last executing test programs: 4.596738469s ago: executing program 1 (id=5072): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000008340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0xa}}], 0x1, 0x4810) 3.736706225s ago: executing program 4 (id=5079): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0x8}, {0x6, 0x0, 0x0, 0x1}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000600)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, "341517c1b7df60c7"}}}}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, [@default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 3.717318562s ago: executing program 0 (id=5080): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="12000000400000000400000002"], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r2, &(0x7f00000003c0), &(0x7f0000000580)=@tcp6=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002080)={r2, &(0x7f0000001f80), 0x0}, 0x20) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0xc}], 0x1, 0x4044810) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "63d038"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x36}, 0x28) 3.667374984s ago: executing program 4 (id=5081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5c8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$inet_udp(0x2, 0x2, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r11], 0x78}}, 0x0) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r13 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r10, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x3, 0xff, 0x100}, "da2d723c95585d243972f650"}}}}, 0x3e) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.620504101s ago: executing program 1 (id=5082): r0 = socket$inet(0x2, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a0001fb31257900efffffff10"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1a000004066f5049006e8684ad4ba5ba2d7d51e8c7f58e38aa96c804811d7fbc07615e432a748599b81d8728ea47026d486538187c50"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r4, 0x0, 0x31, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$EXT4_IOC_SETFSUUID(r6, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "757aadcf762db67aaa456631fef2ad57"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030070967a320000000068000000060a010400000000000000000100000008000b4000000000400004803c0001800b00010065787468647200002c00028008000140000000080800035a0000000d080004400000006a080006400000000405000200830000000900010073797a3000000000140000001100010000000000000000000700000a1940"], 0xdc}}, 0x0) socket$key(0xf, 0x3, 0x2) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x4000000) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000f00)=@newqdisc={0x590, 0x24, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x7, 0x2}, {0xf, 0xc}, {0x5, 0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_tbf={{0x8}, {0x460, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x0, 0x81, 0x9, 0x9, 0x1b}, {0x6, 0x2, 0x6, 0x3, 0x9, 0xffffffff}, 0x200, 0x8, 0x595}}, @TCA_TBF_PARMS={0x28, 0x1, {{0xce, 0x0, 0x5, 0xc000, 0xd, 0xa9c0}, {0x5f, 0x2, 0x6, 0x9, 0x9, 0x6}, 0x4, 0x9, 0x215e}}, @TCA_TBF_PBURST={0x8, 0x7, 0x43e}, @TCA_TBF_PTAB={0x404, 0x3, [0x149, 0x3, 0x1, 0x5, 0xfff, 0x2, 0x3, 0x7, 0x3, 0x3, 0x64ab, 0x4, 0x6, 0x0, 0x6, 0x5, 0x7, 0x0, 0x100, 0x361, 0x0, 0xd39c, 0x9, 0xa, 0x3, 0x3fa, 0x200000, 0x2ec, 0x80000000, 0x7a8, 0x6, 0x6, 0x5, 0x48, 0x81, 0x4, 0x100, 0x7, 0x0, 0x4, 0x0, 0x1000, 0xfffffff1, 0x5, 0x0, 0x1, 0x0, 0x1000, 0xfffffffc, 0x0, 0xba, 0x8, 0x2, 0x83, 0xc, 0x6, 0x7, 0x4, 0x7, 0x3ff, 0x7, 0x2, 0x41, 0x40, 0x1, 0x8, 0x4, 0x5, 0xf57d, 0x1, 0x5, 0x1dde0842, 0x6, 0x8, 0x6, 0x3, 0x3d9c, 0x6, 0x4, 0xfffffff1, 0x2, 0x200, 0xff, 0x1001ff, 0x9, 0x7, 0x8, 0x9, 0x3, 0x1, 0x0, 0xef, 0x1000, 0x4000f07b, 0x3, 0xcae, 0x8, 0x8, 0xb0, 0x1, 0x3, 0x15, 0x5, 0x0, 0x6, 0x5, 0x7, 0x3, 0x4, 0x5, 0x7f, 0x200, 0x0, 0x3, 0xd, 0x2, 0x7, 0xe9, 0x7, 0xb68, 0x3, 0xffff, 0x1, 0xffa8, 0x8, 0xda, 0x80, 0x0, 0x68, 0x51, 0x2fa5, 0x3, 0x5, 0x5, 0x7f, 0x5, 0x7ff, 0x5da0, 0x5, 0x100, 0x3, 0x0, 0x80000000, 0x6, 0xfffff940, 0x7, 0x7fff, 0x80000001, 0x3, 0x12, 0x7, 0x3, 0x8, 0x7, 0x1e3, 0x9, 0x9, 0x4, 0x0, 0x60f, 0x0, 0x1, 0x0, 0x8, 0x6, 0x1, 0x1, 0x33, 0xffffffff, 0x9fb1b25, 0x100, 0x3, 0x4, 0xfffffff8, 0x0, 0x2, 0xbb, 0x222, 0xaf, 0x8000, 0xf, 0x4, 0x7fff, 0x80000000, 0x5, 0x900, 0xc80c, 0x4, 0xa74a, 0x1000, 0x400, 0x2, 0x91, 0x5, 0xabd, 0x40000000, 0xe504, 0xbd5, 0x50, 0xfff, 0x7, 0x5, 0x2, 0x7, 0x3, 0xfffffff9, 0x5, 0x7ff, 0x9, 0x8, 0x80, 0x2, 0x81, 0x8, 0x1ff, 0x10, 0x20, 0x9, 0xa2f, 0x2, 0x6, 0xd, 0x1ff, 0x3, 0xc000000, 0x7, 0x4, 0x7fff, 0x7bc, 0xfffffffc, 0x9f2, 0x229f647a, 0x3cf, 0x4, 0x7, 0x8001, 0xffffbb18, 0x1, 0x0, 0x7, 0xf25b, 0x7, 0x5, 0x100, 0xd7b, 0x5, 0x80000000, 0x8, 0x38000, 0x7, 0x80000000, 0x43, 0x7, 0x2, 0x6, 0xfffffffc]}]}}, @TCA_STAB={0xfc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4d, 0x2, 0x7, 0x0, 0x3, 0x2, 0x8}}, {0x14, 0x2, [0x0, 0x1ff, 0x4, 0x401, 0x1, 0x7, 0x71, 0x9]}}, {{0x1c, 0x1, {0x11, 0xb8, 0x4, 0x2, 0x0, 0x37440000, 0xffff, 0x7}}, {0x12, 0x2, [0x100, 0xf, 0x4, 0x0, 0x3, 0xf15, 0x81]}}, {{0x1c, 0x1, {0x8, 0x9, 0xfffd, 0x1, 0x1, 0x4, 0x9, 0x2}}, {0x8, 0x2, [0x5, 0x10]}}, {{0x1c, 0x1, {0x0, 0x9, 0x4, 0x7, 0x1, 0x7fffffff, 0x0, 0x8}}, {0x14, 0x2, [0x400b, 0x4, 0xe9e, 0x6, 0x110a, 0xaaa6, 0x8, 0x2]}}, {{0x1c, 0x1, {0xd, 0x6, 0xdd, 0xa99, 0x0, 0x80000001, 0x6, 0x1}}, {0x6, 0x2, [0xfffa]}}, {{0x1c, 0x1, {0xfe, 0x7f, 0x2, 0x5, 0x1, 0xc90e, 0xa130}}, {0x4}}]}]}, 0x590}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0xf, &(0x7f0000000600)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000002c0)="96bced8af9c8", 0x6}], 0x2, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x0, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x30}, 0x42090) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 3.245435328s ago: executing program 0 (id=5084): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="05030200000000002c00128009000100626f6e64f3ffffff1c00028005000100010000000800030010000000080002004452"], 0x4c}}, 0x0) 3.181287693s ago: executing program 1 (id=5085): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x67d2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b99cdfe10723f0f0c10400000000", 0x0, 0x800064fd, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.901429013s ago: executing program 0 (id=5087): sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030f000000000000000007000000300002"], 0x44}, 0x1, 0x0, 0x0, 0x8040001}, 0x0) unshare(0x24020400) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x100000000000003) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000200)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)={0x10c, r8, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x3}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x5a000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x1}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 2.498194325s ago: executing program 3 (id=5088): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0x481824ec, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x42000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.277134612s ago: executing program 0 (id=5090): syz_emit_ethernet(0x86, &(0x7f0000002bc0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x50, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@srh={0x2b, 0x0, 0x4, 0x0, 0x9, 0x28, 0x2}, @srh={0x2f, 0x0, 0x4, 0x0, 0xc, 0x28, 0xfe}, @hopopts={0x87}, @dstopts={0x3b}]}}}}}}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000005000000b7080000000000007b8af8ff00000000b7080000000001007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000100000000000000600ac000000000000000000000000000000170056eebf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) syz_emit_ethernet(0x86, &(0x7f0000002bc0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x50, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@srh={0x2b, 0x0, 0x4, 0x0, 0x9, 0x28, 0x2}, @srh={0x2f, 0x0, 0x4, 0x0, 0xc, 0x28, 0xfe}, @hopopts={0x87}, @dstopts={0x3b}]}}}}}}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000005000000b7080000000000007b8af8ff00000000b7080000000001007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000100000000000000600ac000000000000000000000000000000170056eebf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) (async) 2.220554048s ago: executing program 1 (id=5091): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000c10010000000000007000000850000001100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffff6b702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000380)={0x2, 'netpci0\x00', {0x6}, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000007a0000009c0000000000000024000000000000009500200d00000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xffffffffffffff6c}, 0x3f) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c020000020000000800351477ff242462d5edf3c3b054167441e292c0a795e24e8014ab5deb5e8847c9ed51249b35c04a2048ef2df467eac897cad27c67cf562a", @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x2084}, 0x8004) write$nci(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="500403"], 0x7) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500010000", @ANYRES32=0x0, @ANYBLOB="1a8904000a00000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x130, 0x258, 0x0, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @local, [0xff, 0xffffff00, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0x0, 0xffffff00], 'syz_tun\x00', 'ipvlan0\x00', {}, {0xff}, 0x29, 0x7, 0x2, 0x21}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x8], 0x4, 0x10, 0x2}}, @common=@icmp6={{0x28}, {0x7bda1cc154d64847, 'nq', 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@remote, @private1, [0x0, 0xff000000, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'nicvf0\x00', 'macvlan0\x00', {}, {}, 0x16, 0x9, 0x4, 0x20}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x24004050) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) 2.116876669s ago: executing program 0 (id=5092): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000024000108000a00", @ANYRES32], 0x54}}, 0x0) 1.884725629s ago: executing program 3 (id=5093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @void, @ipv4=@generic={{0x6, 0x4, 0x2, 0x29, 0x401, 0x67, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010102, @loopback, {[@generic={0x7, 0x3, "83"}]}}, "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"}}, 0x405) 1.735693404s ago: executing program 4 (id=5094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) setsockopt$inet6_buf(r2, 0x29, 0x23, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x24040095}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x24040095}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x4040082) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000001b0a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000900)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f00000003c0)={0x130, 0xb, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}]}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff8}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x100000000}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_ADT={0xa8, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7ff}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_hsr\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'gretap0\x00'}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x34}}]}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x8c011}, 0x20040010) socket$kcm(0x29, 0x7, 0x0) (async) r6 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r6, &(0x7f0000000880)={&(0x7f0000000040)=@in={0x2, 0x4e20, @multicast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000980)="2635f18620d6d35e78936e4262cfa72cc88906e55cc9ec5fdebb9a5eaca7d67a5f15d1ba0e7350bf391d30cfa551a8fd589699a64f100400000000000000bd822eb17f6d287abe3a5944a029fabbca0258685d0ba30d0f6a3cec7931625a62eaa83af2a121bd8ca150d3353f9baaeab70fbd946f50b43d2e2710912002d201f4f9ad00f2bb3c4a7f62b8f15e1a7c5af8b650b34570c1f87786e2fe7f1b389dcca5fff0f43ee94eacde6bccefcb63f248c69be49fd2731b72c4cccb808f99a8a966d2ff607b55f18c07aa303a878ce0823715bef3", 0xd4}, {&(0x7f0000000a80)="e37cbd5641f794e709a55d9afc23d8128c8eb9e436888bcbd6e3b2a73b387751854adc8ac8e8f82676309ae4a870be31e2cc93876a5d6e69db759f05253116c2c16035ae6ecaa5e6a6ec5c7c1a3aee97e783cba54dc738f2c2047b692bda402a274037e3f79ba83d76cafd8e443994d35eca45ff35ce4fd6bff70a4b8dbe32ef425a9376e9bc454c2a6525ba443c04d2814f618996f7818eb0b6246a4392af5fe390e7d368df7b58e783a4635cfdcecd5041468e7560fe152db93a31127c8d1ce69091f2c3094c962329d64e9474a2d4edd8affea887a762b24d8baa52", 0xdd}, {&(0x7f0000000500)="dec701ff5695696e86de834b434ab5f8b4ac7ab6a5b4475b6be3c7e74faf7c52de3d784ca7933e12c7abc00843b30d5a5137254e17e9197a245d9f62a88fbc67254de4adcb9a319fbb5773a942733f38c7743f9fdcc88646e12443456453c137aa4df3b2252e55151f36ffc5911057ef52758fc3f0c133204ea22e8ff927ab7862cb9f834a73ba984b3f2766a50a468c86a4333681fa56d673c0b3c831a09f8f31615bbad9cf8028b941be3a0df635dc62d4a02fab6bd05b568fab2e19f628f269802a21b21c4681ed712214cdb81a9ca2e6fae5700adae06de7500ea0", 0xdd}, {&(0x7f0000000600)="72242fce2a0a04f5f7b04d35ddb3abfee6c994c7f1af2dd1c6bea17faa1a7f98a47df55975cebd98e8d2245e09ca973f204096a82b1f1e6f54e2a76faa220650566053503104ca1916705718a788cdad22848f214aff29d8b817bb48b10073a3f739b8e3d0469b90e74dd75e9c02d45d912009aede2df594896492654a6430ccda174774de777270fef0e1d8b5b407ff5534bb3531fcbd7d96182e5a58aded3b6c10cbd1ba84a83dc5ac3d2ab2d23a38071bb0d60cd53f917cfde6629e1d5bcbd7632efb1f7920cc070da55b39efd182", 0xd0}, {&(0x7f0000000700)="c51848385c9d5846e46b23b8f63c98830ff950527648b20cc669078d1076342577e8ea0f098669da4eee0de242dcd9caf181184751ab6b759548340ba89bb823659c79e1c3ed01fbdbf410a2ed597a3f7d8436fc5736ec79e5bbaeec00e705078c51f75c6d4e0d3d67f1b8297acf0713ff88a77706f3f846046d79ef56929deec8b13019f7d250a16a9535a4b43db476522b97964c018e6550bc54d5617ba637606a77a84dde73f829626ee0b224931f5f43489c7b720cafd6b0005ce57854ceec2925d2de54c6d831883007e63dce8163c9700e84285620720d66083e72915ee3bad3fecd9a650ee6", 0xe9}, {&(0x7f0000000380)="6086ebc97b703e75fbe8efa628d6de56223f17020ac4a5c002f04a530aaefb277bd04f770ef46d5d58939d1ed8f4c3120b6ccc5b73d02d70a0", 0x39}], 0x6}, 0x84) close(r0) (async) close(r0) 1.680263292s ago: executing program 1 (id=5095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x80) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x14, 0x2, 0x7, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) read$rfkill(r5, &(0x7f0000001780), 0x8) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "fd"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x6e, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c2100801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e640000000800074000000003"], 0x104}}, 0x0) 1.651095694s ago: executing program 0 (id=5096): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100)=0x800, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00012abd7000fddbdf250c00000005002f000100000005003000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004c7800440067000008069078ac1414bbec14142e441c0c71ffffffff000000057f00000100000000e0000001000000d14e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500180009078fffe"], 0x0) unshare(0x6a040000) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x20004010) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRESOCT, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRES16, @ANYBLOB="2848fa770bd558a31e29a0"], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x12, r4, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000080)=[{&(0x7f00000000c0)="fb", 0x1}], 0x1, 0x0) close(r8) socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x400}, 0x1c) splice(r7, 0x0, r8, 0x0, 0xfffd, 0x5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 1.568142015s ago: executing program 4 (id=5097): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) writev(r2, &(0x7f0000000700)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000280)="038de5e47077295c03a7ef3f0055696fb6e0c92777d882e289a0760031185da3c627e9ef0fbb75f253d5c62aaa994194aef46ce2df8daabde47b975304d5bf99c45c5b01515ee88612ddef1e12711669513bf6f9d15e06a6aad9cc00b8a450e3d2e8a712a5", 0x65}, {&(0x7f0000000340)="7f4404f266cb824a47d91929982d683dd1755136aef820b3415bf98bac77b330b2266384a42baef90198a610d00094567cbd49086630509fc1388cbd39982daf1c76bc893100f48321fb1cb4965c680844034dad63", 0x55}, {&(0x7f0000000500)="4a25ffb6191b6a7b6ffd6eaab16d116db6408ce058fc55b9a00522e8cb8754809d131b318d129193aec33f370535f9fbf7e3412252a248659d1cb3a3adbfaddb87a0868b4a2c2f4ec1d07be4248806d6a143a720b04fabe568104bdf7cd95d1860862b18a66ae459831114b4b6cfa7a5bb6b356c31f13c009df03a40b984b1876e37e78601929cd99b4d80ea33ee421423300a749556b26f734140eaaa85272769166067f7031485924cac62f9bc6ba3c4960e3eae6e194ee6fa1e87d92f170242bcf0967e0adcd02907b5d3ef95b661037968c1fa4445f88e3d590ac6b2fb4d905976f474719bc0e02b1b26faa8673a64db65d43affc27d", 0xf8}, {0x0}], 0x5) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xe19, 0x4e, 0x2}, {0x802, 0x40}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.460048665s ago: executing program 3 (id=5098): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x440e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e576002002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000880)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000000640)="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", 0x17f}], 0x3}, 0x0) 1.253330339s ago: executing program 1 (id=5099): socket(0x400000000010, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x1, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r4, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r4, &(0x7f0000000000)='\"', 0x1) recvmmsg(r4, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="01362019010100528035b5ea47010d0600000000000000ff00f508f90368debbbae8f619a8895f04391d4360c195828b4e00000000ebfb69"], 0x1d) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0xffff, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c080}, 0x2c048000) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0102000000000000000067000000080003"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a31000000002800048008000240000000000800014000"], 0xf4}}, 0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x9, 0x5, 0x9, 0x2, 0x80000001}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r6, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x9, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x1, 0xc040) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) socket$inet(0x2, 0x80001, 0x84) 1.252553385s ago: executing program 4 (id=5100): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x53}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0c0100004000070126bd700000000000047c00000c00c280080009"], 0x10c}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) r4 = accept$alg(r2, 0x0, 0x0) r5 = accept(r4, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x7e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80d5) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @private}, &(0x7f0000000200)=0xc) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x4c, 0x2, {0x10, "000000000000000000001000000010dc"}}}]}, 0x48}}, 0x0) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x5, r6}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.135365772s ago: executing program 2 (id=5101): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @in={0x2, 0x4e21, @multicast1}, @llc={0x1a, 0x7, 0xfe, 0x4, 0xd, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock, 0x5, 0x0, 0x0, 0x0, 0x1ff, &(0x7f0000000040)='batadv_slave_1\x00', 0x1, 0x4, 0x7}) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x200, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x2eb8}, 0x1c) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x5, 0xffffffff, 