last executing test programs: 4.204980088s ago: executing program 2 (id=1442): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x101, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000", 0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r4, &(0x7f0000001480)=0x2, 0x12) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xce, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00') getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) unshare(0x6a040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002a0001006e657464657673696d0000000f0202006e657464657673696d300000084003000300000044ff09000100"/62], 0x44}, 0x1, 0x0, 0x0, 0x40080b1}, 0x80010) r8 = socket(0xf, 0x5, 0x6c29d945) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x3d, "6ea78428eb98e51d7718089b73633be1f1394dc1e20ccbd525b22234353a53f3f8fb2bbcef15e9a9bb96830076f76ebc440fe30880b069f4d0d3732ed0"}, &(0x7f0000000300)=0x45) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x400461f1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x5, 0x4, 0x0, 0x4000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x69, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff, 0x200}, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000002900), 0x0, 0x4000000) 3.740683979s ago: executing program 0 (id=1446): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_emit_ethernet(0x7a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3486dd6076db4000442f00fe80e800000000000000000000000021ff0200000000000000000000000000010320655800df6249ab025b56ef0086dd0800"], 0x0) 3.694579633s ago: executing program 0 (id=1447): socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200029890000000000000700ffff000000000000", @ANYRES32=r2, @ANYBLOB='\b@\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r5, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000bc0)}}], 0x1, 0x400c011) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004084}, 0x480c4) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}, @TCA_U32_POLICE={0x4}]}}]}, 0x60}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003700)=@newtfilter={0x161c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0xf, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0x15ec, 0x2, [@TCA_ROUTE4_POLICE={0x34, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3c9}]}, @TCA_ROUTE4_POLICE={0x82c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x1, 0x4, 0x8, 0x10, 0x5, 0x4c02, 0x7, 0x6014, 0x7, 0xcac, 0xe, 0x21, 0x5, 0x6, 0x80000001, 0x1000, 0x4, 0x0, 0x0, 0xbd7, 0x6, 0x7, 0x10000, 0x0, 0x1f6, 0x4, 0x2, 0x1, 0x0, 0x5, 0x3ff, 0x40, 0x40, 0xe5, 0x7fffffff, 0xfffffff9, 0x3, 0x81, 0x8f, 0x2, 0x9, 0xfffffff7, 0x7, 0xd61, 0x6, 0x2, 0x7, 0xa09, 0x9, 0x9, 0x7ff, 0x6, 0x6, 0x1, 0xc5, 0x9, 0xffff9a50, 0xfff, 0x8, 0xa83, 0x8000, 0x3, 0x9, 0x9, 0xb, 0x7, 0x6de, 0x1ad, 0xa0, 0xfffffffa, 0x6eb, 0x0, 0x0, 0x8, 0x400, 0xfffffffa, 0x7a, 0x800, 0x4, 0x7, 0x1, 0x4, 0x0, 0xa, 0xffffff1e, 0x5, 0x2400000, 0x8, 0x401, 0x9, 0x7, 0x2, 0x7fff, 0x1ff, 0x2, 0x16a, 0x2216d6a, 0xe, 0xffffffff, 0x8, 0x80000001, 0x8001, 0x9, 0xfff, 0x9, 0xa, 0xb, 0x0, 0x10001, 0x6, 0x2, 0x3, 0x2, 0x84f2, 0x2, 0x6, 0x2, 0x5f, 0x2, 0x0, 0x3, 0xe, 0xdf31, 0x6, 0x200, 0x2, 0xfff, 0x6, 0x9, 0xf, 0x81, 0x47, 0x5, 0x6, 0x1, 0x10, 0x1, 0x9, 0x3, 0xa486, 0x80000001, 0x8001, 0xc0, 0x1, 0x400, 0x7, 0x0, 0xea0f, 0x1, 0x8, 0x10001, 0x8, 0xddda, 0x2, 0x3, 0xe, 0x6, 0x2, 0x2, 0xcb36, 0x4, 0x95, 0xffffffff, 0x77, 0x8, 0x3, 0xb17, 0x52a6, 0x7, 0x1, 0x2, 0x40, 0x80000001, 0x244, 0x1, 0x7, 0x2f, 0x2, 0xfffffffd, 0x2, 0x6, 0xf, 0x100, 0x2, 0x10001, 0x7fffffff, 0xffffffff, 0x94, 0xb046, 0x1ab, 0x6, 0x6, 0x101, 0x1, 0x6, 0x4, 0x58, 0x7f, 0x2d, 0x3, 0x1ff, 0x2, 0x7d57, 0x5, 0x98, 0x9, 0x295b, 0x4, 0x6, 0x800, 0x66, 0x2, 0x3, 0x3ff, 0x200, 0xffffffff, 0xb, 0x8, 0x4, 0x9, 0x2, 0x3ff, 0x1, 0x7, 0x20f, 0x27b, 0x8, 0xae16, 0x4, 0x3, 0x2f0, 0x0, 0x8, 0x6, 0x80, 0x7, 0x80000000, 0x10000, 0x8000, 0x0, 0xa, 0x10001, 0x9, 0x200, 0x8, 0x9, 0x1, 0x10000, 0x3, 0x6, 0x5, 0x3, 0x0, 0x5, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x954, 0x900, 0x400, 0x2, 0xa, 0xfffeffff, 0x5, 0xb1b, 0xb, 0x1000, 0x4, 0x3, 0xb7, 0xfffffff8, 0x1, 0xfffff801, 0x5, 0x2, 0x7fffffff, 0x2, 0x9, 0xa9e, 0x5, 0x0, 0x1, 0x7, 0x80000001, 0x9, 0x0, 0xd, 0x9, 0x5, 0x80, 0x2400, 0x6, 0x3, 0x7, 0xcf, 0x9, 0x1, 0xfffffff8, 0x0, 0x0, 0x8001, 0x1, 0x6, 0x7c1, 0x0, 0x6e8, 0x1, 0x2, 0xc065, 0x1, 0x0, 0x7fff, 0x8000, 0x4a33, 0x8, 0x3, 0x200, 0x10, 0x4, 0xffffffff, 0x6, 0xa5, 0x3b3143, 0x3, 0x200, 0x1, 0x0, 0x1ff, 0x8, 0x1f3, 0x2, 0x7, 0x6329, 0x3, 0x7, 0xfffffff0, 0x5863, 0x5, 0x4, 0x24, 0xfff, 0x2, 0xdb6, 0x9d4, 0x10, 0x2, 0x7, 0x2, 0x8, 0x1c, 0x8b, 0x4, 0x1, 0x0, 0x8, 0x7fff, 0xb04, 0x8000, 0xdbe, 0x2, 0x4, 0x4, 0x6, 0x5, 0xc8, 0x7fffffff, 0x9, 0x1, 0x9, 0xe06, 0x2, 0xfff, 0x5, 0x7, 0x3b, 0x3, 0x8, 0x1, 0x2, 0x9, 0x5dcb, 0x244, 0x9, 0x3, 0x9, 0x1ff, 0x3e9, 0x1, 0x5, 0x1ff, 0xd7b4dceb, 0x4, 0xf, 0x8, 0xb0, 0x8, 0xff, 0x2, 0x4, 0x7f, 0x9, 0x4, 0x147a, 0x28f3, 0x4ae, 0xd1cb, 0x401, 0x1, 0x7, 0x7, 0xffffffe7, 0x4, 0x6, 0x8, 0x0, 0x4, 0x5, 0x4000000, 0x0, 0xfffffff8, 0x3, 0x6, 0x80, 0x4, 0x6, 0x13, 0x10, 0x80000000, 0xfffffffe, 0x101, 0x3, 0x0, 0x200, 0x8, 0x1, 0x5, 0xff, 0x3, 0x9, 0x6, 0x6, 0x9, 0x80000001, 0xd, 0x1ff, 0x8, 0x200, 0x16, 0x0, 0x0, 0x8, 0x9bf, 0x3, 0x52ca, 0x7, 0xb1b, 0x100, 0x9, 0x9, 0x6, 0x2, 0x5, 0x8, 0x800, 0xd, 0x8, 0xfffffff8, 0x8, 0x7, 0x3, 0x3, 0x6, 0xff, 0x4, 0x7, 0x6, 0x1, 0x7, 0x4, 0x7f, 0x7, 0xe, 0xf9, 0x0, 0xe9dd, 0x2b9, 0x4, 0x1, 0x2, 0xb, 0x0, 0x98, 0xdc7, 0x10, 0x7, 0x8, 0xfffffff8, 0x6, 0x0, 0xfdd, 0x8, 0x7fffffff, 0x8001, 0x882, 0x80000000, 0x8, 0x9d, 0x69d3, 0x9, 0x4, 0x1, 0x9]}]}, @TCA_ROUTE4_POLICE={0x82c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3ff, 0x800, 0x1ff, 0x4, 0x60, 0x8, 0x800, 0x85, 0x5e74, 0x8, 0x8, 0x4, 0x2, 0x1, 0x2, 0xda, 0xfffffffc, 0x6, 0x6, 0x0, 0x10001, 0x10000, 0x6, 0x90e3, 0x0, 0xb0e, 0x7fffffff, 0x5, 0x690, 0x4, 0x5, 0x4, 0xfffffffb, 0x1ff, 0x7, 0x9, 0x0, 0x8, 0x8, 0xba000000, 0xef0, 0x6, 0x1, 0x0, 0x5459, 0x2, 0xafcb, 0xe89f, 0x1, 0x0, 0x2, 0x2, 0x4, 0x7f, 0x2, 0x5, 0x8, 0x2, 0x2, 0xff, 0x34a5, 0x1, 0xffffffff, 0x2, 0x0, 0x607c, 0x2, 0x10, 0x8000, 0xbe42, 0x6, 0x1, 0x1f779930, 0x2, 0x7c7f, 0x4, 0x1, 0x2, 0x800, 0x1, 0x80000000, 0xd, 0x6, 0x9, 0x3, 0xb4a, 0x3, 0x3b2b, 0x1, 0x0, 0x47f, 0x5, 0x7, 0x40, 0x71, 0x0, 0xd11, 0x6, 0x40, 0x6, 0x3, 0x81, 0xef44, 0x8, 0x6, 0x1, 0x2, 0x80, 0x5, 0x4, 0x1, 0x0, 0x3, 0x8, 0xfffffe01, 0x9, 0x6, 0x7, 0x8, 0x1, 0x7f, 0x4, 0x3, 0x9, 0x4, 0x1000, 0x1, 0x5, 0x3ff, 0xe, 0x40, 0x5, 0x5683, 0xffffffff, 0x9, 0x5, 0x7, 0x3ff, 0x8, 0x0, 0x6, 0x0, 0x121, 0x9, 0xc1d, 0x8, 0x7428, 0x1, 0xec0, 0x42, 0x5, 0x8, 0xfffffc01, 0x3, 0x0, 0xff8f, 0x9, 0x9ca1, 0x2, 0xffffffff, 0xffffffff, 0x6, 0x5373, 0x1, 0x4d1, 0x4, 0x10001, 0x4, 0x8c000000, 0x1000, 0x8000, 0xffffffff, 0x3, 0x18000000, 0x1, 0x800, 0x46, 0x100, 0x7f, 0x1ff, 0x4, 0x0, 0x6, 0x2, 0xe, 0x2, 0x4, 0xff, 0x8, 0x4, 0x2, 0x6911, 0x6, 0x1, 0xfff, 0xb7e7, 0x7, 0x4, 0xfff, 0x1, 0x0, 0x4, 0x4, 0x8, 0xd0a9, 0x28368, 0xfffffffb, 0x8, 0x5, 0x4, 0x3, 0x3, 0xfffffbff, 0x5, 0x6eb72d81, 0x4, 0x8, 0x5, 0x4, 0x5, 0x2, 0xf3fc, 0x4, 0x0, 0x8, 0x2000, 0xfffffffe, 0x7, 0x3fa2, 0x2, 0x8, 0x1, 0xffffd31d, 0x6cb, 0xfff, 0x1, 0x7, 0x2, 0x18bb, 0x0, 0x6, 0x10000, 0xf5, 0x0, 0x4, 0xb, 0x3, 0x9, 0x0, 0x1, 0x9, 0x3, 0x7fffffff, 0xff, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x10001, 0x8a7, 0x4, 0x80000000, 0xb3ef, 0x8, 0x0, 0x426, 0x3, 0x1ff, 0xc, 0x7, 0x1, 0x9, 0xffffff74, 0x7, 0x5, 0xfffffeff, 0x10000000, 0x0, 0x7ff, 0x8001, 0x1, 0x4, 0x81, 0x1e8, 0xe, 0x401, 0x0, 0x3, 0x4, 0x27, 0x7, 0x6, 0x20000000, 0x6b9, 0xb9, 0x1e, 0x0, 0x5, 0x8, 0xb, 0x2, 0x9, 0x1576, 0x7, 0x4cf, 0x2, 0x2, 0x800, 0x200, 0x4, 0xfffffff7, 0xa3, 0x0, 0x239, 0x1, 0x5, 0x3, 0x8, 0x6, 0x3d2, 0x3, 0x1, 0x7ff, 0x1f, 0x4, 0x9, 0x7, 0x89d, 0xffff8001, 0x3, 0x4, 0x6, 0x8, 0x7, 0x3, 0x41ea, 0x79, 0x9, 0x2, 0x80000001, 0x34e3fd35, 0x50, 0x6, 0x9, 0x1, 0x0, 0x9, 0x2ad2, 0xed3, 0x3, 0xfff, 0x90f8000, 0x1, 0x6, 0xce, 0x7ff, 0x8, 0x24, 0x2, 0xee, 0x20ecef6d, 0x1, 0x5, 0xfffffffa, 0x3, 0x5, 0x4, 0x6, 0x0, 0x6, 0x7ff, 0x401, 0x6, 0x10, 0x29, 0x8000, 0x8, 0x8000, 0x40, 0x1, 0x5, 0x40, 0x4, 0x1126, 0x7, 0x21e, 0x5, 0x3ff, 0x0, 0x4, 0x87c, 0x718, 0x9, 0x7fc00000, 0x7, 0x7, 0x101, 0x40c, 0xf, 0x2, 0x800, 0xfff, 0x7fffffff, 0x5, 0x1, 0x1, 0x8000, 0x68024d77, 0x9, 0x1, 0x0, 0x2, 0x9, 0x81, 0x0, 0x0, 0x800, 0x2, 0x1ff, 0x5, 0x5, 0x3dd2bcf2, 0xc0000000, 0x8, 0x7f, 0x7ff, 0xffff0bd8, 0xfffffffd, 0x2, 0x1000, 0x29, 0x7fffffff, 0x4, 0x8, 0x3ff, 0x2, 0x1, 0x3, 0xfffffffb, 0x3049e820, 0x4, 0x3, 0x1, 0xb1, 0x2, 0x1, 0x4000, 0x45b, 0x40, 0x7, 0x7, 0x4, 0x3, 0x5, 0x4, 0x96fb, 0x62116a83, 0x54d48739, 0x1, 0x7, 0xfffffff1, 0x6, 0x64, 0x6, 0x4, 0xead, 0x7, 0x9, 0x0, 0x6, 0x8, 0x0, 0x72, 0x800, 0x7, 0x6, 0x3, 0x8001, 0xbc4, 0x4, 0x2, 0x9, 0xa, 0x718, 0x7, 0x0, 0x4, 0xfffffffc, 0x2, 0x1, 0x0, 0xfffffff3, 0x4, 0x74d9, 0x8001, 0x7, 0x1ff, 0x8, 0x11f92369, 0x5a, 0x4, 0x8, 0x5, 0xffff, 0x2, 0x101, 0x20000000, 0x9, 0x4000000, 0x1ff, 0x3, 0xc1, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_ROUTE4_ACT={0x554, 0x6, [@m_xt={0x1ac, 0xa, 0x0, 0x0, {{0x7}, {0x11c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0xea, 0x6, {0x80, 'mangle\x00', 0x7, 0x9, "ec547fa86ff55d41d9bf2b61c0b74874fa8dec89c25fd10d2b45120af8a5c1e27508e8285e0d546b0305c9ceaef03f017f3d8499e645c9a260940e72e35f8286a4f64a4aebc6400262fda5144e95b9a1d0330abf3a693a4fc47950fd3ce374217af5d3d97bda835befb060148e75759373883a591f0a92fc47dcfd2b8b97c72fd00bd5d088a1432810b9860db1a548b6491509621817d0ac1da783497ae39423b3284f3835cefee99cddc67381e30638d57fe0ac3a5a89ba24fbc0a9e0def014"}}, @TCA_IPT_INDEX={0x8}]}, {0x69, 0x6, "32b3a0890aec87dd66b698b26fb6862f7e5f987f184eb45362175034566e48a16bde87a1ff6b13a69e58a42cf55c2f86cbcbc093ab8496d05ca28d432ff1943ce5830b69df39be5257997eb2dcfdf6e0895d2ff845983e0ada9fbaf09c16a4a366c125de37"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x70, 0x8, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x1000, 0x2, 0x4, 0x1}, {0x4, 0x3, 0x8, 0x8001}, {0x2, 0x3, 0x0, 0x80000001}]}]}, {0x2a, 0x6, "d7e8d28dde85f46880295deeacfb9fc33345b854f12da2f6627988a9af1994d4e856c68ab21a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0x124, 0x17, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x200, 0x2, 0x7, 0x64c}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x740}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x7, 0x10000006, 0x8, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x681}]}, {0xaf, 0x6, "75d7362334ee96a30fdd9c9ec70300d5cfbb749e649a6911809e1c965c32f11c07f49c031297dec9c1c453cf987e8d2c340b329da27b85c0d4550e6048bcea886081e18171abd309d7aa54fa1d591da3a2795288bc7c769c62228b1a696989fa1f31c727d6231f23f6196980a2188ad501c303cf2327d12f33c4b53eb17f1fb7cb062b8b8ce2eefdf9c5241fe1703f8f2dbfbdc5462ddbd9cfd57b582ca77ef52a4a79dc6e0a428fc1592c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mpls={0x7c, 0x10, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PROTO={0x6, 0x4, 0x805}, @TCA_MPLS_LABEL={0x8, 0x5, 0x611f0}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0xffff, 0x6, 0xeba, 0x9}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0xcc, 0x20, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x100}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x7f, 0x6, "13ffec1d16ad67ad5b70c0acd1dce3d64619a0a250fbe4b287cfa25e0909b377b20a4d7be0ad44b6306bd555165e17a22862634fe9b64c80e25b1a03a2a008a112e5f3aad14e5e85d26c8df91c8030e2288733c72f93cda57a42229beb0082142fb884d7b530527e506472ed7c193d82f0b1b3dbba802db52a2983"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0xc8, 0x7, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}]}, {0x8d, 0x6, "0bc748a179659fdefbe55926997c431ca156c33237443d6dda11f5ac8c1e49d730e422402f3c949f919e6a1eb75982287504d07b62ba78d0f2c8c4d94aa7f00dabfe1c3cbfc646144e3229e72c340accb646d6321fab1471faf5e2ebf50de164422eb444524ce27c70a0c4cc5993cf60c5675813cf84a024d9defe140cee47caaabe97927656f0ecf9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xc}]}}]}, 0x161c}}, 0x24040084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) 2.742259953s ago: executing program 0 (id=1451): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x300, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21ac6, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0x2141}, @IFLA_PROP_LIST={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) (async) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x300, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21ac6, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0x2141}, @IFLA_PROP_LIST={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async) 2.461127759s ago: executing program 0 (id=1453): connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) 2.396944686s ago: executing program 0 (id=1454): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r4, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x400, '\x00', r4, r5, 0x1, 0x0, 0x1}, 0x50) 2.328873073s ago: executing program 3 (id=1455): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000a000128009000100766c616e000000009000028006000100fe0f00000c0002001c00750010000000280004800c000142addfcb2b2c3477000c00010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004800c000100ff010000060000000c000100000000000a00000008000500", @ANYRES32=r1], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 2.24644071s ago: executing program 4 (id=1457): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_emit_ethernet(0x7a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3486dd6076db4000442f00fe80e800000000000000000000000021ff0200000000000000000000000000010320655800df6249ab025b56ef0086dd0800"], 0x0) 2.184789937s ago: executing program 3 (id=1458): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xfff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) listen(r3, 0xfffffffd) r5 = socket$inet(0xa, 0x801, 0x84) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) listen(r5, 0x1) r7 = socket$netlink(0x10, 0x3, 0x4) listen(r2, 0x8200002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8041}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x1) 2.141082842s ago: executing program 0 (id=1459): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r0, &(0x7f0000000fc0)=[{{&(0x7f00000003c0)=@generic, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/207}, {&(0x7f0000000540)=""/162}, {&(0x7f0000000600)=""/77}], 0x0, &(0x7f0000000680)=""/224}, 0x6}, {{&(0x7f0000000780)=@isdn, 0x0, &(0x7f0000000800)=[{&(0x7f0000001240)=""/4096}, {&(0x7f0000000240)=""/64}], 0x0, &(0x7f0000000ac0)=""/174}}, {{&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)=""/224}, {&(0x7f0000000c00)=""/87}, {&(0x7f0000000dc0)=""/209}], 0x0, &(0x7f0000000ec0)=""/195}, 0x81}], 0x101f2043b8267e, 0x10120, 0x0) 2.138943131s ago: executing program 2 (id=1460): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001"], 0x38}}, 0x0) socket$packet(0x11, 0x1, 0x300) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r4, 0x26, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000007180)={'broute\x00', 0x0, 0x0, 0x0, [0x7f, 0x2, 0x9, 0x7fffffff, 0x0, 0x9]}, &(0x7f0000007200)=0x78) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4}, 0x20) 2.112107748s ago: executing program 4 (id=1461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x635a465fcd92b736}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8081) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000500)=0x730) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r10], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.720886485s ago: executing program 1 (id=1462): r0 = socket$inet6_sctp(0xa, 0x2, 0x84) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x4, 0x70bd26, 0x25dfdbfe, {0x1, 0x1}, ["", "", "", "", "", "", ""]}, 0x18}}, 0x94) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x35c, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x17c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xb4, 0x3, "b32877e7a0d1ce00aedc24bb890c97e74f0dd86c6162bfd8387f1f02560f47635ab6ccc5058c5983412425f52f644d192fa62c7ff721906bbdf36311011b71351a39da22c9a10cc28b41f8432eabe23f6f2e48160ec6f97e00913e1c20f40d86cdecbf51740247964bc3b84fb89534e5f84abeb4adce475b6a90503860641b6ff430d7df632ea7232c09a6c7fad8eca89f5c8d261ddeae465393e5fd59c57a12cd1e0c89983641e53178bdd54cf63978"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x19}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff6}, @TIPC_NLA_NODE_ID={0xac, 0x3, "7de39ecfcfdd000d13957125b09e2496f2a28e1874521b9e63af0b4f3c4448042c75a89fa8d88f3224f9b161fa1074ffebbd624387f91fc684fa879e1c98aa68c23bb9f28ad28fc22da7278e982245c4f85023d5e4c52cc3a49d5354795a18bb2579498bde7968f83847282390a48838e83f64c2b57b30bb61fbc0821b2e09d0988f8fe7be1ca0b7e31de79744cb01455a6b533352738ab837ed1a0e19eff68de2ce6f0dd059f450"}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}]}, @TIPC_NLA_BEARER={0x148, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x10000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @local, 0x10000}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffb83}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @remote, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfffffffa, @remote, 0x32c5}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0x35c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000005c0)={'filter\x00', 0x4}, 0x68) sendmsg$nl_netfilter(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xa0410}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xcc, 0xd, 0x2, 0x201, 0x70bd28, 0x25dfdbfc, {0x1, 0x0, 0x4}, [@generic="cd1bcf697978fe7c8b7ceb7e622c1ebe556a00a3cd540f92d8786284a5c84959287b14c12996ff35fe59405eb76f86cd73d754e1b1c07a367d809ae4865a26235cb022187c4804fcfa0a381236b8f5a94a94544b5c87b6c7cb7c84388479a1eab3efcde544eb2d32a4995381d6ff56afb917b8d2a0ef443e6b36ad6827ed79e5444f33ad208b31c6638e555f398465e5e03662079e17966467fdaef728c9e3c25197eb09b3759220a1279b00a1aead8d0fc3ee32323c"]}, 0xcc}, 0x1, 0x0, 0x0, 0x4044}, 0x8000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x80010, r0, 0xea254000) r3 = accept4$vsock_stream(r1, &(0x7f0000000800)={0x28, 0x0, 0xffffd8ee, @host}, 0x10, 0x80800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000840)={'ip6gretap0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x41}, @void, @val={0xc, 0x99, {0x9e, 0x5f}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x40) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x88, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x4800) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x776}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb85}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22008080}, 0x801) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x70, r6, 0x300, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000dc0)={0x1, 'bond0\x00', 0x1}, 0x18) socket$rxrpc(0x21, 0x2, 0xa) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x20028800}, 0x8010) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000f80)={0x0, 0x2c, &(0x7f0000000f40)=[@in6={0xa, 0x4e21, 0x0, @empty, 0x400}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000fc0)=0x10) accept$packet(r1, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001040)=0x14) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, r4, 