last executing test programs: 2.373628989s ago: executing program 4 (id=1844): r0 = socket(0x1e, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d2861657329fc000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 2.06562684s ago: executing program 0 (id=1846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008000140000000051400030076657468315f6d6163767461700000000900010073797a"], 0x160}}, 0x0) 2.065069107s ago: executing program 1 (id=1847): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000002800)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000080)="b96dd3c10e5400f15a82dd777f386826b53b4a0d1b90c44b54d416972faa3562e1da12fee8ccf97e5d6def2a750dc7ad5632309fa7c57f6a008c3ecce03af8f4a67e988dd3ad9a00ffe7678f91fd10a9859ccf0d11583a87ffdad0986d40eb393cefe109c9d0dbf6fb361c163f89e50bb06353e6cc4acc7f0c138bd54052be687d8604c6d5adf79872f031cdff6f1fd1dbd247eed0fc673f5672a7610477621545bee38c28f1e12aa491273031f44a338eab0bc9ca", 0xb5}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="a03c69e4bcfdc8a633eedf7cb4a0488bba82da6dab941ab51cb688ac7bed1373e2ccd81e7e35e758069f28c3813de83a0ff23ae563fd0a4637a16958f666916d50417accc9d9c0d3cdfacc2e58081c4737a4659052c43ef32ccb555042dddb4f8d39218d6a453d2ad55148eec0c002a95b5384b8a74890ce805e710eab393820817d67c9648179634f0f9a3395c1eced8c1772e486916805bb39af025407bd8810def5ad13c46f98c722256fa1a781091df1e479dbca0f3b868f7c1300a7abd6b9581d34a29bc22e0a806616930732fe36802c36bbe3b8ee575dd2f5c220629c08c1ff09e86330b4d01f3114186f4faa", 0xf0}, {&(0x7f0000001400)="88d48aa5d27f25f6ac1d785c32fd2b3ca0d5b46d04d6afe74678d29b157a5d1ca28044d02f414f3fb630fa1c07d6163ab51812a62e8d2361c48a320369010df2b6a711d952b3e8cd5537dbfd490489e21edce9950c2e", 0x56}], 0x4, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], 0x1c0}}, {{&(0x7f0000001680)={0xa, 0x4e22, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000002780)=[{&(0x7f00000016c0)="fd54a606e41bdae0c137e8b776e5229c13992cb12b1ed505a6fde9084e48e00959abd9fc490b725e54d47e", 0x2b}, {&(0x7f0000001700)="ab242bdbb91ac6afc8d64fbb2168c4970950cde71c0da81b2d9af4e0e7bd7f4fc3082c96af8d633e98c1e4458520b92f9ff3cc8373a822b9bdeafdd3fd7e211c7bd20777e0f553d219b581907b49ac6022d74fcec623182fe6be7a9172cbc36495ddf10f5cbc8808c5414e4a7e08b9873c7e07d77e22e89b6e", 0x79}, {&(0x7f0000001780)="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", 0x1000}], 0x3, &(0x7f00000027c0)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffff1}}], 0x18}}], 0x2, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r1, 0xfffff789) r2 = accept(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x1000, 0x2, 0x8002, 0x103, 0xa, 0x8, 0x1}, 0x9c) 2.064803223s ago: executing program 4 (id=1848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) (async) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2, 0x1}, &(0x7f00000000c0)=0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) 1.972347645s ago: executing program 3 (id=1850): bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x5502000000000000}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFNL_MSG_ACCT_GET(r2, 0x0, 0x8000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.877991019s ago: executing program 2 (id=1851): bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x32}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYBLOB="1e000d800500"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0x17}, 0x0, "7ea97ddb2ac127ff8bffec7cc1003751804500eb00", 0x0, 0x0, 0x4, 0xfffffffb}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFNL_MSG_ACCT_GET(r2, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.875957568s ago: executing program 0 (id=1852): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x70bd2b, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@nested={0x8, 0x9, 0x0, 0x1, [@nested={0x4, 0xac}]}]}, @nested={0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc080) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) socketpair(0x18, 0x80000, 0x1, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900068004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000008000000911015000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.805217308s ago: executing program 3 (id=1853): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x1, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071108e000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x44, 0x4, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x6243}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x28000000}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x7e49}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) close(0x3) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="f0000000100001000000000000000000fe8000955700000000000000000000bbac141432000000000000000000000077aa92bf63bd68004e240000000300030000a08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d333000000ffffffff00000000000000000000000000000000000000000300000000000000000000000000000002040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000002fcffff00000000050000000001000004350000020001000000000000000000"], 0xf0}}, 0x80) 1.688749569s ago: executing program 0 (id=1854): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x7, 0x0, 0x1014}, 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x25, r3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, r2, 0x25, 0x0, @void}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c00034000000000000000"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) close(r5) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527a00643c0120010000000000000000000000000001ff020000000000000000000000000001e203000000000000c910ff0100000000000000000000000000010704f9b7f8e20420880b0000000000000800000086dd080088be00000001100000007d6d88eebf0100000000000000080022eb00000000200000080200000000000000000000000800655800000000"], 0x0) r7 = socket(0x840000000002, 0x3, 0x100) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, 0x0, 0x0, 0x8d1, &(0x7f0000000080)={0xa, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) listen(r8, 0x1) r9 = accept4(r8, 0x0, 0x0, 0x80800) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) sendfile(r9, r8, 0x0, 0xffffffff000) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket(0x11, 0x80000, 0x4) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r7, 0x0, 0x30, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, 0x0, 0x4040) 1.686513981s ago: executing program 2 (id=1855): unshare(0xa020480) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f00000002c0)}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x709d29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x19, 0xfc, 0xfe, 0xfe, 0xbe, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c6a28564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f152575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770328925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630808abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c00", 0x2, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, "508b276597b6c58b"}, 0x5}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 1.601054912s ago: executing program 3 (id=1856): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) (async) unshare(0xa020480) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000540)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r2 = accept$alg(r0, 0x0, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000100)="7012d23006ecb1e99e6542e01a914724f41dcd195d49b7d04b4882d79f34e6f1c5c5098bbf35ce080bf34db35d1e40396b361b902220773ede482e471c98e4bd8569f74007b1e4026ac55524981aca630659c1d465e8faf68cf9753e3d3a1db4a2a07a0937c9afc978", 0x69) (async) sendmmsg$alg(r2, &(0x7f0000001080)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000026c0)="40b679c0f01821df96b7f8364960c37b205e6456e606b9cbb31a172bdf2c7df50b78fab38c7c19cc0919d1a1bd0ea169b18aaf0f53bc519a0b543f9c7a68e69f87dbe8fa1dc839a805f9451434e9076188515d043a34f62958b9c750ae95a11ae5a625b43ee1c84499ab65277464d796", 0x70}], 0x1, 0x0, 0x0, 0x8012}], 0x1, 0x4044) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="911092000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.585034907s ago: executing program 2 (id=1857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @val={@void, {0x8100, 0x7}}, {@can={0xc, {{0x1, 0x0, 0x1, 0x1}, 0x7, 0x3, 0x0, 0x0, "d959761e98e7db16"}}}}, &(0x7f0000000140)={0x1, 0x2, [0xda, 0x7b3, 0xde3, 0x2b]}) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x28, 0x0, 0x76, 0xfffff024}, {0x48, 0x7, 0x48, 0x1}, {0x6, 0x28, 0x3, 0x207}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 1.535573635s ago: executing program 3 (id=1858): socket$igmp6(0xa, 0x3, 0x2) (async) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff1800000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$tipc(0x1e, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8004, 0x4, 0x2, 0x0, 0x1, 0x8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffdb6, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x20}}], 0x20}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.440984802s ago: executing program 2 (id=1859): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700030100000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x20) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)=""/4080, 0xff0}], 0x1}, 0x20) r8 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) 1.345127264s ago: executing program 3 (id=1860): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000001240)=""/181, &(0x7f0000001340)=0xb5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xfeb2}], 0x2) write$cgroup_int(r3, &(0x7f0000000140), 0xfffffdef) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000300)={0x0, 0xa1, &(0x7f0000000040)={&(0x7f00000005c0)={0x2c, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4004004) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="980000001000010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c0003007fff"], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r10 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r10) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="08c80d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) close(0x4) close(r1) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f00000013c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 1.133556724s ago: executing program 1 (id=1861): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.064874075s ago: executing program 4 (id=1862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x44, 0x0, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8040) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}, @IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) 969.381925ms ago: executing program 1 (id=1863): bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x5502000000000000}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFNL_MSG_ACCT_GET(r2, 0x0, 0x8000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x0) 924.202724ms ago: executing program 4 (id=1864): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc840) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES8=r1, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x8000) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r7, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, 0x0, 0x0) r10 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0xffff7fff}, @TCA_CAKE_MPU={0x8, 0xe, 0xfd}]}}]}, 0x44}}, 0x4800) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r13}, 0x18) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 901.71786ms ago: executing program 1 (id=1865): r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x2, 0xa}, {0xffff, 0xffff}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x4, 0x401, 0x8001, 0x4}, 0xc1c1, 0x5, 0xfffffff}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0x9, 0xa}, {0xe, 0x9}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4008014) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) 729.691818ms ago: executing program 1 (id=1866): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$kcm(0xf, 0x3, 0x2) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r2) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) (async) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) 699.535567ms ago: executing program 0 (id=1867): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc840) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) accept$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10) (async) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000380)={'mangle\x00', 0x2, [{}, {}]}, 0x48) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000380)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r5, r6, 0x7, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r5, 0x4, r5}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r5, 0x4, r5}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0xf}}, 0x8800) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x8000) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r8, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, 0x0, 0x0) (async) setsockopt$packet_fanout(r10, 0x107, 0x12, 0x0, 0x0) r11 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0xffff7fff}, @TCA_CAKE_MPU={0x8, 0xe, 0xfd}]}}]}, 0x44}}, 0x4800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) (async) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r14}, 0x18) 652.085732ms ago: executing program 1 (id=1868): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = socket(0x11, 0x2, 0x2) r2 = socket$inet(0x2, 0x80000, 0x4) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000380)={0x0, [0x401, 0x7], 0x7}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0x19}, @empty}, 0xc) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000640)={0x138, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x4b}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x5c}]}, 0x138}, 0x1, 0x0, 0x0, 0x2004c800}, 0x4090) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'erspan0\x00', 0x1}) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@getqdisc={0x24, 0x26, 0x4, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff1, 0x5}, {0xe, 0x7}, {0x4, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40011) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) 438.949716ms ago: executing program 2 (id=1869): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x2000, 0x71, 0x10, 0x88}}, &(0x7f0000000480)='GPL\x00'}, 0x80) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019140000001100"], 0xd8}}, 0x80) (async) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000500)) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) (rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000040)={0x20, 0x13, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c0}, 0x8000) (async) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async, rerun: 32) r4 = socket$kcm(0x1e, 0x4, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async, rerun: 32) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) (async, rerun: 32) close(r4) (async) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32], 0x48) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 32) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540", @ANYRES8=r5], 0x5c}}, 0x90) (rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xfffffec8, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x0, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0xfffffffffffffd8d, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x8810) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00a", 0x59}], 0x1}}], 0x1, 0x20000044) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb735f61d35aaad4b82f010018000000000000000c0000000c000000020000000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x10}, 0x94) 395.557875ms ago: executing program 3 (id=1870): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x2c, 0x0, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}]}, 0x2c}, 0x5}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xeaa) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 343.538555ms ago: executing program 4 (id=1871): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}}, 0x40}}, 0x24000080) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_USERDATA={0x63, 0xd, 0x1, 0x0, "5bf0a2b444123aa813220652143efc0b5bd3b8feea214cc6859cfdddcc85b49e9b5d68a5a0eaceb7187c414fd823d62e7e7127c6d0a15ae2ea2eaa427a6ca926c5e22ad8ccccef69d37e8a2c90f7988695b7bc42975c0b84da7cce412e9e24"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 198.915359ms ago: executing program 0 (id=1872): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) (async) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffdc4, &(0x7f00000002c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="f0000000150001002cbc700000000008fc00000000004e56c00d3ad2cafffffccc207f00000000000000000001fe8800000000000000000000000000010000ecdf000000000a00000000000000", @ANYRES16=r0, @ANYRES8=r0, @ANYRESHEX=r0], 0xf0}}, 0x4044050) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffdc4, &(0x7f00000002c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="f0000000150001002cbc700000000008fc00000000004e56c00d3ad2cafffffccc207f00000000000000000001fe8800000000000000000000000000010000ecdf000000000a00000000000000", @ANYRES16=r0, @ANYRES8=r0, @ANYRESHEX=r0], 0xf0}}, 