0x8000]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1000}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'vlan1\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000380)={'wg1\x00'}) close(r0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x28}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r5, &(0x7f0000000440)="51b0c1a881cbb08e3d53ae1ea1aa9927080120a3f3e76adfde2d77f86e72ec5c2bed7815607f0a9a4ee20e84c318e88fd07a0a84eeee77c2ede92396f477add77903110598a8a3a44e0536307fd4b47d2d58119e591244bbc303bd409721dbb1b549c53d253ae6ab4a1290a8f1a564b2339f0e8f8dd591591aa88d5f99b577e12d48858f9a92edcacbcf959bcd5ff0a93c67bfb55f7989403a7b3713bf970447962c9e123e79a745eca38f8e0cdbadd8b22e7fa357bbedde11fd1eb212cef8423eb0d2b0eb9af9afab4940f60038f37c22a80c8e8da38661e7f54862", &(0x7f0000000540)=@udp6=r1}, 0x20) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000640)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/39, 0x27, 0x1, &(0x7f0000000600)=""/60, 0x3c}, &(0x7f0000000680)=0x40) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f00000006c0)) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000700), &(0x7f0000000740)=0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000780)={'filter\x00', 0x0, 0x0, 0x0, [0xffff, 0x9, 0x0, 0x7b0f, 0x9, 0x2]}, &(0x7f0000000800)=0x78) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={0xffffffffffffffff, r3, 0x25, 0x9, @void}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000880)={r8}, 0x8) setsockopt$inet_group_source_req(r9, 0x0, 0x2f, &(0x7f00000008c0)={0x1, {{0x2, 0x4e21, @rand_addr=0x64010101}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}}}, 0x108) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000000a00)={0x0, 0x71, "535b3abb386d529be8a3820f2b1fa2a98c0de8bc5ff2ed1d13253d74ad7930e5969b527ff054d190933070b25b10abe398ba506c95024aa6b936d9ddcae2b03839f8cf8c359a7a2c61664ef631cf7a535fa0e0907de11b948b77db68baa7ba406fe2222a8dd7c0f6df5ed3dc85450f2d88"}, &(0x7f0000000a80)=0x79) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000ac0)={r10, 0x1}, 0x8) setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, &(0x7f0000000b00)=[{0x3, 0x2, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x2}, 0xfe, 0xfe}, {0x3, 0x2, {0x2, 0x1, 0x1}, {0x1, 0x1}, 0x1, 0xff}, {0x3, 0x7e3, {0x2, 0xf0, 0x4}, {0x2, 0x0, 0x1}, 0xfd, 0x2}, {0x3, 0x1, {0x2, 0x1}, {0x0, 0xff, 0x1}, 0xfd, 0xfd}], 0x80) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b80)={'wlan0\x00'}) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r12) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r11, 0x84, 0x1b, &(0x7f0000000c00)={r10, 0x54, "953018318d5abc8e2d2ab30dfd91543a157b40e889fe1b0b032e2fced52da7264a6c68359bec401afcae4bb8d7d706a30414a79d6e3834e5d30c2947eeff6225a15f767eca5fc68fb85df8a8cafbae2a93cbd8e8"}, &(0x7f0000000c80)=0x5c) 1.087936438s ago: executing program 3 (id=5102): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x18, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x60, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="100028bd7000ffdbdf2505000000080001007063690011000200303030303a30303a31302e300000000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000080001007063690011000200303030303a30303a31302e30000000000800030002000000080001007063690011000200303030303a30303a31302e300000000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000e0001006e657464657673696d0000000f0002006e657564657673696d3000000800030002000000080001007063690011000200303030303a30303a31302e3000000000080003000000000018bc4a85304bba7849dbb860d87efd4c1c3b99efef86831bb0b8b3a6f8b7bbf58cc45410f7072bfbc9f0596f1ee65b5b93998cbafae241e18eee5152d0c9a6f353d7bf66d17cd0c4f8a51406308f47022bd39155e97114435b44979b4f0fca62fc9ce2ed2808b0a03270d53fb4"], 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000100) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000b40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="70020000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf250a0000003c00078008000100060000000800020007000000080001001d0e00000c000400e80000000000000008000100080000000c00040001040000000000002c000780080001007f0000000c000300060000000000000008000100040000000c0003000a00000000000000c40001801400028008000200000a03000800010014000000380004001400010002004e23e00000020000000000000000200002000a004e2300000006fe8000000000000000000000000000bb060000005400028008000300000100000800020000000080080004000900000008000300c0ffffff08000200ff0000000800020000000000080001001e0000000800020009000000080001001d000000080002000800000008000300ff0f00000d0001007564703a73797a30000000000800030005000000100005800c00028008000400ac0000002400038008000200050000000800030007000000080002000100ffff08000100040000000c000380080002000d00000078000180140002800800040008000000080001001200000044000400200001000a004e210000000400000000000000000000ffffac1414bbb0410000200002000a004e2400000006fe880000000000000000000000000101ffffff7f080003008b00000008000300040000000c000280080003000900000018000280040004000400040008000100000000000400040024000980080001009c0300000800010001000000080001000000010008000200060000003c00058024000280080002000000000008000200fd000000080001000e000000080002000700000014000280080002000200000008000400ff070000"], 0x270}, 0x1, 0x0, 0x0, 0x40800d0}, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000540)={'gretap0\x00', r1, 0x7800, 0xf880, 0x1, 0x3, {{0x28, 0x4, 0x2, 0x5, 0xa0, 0x64, 0x0, 0x40, 0x2f, 0x0, @multicast2, @loopback, {[@noop, @rr={0x7, 0x13, 0xf1, [@rand_addr=0x64010101, @remote, @broadcast, @local]}, @cipso={0x86, 0x2d, 0x3, [{0x2, 0xe, "7653851f1b79763a04646ffe"}, {0x2, 0x7, "5ac3941334"}, {0x4303f59a5f245ad2, 0x12, "6eac8772605a5530d41f824c6eed145b"}]}, @generic={0x83, 0x3, "aa"}, @ssrr={0x89, 0x13, 0x66, [@private=0xa010101, @multicast1, @dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x6d, 0x3, 0x7, [{@broadcast, 0x3}, {@multicast2, 0x400}, {@broadcast, 0x8}, {@local, 0x7}]}, @noop, @ra={0x94, 0x4}, @generic={0x44, 0x6, "4a8be075"}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0xff}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48105}, 0x0) r7 = accept4(r4, &(0x7f00000000c0)=@tipc=@name, &(0x7f0000000180)=0x80, 0x80000) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x5) r9 = accept4(r8, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0xffff}}, 0xd, 0x0, 0x45, 0xc0000000, 0x50, 0x401, 0x8}, &(0x7f0000000500)=0x9c) setsockopt$MRT_PIM(r7, 0x0, 0xcf, &(0x7f00000001c0)=0x3, 0x4) 987.923512ms ago: executing program 2 (id=5103): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0x481824ec, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x42000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 849.441297ms ago: executing program 2 (id=5104): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)=0xfffff1aa, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x38}}, 0x20000044) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@delchain={0x34, 0x2e, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}, {0x0, 0x1a}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 792.493913ms ago: executing program 4 (id=5105): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x37}, 0x100300, 0x0, 0x3, 0x9, 0x9, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@local, 0x0, 0x0, 0x2, 0x1, 0x5, 0xb}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x500300, 0x0, 0x2, 0x0, 0x3, 0x85}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0xa1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3b}}}}}}}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x20008000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x8}}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x58}}, 0x8000) 733.575863ms ago: executing program 3 (id=5106): r0 = socket(0x2, 0x2, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 365.803282ms ago: executing program 2 (id=5107): sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0xd8, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440100000103010100000000000000000300000280000b800800164000000003400004803c0003800800024000000009080003400000000905000100080000000800024000000eb30500010000000000080003400000800108000240000001e12c001980080001000000000008000200010000020000000000000000080001000000000008000200010800000800154000000001b0000f800c000a8008000140000000000800084000000001900003802c000180140003"], 0x144}, 0x1, 0x0, 0x0, 0x841}, 0x40050) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x208001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'macvtap0\x00', 0x100}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f00000002c0)={r4}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x46, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 300.71891ms ago: executing program 3 (id=5108): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000020000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000008bcc3e6f0000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f000000000000000500000000000000fefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002"], 0x140}}, 0x844) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="5582762b648468d7e88a48fdd24aa7f787cd410590461b4abb4eb23de0009019940fb0242748eeeffd5462d6c06e52a5d857d70e147ba5c210a160f21d7cdf160e8b0a782254189b33c61333d930c8b1d6b162779e24fd67629ee497d04b65799150bed23ba23aed6c33ad2325fd3fd85b25fc031aa73da6c39754f75780ffaca5da8d75b56c5495be8be33476b6dc5fe7df5b5f958a985908ff67d49a592035c22513d5346db6ba3aec2ae830be84b09e0c2cb3dd067f54fb45cfc96223b26cacd34cdbb19931ba334c8bba6decf496"], 0x110) r3 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xe1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000c, 0x12, r1, 0x0) r4 = socket(0x22, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x61d9, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x806, @empty}, 0x1c) socket(0x1d, 0x1, 0x2) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xca) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010700000000fbdbdf250103000000004e2200000100ffff00"/56, @ANYRES32=0x0, @ANYBLOB="050800000300000008000000800000000800030011"], 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x2004c090) 171.15253ms ago: executing program 2 (id=5109): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$x25(0xffffffffffffffff, &(0x7f0000000000)="416d968dbac335aaaa441b", 0xb, 0x0, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r3, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r4}, 0x38) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x10000, 0x4, 0x20}, &(0x7f00000003c0)=0x10) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x4, @empty, 0x8}, 0x1c) 0s ago: executing program 2 (id=5110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) writev(r2, &(0x7f0000000700)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000280)="038de5e47077295c03a7ef3f0055696fb6e0c92777d882e289a0760031185da3c627e9ef0fbb75f253d5c62aaa994194aef46ce2df8daabde47b975304d5bf99c45c5b01515ee88612ddef1e12711669513bf6f9d15e06a6aad9cc00b8a450e3d2e8a712a5", 0x65}, {&(0x7f0000000340)="7f4404f266cb824a47d91929982d683dd1755136aef820b3415bf98bac77b330b2266384a42baef90198a610d00094567cbd49086630509fc1388cbd39982daf1c76bc893100f48321fb1cb4965c680844034dad63", 0x55}, {&(0x7f0000000500)="4a25ffb6191b6a7b6ffd6eaab16d116db6408ce058fc55b9a00522e8cb8754809d131b318d129193aec33f370535f9fbf7e3412252a248659d1cb3a3adbfaddb87a0868b4a2c2f4ec1d07be4248806d6a143a720b04fabe568104bdf7cd95d1860862b18a66ae459831114b4b6cfa7a5bb6b356c31f13c009df03a40b984b1876e37e78601929cd99b4d80ea33ee421423300a749556b26f734140eaaa85272769166067f7031485924cac62f9bc6ba3c4960e3eae6e194ee6fa1e87d92f170242bcf0967e0adcd02907b5d3ef95b661037968c1fa4445f88e3d590ac6b2fb4d905976f474719bc0e02b1b26faa8673a64db65d43affc27d", 0xf8}, {0x0}], 0x5) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xe19, 0x4e, 0x2}, {0x802, 0x40}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) kernel console output (not intermixed with test programs): ueue_len [ 445.302628][T18900] veth1_vlan: entered promiscuous mode [ 445.444923][T19322] geneve2: entered promiscuous mode [ 445.466342][T18900] veth0_macvtap: entered promiscuous mode [ 445.501388][T19325] netlink: 'syz.1.3331': attribute type 29 has an invalid length. [ 445.535294][T18900] veth1_macvtap: entered promiscuous mode [ 445.553160][T19323] netlink: 'syz.1.3331': attribute type 29 has an invalid length. [ 445.611523][T19330] ip6gre1: entered allmulticast mode [ 445.652212][T18900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.679267][T18900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.734841][ T6228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.757583][ T6228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.809718][ T6228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.831946][ T6228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.882821][T19339] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3336'. [ 445.919694][T19337] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3335'. [ 445.940732][T19337] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 445.961952][T19337] pim6reg0: linktype set to 804 [ 446.068902][ T6228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.083819][ T6228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.151247][T19350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3338'. [ 446.174514][ T6228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.189032][ T6228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.493388][T19371] xt_hashlimit: max too large, truncated to 1048576 [ 447.012831][T19389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3348'. [ 447.046762][T19389] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3348'. [ 447.061416][T19389] Bluetooth: MGMT ver 1.23 [ 447.268781][T19394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3350'. [ 447.277725][T19394] netlink: 'syz.2.3350': attribute type 15 has an invalid length. [ 447.340869][T19394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3350'. [ 447.375970][T19398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 447.460155][T19398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 447.950763][T19413] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.958890][T19413] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.109532][T19413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.128499][T19413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.573747][T19426] team0: No ports can be present during mode change [ 448.581007][T19428] hsr_slave_0: left promiscuous mode [ 448.609590][T19428] hsr_slave_1: left promiscuous mode [ 448.695322][T19449] syzkaller0: entered allmulticast mode [ 448.705178][ T9364] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 448.725146][ T9364] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.764080][ T9364] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 448.775834][ T9364] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.822952][T19462] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 448.839371][ T9364] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 448.868859][ T9364] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.894819][ T9364] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 448.925207][ T9364] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.775924][T19498] netlink: 'syz.2.3374': attribute type 1 has an invalid length. [ 449.795476][T19498] netlink: 'syz.2.3374': attribute type 1 has an invalid length. [ 449.808811][T19498] __nla_validate_parse: 4 callbacks suppressed [ 449.808829][T19498] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3374'. [ 449.844998][T19500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3375'. [ 449.961984][T19500] geneve2: entered promiscuous mode [ 449.984005][ T9364] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 450.032874][T19502] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 450.047042][T19502] bond3 (unregistering): Released all slaves [ 450.068782][T19507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3378'. [ 450.082010][ T9364] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 450.097135][ T9364] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 450.105917][ T9364] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 450.263789][T19507] geneve2: entered promiscuous mode [ 450.322225][ T9364] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.398618][ T9364] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.418407][ T9364] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.427356][ T9364] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.739263][T19514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3380'. [ 450.750108][T19514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3380'. [ 450.768376][T19514] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 450.781085][T19525] IPVS: Scheduler module ip_vs_sip not found [ 450.807572][T19513] delete_channel: no stack [ 451.036636][T19536] netlink: 'syz.1.3386': attribute type 37 has an invalid length. [ 451.486257][T19551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3392'. [ 451.559034][T19557] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3395'. [ 451.563577][T19555] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3393'. [ 451.579606][T19557] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3395'. [ 451.603325][T19555] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.610831][T19555] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.861428][T19557] syzkaller0: entered promiscuous mode [ 451.869295][T19557] syzkaller0: entered allmulticast mode [ 451.876368][T19555] tipc: Started in network mode [ 451.892517][T19555] tipc: Node identity b2b32e2908a8, cluster identity 4711 [ 451.906492][T19555] tipc: Enabled bearer , priority 0 [ 451.914622][T19559] syzkaller0: entered promiscuous mode [ 451.927785][T19559] syzkaller0: entered allmulticast mode [ 452.165836][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3399'. [ 454.204748][T19559] tipc: Resetting bearer [ 454.282991][T19554] tipc: Resetting bearer [ 454.319202][T19554] tipc: Disabling bearer [ 454.457730][ T7436] tipc: Node number set to 3122343465 [ 454.499475][T19601] openvswitch: netlink: Flow actions attr not present in new flow. [ 454.541199][T19592] bond1 (unregistering): Released all slaves [ 454.851134][T19617] netlink: 'syz.2.3409': attribute type 1 has an invalid length. [ 454.982746][T19622] __nla_validate_parse: 2 callbacks suppressed [ 454.982770][T19622] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3409'. [ 455.096447][T19617] netlink: 'syz.2.3409': attribute type 39 has an invalid length. [ 455.378093][T19636] xt_cgroup: xt_cgroup: no path or classid specified [ 455.591518][T19643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3419'. [ 455.808265][T19648] netlink: 'syz.4.3421': attribute type 10 has an invalid length. [ 456.611447][T19673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3430'. [ 456.626552][T19673] netlink: 'syz.1.3430': attribute type 2 has an invalid length. [ 456.640062][T19674] dummy0: entered allmulticast mode [ 456.646022][T19674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3429'. [ 456.652730][T19675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3430'. [ 456.668017][T19674] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 456.676422][T19675] netlink: 'syz.1.3430': attribute type 2 has an invalid length. [ 456.923018][T19688] netlink: 'syz.0.3434': attribute type 10 has an invalid length. [ 456.932802][T19688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3434'. [ 456.943286][T19688] dummy0: entered promiscuous mode [ 456.950946][T19688] bridge0: port 3(dummy0) entered blocking state [ 456.957748][T19688] bridge0: port 3(dummy0) entered disabled state [ 456.969506][T19688] bridge0: port 3(dummy0) entered blocking state [ 456.976147][T19688] bridge0: port 3(dummy0) entered forwarding state [ 457.065957][T19691] lo: Caught tx_queue_len zero misconfig [ 457.074974][T19695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3437'. [ 457.153613][T19699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3437'. [ 457.439015][T19717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3442'. [ 