0x400, 0x298e, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x20000000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001180)={r9, 0x1f0, 0x20}, &(0x7f00000011c0)=0xc) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001240), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r10, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r11, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x24820000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, 0x0, 0x100, 0x3, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 1.720360685s ago: executing program 2 (id=1463): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 1.668930566s ago: executing program 3 (id=1464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000001b705000008000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r2}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000040000100feffffffffdbdf25017c0c00000042800c00018006000600800a00001c00020018001780140001"], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) 1.498676775s ago: executing program 2 (id=1465): socket$inet(0x2, 0x2, 0x1) r0 = socket$inet(0x2, 0x2, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000076c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="4be88fa3027baaaaaaaa2d9200083afffe8000000000000000000000000000aa000000000000000000000000000000018000907800710007"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c060000) unshare(0x24020400) r8 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="fdffffff", @ANYBLOB="04002bbd"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) splice(r8, 0x0, r1, 0x0, 0x16a, 0x1200000000000000) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0xfffffffe) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 1.441713678s ago: executing program 3 (id=1466): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000fcaf5a96785d5500"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x18, 0x12, &(0x7f00000013c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x580d9465, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@ldst={0x0, 0x0, 0x2, 0x1, 0x2, 0x30, 0x8}, @map_idx={0x18, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0xe, 0xff6, &(0x7f0000002cc0)=""/4086, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={&(0x7f0000000000), &(0x7f0000000040)=""/60, &(0x7f00000001c0)="061e7bf8c4751e1a83e7afa32115ee49a75fb59c91b47503bf", &(0x7f00000002c0)="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", 0xfffffffa, r0}, 0x38) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 1.228567694s ago: executing program 1 (id=1467): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf2564010101000000000000000000000000ff020000000000000000000000000001000400004e210002000000a021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000039e80000000000000000200000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000000700000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.227488611s ago: executing program 3 (id=1468): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, @in={0x2, 0x0, @local}, @in6={0xa, 0x4e22, 0xc1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}], 0x4c) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000980)={{0xef06, 0x0, 0x90, 0xb, 0x3}, &(0x7f0000000440)}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000711142000000000085100000020000008500000005009e0295000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x7d, &(0x7f00000004c0)={r5, @in={{0x2, 0x1, @multicast1}}, 0x5, 0x400}, 0x90) recvmmsg(0xffffffffffffffff, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x20}, 0xe) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @private=0xa010101}}}, &(0x7f0000000180)=0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="ec000000100001002d390d00fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8121000000000000140003006e657464657673696d30000000000000b0001680ac00018010000600fa010000060000000900000018000c8014000100930a0000f602000005000000810000000c000700e60000000900000068000c8014000100ffffff7f"], 0xec}}, 0x4000844) 953.089872ms ago: executing program 1 (id=1469): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'nicvf0\x00', {0x7ff}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x3}, {0xffffffffffffffff, 0x5, 0x2}, 0xda, 0xfffffff8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020300020a00000000000000000000000300060000000000020000000000000000000000000000000200010000000000000009077fffffff030005000000000002000000ac1414aa00000000000000003d5a375bbfa842dbc797cd3b1febee7e1de153d54093d5d58f38d810672368433b34ae8f51952e0aef041a179c85b71daa848bfa0ee2196af1ba6638327235d0ed25e9f42b53f69e05f8948943759173563a4dd92f17c8c7de838351da6329438ccfc87979bc4f4eda56af4a7fe647d23f2e170f953b01dc4dc2eeed939b5d05819d035d73"], 0x50}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r3, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}}}, 0x32) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50100000000fdffff7f07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01010100ff"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$alg(r5, &(0x7f0000000e00)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000001c00)=[@op, @iv={0x0, 0x117, 0x2, 0x0, "986b2b5a8e0791317976a90eaa7fceb560f272a7d333c6b234807dc571c280657c452c61b242307ac7ef8c921c42389e82014e37031ff3d7e24948e981a838203744516cfd23f6566d24561c5afcaab89ac5ede33b0cac939502e009f24d3b94ed811823f0643df61c4c49c9d5c93ea5ee51661e699f79006c482d14d84b14f0cbefdac5eccc4efe8a04d2765f2414d5d74560c5a47a1b91930aa4892c94d594a83e3d600415d1d469da81ab67e8cb696c11b9e960343885c4a87fc97587b5091305119825d2752b611426e247bac96557fb"}, @iv={0x0, 0x117, 0x2, 0x0, "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"}, @op={0x0, 0x117, 0x3, 0x1}, @op, @assoc={0x0, 0x117, 0x4, 0x10001}], 0x0, 0x2000c010}, {0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a80)="832d5f0a74aefcbe8c43f476d4dc6be83b2b3ae6776e9d368650fac80510ce755b4554914e9994cc36d24c33dc2cb815831634ef878dd198895782ed9eaabe3988683cd99448ea2bdb68a20ec7c6dcae2b5c5f4607b70e77b198471e7ccde71fe86370c55c43abfecc2ea294c17b46c7afa044dda9f155618475e297a1dcb019185d4e98ec0a957b29745688a7ba1c22db99830e6d1ca585", 0x98}, {&(0x7f0000000b40)="121d1ea84c6c25b12a01df200566931389931a57092351fc572e4dcca9300a535e1cf5d31515636d57969d1094469651420d3f734f343a8c158a2a1c12736b20a5fa0eb1d7d02975450b3549", 0x4c}, {&(0x7f0000000380)="8fc7c7f80c7c448edbb511d664d3305316c7d222b8e2074c9191156ad244d3e472596b9e804ab013ab0ae2b584b8b83bab7fa20bb2a1e977d198fc245633ab572b0f5016aa6f82ad9e3f989332ff668c13b7c4ed674af95a4c0902373435e54fc2cfad2b9487aa39b91304519d67870ec4115143f28c2029c73150b11ec162118e350be8b56154142f9d05a953161e582edca38f6d924189d60d547d4121ec802ac611dfbd27efb16697e0607369f55d6394b259", 0xb4}, {&(0x7f0000000c80)="2fa2569b081d1c18d4f6daeb13de4ec4ba2182c6c3b336d9b0", 0x19}, {&(0x7f0000000cc0)="7a80d98312e2a1c7e0b4299f6aac5b5205db7a94b15bdeeb2c0fabe0bcaab2e1001bbde916e8ffb476c3154db2cfc593c03f6ee3d8df2ad248d501daf88509985a1aa420f51b7c09200d9a9af34a28968a649dfef09776c7b7ce5979accc86787c1ac4fdee484c4211a069b7", 0x6c}], 0x5, &(0x7f0000000dc0), 0x3e, 0x8000}], 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, 0x0, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r8, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) sendmmsg$inet(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) 855.86011ms ago: executing program 4 (id=1470): r0 = socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) socket$vsock_stream(0x28, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x2, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xbd2d}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000000c0)={'geneve0\x00', @random="d7c8fb626cad"}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x9, 0x8, 0x2, 0x200, 0x101, 0x39, 0x10b7, 0xb3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdc04, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffd, 0x7, 0x1000, 0x0, 0x8a, 0x8000, 0xa, 0x9d4, 0x2000000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@ll={0x11, 0x17, r7, 0x1, 0xc, 0x6, @multicast}, 0x80, &(0x7f0000002080)=[{&(0x7f00000004c0)="006aba88bb", 0x5}], 0x1}, 0x0) 700.33058ms ago: executing program 1 (id=1471): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_emit_ethernet(0x7a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3486dd6076db4000442f00fe80e800000000000000000000000021ff0200000000000000000000000000010320655800df6249ab025b56ef0086dd0800"], 0x0) 609.805451ms ago: executing program 1 (id=1472): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240)={0x1, 0x871c}, 0x8) close(0x3) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x40080d4) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0xfffffffffffffe34) r6 = socket(0x1e, 0x4, 0x0) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r3, @ANYRES16=r6], 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r8, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0x22, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) bpf$PROG_LOAD(0x5, 0x0, 0x0) 445.808253ms ago: executing program 4 (id=1473): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0xa0caec611a40320b, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x7b}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r2 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0xe8, 0x110, 0xa, "87f2efddbf705e72a3484fd253da8441ae9e60be8cf889ec84862f030987d4fc25ae6b08d869b8bc51c2b417387404d645adcaeb225dbf9be0ad5973fcfea7fb70b14577d098078dfd8eeb5b1eff562e128895c79631342e0d87c92323a723e710f981a1e048172acc98cacfa8e63a036bbd047e0bce249ac8e04ecf0c4fdf355a17e6cc60b4253a136b453432ea1cf4d5b07e3de6cf0448d8702d2d3eecf7082f3e7802a1ea92d9701b815bf8d59220b92ae9207b9d32e30ba42edfc92999f163db2ba3904c08b86c126100"/214}], 0xe8}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0xa0caec611a40320b, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x7b}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) (async) socket(0x21, 0x2, 0x2) (async) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0xe8, 0x110, 0xa, "87f2efddbf705e72a3484fd253da8441ae9e60be8cf889ec84862f030987d4fc25ae6b08d869b8bc51c2b417387404d645adcaeb225dbf9be0ad5973fcfea7fb70b14577d098078dfd8eeb5b1eff562e128895c79631342e0d87c92323a723e710f981a1e048172acc98cacfa8e63a036bbd047e0bce249ac8e04ecf0c4fdf355a17e6cc60b4253a136b453432ea1cf4d5b07e3de6cf0448d8702d2d3eecf7082f3e7802a1ea92d9701b815bf8d59220b92ae9207b9d32e30ba42edfc92999f163db2ba3904c08b86c126100"/214}], 0xe8}, 0x0) (async) 436.975186ms ago: executing program 2 (id=1474): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r0, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x0) 220.549046ms ago: executing program 3 (id=1475): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r2, 0x84, 0x14, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r3, @ANYRESDEC=r0, @ANYBLOB="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", @ANYRES8=r3], 0x58}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010029bd7000bf90227b9e1b8631ffff9500000300"/34], 0x1c}}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r9) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket(0x2, 0x80805, 0x0) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r12, 0x84, 0xd, &(0x7f0000000480)=@assoc_value={r14, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000300)={r14, 0x9c, &(0x7f0000000240)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x7, @remote, 0x89fb}, @in6={0xa, 0x4e21, 0xfffffffa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, @in6={0xa, 0x4e24, 0x6, @mcast2, 0x3}, @in6={0xa, 0x4e21, 0x3, @mcast2, 0x4}, @in6={0xa, 0x4e20, 0x608, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f0000000380)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x5, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x3, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r17, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001000010028bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a4301000000000014000300776c616e300000000000000000000000b1a6786e3413248a68c6efff4a28cd4916b8e1768804613e4cd3cafa061a31942f16a934b49231c3e29d84ce3f3e9a234abe55141a4770a05a2c206c7da038e3ef28149ad95ce2e3fe258a2cd49dde66e9da530b0250feacb5c3efa2375cafaa5c4384d5e76354592bdf47ba9c2b3bf87090f1e36ef0582d72ca54059eafdaa32565ba35197cc393"], 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 202.457748ms ago: executing program 4 (id=1476): write(0xffffffffffffffff, &(0x7f0000000100)="d5eeb34a9c433f8fc42ca7424aa3fbde439a53f6bbf2a20dc12fefea2c8590bbcfd3ffd50eb1370b8c0928aae7dba3b3a2c7acae8eaccce93b56944d1d509a67b5e85a65cb1cba7441efaeb2742c279139143be595a8cf144863a3bc7025cf1f9617721649b52b9967883236a347b120059cccc6a8a708258bfc0a21a9a0", 0x7e) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x78, r1, 0x1, 0x0, 0xfffffffe, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x40008090}, 0x2048044) 184.889417ms ago: executing program 2 (id=1477): r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000100), &(0x7f0000000100)=""/13, 0x2}, 0x20) recvmmsg(r0, &(0x7f0000001c40)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000001240)=[{&(0x7f0000000080)=""/215, 0xd7}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/133, 0x85}], 0x3, &(0x7f0000001280)=""/172, 0xac}, 0x6}, {{&(0x7f0000001340)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000001500)=[{&(0x7f00000013c0)=""/218, 0xda}, {&(0x7f00000014c0)}], 0x2, &(0x7f0000001540)=""/255, 0xff}, 0x8}, {{&(0x7f0000001640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000016c0)=""/226, 0xe2}, {&(0x7f00000017c0)=""/54, 0x36}, {&(0x7f0000001800)=""/172, 0xac}, {&(0x7f00000018c0)=""/4, 0xfffffffffffffe54}, {&(0x7f0000001900)=""/255, 0xff}, {&(0x7f0000001a00)=""/250, 0xfa}], 0x6, &(0x7f0000001b80)=""/141, 0x9b}}], 0x3, 0x0, 0x0) 124.985688ms ago: executing program 1 (id=1478): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000f8dfe776d0df2a00"/27, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009409010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)="cd441e731f", 0x5}, 0x1, 0x0, 0x0, 0x44040}, 0x40042) 0s ago: executing program 4 (id=1479): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf2564010101000000000000000000000000ff020000000000000000000000000001000400004e210002000000a021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) kernel console output (not intermixed with test programs): netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 90.038633][ T5972] netlink: 'syz.1.45': attribute type 4 has an invalid length. [ 90.062205][ T5972] netlink: 'syz.1.45': attribute type 4 has an invalid length. [ 90.492129][ T5995] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.007970][ T5978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.379781][ T6027] Zero length message leads to an empty skb [ 91.553952][ T6032] __nla_validate_parse: 9 callbacks suppressed [ 91.553969][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 92.019609][ T6045] gre1: entered promiscuous mode [ 92.198226][ T6055] netlink: 'syz.2.70': attribute type 2 has an invalid length. [ 92.227312][ T6055] netlink: 32 bytes leftover after parsing attributes in process `syz.2.70'. [ 92.773658][ T48] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 92.907347][ T6076] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 93.323027][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 93.432837][ T6085] syzkaller1: entered promiscuous mode [ 93.444344][ T6085] syzkaller1: entered allmulticast mode [ 93.511937][ T6068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 93.660728][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'. [ 93.690107][ T6093] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 93.716464][ T6091] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 93.754018][ T6094] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 93.777161][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 93.829549][ T147] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.868002][ T147] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.892167][ T147] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.938200][ T147] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.171483][ T6111] xt_HMARK: spi-set and port-set can't be combined [ 94.185320][ T6115] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 94.209876][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.217655][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.466212][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.94'. [ 94.679744][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.701688][ T6096] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 95.097482][ T6132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.95'. [ 95.106948][ T1158] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.118771][ T1158] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.139556][ T1158] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.195408][ T1158] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.456336][ T6152] netlink: 72 bytes leftover after parsing attributes in process `syz.2.101'. [ 95.500815][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 95.572505][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 96.069438][ T6184] netlink: 'syz.2.113': attribute type 1 has an invalid length. [ 96.603693][ T10] IPVS: starting estimator thread 0... [ 96.613680][ T6208] netlink: 'syz.4.121': attribute type 2 has an invalid length. [ 96.647042][ T6208] netlink: 'syz.4.121': attribute type 2 has an invalid length. [ 96.682927][ T6211] __nla_validate_parse: 1 callbacks suppressed [ 96.682946][ T6211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.121'. [ 96.687177][ T6208] netlink: 'syz.4.121': attribute type 1 has an invalid length. [ 96.721448][ T6210] IPVS: using max 31 ests per chain, 74400 per kthread [ 96.768635][ T6211] bond0: (slave bond_slave_0): Releasing backup interface [ 96.786771][ T6208] netlink: 'syz.4.121': attribute type 2 has an invalid length. [ 96.863028][ T6219] netlink: 'syz.0.125': attribute type 1 has an invalid length. [ 96.929337][ T6211] bond_slave_0: entered promiscuous mode [ 96.938160][ T6223] netlink: 72 bytes leftover after parsing attributes in process `syz.2.123'. [ 96.944433][ T6211] bond_slave_0: entered allmulticast mode [ 96.966462][ T6223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.123'. [ 96.990277][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'. [ 97.006682][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 97.024637][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 97.050899][ T6219] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 97.519512][ T6229] netlink: 'syz.4.126': attribute type 2 has an invalid length. [ 97.538507][ T6229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.126'. [ 97.553919][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 97.555718][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 97.575565][ T6245] netlink: 'syz.1.131': attribute type 21 has an invalid length. [ 97.583869][ T6229] tc_dump_action: action bad kind [ 98.123656][ T6278] netlink: 72 bytes leftover