0x4044050) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000023c0)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0xffffffffffffffff, @ANYBLOB="d5029a660f6c1ca28ea7129c46026c66cff99cedd714790fbcef0ff2204e52bf0000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001800db5b2cbd7000fedbdf251d010300150001000100004007000000af2c9b0175e0a0350600000003"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="03000000000000000000460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000e6fe8f0000000001000000000c0090000000000000000000"], 0x54}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'bridge_slave_0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'bridge_slave_0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000300)=@ethtool_rxfh={0x1}}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000380)=0xffff, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYRES8=r2, @ANYRESHEX=r5, @ANYRESOCT=r2, @ANYRES64=r6, @ANYBLOB="90837474fd6117fc7fa9ebe57abec679ae9705baa0953227e8bae4f5fc8db4472814b1c12157ba61ded06d656c152163eb8d7d89376b32ba2f38d6bb6b37620f4f37622961116a6fb82c0654b1189673f3d577f3fffe6002a5851b343bbe060674ce135b9678cc5c09671819583520682c30639fa8a31ba36caeb8a2be38d7b83e5c4e2bf934b4f48fdfd1296dbc1f78df1e0a96777b8f46eaa8c5bffab18247e31601cbc1c444beea2e81360d2cbf65f582edaf5b35d78db97bfba6574710d3e0e7f1f3d6b5"], 0x38}}, 0x10) r10 = socket$kcm(0x2, 0x3, 0x84) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x29, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xffe3b4a1e59ca2f4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r11, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="49723b3ab53a13274c", 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r11, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="49723b3ab53a13274c", 0x0}, 0x50) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFINDEX(r12, 0x400454da, 0x0) sendmsg$inet(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc0000000000000014000000000000000100000041"], 0x4c}, 0x20001850) (async) sendmsg$inet(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc0000000000000014000000000000000100000041"], 0x4c}, 0x20001850) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, 0x0, 0x0) 112.30675ms ago: executing program 4 (id=1873): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x10, {0x0, 0x0, 0x4a00, 0x0, 0x8020}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x840) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000000400007012dbd7000fedbdf2a827c00001c00c28018000980120091002f6465762f717274722d74756e8b"], 0x30}, 0x1, 0x0, 0x0, 0x4c891}, 0xc080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x40, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xa}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1, 0x803, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000000206010200000000000000000700000805000100070000000900020073797a30000000000c0027800800120000000000050005000200000005000400010000000d000300686173683a6e657400000000"], 0x54}, 0x1, 0x0, 0x0, 0x4090}, 0x20000000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000004c0)='pimreg0\x00', 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r13, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x20, r12, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x142}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r11, 0x301, 0x0, 0x0, {0x2b}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000a041}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, r8, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xf8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40018}, 0x8000) socket(0x10, 0x803, 0x0) 33.490657ms ago: executing program 2 (id=1874): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 0s ago: executing program 0 (id=1875): bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x5502000000000000}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFNL_MSG_ACCT_GET(r2, 0x0, 0x8000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) kernel console output (not intermixed with test programs): [ 174.401812][ T7302] syzkaller0: entered allmulticast mode [ 174.500950][ T7306] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.547477][ T7306] netlink: 'syz.4.340': attribute type 1 has an invalid length. [ 174.566000][ T7306] netlink: 'syz.4.340': attribute type 1 has an invalid length. [ 174.575742][ T7306] nbd: couldn't find a device at index 65544 [ 174.587929][ T7306] netlink: 'syz.4.340': attribute type 1 has an invalid length. [ 174.600562][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 174.614637][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 174.801517][ T7320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.345'. [ 174.848222][ T7322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.345'. [ 174.977463][ T7325] macsec1: entered promiscuous mode [ 176.382458][ T7380] block nbd0: server does not support multiple connections per device. [ 176.440003][ T7380] block nbd0: shutting down sockets [ 177.186324][ T7435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.371'. [ 177.354942][ T7438] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 177.385360][ T7438] bond2 (unregistering): Released all slaves [ 178.297860][ T7491] netlink: 'syz.4.381': attribute type 13 has an invalid length. [ 178.505518][ T7502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.385'. [ 178.544219][ T7502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.385'. [ 178.592594][ T7502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.385'. [ 178.602686][ T7509] netlink: 228 bytes leftover after parsing attributes in process `syz.0.386'. [ 178.629085][ T7502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.385'. [ 179.139753][ T7520] team0: Port device team_slave_0 removed [ 179.688069][ T7552] __nla_validate_parse: 4 callbacks suppressed [ 179.688091][ T7552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.393'. [ 179.905113][ T7567] netlink: 20 bytes leftover after parsing attributes in process `syz.4.395'. [ 179.966046][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.393'. [ 179.976982][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.394'. [ 180.021220][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 180.024015][ T7558] nbd: device at index 64 is going down [ 180.271031][ T6928] udevd[6928]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 180.370153][ T7110] udevd[7110]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 180.458991][ T30] audit: type=1800 audit(1780556074.093:2): pid=7582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.397" name="memory.events" dev="tmpfs" ino=431 res=0 errno=0 [ 180.550277][ T7591] netlink: 'syz.1.397': attribute type 4 has an invalid length. [ 180.592676][ T7591] netlink: 224 bytes leftover after parsing attributes in process `syz.1.397'. [ 180.736633][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.399'. [ 180.783781][ T7598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.401'. [ 180.838901][ T7598] ip6gre1: entered promiscuous mode [ 180.859975][ T7598] ip6gre1: entered allmulticast mode [ 180.897534][ T1125] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.934430][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.945288][ T1125] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.153280][ T7011] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.381878][ T7011] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.459263][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'. [ 181.583156][ T7621] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.991282][ T7621] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.044320][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'. [ 182.211015][ T7621] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.440871][ T7621] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.144259][ T1125] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.236613][ T3386] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.317208][ T1112] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.383669][ T227] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.404155][ T7667] syzkaller0: entered promiscuous mode [ 183.420027][ T7667] syzkaller0: entered allmulticast mode [ 184.131657][ T7694] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.143613][ T7694] bond1: (slave bond2): Enslaving as an active interface with an up link [ 184.311654][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 184.408478][ T7697] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 184.871792][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.403417][ T7735] __nla_validate_parse: 1 callbacks suppressed [ 185.403439][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.422'. [ 185.454067][ T7735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.422'. [ 185.496243][ T7742] netlink: 153696 bytes leftover after parsing attributes in process `syz.4.422'. [ 186.002821][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'. [ 186.090591][ T7757] sctp: [Deprecated]: syz.4.426 (pid 7757) Use of int in max_burst socket option. [ 186.090591][ T7757] Use struct sctp_assoc_value instead [ 186.427008][ T7768] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.429'. [ 186.451972][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.429'. [ 186.523033][ T7768] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.604766][ T7772] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 186.675558][ T7779] No such timeout policy "syz1" [ 186.873945][ T7783] netlink: 20 bytes leftover after parsing attributes in process `syz.1.434'. [ 187.002986][ T7787] netlink: zone id is out of range [ 187.018434][ T7787] netlink: zone id is out of range [ 187.041289][ T7787] netlink: zone id is out of range [ 187.058580][ T7787] netlink: zone id is out of range [ 187.076149][ T7787] netlink: zone id is out of range [ 187.087817][ T7787] netlink: zone id is out of range [ 187.096026][ T7787] netlink: zone id is out of range [ 187.106235][ T7787] netlink: zone id is out of range [ 187.121882][ T7787] netlink: zone id is out of range [ 187.131741][ T7787] netlink: zone id is out of range [ 187.188317][ T7795] netlink: 'syz.4.439': attribute type 10 has an invalid length. [ 187.354729][ T7803] netlink: 40 bytes leftover after parsing attributes in process `syz.4.439'. [ 187.369541][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'. [ 187.425929][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'. [ 187.796157][ T7817] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.822513][ T7821] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.838387][ T7821] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 187.850152][ T7821] bond3: (slave vti0): Error -95 calling set_mac_address [ 188.534223][ T7838] netlink: 'syz.1.449': attribute type 1 has an invalid length. [ 188.610224][ T7838] bond3: entered promiscuous mode [ 188.616170][ T7838] bond3: entered allmulticast mode [ 188.622325][ T7838] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.734517][ T7845] erspan1: entered allmulticast mode [ 188.845175][ T7845] bond3: (slave erspan1): making interface the new active one [ 188.877149][ T7845] erspan1: entered promiscuous mode [ 188.900538][ T7845] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 188.994118][ T7847] syz.1.449 (7847) used obsolete PPPIOCDETACH ioctl [ 192.161349][ T7933] netlink: 'syz.4.462': attribute type 1 has an invalid length. [ 192.233643][ T7935] __nla_validate_parse: 5 callbacks suppressed [ 192.233664][ T7935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.462'. [ 192.279930][ T7935] bond4: entered promiscuous mode [ 192.292255][ T7935] bond4: entered allmulticast mode [ 192.327747][ T7933] bond4: (slave geneve2): making interface the new active one [ 192.352957][ T7933] geneve2: entered promiscuous mode [ 192.358492][ T7933] geneve2: entered allmulticast mode [ 192.366483][ T7933] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 192.386468][ T1125] netdevsim netdevsim4 : set [1, 1] type 2 family 0 port 20004 - 0 [ 192.399116][ T1125] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 192.471920][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.515995][ T1125] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 192.534090][ T1125] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 192.670995][ T7945] netlink: 7 bytes leftover after parsing attributes in process `syz.2.464'. [ 192.695798][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 193.520504][ T5766] IPVS: starting estimator thread 0... [ 193.533673][ T7983] SET target dimension over the limit! [ 193.611854][ T7986] IPVS: using max 29 ests per chain, 69600 per kthread [ 193.806284][ T7990] netlink: 60 bytes leftover after parsing attributes in process `syz.0.479'. [ 194.373036][ T8011] netlink: 'syz.1.485': attribute type 1 has an invalid length. [ 194.410870][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.420180][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.486815][ T8011] 8021q: adding VLAN 0 to HW filter on device bond4 [ 194.518057][ T8011] netlink: 32 bytes leftover after parsing attributes in process `syz.1.485'. [ 194.846628][ T8015] vlan3: entered allmulticast mode [ 194.852233][ T8015] bond4: entered allmulticast mode [ 195.175923][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 195.203552][ T8030] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 195.257443][ T8032] tipc: Enabled bearer , priority 10 [ 195.306876][ T5370] team_slave_0: entered promiscuous mode [ 195.314090][ T5370] team_slave_1: entered promiscuous mode [ 195.403109][ T8051] bridge1: port 1(vlan2) entered blocking state [ 195.423683][ T8051] bridge1: port 1(vlan2) entered disabled state [ 195.440358][ T8051] vlan2: entered allmulticast mode [ 195.450999][ T8051] bridge1: entered allmulticast mode [ 195.469660][ T8051] vlan2: left allmulticast mode [ 195.476162][ T8051] bridge1: left allmulticast mode [ 195.523685][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.493'. [ 195.638650][ T8057] bond5: entered promiscuous mode [ 195.705092][ T8057] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.738358][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.493'. [ 195.769620][ T8068] bond5 (unregistering): Released all slaves [ 195.953935][ T8060] bridge0: port 3(vlan0) entered blocking state [ 195.961319][ T8060] bridge0: port 3(vlan0) entered disabled state [ 195.981796][ T8060] vlan0: entered allmulticast mode [ 195.988815][ T8074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.498'. [ 196.001960][ T8060] vlan0: entered promiscuous mode [ 196.044938][ T8075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.498'. [ 196.790749][ T8091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.317551][ T8119] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20003 [ 197.836078][ T8145] __nla_validate_parse: 1 callbacks suppressed [ 197.836101][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'. [ 197.993600][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 198.158385][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 198.576845][ T8180] bridge0: port 3(batadv1) entered blocking state [ 198.614493][ T8180] bridge0: port 3(batadv1) entered disabled state [ 198.691084][ T8180] batadv1: entered allmulticast mode [ 198.708922][ T8180] batadv1: entered promiscuous mode [ 198.759567][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.525'. [ 198.967048][ T8180] IPVS: Scheduler module ip_vs_ not found [ 199.061978][ T1125] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 199.071985][ T1125] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 199.395171][ T8208] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.402785][ T8208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.602862][ T8208] tipc: Resetting bearer [ 207.191894][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 211.857240][ T4954] Bluetooth: hci1: command 0x0406 tx timeout [ 211.858430][ T5648] Bluetooth: hci4: command 0x0405 tx timeout [ 211.869541][ T5653] Bluetooth: hci2: command 0x0401 tx timeout [ 211.876980][ T4954] Bluetooth: hci0: command 0x0406 tx timeout [ 211.884521][ T4954] Bluetooth: hci3: command 0x0406 tx timeout [ 219.171929][ T8225] netlink: 536 bytes leftover after parsing attributes in process `syz.0.533'. [ 219.197092][ T8227] netlink: 156 bytes leftover after parsing attributes in process `syz.1.534'. [ 219.662066][ T8255] gretap0: entered promiscuous mode [ 219.669425][ T8255] macvlan2: entered promiscuous mode [ 219.678951][ T8255] gretap0: left promiscuous mode [ 221.114859][ T8315] tipc: Enabled bearer , priority 0 [ 221.224038][ T8315] netlink: 'syz.4.559': attribute type 16 has an invalid length. [ 221.317996][ T8315] netlink: 'syz.4.559': attribute type 17 has an invalid length. [ 221.509179][ T8348] x_tables: duplicate underflow at hook 2 [ 221.559416][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.565'. [ 221.606924][ T8324] syzkaller0: entered promiscuous mode [ 221.614719][ T8324] syzkaller0: entered allmulticast mode [ 221.621269][ T8324] tipc: Resetting bearer [ 221.672002][ T5766] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 221.738255][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.564'. [ 221.749459][ T8315] net_ratelimit: 335 callbacks suppressed [ 221.749479][ T8315] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 221.812939][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 