457.466627][T19715] xt_cgroup: invalid path, errno=-2 [ 457.518279][T19723] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3442'. [ 457.695992][T19728] bridge3: port 1(veth5) entered blocking state [ 457.702790][T19728] bridge3: port 1(veth5) entered disabled state [ 457.731091][T19728] veth5: entered allmulticast mode [ 457.752643][T19728] veth5: entered promiscuous mode [ 457.791811][T19728] bridge3: port 1(veth5) entered blocking state [ 457.798380][T19728] bridge3: port 1(veth5) entered forwarding state [ 458.797072][T15282] bridge3: port 1(veth5) entered disabled state [ 458.837082][T19778] netlink: 'syz.0.3456': attribute type 1 has an invalid length. [ 459.155997][T19794] netlink: 'syz.0.3462': attribute type 1 has an invalid length. [ 459.202384][T19784] syzkaller0: entered promiscuous mode [ 459.258213][T19784] syzkaller0: entered allmulticast mode [ 459.275284][T19796] netlink: 'syz.2.3463': attribute type 2 has an invalid length. [ 459.311592][T19794] macvlan2: entered promiscuous mode [ 459.317115][T19794] macvlan2: entered allmulticast mode [ 459.333384][T19796] netlink: 'syz.2.3463': attribute type 1 has an invalid length. [ 461.544709][T19813] __nla_validate_parse: 4 callbacks suppressed [ 461.544730][T19813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3465'. [ 461.578091][T19822] lo speed is unknown, defaulting to 1000 [ 461.669585][T19819] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.701061][T19831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3469'. [ 461.716553][T19829] xt_connbytes: Forcing CT accounting to be enabled [ 461.744020][T19822] lo speed is unknown, defaulting to 1000 [ 461.797053][T19819] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.819574][T19822] lo speed is unknown, defaulting to 1000 [ 461.855867][T19822] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 461.934629][T19819] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.960569][T19822] lo speed is unknown, defaulting to 1000 [ 461.969428][T19822] lo speed is unknown, defaulting to 1000 [ 461.977432][T19822] lo speed is unknown, defaulting to 1000 [ 461.987795][T19822] lo speed is unknown, defaulting to 1000 [ 462.021944][T19819] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.042639][T19822] lo speed is unknown, defaulting to 1000 [ 462.049528][T19835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3470'. [ 462.068364][T19835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3470'. [ 462.083578][T19822] lo speed is unknown, defaulting to 1000 [ 462.096103][T19822] lo speed is unknown, defaulting to 1000 [ 462.105389][T19822] lo speed is unknown, defaulting to 1000 [ 462.114249][T19822] lo speed is unknown, defaulting to 1000 [ 462.336441][ T6228] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.368918][T19845] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3474'. [ 462.386544][T19847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3475'. [ 462.401957][T15273] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.443053][T19845] openvswitch: netlink: Missing key (keys=40, expected=100) [ 462.453864][T15273] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.622716][T19852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3477'. [ 462.646306][T15277] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.958920][T19866] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 462.979360][T19866] netlink: 'syz.3.3482': attribute type 1 has an invalid length. [ 462.989419][T19866] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3482'. [ 463.347013][T19888] netlink: 'syz.4.3490': attribute type 6 has an invalid length. [ 463.805770][T19905] lo speed is unknown, defaulting to 1000 [ 463.878217][T19913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3495'. [ 463.941380][T19913] netlink: 'syz.4.3495': attribute type 1 has an invalid length. [ 464.250461][T19927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3499'. [ 464.611661][T19943] syzkaller0: entered promiscuous mode [ 464.617231][T19943] syzkaller0: entered allmulticast mode [ 465.447815][T19971] netlink: 'syz.3.3512': attribute type 1 has an invalid length. [ 465.561558][T19971] 8021q: adding VLAN 0 to HW filter on device bond3 [ 465.597028][T19974] bond3: (slave veth7): Enslaving as an active interface with a down link [ 465.617604][T19978] netlink: 'syz.0.3516': attribute type 15 has an invalid length. [ 465.668978][T19979] bond3: (slave veth9): Enslaving as an active interface with a down link [ 465.704635][T19980] lo speed is unknown, defaulting to 1000 [ 465.831227][ T7436] IPVS: starting estimator thread 0... [ 465.939811][T19995] IPVS: using max 27 ests per chain, 64800 per kthread [ 466.030960][T19999] netlink: 'syz.0.3521': attribute type 4 has an invalid length. [ 466.107790][T20003] syzkaller0: entered promiscuous mode [ 466.114493][T20003] syzkaller0: entered allmulticast mode [ 466.362101][T20015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.377612][T20023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.393074][T20023] bond1: (slave bond0): Enslaving as an active interface with an up link [ 466.437297][T20019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.664635][T20036] netlink: 'syz.1.3532': attribute type 1 has an invalid length. [ 466.685685][T20036] netlink: 'syz.1.3532': attribute type 1 has an invalid length. [ 466.705223][T20036] netlink: 'syz.1.3532': attribute type 1 has an invalid length. [ 466.723410][T20036] netlink: 'syz.1.3532': attribute type 1 has an invalid length. [ 466.843903][T20015] bond1 (unregistering): (slave bond0): Releasing backup interface [ 466.860491][T20015] bond1 (unregistering): Released all slaves [ 466.870894][T20044] __nla_validate_parse: 8 callbacks suppressed [ 466.870913][T20044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3531'. [ 466.930461][T20040] tipc: Failed to obtain node identity [ 466.936034][T20040] tipc: Enabling of bearer rejected, failed to enable media [ 466.973281][T20029] lo speed is unknown, defaulting to 1000 [ 467.118548][T20048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3536'. [ 467.156673][T20052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3537'. [ 467.162021][T20048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3536'. [ 467.179149][T20048] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3536'. [ 467.188573][T20048] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3536'. [ 467.392306][T20063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3542'. [ 467.662455][T20075] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.3545'. [ 467.672221][T20075] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 467.855216][T20085] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3548'. [ 467.981778][T20091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3550'. [ 468.051877][T20097] macsec1: entered promiscuous mode [ 468.057569][T20097] macsec0: entered promiscuous mode [ 468.583422][T20110] lo speed is unknown, defaulting to 1000 [ 468.742376][T20117] validate_nla: 30 callbacks suppressed [ 468.742397][T20117] netlink: 'syz.4.3557': attribute type 3 has an invalid length. [ 468.759989][T20117] netlink: 'syz.4.3557': attribute type 3 has an invalid length. [ 468.774817][ T36] nci: nci_rf_intf_activated_ntf_packet: error when signaling tm activation [ 468.926207][T20122] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 468.995890][T20126] syzkaller0: entered promiscuous mode [ 469.017651][T20126] syzkaller0: entered allmulticast mode [ 469.693549][T20159] macsec2: entered promiscuous mode [ 469.700026][T20159] macsec2: entered allmulticast mode [ 469.737007][T20163] netlink: 'syz.3.3570': attribute type 25 has an invalid length. [ 469.809293][T20165] tun0: tun_chr_ioctl cmd 1074025675 [ 469.814682][T20165] tun0: persist enabled [ 469.853352][T20165] tun0: tun_chr_ioctl cmd 1074025675 [ 469.878436][T20165] tun0: persist enabled [ 469.908532][T20170] syzkaller0: entered promiscuous mode [ 469.923493][T20170] syzkaller0: entered allmulticast mode [ 470.083552][T20183] netlink: 'syz.4.3579': attribute type 10 has an invalid length. [ 470.310560][T20186] tap0: tun_chr_ioctl cmd 1074025681 [ 470.461783][T20212] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 470.753933][T20234] ip6tnl0: Caught tx_queue_len zero misconfig [ 470.772071][T20234] sctp: [Deprecated]: syz.1.3583 (pid 20234) Use of struct sctp_assoc_value in delayed_ack socket option. [ 470.772071][T20234] Use struct sctp_sack_info instead [ 470.799637][T20228] netlink: 'syz.0.3584': attribute type 1 has an invalid length. [ 471.181466][T20239] æÿîÿ: entered promiscuous mode [ 471.209824][T20241] vlan2: entered allmulticast mode [ 471.223103][T20241] veth0_to_bond: entered allmulticast mode [ 471.344000][T20248] syzkaller0: entered promiscuous mode [ 471.350119][T20248] syzkaller0: entered allmulticast mode [ 471.945034][T20267] __nla_validate_parse: 12 callbacks suppressed [ 471.945055][T20267] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3595'. [ 472.445066][T20290] lo speed is unknown, defaulting to 1000 [ 472.451349][T20284] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3599'. [ 472.469598][T20292] netlink: 'syz.0.3601': attribute type 1 has an invalid length. [ 472.477406][T20292] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3601'. [ 472.554652][T20284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3599'. [ 472.992050][T20314] syzkaller0: entered promiscuous mode [ 472.997666][T20314] syzkaller0: entered allmulticast mode [ 473.268193][T20323] netlink: 'syz.4.3609': attribute type 15 has an invalid length. [ 473.333815][T20323] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3609'. [ 474.023341][T20362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3618'. [ 474.193713][T20376] syzkaller0: entered promiscuous mode [ 474.205773][T20376] syzkaller0: entered allmulticast mode [ 474.631067][T20400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3629'. [ 474.906543][T20409] lo speed is unknown, defaulting to 1000 [ 475.014266][T20417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3633'. [ 475.036734][T20417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3633'. [ 475.066522][T20417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3633'. [ 475.632377][T20455] netlink: 'syz.4.3640': attribute type 7 has an invalid length. [ 475.715558][T20445] bridge0: port 3(dummy0) entered disabled state [ 475.761375][T20445] bridge_slave_1: left allmulticast mode [ 475.792421][T20445] bridge_slave_1: left promiscuous mode [ 475.823927][T20445] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.885270][T20445] bridge_slave_0: left allmulticast mode [ 475.895216][T20445] bridge_slave_0: left promiscuous mode [ 475.901873][T20445] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.184256][T20455] netlink: 'syz.4.3640': attribute type 7 has an invalid length. [ 476.248296][T20479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.220126][T20533] lo speed is unknown, defaulting to 1000 [ 477.238284][T15284] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 477.330359][T20535] __nla_validate_parse: 6 callbacks suppressed [ 477.330380][T20535] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3654'. [ 477.369536][T20535] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3654'. [ 477.410353][T20535] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3654'. [ 477.480754][T20544] netlink: 'syz.0.3655': attribute type 1 has an invalid length. [ 477.511814][T20538] xt_hashlimit: max too large, truncated to 1048576 [ 477.609523][T20552] syzkaller0: entered promiscuous mode [ 477.615073][T20552] syzkaller0: entered allmulticast mode [ 477.634766][T20552] af_packet: tpacket_rcv: packet too big, clamped from 4080 to 3952. macoff=96 [ 478.491017][T20581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3665'. [ 478.719668][T20591] netlink: 'syz.0.3667': attribute type 4 has an invalid length. [ 478.744912][T20591] netlink: 'syz.0.3667': attribute type 4 has an invalid length. [ 479.030598][T20601] bond1 (unregistering): Released all slaves [ 479.315979][T20610] lo speed is unknown, defaulting to 1000 [ 479.359940][T20605] lo speed is unknown, defaulting to 1000 [ 479.491115][T20629] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3675'. [ 479.744534][T20634] lo speed is unknown, defaulting to 1000 [ 479.873025][T20644] netlink: 'syz.4.3677': attribute type 1 has an invalid length. [ 480.065833][T20664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3677'. [ 480.306282][T20651] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 480.362356][T20651] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 480.528685][T20664] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 481.652077][T20715] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3681'. [ 481.689650][T20717] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 481.906725][T20721] xt_hashlimit: max too large, truncated to 1048576 [ 481.922298][T20721] xt_CT: You must specify a L4 protocol and not use inversions on it [ 482.067133][T20724] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 482.115232][T20724] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 482.333399][T20724] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 482.389638][T20724] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 482.472080][T20741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3688'. [ 482.542506][T20724] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 482.563864][T20746] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3689'. [ 482.583260][T20724] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 482.641618][T20737] lo speed is unknown, defaulting to 1000 [ 482.687462][T20724] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 482.722498][T20724] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 483.002170][ T1167] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 483.011539][ T1167] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 483.034106][T15273] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 483.043081][T15273] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 483.067600][T15273] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 483.078069][T15273] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 483.110965][ T1167] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 483.121188][ T1167] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 483.503907][T20782] C: renamed from team_slave_0 (while UP) [ 483.590601][T20782] netlink: 'syz.0.3694': attribute type 8 has an invalid length. [ 483.639053][T20782] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 483.659120][T20784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3700'. [ 483.854940][T20792] lo speed is unknown, defaulting to 1000 [ 484.120772][T20804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 484.128195][T20804] IPv6: NLM_F_CREATE should be set when creating new route [ 484.645563][T20828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3706'. [ 485.030370][T20804] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.038207][T20804] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.594434][T20804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.628917][T20804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.047800][T20804] macsec0: left promiscuous mode [ 486.075993][T20816] veth1_macvtap: left promiscuous mode [ 486.095520][T20816] macsec0: entered allmulticast mode [ 486.131610][T20826] veth1_macvtap: entered promiscuous mode [ 486.140620][T20826] veth1_macvtap: entered allmulticast mode [ 486.149323][T20826] macsec0: left allmulticast mode [ 486.156010][T20826] veth1_macvtap: left allmulticast mode [ 486.259790][T20847] syzkaller0: entered promiscuous mode [ 486.270898][T20860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3712'. [ 486.275749][T20847] syzkaller0: entered allmulticast mode [ 486.288786][T15273] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.397416][T20866] netlink: 'syz.4.3714': attribute type 1 has an invalid length. [ 487.521802][T20868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3714'. [ 488.301509][T20858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3711'. [ 488.311918][T15273] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.338293][T15277] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.378845][T20866] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 488.441193][T15277] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.635452][T20879] lo speed is unknown, defaulting to 1000 [ 488.691569][T20890] netlink: 'syz.2.3719': attribute type 66 has an invalid length. [ 488.962105][T20907] netlink: 'syz.2.3723': attribute type 2 has an invalid length. [ 489.096063][T20907] !©9: entered promiscuous mode [ 489.129733][T20912] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 489.137103][T20912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3723'. [ 489.214176][T20921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3727'. [ 489.321065][T20907] macsec3: entered promiscuous mode [ 489.349909][T20912] netlink: 'syz.2.3723': attribute type 2 has an invalid length. [ 489.381023][T20907] macsec3: entered allmulticast mode [ 489.386403][T20907] veth1_macvtap: entered allmulticast mode [ 489.422486][T20907] veth1_macvtap: left allmulticast mode [ 489.506130][T20934] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3731'. [ 489.546587][T20912] !