after parsing attributes in process `syz.1.139'. [ 98.370495][ T6287] netlink: 'syz.2.142': attribute type 1 has an invalid length. [ 98.753681][ T6306] sctp: [Deprecated]: syz.0.148 (pid 6306) Use of int in max_burst socket option. [ 98.753681][ T6306] Use struct sctp_assoc_value instead [ 98.807619][ T6299] IPVS: stopping backup sync thread 5974 ... [ 99.137119][ T6327] vlan5: entered promiscuous mode [ 99.150687][ T6327] bridge0: entered promiscuous mode [ 99.198296][ T6329] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 99.549305][ T6351] openvswitch: netlink: Flow key attr not present in new flow. [ 99.700532][ T6355] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 99.716355][ T1074] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.737396][ T1074] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.757740][ T1074] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.785139][ T1074] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.088495][ T6370] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 101.397955][ T6415] netlink: 'syz.3.189': attribute type 1 has an invalid length. [ 101.565256][ T6415] bond1: entered promiscuous mode [ 101.587686][ T6415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.707783][ T6415] bond1: (slave bridge1): making interface the new active one [ 101.743794][ T6415] bridge1: entered promiscuous mode [ 101.767015][ T6415] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 102.183803][ T6437] netlink: 'syz.1.198': attribute type 1 has an invalid length. [ 102.530548][ T6449] __nla_validate_parse: 20 callbacks suppressed [ 102.530566][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 102.574327][ T6451] netlink: 'syz.3.204': attribute type 1 has an invalid length. [ 102.722962][ T6451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.789363][ T6430] dvmrp0: entered allmulticast mode [ 102.893982][ T6459] FAULT_INJECTION: forcing a failure. [ 102.893982][ T6459] name failslab, interval 1, probability 0, space 0, times 0 [ 102.915005][ T1074] dvmrp0: left allmulticast mode [ 102.920833][ T6459] CPU: 0 UID: 0 PID: 6459 Comm: syz.1.206 Not tainted syzkaller #0 PREEMPT(full) [ 102.920853][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 102.920870][ T6459] Call Trace: [ 102.920877][ T6459] [ 102.920887][ T6459] dump_stack_lvl+0xe8/0x150 [ 102.920921][ T6459] should_fail_ex+0x40c/0x560 [ 102.920952][ T6459] should_failslab+0xa8/0x100 [ 102.920979][ T6459] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 102.921003][ T6459] ? __alloc_skb+0x189/0x7a0 [ 102.921026][ T6459] ? __alloc_skb+0x1d7/0x7a0 [ 102.921048][ T6459] ? __local_bh_enable_ip+0xd0/0x130 [ 102.921078][ T6459] __alloc_skb+0x1d7/0x7a0 [ 102.921107][ T6459] netlink_ack+0x136/0xb30 [ 102.921124][ T6459] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 102.921150][ T6459] ? __lock_acquire+0x683/0x2cd0 [ 102.921180][ T6459] netlink_rcv_skb+0x2a4/0x4a0 [ 102.921200][ T6459] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 102.921227][ T6459] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.921257][ T6459] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.921275][ T6459] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.921299][ T6459] netlink_unicast+0x7bb/0x940 [ 102.921334][ T6459] netlink_sendmsg+0x813/0xb40 [ 102.921362][ T6459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.921384][ T6459] ? aa_sock_msg_perm+0xf1/0x1b0 [ 102.921410][ T6459] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 102.921430][ T6459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.921451][ T6459] ____sys_sendmsg+0x9b9/0xa20 [ 102.921469][ T6459] ? __might_fault+0xaf/0x130 [ 102.921496][ T6459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.921522][ T6459] ? import_iovec+0x73/0xa0 [ 102.921545][ T6459] ___sys_sendmsg+0x2a5/0x360 [ 102.921562][ T6459] ? __lock_acquire+0x683/0x2cd0 [ 102.921584][ T6459] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.921635][ T6459] ? __fget_files+0x2a/0x420 [ 102.921655][ T6459] ? __fget_files+0x3a2/0x420 [ 102.921688][ T6459] __x64_sys_sendmsg+0x1bd/0x2a0 [ 102.921709][ T6459] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 102.921738][ T6459] ? __pfx_ksys_write+0x10/0x10 [ 102.921770][ T6459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.921789][ T6459] do_syscall_64+0x174/0x580 [ 102.921805][ T6459] ? trace_irq_disable+0x3b/0x140 [ 102.921829][ T6459] ? clear_bhb_loop+0x40/0x90 [ 102.921851][ T6459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.921868][ T6459] RIP: 0033:0x7f961759ce59 [ 102.921890][ T6459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.921904][ T6459] RSP: 002b:00007f9618443028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.921923][ T6459] RAX: ffffffffffffffda RBX: 00007f9617815fa0 RCX: 00007f961759ce59 [ 102.921935][ T6459] RDX: 0000000004000080 RSI: 0000200000000300 RDI: 000000000000000a [ 102.921946][ T6459] RBP: 00007f9618443090 R08: 0000000000000000 R09: 0000000000000000 [ 102.921957][ T6459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.921967][ T6459] R13: 00007f9617816038 R14: 00007f9617815fa0 R15: 00007fff5a5c9358 [ 102.921995][ T6459] [ 103.566388][ T6476] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 103.684083][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 104.157783][ T6509] netlink: 260 bytes leftover after parsing attributes in process `syz.2.225'. [ 104.596734][ T6537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.232'. [ 104.631097][ T6532] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 104.655832][ T48] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.667206][ T48] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.689363][ T6538] veth1_to_bond: entered allmulticast mode [ 104.717259][ T48] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.729318][ T48] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.731222][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 104.749353][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 104.784850][ T6537] veth1_to_bond (unregistering): left allmulticast mode [ 104.814135][ T6537] bond0: (slave bond_slave_1): Releasing backup interface [ 104.940488][ T6548] netlink: 60 bytes leftover after parsing attributes in process `syz.1.236'. [ 104.988167][ T6548] netlink: 35 bytes leftover after parsing attributes in process `syz.1.236'. [ 105.009963][ T6547] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 105.241329][ T6568] netlink: 84 bytes leftover after parsing attributes in process `syz.1.244'. [ 105.259119][ T6569] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 105.456849][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'. [ 105.495196][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.503430][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.527606][ T6578] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 105.553202][ T6578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.027629][ T6598] netlink: 'syz.1.250': attribute type 89 has an invalid length. [ 106.046349][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.053519][ T6584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.061039][ T6584] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.068207][ T6584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.910897][ T6613] __nla_validate_parse: 2 callbacks suppressed [ 107.910916][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 107.941169][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 108.110984][ T6626] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 108.975485][ T6593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.286169][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 109.326781][ T6665] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 109.362744][ T6665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 109.453543][ T6670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.270'. [ 109.517950][ T6676] syz.1.272: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 109.536054][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 109.545787][ T6679] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 109.546407][ T6676] CPU: 1 UID: 0 PID: 6676 Comm: syz.1.272 Not tainted syzkaller #0 PREEMPT(full) [ 109.546429][ T6676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 109.546441][ T6676] Call Trace: [ 109.546448][ T6676] [ 109.546456][ T6676] dump_stack_lvl+0xe8/0x150 [ 109.546491][ T6676] warn_alloc+0x249/0x340 [ 109.546521][ T6676] ? lockdep_hardirqs_on+0x7a/0x110 [ 109.546543][ T6676] ? __pfx_warn_alloc+0x10/0x10 [ 109.546575][ T6676] ? __kasan_kmalloc+0x93/0xb0 [ 109.546600][ T6676] ? __kmalloc_cache_noprof+0x318/0x660 [ 109.546623][ T6676] ? xskq_create+0x56/0x170 [ 109.546648][ T6676] ? xsk_init_queue+0x8a/0xe0 [ 109.546670][ T6676] ? xsk_setsockopt+0x52a/0x960 [ 109.546692][ T6676] ? do_sock_setsockopt+0x17c/0x1b0 [ 109.546711][ T6676] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 109.546728][ T6676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.546752][ T6676] __vmalloc_node_range_noprof+0x12c/0x1730 [ 109.546806][ T6676] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 109.546838][ T6676] ? __kasan_kmalloc+0x93/0xb0 [ 109.546871][ T6676] vmalloc_user_noprof+0xad/0xe0 [ 109.546897][ T6676] ? xskq_create+0xbf/0x170 [ 109.546924][ T6676] xskq_create+0xbf/0x170 [ 109.546952][ T6676] xsk_init_queue+0x8a/0xe0 [ 109.546981][ T6676] xsk_setsockopt+0x52a/0x960 [ 109.547004][ T6676] ? __fget_files+0x2a/0x420 [ 109.547028][ T6676] ? __pfx_xsk_setsockopt+0x10/0x10 [ 109.547052][ T6676] ? __pfx_aa_sk_perm+0x10/0x10 [ 109.547082][ T6676] ? aa_sock_opt_perm+0xff/0x1a0 [ 109.547111][ T6676] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 109.547136][ T6676] ? __pfx_xsk_setsockopt+0x10/0x10 [ 109.547161][ T6676] do_sock_setsockopt+0x17c/0x1b0 [ 109.547184][ T6676] __x64_sys_setsockopt+0x13d/0x1b0 [ 109.547205][ T6676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.547225][ T6676] do_syscall_64+0x174/0x580 [ 109.547242][ T6676] ? trace_irq_disable+0x3b/0x140 [ 109.547269][ T6676] ? clear_bhb_loop+0x40/0x90 [ 109.547292][ T6676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.547311][ T6676] RIP: 0033:0x7f961759ce59 [ 109.547330][ T6676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.547345][ T6676] RSP: 002b:00007f9618443028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.547365][ T6676] RAX: ffffffffffffffda RBX: 00007f9617815fa0 RCX: 00007f961759ce59 [ 109.547379][ T6676] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 109.547391][ T6676] RBP: 00007f9617632d6f R08: 0000000000000004 R09: 0000000000000000 [ 109.547402][ T6676] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.547414][ T6676] R13: 00007f9617816038 R14: 00007f9617815fa0 R15: 00007fff5a5c9358 [ 109.547445][ T6676] [ 109.547476][ T6676] Mem-Info: [ 109.966889][ T6689] netlink: 128 bytes leftover after parsing attributes in process `syz.2.274'. [ 109.987523][ T6676] active_anon:5943 inactive_anon:7 isolated_anon:0 [ 109.987523][ T6676] active_file:2907 inactive_file:40261 isolated_file:0 [ 109.987523][ T6676] unevictable:768 dirty:64 writeback:0 [ 109.987523][ T6676] slab_reclaimable:10263 slab_unreclaimable:96284 [ 109.987523][ T6676] mapped:30661 shmem:1290 pagetables:1378 [ 109.987523][ T6676] sec_pagetables:0 bounce:0 [ 109.987523][ T6676] kernel_misc_reclaimable:0 [ 109.987523][ T6676] free:1334550 free_pcp:10656 free_cma:0 [ 110.076457][ T6676] Node 0 active_anon:23772kB inactive_anon:28kB active_file:11628kB inactive_file:160848kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122544kB dirty:256kB writeback:0kB shmem:3624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12292kB pagetables:5360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 110.113728][ T6694] netlink: 48 bytes leftover after parsing attributes in process `syz.4.275'. [ 110.125544][ T6676] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 110.162028][ T6676] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 110.192959][ T6676] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 110.199591][ T6676] Node 0 DMA32 free:1378904kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23672kB inactive_anon:28kB active_file:11628kB inactive_file:160848kB unevictable:1536kB writepending:256kB zspages:0kB present:3129332kB managed:2552980kB mlocked:0kB bounce:0kB free_pcp:42836kB local_pcp:21096kB free_cma:0kB [ 110.253122][ T6692] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 110.280673][ T6676] lowmem_reserve[]: 0 0 0 0 0 [ 110.290766][ T6692] bond1 (unregistering): Released all slaves [ 110.296965][ T6676] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:684kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 110.329424][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 110.342513][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 110.371586][ T6676] lowmem_reserve[]: 0 0 0 0 0 [ 110.381479][ T6676] Node 1 Normal free:3943936kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 110.465520][ T6676] lowmem_reserve[]: 0 0 0 0 0 [ 110.481631][ T6676] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 110.510360][ T6676] Node 0 DMA32: 3444*4kB (UME) 1401*8kB (UME) 740*16kB (UME) 369*32kB (UM) 513*64kB (UME) 398*128kB (UM) 290*256kB (UME) 161*512kB (UME) 92*1024kB (UM) 28*2048kB (UE) 229*4096kB (UM) = 1378616kB [ 110.550218][ T6676] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 110.579196][ T6676] Node 1 Normal: 0*4kB 6*8kB (UM) 5*16kB (UM) 6*32kB (UM) 9*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3943936kB [ 110.598601][ T6676] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 110.610798][ T6676] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 110.621359][ T6676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 110.633595][ T6676] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 110.643890][ T6676] 44454 total pagecache pages [ 110.659660][ T6676] 0 pages in swap cache [ 110.667273][ T6676] Free swap = 124996kB [ 110.673742][ T6676] Total swap = 124996kB [ 110.686279][ T6676] 2097051 pages RAM [ 110.692477][ T6676] 0 pages HighMem/MovableOnly [ 110.707307][ T6676] 427020 pages reserved [ 110.721257][ T6676] 0 pages cma reserved [ 111.057286][ T6732] IPVS: Error connecting to the multicast addr [ 111.725866][ T6758] syz_tun: entered allmulticast mode [ 111.820390][ T10] IPVS: starting estimator thread 0... [ 111.830298][ T6762] syz_tun: left allmulticast mode [ 111.841119][ T6764] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 111.881158][ T6768] netlink: 'syz.1.294': attribute type 1 has an invalid length. [ 111.934320][ T6766] IPVS: using max 33 ests per chain, 79200 per kthread [ 111.940386][ T6768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.057166][ T6768] bond1: (slave geneve2): making interface the new active one [ 112.070726][ T6768] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 112.081276][ T1074] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.112101][ T1074] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.121975][ T1074] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.132161][ T1074] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.299134][ T6785] xt_hashlimit: size too large, truncated to 1048576 [ 112.472968][ T6798] netlink: 'syz.4.304': attribute type 7 has an invalid length. [ 113.036565][ T6822] __nla_validate_parse: 11 callbacks suppressed [ 113.036585][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.310'. [ 113.114105][ T6824] netlink: 'syz.2.311': attribute type 1 has an invalid length. [ 113.236251][ T6831] netlink: 'syz.3.312': attribute type 1 has an invalid length. [ 113.256063][ T6824] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.382666][ T6837] TCP: TCP_TX_DELAY enabled [ 113.406778][ T6831] 8021q: adding VLAN 0 to HW filter on device bond3 [ 113.863400][ T6844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.924040][ T6861] sctp: [Deprecated]: syz.0.320 (pid 6861) Use of int in max_burst socket option. [ 113.924040][ T6861] Use struct sctp_assoc_value instead [ 114.251917][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.327'. [ 114.271985][ T6879] bond0: entered promiscuous mode [ 114.286572][ T6879] bond_slave_1: entered promiscuous mode [ 114.302514][ T6879] vxlan0: entered promiscuous mode [ 114.318219][ T6879] batadv_slave_0: entered promiscuous mode [ 114.326716][ T6879] batadv_slave_0: left promiscuous mode [ 114.332842][ T6879] bond0: left promiscuous mode [ 114.338169][ T6879] bond_slave_1: left promiscuous mode [ 114.343826][ T6879] vxlan0: left promiscuous mode [ 114.443911][ T6844] syz.3.316 (6844) used greatest stack depth: 17248 bytes left [ 114.582743][ T6887] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 114.896103][ T6903] syzkaller0: entered promiscuous mode [ 114.918782][ T6903] syzkaller0: entered allmulticast mode [ 114.935265][ T6903] batman_adv: batadv0: Interface activated: syzkaller0 [ 114.964091][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 115.267130][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.343'. [ 115.284868][ T6929] netlink: 44 bytes leftover after parsing attributes in process `syz.2.343'. [ 115.339214][ T6929] netlink: 44 bytes leftover after parsing attributes in process `syz.2.343'. [ 115.363802][ T6936] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.380761][ T6937] netlink: 'syz.0.344': attribute type 3 has an invalid length. [ 115.417352][ T6936] netlink: 'syz.0.344': attribute type 3 has an invalid length. [ 115.451048][ T6939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.344'. [ 115.451656][ T6936] netlink: 'syz.0.344': attribute type 28 has an invalid length. [ 115.473294][ T6937] netlink: 'syz.0.344': attribute type 28 has an invalid length. [ 115.482318][ T6937] netlink: 'syz.0.344': attribute type 4 has an invalid length. [ 115.491896][ T6936] netlink: 'syz.0.344': attribute type 4 has an invalid length. [ 115.552215][ T6943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.658458][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 115.778415][ T6953] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 116.060663][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.354'. [ 116.075871][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 116.283788][ T6991] : renamed from veth0_to_bond (while UP) [ 116.691045][ T7005] syzkaller1: entered promiscuous mode [ 116.699059][ T7005] syzkaller1: entered allmulticast mode [ 117.420240][ T7040] vlan4: entered allmulticast mode [ 117.444597][ T7040] bond0: entered allmulticast mode [ 117.454327][ T7040] bond_slave_0: entered allmulticast mode [ 117.480677][ T7040] bond_slave_1: entered allmulticast mode [ 117.500141][ T7040] vxlan0: entered allmulticast mode [ 117.588214][ T7041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.636279][ T7041] bond_slave_0: left allmulticast mode [ 117.657254][ T7041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.673528][ T7056] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 117.699032][ T7041] bond_slave_1: left allmulticast mode [ 117.722955][ T7041] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 117.750694][ T7041] vxlan0: left allmulticast mode [ 117.759052][ T7063] FAULT_INJECTION: forcing a failure. [ 117.759052][ T7063] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.774078][ T7041] bond0 (unregistering): Released all slaves [ 117.787475][ T7063] CPU: 1 UID: 0 PID: 7063 Comm: syz.3.386 Not tainted syzkaller #0 PREEMPT(full) [ 117.787500][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 117.787509][ T7063] Call Trace: [ 117.787516][ T7063] [ 117.787523][ T7063] dump_stack_lvl+0xe8/0x150 [ 117.787555][ T7063] should_fail_ex+0x40c/0x560 [ 117.787585][ T7063] _copy_from_user+0x2d/0xb0 [ 117.787608][ T7063] ___sys_sendmsg+0x1c6/0x360 [ 117.787627][ T7063] ? __lock_acquire+0x683/0x2cd0 [ 117.787650][ T7063] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.787701][ T7063] ? __fget_files+0x2a/0x420 [ 117.787721][ T7063] ? __fget_files+0x3a2/0x420 [ 117.787751][ T7063] __x64_sys_sendmsg+0x1bd/0x2a0 [ 117.787772][ T7063] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.787799][ T7063] ? __pfx_ksys_write+0x10/0x10 [ 117.787832][ T7063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.787859][ T7063] do_syscall_64+0x174/0x580 [ 117.787875][ T7063] ? trace_irq_disable+0x3b/0x140 [ 117.787899][ T7063] ? clear_bhb_loop+0x40/0x90 [ 117.787920][ T7063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.787937][ T7063] RIP: 0033:0x7fbbc959ce59 [ 117.787958][ T7063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.787972][ T7063] RSP: 002b:00007fbbca4ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.787993][ T7063] RAX: ffffffffffffffda RBX: 00007fbbc9815fa0 RCX: 00007fbbc959ce59 [ 117.788006][ T7063] RDX: 0000000000004010 RSI: 0000200000000180 RDI: 0000000000000003 [ 117.788017][ T7063] RBP: 00007fbbca4ee090 R08: 0000000000000000 R09: 0000000000000000 [ 117.788027][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.788037][ T7063] R13: 00007fbbc9816038 R14: 00007fbbc9815fa0 R15: 00007ffc623729b8 [ 117.788061][ T7063] [ 118.001321][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.010862][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.019880][ T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.029175][ T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.159096][ T7069] __nla_validate_parse: 7 callbacks suppressed [ 118.159113][ T7069] netlink: 16 bytes leftover after parsing attributes in process `syz.4.389'. [ 118.225251][ T7078] openvswitch: netlink: Duplicate key (type 21). [ 118.297489][ T7069] ipvlan1: entered promiscuous mode [ 118.321365][ T7069] ipvlan1: left promiscuous mode [ 118.503112][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'. [ 118.513214][ T7093] netlink: 72 bytes leftover after parsing attributes in process `syz.3.398'. [ 118.513249][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.398'. [ 118.513262][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.398'. [ 118.548162][ T7094] hsr0: entered promiscuous mode [ 118.744794][ T7094] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 118.829968][ T7105] xt_hashlimit: size too large, truncated to 1048576 [ 119.242546][ T7124] validate_nla: 6 callbacks suppressed [ 119.242562][ T7124] netlink: 'syz.1.407': attribute type 1 has an invalid length. [ 119.369303][ T7131] netlink: 72 bytes leftover after parsing attributes in process `syz.3.409'. [ 119.417023][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.409'. [ 119.457420][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 119.507099][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 119.594668][ T7138] tipc: Started in network mode [ 119.605885][ T7138] tipc: Node identity 2662543a8e5, cluster identity 4711 [ 119.619566][ T7138] tipc: Enabled bearer , priority 0 [ 119.640724][ T7138] syzkaller0: entered promiscuous mode [ 119.664058][ T7138] syzkaller0: entered allmulticast mode [ 119.680517][ T7138] netlink: 68 bytes leftover after parsing attributes in process `syz.4.412'. [ 119.697386][ T7138] tipc: Resetting bearer [ 119.733381][ T7138] tipc: Resetting bearer [ 119.776504][ T7138] tipc: Disabling bearer [ 120.912173][ T7196] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 132.665601][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 177.676553][ T7245] __nla_validate_parse: 9 callbacks suppressed [ 177.676572][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'. [ 177.815805][ T7253] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 178.006899][ T7260] netlink: 72 bytes leftover after parsing attributes in process `syz.1.451'. [ 178.027956][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.451'. [ 178.047625][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 178.605847][ T7279] veth1_to_bond: entered allmulticast mode [ 178.704072][ T7285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.458'. [ 178.729036][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.456'. [ 178.817377][ T7279] syzkaller0: entered promiscuous mode [ 178.822978][ T7279] syzkaller0: entered allmulticast mode [ 178.849830][ T7281] veth1_to_bond (unregistering): left allmulticast mode [ 178.873580][ T7281] bond0: (slave bond_slave_1): Releasing backup interface [ 179.170282][ T7305] netlink: 72 bytes leftover after parsing attributes in process `syz.0.465'. [ 179.170901][ T7307] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 179.193011][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.465'. [ 179.216932][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 179.227458][ T7308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.466'. [ 180.630504][ T7325] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 180.655692][ T5747] syzkaller1: tun_net_xmit 90 [ 180.667965][ T7325] syzkaller1: Linktype set failed because interface is up [ 180.704534][ T7324] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 180.727047][ T79] syzkaller1: tun_net_xmit 86 [ 180.804563][ T7336] xt_TPROXY: Can be used only with -p tcp or -p udp [ 181.748537][ T7390] batadv_slave_1: entered promiscuous mode [ 181.815242][ T7404] xt_hashlimit: max too large, truncated to 1048576 [ 181.822463][ T7404] xt_ecn: cannot match TCP bits for non-tcp packets [ 181.906751][ T7388] batadv_slave_1: left promiscuous mode [ 181.957426][ T7408] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 181.997568][ T7408] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 182.011228][ T7408] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 182.323038][ T7432] syzkaller0: entered promiscuous mode [ 182.338709][ T7432] syzkaller0: entered allmulticast mode [ 182.360906][ T7432] tipc: Started in network mode [ 182.379730][ T7432] tipc: Node identity aad679e59a44, cluster identity 4711 [ 182.427823][ T7432] tipc: Enabled bearer , priority 0 [ 182.539480][ T7432] tipc: Resetting bearer [ 182.597541][ T7432] tipc: Disabling bearer [ 182.648953][ T7450] syzkaller1: entered promiscuous mode [ 182.672710][ T7450] syzkaller1: entered allmulticast mode [ 182.903493][ T7465] netlink: 'syz.1.511': attribute type 1 has an invalid length. [ 182.911556][ T7465] __nla_validate_parse: 7 callbacks suppressed [ 182.911571][ T7465] netlink: 936 bytes leftover after parsing attributes in process `syz.1.511'. [ 182.956908][ T7465] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.970909][ T7465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.053362][ T7475] netlink: 'syz.1.511': attribute type 2 has an invalid length. [ 183.084628][ T7465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.089965][ T7478] xt_bpf: check failed: parse error [ 183.101083][ T7465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.110192][ T7479] netlink: 'syz.4.514': attribute type 1 has an invalid length. [ 183.149249][ T7465] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.161545][ T7465] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.180168][ T7465] veth1_vlan: left promiscuous mode [ 183.189617][ T7465] veth0_vlan: left promiscuous mode [ 183.196629][ T7465] veth0_vlan: entered promiscuous mode [ 183.209543][ T7465] veth1_vlan: entered promiscuous mode [ 183.220873][ T7465] veth1_macvtap: left promiscuous mode [ 183.229559][ T7465] veth0_macvtap: left promiscuous mode [ 183.237030][ T7465] veth0_macvtap: entered promiscuous mode [ 183.245701][ T7465] veth1_macvtap: entered promiscuous mode [ 183.260590][ T7465] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 183.273018][ T7465] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 183.282423][ T7465] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 183.291765][ T7465] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 183.323076][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.514'. [ 183.402615][ T7465] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.415585][ T7465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.496628][ T7469] bond4: entered allmulticast mode [ 183.504180][ T7469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.522685][ T3367] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.529839][ T3367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.542432][ T3367] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.549743][ T3367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.571728][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059ec4000: rx timeout, send abort [ 183.634233][ T7474] netlink: 44 bytes leftover after parsing attributes in process `syz.4.514'. [ 183.730042][ T7501] netlink: 16 bytes leftover after parsing attributes in process `syz.1.519'. [ 183.870701][ T7482] tipc: Enabling of bearer rejected, failed to enable media [ 184.058406][ T48] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.071053][ T48] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.072295][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059ec5800: rx timeout, send abort [ 184.088233][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059ec4000: abort rx timeout. Force session deactivation [ 184.222096][ T7501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.519'. [ 184.237741][ T48] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.248974][ T48] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.286169][ T7521] gre1: entered allmulticast mode [ 184.477661][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 184.502224][ T7533] netlink: 72 bytes leftover after parsing attributes in process `syz.2.527'. [ 184.518818][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 184.588191][ C1] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888059ec5800: abort rx timeout. Force session deactivation [ 184.686712][ T7542] sch_fq: defrate 8 ignored. [ 185.003017][ T7564] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 185.035768][ T7564] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 185.120772][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.540'. [ 185.205163][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.539'. [ 185.209343][ T7562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.612285][ T7583] netlink: 'syz.0.542': attribute type 21 has an invalid length. [ 185.779128][ T7592] hsr0: left promiscuous mode [ 185.829621][ T7592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 186.483360][ T7623] syzkaller0: entered promiscuous mode [ 186.496645][ T7623] syzkaller0: entered allmulticast mode [ 186.598134][ T7629] netlink: 'syz.1.558': attribute type 1 has an invalid length. [ 186.724155][ T7632] netlink: 'syz.1.558': attribute type 1 has an invalid length. [ 186.761612][ T7632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.768476][ T7629] 8021q: adding VLAN 0 to HW filter on device bond5 [ 186.842877][ T7631] bond5: (slave veth3): Enslaving as an active interface with a down link [ 186.914132][ T7636] 5nè: entered promiscuous mode [ 187.231607][ T7643] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 187.522955][ T7643] bond4 (unregistering): Released all slaves [ 187.703353][ T7672] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 187.895628][ T7679] bond0: (slave vlan4): Enslaving as an active interface with an up link [ 187.931622][ T7683] __nla_validate_parse: 4 callbacks suppressed [ 187.931656][ T7683] netlink: 72 bytes leftover after parsing attributes in process `syz.2.572'. [ 187.936816][ T10] dummy0: entered promiscuous mode [ 187.951570][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 187.994539][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 188.360700][ T7702] netlink: 'syz.0.580': attribute type 30 has an invalid length. [ 188.370801][ T7702] netlink: 16 bytes leftover after parsing attributes in process `syz.0.580'. [ 188.380887][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 188.422757][ T7702] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 188.446833][ T7702] bond1 (unregistering): Released all slaves [ 188.729054][ T7718] sctp: [Deprecated]: syz.1.583 (pid 7718) Use of int in max_burst socket option. [ 188.729054][ T7718] Use struct sctp_assoc_value instead [ 189.107214][ T7729] netlink: 72 bytes leftover after parsing attributes in process `syz.0.588'. [ 189.118896][ T7729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.588'. [ 189.130933][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.588'. [ 189.676282][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 189.913096][ T7756] netlink: 'syz.1.598': attribute type 1 has an invalid length. [ 190.035913][ T7766] FAULT_INJECTION: forcing a failure. [ 190.035913][ T7766] name failslab, interval 1, probability 0, space 0, times 0 [ 190.050728][ T7766] CPU: 0 UID: 0 PID: 7766 Comm: syz.3.601 Not tainted syzkaller #0 PREEMPT(full) [ 190.050752][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 190.050762][ T7766] Call Trace: [ 190.050768][ T7766] [ 190.050776][ T7766] dump_stack_lvl+0xe8/0x150 [ 190.050802][ T7766] should_fail_ex+0x40c/0x560 [ 190.050837][ T7766] should_failslab+0xa8/0x100 [ 190.050864][ T7766] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 190.050888][ T7766] ? __alloc_skb+0x189/0x7a0 [ 190.050913][ T7766] ? __alloc_skb+0x1d7/0x7a0 [ 190.050935][ T7766] ? __local_bh_enable_ip+0xd0/0x130 [ 190.050957][ T7766] __alloc_skb+0x1d7/0x7a0 [ 190.050985][ T7766] netlink_sendmsg+0x5d4/0xb40 [ 190.051013][ T7766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.051035][ T7766] ? aa_sock_msg_perm+0xf1/0x1b0 [ 190.051061][ T7766] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.051082][ T7766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.051102][ T7766] ____sys_sendmsg+0x9b9/0xa20 [ 190.051121][ T7766] ? __might_fault+0xaf/0x130 [ 190.051155][ T7766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.051182][ T7766] ? import_iovec+0x73/0xa0 [ 190.051205][ T7766] ___sys_sendmsg+0x2a5/0x360 [ 190.051222][ T7766] ? __lock_acquire+0x683/0x2cd0 [ 190.051243][ T7766] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.051293][ T7766] ? __fget_files+0x2a/0x420 [ 190.051313][ T7766] ? __fget_files+0x3a2/0x420 [ 190.051342][ T7766] __x64_sys_sendmsg+0x1bd/0x2a0 [ 190.051361][ T7766] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.051387][ T7766] ? __pfx_ksys_write+0x10/0x10 [ 190.051418][ T7766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.051436][ T7766] do_syscall_64+0x174/0x580 [ 190.051452][ T7766] ? trace_irq_disable+0x3b/0x140 [ 190.051477][ T7766] ? clear_bhb_loop+0x40/0x90 [ 190.051497][ T7766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.051514][ T7766] RIP: 0033:0x7fbbc959ce59 [ 190.051530][ T7766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.051543][ T7766] RSP: 002b:00007fbbca4ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.051562][ T7766] RAX: ffffffffffffffda RBX: 00007fbbc9815fa0 RCX: 00007fbbc959ce59 [ 190.051575][ T7766] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000013 [ 190.051585][ T7766] RBP: 00007fbbca4ee090 R08: 0000000000000000 R09: 0000000000000000 [ 190.051596][ T7766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.051606][ T7766] R13: 00007fbbc9816038 R14: 00007fbbc9815fa0 R15: 00007ffc623729b8 [ 190.051632][ T7766] [ 190.349537][ T7756] 8021q: adding VLAN 0 to HW filter on device bond6 [ 190.467012][ T7763] bond6: (slave veth5): Enslaving as an active interface with a down link [ 190.576577][ T7767] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 190.583700][ T7767] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 190.642420][ T7774] netlink: 28 bytes leftover after parsing attributes in process `syz.4.603'. [ 190.680942][ T7779] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 190.699196][ T7779] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 191.186212][ T7800] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 191.217137][ T7800] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 191.410353][ T7807] netlink: 'syz.1.614': attribute type 1 has an invalid length. [ 191.534954][ T7807] 8021q: adding VLAN 0 to HW filter on device bond7 [ 191.937235][ T7838] netlink: 'syz.4.623': attribute type 1 has an invalid length. [ 192.199375][ T7852] netlink: 'syz.2.624': attribute type 3 has an invalid length. [ 192.242190][ T7838] bond2: entered promiscuous mode [ 192.248636][ T7838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.990609][ T7870] __nla_validate_parse: 11 callbacks suppressed [ 192.990629][ T7870] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.630'. [ 193.038711][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.629'. [ 193.052869][ T7875] netlink: 20 bytes leftover after parsing attributes in process `syz.3.632'. [ 193.090208][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.629'. [ 193.098226][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 193.571207][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.638'. [ 193.671490][ T7892] netlink: 64 bytes leftover after parsing attributes in process `syz.2.640'. [ 194.109944][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.353583][ T7923] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.647'. [ 194.695076][ T7942] netlink: 'syz.3.652': attribute type 2 has an invalid length. [ 197.084335][ T7910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.095292][ T7934] netlink: 'syz.2.649': attribute type 1 has an invalid length. [ 197.429417][ T7959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.657'. [ 197.473785][ T7960] netlink: 64 bytes leftover after parsing attributes in process `syz.0.658'. [ 197.586131][ T7959] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.659959][ T7973] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 197.673557][ T7964] bond4: (slave veth3): Enslaving as an active interface with an up link [ 198.516975][ T7998] __nla_validate_parse: 2 callbacks suppressed [ 198.516994][ T7998] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.668'. [ 198.710711][ T7998] netlink: 'syz.4.668': attribute type 1 has an invalid length. [ 199.168943][ T7998] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.303733][ T8025] FAULT_INJECTION: forcing a failure. [ 199.303733][ T8025] name failslab, interval 1, probability 0, space 0, times 0 [ 199.348127][ T8025] CPU: 0 UID: 0 PID: 8025 