221.826979][ T8348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.564'. [ 221.859695][ T8306] tipc: Resetting bearer [ 224.045096][ T8306] tipc: Disabling bearer [ 224.318059][ T6966] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 224.859644][ T8406] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 225.411072][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 225.437274][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 225.877162][ T8458] netlink: 'syz.4.588': attribute type 1 has an invalid length. [ 226.053075][ T8458] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 226.312275][ T5766] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 226.916949][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.594'. [ 227.228624][ T8488] netlink: 52 bytes leftover after parsing attributes in process `syz.1.597'. [ 227.239055][ T8485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.596'. [ 227.250914][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 227.425486][ T8492] xt_ipcomp: unknown flags 1D [ 227.450408][ T8492] syzkaller1: entered promiscuous mode [ 227.457094][ T8492] syzkaller1: entered allmulticast mode [ 227.477387][ T8490] netlink: 2 bytes leftover after parsing attributes in process `syz.4.598'. [ 227.746683][ T8498] syz.4.602: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 227.763030][ T8496] syzkaller0: entered promiscuous mode [ 227.770766][ T8496] syzkaller0: entered allmulticast mode [ 227.793015][ T8498] CPU: 1 UID: 0 PID: 8498 Comm: syz.4.602 Not tainted syzkaller #0 PREEMPT(full) [ 227.793059][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 227.793083][ T8498] Call Trace: [ 227.793096][ T8498] [ 227.793104][ T8498] dump_stack_lvl+0xe8/0x150 [ 227.793285][ T8498] warn_alloc+0x249/0x340 [ 227.793348][ T8498] ? stack_trace_save+0xa9/0x100 [ 227.793409][ T8498] ? __pfx_warn_alloc+0x10/0x10 [ 227.793444][ T8498] ? kasan_save_track+0x4f/0x80 [ 227.793480][ T8498] ? kasan_save_track+0x3e/0x80 [ 227.793504][ T8498] ? __kasan_kmalloc+0x93/0xb0 [ 227.793530][ T8498] ? __kmalloc_cache_noprof+0x31c/0x660 [ 227.793555][ T8498] ? xskq_create+0x56/0x170 [ 227.793701][ T8498] ? xsk_setsockopt+0x54c/0x990 [ 227.793725][ T8498] ? do_sock_setsockopt+0x17c/0x1b0 [ 227.793806][ T8498] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 227.793825][ T8498] ? do_syscall_64+0x174/0x580 [ 227.793883][ T8498] __vmalloc_node_range_noprof+0x132/0x1750 [ 227.793945][ T8498] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 227.793982][ T8498] ? __kasan_kmalloc+0x93/0xb0 [ 227.794018][ T8498] vmalloc_user_noprof+0xad/0xe0 [ 227.794047][ T8498] ? xskq_create+0xbf/0x170 [ 227.794076][ T8498] xskq_create+0xbf/0x170 [ 227.794109][ T8498] xsk_init_queue+0x8a/0xe0 [ 227.794141][ T8498] xsk_setsockopt+0x54c/0x990 [ 227.794173][ T8498] ? __pfx_xsk_setsockopt+0x10/0x10 [ 227.794201][ T8498] ? __pfx_aa_sk_perm+0x10/0x10 [ 227.794310][ T8498] ? aa_sock_opt_perm+0xff/0x1a0 [ 227.794368][ T8498] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 227.794413][ T8498] ? __pfx_xsk_setsockopt+0x10/0x10 [ 227.794442][ T8498] do_sock_setsockopt+0x17c/0x1b0 [ 227.794470][ T8498] __x64_sys_setsockopt+0x13d/0x1b0 [ 227.794495][ T8498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.794533][ T8498] do_syscall_64+0x174/0x580 [ 227.794554][ T8498] ? trace_irq_disable+0x3b/0x140 [ 227.794595][ T8498] ? clear_bhb_loop+0x40/0x90 [ 227.794621][ T8498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.794649][ T8498] RIP: 0033:0x7effe059ce59 [ 227.794679][ T8498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.794695][ T8498] RSP: 002b:00007effe14c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 227.794714][ T8498] RAX: ffffffffffffffda RBX: 00007effe0815fa0 RCX: 00007effe059ce59 [ 227.794727][ T8498] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 227.794738][ T8498] RBP: 00007effe0632d6f R08: 0000000000000004 R09: 0000000000000000 [ 227.794749][ T8498] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.794760][ T8498] R13: 00007effe0816038 R14: 00007effe0815fa0 R15: 00007ffff4bede78 [ 227.794790][ T8498] [ 227.796427][ T8498] Mem-Info: [ 228.040364][ T8505] netlink: 'syz.1.604': attribute type 1 has an invalid length. [ 228.071871][ T8498] active_anon:5715 inactive_anon:0 isolated_anon:0 [ 228.071871][ T8498] active_file:3205 inactive_file:40004 isolated_file:0 [ 228.071871][ T8498] unevictable:768 dirty:169 writeback:0 [ 228.071871][ T8498] slab_reclaimable:10119 slab_unreclaimable:141969 [ 228.071871][ T8498] mapped:29409 shmem:1293 pagetables:1180 [ 228.071871][ T8498] sec_pagetables:0 bounce:0 [ 228.071871][ T8498] kernel_misc_reclaimable:0 [ 228.071871][ T8498] free:1281608 free_pcp:11884 free_cma:0 [ 228.133746][ T8498] Node 0 active_anon:22860kB inactive_anon:0kB active_file:12820kB inactive_file:159812kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117636kB dirty:676kB writeback:0kB shmem:3636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13112kB pagetables:4560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 228.144739][ T8505] netlink: 'syz.1.604': attribute type 2 has an invalid length. [ 228.191803][ T8505] netlink: 'syz.1.604': attribute type 1 has an invalid length. [ 228.219528][ T8498] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 228.289957][ T8498] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 228.335263][ T8508] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.336275][ T8508] netlink: 'syz.2.605': attribute type 21 has an invalid length. [ 228.350237][ T8498] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 228.358912][ T8498] Node 0 DMA32 free:1163076kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22560kB inactive_anon:0kB active_file:12820kB inactive_file:159812kB unevictable:1536kB writepending:676kB zspages:0kB present:3129332kB managed:2552596kB mlocked:0kB bounce:0kB free_pcp:47568kB local_pcp:21228kB free_cma:0kB [ 228.393285][ T8498] lowmem_reserve[]: 0 0 0 0 0 [ 228.398175][ T8498] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 228.439928][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.605'. [ 228.454648][ T8498] lowmem_reserve[]: 0 0 0 0 0 [ 228.463964][ T8508] netlink: 'syz.2.605': attribute type 1 has an invalid length. [ 228.482072][ T8498] Node 1 Normal free:3948168kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 228.586730][ T8508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.605834][ T8498] lowmem_reserve[]: 0 0 0 0 0 [ 228.624438][ T8498] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 228.642529][ T8498] Node 0 DMA32: 3696*4kB (UME) 1528*8kB (UME) 928*16kB (UME) 660*32kB (UM) 148*64kB (UME) 80*128kB (UME) 45*256kB (UME) 23*512kB (UME) 20*1024kB (UM) 19*2048kB (UME) 244*4096kB (UM) = 1164800kB [ 228.689719][ T8498] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 228.707415][ T8498] Node 1 Normal: 10*4kB (UM) 14*8kB (UM) 9*16kB (UM) 9*32kB (UM) 7*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3948168kB [ 228.738796][ T8498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 228.821004][ T8498] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 228.845580][ T8498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 228.857047][ T8516] IPVS: Unknown mcast interface: pimreg [ 228.865228][ T8498] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 228.882572][ T8498] 44498 total pagecache pages [ 228.891708][ T8498] 0 pages in swap cache [ 228.900164][ T8498] Free swap = 124996kB [ 228.904886][ T8520] bridge0: port 3(syz_tun) entered blocking state [ 228.908943][ T8498] Total swap = 124996kB [ 228.917713][ T8498] 2097051 pages RAM [ 228.921874][ T8498] 0 pages HighMem/MovableOnly [ 228.926626][ T8498] 427119 pages reserved [ 228.930853][ T8498] 0 pages cma reserved [ 228.948037][ T8520] bridge0: port 3(syz_tun) entered disabled state [ 228.956884][ T8520] syz_tun: entered allmulticast mode [ 228.964360][ T8520] syz_tun: entered promiscuous mode [ 228.972628][ T8520] bridge0: port 3(syz_tun) entered blocking state [ 228.979470][ T8520] bridge0: port 3(syz_tun) entered forwarding state [ 229.163700][ T8532] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.611'. [ 229.271858][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 229.312882][ T8542] netlink: 68 bytes leftover after parsing attributes in process `syz.0.615'. [ 229.466205][ T8549] syzkaller0: entered promiscuous mode [ 229.498945][ T8549] syzkaller0: entered allmulticast mode [ 229.651824][ T8562] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 229.675724][ T8561] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 229.716900][ T8561] netlink: 'syz.2.620': attribute type 1 has an invalid length. [ 229.747054][ T8562] netlink: 'syz.2.620': attribute type 1 has an invalid length. [ 229.773146][ T8561] netlink: 'syz.2.620': attribute type 1 has an invalid length. [ 229.815074][ T8562] netlink: 'syz.2.620': attribute type 1 has an invalid length. [ 230.293302][ T8575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.622'. [ 230.915178][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 231.154127][ T8615] tipc: Resetting bearer [ 231.171514][ T8626] netlink: 'syz.0.633': attribute type 1 has an invalid length. [ 231.801982][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 232.036665][ T8637] syzkaller0: entered promiscuous mode [ 232.065480][ T8637] syzkaller0: entered allmulticast mode [ 232.465917][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.642926][ T8726] __nla_validate_parse: 5 callbacks suppressed [ 235.642946][ T8726] netlink: 20 bytes leftover after parsing attributes in process `syz.2.647'. [ 235.727605][ T8719] syzkaller0: entered promiscuous mode [ 235.741091][ T8719] syzkaller0: entered allmulticast mode [ 235.825193][ T8723] syzkaller0: entered promiscuous mode [ 235.886755][ T8723] syzkaller0: entered allmulticast mode [ 235.936865][ T8733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.647'. [ 235.971895][ T8733] nbd: nbd64 already in use [ 236.741698][ T8729] tipc: Started in network mode [ 236.747862][ T8729] tipc: Node identity 2e6c469132d9, cluster identity 4711 [ 236.756349][ T8729] tipc: Enabled bearer , priority 0 [ 236.815027][ T8722] tipc: Resetting bearer [ 236.898959][ T8722] tipc: Disabling bearer [ 237.271908][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 237.911880][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.747396][ T8781] syzkaller0: entered promiscuous mode [ 239.749899][ T8780] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 239.761982][ T8781] syzkaller0: entered allmulticast mode [ 240.195117][ T8801] batadv_slave_0: entered promiscuous mode [ 240.292418][ T8805] syzkaller1: entered promiscuous mode [ 240.305201][ T8805] syzkaller1: entered allmulticast mode [ 240.338934][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 240.419304][ T8807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.496944][ T8807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.589835][ T8816] IPVS: Unknown mcast interface: pim6reg [ 240.784866][ T8830] bridge0: port 3(syz_tun) entered blocking state [ 240.812933][ T8830] bridge0: port 3(syz_tun) entered disabled state [ 240.819670][ T8830] syz_tun: entered allmulticast mode [ 240.827851][ T8830] syz_tun: entered promiscuous mode [ 240.835211][ T8830] bridge0: port 3(syz_tun) entered blocking state [ 240.841885][ T8830] bridge0: port 3(syz_tun) entered forwarding state [ 240.878079][ T8833] xt_l2tp: wrong L2TP version: 0 [ 241.023283][ T8837] netlink: 1 bytes leftover after parsing attributes in process `syz.0.671'. [ 241.048963][ T8839] netlink: 'syz.3.672': attribute type 1 has an invalid length. [ 241.074358][ T8799] batadv_slave_0: left promiscuous mode [ 241.237016][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'. [ 241.259089][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'. [ 241.292419][ T8842] netlink: 304 bytes leftover after parsing attributes in process `syz.1.673'. [ 241.769789][ T8866] tipc: Started in network mode [ 241.798051][ T8866] tipc: Node identity , cluster identity 4711 [ 241.827763][ T8866] tipc: Failed to obtain node identity [ 241.858838][ T8866] tipc: Enabling of bearer rejected, failed to enable media [ 242.375844][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.683'. [ 242.385935][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'. [ 242.396086][ T8877] netlink: 'syz.2.683': attribute type 12 has an invalid length. [ 242.405626][ T8876] netlink: 104 bytes leftover after parsing attributes in process `syz.0.681'. [ 242.424357][ T1107] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.433637][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.683'. [ 242.442630][ T1107] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.467184][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'. [ 242.485176][ T1107] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.500900][ T8877] netlink: 'syz.2.683': attribute type 12 has an invalid length. [ 242.550650][ T8890] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 242.614070][ T1107] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.765649][ T8900] block nbd0: not configured, cannot reconfigure [ 242.805886][ T8900] tipc: Enabling of bearer rejected, failed to enable media [ 242.874828][ T8909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.691'. [ 242.913884][ T8914] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 242.924468][ T8914] dvmrp1: linktype set to 785 [ 243.436312][ T8940] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 244.615061][ T8979] raw_sendmsg: syz.4.710 forgot to set AF_INET. Fix it! [ 245.701006][ T9008] netlink: 'syz.0.719': attribute type 21 has an invalid length. [ 245.709781][ T9008] IPv6: NLM_F_CREATE should be specified when creating new route [ 245.718644][ T9008] netlink: 'syz.0.719': attribute type 1 has an invalid length. [ 247.149651][ T9019] netlink: 'syz.1.721': attribute type 1 has an invalid length. [ 247.916067][ T9019] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 248.144503][ T9025] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 248.456785][ T9039] syzkaller0: entered promiscuous mode [ 248.475567][ T9039] syzkaller0: entered allmulticast mode [ 249.099613][ T9070] gtp0: entered promiscuous mode [ 249.127365][ T9070] gtp0: entered allmulticast mode [ 249.158414][ T9070] team0: Device gtp0 is of different type [ 249.368410][ T9046] tipc: Resetting bearer [ 249.757537][ T9092] sctp: [Deprecated]: syz.2.739 (pid 9092) Use of int in max_burst socket option. [ 249.757537][ T9092] Use struct sctp_assoc_value instead [ 249.822300][ T5751] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.209839][ T9102] Cannot find del_set index 3 as target [ 250.271844][ T9099] __nla_validate_parse: 6 callbacks suppressed [ 250.271865][ T9099] netlink: 40 bytes leftover after parsing attributes in process `syz.3.740'. [ 250.361273][ T9106] xt_hashlimit: max too large, truncated to 1048576 [ 250.375083][ T9104] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y [ 250.375083][ T9104] 3UH5rBn [ 250.402637][ T9106] No such timeout policy "syz1" [ 250.633001][ T5751] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.386327][ T9129] syzkaller0: entered promiscuous mode [ 251.409999][ T9129] syzkaller0: entered allmulticast mode [ 251.425695][ T9127] netlink: 160 bytes leftover after parsing attributes in process `syz.3.749'. [ 251.437773][ T9127] netlink: 'syz.3.749': attribute type 11 has an invalid length. [ 251.515756][ T9136] netlink: 'syz.2.750': attribute type 1 has an invalid length. [ 251.634082][ T9142] netlink: 60 bytes leftover after parsing attributes in process `syz.2.750'. [ 251.738467][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 251.783136][ T9146] netlink: 11 bytes leftover after parsing attributes in process `syz.2.750'. [ 251.977815][ T9136] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 251.985443][ T9136] syzkaller1: Refused to change device type [ 252.631820][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 252.707859][ T9177] netlink: 'syz.4.760': attribute type 13 has an invalid length. [ 253.218420][ T9196] netlink: 100 bytes leftover after parsing attributes in process `syz.3.766'. [ 253.256463][ T9196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.766'. [ 253.296172][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'. [ 253.362365][ T9196] netlink: 108 bytes leftover after parsing attributes in process `syz.3.766'. [ 253.502333][ T9215] netlink: 'syz.2.768': attribute type 1 has an invalid length. [ 253.809723][ T9220] FAULT_INJECTION: forcing a failure. [ 253.809723][ T9220] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 253.861609][ T9220] CPU: 0 UID: 0 PID: 9220 Comm: syz.4.771 Not tainted syzkaller #0 PREEMPT(full) [ 253.861638][ T9220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 253.861665][ T9220] Call Trace: [ 253.861674][ T9220] [ 253.861683][ T9220] dump_stack_lvl+0xe8/0x150 [ 253.861717][ T9220] should_fail_ex+0x412/0x560 [ 253.861896][ T9220] ? 0xffffffff81000000 [ 253.861914][ T9220] _copy_to_user+0x31/0xb0 [ 253.861999][ T9220] mptcp_put_int_option+0x205/0x2d0 [ 253.862084][ T9220] ? 0xffffffff81000000 [ 253.862102][ T9220] ? __pfx_mptcp_put_int_option+0x10/0x10 [ 253.862129][ T9220] ? mptcp_getsockopt+0x2c3/0x1ed0 [ 253.862157][ T9220] ? mptcp_getsockopt+0x2c3/0x1ed0 [ 253.862183][ T9220] ? __local_bh_enable_ip+0xd0/0x130 [ 253.862221][ T9220] mptcp_getsockopt+0xcfe/0x1ed0 [ 253.862248][ T9220] ? 