©9: left promiscuous mode [ 489.576599][T20934] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3731'. [ 489.761095][T20942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3733'. [ 489.783687][T20942] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3733'. [ 489.863988][T20944] dvmrp1: entered allmulticast mode [ 490.023917][T20959] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3737'. [ 490.103915][T20954] netlink: 'syz.1.3733': attribute type 10 has an invalid length. [ 490.219917][T20954] team0: Device ipvlan1 failed to register rx_handler [ 490.239374][T20967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3739'. [ 490.290004][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 490.426448][T20977] netlink: 'syz.0.3738': attribute type 2 has an invalid length. [ 490.502695][T20981] ip6gre1: entered promiscuous mode [ 490.511349][T20981] ip6gre1: entered allmulticast mode [ 491.174183][T21000] syzkaller0: entered promiscuous mode [ 491.180615][T21000] syzkaller0: entered allmulticast mode [ 491.470501][T21009] syzkaller1: entered promiscuous mode [ 491.476038][T21009] syzkaller1: entered allmulticast mode [ 491.540815][T21013] chnl_net:caif_netlink_parms(): no params data found [ 491.563049][T21014] chnl_net:caif_netlink_parms(): no params data found [ 491.681089][T21019] netlink: Unknown conntrack attr (type=2304, max=9) [ 491.933460][T21028] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 1209 [ 492.106036][T21032] netlink: 'syz.2.3757': attribute type 3 has an invalid length. [ 492.144880][T21032] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 492.226173][T21035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.237401][T21035] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.255036][T21035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 492.472715][T21043] erspan0: entered promiscuous mode [ 492.675960][T21051] netlink: 'syz.2.3763': attribute type 46 has an invalid length. [ 492.690635][T21052] __nla_validate_parse: 8 callbacks suppressed [ 492.690655][T21052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3762'. [ 492.703307][T21051] netlink: 'syz.2.3763': attribute type 19 has an invalid length. [ 492.716957][T21051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3763'. [ 492.749308][T21052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3762'. [ 492.768400][T21052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3762'. [ 493.000273][T21064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3767'. [ 493.036285][T21066] netlink: 'syz.2.3768': attribute type 32 has an invalid length. [ 493.047632][T21066] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3768'. [ 493.292074][T21079] lo speed is unknown, defaulting to 1000 [ 494.134915][T21100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3779'. [ 494.248022][T21103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3779'. [ 494.462152][T21105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3780'. [ 494.473587][T21107] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3782'. [ 494.483304][T21107] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 494.554303][T21109] netlink: 'syz.0.3783': attribute type 22 has an invalid length. [ 494.682346][T21109] netlink: 'syz.0.3783': attribute type 22 has an invalid length. [ 494.682341][T15279] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.746130][T15279] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.778889][T15279] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.807658][T15279] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.869641][T21154] syzkaller0: entered promiscuous mode [ 495.875197][T21154] syzkaller0: entered allmulticast mode [ 495.898309][T21154] tipc: Started in network mode [ 495.914436][T21154] tipc: Node identity bee674fb1c32, cluster identity 4711 [ 495.940401][T21154] tipc: Enabled bearer , priority 0 [ 496.012791][T21165] bond4 (unregistering): Released all slaves [ 496.057121][T21173] tipc: Resetting bearer [ 496.083332][T21153] tipc: Resetting bearer [ 496.114198][T21153] tipc: Disabling bearer [ 496.452441][T21190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.547314][T21188] lo speed is unknown, defaulting to 1000 [ 496.949907][T21210] bond2 (unregistering): Released all slaves [ 497.340120][T21207] infiniband syû: set active [ 497.345059][T21207] infiniband syû: added bond_slave_0 [ 497.481069][T21222] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.517521][T21232] netlink: 'syz.2.3815': attribute type 1 has an invalid length. [ 497.526946][T21207] RDS/IB: syû: added [ 497.532886][T21207] smc: adding ib device syû with port count 1 [ 497.545633][T21207] smc: ib device syû port 1 has no pnetid [ 497.565041][T21191] delete_channel: no stack [ 497.627193][T21222] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.750357][T21222] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.062055][T21222] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.197305][ T8782] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.225638][ T8782] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.252018][T15273] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.282476][T15273] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.381663][T21245] __nla_validate_parse: 10 callbacks suppressed [ 498.381685][T21245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3819'. [ 498.499256][T21247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3821'. [ 498.835383][T21258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3825'. [ 498.999209][T21267] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20002 [ 499.226900][T21277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3831'. [ 499.449616][T21282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3833'. [ 499.889776][T21287] sctp: [Deprecated]: syz.1.3835 (pid 21287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.889776][T21287] Use struct sctp_sack_info instead [ 500.282624][T21301] mÿ5nè‹Ò: entered promiscuous mode [ 500.553507][T21309] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3841'. [ 500.665639][T21315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3841'. [ 500.732112][T21317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3844'. [ 500.896219][T21328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3847'. [ 501.006618][T21333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3850'. [ 501.232617][T21338] lo speed is unknown, defaulting to 1000 [ 501.530352][T21356] IPVS: length: 132 != 8 [ 502.141689][T21372] can: request_module (can-proto-5) failed. [ 502.421697][T21389] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 502.458678][T21389] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 502.498367][T21389] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 502.637227][T21395] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 502.675996][T21391] lo speed is unknown, defaulting to 1000 [ 503.400784][T21432] __nla_validate_parse: 5 callbacks suppressed [ 503.400806][T21432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3878'. [ 503.840435][T21451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3882'. [ 503.866606][T21451] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 504.755370][T21480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3888'. [ 504.936592][T21486] Bluetooth: MGMT ver 1.23 [ 504.963760][T21492] tipc: Enabling of bearer rejected, failed to enable media [ 504.985589][T21486] syzkaller1: entered promiscuous mode [ 505.010022][T21486] syzkaller1: entered allmulticast mode [ 505.133059][T21491] lo speed is unknown, defaulting to 1000 [ 505.234133][T21504] netlink: 'syz.3.3896': attribute type 2 has an invalid length. [ 505.620028][T21517] netlink: 'syz.2.3900': attribute type 39 has an invalid length. [ 505.774968][T21520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3901'. [ 505.973213][T21523] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3902'. [ 505.988480][T21523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3902'. [ 506.015597][T21523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3902'. [ 506.039047][T21523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3902'. [ 506.048452][T21523] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3902'. [ 506.058166][T21523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3902'. [ 506.528689][T21538] lo speed is unknown, defaulting to 1000 [ 506.659395][T21543] lo speed is unknown, defaulting to 1000 [ 506.676626][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 506.738582][T21550] lo speed is unknown, defaulting to 1000 [ 508.681882][T21578] __nla_validate_parse: 5 callbacks suppressed [ 508.681903][T21578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3918'. [ 508.760669][T21578] netlink: 'syz.0.3918': attribute type 1 has an invalid length. [ 508.778442][T21578] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3918'. [ 509.060197][T21580] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 509.255428][T21586] delete_channel: no stack [ 509.271592][T21586] batadv_slave_0: entered promiscuous mode [ 509.378460][T21586] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 509.443120][T21585] batadv_slave_0: left promiscuous mode [ 509.638229][T21601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3928'. [ 509.726658][T21606] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3930'. [ 509.762039][T21606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3930'. [ 509.783290][T21606] openvswitch: netlink: Missing key (keys=40, expected=80) [ 510.191609][T21613] lo speed is unknown, defaulting to 1000 [ 510.492469][T21634] bond1 (unregistering): Released all slaves [ 511.224170][T21670] netlink: 'syz.3.3944': attribute type 2 has an invalid length. [ 511.756889][T21681] dvmrp0: entered allmulticast mode [ 511.769650][T21663] lo speed is unknown, defaulting to 1000 [ 512.036642][T21692] netlink: 'syz.1.3948': attribute type 8 has an invalid length. [ 512.373142][T21705] FAULT_INJECTION: forcing a failure. [ 512.373142][T21705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.399653][T21705] CPU: 1 UID: 0 PID: 21705 Comm: syz.2.3951 Not tainted syzkaller #0 PREEMPT(full) [ 512.399691][T21705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 512.399705][T21705] Call Trace: [ 512.399713][T21705] [ 512.399722][T21705] dump_stack_lvl+0xe8/0x150 [ 512.399755][T21705] should_fail_ex+0x412/0x560 [ 512.399787][T21705] _copy_from_user+0x2d/0xb0 [ 512.399821][T21705] ___sys_sendmsg+0x1c6/0x360 [ 512.399850][T21705] ? __lock_acquire+0x6b5/0x2cf0 [ 512.399885][T21705] ? __pfx____sys_sendmsg+0x10/0x10 [ 512.399953][T21705] ? __fget_files+0x2a/0x420 [ 512.399976][T21705] ? __fget_files+0x3a0/0x420 [ 512.400010][T21705] __x64_sys_sendmsg+0x1bd/0x2a0 [ 512.400043][T21705] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 512.400083][T21705] ? __pfx_ksys_write+0x10/0x10 [ 512.400128][T21705] do_syscall_64+0xe2/0xf80 [ 512.400161][T21705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.400181][T21705] ? trace_irq_disable+0x37/0x100 [ 512.400201][T21705] ? clear_bhb_loop+0x60/0xb0 [ 512.400226][T21705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.400246][T21705] RIP: 0033:0x7ff05019aeb9 [ 512.400265][T21705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.400284][T21705] RSP: 002b:00007ff0510f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.400307][T21705] RAX: ffffffffffffffda RBX: 00007ff050415fa0 RCX: 00007ff05019aeb9 [ 512.400323][T21705] RDX: 0000000000000844 RSI: 0000200000000040 RDI: 0000000000000005 [ 512.400336][T21705] RBP: 00007ff0510f3090 R08: 0000000000000000 R09: 0000000000000000 [ 512.400350][T21705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.400362][T21705] R13: 00007ff050416038 R14: 00007ff050415fa0 R15: 00007ffe8ab99888 [ 512.400397][T21705] [ 512.761452][T21707] syzkaller0: entered promiscuous mode [ 512.767139][T21707] syzkaller0: entered allmulticast mode [ 512.779582][T21712] netlink: 'syz.2.3951': attribute type 1 has an invalid length. [ 512.809723][T21709] lo speed is unknown, defaulting to 1000 [ 512.872642][T21712] 8021q: adding VLAN 0 to HW filter on device bond2 [ 513.053480][T21722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3955'. [ 513.306097][T21727] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 513.361168][T21729] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3958'. [ 513.627278][T21738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3960'. [ 513.824210][T21744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3961'. [ 513.888977][T21740] IPVS: Scheduler module ip_vs_sip not found [ 514.180852][T21757] netlink: 182544 bytes leftover after parsing attributes in process `syz.3.3968'. [ 514.234231][T21757] netlink: 708 bytes leftover after parsing attributes in process `syz.3.3968'. [ 514.257443][T21761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 514.374592][T21769] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3972'. [ 514.384867][T21770] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3972'. [ 514.554646][T21774] bond3 (unregistering): Released all slaves [ 514.612510][T21771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3971'. [ 514.689013][T21775] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3971'. [ 514.802246][T21771] bridge_slave_1 (unregistering): left allmulticast mode [ 514.813024][T21771] bridge_slave_1 (unregistering): left promiscuous mode [ 514.821032][T21771] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.102602][T21806] netlink: 'syz.1.3980': attribute type 13 has an invalid length. [ 515.352762][T21820] netlink: 'syz.4.3984': attribute type 1 has an invalid length. [ 515.452861][T21829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3984'. [ 515.494958][T21820] 8021q: adding VLAN 0 to HW filter on device bond2 [ 515.602379][T21823] bond2: (slave gretap1): making interface the new active one [ 515.629465][T21823] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 515.842851][T21843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3990'. [ 515.912732][T21829] bond2 (unregistering): (slave gretap1): Releasing active interface [ 515.927226][T21829] bond2 (unregistering): Released all slaves [ 516.035115][T21834] lo speed is unknown, defaulting to 1000 [ 516.099972][T21846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3991'. [ 516.274675][T21846] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.282146][T21846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.301123][T21846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.004213][T21863] vlan1: entered promiscuous mode [ 517.028020][T21863] bridge0: entered promiscuous mode [ 517.220057][T21871] 8021q: adding VLAN 0 to HW filter on device bond2 [ 517.695889][T21892] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 517.719035][T21894] syzkaller0: entered promiscuous mode [ 517.724683][T21894] syzkaller0: entered allmulticast mode [ 517.772439][T21892] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 517.840459][T21903] x_tables: duplicate underflow at hook 2 [ 518.100033][T21902] lo speed is unknown, defaulting to 1000 [ 518.315958][T21918] sit0: entered promiscuous mode [ 518.333138][T21918] netlink: 'syz.2.4014': attribute type 1 has an invalid length. [ 518.364183][T21916] syzkaller1: entered promiscuous mode [ 518.371561][T21916] syzkaller1: entered allmulticast mode [ 518.443771][T21918] lo speed is unknown, defaulting to 1000 [ 518.992800][ T5836] Bluetooth: hci5: command 0x0406 tx timeout [ 519.457708][T21951] __nla_validate_parse: 26 callbacks suppressed [ 519.457733][T21951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4022'. [ 519.708272][T21951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.926421][T21961] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4027'. [ 520.072363][T21966] pim6reg1: entered promiscuous mode [ 520.099465][T21966] pim6reg1: entered allmulticast mode [ 520.196013][T21971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4030'. [ 520.270440][T21974] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 521.155023][T22014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4040'. [ 521.480089][T22021] netlink: 'syz.0.4043': attribute type 2 has an invalid length. [ 521.531752][T22021] : entered promiscuous mode [ 521.568252][T22028] netlink: 'syz.3.4045': attribute type 5 has an invalid length. [ 521.579827][T22028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4045'. [ 521.589115][T22028] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4045'. [ 521.600628][T22028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4045'. [ 521.627089][T22028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.671136][T22028] netlink: 320 bytes leftover after parsing attributes in process `syz.3.4045'. [ 521.690875][T22028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4045'. [ 521.711836][T22028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4045'. [ 521.775562][T22032] batadv1: entered promiscuous mode [ 521.803611][T22032] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 522.756836][T22065] ipip0: entered promiscuous mode [ 522.804643][T22065] ipip0: entered allmulticast mode [ 522.981778][T22079] lo speed is unknown, defaulting to 1000 [ 523.375208][T22093] bond4 (unregistering): Released all slaves [ 523.866168][T22120] syzkaller0: entered promiscuous mode [ 523.881482][T22120] syzkaller0: entered allmulticast mode [ 524.252507][T22129] tipc: Started in network mode [ 524.258748][T22129] tipc: Node identity be02d66c8282, cluster identity 4711 [ 524.267766][T22129] tipc: Enabled bearer , priority 0 [ 524.295743][T22129] netlink: 'syz.4.4075': attribute type 10 has an invalid length. [ 524.304464][T22129] veth0_vlan: left promiscuous mode [ 524.312826][T22129] veth0_vlan: entered promiscuous mode [ 524.354474][T22129] team0: Device veth0_vlan failed to register rx_handler [ 524.464436][T22138] __nla_validate_parse: 31 callbacks suppressed [ 524.464455][T22138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4076'. [ 524.522593][T22138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4076'. [ 524.579901][T22138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4076'. [ 524.621394][T22138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4076'. [ 524.663188][T22138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4076'. [ 524.704940][T22138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4076'. [ 524.762826][T22138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4076'. [ 524.805448][T22138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4076'. [ 524.832428][T22138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4076'. [ 524.919284][T22138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4076'. [ 525.201325][T22139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.351430][T22139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.006592][T22134] syzkaller0: entered promiscuous mode [ 526.027380][T22134] syzkaller0: entered allmulticast mode [ 526.035593][T22128] tipc: Resetting bearer [ 526.061742][T22128] tipc: Disabling bearer [ 526.119786][T22162] sit0: left promiscuous mode [ 526.152993][T22162] mac80211_hwsim hwsim45 wlan0: left allmulticast mode [ 526.160918][T22162] ip6gre1: left allmulticast mode [ 526.166805][T22162] macsec1: left promiscuous mode [ 526.172386][T22162] macsec2: left promiscuous mode [ 526.181719][T22162] macsec2: left allmulticast mode [ 526.206810][ T5892] tipc: Node number set to 1015076460 [ 526.219163][T15282] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.239776][T15282] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.283907][T15282] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.301316][T15282] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.376334][T15282] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.417533][T15282] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.444825][T22171] lo speed is unknown, defaulting to 1000 [ 526.449202][T15282] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.485700][T15282] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.620224][T22184] bond3 (unregistering): Released all slaves [ 526.732183][T22188] bond1: ARP target 9.0.0.0 is already present [ 526.738769][T22188] bond1: option arp_ip_target: invalid value (9) [ 526.748351][T22188] bond1 (unregistering): Released all slaves [ 526.881166][T22189] syzkaller0: entered promiscuous mode [ 526.900789][T22189] syzkaller0: entered allmulticast mode [ 528.884981][T22251] syzkaller0: entered promiscuous mode [ 528.896406][T22251] syzkaller0: entered allmulticast mode [ 529.723645][T22286] __nla_validate_parse: 44 callbacks suppressed [ 529.723667][T22286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4119'. [ 529.869788][T22293] netlink: 'syz.2.4120': attribute type 4 has an invalid length. [ 529.997386][T22303] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 530.008221][T22303] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 530.016054][T22300] netlink: 'syz.4.4124': attribute type 1 has an invalid length. [ 530.033413][T22300] netlink: 'syz.4.4124': attribute type 3 has an invalid length. [ 530.045219][T22300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4124'. [ 530.054634][T22300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4124'. [ 530.064457][T22300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4124'. [ 530.116222][T22300] netlink: 'syz.4.4124': attribute type 1 has an invalid length. [ 530.124287][T22300] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4124'. [ 530.529610][T22334] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4134'. [ 530.560614][T22333] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4133'. [ 530.602848][T22333] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4133'. [ 530.679945][T22333] netlink: 'syz.3.4133': attribute type 6 has an invalid length. [ 530.706187][T22333] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4133'. [ 530.857291][T22346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.218609][T22352] syzkaller0: entered promiscuous mode [ 531.224498][T22352] syzkaller0: entered allmulticast mode [ 531.603590][T22362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4142'. [ 531.782570][T22370] netlink: 'syz.0.4144': attribute type 3 has an invalid length. [ 531.823036][T22376] netlink: 'syz.3.4145': attribute type 1 has an invalid length. [ 532.204062][T22398] lo speed is unknown, defaulting