Comm: syz.0.674 Not tainted syzkaller #0 PREEMPT(full) [ 199.348153][ T8025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 199.348163][ T8025] Call Trace: [ 199.348170][ T8025] [ 199.348178][ T8025] dump_stack_lvl+0xe8/0x150 [ 199.348208][ T8025] should_fail_ex+0x40c/0x560 [ 199.348239][ T8025] should_failslab+0xa8/0x100 [ 199.348267][ T8025] __kmalloc_cache_node_noprof+0x8c/0x690 [ 199.348290][ T8025] ? irqentry_exit+0x218/0x8e0 [ 199.348308][ T8025] ? __get_vm_area_node+0x136/0x300 [ 199.348335][ T8025] __get_vm_area_node+0x136/0x300 [ 199.348360][ T8025] __vmalloc_node_range_noprof+0x358/0x1730 [ 199.348384][ T8025] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 199.348435][ T8025] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 199.348458][ T8025] ? __lock_acquire+0x683/0x2cd0 [ 199.348486][ T8025] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 199.348509][ T8025] __vmalloc_noprof+0xd2/0x120 [ 199.348531][ T8025] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 199.348559][ T8025] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 199.348583][ T8025] ? bpf_prog_alloc+0x2a/0x1a0 [ 199.348610][ T8025] bpf_prog_alloc+0x3c/0x1a0 [ 199.348637][ T8025] bpf_prog_load+0x788/0x1a10 [ 199.348669][ T8025] ? get_pid_task+0x20/0x1f0 [ 199.348695][ T8025] ? __pfx_bpf_prog_load+0x10/0x10 [ 199.348721][ T8025] ? __might_fault+0xaf/0x130 [ 199.348757][ T8025] ? bpf_lsm_bpf+0x9/0x20 [ 199.348772][ T8025] ? security_bpf+0x7e/0x2d0 [ 199.348797][ T8025] __sys_bpf+0x618/0x950 [ 199.348823][ T8025] ? __pfx___sys_bpf+0x10/0x10 [ 199.348862][ T8025] ? ksys_write+0x242/0x270 [ 199.348895][ T8025] ? __pfx_ksys_write+0x10/0x10 [ 199.348916][ T8025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.348939][ T8025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.348958][ T8025] __x64_sys_bpf+0x7c/0x90 [ 199.348981][ T8025] do_syscall_64+0x174/0x580 [ 199.348997][ T8025] ? trace_irq_disable+0x3b/0x140 [ 199.349021][ T8025] ? clear_bhb_loop+0x40/0x90 [ 199.349042][ T8025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.349060][ T8025] RIP: 0033:0x7fc53419ce59 [ 199.349077][ T8025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.349091][ T8025] RSP: 002b:00007fc534f7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.349110][ T8025] RAX: ffffffffffffffda RBX: 00007fc534415fa0 RCX: 00007fc53419ce59 [ 199.349123][ T8025] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 199.349134][ T8025] RBP: 00007fc534f7a090 R08: 0000000000000000 R09: 0000000000000000 [ 199.349144][ T8025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.349154][ T8025] R13: 00007fc534416038 R14: 00007fc534415fa0 R15: 00007ffdedc215b8 [ 199.349183][ T8025] [ 199.349201][ T8025] syz.0.674: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 199.746612][ T8025] CPU: 1 UID: 0 PID: 8025 Comm: syz.0.674 Not tainted syzkaller #0 PREEMPT(full) [ 199.746638][ T8025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 199.746648][ T8025] Call Trace: [ 199.746654][ T8025] [ 199.746661][ T8025] dump_stack_lvl+0xe8/0x150 [ 199.746685][ T8025] warn_alloc+0x249/0x340 [ 199.746714][ T8025] ? __pfx_warn_alloc+0x10/0x10 [ 199.746736][ T8025] ? irqentry_exit+0x218/0x8e0 [ 199.746754][ T8025] ? __get_vm_area_node+0x136/0x300 [ 199.746779][ T8025] ? __get_vm_area_node+0x2af/0x300 [ 199.746804][ T8025] __vmalloc_node_range_noprof+0x37d/0x1730 [ 199.746851][ T8025] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 199.746872][ T8025] ? __lock_acquire+0x683/0x2cd0 [ 199.746898][ T8025] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 199.746923][ T8025] __vmalloc_noprof+0xd2/0x120 [ 199.746944][ T8025] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 199.746971][ T8025] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 199.746995][ T8025] ? bpf_prog_alloc+0x2a/0x1a0 [ 199.747022][ T8025] bpf_prog_alloc+0x3c/0x1a0 [ 199.747048][ T8025] bpf_prog_load+0x788/0x1a10 [ 199.747079][ T8025] ? get_pid_task+0x20/0x1f0 [ 199.747105][ T8025] ? __pfx_bpf_prog_load+0x10/0x10 [ 199.747130][ T8025] ? __might_fault+0xaf/0x130 [ 199.747182][ T8025] ? bpf_lsm_bpf+0x9/0x20 [ 199.747197][ T8025] ? security_bpf+0x7e/0x2d0 [ 199.747222][ T8025] __sys_bpf+0x618/0x950 [ 199.747248][ T8025] ? __pfx___sys_bpf+0x10/0x10 [ 199.747285][ T8025] ? ksys_write+0x242/0x270 [ 199.747308][ T8025] ? __pfx_ksys_write+0x10/0x10 [ 199.747328][ T8025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.747350][ T8025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.747365][ T8025] __x64_sys_bpf+0x7c/0x90 [ 199.747386][ T8025] do_syscall_64+0x174/0x580 [ 199.747401][ T8025] ? trace_irq_disable+0x3b/0x140 [ 199.747425][ T8025] ? clear_bhb_loop+0x40/0x90 [ 199.747446][ T8025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.747462][ T8025] RIP: 0033:0x7fc53419ce59 [ 199.747488][ T8025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.747499][ T8025] RSP: 002b:00007fc534f7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.747518][ T8025] RAX: ffffffffffffffda RBX: 00007fc534415fa0 RCX: 00007fc53419ce59 [ 199.747530][ T8025] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 199.747541][ T8025] RBP: 00007fc534f7a090 R08: 0000000000000000 R09: 0000000000000000 [ 199.747551][ T8025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.747561][ T8025] R13: 00007fc534416038 R14: 00007fc534415fa0 R15: 00007ffdedc215b8 [ 199.747589][ T8025] [ 199.747703][ T8025] Mem-Info: [ 200.116115][ T8025] active_anon:5971 inactive_anon:7 isolated_anon:0 [ 200.116115][ T8025] active_file:2972 inactive_file:40300 isolated_file:0 [ 200.116115][ T8025] unevictable:768 dirty:385 writeback:0 [ 200.116115][ T8025] slab_reclaimable:10229 slab_unreclaimable:100380 [ 200.116115][ T8025] mapped:32688 shmem:1314 pagetables:1411 [ 200.116115][ T8025] sec_pagetables:0 bounce:0 [ 200.116115][ T8025] kernel_misc_reclaimable:0 [ 200.116115][ T8025] free:1328056 free_pcp:9539 free_cma:0 [ 200.255210][ T8025] Node 0 active_anon:23784kB inactive_anon:28kB active_file:11888kB inactive_file:161004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134752kB dirty:1540kB writeback:0kB shmem:3720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12736kB pagetables:5492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 200.358976][ T8025] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 200.506598][ T8025] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.584952][ T8025] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 200.606259][ T8025] Node 0 DMA32 free:1352544kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23484kB inactive_anon:28kB active_file:11888kB inactive_file:161004kB unevictable:1536kB writepending:1540kB zspages:0kB present:3129332kB managed:2552980kB mlocked:0kB bounce:0kB free_pcp:38060kB local_pcp:17664kB free_cma:0kB [ 200.620923][ T8048] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.678'. [ 200.682574][ T8025] lowmem_reserve[]: 0 0 0 0 0 [ 200.692631][ T8050] netlink: 'syz.4.679': attribute type 21 has an invalid length. [ 200.708628][ T8050] netlink: 132 bytes leftover after parsing attributes in process `syz.4.679'. [ 200.736708][ T8025] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:684kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.739519][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.4.679'. [ 200.778799][ T8053] netlink: 32 bytes leftover after parsing attributes in process `syz.4.679'. [ 200.819264][ T8025] lowmem_reserve[]: 0 0 0 0 0 [ 200.824092][ T8025] Node 1 Normal free:3943932kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.906530][ T8025] lowmem_reserve[]: 0 0 0 0 0 [ 200.933851][ T8025] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 200.958776][ T8050] geneve2: entered promiscuous mode [ 200.982136][ T8025] Node 0 DMA32: 1045*4kB (UME) 2227*8kB (UM) 1253*16kB (UM) 416*32kB (UME) 357*64kB (UME) 292*128kB (UME) 265*256kB (UME) 173*512kB (UME) 97*1024kB (UM) 27*2048kB (UME) 226*4096kB (UM) = 1352316kB [ 201.049913][ T8025] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 201.084795][ T8025] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 5*16kB (UM) 6*32kB (UM) 9*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3943932kB [ 201.147751][ T8025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.200987][ T8025] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.247683][ T8025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.292887][ T8025] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.310412][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 201.317457][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 201.323507][ T5639] Bluetooth: hci0: command 0x0406 tx timeout [ 201.339037][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 201.367396][ T8025] 44632 total pagecache pages [ 201.378424][ T8025] 0 pages in swap cache [ 201.403958][ T8065] syz_tun: entered allmulticast mode [ 201.422016][ T8025] Free swap = 124996kB [ 201.455819][ T8025] Total swap = 124996kB [ 201.485355][ T8025] 2097051 pages RAM [ 201.489239][ T8025] 0 pages HighMem/MovableOnly [ 201.494049][ T8025] 427020 pages reserved [ 201.498859][ T8025] 0 pages cma reserved [ 201.527580][ T8065] dvmrp8: entered allmulticast mode [ 201.612487][ T8063] syz_tun: left allmulticast mode [ 201.779920][ T8078] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 201.875334][ T8080] netlink: 72 bytes leftover after parsing attributes in process `syz.2.687'. [ 201.922728][ T8080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.687'. [ 201.975394][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'. [ 202.076374][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 202.202646][ T147] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.256076][ T147] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.302663][ T147] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.342129][ T147] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.351482][ T30] audit: type=1800 audit(1781693242.608:2): pid=8090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.689" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=756 res=0 errno=0 [ 202.442605][ T8098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.692'. [ 203.172514][ T8129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.198417][ T8128] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 203.777533][ T8143] netlink: 'syz.3.706': attribute type 1 has an invalid length. [ 203.804471][ T8143] __nla_validate_parse: 3 callbacks suppressed [ 203.804504][ T8143] netlink: 244 bytes leftover after parsing attributes in process `syz.3.706'. [ 204.009798][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 204.032649][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.709'. [ 204.055925][ T8155] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 204.073551][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'. [ 204.088188][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 204.105385][ T8155] netlink: 'syz.2.711': attribute type 18 has an invalid length. [ 204.329356][ T8159] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 204.339212][ T9] team_slave_0: entered promiscuous mode [ 204.346258][ T9] team_slave_1: entered promiscuous mode [ 204.445483][ T8159] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 204.587881][ T8173] syzkaller1: entered promiscuous mode [ 204.606685][ T8173] syzkaller1: entered allmulticast mode [ 207.179338][ T8163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.537571][ T8217] netlink: 72 bytes leftover after parsing attributes in process `syz.2.728'. [ 207.560185][ T8203] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.571819][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.728'. [ 207.592071][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'. [ 207.648831][ T8223] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.729'. [ 208.076133][ T8230] netlink: 'syz.3.732': attribute type 21 has an invalid length. [ 208.076273][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 208.098381][ T8230] netlink: 'syz.3.732': attribute type 4 has an invalid length. [ 208.605283][ T8243] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 209.283506][ T8270] __nla_validate_parse: 2 callbacks suppressed [ 209.283524][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'. [ 209.482921][ T8274] syz_tun: entered allmulticast mode [ 209.536199][ T8272] syz_tun: left allmulticast mode [ 209.640695][ T8277] netlink: 72 bytes leftover after parsing attributes in process `syz.2.746'. [ 210.373551][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 210.440156][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 210.784095][ T8304] openvswitch: netlink: IPv6 tunnel dst address is zero [ 210.838265][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 210.878676][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.752'. [ 211.233516][ T8309] Bluetooth: MGMT ver 1.23 [ 211.510129][ T8314] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.756'. [ 211.574919][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 212.071280][ T8324] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.242111][ T8331] openvswitch: netlink: Unknown nsh attribute 0 [ 212.266747][ T8331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.993499][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 213.009366][ T8357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.769'. [ 213.906453][ T8379] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.915545][ T8379] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.964051][ T8380] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.971306][ T8380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.978903][ T8380] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.986092][ T8380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.127423][ T8380] bridge0: entered promiscuous mode [ 214.173213][ T8380] bridge0: entered allmulticast mode [ 214.312445][ T8382] __nla_validate_parse: 5 callbacks suppressed [ 214.332513][ T8382] netlink: 14 bytes leftover after parsing attributes in process `syz.4.777'. [ 214.541276][ T8382] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 214.571138][ T8382] bond0 (unregistering): Released all slaves [ 214.603859][ T8405] netlink: 'syz.1.782': attribute type 1 has an invalid length. [ 214.659082][ T147] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.674175][ T8404] syzkaller0: entered promiscuous mode [ 214.688423][ T8404] syzkaller0: entered allmulticast mode [ 214.796278][ T8410] bond8: (slave bridge1): making interface the new active one [ 214.807395][ T8410] bond8: (slave bridge1): Enslaving as an active interface with an up link [ 214.817244][ T147] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.886135][ T147] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.902325][ T147] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.042252][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 215.083704][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.786'. [ 215.116153][ T8425] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.788'. [ 215.229679][ T8432] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.790'. [ 215.663683][ T8440] erspan1: entered promiscuous mode [ 215.670681][ T8440] erspan1: entered allmulticast mode [ 215.743861][ T8441] netlink: 64 bytes leftover after parsing attributes in process `syz.2.794'. [ 215.845129][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.794'. [ 216.009324][ T8456] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 216.333004][ T8467] netlink: 'syz.0.803': attribute type 1 has an invalid length. [ 216.367813][ T8467] netlink: 1008 bytes leftover after parsing attributes in process `syz.0.803'. [ 216.406575][ T8460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.883848][ T8495] netlink: 64 bytes leftover after parsing attributes in process `syz.1.811'. [ 216.939816][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.811'. [ 218.934344][ T8560] netlink: 'syz.1.826': attribute type 1 has an invalid length. [ 219.475983][ T8513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.490658][ T8513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.627208][ T9] IPVS: starting estimator thread 0... [ 219.728063][ T8569] IPVS: using max 42 ests per chain, 100800 per kthread [ 219.842193][ T8533] tipc: Enabling of bearer rejected, failed to enable media [ 219.871080][ T8560] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 219.923412][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.978745][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.002755][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.052123][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.118583][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.158034][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.181665][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.216858][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.031466][ T8609] __nla_validate_parse: 3 callbacks suppressed [ 221.031496][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'. [ 221.394183][ T8619] netlink: 64 bytes leftover after parsing attributes in process `syz.0.842'. [ 221.455230][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.842'. [ 221.478939][ T8622] netlink: 'syz.3.843': attribute type 1 has an invalid length. [ 221.516101][ T8622] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.169531][ T8640] Cannot find add_set index 1 as target [ 222.390092][ T8653] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.852'. [ 222.541557][ T8658] xt_TCPMSS: Only works on TCP SYN packets [ 222.666863][ T8663] netlink: 'syz.4.855': attribute type 1 has an invalid length. [ 222.813925][ T8663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.013175][ T8671] netlink: 64 bytes leftover after parsing attributes in process `syz.0.857'. [ 223.068816][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 223.159989][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'. [ 223.189956][ T8676] netlink: 48 bytes leftover after parsing attributes in process `syz.2.860'. [ 223.327696][ T8676] netlink: 'syz.2.860': attribute type 8 has an invalid length. [ 223.366827][ T8676] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.860'. [ 223.511417][ T8689] vxcan2: entered allmulticast mode [ 223.584719][ T8692] Bluetooth: MGMT ver 1.23 [ 223.698649][ T8698] netlink: 76 bytes leftover after parsing attributes in process `syz.2.868'. [ 224.162142][ T8720] macvtap1: entered allmulticast mode [ 224.169175][ T8720] dummy0: entered allmulticast mode [ 224.182765][ T8720] dummy0: left allmulticast mode [ 224.584397][ T4946] Bluetooth: hci3: command 0x0406 tx timeout [ 224.742405][ T8732] syz_tun: entered allmulticast mode [ 224.751630][ T8731] syz_tun: left allmulticast mode [ 224.897137][ T8736] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 225.273657][ T8747] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 225.320057][ T8747] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.329307][ T8747] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.910878][ T8773] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 225.959998][ T8773] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 226.163404][ T8778] __nla_validate_parse: 8 callbacks suppressed [ 226.163421][ T8778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.896'. [ 226.186779][ T8765] ip6gre1: entered promiscuous mode [ 226.215510][ T8765] ip6gre1: entered allmulticast mode [ 226.358484][ T8785] syzkaller0: entered promiscuous mode [ 226.367168][ T8785] syzkaller0: entered allmulticast mode [ 226.377203][ T8785] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 226.387785][ T8785] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 226.467636][ T8789] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 226.632887][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 226.813932][ T8803] sctp: [Deprecated]: syz.2.903 (pid 8803) Use of int in max_burst socket option. [ 226.813932][ T8803] Use struct sctp_assoc_value instead [ 226.969739][ T8807] bond2: entered allmulticast mode [ 226.986538][ T8807] macvlan4: entered promiscuous mode [ 226.991924][ T8807] macvlan4: entered allmulticast mode [ 226.998914][ T8807] bond2: entered promiscuous mode [ 227.007987][ T8807] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 227.017415][ T8807] bond2: left promiscuous mode [ 227.079357][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.905'. [ 227.309112][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'. [ 227.369008][ T8817] netlink: 'syz.1.907': attribute type 9 has an invalid length. [ 227.370879][ T8821] netlink: 'syz.2.908': attribute type 6 has an invalid length. [ 227.403780][ T8821] netlink: 'syz.2.908': attribute type 6 has an invalid length. [ 227.457818][ T8821] netlink: 'syz.2.908': attribute type 6 has an invalid length. [ 227.469286][ T8821] netlink: 'syz.2.908': attribute type 6 has an invalid length. [ 227.486542][ T8821] netlink: 'syz.2.908': attribute type 6 has an invalid length. [ 227.529599][ T8821] netlink: 'syz.2.908': attribute type 6 has an invalid length. [ 227.581065][ T8821] netlink: 'syz.2.908': attribute type 6 has an invalid length. [ 227.655998][ T8821] netlink: 'syz.2.908': attribute type 6 has an invalid length. [ 227.689390][ T8832] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 227.705936][ T8821] netlink: 'syz.2.908': attribute type 6 has an invalid length. [ 227.751927][ T8835] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.914'. [ 228.259568][ T8855] netlink: 156 bytes leftover after parsing attributes in process `syz.3.919'. [ 228.281001][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 228.312165][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.920'. [ 228.392554][ T8854] geneve2: entered promiscuous mode [ 228.412044][ T8854] geneve2: entered allmulticast mode [ 228.438673][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 45415 - 0 [ 228.462283][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 45415 - 0 [ 228.487969][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 45415 - 0 [ 228.511396][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 45415 - 0 [ 228.591328][ T8859] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.922'. [ 229.878240][ T8889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.928'. [ 230.050103][ T8889] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 230.334600][ T8898] syzkaller1: entered promiscuous mode [ 230.340711][ T8898] syzkaller1: entered allmulticast mode [ 231.199575][ T8920] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 232.077446][ T8934] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 232.099565][ T8935] __nla_validate_parse: 2 callbacks suppressed [ 232.099584][ T8935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.945'. [ 232.443156][ T8946] tipc: Started in network mode [ 232.454140][ T8946] tipc: Node identity ac14140f, cluster identity 4711 [ 232.476825][ T8946] tipc: New replicast peer: 255.255.255.255 [ 232.492360][ T8946] tipc: Enabled bearer , priority 10 [ 233.004456][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.953'. [ 233.609282][ T5768] tipc: Node number set to 2886997007 [ 233.620842][ T8959] nbd0: detected capacity change from 0 to 127 [ 233.641979][ T4946] block nbd0: Receive control failed (result -32) [ 233.718276][ T7243] block nbd0: Dead connection, failed to find a fallback [ 233.736415][ T7243] block nbd0: shutting down sockets [ 233.767904][ T7243] blk_print_req_error: 138 callbacks suppressed [ 233.767921][ T7243] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.844994][ T7243] buffer_io_error: 138 callbacks suppressed [ 233.845011][ T7243] Buffer I/O error on dev nbd0, logical block 0, async page read [ 233.895548][ T7243] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.939286][ T7243] Buffer I/O error on dev nbd0, logical block 1, async page read [ 233.973144][ T7243] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.025952][ T7243] Buffer I/O error on dev nbd0, logical block 2, async page read [ 234.056785][ T7243] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.095411][ T7243] Buffer I/O error on dev nbd0, logical block 3, async page read [ 234.103830][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.960'. [ 234.119099][ T7243] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.129927][ T8985] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 234.164709][ T8981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.179611][ T7243] Buffer I/O error on dev nbd0, logical block 0, async page read [ 234.181098][ T8981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.208270][ T8991] validate_nla: 26 callbacks suppressed [ 234.208300][ T8991] netlink: 'syz.1.963': attribute type 13 has an invalid length. [ 234.214411][ T7243] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.214443][ T7243] Buffer I/O error on dev nbd0, logical block 1, async page read [ 234.214566][ T7243] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.214587][ T7243] Buffer I/O error on dev nbd0, logical block 2, async page read [ 234.214697][ T7243] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.214718][ T7243] Buffer I/O error on dev nbd0, logical block 3, async page read [ 234.214847][ T7243] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.214868][ T7243] Buffer I/O error on dev nbd0, logical block 0, async page read [ 234.214979][ T7243] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.315842][ T8981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.328700][ T8981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.347473][ T7243] Buffer I/O error on dev nbd0, logical block 1, async page read [ 234.362609][ T7243] ldm_validate_partition_table(): Disk read failed. [ 234.383388][ T7243] Dev nbd0: unable to read RDB block 0 [ 234.397928][ T7243] nbd0: unable to read partition table [ 234.449699][ T7243] ldm_validate_partition_table(): Disk read failed. [ 234.478285][ T7243] Dev nbd0: unable to read RDB block 0 [ 234.516583][ T7243] nbd0: unable to read partition table [ 235.252802][ T9006] netlink: 220 bytes leftover after parsing attributes in process `syz.2.969'. [ 235.271052][ T9006] netlink: 'syz.2.969': attribute type 2 has an invalid length. [ 235.299866][ T9012] netlink: 36 bytes leftover after parsing attributes in process `syz.3.970'. [ 235.648872][ T9020] netlink: 64 bytes leftover after parsing attributes in process `syz.1.972'. [ 235.697690][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'. [ 235.972047][ T9027] netlink: 64 bytes leftover after parsing attributes in process `syz.1.974'. [ 236.043020][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'. [ 237.064141][ T9054] 5Ò: entered promiscuous mode [ 237.239684][ T9061] netlink: 'syz.2.983': attribute type 23 has an invalid length. [ 237.287398][ T9063] team0: entered allmulticast mode [ 237.308271][ T9063] team_slave_0: entered allmulticast mode [ 237.324569][ T9063] team_slave_1: entered allmulticast mode [ 237.399095][ T9069] netlink: 64 bytes leftover after parsing attributes in process `syz.1.985'. [ 237.425890][ T9067] netlink: 'syz.3.984': attribute type 58 has an invalid length. [ 237.464686][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'. [ 237.474023][ T9067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.984'. [ 237.731590][ T9049] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 237.743703][ T9049] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 237.885329][ T9076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.051073][ T9080] netlink: 40 bytes leftover after parsing attributes in process `syz.4.989'. [ 238.075900][ T9080] netlink: 260 bytes leftover after parsing attributes in process `syz.4.989'. [ 238.321977][ T9090] xt_policy: output policy not valid in PREROUTING and INPUT [ 238.360202][ T9095] xt_policy: output policy not valid in PREROUTING and INPUT [ 238.490407][ T9102] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 239.003714][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 239.038602][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 239.071448][ T9126] batadv_slave_1: entered promiscuous mode [ 239.159921][ T9119] batadv_slave_1: left promiscuous mode [ 239.587388][ T9143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1006'. [ 239.624960][ T9143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1006'. [ 239.650775][ T9148] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1006'. [ 239.873099][ T9151] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 240.123241][ T9160] netlink: 'syz.4.1011': attribute type 1 has an invalid length. [ 240.352720][ T9160] 8021q: adding VLAN 0 to HW filter on device bond4 [ 240.393239][ T9163] ieee802154 phy1 wpan1: encryption failed: -22 [ 240.440619][ T9173] bond6: entered allmulticast mode [ 240.447632][ T9173] 8021q: adding VLAN 0 to HW filter on device bond6 [ 240.898800][ T9193] netlink: 'syz.1.1020': attribute type 3 has an invalid length. [ 241.525887][ T9208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.775347][ T9221] netlink: 'syz.3.1027': attribute type 1 has an invalid length. [ 241.910281][ T9221] 8021q: adding VLAN 0 to HW filter on device bond7 [ 242.272417][ T9243] tipc: Enabling of bearer rejected, already enabled [ 242.331621][ T9243] netlink: 'syz.0.1033': attribute type 1 has an invalid length. [ 242.483592][ T9257] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 242.573026][ T9243] bond1: entered promiscuous mode [ 242.620387][ T9243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.638590][ T9263] __nla_validate_parse: 13 callbacks suppressed [ 242.638609][ T9263] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1038'. [ 243.201980][ T9266] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 243.223967][ T9266] vlan5: left promiscuous mode [ 243.232020][ T9266] bridge0: left promiscuous mode [ 243.259481][ T9266] ip6gre1: left promiscuous mode [ 243.265906][ T9266] ip6gre1: left allmulticast mode [ 243.273242][ T9266] bond2: left allmulticast mode [ 243.444154][ T9286] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 243.662212][ T9289] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1042'. [ 243.676551][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'. [ 243.691880][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'. [ 243.793920][ T147] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.822203][ T147] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.850146][ T147] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.893305][ T147] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.961737][ T9304] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1047'. [ 243.994500][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1047'. [ 244.006311][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1047'. [ 244.043356][ T9295] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 244.132435][ T9310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.958539][ T9343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1056'. [ 245.472765][ T9357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1062'. [ 245.777353][ T9368] netlink: 'syz.4.1068': attribute type 23 has an invalid length. [ 246.089764][ T9383] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 246.186428][ T9389] netlink: 'syz.0.1071': attribute type 13 has an invalid length. [ 246.225020][ T9389] netlink: 'syz.0.1071': attribute type 17 has an invalid length. [ 246.326258][ T147] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.345266][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1073'. [ 246.364992][ T147] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 45415 - 0 [ 246.389974][ T147] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.412304][ T147] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 45415 - 0 [ 246.803125][ T9389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.819558][ T9389] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.900407][ T9389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.489384][ T9389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.499230][ T9389] syzkaller0: left promiscuous mode [ 247.506027][ T9389] syzkaller0: left allmulticast mode [ 247.512805][ T9389] batman_adv: batadv0: Interface activated: syzkaller0 [ 247.530715][ T9389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.542289][ T9389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.571062][ T9389] veth1_vlan: left promiscuous mode [ 247.580024][ T9389] veth0_vlan: left promiscuous mode [ 247.586922][ T9389] veth0_vlan: entered promiscuous mode [ 247.597027][ T9389] veth1_vlan: entered promiscuous mode [ 247.607848][ T9389] veth1_macvtap: left promiscuous mode [ 247.616235][ T9389] veth0_macvtap: left promiscuous mode [ 247.675217][ T9389] veth0_macvtap: entered promiscuous mode [ 247.694162][ T9389] veth1_macvtap: entered promiscuous mode [ 247.709421][ T9389] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 247.717356][ T9389] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 247.725866][ T9389] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 247.741386][ T9389] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 247.756877][ T9389] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 247.771052][ T9389] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 247.793747][ T9389] bridge0: port 3(batadv1) entered blocking state [ 247.800421][ T9389] bridge0: port 3(batadv1) entered forwarding state [ 247.808151][ T9389] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 247.820937][ T9389] gre1: left allmulticast mode [ 247.838717][ T9389] geneve2: left promiscuous mode [ 247.843854][ T9389] geneve2: left allmulticast mode [ 247.856822][ T9389] bond1: left promiscuous mode [ 247.861940][ T9389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.872190][ T9389] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 247.891059][ T9393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 247.899101][ T9393] __nla_validate_parse: 2 callbacks suppressed [ 247.899116][ T9393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1073'. [ 247.916747][ T147] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 45415 - 0 [ 247.927700][ T147] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 247.938317][ T147] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 60957 - 0 [ 247.951056][ T147] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 45415 - 0 [ 247.964745][ T147] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 247.974708][ T147] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 60957 - 0 [ 248.000208][ T9416] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1080'. [ 248.016484][ T3367] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.023700][ T3367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.035832][ T3367] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.043061][ T3367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.191261][ T147] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.235070][ T147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.271051][ T147] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 60957 - 0 [ 248.324157][ T147] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.371153][ T147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.409106][ T147] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 60957 - 0 [ 248.446934][ T9430] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 248.560652][ T48] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4094 [ 248.757527][ T9439] netlink: 'syz.2.1089': attribute type 1 has an invalid length. [ 248.811007][ T9439] 8021q: adding VLAN 0 to HW filter on device bond3 [ 248.889928][ T9443] sctp: [Deprecated]: syz.2.1091 (pid 9443) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.889928][ T9443] Use struct sctp_sack_info instead [ 248.958170][ T9445] ip6_tunnel: non-ECT from fe80:e800:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 249.283474][ T9454] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1093'. [ 249.308840][ T9456] FAULT_INJECTION: forcing a failure. [ 249.308840][ T9456] name failslab, interval 1, probability 0, space 0, times 0 [ 249.347939][ T9456] CPU: 0 UID: 0 PID: 9456 Comm: syz.1.1096 Not tainted syzkaller #0 PREEMPT(full) [ 249.347963][ T9456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 249.347976][ T9456] Call Trace: [ 249.347982][ T9456] [ 249.347988][ T9456] dump_stack_lvl+0xe8/0x150 [ 249.348009][ T9456] should_fail_ex+0x40c/0x560 [ 249.348034][ T9456] should_failslab+0xa8/0x100 [ 249.348057][ T9456] __kmalloc_cache_noprof+0x88/0x660 [ 249.348077][ T9456] ? ipv6_flowlabel_opt+0xf8d/0x2ae0 [ 249.348101][ T9456] ipv6_flowlabel_opt+0xf8d/0x2ae0 [ 249.348127][ T9456] ? __lock_acquire+0x683/0x2cd0 [ 249.348144][ T9456] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 249.348164][ T9456] ? aa_file_perm+0x18b/0x15f0 [ 249.348208][ T9456] ? do_raw_spin_lock+0x12b/0x2f0 [ 249.348226][ T9456] ? lock_sock_nested+0x6a/0x100 [ 249.348246][ T9456] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 249.348273][ T9456] ? __local_bh_enable_ip+0xd0/0x130 [ 249.348292][ T9456] do_ipv6_setsockopt+0xe0e/0x3190 [ 249.348310][ T9456] ? get_pid_task+0x20/0x1f0 [ 249.348334][ T9456] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 249.348353][ T9456] ? get_pid_task+0x20/0x1f0 [ 249.348370][ T9456] ? get_pid_task+0x20/0x1f0 [ 249.348388][ T9456] ? get_pid_task+0x20/0x1f0 [ 249.348420][ T9456] ? __lock_acquire+0x683/0x2cd0 [ 249.348456][ T9456] ? aa_sk_perm+0x6d5/0x900 [ 249.348480][ T9456] ? __fget_files+0x2a/0x420 [ 249.348505][ T9456] ? __pfx_aa_sk_perm+0x10/0x10 [ 249.348530][ T9456] ? __fget_files+0x2a/0x420 [ 249.348548][ T9456] ? aa_sock_opt_perm+0xff/0x1a0 [ 249.348575][ T9456] ipv6_setsockopt+0x59/0x170 [ 249.348596][ T9456] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 249.348621][ T9456] do_sock_setsockopt+0x17c/0x1b0 [ 249.348643][ T9456] __x64_sys_setsockopt+0x13d/0x1b0 [ 249.348662][ T9456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.348682][ T9456] do_syscall_64+0x174/0x580 [ 249.348698][ T9456] ? trace_irq_disable+0x3b/0x140 [ 249.348720][ T9456] ? clear_bhb_loop+0x40/0x90 [ 249.348742][ T9456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.348759][ T9456] RIP: 0033:0x7f961759ce59 [ 249.348776][ T9456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.348789][ T9456] RSP: 002b:00007f9618443028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 249.348808][ T9456] RAX: ffffffffffffffda RBX: 00007f9617815fa0 RCX: 00007f961759ce59 [ 249.348820][ T9456] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 249.348830][ T9456] RBP: 00007f9618443090 R08: 0000000000000020 R09: 0000000000000000 [ 249.348841][ T9456] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.348852][ T9456] R13: 00007f9617816038 R14: 00007f9617815fa0 R15: 00007fff5a5c9358 [ 249.348880][ T9456] [ 249.770167][ T9462] netlink: 'syz.3.1100': attribute type 10 has an invalid length. [ 249.778981][ T9462] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1100'. [ 250.183681][ T9476] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1101'. [ 250.219103][ T9476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1101'. [ 250.266839][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1101'. [ 251.075586][ T9486] bond4: entered allmulticast mode [ 251.087138][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1104'. [ 251.100685][ T9489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1102'. [ 251.186627][ T9488] ipip0: entered promiscuous mode [ 251.205279][ T9488] ipip0: entered allmulticast mode [ 251.234175][ T9488] bond4: (slave ipip0): The slave device specified does not support setting the MAC address [ 251.342283][ T9488] bond4: (slave ipip0): Error -95 calling set_mac_address [ 251.415132][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'. [ 251.666271][ T9496] bond8: entered promiscuous mode [ 251.704036][ T9496] bond8: entered allmulticast mode [ 251.939046][ T9506] FAULT_INJECTION: forcing a failure. [ 251.939046][ T9506] name failslab, interval 1, probability 0, space 0, times 0 [ 252.011320][ T9506] CPU: 0 UID: 0 PID: 9506 Comm: syz.3.1107 Not tainted syzkaller #0 PREEMPT(full) [ 252.011346][ T9506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 252.011356][ T9506] Call Trace: [ 252.011363][ T9506] [ 252.011371][ T9506] dump_stack_lvl+0xe8/0x150 [ 252.011397][ T9506] should_fail_ex+0x40c/0x560 [ 252.011431][ T9506] should_failslab+0xa8/0x100 [ 252.011460][ T9506] __kmalloc_cache_noprof+0x88/0x660 [ 252.011484][ T9506] ? ipv6_flowlabel_opt+0x1cef/0x2ae0 [ 252.011514][ T9506] ipv6_flowlabel_opt+0x1cef/0x2ae0 [ 252.011549][ T9506] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 252.011574][ T9506] ? aa_file_perm+0x18b/0x15f0 [ 252.011617][ T9506] ? do_raw_spin_lock+0x12b/0x2f0 [ 252.011639][ T9506] ? lock_sock_nested+0x6a/0x100 [ 252.011662][ T9506] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 252.011694][ T9506] ? __local_bh_enable_ip+0xd0/0x130 [ 252.011717][ T9506] do_ipv6_setsockopt+0xe0e/0x3190 [ 252.011740][ T9506] ? get_pid_task+0x20/0x1f0 [ 252.011767][ T9506] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 252.011791][ T9506] ? get_pid_task+0x20/0x1f0 [ 252.011812][ T9506] ? get_pid_task+0x20/0x1f0 [ 252.011830][ T9506] ? get_pid_task+0x20/0x1f0 [ 252.011860][ T9506] ? __lock_acquire+0x683/0x2cd0 [ 252.011896][ T9506] ? aa_sk_perm+0x6d5/0x900 [ 252.011920][ T9506] ? __fget_files+0x2a/0x420 [ 252.011946][ T9506] ? __pfx_aa_sk_perm+0x10/0x10 [ 252.011971][ T9506] ? __fget_files+0x2a/0x420 [ 252.011998][ T9506] ? aa_sock_opt_perm+0xff/0x1a0 [ 252.012025][ T9506] ipv6_setsockopt+0x59/0x170 [ 252.012048][ T9506] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 252.012074][ T9506] do_sock_setsockopt+0x17c/0x1b0 [ 252.012096][ T9506] __x64_sys_setsockopt+0x13d/0x1b0 [ 252.012116][ T9506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.012136][ T9506] do_syscall_64+0x174/0x580 [ 252.012153][ T9506] ? trace_irq_disable+0x3b/0x140 [ 252.012178][ T9506] ? clear_bhb_loop+0x40/0x90 [ 252.012200][ T9506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.012218][ T9506] RIP: 0033:0x7fbbc959ce59 [ 252.012235][ T9506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.012251][ T9506] RSP: 002b:00007fbbca4ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 252.012270][ T9506] RAX: ffffffffffffffda RBX: 00007fbbc9815fa0 RCX: 00007fbbc959ce59 [ 252.012283][ T9506] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 252.012293][ T9506] RBP: 00007fbbca4ee090 R08: 0000000000000020 R09: 0000000000000000 [ 252.012305][ T9506] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.012316][ T9506] R13: 00007fbbc9816038 R14: 00007fbbc9815fa0 R15: 00007ffc623729b8 [ 252.012344][ T9506] [ 252.517227][ T9515] syzkaller1: entered promiscuous mode [ 252.640465][ T9515] syzkaller1: entered allmulticast mode [ 252.824587][ C0] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4094 [ 252.957100][ T9526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1110'. [ 253.015261][ T9526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1110'. [ 253.166598][ T9528] 8021q: adding VLAN 0 to HW filter on device bond9 [ 253.452164][ T9537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1112'. [ 253.510862][ T9539] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1113'. [ 253.540634][ T9537] netlink: 'syz.1.1112': attribute type 1 has an invalid length. [ 253.587682][ T9541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.119372][ T9569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1118'. [ 255.388322][ T9578] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1119'. [ 255.440411][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1119'. [ 255.572811][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.097079][ T9619] tipc: Can't bind to reserved service type 0 [ 257.123417][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1125'. [ 257.447083][ T9631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1133'. [ 257.565013][ T9639] FAULT_INJECTION: forcing a failure. [ 257.565013][ T9639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.658312][ T9639] CPU: 0 UID: 0 PID: 9639 Comm: syz.3.1135 Not tainted syzkaller #0 PREEMPT(full) [ 257.658337][ T9639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 257.658347][ T9639] Call Trace: [ 257.658355][ T9639] [ 257.658362][ T9639] dump_stack_lvl+0xe8/0x150 [ 257.658388][ T9639] should_fail_ex+0x40c/0x560 [ 257.658419][ T9639] _copy_from_user+0x2d/0xb0 [ 257.658440][ T9639] ___sys_sendmsg+0x1c6/0x360 [ 257.658459][ T9639] ? __lock_acquire+0x683/0x2cd0 [ 257.658488][ T9639] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.658513][ T9639] ? kstrtouint+0x6e/0xe0 [ 257.658561][ T9639] ? __fget_files+0x2a/0x420 [ 257.658581][ T9639] ? __fget_files+0x3a2/0x420 [ 257.658611][ T9639] __sys_sendmmsg+0x27c/0x4e0 [ 257.658635][ T9639] ? __pfx___sys_sendmmsg+0x10/0x10 [ 257.658652][ T9639] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 257.658695][ T9639] ? ksys_write+0x242/0x270 [ 257.658722][ T9639] ? __pfx_ksys_write+0x10/0x10 [ 257.658752][ T9639] __x64_sys_sendmmsg+0xa0/0xc0 [ 257.658771][ T9639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.658790][ T9639] do_syscall_64+0x174/0x580 [ 257.658806][ T9639] ? trace_irq_disable+0x3b/0x140 [ 257.658830][ T9639] ? clear_bhb_loop+0x40/0x90 [ 257.658852][ T9639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.658869][ T9639] RIP: 0033:0x7fbbc959ce59 [ 257.658886][ T9639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.658900][ T9639] RSP: 002b:00007fbbca4cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 257.658920][ T9639] RAX: ffffffffffffffda RBX: 00007fbbc9816090 RCX: 00007fbbc959ce59 [ 257.658933][ T9639] RDX: 0000000000000001 RSI: 0000200000004d80 RDI: 0000000000000003 [ 257.658943][ T9639] RBP: 00007fbbca4cd090 R08: 0000000000000000 R09: 0000000000000000 [ 257.658953][ T9639] R10: 00000000000048f5 R11: 0000000000000246 R12: 0000000000000001 [ 257.658964][ T9639] R13: 00007fbbc9816128 R14: 00007fbbc9816090 R15: 00007ffc623729b8 [ 257.658994][ T9639] [ 258.138970][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1138'. [ 258.221739][ T9653] netlink: 'syz.3.1139': attribute type 1 has an invalid length. [ 258.555896][ T9653] 8021q: adding VLAN 0 to HW filter on device bond10 [ 258.999378][ T9680] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1142'. [ 259.321648][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1144'. [ 259.768608][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1148'. [ 260.116667][ T9450] Set syz1 is full, maxelem 65536 reached [ 260.337329][ T9718] netlink: 'syz.0.1151': attribute type 3 has an invalid length. [ 260.408492][ T9724] bridge1: entered promiscuous mode [ 260.430863][ T9724] bridge1: entered allmulticast mode [ 260.488096][ T9724] team0: Port device bridge1 added [ 260.570964][ T9713] bridge2: entered promiscuous mode [ 260.581143][ T9713] bridge2: entered allmulticast mode [ 260.603937][ T9713] team0: Port device bridge2 added [ 260.696393][ T9732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.304912][ C0] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4094 [ 261.378937][ T9744] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1160'. [ 262.905628][ T9706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.934907][ T9739] netlink: 'syz.0.1158': attribute type 23 has an invalid length. [ 263.100847][ T9759] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 263.131394][ T9757] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1165'. [ 263.423691][ T9770] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1167'. [ 263.748585][ T9784] vxcan1: tx drop: invalid da for name 0x0000000000000004 [ 263.849366][ T9785] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1174'. [ 263.912975][ T9787] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1176'. [ 263.921972][ T9789] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1175'. [ 264.022917][ T9787] syzkaller1: entered promiscuous mode [ 264.030235][ T9787] syzkaller1: entered allmulticast mode [ 264.430676][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1182'. [ 264.462430][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 264.843916][ T9823] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 264.899754][ T9824] syzkaller0: entered promiscuous mode [ 264.907538][ T9824] syzkaller0: entered allmulticast mode [ 265.113161][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 265.125226][ T9832] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 265.135614][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1190'. [ 265.472150][ T9837] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1193'. [ 265.489049][ T9837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 265.794147][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.836242][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.138036][ T9851] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 266.547887][ T9862] tipc: Started in network mode [ 266.570247][ T9862] tipc: Node identity d663cc6dd364, cluster identity 4711 [ 266.597857][ T9862] tipc: Enabled bearer , priority 0 [ 266.627712][ T9871] syzkaller0: entered promiscuous mode [ 266.681153][ T9871] syzkaller0: entered allmulticast mode [ 266.751926][ T9862] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 266.794666][ T9864] IPVS: Scheduler module ip_vs_sip not found [ 266.873081][ T9879] netlink: 'syz.0.1208': attribute type 29 has an invalid length. [ 266.915058][ T9871] tipc: Resetting bearer [ 266.942103][ T9882] netlink: 'syz.0.1208': attribute type 4 has an invalid length. [ 266.998413][ T9861] tipc: Resetting bearer [ 267.060747][ T9861] tipc: Disabling bearer [ 267.183178][ T9890] vlan6: entered promiscuous mode [ 267.189310][ T9890] syz_tun: entered promiscuous mode [ 267.490612][ T9905] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 267.897420][ T9913] bond2: option lacp_active: mode dependency failed, not supported in mode balance-tlb(5) [ 267.974981][ T9913] bond2 (unregistering): Released all slaves [ 268.113187][ T9929] netlink: 'syz.3.1221': attribute type 1 has an invalid length. [ 268.149769][ T9929] netlink: 'syz.3.1221': attribute type 2 has an invalid length. [ 268.173157][ T9932] netlink: 'syz.3.1221': attribute type 10 has an invalid length. [ 268.190765][ T9931] netlink: 'syz.1.1222': attribute type 1 has an invalid length. [ 268.203426][ T9932] geneve1: entered allmulticast mode [ 268.239457][ T9932] team0: Port device geneve1 added [ 268.258618][ T147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.272206][ T147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.394165][ T9931] 8021q: adding VLAN 0 to HW filter on device bond9 [ 268.420304][ T147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.442369][ T9941] __nla_validate_parse: 13 callbacks suppressed [ 268.442389][ T9941] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1224'. [ 268.469748][ T147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.499089][ T9942] netlink: 'syz.0.1225': attribute type 1 has an invalid length. [ 268.561412][ T9947] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 268.602892][ T9942] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.685698][ T9940] bond2: (slave dummy0): making interface the new active one [ 268.701634][ T9940] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 268.752211][ T9954] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1226'. [ 269.319646][ T9967] netlink: 'syz.4.1233': attribute type 12 has an invalid length. [ 269.333306][ T9967] netlink: 'syz.4.1233': attribute type 29 has an invalid length. [ 269.342889][ T9967] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1233'. [ 269.354931][ T9967] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1233'. [ 269.368715][ T9967] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 269.779639][ T9985] netlink: 'syz.2.1237': attribute type 1 has an invalid length. [ 269.839724][ T9985] 8021q: adding VLAN 0 to HW filter on device bond5 [ 269.982026][ T9990] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 270.161193][ T9992] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.168447][ T9992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.176004][ T9992] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.183155][ T9992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.289164][ T9992] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.311337][ T9992] 8021q: adding VLAN 0 to HW filter on device bond4 [ 270.366499][ T9997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1239'. [ 270.415554][ T12] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 270.427741][ T12] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 270.469720][ T12] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 270.505720][ T12] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 270.810116][T10010] 8021q: VLANs not supported on ip_vti0 [ 270.923966][T10008] syzkaller0: entered promiscuous mode [ 270.930770][T10008] syzkaller0: entered allmulticast mode [ 273.326807][T10039] –: renamed from dummy0 (while UP) [ 273.797603][T10057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1257'. [ 273.828448][T10057] netlink: 'syz.0.1257': attribute type 1 has an invalid length. [ 273.924985][T10057] bond3: entered promiscuous mode [ 273.942193][T10057] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.028375][T10057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1257'. [ 274.043090][T10057] bond3: entered allmulticast mode [ 274.050835][T10066] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 274.101678][T10057] bond3: (slave bridge2): making interface the new active one [ 274.131476][T10057] bridge2: entered promiscuous mode [ 274.145022][T10057] bridge2: entered allmulticast mode [ 274.165897][T10057] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 274.423119][T10066] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 274.493899][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1263'. [ 274.593524][T10083] netlink: 'syz.2.1262': attribute type 1 has an invalid length. [ 274.647052][T10078] 8021q: adding VLAN 0 to HW filter on device bond11 [ 274.993997][T10083] 8021q: adding VLAN 0 to HW filter on device bond6 [ 275.077271][T10101] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1268'. [ 275.096245][T10101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1268'. [ 275.113593][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1268'. [ 275.547638][T10086] bond6: (slave veth3): Enslaving as an active interface with a down link [ 275.572043][T10081] bond6: (slave dummy0): making interface the new active one [ 275.582940][T10081] dummy0: entered promiscuous mode [ 275.592567][T10081] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 275.812096][T10111] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1270'. [ 275.844019][T10114] erspan1: entered allmulticast mode [ 276.222247][T10126] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1276'. [ 276.451622][T10133] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1280'. [ 276.720625][T10143] netlink: 'syz.0.1283': attribute type 1 has an invalid length. [ 276.747527][T10143] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1283'. [ 276.775126][T10143] netlink: 'syz.0.1283': attribute type 1 has an invalid length. [ 277.304487][ C0] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4094 [ 279.492109][T10242] __nla_validate_parse: 6 callbacks suppressed [ 279.492127][T10242] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1304'. [ 279.585767][T10243] block nbd1: server does not support multiple connections per device. [ 279.601104][T10243] block nbd1: shutting down sockets [ 279.646408][T10249] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 279.681246][T10249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.946443][T10256] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1307'. [ 280.026376][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1307'. [ 280.756769][T10253] Set syz1 is full, maxelem 65536 reached [ 280.856986][T10270] syzkaller1: entered promiscuous mode [ 280.898060][T10270] syzkaller1: entered allmulticast mode [ 280.962957][T10282] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 281.000380][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'. [ 281.169358][T10282] hsr_slave_1 (unregistering): left promiscuous mode [ 281.454121][T10292] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1321'. [ 281.932611][T10307] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1324'. [ 281.988638][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'. [ 282.335787][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1329'. [ 282.350094][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1329'. [ 282.390272][T10322] sch_fq: defrate 8 ignored. [ 283.043914][T10345] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 283.102807][T10337] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.110403][T10337] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.143772][T10337] bridge0: left promiscuous mode [ 283.197199][T10337] bridge0: left allmulticast mode [ 