0xffffffff81000000 [ 253.862264][ T9220] ? process_measurement+0x195e/0x1c80 [ 253.862320][ T9220] ? process_measurement+0x311/0x1c80 [ 253.862343][ T9220] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 253.862382][ T9220] ? __pfx_process_measurement+0x10/0x10 [ 253.862406][ T9220] ? tomoyo_check_open_permission+0x38e/0x470 [ 253.862489][ T9220] ? __lock_acquire+0x6b5/0x2cf0 [ 253.862531][ T9220] ? __lock_acquire+0x6b5/0x2cf0 [ 253.862554][ T9220] ? unwind_next_frame+0xa6/0x2550 [ 253.862588][ T9220] ? rcu_is_watching+0x15/0xb0 [ 253.862612][ T9220] ? __kasan_check_byte+0x12/0x40 [ 253.862647][ T9220] ? unwind_next_frame+0xa6/0x2550 [ 253.862671][ T9220] ? rcu_is_watching+0x15/0xb0 [ 253.862696][ T9220] ? unwind_next_frame+0xa6/0x2550 [ 253.862719][ T9220] ? rcu_is_watching+0x15/0xb0 [ 253.862741][ T9220] ? __kasan_check_byte+0x12/0x40 [ 253.862773][ T9220] ? is_bpf_text_address+0x26/0x2b0 [ 253.862812][ T9220] ? rcu_is_watching+0x15/0xb0 [ 253.862834][ T9220] ? __kasan_check_byte+0x12/0x40 [ 253.862868][ T9220] ? __bfs+0x153/0x290 [ 253.862888][ T9220] ? __pfx_hlock_conflict+0x10/0x10 [ 253.862919][ T9220] ? check_path+0x21/0x40 [ 253.862944][ T9220] ? check_noncircular+0xda/0x150 [ 253.862978][ T9220] ? lockdep_unlock+0x5d/0xd0 [ 253.862996][ T9220] ? __lock_acquire+0x146e/0x2cf0 [ 253.863023][ T9220] ? arch_stack_walk+0xfb/0x150 [ 253.863078][ T9220] ? aa_label_sk_perm+0x532/0x6e0 [ 253.863117][ T9220] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 253.863150][ T9220] ? _parse_integer_limit+0x1ae/0x1f0 [ 253.863191][ T9220] ? __lock_acquire+0x6b5/0x2cf0 [ 253.863239][ T9220] ? __might_fault+0xaf/0x130 [ 253.863277][ T9220] ? __might_fault+0xaf/0x130 [ 253.863320][ T9220] ? sock_common_getsockopt+0x2d/0xb0 [ 253.863394][ T9220] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 253.863426][ T9220] do_sock_getsockopt+0x51d/0x7e0 [ 253.863453][ T9220] ? 0xffffffff81000000 [ 253.863474][ T9220] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 253.863515][ T9220] ? __fget_files+0x3a0/0x420 [ 253.863552][ T9220] ? __fget_files+0x2a/0x420 [ 253.863581][ T9220] __x64_sys_getsockopt+0x1a4/0x240 [ 253.863602][ T9220] ? 0xffffffff81000000 [ 253.863621][ T9220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.863673][ T9220] do_syscall_64+0x174/0x580 [ 253.863696][ T9220] ? trace_irq_disable+0x3b/0x140 [ 253.863725][ T9220] ? clear_bhb_loop+0x40/0x90 [ 253.863750][ T9220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.863770][ T9220] RIP: 0033:0x7effe059ce59 [ 253.863798][ T9220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.863815][ T9220] RSP: 002b:00007effe14c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 253.863838][ T9220] RAX: ffffffffffffffda RBX: 00007effe0815fa0 RCX: 00007effe059ce59 [ 253.863853][ T9220] RDX: 0000000000000004 RSI: 0000000000000006 RDI: 0000000000000003 [ 253.863865][ T9220] RBP: 00007effe14c0090 R08: 0000200000000000 R09: 0000000000000000 [ 253.863879][ T9220] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.863891][ T9220] R13: 00007effe0816038 R14: 00007effe0815fa0 R15: 00007ffff4bede78 [ 253.863912][ T9220] ? 0xffffffff81000000 [ 253.863939][ T9220] [ 254.240153][ T9222] syzkaller0: entered promiscuous mode [ 254.321907][ T9222] syzkaller0: entered allmulticast mode [ 254.460504][ T9229] netlink: 'syz.4.774': attribute type 2 has an invalid length. [ 254.518650][ T9232] netlink: 'syz.0.775': attribute type 2 has an invalid length. [ 254.533529][ T9232] netlink: 224 bytes leftover after parsing attributes in process `syz.0.775'. [ 255.837345][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.844680][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.949601][ T9239] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 257.002101][ T9239] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 257.033867][ T9239] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 257.188917][ T9250] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 257.228229][ T9250] __nla_validate_parse: 1 callbacks suppressed [ 257.228247][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 257.324449][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 257.357254][ T9250] netlink: 'syz.2.778': attribute type 14 has an invalid length. [ 257.367883][ T9250] netlink: 'syz.2.778': attribute type 13 has an invalid length. [ 257.686210][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.782'. [ 257.836808][ T9271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.783'. [ 257.862445][ T9273] FAULT_INJECTION: forcing a failure. [ 257.862445][ T9273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.902799][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 257.915180][ T9273] CPU: 1 UID: 0 PID: 9273 Comm: syz.4.784 Not tainted syzkaller #0 PREEMPT(full) [ 257.915209][ T9273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 257.915221][ T9273] Call Trace: [ 257.915229][ T9273] [ 257.915238][ T9273] dump_stack_lvl+0xe8/0x150 [ 257.915269][ T9273] should_fail_ex+0x412/0x560 [ 257.915299][ T9273] _copy_to_user+0x31/0xb0 [ 257.915328][ T9273] simple_read_from_buffer+0xe1/0x170 [ 257.915367][ T9273] proc_fail_nth_read+0x1bb/0x230 [ 257.915454][ T9273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.915485][ T9273] ? rw_verify_area+0x2a6/0x4d0 [ 257.915520][ T9273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.915549][ T9273] vfs_read+0x20c/0xa70 [ 257.915584][ T9273] ? __pfx___mutex_lock+0x10/0x10 [ 257.915672][ T9273] ? __pfx_vfs_read+0x10/0x10 [ 257.915703][ T9273] ? __fget_files+0x2a/0x420 [ 257.915734][ T9273] ? __fget_files+0x3a0/0x420 [ 257.915758][ T9273] ? __fget_files+0x2a/0x420 [ 257.915809][ T9273] ksys_read+0x150/0x270 [ 257.915843][ T9273] ? __pfx_ksys_read+0x10/0x10 [ 257.915870][ T9273] ? fput+0xa0/0xd0 [ 257.915904][ T9273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.915927][ T9273] do_syscall_64+0x174/0x580 [ 257.915960][ T9273] ? trace_irq_disable+0x3b/0x140 [ 257.916002][ T9273] ? clear_bhb_loop+0x40/0x90 [ 257.916029][ T9273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.916050][ T9273] RIP: 0033:0x7effe055d68e [ 257.916069][ T9273] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 257.916086][ T9273] RSP: 002b:00007effe14bffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.916108][ T9273] RAX: ffffffffffffffda RBX: 00007effe14c06c0 RCX: 00007effe055d68e [ 257.916123][ T9273] RDX: 000000000000000f RSI: 00007effe14c00a0 RDI: 0000000000000004 [ 257.916135][ T9273] RBP: 00007effe14c0090 R08: 0000000000000000 R09: 0000000000000000 [ 257.916147][ T9273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.916159][ T9273] R13: 00007effe0816038 R14: 00007effe0815fa0 R15: 00007ffff4bede78 [ 257.916194][ T9273] [ 258.570437][ T9281] tap0: tun_chr_ioctl cmd 1074025677 [ 258.594380][ T9281] tap0: linktype set to 768 [ 258.690229][ T9289] netlink: 'syz.2.788': attribute type 7 has an invalid length. [ 258.910120][ T9297] ip6t_srh: unknown srh match flags 4000 [ 259.298971][ T9314] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 259.355457][ T9311] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 260.009043][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 260.047294][ T9344] netlink: 'syz.3.802': attribute type 1 has an invalid length. [ 260.107339][ T9347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.802'. [ 260.302332][ T9344] bond4: entered promiscuous mode [ 260.308079][ T9344] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.438358][ T9363] Bluetooth: MGMT ver 1.23 [ 260.559442][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 260.894210][ T9381] IPv6: Can't replace route, no match found [ 260.947260][ T9381] netlink: 260 bytes leftover after parsing attributes in process `syz.2.808'. [ 261.190433][ T9389] bond5: entered allmulticast mode [ 261.235095][ T9389] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.348723][ T9408] netlink: 14 bytes leftover after parsing attributes in process `syz.0.813'. [ 261.516316][ T9408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.586550][ T9408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.609152][ T9408] bond0 (unregistering): Released all slaves [ 261.700178][ T9418] tipc: Enabling of bearer rejected, failed to enable media [ 262.356489][ T9454] ip6tnl0: entered promiscuous mode [ 262.368830][ T9454] ip6tnl0: entered allmulticast mode [ 262.395745][ T9454] tipc: Enabled bearer , priority 0 [ 262.455714][ T9452] tipc: Disabling bearer [ 262.595203][ T9465] tipc: Enabling of bearer rejected, failed to enable media [ 263.556814][ T9510] netlink: 'syz.2.834': attribute type 4 has an invalid length. [ 263.608987][ T9513] netlink: 'syz.2.834': attribute type 4 has an invalid length. [ 264.103928][ T9528] xt_hashlimit: size too large, truncated to 1048576 [ 264.191473][ T9531] openvswitch: netlink: ufid size 32 bytes exceeds the range (1, 16) [ 264.213858][ T9531] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 265.120621][ T9565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.161758][ T9565] v: renamed from syz_tun (while UP) [ 265.196560][ T9565] bridge0: port 3(v) entered disabled state [ 267.625713][ T9543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.974390][ T9586] __nla_validate_parse: 1 callbacks suppressed [ 267.974412][ T9586] netlink: 40 bytes leftover after parsing attributes in process `syz.0.857'. [ 268.409427][ T9583] openvswitch: netlink: IP tunnel dst address not specified [ 268.669080][ T9612] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.863'. [ 268.840163][ T9620] geneve0: entered promiscuous mode [ 268.849768][ T9620] geneve0: left promiscuous mode [ 269.202466][ T9636] netlink: 'syz.2.872': attribute type 9 has an invalid length. [ 269.294360][ T9638] netlink: 'syz.3.870': attribute type 4 has an invalid length. [ 269.319899][ T9638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.870'. [ 269.516329][ T9647] smc: net device wlan0 applied user defined pnetid SYZ0 [ 269.916792][ T9659] syzkaller0: entered promiscuous mode [ 269.936014][ T9659] syzkaller0: entered allmulticast mode [ 270.945678][ T9699] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.189765][ T9697] tipc: Resetting bearer [ 271.762339][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 272.154418][ T29] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 272.787330][ T9725] syzkaller0: entered promiscuous mode [ 272.806453][ T9725] syzkaller0: entered allmulticast mode [ 272.835747][ T9727] syzkaller0: entered promiscuous mode [ 272.851743][ T9727] syzkaller0: entered allmulticast mode [ 272.861353][ T9727] FAULT_INJECTION: forcing a failure. [ 272.861353][ T9727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.900889][ T9727] CPU: 1 UID: 0 PID: 9727 Comm: syz.3.894 Not tainted syzkaller #0 PREEMPT(full) [ 272.900915][ T9727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 272.900926][ T9727] Call Trace: [ 272.900934][ T9727] [ 272.900942][ T9727] dump_stack_lvl+0xe8/0x150 [ 272.900973][ T9727] should_fail_ex+0x412/0x560 [ 272.901018][ T9727] _copy_from_user+0x2d/0xb0 [ 272.901052][ T9727] ___sys_sendmsg+0x1c6/0x360 [ 272.901075][ T9727] ? __lock_acquire+0x6b5/0x2cf0 [ 272.901102][ T9727] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.901162][ T9727] ? __fget_files+0x2a/0x420 [ 272.901187][ T9727] ? __fget_files+0x3a0/0x420 [ 272.901222][ T9727] __x64_sys_sendmsg+0x1bd/0x2a0 [ 272.901248][ T9727] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 272.901282][ T9727] ? __pfx_ksys_write+0x10/0x10 [ 272.901321][ T9727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.901343][ T9727] do_syscall_64+0x174/0x580 [ 272.901366][ T9727] ? clear_bhb_loop+0x40/0x90 [ 272.901391][ T9727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.901411][ T9727] RIP: 0033:0x7fbe36d9ce59 [ 272.901429][ T9727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.901445][ T9727] RSP: 002b:00007fbe37b8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.901466][ T9727] RAX: ffffffffffffffda RBX: 00007fbe37015fa0 RCX: 00007fbe36d9ce59 [ 272.901480][ T9727] RDX: 0000000000004005 RSI: 00002000000000c0 RDI: 0000000000000006 [ 272.901493][ T9727] RBP: 00007fbe37b8c090 R08: 0000000000000000 R09: 0000000000000000 [ 272.901505][ T9727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.901520][ T9727] R13: 00007fbe37016038 R14: 00007fbe37015fa0 R15: 00007ffc677b7478 [ 272.901550][ T9727] [ 273.491023][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.897'. [ 273.781669][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 273.804620][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 273.811186][ T9747] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 273.872268][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'. [ 273.905072][ T9749] hsr_slave_0: left promiscuous mode [ 273.930148][ T9749] hsr_slave_1: left promiscuous mode [ 274.173451][ T9763] netlink: 'syz.2.904': attribute type 30 has an invalid length. [ 274.722344][ T9784] syzkaller0: entered promiscuous mode [ 274.735085][ T9784] syzkaller0: entered allmulticast mode [ 274.948604][ T9791] syzkaller0: entered promiscuous mode [ 274.974933][ T9796] GUP no longer grows the stack in syz.3.912 (9796): 200000003000-20000000a000 (200000001000) [ 274.986872][ T9791] syzkaller0: entered allmulticast mode [ 275.004933][ T9799] FAULT_INJECTION: forcing a failure. [ 275.004933][ T9799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.021224][ T9796] CPU: 1 UID: 0 PID: 9796 Comm: syz.3.912 Not tainted syzkaller #0 PREEMPT(full) [ 275.021253][ T9796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 275.021266][ T9796] Call Trace: [ 275.021275][ T9796] [ 275.021285][ T9796] dump_stack_lvl+0xe8/0x150 [ 275.021318][ T9796] __get_user_pages+0x2378/0x2730 [ 275.021370][ T9796] ? __gup_longterm_locked+0xc4e/0x1630 [ 275.021396][ T9796] ? down_read_killable+0x1bb/0x340 [ 275.021528][ T9796] __gup_longterm_locked+0xdcf/0x1630 [ 275.021559][ T9796] ? lock_acquire+0x106/0x350 [ 275.021600][ T9796] gup_fast_fallback+0x1d84/0x20d0 [ 275.021656][ T9796] ? __pfx_gup_fast_fallback+0x10/0x10 [ 275.021684][ T9796] ? is_valid_gup_args+0x11f/0x200 [ 275.021710][ T9796] ? get_user_pages_fast+0x4d/0xb0 [ 275.021736][ T9796] __iov_iter_get_pages_alloc+0x370/0xa10 [ 275.021817][ T9796] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 275.021866][ T9796] iov_iter_get_pages2+0x5e/0xa0 [ 275.021896][ T9796] __se_sys_vmsplice+0x7c7/0x1620 [ 275.021946][ T9796] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 275.021978][ T9796] ? __pfx_futex_wake+0x10/0x10 [ 275.022034][ T9796] ? fdget+0x148/0x1e0 [ 275.022078][ T9796] ? put_files_struct+0x256/0x350 [ 275.022103][ T9796] ? 