to 1000 [ 532.225213][T22391] netlink: 'syz.4.4150': attribute type 1 has an invalid length. [ 532.305023][T22401] bond1 (unregistering): Released all slaves [ 532.577758][T22412] netlink: 'syz.0.4156': attribute type 1 has an invalid length. [ 532.681560][T22412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 533.001139][T22428] netlink: 'syz.4.4162': attribute type 4 has an invalid length. [ 533.023750][T22431] netlink: 'syz.3.4163': attribute type 11 has an invalid length. [ 533.288677][T22442] FAULT_INJECTION: forcing a failure. [ 533.288677][T22442] name failslab, interval 1, probability 0, space 0, times 0 [ 533.326451][T22442] CPU: 0 UID: 0 PID: 22442 Comm: syz.2.4166 Not tainted syzkaller #0 PREEMPT(full) [ 533.326484][T22442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 533.326497][T22442] Call Trace: [ 533.326506][T22442] [ 533.326515][T22442] dump_stack_lvl+0xe8/0x150 [ 533.326549][T22442] should_fail_ex+0x412/0x560 [ 533.326582][T22442] should_failslab+0xa8/0x100 [ 533.326644][T22442] __kmalloc_node_noprof+0xe6/0x7f0 [ 533.326669][T22442] ? crypto_create_tfm_node+0x83/0x3f0 [ 533.326697][T22442] crypto_create_tfm_node+0x83/0x3f0 [ 533.326727][T22442] crypto_alloc_tfm_node+0x172/0x3f0 [ 533.326756][T22442] ? ipcomp_init_state+0x125/0x2a0 [ 533.326788][T22442] ipcomp_init_state+0x14d/0x2a0 [ 533.326818][T22442] ipcomp4_init_state+0xca/0xb20 [ 533.326848][T22442] ? __xfrm_init_state+0x842/0x1460 [ 533.326876][T22442] __xfrm_init_state+0xac9/0x1460 [ 533.326898][T22442] ? __xfrm_init_state+0x842/0x1460 [ 533.326925][T22442] xfrm_add_sa+0x3073/0x4230 [ 533.326957][T22442] ? __pfx_xfrm_add_sa+0x10/0x10 [ 533.326976][T22442] ? apparmor_capable+0x137/0x1a0 [ 533.327013][T22442] ? __nla_parse+0x40/0x60 [ 533.327048][T22442] xfrm_user_rcv_msg+0x746/0xb20 [ 533.327078][T22442] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 533.327138][T22442] ? __pfx___mutex_trylock_common+0x10/0x10 [ 533.327174][T22442] ? rcu_is_watching+0x15/0xb0 [ 533.327196][T22442] ? trace_contention_end+0x39/0x100 [ 533.327219][T22442] ? __mutex_lock+0x319/0x1300 [ 533.327254][T22442] netlink_rcv_skb+0x232/0x4b0 [ 533.327280][T22442] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 533.327304][T22442] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.327344][T22442] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.327368][T22442] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.327395][T22442] xfrm_netlink_rcv+0x79/0x90 [ 533.327416][T22442] netlink_unicast+0x80f/0x9b0 [ 533.327448][T22442] ? __pfx_netlink_unicast+0x10/0x10 [ 533.327471][T22442] ? netlink_sendmsg+0x650/0xb40 [ 533.327493][T22442] ? skb_put+0x11b/0x210 [ 533.327524][T22442] netlink_sendmsg+0x813/0xb40 [ 533.327560][T22442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.327588][T22442] ? aa_sock_msg_perm+0xf1/0x1b0 [ 533.327616][T22442] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.327640][T22442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.327675][T22442] ____sys_sendmsg+0xa68/0xad0 [ 533.327705][T22442] ? __might_fault+0xaf/0x130 [ 533.327743][T22442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.327781][T22442] ? import_iovec+0x73/0xa0 [ 533.327818][T22442] ___sys_sendmsg+0x2a5/0x360 [ 533.327844][T22442] ? __lock_acquire+0x6b5/0x2cf0 [ 533.327878][T22442] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.327943][T22442] ? __fget_files+0x2a/0x420 [ 533.327965][T22442] ? __fget_files+0x3a0/0x420 [ 533.327999][T22442] __x64_sys_sendmsg+0x1bd/0x2a0 [ 533.328032][T22442] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.328072][T22442] ? __pfx_ksys_write+0x10/0x10 [ 533.328116][T22442] do_syscall_64+0xe2/0xf80 [ 533.328141][T22442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.328169][T22442] ? trace_irq_disable+0x37/0x100 [ 533.328189][T22442] ? clear_bhb_loop+0x60/0xb0 [ 533.328215][T22442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.328235][T22442] RIP: 0033:0x7ff05019aeb9 [ 533.328255][T22442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.328273][T22442] RSP: 002b:00007ff0510f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.328296][T22442] RAX: ffffffffffffffda RBX: 00007ff050415fa0 RCX: 00007ff05019aeb9 [ 533.328312][T22442] RDX: 0000000000000844 RSI: 0000200000000040 RDI: 0000000000000005 [ 533.328326][T22442] RBP: 00007ff0510f3090 R08: 0000000000000000 R09: 0000000000000000 [ 533.328339][T22442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.328351][T22442] R13: 00007ff050416038 R14: 00007ff050415fa0 R15: 00007ffe8ab99888 [ 533.328387][T22442] [ 533.995897][T22442] 8021q: adding VLAN 0 to HW filter on device bond3 [ 534.017675][T22454] vlan0: Caught tx_queue_len zero misconfig [ 534.120215][T22446] lo speed is unknown, defaulting to 1000 [ 534.641418][T22491] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 534.686566][T22487] lo speed is unknown, defaulting to 1000 [ 534.996410][T22512] __nla_validate_parse: 11 callbacks suppressed [ 534.996432][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4187'. [ 535.401069][T22529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4190'. [ 535.425090][T22529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4190'. [ 535.625831][T22537] validate_nla: 2 callbacks suppressed [ 535.625854][T22537] netlink: 'syz.4.4192': attribute type 16 has an invalid length. [ 535.661106][T22537] netlink: 'syz.4.4192': attribute type 17 has an invalid length. [ 535.692473][T22536] bridge2: entered allmulticast mode [ 535.758911][T15281] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.876784][T15281] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.891062][T15281] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.920495][T15281] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.018148][T22546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4194'. [ 536.298199][T22555] ipvlan0: entered promiscuous mode [ 536.317655][T22556] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:12147 [ 536.405222][T22555] ipvlan0: left promiscuous mode [ 536.426034][T22562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4199'. [ 536.513645][ T5914] IPVS: starting estimator thread 0... [ 536.616997][T22574] delete_channel: no stack [ 536.630993][T22570] IPVS: using max 26 ests per chain, 62400 per kthread [ 536.640563][T22574] delete_channel: no stack [ 536.647324][T22567] lo speed is unknown, defaulting to 1000 [ 536.732462][T22577] netlink: 'syz.3.4202': attribute type 1 has an invalid length. [ 536.948999][T22587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4206'. [ 537.000664][T22590] FAULT_INJECTION: forcing a failure. [ 537.000664][T22590] name failslab, interval 1, probability 0, space 0, times 0 [ 537.060745][T22590] CPU: 1 UID: 0 PID: 22590 Comm: syz.0.4207 Not tainted syzkaller #0 PREEMPT(full) [ 537.060776][T22590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 537.060789][T22590] Call Trace: [ 537.060798][T22590] [ 537.060808][T22590] dump_stack_lvl+0xe8/0x150 [ 537.060850][T22590] should_fail_ex+0x412/0x560 [ 537.060882][T22590] should_failslab+0xa8/0x100 [ 537.060908][T22590] kmem_cache_alloc_noprof+0x87/0x6e0 [ 537.060941][T22590] ? xfrm_state_alloc+0x24/0x2f0 [ 537.060975][T22590] xfrm_state_alloc+0x24/0x2f0 [ 537.061003][T22590] ipcomp4_init_state+0x2c4/0xb20 [ 537.061042][T22590] __xfrm_init_state+0xac9/0x1460 [ 537.061064][T22590] ? __xfrm_init_state+0x842/0x1460 [ 537.061091][T22590] xfrm_add_sa+0x3073/0x4230 [ 537.061123][T22590] ? __pfx_xfrm_add_sa+0x10/0x10 [ 537.061142][T22590] ? apparmor_capable+0x137/0x1a0 [ 537.061186][T22590] ? __nla_parse+0x40/0x60 [ 537.061220][T22590] xfrm_user_rcv_msg+0x746/0xb20 [ 537.061248][T22590] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 537.061308][T22590] ? __pfx___mutex_trylock_common+0x10/0x10 [ 537.061336][T22590] ? rcu_is_watching+0x15/0xb0 [ 537.061357][T22590] ? trace_contention_end+0x39/0x100 [ 537.061380][T22590] ? __mutex_lock+0x319/0x1300 [ 537.061414][T22590] netlink_rcv_skb+0x232/0x4b0 [ 537.061440][T22590] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 537.061464][T22590] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.061503][T22590] ? netlink_deliver_tap+0x2e/0x1b0 [ 537.061526][T22590] ? netlink_deliver_tap+0x2e/0x1b0 [ 537.061552][T22590] xfrm_netlink_rcv+0x79/0x90 [ 537.061573][T22590] netlink_unicast+0x80f/0x9b0 [ 537.061604][T22590] ? __pfx_netlink_unicast+0x10/0x10 [ 537.061626][T22590] ? netlink_sendmsg+0x650/0xb40 [ 537.061648][T22590] ? skb_put+0x11b/0x210 [ 537.061678][T22590] netlink_sendmsg+0x813/0xb40 [ 537.061713][T22590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.061746][T22590] ? aa_sock_msg_perm+0xf1/0x1b0 [ 537.061774][T22590] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 537.061799][T22590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.061827][T22590] ____sys_sendmsg+0xa68/0xad0 [ 537.061856][T22590] ? __might_fault+0xaf/0x130 [ 537.061895][T22590] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.061933][T22590] ? import_iovec+0x73/0xa0 [ 537.061969][T22590] ___sys_sendmsg+0x2a5/0x360 [ 537.061997][T22590] ? __lock_acquire+0x6b5/0x2cf0 [ 537.062030][T22590] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.062099][T22590] ? __fget_files+0x2a/0x420 [ 537.062121][T22590] ? __fget_files+0x3a0/0x420 [ 537.062156][T22590] __x64_sys_sendmsg+0x1bd/0x2a0 [ 537.062188][T22590] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.062228][T22590] ? __pfx_ksys_write+0x10/0x10 [ 537.062272][T22590] do_syscall_64+0xe2/0xf80 [ 537.062296][T22590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.062316][T22590] ? trace_irq_disable+0x37/0x100 [ 537.062336][T22590] ? clear_bhb_loop+0x60/0xb0 [ 537.062362][T22590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.062383][T22590] RIP: 0033:0x7f9092d9aeb9 [ 537.062401][T22590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.062419][T22590] RSP: 002b:00007f9093d24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.062442][T22590] RAX: ffffffffffffffda RBX: 00007f9093015fa0 RCX: 00007f9092d9aeb9 [ 537.062458][T22590] RDX: 0000000000000844 RSI: 0000200000000040 RDI: 0000000000000005 [ 537.062471][T22590] RBP: 00007f9093d24090 R08: 0000000000000000 R09: 0000000000000000 [ 537.062485][T22590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.062498][T22590] R13: 00007f9093016038 R14: 00007f9093015fa0 R15: 00007ffdb93d3a48 [ 537.062532][T22590] [ 537.546296][T22590] lo speed is unknown, defaulting to 1000 [ 537.569196][T22591] netlink: 'syz.0.4207': attribute type 1 has an invalid length. [ 537.636634][T22591] 8021q: adding VLAN 0 to HW filter on device bond3 [ 537.761990][T22606] netlink: 284 bytes leftover after parsing attributes in process `syz.3.4211'. [ 537.860232][T22609] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4212'. [ 537.946372][T22613] Cannot find add_set index 2 as target [ 538.186660][T22562] lo speed is unknown, defaulting to 1000 [ 538.222519][T22616] lo speed is unknown, defaulting to 1000 [ 538.423802][T22625] netlink: 'syz.4.4216': attribute type 1 has an invalid length. [ 538.638679][T22626] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 538.651243][T22626] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 538.941919][T22634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4218'. [ 539.048311][T22632] syzkaller0: entered promiscuous mode [ 539.061228][T22632] syzkaller0: entered allmulticast mode [ 539.410255][T22641] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4220'. [ 539.479721][T22641] ip6gre2: entered promiscuous mode [ 539.555419][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 539.883204][T22646] syzkaller0: entered promiscuous mode [ 539.908239][T22646] syzkaller0: entered allmulticast mode [ 540.004315][T22645] vlan3: entered promiscuous mode [ 540.010573][T22645] geneve1: entered promiscuous mode [ 540.016525][T22645] vlan3: entered allmulticast mode [ 540.023253][T22645] geneve1: entered allmulticast mode [ 540.297089][T22650] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 540.327005][T22650] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 540.366679][T22651] macvlan2: entered promiscuous mode [ 540.372438][T22651] macvlan2: entered allmulticast mode [ 540.383327][T22651] vlan1: entered promiscuous mode [ 540.405114][T22651] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 540.650330][T22661] __nla_validate_parse: 3 callbacks suppressed [ 540.650351][T22661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4226'. [ 543.239687][T22670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4229'. [ 543.347027][T22673] netlink: 'syz.4.4232': attribute type 10 has an invalid length. [ 543.371220][T22673] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4232'. [ 543.383872][T22673] batadv0: entered promiscuous mode [ 543.392920][T22673] batadv0: entered allmulticast mode [ 543.400602][T22673] bridge0: port 3(batadv0) entered blocking state [ 543.423223][T22677] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4233'. [ 543.438274][T22673] bridge0: port 3(batadv0) entered disabled state [ 543.446812][T22675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4231'. [ 543.664303][T15279] batman_adv: batadv0: IGMP Querier appeared [ 543.672106][T15279] batman_adv: batadv0: MLD Querier appeared [ 543.754094][T22688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4236'. [ 543.765327][T22688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4236'. [ 543.867699][T22692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4238'. [ 543.900717][T22692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4238'. [ 543.931125][T22692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4238'. [ 544.032479][T22702] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 544.108038][T22710] x_tables: duplicate underflow at hook 1 [ 544.590695][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 544.616755][T22737] nbd: must specify a size in bytes for the device [ 544.639756][T22737] block nbd0: NBD_DISCONNECT [ 544.649155][T22737] block nbd0: Send disconnect failed -32 [ 544.664334][T22737] block nbd0: shutting down sockets [ 545.131133][T22756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.653915][T22784] netlink: 'syz.3.4267': attribute type 3 has an invalid length. [ 545.670787][T22784] syz_tun: entered allmulticast mode [ 545.683640][T22784] siw: device registration error -23 [ 545.723392][T22784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.807711][T22782] syz_tun: left allmulticast mode [ 546.226368][T22821] __nla_validate_parse: 5 callbacks suppressed [ 546.226388][T22821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4278'. [ 546.244661][T22819] netlink: 'syz.2.4278': attribute type 15 has an invalid length. [ 546.324637][T22825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4279'. [ 546.435348][T22825] bond4: option mode: invalid value (254) [ 546.454094][T22825] bond4 (unregistering): Released all slaves [ 546.642857][T22839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.708912][T22849] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 546.801305][T22846] syzkaller1: entered promiscuous mode [ 546.808646][T22846] syzkaller1: entered allmulticast mode [ 547.025659][T22864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4291'. [ 547.035918][T22864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4291'. [ 547.048708][T22864] netlink: 540 bytes leftover after parsing attributes in process `syz.2.4291'. [ 547.063359][T15279] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.079205][T15279] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.087780][T15279] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.096636][T15279] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.215308][T22868] tipc: Enabled bearer , priority 10 [ 547.230846][T22868] syzkaller0: entered promiscuous mode [ 547.243174][T22868] syzkaller0: entered allmulticast mode [ 547.260353][T22868] tipc: Resetting bearer [ 547.271308][T22867] tipc: Resetting bearer [ 547.302827][T22867] tipc: Disabling bearer [ 547.495982][T22876] tipc: Enabling of bearer rejected, failed to enable media [ 547.529172][T22878] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 547.544074][T22878] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4296'. [ 547.545401][T22879] tipc: Enabling of bearer rejected, failed to enable media [ 547.712827][T22886] block nbd2: Unsupported socket: should be TCP or UNIX. [ 547.763027][T22886] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 547.936733][T22899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4300'. [ 548.156193][T22906] batadv0: entered promiscuous mode [ 548.165410][T22907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.176922][T22906] macvtap1: entered promiscuous mode [ 548.192402][T22906] macvtap1: entered allmulticast mode [ 548.212691][T22906] batadv0: entered allmulticast mode [ 548.236406][T22906] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 548.263124][T22906] batadv0: left allmulticast mode [ 548.277685][T22906] batadv0: left promiscuous mode [ 548.476326][T22922] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4309'. [ 548.523238][T22922] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4309'. [ 548.577033][T22922] syzkaller0: entered promiscuous mode [ 548.604841][T22922] syzkaller0: entered allmulticast mode [ 548.914244][T22940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4313'. [ 549.166384][T22950] FAULT_INJECTION: forcing a failure. [ 549.166384][T22950] name failslab, interval 1, probability 0, space 0, times 0 [ 549.191275][T22950] CPU: 0 UID: 0 PID: 22950 Comm: syz.1.4317 Not tainted syzkaller #0 PREEMPT(full) [ 549.191307][T22950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 549.191321][T22950] Call Trace: [ 549.191330][T22950] [ 549.191339][T22950] dump_stack_lvl+0xe8/0x150 [ 549.191373][T22950] should_fail_ex+0x412/0x560 [ 549.191405][T22950] should_failslab+0xa8/0x100 [ 549.191432][T22950] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 549.191465][T22950] ? __alloc_skb+0x186/0x7d0 [ 549.191489][T22950] ? __alloc_skb+0x1d0/0x7d0 [ 549.191511][T22950] ? __local_bh_enable_ip+0xd0/0x130 [ 549.191541][T22950] __alloc_skb+0x1d0/0x7d0 [ 549.191573][T22950] netlink_sendmsg+0x5d4/0xb40 [ 549.191614][T22950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.191643][T22950] ? aa_sock_msg_perm+0xf1/0x1b0 [ 549.191671][T22950] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 549.191696][T22950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.191719][T22950] ____sys_sendmsg+0xa68/0xad0 [ 549.191753][T22950] ? __might_fault+0xaf/0x130 [ 549.191792][T22950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 549.191831][T22950] ? import_iovec+0x73/0xa0 [ 549.191867][T22950] ___sys_sendmsg+0x2a5/0x360 [ 549.191895][T22950] ? __lock_acquire+0x6b5/0x2cf0 [ 549.191927][T22950] ? __pfx____sys_sendmsg+0x10/0x10 [ 549.192002][T22950] ? __fget_files+0x2a/0x420 [ 549.192025][T22950] ? __fget_files+0x3a0/0x420 [ 549.192060][T22950] __x64_sys_sendmsg+0x1bd/0x2a0 [ 549.192092][T22950] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 549.192133][T22950] ? __pfx_ksys_write+0x10/0x10 [ 549.192176][T22950] do_syscall_64+0xe2/0xf80 [ 549.192201][T22950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.192221][T22950] ? trace_irq_disable+0x37/0x100 [ 549.192241][T22950] ? clear_bhb_loop+0x60/0xb0 [ 549.192267][T22950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.192287][T22950] RIP: 0033:0x7fa64c39aeb9 [ 549.192306][T22950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.192324][T22950] RSP: 002b:00007fa64d27b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.192347][T22950] RAX: ffffffffffffffda RBX: 00007fa64c615fa0 RCX: 00007fa64c39aeb9 [ 549.192363][T22950] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 549.192375][T22950] RBP: 00007fa64d27b090 R08: 0000000000000000 R09: 0000000000000000 [ 549.192388][T22950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.192399][T22950] R13: 