00007fa4aa215fa0 R15: 00007fff54a8b548 [ 706.148010][T14970] [ 706.218642][T14976] erspan0: left promiscuous mode [ 706.260760][T14978] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2542'. [ 706.291191][T14976] erspan0: left allmulticast mode [ 706.544476][T14981] atomic_op ffff88802be7d198 conn xmit_atomic 0000000000000000 [ 706.638209][T14976] bridge0: left allmulticast mode [ 706.647406][T14976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.656958][T14976] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.667044][T14976] [ 706.669382][T14976] ============================================ [ 706.675531][T14976] WARNING: possible recursive locking detected [ 706.681692][T14976] syzkaller #0 Not tainted [ 706.686102][T14976] -------------------------------------------- [ 706.692244][T14976] syz.3.2545/14976 is trying to acquire lock: [ 706.698306][T14976] ffff88807d4fae18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: __ethtool_get_link_ksettings+0x109/0x250 [ 706.709500][T14976] [ 706.709500][T14976] but task is already holding lock: [ 706.716864][T14976] ffff88807d4fae18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670 [ 706.726540][T14976] and the lock comparison function returns 0: [ 706.732600][T14976] [ 706.732600][T14976] other info that might help us debug this: [ 706.740658][T14976] Possible unsafe locking scenario: [ 706.740658][T14976] [ 706.748105][T14976] CPU0 [ 706.751380][T14976] ---- [ 706.754654][T14976] lock(&dev_instance_lock_key#3); [ 706.759864][T14976] lock(&dev_instance_lock_key#3); [ 706.765074][T14976] [ 706.765074][T14976] *** DEADLOCK *** [ 706.765074][T14976] [ 706.773214][T14976] May be due to missing lock nesting notation [ 706.773214][T14976] [ 706.781533][T14976] 2 locks held by syz.3.2545/14976: [ 706.786725][T14976] #0: ffffffff8fdc1540 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 706.795780][T14976] #1: ffff88807d4fae18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670 [ 706.805875][T14976] [ 706.805875][T14976] stack backtrace: [ 706.811762][T14976] CPU: 0 UID: 0 PID: 14976 Comm: syz.3.2545 Not tainted syzkaller #0 PREEMPT(full) [ 706.811782][T14976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 706.811793][T14976] Call Trace: [ 706.811801][T14976] [ 706.811809][T14976] dump_stack_lvl+0xe8/0x150 [ 706.811829][T14976] print_deadlock_bug+0x279/0x290 [ 706.811851][T14976] __lock_acquire+0x24bf/0x2cd0 [ 706.811869][T14976] ? __lock_acquire+0x683/0x2cd0 [ 706.811885][T14976] ? rtnl_newlink+0x148e/0x1bd0 [ 706.811908][T14976] ? rtnetlink_rcv_msg+0x802/0xc00 [ 706.811930][T14976] ? netlink_rcv_skb+0x226/0x4a0 [ 706.811945][T14976] ? netlink_unicast+0x7bb/0x940 [ 706.811967][T14976] ? netlink_sendmsg+0x813/0xb40 [ 706.811982][T14976] ? ____sys_sendmsg+0x9b9/0xa20 [ 706.811997][T14976] ? ___sys_sendmsg+0x2a5/0x360 [ 706.812012][T14976] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 706.812027][T14976] ? do_syscall_64+0x174/0x580 [ 706.812043][T14976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.812062][T14976] ? __ethtool_get_link_ksettings+0x109/0x250 [ 706.812083][T14976] lock_acquire+0x106/0x350 [ 706.812098][T14976] ? __ethtool_get_link_ksettings+0x109/0x250 [ 706.812123][T14976] __mutex_lock+0x19d/0x1590 [ 706.812141][T14976] ? __ethtool_get_link_ksettings+0x109/0x250 [ 706.812161][T14976] ? lockdep_hardirqs_on+0x7a/0x110 [ 706.812178][T14976] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 706.812194][T14976] ? __wake_up_common_lock+0x195/0x1f0 [ 706.812217][T14976] ? __ethtool_get_link_ksettings+0x109/0x250 [ 706.812238][T14976] ? __pfx___mutex_lock+0x10/0x10 [ 706.812258][T14976] ? igmp_group_added+0x238/0x910 [ 706.812275][T14976] ? igmpv3_del_delrec+0x204/0x710 [ 706.812292][T14976] __ethtool_get_link_ksettings+0x109/0x250 [ 706.812314][T14976] bond_netdev_event+0x643/0xf80 [ 706.812337][T14976] ? __pfx_bond_netdev_event+0x10/0x10 [ 706.812368][T14976] ? ipmr_device_event+0x1f6/0x220 [ 706.812392][T14976] notifier_call_chain+0x1a5/0x3d0 [ 706.812414][T14976] __dev_notify_flags+0x1aa/0x310 [ 706.812431][T14976] ? __pfx___dev_notify_flags+0x10/0x10 [ 706.812445][T14976] ? __dev_change_flags+0x5f1/0x820 [ 706.812462][T14976] ? __pfx___dev_change_flags+0x10/0x10 [ 706.812480][T14976] netif_change_flags+0xde/0x1b0 [ 706.812496][T14976] dev_change_flags+0x128/0x260 [ 706.812521][T14976] vlan_device_event+0x1b4e/0x1f00 [ 706.812540][T14976] ? packet_notifier+0xf1b/0xf70 [ 706.812556][T14976] ? br_device_event+0x282/0x9c0 [ 706.812572][T14976] ? __pfx_phonet_device_notify+0x10/0x10 [ 706.812590][T14976] ? __pfx_vlan_device_event+0x10/0x10 [ 