0xffffffffff600000 [ 275.022159][ T9796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.022183][ T9796] do_syscall_64+0x174/0x580 [ 275.022205][ T9796] ? trace_irq_disable+0x3b/0x140 [ 275.022237][ T9796] ? clear_bhb_loop+0x40/0x90 [ 275.022265][ T9796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.022287][ T9796] RIP: 0033:0x7fbe36d9ce59 [ 275.022306][ T9796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.022323][ T9796] RSP: 002b:00007fbe37b8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 275.022346][ T9796] RAX: ffffffffffffffda RBX: 00007fbe37015fa0 RCX: 00007fbe36d9ce59 [ 275.022361][ T9796] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 275.022375][ T9796] RBP: 00007fbe36e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 275.022387][ T9796] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 275.022399][ T9796] R13: 00007fbe37016038 R14: 00007fbe37015fa0 R15: 00007ffc677b7478 [ 275.022434][ T9796] [ 275.343383][ T9799] CPU: 0 UID: 0 PID: 9799 Comm: syz.0.910 Not tainted syzkaller #0 PREEMPT(full) [ 275.343412][ T9799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 275.343424][ T9799] Call Trace: [ 275.343431][ T9799] [ 275.343440][ T9799] dump_stack_lvl+0xe8/0x150 [ 275.343469][ T9799] should_fail_ex+0x412/0x560 [ 275.343497][ T9799] _copy_from_user+0x2d/0xb0 [ 275.343523][ T9799] __copy_msghdr+0x3c5/0x5b0 [ 275.343552][ T9799] ___sys_sendmsg+0x213/0x360 [ 275.343574][ T9799] ? __lock_acquire+0x6b5/0x2cf0 [ 275.343607][ T9799] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.343668][ T9799] ? __fget_files+0x2a/0x420 [ 275.343692][ T9799] ? __fget_files+0x3a0/0x420 [ 275.343732][ T9799] __x64_sys_sendmsg+0x1bd/0x2a0 [ 275.343764][ T9799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 275.343798][ T9799] ? __pfx_ksys_write+0x10/0x10 [ 275.343837][ T9799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.343859][ T9799] do_syscall_64+0x174/0x580 [ 275.343881][ T9799] ? trace_irq_disable+0x3b/0x140 [ 275.343911][ T9799] ? clear_bhb_loop+0x40/0x90 [ 275.343936][ T9799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.343962][ T9799] RIP: 0033:0x7f0fa4f9ce59 [ 275.343981][ T9799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.343997][ T9799] RSP: 002b:00007f0fa5df5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.344018][ T9799] RAX: ffffffffffffffda RBX: 00007f0fa5216090 RCX: 00007f0fa4f9ce59 [ 275.344037][ T9799] RDX: 0000000000004005 RSI: 00002000000000c0 RDI: 0000000000000006 [ 275.344050][ T9799] RBP: 00007f0fa5df5090 R08: 0000000000000000 R09: 0000000000000000 [ 275.344062][ T9799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.344073][ T9799] R13: 00007f0fa5216128 R14: 00007f0fa5216090 R15: 00007fffc9472e18 [ 275.344106][ T9799] [ 275.940864][ T9811] nicvf0: tun_chr_ioctl cmd 1074025677 [ 275.949061][ T9811] nicvf0: linktype set to 1 [ 276.136649][ T9811] syzkaller0: entered promiscuous mode [ 276.142398][ T9811] syzkaller0: entered allmulticast mode [ 278.522848][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 278.534047][ T9837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.921'. [ 279.010972][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.932'. [ 279.055749][ T9871] veth0_macvtap: left promiscuous mode [ 279.141974][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.932'. [ 279.338662][ T9889] netlink: 'syz.0.935': attribute type 7 has an invalid length. [ 279.503744][ T9893] x_tables: duplicate underflow at hook 2 [ 279.539018][ T9883] tipc: Resetting bearer [ 279.539754][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 279.876004][ T9900] netlink: zone id is out of range [ 279.907778][ T9901] netlink: 36 bytes leftover after parsing attributes in process `syz.4.941'. [ 280.121053][ T9913] netlink: 1064 bytes leftover after parsing attributes in process `syz.4.943'. [ 280.186190][ T9913] netlink: 1016 bytes leftover after parsing attributes in process `syz.4.943'. [ 280.249777][ T9918] netlink: 36 bytes leftover after parsing attributes in process `syz.0.946'. [ 281.167554][ T9940] bond7: option miimon: invalid value (18446744073709551607) [ 281.175304][ T9940] bond7: option miimon: allowed values 0 - 2147483647 [ 281.255913][ T9940] bond7 (unregistering): Released all slaves [ 281.555830][ T9952] netlink: 36 bytes leftover after parsing attributes in process `syz.2.947'. [ 281.640349][ T9959] netlink: 'syz.1.956': attribute type 1 has an invalid length. [ 282.119285][ T9967] syzkaller0: entered promiscuous mode [ 282.125264][ T9967] syzkaller0: entered allmulticast mode [ 283.049582][T10000] netlink: 'syz.0.964': attribute type 10 has an invalid length. [ 283.232456][T10003] tipc: Resetting bearer [ 283.351828][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 283.555333][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 283.985737][T10042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 284.312143][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 284.470364][T10055] syzkaller0: entered promiscuous mode [ 284.482690][T10055] syzkaller0: entered allmulticast mode [ 284.512576][T10067] __nla_validate_parse: 1 callbacks suppressed [ 284.512596][T10067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.978'. [ 285.355100][T10097] tipc: Enabled bearer , priority 0 [ 285.390362][T10100] netlink: 'syz.0.988': attribute type 3 has an invalid length. [ 285.451105][T10100] block nbd0: NBD_DISCONNECT [ 285.474290][T10103] netlink: 52 bytes leftover after parsing attributes in process `syz.4.990'. [ 285.497832][T10097] tipc: Resetting bearer [ 285.539151][T10103] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.548898][T10103] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.589296][T10110] netlink: 'syz.3.989': attribute type 1 has an invalid length. [ 285.616492][T10110] netlink: 'syz.3.989': attribute type 2 has an invalid length. [ 285.637416][T10110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.989'. [ 285.680746][T10097] tipc: Disabling bearer [ 285.780925][T10100] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 285.840185][T10100] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 285.858590][T10100] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 285.899730][T10121] netlink: 164 bytes leftover after parsing attributes in process `syz.2.994'. [ 285.936100][T10100] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 286.089731][T10100] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 286.130899][T10122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.207694][T10131] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.267283][T10134] netlink: 'syz.2.996': attribute type 1 has an invalid length. [ 286.315316][T10134] netlink: 224 bytes leftover after parsing attributes in process `syz.2.996'. [ 286.358236][T10139] netlink: 68 bytes leftover after parsing attributes in process `syz.2.996'. [ 286.390918][T10131] bridge_slave_0 (unregistering): left allmulticast mode [ 286.399920][T10131] bridge_slave_0 (unregistering): left promiscuous mode [ 286.418037][T10131] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.425752][T10142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.999'. [ 286.477996][T10144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'. [ 287.716625][T10191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.425746][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1012'. [ 289.809306][T10236] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 289.914768][T10240] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1018'. [ 290.636847][T10189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.659461][T10219] netlink: 'syz.4.1012': attribute type 1 has an invalid length. [ 290.667663][T10219] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1012'. [ 290.678422][T10219] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 290.928011][T10258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1023'. [ 291.273689][T10271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1028'. [ 291.317598][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1028'. [ 291.355488][T10278] x_tables: duplicate underflow at hook 1 [ 291.369130][T10279] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3897518662/3897518664 [ 291.391623][T10279] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3897518662/3897518664 [ 291.811935][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1034'. [ 291.827680][T10304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1035'. [ 291.882696][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 291.918927][T10297] : renamed from sit0 (while UP) [ 291.932516][T10298] veth0: entered promiscuous mode [ 292.533580][ T5370] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 292.616560][T10325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1043'. [ 292.632778][T10325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1043'. [ 292.664524][T10325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1043'. [ 292.701239][T10325] netlink: 'syz.1.1043': attribute type 6 has an invalid length. [ 292.938283][T10338] ip6gre1: entered promiscuous mode [ 292.960637][T10338] ip6gre1: entered allmulticast mode [ 293.165675][T10349] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 293.294828][T10344] vlan2: entered promiscuous mode [ 293.308284][T10344] veth0: entered promiscuous mode [ 293.331933][T10355] netlink: 'syz.3.1051': attribute type 1 has an invalid length. [ 293.652588][T10357] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 294.373858][T10384] netlink: 'syz.4.1057': attribute type 25 has an invalid length. [ 294.399501][T10384] netlink: 'syz.4.1057': attribute type 3 has an invalid length. [ 294.529142][T10384] tipc: Resetting bearer [ 294.754783][T10384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.769686][T10384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.907381][ T3386] netdevsim netdevsim4 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.930476][ T3386] netdevsim netdevsim4 : unset [1, 1] type 2 family 0 port 20004 - 0 [ 294.951759][ T3386] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.968475][ T3386] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 295.042841][ T3386] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.053798][T10406] netlink: 'syz.4.1062': attribute type 28 has an invalid length. [ 295.074152][ T3386] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 295.075314][T10406] netlink: 'syz.4.1062': attribute type 3 has an invalid length. [ 295.120049][T10406] __nla_validate_parse: 8 callbacks suppressed [ 295.120068][T10406] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1062'. [ 295.153161][ T3386] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.176658][ T3386] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 295.569523][T10427] netlink: 'syz.2.1066': attribute type 2 has an invalid length. [ 295.598991][T10428] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1067'. [ 295.628508][T10428] netlink: 'syz.4.1067': attribute type 1 has an invalid length. [ 295.636738][T10428] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1067'. [ 296.131901][ T29] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 296.370703][T10453] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1071'. [ 296.461659][ T29] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 316.968155][T10478] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1079'. [ 318.515808][T10523] syzkaller1: entered promiscuous mode [ 318.532194][T10523] syzkaller1: entered allmulticast mode [ 318.558397][T10523] netlink: 'syz.3.1089': attribute type 10 has an invalid length. [ 318.588632][T10523] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.616903][T10523] bond0: (slave team0): Enslaving as an active interface with an up link [ 318.636555][T10528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1091'. [ 318.808795][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1091'. [ 318.837874][T10532] netlink: 'syz.4.1092': attribute type 4 has an invalid length. [ 319.026552][T10543] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 319.102529][T10548] Cannot find add_set index 1 as target [ 319.184967][T10547] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1096'. [ 319.536607][T10566] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1099'. [ 319.564344][T10566] netlink: Unknown conntrack attr (0) [ 319.608919][T10566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1099'. [ 319.845015][T10572] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 319.861003][T10572] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 319.879020][T10572] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 319.906204][T10572] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 323.262726][T10595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 323.640925][ T7011] IPVS: starting estimator thread 0... [ 323.650794][T10647] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 323.709242][T10650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1113'. [ 323.772088][T10648] IPVS: using max 25 ests per chain, 60000 per kthread [ 323.783646][T10645] xt_CT: No such helper "snmp" [ 323.978002][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1121'. [ 324.103846][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1124'. [ 324.186023][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1125'. [ 324.415175][T10677] tipc: Resetting bearer [ 324.947766][T10708] netlink: 'syz.0.1130': attribute type 1 has an invalid length. [ 325.019455][T10712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1130'. [ 325.040209][T10693] syzkaller0: entered promiscuous mode [ 325.056200][T10693] syzkaller0: entered allmulticast mode [ 325.492517][T10726] syz_tun: left allmulticast mode [ 325.510509][T10726] syz_tun: left promiscuous mode [ 325.534893][T10726] bridge0: port 3(syz_tun) entered disabled state [ 325.589723][T10726] bridge_slave_0: left allmulticast mode [ 325.612863][T10726] bridge_slave_0: left promiscuous mode [ 325.643165][T10726] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.684060][T10726] bridge_slave_1: left allmulticast mode [ 325.709798][T10726] bridge_slave_1: left promiscuous mode [ 325.738760][T10726] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.836532][T10726] team0: Port device team_slave_0 removed [ 325.876823][T10726] team0: Port device team_slave_1 removed [ 325.906631][T10726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.926864][T10726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.964074][T10726] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 326.039767][T10732] team0: Mode changed to "roundrobin" [ 326.127365][ T5370] syz0: Port: 1 Link DOWN [ 326.983779][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1148'. [ 327.140685][T10789] pim6reg0: tun_chr_ioctl cmd 2147767507 [ 327.163958][T10789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1151'. [ 327.506435][T10810] macsec1: entered promiscuous mode [ 327.868139][T10823] syzkaller0: entered promiscuous mode [ 327.898322][T10823] syzkaller0: entered allmulticast mode [ 328.016166][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1163'. [ 328.048226][T10841] syz_tun: entered allmulticast mode [ 328.077762][T10848] SET target dimension over the limit! [ 328.339563][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'. [ 329.022551][T10891] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1174'. [ 329.321938][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1177'. [ 329.348866][T10901] bridge_slave_0: left allmulticast mode [ 329.364102][T10901] bridge_slave_0: left promiscuous mode [ 329.384366][T10901] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.437242][T10906] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1176'. [ 329.484260][T10901] bridge_slave_1: left allmulticast mode [ 329.499010][T10901] bridge_slave_1: left promiscuous mode [ 329.520425][T10901] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.586224][T10901] bond0: (slave bond_slave_1): Releasing backup interface [ 329.721946][T10928] netlink: 'syz.1.1176': attribute type 3 has an invalid length. [ 329.743367][T10928] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1176'. [ 329.755720][T10901] team0: Port device team_slave_0 removed [ 329.779103][T10901] team0: Port device team_slave_1 removed [ 329.804749][T10901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.828987][T10901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.849993][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1183'. [ 329.864656][T10901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.884051][T10901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.908112][T10901] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 329.952715][T10937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1182'. [ 329.999777][T10929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.016906][T10929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.055893][T10935] hsr_slave_0: left promiscuous mode [ 330.072433][T10935] hsr_slave_1: left promiscuous mode [ 330.284902][T10945] batadv_slave_1: entered promiscuous mode [ 330.602764][T10944] batadv_slave_1: left promiscuous mode [ 347.991843][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 349.140959][T10958] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 349.289722][T10965] netlink: 'syz.4.1192': attribute type 1 has an invalid length. [ 349.321010][T10965] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1192'. [ 349.556580][T10981] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1195'. [ 349.613539][T10981] netlink: 'syz.4.1195': attribute type 178 has an invalid length. [ 349.649766][ T30] audit: type=1107 audit(1780556243.283:3): pid=10985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='^Ak@'R U3dZ#63F'TYEe'5'gޏ)jAmLcgL0x8h'9jwo' [ 350.213386][T11006] netlink: 'syz.1.1201': attribute type 1 has an invalid length. [ 350.563610][T11010] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1203'. [ 350.619498][T11021] netlink: 'syz.1.1202': attribute type 1 has an invalid length. [ 350.708277][T11021] 8021q: adding VLAN 0 to HW filter on device bond5 [ 350.763594][T11008] bond5: (slave veth0_to_bond): making interface the new active one [ 350.777247][T11008] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 350.858384][T11011] bond5: entered promiscuous mode [ 350.866952][T11011] veth0_to_bond: entered promiscuous mode [ 350.880429][T11011] bond5: entered allmulticast mode [ 350.900222][T11011] veth0_to_bond: entered allmulticast mode [ 350.935004][T11015] syzkaller0: entered promiscuous mode [ 350.950320][T11015] syzkaller0: entered allmulticast mode [ 351.014912][T11034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.406408][T11051] tipc: Started in network mode [ 351.429133][T11051] tipc: Node identity ac14140f, cluster identity 4711 [ 351.460029][T11051] tipc: Enabled bearer , priority 26 [ 351.489498][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1213'. [ 351.566423][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1213'. [ 351.662414][T11058] veth0_macvtap: left promiscuous mode [ 352.562244][ T7011] tipc: Node number set to 2886997007 [ 352.656243][T11095] netlink: 'syz.2.1222': attribute type 1 has an invalid length. [ 352.717820][T11095] 8021q: adding VLAN 0 to HW filter on device bond5 [ 352.892832][T11101] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1223'. [ 353.697937][T11126] netlink: 'syz.4.1230': attribute type 1 has an invalid length. [ 353.814417][T11126] 8021q: adding VLAN 0 to HW filter on device bond7 [ 353.966741][T11140] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 354.052254][T11147] sctp: [Deprecated]: syz.2.1234 (pid 11147) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.052254][T11147] Use struct sctp_sack_info instead [ 354.072012][T11145] netlink: 'syz.4.1235': attribute type 83 has an invalid length. [ 354.093981][T11145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1235'. [ 