00007fa64c616038 R14: 00007fa64c615fa0 R15: 00007ffee28bc378 [ 549.192433][T22950] [ 549.672270][T22955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.682721][T22955] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.741229][T22955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 549.764760][T22954] lo speed is unknown, defaulting to 1000 [ 550.064852][T22981] netlink: 'syz.0.4326': attribute type 4 has an invalid length. [ 550.107651][T22984] netlink: 'syz.3.4328': attribute type 10 has an invalid length. [ 550.123963][T22985] netlink: 'syz.0.4326': attribute type 4 has an invalid length. [ 550.160939][T22984] team0: Device geneve0 is up. Set it down before adding it as a team port [ 550.178660][T22984] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 550.253496][T22989] siw: device registration error -23 [ 550.424074][T23000] xt_hashlimit: max too large, truncated to 1048576 [ 551.032467][T23038] tipc: Enabled bearer , priority 0 [ 551.099418][T23038] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 551.329041][T23048] __nla_validate_parse: 7 callbacks suppressed [ 551.329061][T23048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4346'. [ 551.370273][T23048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4346'. [ 551.588875][T23048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4346'. [ 551.599417][T23048] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4346'. [ 551.610827][T23061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4350'. [ 551.620261][T23048] vlan1: entered allmulticast mode [ 551.620288][T23048] veth0_vlan: entered allmulticast mode [ 551.620308][T23048] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 551.705175][T23062] lo speed is unknown, defaulting to 1000 [ 551.815843][T23073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4355'. [ 551.941382][T23069] syzkaller0: entered promiscuous mode [ 551.951102][T23069] syzkaller0: entered allmulticast mode [ 551.965649][T23078] tipc: Started in network mode [ 551.971791][T23078] tipc: Node identity , cluster identity 4711 [ 551.978531][T23078] tipc: Failed to obtain node identity [ 551.984480][T23078] tipc: Enabling of bearer rejected, failed to enable media [ 552.010657][T23071] syzkaller0: entered promiscuous mode [ 552.032013][T23071] syzkaller0: entered allmulticast mode [ 552.533869][T23098] openvswitch: netlink: Key type 300 is out of range max 32 [ 552.675512][T23100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4360'. [ 552.734364][T23101] netlink: 211792 bytes leftover after parsing attributes in process `syz.0.4360'. [ 554.634533][T23090] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 554.969832][T23117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.008814][T23116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4364'. [ 555.137669][T23126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4367'. [ 555.170397][T23120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.181394][T23125] netlink: 'syz.3.4369': attribute type 29 has an invalid length. [ 555.393098][T23135] bond4: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 555.413715][T23135] bond4 (unregistering): Released all slaves [ 555.581118][T23142] x_tables: duplicate underflow at hook 1 [ 555.967126][T23160] lo speed is unknown, defaulting to 1000 [ 556.204816][T23170] team_slave_0: entered promiscuous mode [ 556.211057][T23170] team_slave_1: entered promiscuous mode [ 556.258290][T23170] vlan2: entered promiscuous mode [ 556.263372][T23170] team0: entered promiscuous mode [ 557.072268][T23192] lo speed is unknown, defaulting to 1000 [ 557.418557][T23206] tipc: Enabling of bearer rejected, failed to enable media [ 557.457575][T23206] __nla_validate_parse: 2 callbacks suppressed [ 557.457596][T23206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4394'. [ 557.518134][T23206] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4394'. [ 557.652277][T23217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4398'. [ 557.693162][T23214] 8021q: adding VLAN 0 to HW filter on device bond4 [ 557.719033][T23220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4399'. [ 557.864678][T23212] bond4: (slave ip6gretap1): making interface the new active one [ 557.882550][T23212] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 557.893482][T23222] lo: Caught tx_queue_len zero misconfig [ 558.192604][T23229] syzkaller0: entered promiscuous mode [ 558.211471][T23229] syzkaller0: entered allmulticast mode [ 558.487189][T23249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4407'. [ 558.519205][T23249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4407'. [ 558.543446][T23249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4407'. [ 558.553159][T23249] netlink: 540 bytes leftover after parsing attributes in process `syz.0.4407'. [ 558.583758][T23252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.596592][T23251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.609120][T23252] netlink: 980 bytes leftover after parsing attributes in process `syz.1.4408'. [ 558.619925][T23252] openvswitch: netlink: Flow key attr not present in new flow. [ 558.633590][T23251] netlink: 'syz.1.4408': attribute type 1 has an invalid length. [ 558.641776][T23251] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4408'. [ 558.658087][T23251] netlink: 'syz.1.4408': attribute type 1 has an invalid length. [ 558.683514][T23251] netlink: 'syz.1.4408': attribute type 8 has an invalid length. [ 558.751517][T23260] netlink: 'syz.0.4410': attribute type 13 has an invalid length. [ 559.121705][T23279] netlink: 'syz.1.4416': attribute type 1 has an invalid length. [ 559.896060][T23327] lo speed is unknown, defaulting to 1000 [ 560.070787][T23341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.239356][T23385] vlan4: entered promiscuous mode [ 561.266645][T23385] bond0: entered promiscuous mode [ 561.288655][T23385] bond_slave_0: entered promiscuous mode [ 561.318945][T23385] bond_slave_1: entered promiscuous mode [ 561.368103][T23385] dummy0: entered promiscuous mode [ 561.444929][T23378] lo speed is unknown, defaulting to 1000 [ 561.577435][T23391] netlink: 'syz.1.4449': attribute type 25 has an invalid length. [ 561.655997][T23397] lo speed is unknown, defaulting to 1000 [ 561.805478][T23407] 8021q: adding VLAN 0 to HW filter on device bond5 [ 561.823674][T23410] bond5: Unable to set up delay as MII monitoring is disabled [ 561.903275][T23408] lo speed is unknown, defaulting to 1000 [ 562.062090][T23412] Can't find ip_set type bitmap:ip,mac [ 562.190611][T23418] netlink: 'syz.2.4454': attribute type 10 has an invalid length. [ 562.224385][T23418] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 562.263366][T23418] netlink: 'syz.2.4454': attribute type 1 has an invalid length. [ 562.773836][T23438] __nla_validate_parse: 20 callbacks suppressed [ 562.773855][T23438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4458'. [ 562.790762][T23437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4458'. [ 562.816058][T23431] 8021q: adding VLAN 0 to HW filter on device bond4 [ 562.958844][T23423] rdma_rxe: rxe_newlink: failed to add lo [ 563.028691][T23442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4459'. [ 563.050193][T23442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4459'. [ 563.065607][T23442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4459'. [ 563.108935][T23442] FAULT_INJECTION: forcing a failure. [ 563.108935][T23442] name failslab, interval 1, probability 0, space 0, times 0 [ 563.123084][T23442] CPU: 1 UID: 0 PID: 23442 Comm: syz.1.4459 Not tainted syzkaller #0 PREEMPT(full) [ 563.123110][T23442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 563.123122][T23442] Call Trace: [ 563.123129][T23442] [ 563.123137][T23442] dump_stack_lvl+0xe8/0x150 [ 563.123168][T23442] should_fail_ex+0x412/0x560 [ 563.123196][T23442] should_failslab+0xa8/0x100 [ 563.123220][T23442] __kmalloc_cache_noprof+0x83/0x6e0 [ 563.123239][T23442] ? nfnetlink_rcv+0xfe1/0x27b0 [ 563.123263][T23442] nfnetlink_rcv+0xfe1/0x27b0 [ 563.123313][T23442] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 563.123347][T23442] ? ref_tracker_free+0x693/0x840 [ 563.123412][T23442] ? __netlink_deliver_tap+0x807/0x850 [ 563.123433][T23442] ? netlink_deliver_tap+0x2e/0x1b0 [ 563.123471][T23442] netlink_unicast+0x80f/0x9b0 [ 563.123498][T23442] ? __pfx_netlink_unicast+0x10/0x10 [ 563.123518][T23442] ? netlink_sendmsg+0x650/0xb40 [ 563.123537][T23442] ? skb_put+0x11b/0x210 [ 563.123564][T23442] netlink_sendmsg+0x813/0xb40 [ 563.123594][T23442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.123619][T23442] ? aa_sock_msg_perm+0xf1/0x1b0 [ 563.123644][T23442] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 563.123666][T23442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.123687][T23442] ____sys_sendmsg+0xa68/0xad0 [ 563.123712][T23442] ? __might_fault+0xaf/0x130 [ 563.123746][T23442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.123781][T23442] ? import_iovec+0x73/0xa0 [ 563.123813][T23442] ___sys_sendmsg+0x2a5/0x360 [ 563.123837][T23442] ? __lock_acquire+0x6b5/0x2cf0 [ 563.123868][T23442] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.123929][T23442] ? __fget_files+0x2a/0x420 [ 563.123949][T23442] ? __fget_files+0x3a0/0x420 [ 563.123979][T23442] __x64_sys_sendmsg+0x1bd/0x2a0 [ 563.124008][T23442] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 563.124042][T23442] ? __pfx_ksys_write+0x10/0x10 [ 563.124081][T23442] do_syscall_64+0xe2/0xf80 [ 563.124103][T23442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.124121][T23442] ? trace_irq_disable+0x37/0x100 [ 563.124138][T23442] ? clear_bhb_loop+0x60/0xb0 [ 563.124160][T23442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.124178][T23442] RIP: 0033:0x7fa64c39aeb9 [ 563.124197][T23442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.124213][T23442] RSP: 002b:00007fa64d27b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.124233][T23442] RAX: ffffffffffffffda RBX: 00007fa64c615fa0 RCX: 00007fa64c39aeb9 [ 563.124247][T23442] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 563.124259][T23442] RBP: 00007fa64d27b090 R08: 0000000000000000 R09: 0000000000000000 [ 563.124270][T23442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 563.124281][T23442] R13: 00007fa64c616038 R14: 00007fa64c615fa0 R15: 00007ffee28bc378 [ 563.124313][T23442] [ 563.990754][T23460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4467'. [ 564.185798][T23460] lo speed is unknown, defaulting to 1000 [ 564.419477][T23465] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4469'. [ 564.438685][T23467] netlink: 1372 bytes leftover after parsing attributes in process `syz.0.4468'. [ 564.580076][T23474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4471'. [ 564.599506][T23474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4471'. [ 564.629511][T23474] FAULT_INJECTION: forcing a failure. [ 564.629511][T23474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.648308][T23474] CPU: 0 UID: 0 PID: 23474 Comm: syz.2.4471 Not tainted syzkaller #0 PREEMPT(full) [ 564.648339][T23474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 564.648352][T23474] Call Trace: [ 564.648361][T23474] [ 564.648370][T23474] dump_stack_lvl+0xe8/0x150 [ 564.648402][T23474] should_fail_ex+0x412/0x560 [ 564.648433][T23474] _copy_to_user+0x31/0xb0 [ 564.648467][T23474] simple_read_from_buffer+0xe1/0x170 [ 564.648495][T23474] proc_fail_nth_read+0x1bb/0x230 [ 564.648529][T23474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.648562][T23474] ? rw_verify_area+0x2a6/0x4d0 [ 564.648591][T23474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.648622][T23474] vfs_read+0x20c/0xa70 [ 564.648650][T23474] ? fdget_pos+0x246/0x320 [ 564.648679][T23474] ? __pfx___mutex_lock+0x10/0x10 [ 564.648705][T23474] ? __pfx_vfs_read+0x10/0x10 [ 564.648735][T23474] ? __fget_files+0x2a/0x420 [ 564.648763][T23474] ? __fget_files+0x3a0/0x420 [ 564.648785][T23474] ? __fget_files+0x2a/0x420 [ 564.648817][T23474] ksys_read+0x150/0x270 [ 564.648850][T23474] ? __pfx_ksys_read+0x10/0x10 [ 564.648892][T23474] do_syscall_64+0xe2/0xf80 [ 564.648915][T23474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.648935][T23474] ? trace_irq_disable+0x37/0x100 [ 564.648955][T23474] ? clear_bhb_loop+0x60/0xb0 [ 564.648981][T23474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.649001][T23474] RIP: 0033:0x7ff05015b78e [ 564.649020][T23474] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 564.649039][T23474] RSP: 002b:00007ff0510f2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 564.649062][T23474] RAX: ffffffffffffffda RBX: 00007ff0510f36c0 RCX: 00007ff05015b78e [ 564.649077][T23474] RDX: 000000000000000f RSI: 00007ff0510f30a0 RDI: 0000000000000004 [ 564.649090][T23474] RBP: 00007ff0510f3090 R08: 0000000000000000 R09: 0000000000000000 [ 564.649103][T23474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 564.649116][T23474] R13: 00007ff050416038 R14: 00007ff050415fa0 R15: 00007ffe8ab99888 [ 564.649152][T23474] [ 565.887102][T23527] bond5: option ad_select: invalid value (34) [ 566.275378][T23527] bond5 (unregistering): Released all slaves [ 566.420179][T23532] bond5: option ad_select: invalid value (34) [ 566.430684][T23532] bond5 (unregistering): Released all slaves [ 566.627570][T23543] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 566.821557][T23558] netlink: 'syz.1.4497': attribute type 11 has an invalid length. [ 566.844228][T23558] netlink: 'syz.1.4497': attribute type 4 has an invalid length. [ 566.980923][T23569] netlink: 'syz.3.4498': attribute type 1 has an invalid length. [ 567.216280][T23578] lo speed is unknown, defaulting to 1000 [ 567.291195][T23585] ipvlan2: entered promiscuous mode [ 567.396701][T23591] ipvlan3: entered promiscuous mode [ 567.653596][T23595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.784661][T23603] __nla_validate_parse: 15 callbacks suppressed [ 567.784686][T23603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4511'. [ 567.975869][T23607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4512'. [ 568.118070][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 568.219740][T23618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4515'. [ 568.248435][T23618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4515'. [ 568.264519][T23618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4515'. [ 568.275242][T23618] netlink: 540 bytes leftover after parsing attributes in process `syz.4.4515'. [ 568.501609][T23626] syzkaller1: entered promiscuous mode [ 568.507728][T23626] syzkaller1: entered allmulticast mode [ 568.570076][T23633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4519'. [ 568.948621][T23646] netlink: 1216 bytes leftover after parsing attributes in process `syz.3.4523'. [ 569.000550][T23646] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.4523'. [ 569.035793][T23650] dvmrp1: left allmulticast mode [ 569.091812][T23646] netlink: 'syz.3.4523': attribute type 12 has an invalid length. [ 569.109577][T23654] netlink: 'syz.2.4525': attribute type 1 has an invalid length. [ 569.117688][T23654] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4525'. [ 569.130277][T23646] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 570.435674][T23718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.888328][T23743] netlink: 'syz.2.4549': attribute type 83 has an invalid length. [ 571.177097][T23750] team_slave_0: left promiscuous mode [ 571.231649][T23750] team0 (unregistering): Port device team_slave_0 removed [ 571.259917][T23750] team_slave_1: left promiscuous mode [ 571.316518][T23750] team0 (unregistering): Port device team_slave_1 removed [ 571.731904][T23785] netlink: 'syz.3.4558': attribute type 16 has an invalid length. [ 571.781641][T23785] netlink: 'syz.3.4558': attribute type 17 has an invalid length. [ 571.811668][T23783] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.880492][T23769] netlink: 'syz.2.4554': attribute type 23 has an invalid length. [ 572.081066][T23785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.330671][T23795] netlink: 'syz.0.4561': attribute type 1 has an invalid length. [ 573.234897][T23819] __nla_validate_parse: 31 callbacks suppressed [ 573.234936][T23819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4567'. [ 573.266309][T23822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4568'. [ 573.303219][T23819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4567'. [ 573.337868][T23819] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4567'. [ 573.365609][T23819] netlink: 540 bytes leftover after parsing attributes in process `syz.2.4567'. [ 573.835272][T23847] netlink: 'syz.1.4572': attribute type 33 has an invalid length. [ 573.885400][T23847] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4572'. [ 574.141563][T23858] lo speed is unknown, defaulting to 1000 [ 574.502726][T23879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4581'. [ 574.689109][T23883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4582'. [ 575.283117][T23913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4591'. [ 575.292796][T23913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4591'. [ 575.383408][T23916] netlink: 'syz.3.4593': attribute type 1 has an invalid length. [ 575.534036][T23908] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 575.638333][T23908] bond6 (unregistering): Released all slaves [ 576.099883][T23946] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 576.385034][T23960] netlink: 'syz.3.4598': attribute type 1 has an invalid length. [ 576.442298][T23960] 8021q: adding VLAN 0 to HW filter on device bond5 [ 577.033847][T23987] netlink: 'syz.0.4611': attribute type 1 has an invalid length. [ 577.080083][T23987] 8021q: adding VLAN 0 to HW filter on device bond5 [ 577.417312][T23987] bond5 (unregistering): Released all slaves [ 577.442677][ T7431] IPVS: starting estimator thread 0... [ 577.452619][T24007] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 577.452696][T24000] xfrm0 speed is unknown, defaulting to 1000 [ 577.522524][T24000] xfrm0 speed is unknown, defaulting to 1000 [ 577.531066][T24000] xfrm0 speed is unknown, defaulting to 1000 [ 577.569899][T24015] IPVS: using max 29 ests per chain, 69600 per kthread [ 577.697408][T24023] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 577.805508][T24023] syzkaller0: entered promiscuous mode [ 577.827699][T24023] syzkaller0: entered allmulticast mode [ 577.894431][T24000] infiniband syz1: set active [ 577.899960][T24000] infiniband syz1: added xfrm0 [ 577.922922][T24000] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 577.939229][T24000] infiniband syz1: Couldn't open port 1 [ 577.974393][T24025] tipc: Can't bind to reserved service type 1 [ 578.046836][T24000] RDS/IB: syz1: added [ 578.063899][T24000] smc: adding ib device syz1 with port count 1 [ 578.088054][T24000] smc: ib device syz1 port 1 has no pnetid [ 578.115944][ T7431] xfrm0 speed is unknown, defaulting to 1000 [ 578.125461][T24025] hsr_slave_0: left promiscuous mode [ 578.133144][T24025] hsr_slave_1: left promiscuous mode [ 578.412256][T24046] __nla_validate_parse: 13 callbacks suppressed [ 578.412276][T24046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4626'. [ 578.433391][T24046] netlink: 580 bytes leftover after parsing attributes in process `syz.0.4626'. [ 580.791538][ T944] xfrm0 speed is unknown, defaulting to 1000 [ 580.799123][T24000] xfrm0 speed is unknown, defaulting to 1000 [ 580.865794][T24036] lo speed is unknown, defaulting to 1000 [ 581.075754][T24061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4629'. [ 581.271804][T24070] syzkaller0: entered allmulticast mode [ 581.280602][T24071] syzkaller0: entered promiscuous mode [ 581.286224][T24071] syzkaller0: entered allmulticast mode [ 581.300277][T24068] syzkaller0: left allmulticast mode [ 581.369578][T24000] xfrm0 speed