284.468821][T10337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.532735][T10337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.027452][T10337] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 285.251920][T10337] bond4: left allmulticast mode [ 285.272845][T10337] erspan1: left promiscuous mode [ 285.279208][T10337] erspan1: left allmulticast mode [ 285.342903][T10357] : entered promiscuous mode [ 285.542287][T10393] FAULT_INJECTION: forcing a failure. [ 285.542287][T10393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.585733][T10393] CPU: 0 UID: 0 PID: 10393 Comm: syz.2.1344 Not tainted syzkaller #0 PREEMPT(full) [ 285.585760][T10393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 285.585770][T10393] Call Trace: [ 285.585777][T10393] [ 285.585785][T10393] dump_stack_lvl+0xe8/0x150 [ 285.585807][T10393] should_fail_ex+0x40c/0x560 [ 285.585838][T10393] _copy_from_user+0x2d/0xb0 [ 285.585858][T10393] sk_setsockopt+0x2b5/0x2f10 [ 285.585890][T10393] ? __pfx_sk_setsockopt+0x10/0x10 [ 285.585917][T10393] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 285.585936][T10393] ? __pfx_vfs_write+0x10/0x10 [ 285.585962][T10393] ? __fget_files+0x2a/0x420 [ 285.585994][T10393] ? __fget_files+0x2a/0x420 [ 285.586012][T10393] ? aa_sock_opt_perm+0xd4/0x1a0 [ 285.586040][T10393] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 285.586066][T10393] do_sock_setsockopt+0x11b/0x1b0 [ 285.586089][T10393] __x64_sys_setsockopt+0x13d/0x1b0 [ 285.586109][T10393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.586128][T10393] do_syscall_64+0x174/0x580 [ 285.586145][T10393] ? trace_irq_disable+0x3b/0x140 [ 285.586169][T10393] ? clear_bhb_loop+0x40/0x90 [ 285.586191][T10393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.586209][T10393] RIP: 0033:0x7fd234f9ce59 [ 285.586226][T10393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.586241][T10393] RSP: 002b:00007fd235e53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 285.586260][T10393] RAX: ffffffffffffffda RBX: 00007fd235215fa0 RCX: 00007fd234f9ce59 [ 285.586273][T10393] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 285.586283][T10393] RBP: 00007fd235e53090 R08: 0000000000000010 R09: 0000000000000000 [ 285.586294][T10393] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 285.586305][T10393] R13: 00007fd235216038 R14: 00007fd235215fa0 R15: 00007ffe51faaaa8 [ 285.586335][T10393] [ 285.807969][T10384] bridge0: port 3(batadv1) entered disabled state [ 285.815469][T10384] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.824971][T10384] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.951599][T10384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.963193][T10384] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 286.053829][ T48] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.063390][ T48] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.072545][ T48] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.083956][ T48] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.110118][ T48] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.155514][ T48] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.167641][ T48] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.178035][ T48] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.220479][ T48] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.248961][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.270511][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 60957 - 0 [ 286.285748][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1350'. [ 286.298310][T10408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1350'. [ 286.308828][ T48] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.318414][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.328488][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 60957 - 0 [ 286.378323][T10408] sit1: entered promiscuous mode [ 286.396080][ T48] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.428322][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 286.463576][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 2] type 2 family 0 port 60957 - 0 [ 286.546821][T10416] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1353'. [ 286.556447][ T48] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.556480][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 286.556503][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 2] type 2 family 0 port 60957 - 0 [ 286.558467][T10411] lo: Caught tx_queue_len zero misconfig [ 286.807673][ T48] dummy0: left promiscuous mode [ 287.048190][T10434] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1359'. [ 287.066987][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1359'. [ 287.077455][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1359'. [ 287.322216][T10437] bridge5: entered allmulticast mode [ 287.335422][T10437] team0: Port device bridge5 added [ 287.693601][T10460] tipc: Started in network mode [ 287.702674][T10460] tipc: Node identity ac14140f, cluster identity 4711 [ 287.735119][T10460] tipc: Enabled bearer , priority 10 [ 288.023615][T10467] bond5: Unable to set up delay as MII monitoring is disabled [ 288.099759][T10467] bond5 (unregistering): Released all slaves [ 288.117292][ T30] audit: type=1800 audit(1781693328.378:3): pid=10476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1375" name="r" dev="tmpfs" ino=1606 res=0 errno=0 [ 288.857346][T10351] tipc: Node number set to 2886997007 [ 288.920392][T10490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.063603][T10504] ieee802154 phy1 wpan1: encryption failed: -22 [ 289.082304][T10505] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1385'. [ 289.086251][T10506] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1386'. [ 289.117147][T10506] 0ªX¹¦À: renamed from batadv0 [ 289.140145][T10506] 0ªX¹¦À: entered allmulticast mode [ 289.164991][T10506] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 289.184806][T10506] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 289.220499][T10512] netlink: 'syz.2.1387': attribute type 1 has an invalid length. [ 289.357614][T10512] 8021q: adding VLAN 0 to HW filter on device bond7 [ 289.429036][T10515] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1388'. [ 290.011222][T10558] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1402'. [ 290.088410][T10562] netlink: 'syz.1.1404': attribute type 1 has an invalid length. [ 290.206205][T10562] 8021q: adding VLAN 0 to HW filter on device bond10 [ 290.251402][T10209] bond6: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 290.867569][T10590] tipc: Invalid UDP bearer configuration [ 290.867620][T10590] tipc: Enabling of bearer rejected, failed to enable media [ 290.981537][T10605] ip6_tunnel: non-ECT from fe80:e800:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 291.033710][T10606] netlink: 'syz.3.1418': attribute type 6 has an invalid length. [ 291.070912][T10606] netlink: 'syz.3.1418': attribute type 5 has an invalid length. [ 291.150912][T10616] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.158299][T10616] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.346412][T10621] syzkaller0: entered promiscuous mode [ 291.369006][T10621] syzkaller0: entered allmulticast mode [ 291.421636][T10628] __nla_validate_parse: 9 callbacks suppressed [ 291.421653][T10628] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1426'. [ 291.465048][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1426'. [ 291.483463][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1426'. [ 291.560197][T10632] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1427'. [ 291.706182][T10638] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1428'. [ 291.966160][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1430'. [ 292.435031][T10676] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1441'. [ 292.468139][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1441'. [ 292.507753][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1441'. [ 292.530636][T10680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1443'. [ 292.937773][T10688] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.945529][T10688] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.186821][T10688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.219164][T10688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.497173][T10688] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 293.582756][T10688] gre1: left promiscuous mode [ 293.593784][T10688] bond2: left promiscuous mode [ 293.603429][T10688] geneve2: left promiscuous mode [ 293.623942][T10688] bridge1: left promiscuous mode [ 293.629512][T10688] bridge1: left allmulticast mode [ 293.638210][T10688] bridge2: left promiscuous mode [ 293.643337][T10688] bridge2: left allmulticast mode [ 293.727580][T10207] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.738187][T10207] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.758287][T10207] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.790485][T10207] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.880680][T10207] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.917511][T10207] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.990485][T10203] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc7 [ 294.046629][T10716] ip6gre1: entered allmulticast mode [ 294.052182][T10207] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.077327][T10207] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.232590][T10732] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 294.706731][T10711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.997901][T10769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.407890][T10786] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 295.880897][T10796] syzkaller0: entered promiscuous mode [ 295.894617][T10796] syzkaller0: entered allmulticast mode [ 296.545472][T10822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.575613][T10832] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.589789][T10822] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.629770][T10822] [ 296.632138][T10822] ============================================ [ 296.638291][T10822] WARNING: possible recursive locking detected [ 296.644456][T10822] syzkaller #0 Not tainted [ 296.648875][T10822] -------------------------------------------- [ 296.655029][T10822] syz.3.1475/10822 is trying to acquire lock: [ 296.661092][T10822] ffff888034254e60 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: __ethtool_get_link_ksettings+0x109/0x250 [ 296.672265][T10822] [ 296.672265][T10822] but task is already holding lock: [ 296.679631][T10822] ffff888034254e60 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670 [ 296.689320][T10822] and the lock comparison function returns 0: [ 296.695391][T10822] [ 296.695391][T10822] other info that might help us debug this: [ 296.703450][T10822] Possible unsafe locking scenario: [ 296.703450][T10822] [ 296.710904][T10822] CPU0 [ 296.714181][T10822] ---- [ 296.717455][T10822] lock(&dev_instance_lock_key#3); [ 296.722667][T10822] lock(&dev_instance_lock_key#3); [ 296.727881][T10822] [ 296.727881][T10822] *** DEADLOCK *** [ 296.727881][T10822] [ 296.736022][T10822] May be due to missing lock nesting notation [ 296.736022][T10822] [ 296.744337][T10822] 2 locks held by syz.3.1475/10822: [ 296.749537][T10822] #0: ffffffff8fdbd640 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 296.758627][T10822] #1: ffff888034254e60 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670 [ 296.768759][T10822] [ 296.768759][T10822] stack backtrace: [ 296.774649][T10822] CPU: 1 UID: 0 PID: 10822 Comm: syz.3.1475 Not tainted syzkaller #0 PREEMPT(full) [ 296.774674][T10822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 296.774686][T10822] Call Trace: [ 296.774693][T10822] [ 296.774701][T10822] dump_stack_lvl+0xe8/0x150 [ 296.774726][T10822] print_deadlock_bug+0x279/0x290 [ 296.774753][T10822] __lock_acquire+0x24bf/0x2cd0 [ 296.774774][T10822] ? __lock_acquire+0x683/0x2cd0 [ 296.774795][T10822] ? rtnl_newlink+0x148e/0x1bd0 [ 296.774823][T10822] ? rtnetlink_rcv_msg+0x802/0xc00 [ 296.774849][T10822] ? netlink_rcv_skb+0x226/0x4a0 [ 296.774866][T10822] ? netlink_unicast+0x7bb/0x940 [ 296.774892][T10822] ? netlink_sendmsg+0x813/0xb40 [ 296.774911][T10822] ? ____sys_sendmsg+0x9b9/0xa20 [ 296.774930][T10822] ? ___sys_sendmsg+0x2a5/0x360 [ 296.774948][T10822] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 296.774968][T10822] ? do_syscall_64+0x174/0x580 [ 296.774986][T10822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.775010][T10822] ? __ethtool_get_link_ksettings+0x109/0x250 [ 296.775035][T10822] lock_acquire+0x106/0x350 [ 296.775053][T10822] ? __ethtool_get_link_ksettings+0x109/0x250 [ 296.775084][T10822] __mutex_lock+0x19d/0x1590 [ 296.775103][T10822] ? __ethtool_get_link_ksettings+0x109/0x250 [ 296.775129][T10822] ? lockdep_hardirqs_on+0x7a/0x110 [ 296.775146][T10822] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 296.775182][T10822] ? __wake_up_common_lock+0x195/0x1f0 [ 296.775211][T10822] ? __ethtool_get_link_ksettings+0x109/0x250 [ 296.775239][T10822] ? __pfx___mutex_lock+0x10/0x10 [ 296.775262][T10822] ? igmp_group_added+0x238/0x910 [ 296.775282][T10822] ? igmpv3_del_delrec+0x204/0x710 [ 296.775304][T10822] __ethtool_get_link_ksettings+0x109/0x250 [ 296.775332][T10822] bond_netdev_event+0x643/0xf80 [ 296.775360][T10822] ? __pfx_bond_netdev_event+0x10/0x10 [ 296.775392][T10822] ? ipmr_device_event+0x1f6/0x220 [ 296.775422][T10822] notifier_call_chain+0x1a5/0x3d0 [ 296.775451][T10822] __dev_notify_flags+0x1aa/0x310 [ 296.775471][T10822] ? __pfx___dev_notify_flags+0x10/0x10 [ 296.775489][T10822] ? __dev_change_flags+0x5f1/0x820 [ 296.775509][T10822] ? __pfx___dev_change_flags+0x10/0x10 [ 296.775531][T10822] netif_change_flags+0xde/0x1b0 [ 296.775558][T10822] dev_change_flags+0x128/0x260 [ 296.775589][T10822] vlan_device_event+0x1b4e/0x1f00 [ 296.775625][T10822] ? packet_notifier+0xf1b/0xf70 [ 296.775645][T10822] ? br_device_event+0x282/0x9c0 [ 296.775664][T10822] ? __pfx_phonet_device_notify+0x10/0x10 [ 296.775695][T10822] ? __pfx_vlan_device_event+0x10/0x10 [ 296.775724][T10822] ? bcm_notifier+0xa9/0x890 [ 296.775741][T10822] ? raw_notifier+0x9d/0x7d0 [ 296.775768][T10822] ? cgw_notifier+0x314/0x380 [ 296.775789][T10822] notifier_call_chain+0x1a5/0x3d0 [ 296.775816][T10822] __dev_notify_flags+0x1aa/0x310 [ 296.775835][T10822] ? __pfx___dev_notify_flags+0x10/0x10 [ 296.775851][T10822] ? __dev_change_flags+0x5f1/0x820 [ 296.775871][T10822] ? __pfx___dev_change_flags+0x10/0x10 [ 296.775892][T10822] ? __local_bh_enable_ip+0xd0/0x130 [ 296.775913][T10822] netif_change_flags+0xde/0x1b0 [ 296.775933][T10822] do_setlink+0xdd6/0x4670 [ 296.775956][T10822] ? __pfx_do_setlink+0x10/0x10 [ 296.775973][T10822] ? __lock_acquire+0x683/0x2cd0 [ 296.776004][T10822] ? __mutex_trylock_common+0x15f/0x270 [ 296.776031][T10822] ? __pfx___mutex_trylock_common+0x10/0x10 [ 296.776056][T10822] ? rcu_is_watching+0x15/0xb0 [ 296.776076][T10822] ? trace_contention_end+0x3d/0x140 [ 296.776101][T10822] ? __mutex_lock+0x30f/0x1590 [ 296.776125][T10822] ? rtnl_newlink+0x8a3/0x1bd0 [ 296.776162][T10822] ? __pfx___mutex_lock+0x10/0x10 [ 296.776187][T10822] ? ns_capable+0x89/0xe0 [ 296.776207][T10822] ? rtnl_link_get_net_capable+0xd3/0x310 [ 296.776230][T10822] rtnl_newlink+0x148e/0x1bd0 [ 296.776266][T10822] ? __pfx_rtnl_newlink+0x10/0x10 [ 296.776294][T10822] ? __lock_acquire+0x683/0x2cd0 [ 296.776314][T10822] ? __lock_acquire+0x683/0x2cd0 [ 296.776336][T10822] ? __lock_acquire+0x683/0x2cd0 [ 296.776359][T10822] ? unwind_next_frame+0x8f/0x2550 [ 296.776383][T10822] ? unwind_next_frame+0x8f/0x2550 [ 296.776407][T10822] ? is_bpf_text_address+0x26/0x2b0 [ 296.776434][T10822] ? __lock_acquire+0x683/0x2cd0 [ 296.776457][T10822] ? kernel_text_address+0xa5/0xe0 [ 296.776484][T10822] ? __kernel_text_address+0xd/0x30 [ 296.776510][T10822] ? unwind_get_return_address+0x4d/0x90 [ 296.776532][T10822] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 296.776559][T10822] ? arch_stack_walk+0xfb/0x150 [ 296.776586][T10822] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 296.776616][T10822] ? __pfx_rtnl_newlink+0x10/0x10 [ 296.776650][T10822] ? __pfx_rtnl_newlink+0x10/0x10 [ 296.776678][T10822] rtnetlink_rcv_msg+0x802/0xc00 [ 296.776705][T10822] ? kasan_save_track+0x3e/0x80 [ 296.776732][T10822] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 296.776760][T10822] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.776790][T10822] ? __lock_acquire+0x683/0x2cd0 [ 296.776815][T10822] netlink_rcv_skb+0x226/0x4a0 [ 296.776836][T10822] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.776865][T10822] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.776890][T10822] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.776910][T10822] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.776933][T10822] netlink_unicast+0x7bb/0x940 [ 296.776967][T10822] netlink_sendmsg+0x813/0xb40 [ 296.776990][T10822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.777012][T10822] ? aa_sock_msg_perm+0xf1/0x1b0 [ 296.777040][T10822] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 296.777064][T10822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.777084][T10822] ____sys_sendmsg+0x9b9/0xa20 [ 296.777104][T10822] ? __might_fault+0xaf/0x130 [ 296.777131][T10822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.777161][T10822] ? import_iovec+0x73/0xa0 [ 296.777184][T10822] ___sys_sendmsg+0x2a5/0x360 [ 296.777203][T10822] ? __lock_acquire+0x683/0x2cd0 [ 296.777224][T10822] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.777246][T10822] ? futex_wait+0x2a2/0x390 [ 296.777284][T10822] ? __fget_files+0x2a/0x420 [ 296.777307][T10822] ? __fget_files+0x3a2/0x420 [ 296.777334][T10822] __x64_sys_sendmsg+0x1bd/0x2a0 [ 296.777356][T10822] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 296.777380][T10822] ? rcu_is_watching+0x15/0xb0 [ 296.777404][T10822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.777425][T10822] do_syscall_64+0x174/0x580 [ 296.777443][T10822] ? trace_irq_disable+0x3b/0x140 [ 296.777471][T10822] ? clear_bhb_loop+0x40/0x90 [ 296.777493][T10822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.777513][T10822] RIP: 0033:0x7fbbc959ce59 [ 296.777531][T10822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.777547][T10822] RSP: 002b:00007fbbca4ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.777567][T10822] RAX: ffffffffffffffda RBX: 00007fbbc9815fa0 RCX: 00007fbbc959ce59 [ 296.777583][T10822] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 296.777597][T10822] RBP: 00007fbbc9632d6f R08: 0000000000000000 R09: 0000000000000000 [ 296.777610][T10822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.777622][T10822] R13: 00007fbbc9816038 R14: 00007fbbc9815fa0 R15: 00007ffc623729b8 [ 296.777645][T10822] [ 297.479876][T10842] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 297.547035][T10845] __nla_validate_parse: 9 callbacks suppressed [ 297.547053][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1481'.