354.200972][T11154] gretap0: entered promiscuous mode [ 354.211815][T11145] can: request_module (can-proto-3) failed. [ 354.224780][T11154] netlink: 'syz.4.1235': attribute type 39 has an invalid length. [ 354.379853][T11159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1238'. [ 354.622578][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 354.734377][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 354.836103][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'. [ 354.920686][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'. [ 355.147721][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1246'. [ 355.169070][T11180] netlink: 'syz.1.1245': attribute type 1 has an invalid length. [ 355.183467][T11182] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1246'. [ 355.190436][T11180] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1245'. [ 355.208905][T11180] netlink: 658 bytes leftover after parsing attributes in process `syz.1.1245'. [ 355.211484][T11182] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1246'. [ 355.219169][T11180] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1245'. [ 355.236701][T11182] netlink: 'syz.3.1246': attribute type 6 has an invalid length. [ 355.254266][T11182] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1246'. [ 355.468833][T11198] netlink: 'syz.3.1246': attribute type 4 has an invalid length. [ 356.190257][T11227] netlink: 'syz.1.1256': attribute type 11 has an invalid length. [ 356.349401][T11236] netlink: 'syz.2.1258': attribute type 12 has an invalid length. [ 356.851398][T11254] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 356.872170][T11254] dvmrp1: linktype set to 804 [ 356.944024][T11259] sctp: [Deprecated]: syz.3.1265 (pid 11259) Use of int in maxseg socket option. [ 356.944024][T11259] Use struct sctp_assoc_value instead [ 356.984546][T11259] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20001 [ 357.083420][T11261] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 357.138280][T11262] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 357.344534][T11268] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 357.367326][T11274] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 357.518595][T11284] netlink: 'syz.2.1272': attribute type 1 has an invalid length. [ 357.669426][T11288] veth1: entered promiscuous mode [ 357.695142][T11288] macsec2: entered promiscuous mode [ 357.714922][T11288] macsec2: entered allmulticast mode [ 357.738866][T11288] veth1: entered allmulticast mode [ 357.765322][T11288] veth1: left allmulticast mode [ 357.779598][T11288] veth1: left promiscuous mode [ 357.880015][T11290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.468214][T11321] netlink: 'syz.1.1280': attribute type 18 has an invalid length. [ 358.816082][T11319] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 358.880443][T11321] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 358.910162][T11331] tc_dump_action: action bad kind [ 359.086450][T11344] pim6reg0: tun_chr_ioctl cmd 2147767507 [ 359.199116][T11349] netlink: 'syz.3.1286': attribute type 1 has an invalid length. [ 359.538871][T11367] netlink: 'syz.0.1288': attribute type 41 has an invalid length. [ 359.598522][T11371] __nla_validate_parse: 15 callbacks suppressed [ 359.598544][T11371] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1293'. [ 359.629954][T11371] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1293'. [ 359.650770][T11371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1293'. [ 359.697245][T11374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1294'. [ 359.732795][T11374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1294'. [ 359.795247][T11371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.099563][T11421] openvswitch: netlink: Message has 12 unknown bytes. [ 361.536224][T11428] netlink: 'syz.3.1307': attribute type 6 has an invalid length. [ 361.557315][T11428] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1307'. [ 361.613532][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'. [ 365.104670][ T29] IPVS: starting estimator thread 0... [ 365.185622][T11448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1311'. [ 365.198184][T11433] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.221932][T11447] IPVS: using max 29 ests per chain, 69600 per kthread [ 365.291311][T11433] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.421081][T11459] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1315'. [ 365.451339][T11459] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1315'. [ 365.467874][T11433] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.631111][T11433] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.653024][T11467] sock: sock_timestamping_bind_phc: sock not bind to device [ 365.752872][T11467] bond8: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 365.776656][T11467] bond8 (unregistering): Released all slaves [ 365.875209][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'. [ 365.906606][T11465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1316'. [ 365.954817][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'. [ 365.982009][T11465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1316'. [ 366.080203][ T227] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.159577][ T227] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.225462][ T1177] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.299009][ T1177] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.394272][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1323'. [ 366.474102][T11497] netlink: 'syz.0.1324': attribute type 1 has an invalid length. [ 366.492929][T11497] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 366.943194][T11510] tipc: Resetting bearer [ 367.073331][T11526] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1330'. [ 367.775025][T11538] netlink: 'syz.0.1332': attribute type 1 has an invalid length. [ 367.834407][T11538] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 368.251139][T11567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1338'. [ 368.451465][T11573] netlink: 'syz.3.1340': attribute type 4 has an invalid length. [ 368.510872][T11577] netlink: 'syz.3.1340': attribute type 4 has an invalid length. [ 368.657296][T11585] syzkaller0: entered promiscuous mode [ 368.670304][T11585] syzkaller0: entered allmulticast mode [ 368.983728][T11593] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 369.006077][T11594] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.020198][T11594] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 369.058270][T11597] tipc: Disabling bearer [ 369.071922][T11597] team0 (unregistering): Port device team_slave_1 removed [ 369.338274][T11614] IPv6: Can't replace route, no match found [ 369.347786][T11614] IPv6: Can't replace route, no match found [ 369.361197][T11608] ip6gretap0: entered promiscuous mode [ 369.370683][T11608] vlan2: entered promiscuous mode [ 369.558827][T11621] netlink: 'syz.2.1352': attribute type 2 has an invalid length. [ 369.942577][T11642] Bluetooth: MGMT ver 1.23 [ 370.580671][T11675] netlink: 'syz.2.1369': attribute type 10 has an invalid length. [ 370.613189][T11675] team_slave_0: left promiscuous mode [ 370.632557][T11675] team_slave_1: left promiscuous mode [ 370.715909][T11675] team0 (unregistering): Port device team_slave_0 removed [ 370.746683][T11675] team0 (unregistering): Port device team_slave_1 removed [ 371.454445][T11704] syzkaller1: entered promiscuous mode [ 371.487582][T11704] syzkaller1: entered allmulticast mode [ 371.695704][T11723] __nla_validate_parse: 4 callbacks suppressed [ 371.695726][T11723] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1380'. [ 371.724717][T11724] netlink: 'syz.3.1381': attribute type 32 has an invalid length. [ 371.968718][T11728] tipc: Enabled bearer , priority 0 [ 372.015696][T11732] syzkaller0: entered promiscuous mode [ 372.025693][T11735] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 372.025693][T11735] Please contact the netfilter-devel mailing list or update your nftables rules. [ 372.053977][T11732] syzkaller0: entered allmulticast mode [ 372.155791][T11728] tipc: Resetting bearer [ 372.173715][T11735] netlink: 'syz.3.1383': attribute type 14 has an invalid length. [ 372.247168][T11727] tipc: Resetting bearer [ 372.650841][T11727] tipc: Disabling bearer [ 372.694567][T11740] syzkaller0: entered promiscuous mode [ 372.701015][T11740] syzkaller0: entered allmulticast mode [ 373.000468][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'. [ 373.055104][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'. [ 373.118019][T11786] tipc: Enabling of bearer rejected, failed to enable media [ 373.613470][T11814] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1400'. [ 374.054532][T11832] netlink: 'syz.4.1403': attribute type 12 has an invalid length. [ 374.071129][T11832] netlink: 'syz.4.1403': attribute type 29 has an invalid length. [ 374.089175][T11832] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1403'. [ 374.120422][T11832] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1403'. [ 374.180485][T11842] batadv_slave_0: entered promiscuous mode [ 374.212200][T11841] batadv_slave_0: left promiscuous mode [ 374.561235][ T30] audit: type=1804 audit(1780556268.193:4): pid=11858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1412" name="/newroot/305/cgroup.controllers" dev="tmpfs" ino=1583 res=1 errno=0 [ 374.661999][ T30] audit: type=1800 audit(1780556268.193:5): pid=11858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1412" name="cgroup.controllers" dev="tmpfs" ino=1583 res=0 errno=0 [ 375.046990][T11870] smbdirect: ib_dev[syz2] removed [ 375.143133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 375.204882][T11883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1416'. [ 375.331982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 375.431254][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1418'. [ 375.584711][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 375.590290][T11898] 8021q: adding VLAN 0 to HW filter on device bond9 [ 375.608824][T11898] bond8: (slave bond9): Enslaving as an active interface with an up link [ 375.813132][T11906] bridge0: port 1(ipvlan0) entered blocking state [ 375.836284][T11906] bridge0: port 1(ipvlan0) entered disabled state [ 375.856127][T11906] ipvlan0: entered allmulticast mode [ 375.872533][T11906] bridge0: entered allmulticast mode [ 375.889439][T11906] ipvlan0: left allmulticast mode [ 375.904930][T11906] bridge0: left allmulticast mode [ 376.145697][T11927] veth0: entered promiscuous mode [ 376.226166][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'. [ 376.631306][T11946] netlink: zone id is out of range [ 376.646074][T11946] netlink: zone id is out of range [ 376.666167][T11946] netlink: zone id is out of range [ 376.705265][T11946] netlink: zone id is out of range [ 376.737578][T11946] netlink: zone id is out of range [ 376.778861][T11946] netlink: zone id is out of range [ 376.795850][T11946] netlink: zone id is out of range [ 376.811212][T11946] netlink: zone id is out of range [ 377.421254][T11987] batman_adv: batadv0: Adding interface: dummy0 [ 377.444192][T11987] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.472760][T11987] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 378.108830][T12010] __nla_validate_parse: 1 callbacks suppressed [ 378.108852][T12010] netlink: 210640 bytes leftover after parsing attributes in process `syz.4.1445'. [ 378.185962][T12014] netlink: 'syz.3.1446': attribute type 13 has an invalid length. [ 378.230961][T12007] bond10: (slave bond_slave_1): Device is not our slave [ 378.252183][T12007] bond10: option active_slave: invalid value (bond_slave_1) [ 378.274433][T12007] bond10 (unregistering): Released all slaves [ 378.356202][T12023] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1449'. [ 378.683551][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 378.724312][ T3386] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.739470][ T3386] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.768282][ T3386] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.788302][ T3386] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.930870][T12034] netlink: 'syz.1.1452': attribute type 7 has an invalid length. [ 378.982291][T12043] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1452'. [ 379.145807][T12044] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1454'. [ 379.195873][T12044] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1454'. [ 380.203056][ C0] net_ratelimit: 340 callbacks suppressed [ 380.203079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 380.262159][T12082] batadv_slave_1: entered promiscuous mode [ 380.560635][T12093] netlink: 'syz.2.1465': attribute type 1 has an invalid length. [ 380.606844][T12094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1465'. [ 380.765775][T12093] bond6: entered promiscuous mode [ 380.782700][T12093] 8021q: adding VLAN 0 to HW filter on device bond6 [ 381.261749][T12119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1473'. [ 381.315725][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1473'. [ 381.620602][T12131] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1476'. [ 381.944513][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 382.714551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 382.924630][T12166] xfrm1: entered allmulticast mode [ 382.949063][T12173] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 382.991417][T12173] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 383.463830][T12202] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 383.594356][T12202] bond6 (unregistering): Released all slaves [ 383.749628][T12213] bond7: Removing last ns target with arp_interval on [ 384.181105][T12250] __nla_validate_parse: 2 callbacks suppressed [ 384.181126][T12250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1499'. [ 384.224064][T12250] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1499'. [ 384.242420][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 384.300921][T12250] gretap0: entered promiscuous mode [ 384.690282][T12262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1505'. [ 384.790378][T12262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1505'. [ 384.804303][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 384.842260][T12262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1505'. [ 384.853430][T12262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1505'. [ 384.871812][T12262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1505'. [ 384.912951][T12262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1505'. [ 384.964764][T12287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1506'. [ 385.533920][T12312] IPVS: length: 124 != 24 [ 385.868687][T12315] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 385.927533][T12315] bond1 (unregistering): Released all slaves [ 386.098161][T12346] netlink: 'syz.0.1519': attribute type 6 has an invalid length. [ 386.125111][T12346] netlink: 'syz.0.1519': attribute type 23 has an invalid length. [ 386.147685][T12346] IPv6: NLM_F_CREATE should be specified when creating new route [ 386.384145][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1520'. [ 386.918583][T12376] netlink: 'syz.4.1522': attribute type 2 has an invalid length. [ 388.853933][T12374] ip6gre0: left promiscuous mode [ 388.895674][T12374] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 389.079151][ T7011] syz0: Port: 1 Link ACTIVE [ 389.260056][T12394] __nla_validate_parse: 7 callbacks suppressed [ 389.260076][T12394] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1527'. [ 389.342650][T12386] syzkaller1: entered promiscuous mode [ 389.360541][T12386] syzkaller1: entered allmulticast mode [ 389.759295][T12406] tipc: Started in network mode [ 389.780333][T12406] tipc: Node identity bac6dd65903d, cluster identity 4711 [ 389.805297][T12406] tipc: Enabled bearer , priority 0 [ 389.905394][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1531'. [ 390.020249][T12408] syzkaller0: entered promiscuous mode [ 390.041675][T12408] syzkaller0: entered allmulticast mode [ 390.055407][T12408] tipc: Resetting bearer [ 390.384378][ T1125] tipc: Resetting bearer [ 390.414229][T12403] tipc: Resetting bearer [ 390.937769][T12449] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1540'. [ 392.605751][T12403] tipc: Disabling bearer [ 392.617396][T12428] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 392.628093][T12428] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 392.639623][T12428] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 392.762722][ T7011] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 392.853033][T12450] tun0: tun_chr_ioctl cmd 1074025681 [ 392.858505][ T5751] tipc: Node number set to 721149285 [ 392.989105][T12459] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1543'. [ 393.207878][T12468] netlink: 'syz.0.1542': attribute type 1 has an invalid length. [ 393.221187][T12468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.238023][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1546'. [ 393.247643][ T5766] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 393.494226][T12480] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1547'. [ 