706.812606][T14976] ? bcm_notifier+0xa9/0x890 [ 706.812620][T14976] ? raw_notifier+0x9d/0x7d0 [ 706.812642][T14976] ? cgw_notifier+0x314/0x380 [ 706.812659][T14976] notifier_call_chain+0x1a5/0x3d0 [ 706.812680][T14976] __dev_notify_flags+0x1aa/0x310 [ 706.812696][T14976] ? __pfx___dev_notify_flags+0x10/0x10 [ 706.812710][T14976] ? __dev_change_flags+0x5f1/0x820 [ 706.812726][T14976] ? __pfx___dev_change_flags+0x10/0x10 [ 706.812743][T14976] ? __local_bh_enable_ip+0xd0/0x130 [ 706.812759][T14976] netif_change_flags+0xde/0x1b0 [ 706.812775][T14976] do_setlink+0xdd6/0x4670 [ 706.812797][T14976] ? __pfx_do_setlink+0x10/0x10 [ 706.812813][T14976] ? __lock_acquire+0x683/0x2cd0 [ 706.812838][T14976] ? __mutex_trylock_common+0x15f/0x270 [ 706.812859][T14976] ? __pfx___mutex_trylock_common+0x10/0x10 [ 706.812880][T14976] ? rcu_is_watching+0x15/0xb0 [ 706.812898][T14976] ? trace_contention_end+0x3d/0x140 [ 706.812918][T14976] ? __mutex_lock+0x30f/0x1590 [ 706.812940][T14976] ? rtnl_newlink+0x8a3/0x1bd0 [ 706.812963][T14976] ? __pfx___mutex_lock+0x10/0x10 [ 706.812984][T14976] ? ns_capable+0x89/0xe0 [ 706.812999][T14976] ? rtnl_link_get_net_capable+0xd3/0x310 [ 706.813016][T14976] rtnl_newlink+0x148e/0x1bd0 [ 706.813044][T14976] ? __pfx_rtnl_newlink+0x10/0x10 [ 706.813069][T14976] ? __lock_acquire+0x683/0x2cd0 [ 706.813087][T14976] ? __lock_acquire+0x683/0x2cd0 [ 706.813105][T14976] ? is_bpf_text_address+0x26/0x2b0 [ 706.813124][T14976] ? unwind_next_frame+0x8f/0x2550 [ 706.813145][T14976] ? is_bpf_text_address+0x26/0x2b0 [ 706.813166][T14976] ? __lock_acquire+0x683/0x2cd0 [ 706.813184][T14976] ? kernel_text_address+0xa5/0xe0 [ 706.813206][T14976] ? __kernel_text_address+0xd/0x30 [ 706.813226][T14976] ? unwind_get_return_address+0x4d/0x90 [ 706.813245][T14976] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 706.813268][T14976] ? arch_stack_walk+0xfb/0x150 [ 706.813289][T14976] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 706.813313][T14976] ? __pfx_rtnl_newlink+0x10/0x10 [ 706.813340][T14976] ? __pfx_rtnl_newlink+0x10/0x10 [ 706.813368][T14976] rtnetlink_rcv_msg+0x802/0xc00 [ 706.813390][T14976] ? kasan_save_track+0x3e/0x80 [ 706.813413][T14976] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 706.813435][T14976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 706.813458][T14976] ? __lock_acquire+0x683/0x2cd0 [ 706.813478][T14976] netlink_rcv_skb+0x226/0x4a0 [ 706.813494][T14976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 706.813518][T14976] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 706.813539][T14976] ? netlink_deliver_tap+0x2e/0x1b0 [ 706.813554][T14976] ? netlink_deliver_tap+0x2e/0x1b0 [ 706.813572][T14976] netlink_unicast+0x7bb/0x940 [ 706.813600][T14976] netlink_sendmsg+0x813/0xb40 [ 706.813620][T14976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 706.813638][T14976] ? aa_sock_msg_perm+0xf1/0x1b0 [ 706.813661][T14976] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 706.813681][T14976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 706.813698][T14976] ____sys_sendmsg+0x9b9/0xa20 [ 706.813718][T14976] ? __might_fault+0xaf/0x130 [ 706.813740][T14976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 706.813760][T14976] ? import_iovec+0x73/0xa0 [ 706.813778][T14976] ___sys_sendmsg+0x2a5/0x360 [ 706.813793][T14976] ? __lock_acquire+0x683/0x2cd0 [ 706.813810][T14976] ? __pfx____sys_sendmsg+0x10/0x10 [ 706.813828][T14976] ? futex_wait+0x2a2/0x390 [ 706.813860][T14976] ? __fget_files+0x2a/0x420 [ 706.813879][T14976] ? __fget_files+0x3a2/0x420 [ 706.813901][T14976] __x64_sys_sendmsg+0x1bd/0x2a0 [ 706.813918][T14976] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 706.813937][T14976] ? rcu_is_watching+0x15/0xb0 [ 706.813958][T14976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.813974][T14976] do_syscall_64+0x174/0x580 [ 706.813990][T14976] ? trace_irq_disable+0x3b/0x140 [ 706.814012][T14976] ? clear_bhb_loop+0x40/0x90 [ 706.814029][T14976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.814045][T14976] RIP: 0033:0x7f5db519ce59 [ 706.814059][T14976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.814073][T14976] RSP: 002b:00007f5db6084028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 706.814090][T14976] RAX: ffffffffffffffda RBX: 00007f5db5415fa0 RCX: 00007f5db519ce59 [ 706.814102][T14976] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 706.814112][T14976] RBP: 00007f5db5232d6f R08: 0000000000000000 R09: 0000000000000000 [ 706.814122][T14976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.814132][T14976] R13: 00007f5db5416038 R14: 00007f5db5415fa0 R15: 00007fffd29bea78 [ 706.814150][T14976]