is unknown, defaulting to 1000 [ 581.809319][T24084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4639'. [ 581.832457][T24036] xfrm0 speed is unknown, defaulting to 1000 [ 582.070568][T24088] netlink: 'syz.0.4641': attribute type 1 has an invalid length. [ 582.094196][T24098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4642'. [ 582.179109][T24097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 582.423635][T24100] bond1: (slave bridge1): making interface the new active one [ 582.436720][T24100] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 582.588550][T24000] xfrm0 speed is unknown, defaulting to 1000 [ 582.638945][T24093] lo speed is unknown, defaulting to 1000 [ 583.061130][T24132] netlink: 'syz.1.4648': attribute type 39 has an invalid length. [ 583.421312][T24000] xfrm0 speed is unknown, defaulting to 1000 [ 583.456122][T24139] bond6: option fail_over_mac: invalid value (127) [ 583.470794][T24139] bond6 (unregistering): Released all slaves [ 583.981362][ T5493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 583.992392][T24000] xfrm0 speed is unknown, defaulting to 1000 [ 584.401326][T24000] xfrm0 speed is unknown, defaulting to 1000 [ 584.774160][T24000] xfrm0 speed is unknown, defaulting to 1000 [ 585.127041][T24000] xfrm0 speed is unknown, defaulting to 1000 [ 585.479937][T24198] bond1: option lp_interval: invalid value (0) [ 585.486264][T24198] bond1: option lp_interval: allowed values 1 - 2147483647 [ 585.497602][T24198] bond1 (unregistering): Released all slaves [ 585.631287][T24000] xfrm0 speed is unknown, defaulting to 1000 [ 585.709784][T24208] syzkaller0: entered promiscuous mode [ 585.715929][T24208] syzkaller0: entered allmulticast mode [ 585.971240][T24000] xfrm0 speed is unknown, defaulting to 1000 [ 586.231188][T24224] IPv6: addrconf: prefix option has invalid lifetime [ 586.259844][T24224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4662'. [ 586.278161][T24224] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4662'. [ 586.353203][T24148] lo speed is unknown, defaulting to 1000 [ 586.413030][T24224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4662'. [ 586.726328][T24240] netlink: 'syz.3.4665': attribute type 1 has an invalid length. [ 586.740439][ T7431] hid-generic 0005:16C0:000F.0002: item fetching failed at offset 1/2 [ 586.779488][T24240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4665'. [ 586.790074][ T7431] hid-generic 0005:16C0:000F.0002: probe with driver hid-generic failed with error -22 [ 587.148683][ T5836] Bluetooth: hci2: command 0x0405 tx timeout [ 587.683331][T24259] netlink: 'syz.1.4668': attribute type 1 has an invalid length. [ 587.697969][T24259] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4668'. [ 588.596416][T24272] netlink: 'syz.3.4670': attribute type 83 has an invalid length. [ 589.339549][T24281] netlink: 'syz.0.4674': attribute type 1 has an invalid length. [ 589.351317][T24278] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode [ 589.372962][T24278] mac80211_hwsim hwsim37 syzkaller0: left allmulticast mode [ 589.394604][T24278] tipc: Resetting bearer [ 589.421481][ T1167] tipc: Resetting bearer [ 589.461377][T24288] netlink: 'syz.4.4676': attribute type 32 has an invalid length. [ 589.614675][T24297] vlan4: entered promiscuous mode [ 589.628439][T24297] gretap0: entered promiscuous mode [ 589.666238][T24290] netlink: 'syz.0.4677': attribute type 1 has an invalid length. [ 589.748193][T24290] 8021q: adding VLAN 0 to HW filter on device bond5 [ 589.778927][T24298] lo speed is unknown, defaulting to 1000 [ 590.231607][T24298] xfrm0 speed is unknown, defaulting to 1000 [ 590.292434][T24323] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4684'. [ 590.560169][T24337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4690'. [ 590.631836][T24337] bond6: entered promiscuous mode [ 590.637563][T24337] 8021q: adding VLAN 0 to HW filter on device bond6 [ 590.681002][T24343] syzkaller0: entered promiscuous mode [ 590.686925][T24343] syzkaller0: entered allmulticast mode [ 590.847436][T24350] netlink: 'syz.3.4695': attribute type 13 has an invalid length. [ 591.056884][T24350] tipc: Resetting bearer [ 591.100325][ T9] xfrm0 speed is unknown, defaulting to 1000 [ 591.617674][T24392] netlink: 'syz.1.4706': attribute type 46 has an invalid length. [ 591.985467][T24401] netlink: 'syz.1.4709': attribute type 3 has an invalid length. [ 592.007051][T24401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4709'. [ 592.021811][T24402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4708'. [ 592.034810][T24401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4709'. [ 592.045625][T24401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4709'. [ 592.863284][T24415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4710'. [ 592.913186][T24437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4716'. [ 592.930543][T24415] vlan2: entered promiscuous mode [ 592.935640][T24415] gretap0: entered promiscuous mode [ 593.178419][T24448] vlan2: entered allmulticast mode [ 593.183857][T24448] veth0_to_bond: entered allmulticast mode [ 593.367266][T24460] netlink: 'syz.2.4722': attribute type 15 has an invalid length. [ 593.405872][T24457] lo speed is unknown, defaulting to 1000 [ 593.462728][T24460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4722'. [ 593.616289][T24477] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4727'. [ 593.731724][T24477] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4727'. [ 593.838925][T24471] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 593.848815][T24471] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 593.859399][T24471] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 593.868615][T24457] xfrm0 speed is unknown, defaulting to 1000 [ 594.010336][T24484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4729'. [ 594.044103][T24484] openvswitch: netlink: Flow key attr not present in new flow. [ 594.056439][T24486] mac80211_hwsim hwsim37 syzkaller0: Caught tx_queue_len zero misconfig [ 594.229724][T24489] openvswitch: netlink: Message has 8 unknown bytes. [ 595.386710][T24520] netlink: 'syz.0.4737': attribute type 23 has an invalid length. [ 595.958578][T24540] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 596.630440][T24559] Cannot find add_set index 0 as target [ 596.888339][T24574] syzkaller0: entered promiscuous mode [ 596.923305][T24574] syzkaller0: entered allmulticast mode [ 596.940632][T24573] tipc: Started in network mode [ 596.945671][T24573] tipc: Node identity 621fbd55d34c, cluster identity 4711 [ 596.998329][T24573] tipc: Enabled bearer , priority 0 [ 597.379396][T24596] __nla_validate_parse: 4 callbacks suppressed [ 597.379419][T24596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4758'. [ 597.492258][T24596] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4758'. [ 598.127948][ T9] tipc: Node number set to 2975055189 [ 598.175487][T24608] netlink: 'syz.0.4761': attribute type 1 has an invalid length. [ 598.380035][T24608] 8021q: adding VLAN 0 to HW filter on device bond6 [ 598.532738][T24621] macvlan0: entered promiscuous mode [ 598.571179][T24621] macvlan0: entered allmulticast mode [ 598.588291][T24621] bond6: entered allmulticast mode [ 598.608725][T24621] bond6: entered promiscuous mode [ 598.651536][T24621] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 598.719888][T24621] team0: Port device macvlan0 added [ 598.837199][T24608] bond6: (slave ip6gretap2): making interface the new active one [ 598.893545][T24608] ip6gretap2: entered promiscuous mode [ 598.918616][T24608] ip6gretap2: entered allmulticast mode [ 598.941811][T24608] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 599.224903][T24646] lo speed is unknown, defaulting to 1000 [ 599.901917][ T5836] Bluetooth: hci2: link tx timeout [ 599.910779][ T5836] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 599.921041][ T5836] Bluetooth: hci2: link tx timeout [ 599.926401][ T5836] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 600.059132][T24677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4776'. [ 600.069169][T24646] xfrm0 speed is unknown, defaulting to 1000 [ 600.344990][T24684] lo speed is unknown, defaulting to 1000 [ 600.500019][T24688] lo speed is unknown, defaulting to 1000 [ 601.173308][T24684] xfrm0 speed is unknown, defaulting to 1000 [ 601.835293][T24719] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4783'. [ 601.949890][ T5836] Bluetooth: hci2: command 0x0405 tx timeout [ 602.766842][T24688] xfrm0 speed is unknown, defaulting to 1000 [ 603.242307][T24748] SET target dimension over the limit! [ 603.530379][T24752] netlink: 'syz.2.4787': attribute type 11 has an invalid length. [ 603.565383][T24752] netlink: 'syz.2.4787': attribute type 11 has an invalid length. [ 603.617924][T24752] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4787'. [ 603.869292][T24717] lo speed is unknown, defaulting to 1000 [ 603.882676][T24756] netlink: 'syz.2.4788': attribute type 1 has an invalid length. [ 604.035272][ T5837] Bluetooth: hci2: command 0x0405 tx timeout [ 604.079610][T24756] 8021q: adding VLAN 0 to HW filter on device bond7 [ 604.303018][T24760] bond7: (slave veth9): Enslaving as an active interface with a down link [ 604.445421][T24756] bond7: (slave veth11): Enslaving as an active interface with a down link [ 604.812652][T24717] xfrm0 speed is unknown, defaulting to 1000 [ 606.824485][T24806] lo speed is unknown, defaulting to 1000 [ 607.809157][T24806] xfrm0 speed is unknown, defaulting to 1000 [ 607.922782][T24828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4799'. [ 608.220426][T24842] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4804'. [ 608.429988][T24849] netlink: 'syz.0.4806': attribute type 3 has an invalid length. [ 608.611104][T24859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4809'. [ 608.971200][T24870] lo speed is unknown, defaulting to 1000 [ 609.249059][ T7431] IPVS: starting estimator thread 0... [ 609.282188][T24885] mÿ5nè‹Ò: entered promiscuous mode [ 609.351144][T24886] IPVS: using max 27 ests per chain, 64800 per kthread [ 609.745414][T24870] xfrm0 speed is unknown, defaulting to 1000 [ 609.878823][T24905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4821'. [ 610.200550][T24888] siw: device registration error -23 [ 610.419053][T24911] tipc: Enabled bearer , priority 0 [ 610.444099][T24911] tipc: Resetting bearer [ 610.452052][T24911] C: renamed from team_slave_0 (while UP) [ 610.477765][T24911] netlink: 'syz.1.4824': attribute type 1 has an invalid length. [ 610.486883][T24911] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4824'. [ 610.540265][T24911] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 611.123423][T24927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4828'. [ 611.168302][T24927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4828'. [ 611.209173][T24927] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4828'. [ 611.427960][ T944] tipc: Node number set to 2731832571 [ 611.494669][T24945] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4834'. [ 611.757358][T24955] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4835'. [ 611.786175][T24957] vti0: entered promiscuous mode [ 611.839089][T24961] bond0: (slave bond_slave_1): Releasing backup interface [ 611.936561][T24968] openvswitch: netlink: Missing valid actions attribute. [ 611.953575][T24968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.965191][T24970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4842'. [ 611.977110][T24970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4842'. [ 611.992430][T24968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4841'. [ 612.002408][T24961] netlink: 'syz.0.4839': attribute type 1 has an invalid length. [ 612.032733][T24961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 612.514940][T24996] netlink: 'syz.2.4848': attribute type 1 has an invalid length. [ 612.569664][T24996] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 612.642395][T24996] tipc: Started in network mode [ 612.647429][T24996] tipc: Node identity ac14140f, cluster identity 4711 [ 612.665675][T24996] tipc: New replicast peer: 255.255.255.255 [ 612.680707][T24996] tipc: Enabled bearer , priority 10 [ 612.696944][T24996] syzkaller0: entered promiscuous mode [ 612.713009][T24996] syzkaller0: entered allmulticast mode [ 613.645718][T25051] ip6gretap3: entered promiscuous mode [ 613.671873][T25051] ip6gretap3: entered allmulticast mode [ 613.937238][T25059] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 614.127922][ T944] tipc: Node number set to 2886997007 [ 614.231644][T25071] lo speed is unknown, defaulting to 1000 [ 614.664957][T25093] netlink: 'syz.1.4878': attribute type 1 has an invalid length. [ 614.880354][T25093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 614.900554][T25095] vlan2: entered promiscuous mode [ 614.905791][T25095] bond1: entered promiscuous mode [ 614.911683][T25095] vlan2: entered allmulticast mode [ 614.916856][T25095] bond1: entered allmulticast mode [ 614.984494][T25098] bond1: (slave gretap1): making interface the new active one [ 615.008953][T25098] gretap1: entered promiscuous mode [ 615.015607][T25098] gretap1: entered allmulticast mode [ 615.049209][T25104] __nla_validate_parse: 10 callbacks suppressed [ 615.049231][T25104] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4879'. [ 615.056884][T25098] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 615.074735][T25104] netlink: 'syz.0.4879': attribute type 9 has an invalid length. [ 615.074777][T25104] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4879'. [ 615.074795][T25104] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4879'. [ 615.132417][T25071] xfrm0 speed is unknown, defaulting to 1000 [ 615.470647][T25117] xt_TCPMSS: Only works on TCP SYN packets [ 615.495934][T25119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4886'. [ 615.520935][T25120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4884'. [ 615.559261][T25119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4886'. [ 615.733494][T25127] syzkaller1: entered promiscuous mode [ 615.753049][T25127] syzkaller1: entered allmulticast mode [ 616.770490][T25156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4896'. [ 616.921191][T25164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4898'. [ 617.004583][T25166] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4899'. [ 617.058110][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4899'. [ 617.085147][T25169] bridge4: entered allmulticast mode [ 617.458535][T25191] openvswitch: netlink: Flow key attr not present in new flow. [ 618.215772][T25222] netlink: 'syz.3.4918': attribute type 1 has an invalid length. [ 618.847368][T25252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.442781][T25280] syzkaller1: entered promiscuous mode [ 619.449113][T25280] syzkaller1: entered allmulticast mode [ 619.501476][T25272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 619.543784][T25280] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 619.592767][T25290] openvswitch: netlink: Flow key attr not present in new flow. [ 619.907546][T25311] netlink: 'syz.3.4944': attribute type 1 has an invalid length. [ 619.916151][T25312] netlink: 'syz.3.4944': attribute type 1 has an invalid length. [ 620.148862][T25332] netlink: 'syz.0.4948': attribute type 1 has an invalid length. [ 620.156759][T25332] netlink: 'syz.0.4948': attribute type 3 has an invalid length. [ 620.172988][T25332] __nla_validate_parse: 20 callbacks suppressed [ 620.173007][T25332] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4948'. [ 620.204219][T25334] netlink: 'syz.4.4949': attribute type 2 has an invalid length. [ 620.220763][T25334] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4949'. [ 620.230764][T25331] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4949'. [ 620.246624][T25336] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.4951'. [ 620.280989][T25338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4952'. [ 620.367765][T25343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4954'. [ 620.780081][T25370] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.4963'. [ 621.621645][T25389] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 621.762070][T25399] Cannot find set identified by id 3 to match [ 621.794673][T25402] syzkaller0: entered promiscuous mode [ 621.800972][T25402] syzkaller0: entered allmulticast mode [ 621.831305][T25405] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.4974'. [ 622.111148][T25420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4979'. [ 622.207551][T25422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4980'. [ 622.292790][T25422] team1: entered promiscuous mode [ 622.298488][T25422] team1: entered allmulticast mode [ 622.304634][T25422] 8021q: adding VLAN 0 to HW filter on device team1 [ 622.349049][T25423] team2: entered promiscuous mode [ 622.354250][T25423] team2: entered allmulticast mode [ 622.360475][T25423] 8021q: adding VLAN 0 to HW filter on device team2 [ 622.600020][T25438] sctp: [Deprecated]: syz.2.4982 (pid 25438) Use of struct sctp_assoc_value in delayed_ack socket option. [ 622.600020][T25438] Use struct sctp_sack_info instead [ 622.724305][T25436] lo speed is unknown, defaulting to 1000 [ 622.939009][T25447] syzkaller0: entered promiscuous mode [ 622.953081][T25447] syzkaller0: entered allmulticast mode [ 623.236606][T25436] xfrm0 speed is unknown, defaulting to 1000 [ 623.571049][T25459] netlink: 'syz.3.4990': attribute type 4 has an invalid length. [ 625.060329][T25526] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 625.148575][T25529] FAULT_INJECTION: forcing a failure. [ 625.148575][T25529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.213710][T25529] CPU: 0 UID: 0 PID: 25529 Comm: syz.4.5010 Not tainted syzkaller #0 PREEMPT(full) [ 625.213755][T25529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 625.213777][T25529] Call Trace: [ 625.213786][T25529] [ 625.213796][T25529] dump_stack_lvl+0xe8/0x150 [ 625.213830][T25529] should_fail_ex+0x412/0x560 [ 625.213861][T25529] _copy_from_user+0x2d/0xb0 [ 625.213895][T25529] __sys_bind+0x1c6/0x410 [ 625.213922][T25529] ? __pfx___sys_bind+0x10/0x10 [ 625.213958][T25529] ? __pfx_ksys_write+0x10/0x10 [ 625.213997][T25529] __x64_sys_bind+0x7a/0x90 [ 625.214022][T25529] do_syscall_64+0xe2/0xf80 [ 625.214047][T25529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.214068][T25529] ? trace_irq_disable+0x37/0x100 [ 625.214088][T25529] ? clear_bhb_loop+0x60/0xb0 [ 625.214114][T25529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.214135][T25529] RIP: 0033:0x7f8a7ff9aeb9 [ 625.214154][T25529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.214173][T25529] RSP: 002b:00007f8a80ef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 625.214196][T25529] RAX: ffffffffffffffda RBX: 00007f8a80215fa0 RCX: 00007f8a7ff9aeb9 [ 625.214212][T25529] RDX: 000000000000001c RSI: 0000200000000200 RDI: 0000000000000004 [ 625.214226][T25529] RBP: 00007f8a80ef0090 R08: 0000000000000000 R09: 0000000000000000 [ 625.214239][T25529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.214251][T25529] R13: 00007f8a80216038 R14: 00007f8a80215fa0 R15: 00007ffcf79dcbc8 [ 625.214285][T25529] [ 625.425415][T25532] __nla_validate_parse: 11 callbacks suppressed [ 625.425443][T25532] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.5012'. [ 625.742662][T25539] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5014'. [ 625.775591][T25539] netlink: 'syz.3.5014': attribute type 1 has an invalid length. [ 625.789338][T25539] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5014'. [ 625.891222][T25545] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5017'. [ 625.917204][T25545] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5017'. [ 626.062689][T25558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5019'. [ 