393.524945][T12480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1547'. [ 393.772236][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1550'. [ 393.825351][T12488] syzkaller1: entered promiscuous mode [ 393.848169][T12488] syzkaller1: entered allmulticast mode [ 393.969622][T12494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1552'. [ 393.980240][T12494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1552'. [ 394.718079][T12524] xt_TCPMSS: Only works on TCP SYN packets [ 394.797496][T12529] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1560'. [ 395.260361][T12540] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1563'. [ 395.665702][T12555] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1566'. [ 395.695242][T12555] netlink: 'syz.4.1566': attribute type 1 has an invalid length. [ 395.801191][T12554] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1567'. [ 396.090205][T12573] gre1: entered allmulticast mode [ 396.652372][T12596] tipc: Enabled bearer , priority 0 [ 396.665076][T12596] syzkaller0: entered promiscuous mode [ 396.670735][T12596] syzkaller0: entered allmulticast mode [ 396.690218][T12596] tipc: Resetting bearer [ 396.698059][T12596] tipc: Resetting bearer [ 396.722346][T12596] tipc: Disabling bearer [ 396.833671][T12603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1580'. [ 397.090509][T12616] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1585'. [ 397.142338][T12619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1584'. [ 397.165488][T12621] netlink: 'syz.0.1586': attribute type 1 has an invalid length. [ 397.211910][T12621] 8021q: adding VLAN 0 to HW filter on device bond4 [ 397.220132][T12624] netlink: 'syz.3.1587': attribute type 11 has an invalid length. [ 397.287154][T12619] openvswitch: netlink: IP tunnel dst address not specified [ 397.323808][T12622] bond4: (slave veth1): Enslaving as an active interface with a down link [ 397.326982][T12632] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1588'. [ 397.342541][T12632] netlink: 'syz.2.1588': attribute type 1 has an invalid length. [ 397.350599][T12632] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1588'. [ 397.370089][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1589'. [ 397.390157][T12621] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 397.415152][T12621] bond4: (slave batadv1): making interface the new active one [ 397.435894][T12621] batadv1: entered promiscuous mode [ 397.447654][T12621] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 397.838253][T12652] pim6reg: entered allmulticast mode [ 397.861458][T12655] block nbd0: Unsupported socket: should be TCP or UNIX. [ 399.385812][ T30] audit: type=1804 audit(1780556293.023:6): pid=12697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1610" name="/newroot/350/cgroup.controllers" dev="tmpfs" ino=1816 res=1 errno=0 [ 399.465099][ T30] audit: type=1800 audit(1780556293.023:7): pid=12697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1610" name="cgroup.controllers" dev="tmpfs" ino=1816 res=0 errno=0 [ 399.502949][T12703] netlink: 'syz.0.1612': attribute type 30 has an invalid length. [ 399.513938][ T30] audit: type=1800 audit(1780556293.063:8): pid=12697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1610" name="cgroup.controllers" dev="tmpfs" ino=1816 res=0 errno=0 [ 399.630748][T12703] bond5: option arp_missed_max: invalid value (0) [ 399.651187][T12703] bond5: option arp_missed_max: allowed values 1 - 255 [ 399.666906][T12703] bond5 (unregistering): Released all slaves [ 399.720117][T12712] ip6gretap1: entered promiscuous mode [ 399.846980][T12720] lo speed is unknown, defaulting to 1000 [ 399.853588][T12720] lo speed is unknown, defaulting to 1000 [ 399.867773][T12720] lo speed is unknown, defaulting to 1000 [ 399.878086][T12720] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 399.896511][T12722] tipc: New replicast peer: 255.255.255.255 [ 399.903094][T12713] sctp: [Deprecated]: syz.4.1616 (pid 12713) Use of int in max_burst socket option. [ 399.903094][T12713] Use struct sctp_assoc_value instead [ 399.929736][T12720] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 399.954263][T12722] tipc: Enabled bearer , priority 26 [ 399.960765][T12723] tipc: Enabling of bearer rejected, already enabled [ 399.960825][T12720] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 399.994496][T12720] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 400.006551][T12726] __nla_validate_parse: 4 callbacks suppressed [ 400.006571][T12726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1619'. [ 400.068332][T12720] lo speed is unknown, defaulting to 1000 [ 400.125499][T12720] lo speed is unknown, defaulting to 1000 [ 400.157095][T12720] lo speed is unknown, defaulting to 1000 [ 400.204036][T12720] lo speed is unknown, defaulting to 1000 [ 400.237805][T12720] lo speed is unknown, defaulting to 1000 [ 400.307234][T12737] tipc: Enabled bearer , priority 26 [ 400.500116][T12743] lo: entered promiscuous mode [ 400.851430][T12743] tunl0: entered promiscuous mode [ 400.874838][T12743] gre0: entered promiscuous mode [ 401.144696][T12743] gretap0: entered promiscuous mode [ 401.168977][T12743] erspan0: entered promiscuous mode [ 401.195243][T12743] ip_vti0: entered promiscuous mode [ 401.204301][T12743] ip6_vti0: entered promiscuous mode [ 401.214449][T12743] sit0: entered promiscuous mode [ 401.224501][T12743] ip6tnl0: entered promiscuous mode [ 401.233620][T12743] ip6gre0: entered promiscuous mode [ 401.241350][T12759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1625'. [ 401.255104][T12743] bridge0: port 3(v) entered blocking state [ 401.261245][T12743] bridge0: port 3(v) entered forwarding state [ 401.269744][T12743] ip6gretap0: entered promiscuous mode [ 401.295946][T12743] bridge0: entered promiscuous mode [ 401.302446][T12743] vcan0: entered promiscuous mode [ 401.308424][T12743] bond0: entered promiscuous mode [ 401.314779][T12743] bond_slave_0: entered promiscuous mode [ 401.320664][T12743] bond_slave_1: entered promiscuous mode [ 401.336107][T12743] dummy0: entered promiscuous mode [ 401.342758][T12743] nlmon0: entered promiscuous mode [ 401.351462][T12743] veth1: entered promiscuous mode [ 401.357706][T12743] wg0: entered promiscuous mode [ 401.364132][T12743] wg1: entered promiscuous mode [ 401.370025][T12743] wg2: entered promiscuous mode [ 401.377339][T12743] veth1_to_bridge: entered promiscuous mode [ 401.385197][T12743] veth0_to_bond: entered promiscuous mode [ 401.392829][T12743] veth1_to_bond: entered promiscuous mode [ 401.400060][T12743] veth0_to_team: entered promiscuous mode [ 401.408353][T12743] team_slave_0: entered promiscuous mode [ 401.415953][T12743] veth1_to_team: entered promiscuous mode [ 401.423724][T12743] team_slave_1: entered promiscuous mode [ 401.430996][T12743] veth0_to_batadv: entered promiscuous mode [ 401.442391][T12743] batadv_slave_0: entered promiscuous mode [ 401.451422][T12743] xfrm0: entered promiscuous mode [ 401.458153][T12743] veth0_to_hsr: entered promiscuous mode [ 401.464796][T12743] hsr_slave_0: entered promiscuous mode [ 401.471171][T12743] veth1_to_hsr: entered promiscuous mode [ 401.478585][T12743] hsr_slave_1: entered promiscuous mode [ 401.485429][T12743] veth1_virt_wifi: entered promiscuous mode [ 401.492316][T12743] veth0_virt_wifi: entered promiscuous mode [ 401.499019][T12743] virt_wifi0: entered promiscuous mode [ 401.505728][T12743] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 401.777405][T12769] netlink: 'syz.2.1628': attribute type 1 has an invalid length. [ 401.821968][T12769] dummy0: left promiscuous mode [ 401.838659][T12769] bond8: (slave dummy0): Enslaving as a backup interface with an up link [ 402.035277][T12775] lo speed is unknown, defaulting to 1000 [ 402.261392][T12786] syzkaller1: entered promiscuous mode [ 402.278359][T12786] syzkaller1: entered allmulticast mode [ 402.332190][T12786] syzkaller1: left promiscuous mode [ 402.341756][T12786] syzkaller1: left allmulticast mode [ 402.349289][T12792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1635'. [ 402.362847][T12792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1635'. [ 402.618144][T12799] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1637'. [ 402.906919][T12812] netlink: 'syz.3.1639': attribute type 9 has an invalid length. [ 402.943244][T12812] netlink: 'syz.3.1639': attribute type 6 has an invalid length. [ 402.993237][T12812] netlink: 'syz.3.1639': attribute type 7 has an invalid length. [ 403.075431][T12812] netlink: 'syz.3.1639': attribute type 8 has an invalid length. [ 403.096056][T12821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1641'. [ 403.184400][T12821] ipvlan2: entered allmulticast mode [ 403.189780][T12821] gretap0: entered allmulticast mode [ 403.743514][T12827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1644'. [ 403.807606][T12830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1644'. [ 404.484422][T12851] bond6: entered allmulticast mode [ 404.514625][T12851] 8021q: adding VLAN 0 to HW filter on device bond6 [ 404.717390][T12875] netlink: 'syz.3.1656': attribute type 4 has an invalid length. [ 404.764921][T12875] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1656'. [ 404.817118][T12875] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 405.082445][T12885] block nbd0: server does not support multiple connections per device. [ 405.109691][T12885] block nbd0: shutting down sockets [ 405.157912][T12883] lo speed is unknown, defaulting to 1000 [ 405.256269][T12881] can: request_module (can-proto-5) failed. [ 405.405959][T12897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1662'. [ 405.566102][T12902] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 405.636227][T12909] xfrm1: entered allmulticast mode [ 405.650278][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1665'. [ 406.304421][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1673'. [ 406.317124][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1673'. [ 406.356595][T12910] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 406.370873][T12910] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 406.540043][T12910] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 406.557317][T12910] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 406.602204][T12910] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 406.610130][T12910] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 406.629335][T12944] : renamed from bond_slave_0 (while UP) [ 406.639433][T12910] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 406.646088][T12910] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 406.845751][T12949] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.858298][T12949] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.893452][T12947] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1677'. [ 406.910708][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1677'. [ 407.061264][T12949] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.096843][T12949] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.190387][T12949] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.205056][T12949] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.298757][T12949] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.309171][T12949] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.569453][ T6966] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.583370][ T6966] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.614221][ T6966] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.623387][ T6966] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.751361][ T1107] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.787793][ T1107] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.866968][ T1107] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.877455][ T1107] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.887060][T12970] syzkaller0: entered promiscuous mode [ 407.893153][T12970] syzkaller0: entered allmulticast mode [ 408.126845][T12989] netlink: 'syz.1.1690': attribute type 1 has an invalid length. [ 408.338339][T13003] netlink: 320 bytes leftover after parsing attributes in process `syz.4.1693'. [ 408.386426][T12989] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 408.417285][T13001] bond9: entered allmulticast mode [ 408.487307][T12999] bond0: option miimon: invalid value (18446744072200228527) [ 408.494977][T12999] bond0: option miimon: allowed values 0 - 2147483647 [ 408.511144][T13002] macvlan2: entered promiscuous mode [ 408.523287][T13002] macvlan2: entered allmulticast mode [ 408.530003][T13002] bond9: entered promiscuous mode [ 408.535963][T13002] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 408.549094][T13002] bond9: left promiscuous mode [ 408.914391][ T1133] batadv1: left promiscuous mode [ 409.278091][T13052] xt_TCPMSS: Only works on TCP SYN packets [ 409.299282][T13057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1704'. [ 409.757860][T13070] netlink: 'syz.4.1708': attribute type 1 has an invalid length. [ 409.788382][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 409.812358][T13079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1708'. [ 409.874418][T13070] bond10: entered promiscuous mode [ 409.889781][T13070] 8021q: adding VLAN 0 to HW filter on device bond10 [ 409.917302][T13085] atomic_op ffff888036c77198 conn xmit_atomic 0000000000000000 [ 409.930554][T13087] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 409.969617][T13085] Set syz1 is full, maxelem 0 reached [ 410.681921][T13118] FAULT_INJECTION: forcing a failure. [ 410.681921][T13118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.744573][T13118] CPU: 1 UID: 0 PID: 13118 Comm: syz.4.1720 Not tainted syzkaller #0 PREEMPT(full) [ 410.744605][T13118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 410.744619][T13118] Call Trace: [ 410.744628][T13118] [ 410.744637][T13118] dump_stack_lvl+0xe8/0x150 [ 410.744672][T13118] should_fail_ex+0x412/0x560 [ 410.744703][T13118] _copy_from_user+0x2d/0xb0 [ 410.744730][T13118] do_sock_getsockopt+0x200/0x7e0 [ 410.744770][T13118] ? __pfx_vfs_write+0x10/0x10 [ 410.744802][T13118] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 410.744825][T13118] ? do_sys_openat2+0x14c/0x200 [ 410.744848][T13118] ? kmem_cache_free+0x182/0x650 [ 410.744877][T13118] ? fd_install+0x94/0x3d0 [ 410.744917][T13118] ? ksys_write+0x1fc/0x270 [ 410.744952][T13118] __x64_sys_getsockopt+0x1a4/0x240 [ 410.744982][T13118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.745005][T13118] do_syscall_64+0x174/0x580 [ 410.745030][T13118] ? trace_irq_disable+0x3b/0x140 [ 410.745062][T13118] ? clear_bhb_loop+0x40/0x90 [ 410.745087][T13118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.745113][T13118] RIP: 0033:0x7effe059ce59 [ 410.745134][T13118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.745151][T13118] RSP: 002b:00007effe149f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 410.745174][T13118] RAX: ffffffffffffffda RBX: 00007effe0816090 RCX: 00007effe059ce59 [ 410.745188][T13118] RDX: 0000000000000481 RSI: 0000000000000000 RDI: 0000000000000004 [ 410.745201][T13118] RBP: 00007effe149f090 R08: 0000200000000080 R09: 0000000000000000 [ 410.745214][T13118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.745226][T13118] R13: 00007effe0816128 R14: 00007effe0816090 R15: 00007ffff4bede78 [ 410.745260][T13118] [ 411.156859][T13125] netlink: 'syz.3.1723': attribute type 1 has an invalid length. [ 411.165239][T13125] __nla_validate_parse: 5 callbacks suppressed [ 411.165258][T13125] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1723'. [ 411.916527][T13170] lo speed is unknown, defaulting to 1000 [ 411.957705][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1736'. [ 412.002038][T13173] FAULT_INJECTION: forcing a failure. [ 412.002038][T13173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.101190][T13173] CPU: 0 UID: 0 PID: 13173 Comm: syz.4.1737 Not tainted syzkaller #0 PREEMPT(full) [ 412.101219][T13173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.101232][T13173] Call Trace: [ 412.101240][T13173] [ 412.101249][T13173] dump_stack_lvl+0xe8/0x150 [ 412.101276][T13173] should_fail_ex+0x412/0x560 [ 412.101304][T13173] _copy_from_user+0x2d/0xb0 [ 412.101331][T13173] do_ip_getsockopt+0x292/0x1d40 [ 412.101478][T13173] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 412.101507][T13173] ? aa_file_perm+0x192/0x15e0 [ 412.101544][T13173] ? aa_label_sk_perm+0x532/0x6e0 [ 412.101583][T13173] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 412.101614][T13173] ? _parse_integer_limit+0x1ae/0x1f0 [ 412.101654][T13173] ? __lock_acquire+0x6b5/0x2cf0 [ 412.101690][T13173] ip_getsockopt+0xbb/0x230 [ 412.101720][T13173] ? __pfx_ip_getsockopt+0x10/0x10 [ 412.101743][T13173] ? __might_fault+0xaf/0x130 [ 412.101772][T13173] ? __might_fault+0xaf/0x130 [ 412.101801][T13173] ipv6_getsockopt+0x182/0x2b0 [ 412.101888][T13173] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 412.101923][T13173] ? sctp_getsockopt+0x9b/0xb90 [ 412.102020][T13173] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 412.102058][T13173] do_sock_getsockopt+0x51d/0x7e0 [ 412.102085][T13173] ? __pfx_vfs_write+0x10/0x10 [ 412.102115][T13173] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 412.102138][T13173] ? do_sys_openat2+0x14c/0x200 [ 412.102160][T13173] ? kmem_cache_free+0x182/0x650 [ 412.102187][T13173] ? fd_install+0x94/0x3d0 [ 412.102228][T13173] ? ksys_write+0x1fc/0x270 [ 412.102263][T13173] __x64_sys_getsockopt+0x1a4/0x240 [ 412.102293][T13173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.102316][T13173] do_syscall_64+0x174/0x580 [ 412.102337][T13173] ? trace_irq_disable+0x3b/0x140 [ 412.102368][T13173] ? clear_bhb_loop+0x40/0x90 [ 412.102394][T13173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.102415][T13173] RIP: 0033:0x7effe059ce59 [ 412.102433][T13173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.102451][T13173] RSP: 002b:00007effe149f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 412.102472][T13173] RAX: ffffffffffffffda RBX: 00007effe0816090 RCX: 00007effe059ce59 [ 412.102487][T13173] RDX: 0000000000000481 RSI: 0000000000000000 RDI: 0000000000000004 [ 412.102499][T13173] RBP: 00007effe149f090 R08: 0000200000000080 R09: 0000000000000000 [ 412.102513][T13173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.102533][T13173] R13: 00007effe0816128 R14: 00007effe0816090 R15: 00007ffff4bede78 [ 412.102567][T13173] [ 412.435673][T13168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1736'. [ 412.774670][T13187] lo speed is unknown, defaulting to 1000 [ 412.788799][T13208] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.797206][T13208] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.805934][T13208] bridge0: entered allmulticast mode [ 412.860865][T13208] batadv1: left allmulticast mode [ 412.873607][T13208] batadv1: left promiscuous mode [ 412.883758][T13208] bridge0: port 3(batadv1) entered disabled state [ 412.908179][T13208] bridge_slave_1: left allmulticast mode [ 412.916506][T13208] bridge_slave_1: left promiscuous mode [ 412.925363][T13208] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.937871][T13208] bridge_slave_0: left allmulticast mode [ 412.949227][T13208] bridge_slave_0: left promiscuous mode [ 412.956241][T13208] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.233244][T13215] bridge0: received packet on v with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 413.275550][T13215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.448164][T13228] Bluetooth: MGMT ver 1.23 [ 413.811103][T13241] FAULT_INJECTION: forcing a failure. [ 413.811103][T13241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.865473][T13241] CPU: 0 UID: 0 PID: 13241 Comm: syz.0.1752 Not tainted syzkaller #0 PREEMPT(full) [ 413.865503][T13241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 413.865515][T13241] Call Trace: [ 413.865523][T13241] [ 413.865531][T13241] dump_stack_lvl+0xe8/0x150 [ 413.865561][T13241] should_fail_ex+0x412/0x560 [ 413.865590][T13241] _copy_to_user+0x31/0xb0 [ 413.865619][T13241] simple_read_from_buffer+0xe1/0x170 [ 413.865651][T13241] proc_fail_nth_read+0x1bb/0x230 [ 413.865683][T13241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.865714][T13241] ? rw_verify_area+0x2a6/0x4d0 [ 413.865742][T13241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.865769][T13241] vfs_read+0x20c/0xa70 [ 413.865802][T13241] ? do_sock_getsockopt+0x51d/0x7e0 [ 413.865828][T13241] ? __pfx_vfs_read+0x10/0x10 [ 413.865855][T13241] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 413.865880][T13241] ? do_sys_openat2+0x14c/0x200 [ 413.865903][T13241] ? kmem_cache_free+0x182/0x650 [ 413.865930][T13241] ? fd_install+0x94/0x3d0 [ 413.865968][T13241] ksys_read+0x150/0x270 [ 413.866000][T13241] ? __pfx_ksys_read+0x10/0x10 [ 413.866036][T13241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.866059][T13241] do_syscall_64+0x174/0x580 [ 413.866081][T13241] ? trace_irq_disable+0x3b/0x140 [ 413.866110][T13241] ? clear_bhb_loop+0x40/0x90 [ 413.866135][T13241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.866154][T13241] RIP: 0033:0x7f0fa4f5d68e [ 413.866172][T13241] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 413.866188][T13241] RSP: 002b:00007f0fa5df4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.866210][T13241] RAX: ffffffffffffffda RBX: 00007f0fa5df56c0 RCX: 00007f0fa4f5d68e [ 413.866225][T13241] RDX: 000000000000000f RSI: 00007f0fa5df50a0 RDI: 0000000000000005 [ 413.866238][T13241] RBP: 00007f0fa5df5090 R08: 0000000000000000 R09: 0000000000000000 [ 413.866250][T13241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.866262][T13241] R13: 00007f0fa5216128 R14: 00007f0fa5216090 R15: 00007fffc9472e18 [ 413.866294][T13241] [ 414.298211][T13254] netlink: 'syz.4.1757': attribute type 1 has an invalid length. [ 414.396035][T13254] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1757'. [ 414.429920][T13254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1757'. [ 414.537689][T13260] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 414.627461][T13268] geneve2: entered promiscuous mode [ 414.641329][T13268] geneve2: entered allmulticast mode [ 414.775387][T13272] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1763'. [ 414.864290][T13275] macsec1: entered allmulticast mode [ 414.876486][T13275] ip6gretap0: entered allmulticast mode [ 414.911851][T13275] ip6gretap0: left allmulticast mode [ 414.996552][T13277] lo speed is unknown, defaulting to 1000 [ 415.326862][T13288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.544031][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1769'. [ 415.578426][T13295] netlink: 'syz.3.1769': attribute type 22 has an invalid length. [ 415.596633][T13295] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1769'. [ 416.010821][T13314] netlink: 'syz.3.1774': attribute type 1 has an invalid length. [ 416.040951][T13314] nbd: error processing sock list [ 416.092918][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1775'. [ 416.115676][T13320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1773'. [ 416.900870][T13337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1778'. [ 417.379546][T13354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1784'. [ 417.606738][T13361] netlink: 'syz.3.1783': attribute type 13 has an invalid length. [ 417.675721][T13369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1787'. [ 418.382216][ T5766] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 418.438575][ T7011] lo speed is unknown, defaulting to 1000 [ 418.445270][ T10] lo speed is unknown, defaulting to 1000 [ 419.262696][T13420] tipc: Enabled bearer , priority 0 [ 419.306193][T13421] tipc: Enabling of bearer rejected, already enabled [ 419.343085][T13420] syzkaller0: entered promiscuous mode [ 419.348907][T13420] syzkaller0: entered allmulticast mode [ 419.404459][T13421] tipc: Resetting bearer [ 419.436152][ T7011] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 419.462301][T13421] tipc: Disabling bearer [ 419.550245][T13432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1803'. [ 419.574525][T13433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1803'. [ 420.091994][T13461] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1807'. [ 420.419703][T13471] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1810'. [ 420.512269][T13475] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 420.547158][T13475] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 420.610988][T13485] xt_hl: Unknown Hop Limit match mode: 206 [ 420.615752][T13475] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 420.690203][T13475] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 420.857829][T13492] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1815'. [ 420.871020][T13494] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1817'. [ 420.885767][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'. [ 421.122757][T13510] bridge0: received packet on v with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 421.137415][T13508] netlink: 'syz.4.1820': attribute type 5 has an invalid length. [ 421.217623][T13508] geneve3: entered promiscuous mode [ 421.228534][T13508] geneve3: entered allmulticast mode [ 421.236812][ T57] netdevsim netdevsim4 : set [1, 0] type 2 family 0 port 256 - 0 [ 421.250155][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 421.268810][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 421.290216][ T3386] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 421.843774][T13532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.927026][T13534] netlink: 'syz.3.1827': attribute type 7 has an invalid length. [ 421.948208][T13536] __nla_validate_parse: 5 callbacks suppressed [ 421.948230][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1826'. [ 422.088632][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1828'. [ 422.356410][T13549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1832'. [ 422.379972][T13553] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1833'. [ 422.629481][T13558] netlink: 'syz.2.1834': attribute type 3 has an invalid length. [ 422.890349][T13565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 422.932444][T13565] xt_hashlimit: max too large, truncated to 1048576 [ 422.964756][T13565] xt_ecn: cannot match TCP bits for non-tcp packets [ 423.012248][T13565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1837'. [ 423.417547][T13577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.435723][T13577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.561855][ T57] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.579667][T13575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1837'. [ 423.589776][ T57] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.602164][ T57] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.611243][ T57] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.768217][T13590] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1845'. [ 423.840206][T13593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1845'. [ 424.060794][T13597] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1846'. [ 424.240320][T13610] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 424.255551][T13610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.560186][T13626] netlink: 'syz.3.1858': attribute type 3 has an invalid length. [ 425.029447][T13642] netlink: 'syz.4.1862': attribute type 1 has an invalid length. [ 425.054754][T13642] netlink: 'syz.4.1862': attribute type 2 has an invalid length. [ 425.214977][T13647] 8021q: adding VLAN 0 to HW filter on device bond11 [ 425.226386][T13647] batman_adv: batadv0: Removing interface: dummy0 [ 425.236198][T13647] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 425.282336][T13647] 8021q: adding VLAN 0 to HW filter on device bond11 [ 425.334052][T13647] bond11: (slave lo): Enslaving as an active interface with an up link [ 425.363896][T13647] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 425.563716][T13659] netlink: 'syz.1.1868': attribute type 4 has an invalid length. [ 425.615480][T13662] netlink: 'syz.1.1868': attribute type 4 has an invalid length. [ 425.654832][T13663] netlink: 'syz.0.1867': attribute type 1 has an invalid length. [ 425.685685][T13664] netlink: 'syz.0.1867': attribute type 1 has an invalid length. [ 425.807544][T13676] xt_hashlimit: size too large, truncated to 1048576 [ 426.122456][ T1133] [ 426.124862][ T1133] ============================================ [ 426.131048][ T1133] WARNING: possible recursive locking detected [ 426.137249][ T1133] syzkaller #0 Not tainted [ 426.141692][ T1133] -------------------------------------------- [ 426.147868][ T1133] kworker/u8:11/1133 is trying to acquire lock: [ 426.154128][ T1133] ffff88807dca1158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 426.164161][ T1133] [ 426.164161][ T1133] but task is already holding lock: [ 426.171551][ T1133] ffff88807c241158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 426.181442][ T1133] [ 426.181442][ T1133] other info that might help us debug this: [ 426.189529][ T1133] Possible unsafe locking scenario: [ 426.189529][ T1133] [ 426.197012][ T1133] CPU0 [ 426.200330][ T1133] ---- [ 426.203639][ T1133] lock(&qdisc_xmit_lock_key#3); [ 426.208713][ T1133] lock(&qdisc_xmit_lock_key#3); [ 426.213788][ T1133] [ 426.213788][ T1133] *** DEADLOCK *** [ 426.213788][ T1133] [ 426.221959][ T1133] May be due to missing lock nesting notation [ 426.221959][ T1133] [ 426.230321][ T1133] 10 locks held by kworker/u8:11/1133: [ 426.235807][ T1133] #0: ffff888054e20140 ((wq_completion)bond3#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 426.246959][ T1133] #1: ffffc900054e7c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 426.259884][ T1133] #2: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 426.269775][ T1133] #3: ffffffff8e95cd00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 426.279855][ T1133] #4: ffff888032dc9228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 426.292532][ T1133] #5: ffff88807c241158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 426.302882][ T1133] #6: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 426.311913][ T1133] #7: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 426.321723][ T1133] #8: ffffffff8e95cd00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 426.331728][ T1133] #9: ffff888020ad1228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 426.338847][T13693] netlink: 'syz.4.1873': attribute type 322 has an invalid length. [ 426.344423][ T1133] [ 426.344423][ T1133] stack backtrace: [ 426.344450][ T1133] CPU: 0 UID: 0 PID: 1133 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 426.344479][ T1133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 426.344494][ T1133] Workqueue: bond3 bond_alb_monitor [ 426.344587][ T1133] Call Trace: [ 426.344625][ T1133] [ 426.344661][ T1133] dump_stack_lvl+0xe8/0x150 [ 426.344739][ T1133] print_deadlock_bug+0x279/0x290 [ 426.344816][ T1133] __lock_acquire+0x253f/0x2cf0 [ 426.344874][ T1133] ? fib_table_lookup+0x11ba/0x16e0 [ 426.345096][ T1133] ? sch_direct_xmit+0x15f/0x4c0 [ 426.345180][ T1133] lock_acquire+0x106/0x350 [ 426.345233][ T1133] ? sch_direct_xmit+0x15f/0x4c0 [ 426.345298][ T1133] ? __inet_dev_addr_type+0x424/0x500 [ 426.345411][ T1133] _raw_spin_lock+0x2e/0x40 [ 426.345495][ T1133] ? sch_direct_xmit+0x15f/0x4c0 [ 426.345569][ T1133] sch_direct_xmit+0x15f/0x4c0 [ 426.345648][ T1133] ? __pfx_sch_direct_xmit+0x10/0x10 [ 426.345742][ T1133] __dev_queue_xmit+0x180f/0x3950 [ 426.345825][ T1133] ? __dev_queue_xmit+0x2b6/0x3950 [ 426.345892][ T1133] ? lockdep_hardirqs_on+0x7a/0x110 [ 426.345947][ T1133] ? __pfx___dev_queue_xmit+0x10/0x10 [ 426.346019][ T1133] ? neigh_resolve_output+0x438/0x750 [ 426.346148][ T1133] ? eth_header+0x11b/0x200 [ 426.346210][ T1133] ? __asan_memcpy+0x40/0x70 [ 426.346319][ T1133] ? ip_finish_output2+0x3c2/0x1070 [ 426.346365][ T1133] ip_finish_output2+0xca9/0x1070 [ 426.346411][ T1133] ? ip_skb_dst_mtu+0x80b/0xa50 [ 426.346492][ T1133] ? ip_finish_output+0x40e/0x530 [ 426.346568][ T1133] ip_output+0x29f/0x450 [ 426.346642][ T1133] ? ip_output+0x5b/0x450 [ 426.346716][ T1133] iptunnel_xmit+0x621/0xd10 [ 426.346824][ T1133] ip_tunnel_xmit+0x193a/0x1f20 [ 426.346951][ T1133] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 426.347026][ T1133] ? __pfx_gre_build_header+0x10/0x10 [ 426.347148][ T1133] __gre_xmit+0x19e/0x240 [ 426.347207][ T1133] ? __pfx___gre_xmit+0x10/0x10 [ 426.347289][ T1133] erspan_xmit+0xa41/0x14d0 [ 426.347372][ T1133] ? dev_queue_xmit_nit+0x2d/0xad0 [ 426.347444][ T1133] ? __pfx_erspan_xmit+0x10/0x10 [ 426.347544][ T1133] dev_hard_start_xmit+0x2cd/0x830 [ 426.347631][ T1133] sch_direct_xmit+0x251/0x4c0 [ 426.347711][ T1133] ? __pfx_sch_direct_xmit+0x10/0x10 [ 426.347797][ T1133] ? kthread+0x2e0/0x470 [ 426.347867][ T1133] __dev_queue_xmit+0x180f/0x3950 [ 426.347933][ T1133] ? __dev_queue_xmit+0x2b6/0x3950 [ 426.348010][ T1133] ? __pfx___dev_queue_xmit+0x10/0x10 [ 426.348076][ T1133] ? rcu_is_watching+0x15/0xb0 [ 426.348134][ T1133] ? trace_kmem_cache_alloc+0x29/0xe0 [ 426.348209][ T1133] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 426.348304][ T1133] ? alb_send_lp_vid+0x14e/0x550 [ 426.348369][ T1133] alb_send_lp_vid+0x348/0x550 [ 426.348427][ T1133] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 426.348503][ T1133] alb_send_learning_packets+0x12c/0x300 [ 426.348561][ T1133] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 426.348623][ T1133] ? bond_alb_monitor+0xf8/0x17e0 [ 426.348679][ T1133] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 426.348830][ T1133] bond_alb_monitor+0x3d5/0x17e0 [ 426.348901][ T1133] ? bond_alb_monitor+0xf8/0x17e0 [ 426.348958][ T1133] ? __pfx_bond_alb_monitor+0x10/0x10 [ 426.349014][ T1133] ? process_scheduled_works+0xa70/0x1860 [ 426.349062][ T1133] ? process_scheduled_works+0xa70/0x1860 [ 426.349116][ T1133] process_scheduled_works+0xb5d/0x1860 [ 426.349212][ T1133] ? __pfx_process_scheduled_works+0x10/0x10 [ 426.349270][ T1133] ? assign_work+0x3d5/0x5e0 [ 426.349325][ T1133] worker_thread+0xa53/0xfc0 [ 426.349407][ T1133] kthread+0x389/0x470 [ 426.349466][ T1133] ? __pfx_worker_thread+0x10/0x10 [ 426.349513][ T1133] ? __pfx_kthread+0x10/0x10 [ 426.349579][ T1133] ret_from_fork+0x514/0xb70 [ 426.349637][ T1133] ? __pfx_ret_from_fork+0x10/0x10 [ 426.349704][ T1133] ? __switch_to+0xc79/0x1410 [ 426.349794][ T1133] ? __pfx_kthread+0x10/0x10 [ 426.349854][ T1133] ret_from_fork_asm+0x1a/0x30 [ 426.349943][ T1133] [ 426.787185][T13690] lo speed is unknown, defaulting to 1000