626.108821][T25558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5019'. [ 626.242120][T25563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5022'. [ 626.361015][T25563] FAULT_INJECTION: forcing a failure. [ 626.361015][T25563] name failslab, interval 1, probability 0, space 0, times 0 [ 626.411687][T25563] CPU: 0 UID: 0 PID: 25563 Comm: syz.3.5022 Not tainted syzkaller #0 PREEMPT(full) [ 626.411716][T25563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 626.411736][T25563] Call Trace: [ 626.411745][T25563] [ 626.411759][T25563] dump_stack_lvl+0xe8/0x150 [ 626.411793][T25563] should_fail_ex+0x412/0x560 [ 626.411824][T25563] should_failslab+0xa8/0x100 [ 626.411861][T25563] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 626.411894][T25563] ? __alloc_skb+0x186/0x7d0 [ 626.411918][T25563] ? __alloc_skb+0x1d0/0x7d0 [ 626.411940][T25563] ? __local_bh_enable_ip+0xd0/0x130 [ 626.411964][T25563] __alloc_skb+0x1d0/0x7d0 [ 626.411994][T25563] netlink_sendmsg+0x5d4/0xb40 [ 626.412030][T25563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.412059][T25563] ? aa_sock_msg_perm+0xf1/0x1b0 [ 626.412087][T25563] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 626.412119][T25563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.412142][T25563] ____sys_sendmsg+0xa68/0xad0 [ 626.412171][T25563] ? __might_fault+0xaf/0x130 [ 626.412209][T25563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 626.412247][T25563] ? import_iovec+0x73/0xa0 [ 626.412283][T25563] ___sys_sendmsg+0x2a5/0x360 [ 626.412310][T25563] ? __lock_acquire+0x6b5/0x2cf0 [ 626.412350][T25563] ? __pfx____sys_sendmsg+0x10/0x10 [ 626.412416][T25563] ? __fget_files+0x2a/0x420 [ 626.412439][T25563] ? __fget_files+0x3a0/0x420 [ 626.412473][T25563] __x64_sys_sendmsg+0x1bd/0x2a0 [ 626.412506][T25563] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 626.412544][T25563] ? __pfx_ksys_write+0x10/0x10 [ 626.412587][T25563] do_syscall_64+0xe2/0xf80 [ 626.412612][T25563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.412632][T25563] ? trace_irq_disable+0x37/0x100 [ 626.412652][T25563] ? clear_bhb_loop+0x60/0xb0 [ 626.412685][T25563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.412706][T25563] RIP: 0033:0x7f1aeb79aeb9 [ 626.412724][T25563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.412743][T25563] RSP: 002b:00007f1aec5d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 626.412766][T25563] RAX: ffffffffffffffda RBX: 00007f1aeba15fa0 RCX: 00007f1aeb79aeb9 [ 626.412782][T25563] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 626.412796][T25563] RBP: 00007f1aec5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 626.412809][T25563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.412822][T25563] R13: 00007f1aeba16038 R14: 00007f1aeba15fa0 R15: 00007ffdbf3836e8 [ 626.412855][T25563] [ 628.318431][T25640] xt_TCPMSS: Only works on TCP SYN packets [ 628.402038][T25647] veth0_to_bridge: entered promiscuous mode [ 628.449529][T25650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5047'. [ 628.460664][T25646] lo speed is unknown, defaulting to 1000 [ 628.573334][T25645] veth0_to_bridge: left promiscuous mode [ 628.687127][T25655] syzkaller0: entered promiscuous mode [ 628.704063][T25655] syzkaller0: entered allmulticast mode [ 628.942155][T25646] xfrm0 speed is unknown, defaulting to 1000 [ 628.957375][T25664] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5053'. [ 629.703704][T25690] netlink: 'syz.4.5059': attribute type 1 has an invalid length. [ 629.852473][T25690] bond5: entered promiscuous mode [ 629.857630][T25690] bond5: entered allmulticast mode [ 629.938364][T25690] 8021q: adding VLAN 0 to HW filter on device bond5 [ 629.964200][T25692] erspan1: entered allmulticast mode [ 629.985111][T25692] bond5: (slave erspan1): making interface the new active one [ 630.013706][T25692] erspan1: entered promiscuous mode [ 630.025690][T25692] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 630.081856][T25709] xt_TPROXY: Can be used only with -p tcp or -p udp [ 630.110281][T25703] netlink: 'syz.0.5064': attribute type 1 has an invalid length. [ 630.184216][T25713] netlink: 'syz.2.5065': attribute type 1 has an invalid length. [ 630.651608][T25703] 8021q: adding VLAN 0 to HW filter on device bond8 [ 630.679557][T25713] __nla_validate_parse: 3 callbacks suppressed [ 630.679581][T25713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5065'. [ 630.859663][T25708] lo speed is unknown, defaulting to 1000 [ 630.987168][T25729] SET target dimension over the limit! [ 631.498168][T25708] xfrm0 speed is unknown, defaulting to 1000 [ 632.594242][T25771] tipc: Enabled bearer , priority 0 [ 632.629029][T25771] syzkaller0: entered promiscuous mode [ 632.634591][T25771] syzkaller0: entered allmulticast mode [ 632.755139][T25771] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5081'. [ 632.835513][T25771] syzkaller1: entered promiscuous mode [ 632.858233][T25771] syzkaller1: entered allmulticast mode [ 633.057642][T25788] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5087'. [ 633.395809][T25786] tipc: Resetting bearer [ 633.710246][T25770] tipc: Resetting bearer [ 633.994250][T25770] tipc: Disabling bearer [ 634.092255][T25793] tun0: tun_chr_ioctl cmd 1074025681 [ 634.297603][T25827] lo speed is unknown, defaulting to 1000 [ 634.378449][T25828] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5095'. [ 634.468259][T25834] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 634.475880][T25834] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 634.507572][T25834] tipc: Resetting bearer [ 634.730861][T25842] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5100'. [ 634.779178][T25842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5100'. [ 634.878574][T25827] xfrm0 speed is unknown, defaulting to 1000 [ 634.883081][T25848] sit0: Caught tx_queue_len zero misconfig [ 634.919800][T25851] netlink: 'syz.1.5099': attribute type 3 has an invalid length. [ 635.023805][T25849] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 635.149713][T25858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5104'. [ 635.178785][T25859] netlink: 'syz.4.5105': attribute type 1 has an invalid length. [ 635.264505][T25859] 8021q: adding VLAN 0 to HW filter on device bond6 [ 635.556100][T25866] netlink: 'syz.2.5107': attribute type 3 has an invalid length. [ 635.565392][T25864] bond6: (slave ip6gretap2): making interface the new active one [ 635.580301][T25864] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 635.589591][T25866] netlink: 'syz.2.5107': attribute type 3 has an invalid length. [ 635.665745][T25859] veth11: entered promiscuous mode [ 635.730621][T25859] bond6: (slave veth11): Enslaving as an active interface with a down link [ 635.755056][T25867] erspan0: entered allmulticast mode [ 635.792574][T25867] bond6: (slave erspan0): Enslaving as an active interface with an up link [ 635.817103][T25870] netlink: 'syz.3.5108': attribute type 1 has an invalid length. [ 635.862336][T25864] bond6: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 635.950732][ C0] [ 635.953149][ C0] ============================================ [ 635.959425][ C0] WARNING: possible recursive locking detected [ 635.966703][ C0] syzkaller #0 Not tainted [ 635.972696][ C0] -------------------------------------------- [ 635.978913][ C0] syz.3.5108/25870 is trying to acquire lock: [ 635.985125][ C0] ffff88802fce4958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 635.995308][ C0] [ 635.995308][ C0] but task is already holding lock: [ 636.002804][ C0] ffff8880af677d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 636.013077][ C0] [ 636.013077][ C0] other info that might help us debug this: [ 636.021185][ C0] Possible unsafe locking scenario: [ 636.021185][ C0] [ 636.028679][ C0] CPU0 [ 636.031995][ C0] ---- [ 636.035307][ C0] lock(&qdisc_xmit_lock_key#4); [ 636.040383][ C0] lock(&qdisc_xmit_lock_key#4); [ 636.045563][ C0] [ 636.045563][ C0] *** DEADLOCK *** [ 636.045563][ C0] [ 636.053757][ C0] May be due to missing lock nesting notation [ 636.053757][ C0] [ 636.062301][ C0] 17 locks held by syz.3.5108/25870: [ 636.067797][ C0] #0: ffffffff8fef4858 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 636.077429][ C0] #1: ffffffff8f9aaf88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 636.086588][ C0] #2: ffffffff8e697570 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 636.096598][ C0] #3: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x23c0 [ 636.106334][ C0] #4: ffffc90000007ce0 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5a0 [ 636.116426][ C0] #5: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1fd/0x14e0 [ 636.126079][ C0] #6: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 636.135303][ C0] #7: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 636.145710][ C0] #8: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xc9/0x1960 [ 636.155574][ C0] #9: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 636.165586][ C0] #10: ffff88809b407228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x3850 [ 636.178472][ C0] #11: ffff8880af677d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 636.188997][ C0] #12: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 636.198053][ C0] #13: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3d0/0xff0 [ 636.208569][ C0] #14: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 636.217965][ C0] #15: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 636.228169][ C0] #16: ffff88807e942228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x3850 [ 636.241097][ C0] [ 636.241097][ C0] stack backtrace: [ 636.247200][ C0] CPU: 0 UID: 0 PID: 25870 Comm: syz.3.5108 Not tainted syzkaller #0 PREEMPT(full) [ 636.247233][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 636.247248][ C0] Call Trace: [ 636.247263][ C0] [ 636.247272][ C0] dump_stack_lvl+0xe8/0x150 [ 636.247306][ C0] print_deadlock_bug+0x279/0x290 [ 636.247331][ C0] __lock_acquire+0x253f/0x2cf0 [ 636.247366][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 636.247393][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 636.247426][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 636.247451][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 636.247481][ C0] ? sch_direct_xmit+0x15f/0x4c0 [ 636.247503][ C0] lock_acquire+0x106/0x330 [ 636.247533][ C0] ? sch_direct_xmit+0x15f/0x4c0 [ 636.247561][ C0] _raw_spin_lock+0x2e/0x40 [ 636.247583][ C0] ? sch_direct_xmit+0x15f/0x4c0 [ 636.247603][ C0] sch_direct_xmit+0x15f/0x4c0 [ 636.247628][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 636.247648][ C0] ? kasan_save_track+0x4f/0x80 [ 636.247669][ C0] ? kmem_cache_alloc_node_noprof+0x420/0x6f0 [ 636.247703][ C0] ? __alloc_skb+0x27d/0x7d0 [ 636.247733][ C0] __dev_queue_xmit+0x1538/0x3850 [ 636.247779][ C0] ? __dev_queue_xmit+0x274/0x3850 [ 636.247811][ C0] ? arpt_do_table+0x261/0x1ec0 [ 636.247840][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 636.247877][ C0] ? __pfx_arpt_do_table+0x10/0x10 [ 636.247915][ C0] ? NF_HOOK+0xa2/0x3c0 [ 636.247947][ C0] NF_HOOK+0x33a/0x3c0 [ 636.247977][ C0] ? __pfx_arp_xmit_finish+0x10/0x10 [ 636.248008][ C0] ? NF_HOOK+0xa2/0x3c0 [ 636.248038][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 636.248066][ C0] ? lock_acquire+0x106/0x330 [ 636.248097][ C0] ? __pfx_arp_xmit_finish+0x10/0x10 [ 636.248128][ C0] ? inet_addr_type_dev_table+0x25/0x190 [ 636.248163][ C0] arp_xmit+0x16c/0x270 [ 636.248192][ C0] ? arp_xmit+0x23/0x270 [ 636.248223][ C0] arp_solicit+0xbe0/0xe40 [ 636.248257][ C0] ? arp_solicit+0x119/0xe40 [ 636.248289][ C0] ? __pfx_arp_solicit+0x10/0x10 [ 636.248324][ C0] ? __neigh_event_send+0xe9d/0x14a0 [ 636.248349][ C0] ? __pfx_arp_solicit+0x10/0x10 [ 636.248380][ C0] __neigh_event_send+0xf05/0x14a0 [ 636.248410][ C0] neigh_resolve_output+0x198/0x750 [ 636.248437][ C0] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 636.248472][ C0] ip_finish_output2+0xbb6/0xff0 [ 636.248498][ C0] ? ip_skb_dst_mtu+0x80b/0xa50 [ 636.248522][ C0] ? ip_skb_dst_mtu+0x109/0xa50 [ 636.248549][ C0] ? ip_finish_output2+0x3d0/0xff0 [ 636.248578][ C0] ? ip_finish_output+0x33a/0x3f0 [ 636.248606][ C0] ip_output+0x29f/0x450 [ 636.248631][ C0] ? ip_output+0x5b/0x450 [ 636.248655][ C0] iptunnel_xmit+0x59f/0xa00 [ 636.248684][ C0] ip_tunnel_xmit+0x1f74/0x2730 [ 636.248716][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 636.248751][ C0] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 636.248784][ C0] ? gre_build_header+0x31f/0xa40 [ 636.248811][ C0] ? __pfx_gre_build_header+0x10/0x10 [ 636.248835][ C0] ? skb_network_protocol+0x528/0x790 [ 636.248862][ C0] __gre_xmit+0x19e/0x240 [ 636.248885][ C0] ? __pfx___gre_xmit+0x10/0x10 [ 636.248907][ C0] ? iptunnel_handle_offloads+0x2fd/0x630 [ 636.248929][ C0] erspan_xmit+0xa81/0x1670 [ 636.248953][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 636.248985][ C0] ? __pfx_erspan_xmit+0x10/0x10 [ 636.249014][ C0] dev_hard_start_xmit+0x2cd/0x7f0 [ 636.249048][ C0] sch_direct_xmit+0x251/0x4c0 [ 636.249069][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 636.249092][ C0] __dev_queue_xmit+0x1538/0x3850 [ 636.249125][ C0] ? __dev_queue_xmit+0x274/0x3850 [ 636.249153][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 636.249181][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 636.249208][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 636.249232][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 636.249252][ C0] ? lock_acquire+0x106/0x330 [ 636.249287][ C0] ? bond_do_alb_xmit+0x600/0x820 [ 636.249311][ C0] ? bond_dev_queue_xmit+0x9c/0x150 [ 636.249335][ C0] bond_start_xmit+0x77d/0x1960 [ 636.249364][ C0] ? netif_skb_features+0xa95/0x1560 [ 636.249391][ C0] ? bond_start_xmit+0xc9/0x1960 [ 636.249418][ C0] ? __pfx_bond_start_xmit+0x10/0x10 [ 636.249448][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 636.249479][ C0] dev_hard_start_xmit+0x2cd/0x7f0 [ 636.249523][ C0] __dev_queue_xmit+0x168f/0x3850 [ 636.249565][ C0] ? __dev_queue_xmit+0x274/0x3850 [ 636.249604][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 636.249637][ C0] ? ip6_output+0x340/0x550 [ 636.249662][ C0] ? lock_acquire+0x106/0x330 [ 636.249691][ C0] ? ip6_output+0x340/0x550 [ 636.249722][ C0] ? ip6_finish_output2+0xe7e/0x1360 [ 636.249756][ C0] ? ip6_output+0x126/0x550 [ 636.249788][ C0] ip6_output+0x340/0x550 [ 636.249812][ C0] ndisc_send_skb+0xbaa/0x14e0 [ 636.249842][ C0] ? ndisc_send_skb+0x1fd/0x14e0 [ 636.249872][ C0] ? ndisc_alloc_skb+0x1a6/0x480 [ 636.249900][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 636.249929][ C0] ? __pfx_dst_output+0x10/0x10 [ 636.249968][ C0] addrconf_rs_timer+0x395/0x6d0 [ 636.249997][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 636.250021][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 636.250046][ C0] call_timer_fn+0x192/0x5a0 [ 636.250074][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 636.250098][ C0] ? call_timer_fn+0xd4/0x5a0 [ 636.250125][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 636.250158][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 636.250178][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 636.250204][ C0] __run_timer_base+0x652/0x8b0 [ 636.250229][ C0] ? ktime_get+0x45/0x200 [ 636.250256][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 636.250285][ C0] ? sched_clock_cpu+0x74/0x440 [ 636.250315][ C0] run_timer_softirq+0xb7/0x170 [ 636.250342][ C0] handle_softirqs+0x22a/0x7c0 [ 636.250361][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 636.250382][ C0] __irq_exit_rcu+0x5f/0x150 [ 636.250399][ C0] irq_exit_rcu+0x9/0x30 [ 636.250415][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 636.250437][ C0] [ 636.250444][ C0] [ 636.250451][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 636.250472][ C0] RIP: 0010:rcu_is_watching+0x10/0xb0 [ 636.250501][ C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 60 24 49 11 5b 6d ee 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df [ 636.250525][ C0] RSP: 0018:ffffc90002ec6478 EFLAGS: 00000282 [ 636.250546][ C0] RAX: 0000000000000001 RBX: ffffffff908f1501 RCX: ffff8880271b5b80 [ 636.250563][ C0] RDX: ffffc90002ec6501 RSI: dffffc0000000000 RDI: ffffc90002ec6570 [ 636.250579][ C0] RBP: dffffc0000000000 R08: ffffc90002ec6890 R09: 0000000000000000 [ 636.250595][ C0] R10: ffffc90002ec65b8 R11: fffff520005d8cb9 R12: ffffc90002ec68a0 [ 636.250612][ C0] R13: ffffc90002ec0000 R14: ffffc90002ec6568 R15: ffffffff81759195 [ 636.250630][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 636.250663][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 636.250686][ C0] unwind_next_frame+0x1a66/0x23c0 [ 636.250714][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 636.250736][ C0] ? __free_frozen_pages+0xbf8/0xd70 [ 636.250760][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 636.250796][ C0] arch_stack_walk+0x11b/0x150 [ 636.250822][ C0] ? __put_partials+0x146/0x170 [ 636.250851][ C0] stack_trace_save+0xa9/0x100 [ 636.250878][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 636.250913][ C0] save_stack+0x122/0x230 [ 636.250948][ C0] ? __pfx_save_stack+0x10/0x10 [ 636.250982][ C0] ? __free_frozen_pages+0xbf8/0xd70 [ 636.251012][ C0] ? page_ext_put+0x97/0xc0 [ 636.251047][ C0] __reset_page_owner+0x71/0x1f0 [ 636.251079][ C0] __free_frozen_pages+0xbf8/0xd70 [ 636.251106][ C0] __put_partials+0x146/0x170 [ 636.251135][ C0] __slab_free+0x294/0x320 [ 636.251166][ C0] ? qlist_free_all+0x8c/0x100 [ 636.251198][ C0] qlist_free_all+0x97/0x100 [ 636.251229][ C0] kasan_quarantine_reduce+0x148/0x160 [ 636.251263][ C0] __kasan_slab_alloc+0x22/0x80 [ 636.251286][ C0] __kmalloc_cache_noprof+0x36f/0x6e0 [ 636.251308][ C0] ? ref_tracker_alloc+0x161/0x4d0 [ 636.251340][ C0] ref_tracker_alloc+0x161/0x4d0 [ 636.251368][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 636.251396][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 636.251425][ C0] ? kobject_uevent_env+0x378/0x9e0 [ 636.251455][ C0] ? kfree+0x1be/0x650 [ 636.251484][ C0] ? kobject_uevent_net_broadcast+0x4db/0x560 [ 636.251519][ C0] ? kobject_uevent_env+0x378/0x9e0 [ 636.251554][ C0] netdev_queue_update_kobjects+0x1d1/0x6c0 [ 636.251592][ C0] netdev_register_kobject+0x258/0x310 [ 636.251628][ C0] register_netdevice+0x12c0/0x1cf0 [ 636.251667][ C0] ? __pfx_register_netdevice+0x10/0x10 [ 636.251706][ C0] bond_newlink+0x48/0xd0 [ 636.251726][ C0] ? __pfx_bond_newlink+0x10/0x10 [ 636.251747][ C0] rtnl_newlink_create+0x329/0xb70 [ 636.251792][ C0] ? __mutex_lock+0x5ac/0x1300 [ 636.251820][ C0] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 636.251850][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 636.251880][ C0] ? ns_capable+0x89/0xe0 [ 636.251914][ C0] rtnl_newlink+0x1666/0x1be0 [ 636.251946][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 636.251970][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.252015][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 636.252048][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 636.252076][ C0] ? kmem_cache_free+0x195/0x610 [ 636.252096][ C0] ? nlmon_xmit+0xb0/0x100 [ 636.252123][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 636.252156][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 636.252174][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 636.252195][ C0] ? __dev_queue_xmit+0x274/0x3850 [ 636.252228][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 636.252245][ C0] ? __dev_queue_xmit+0x274/0x3850 [ 636.252278][ C0] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 636.252310][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 636.252336][ C0] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 636.252361][ C0] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 636.252385][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 636.252406][ C0] ? ref_tracker_free+0x693/0x840 [ 636.252433][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 636.252465][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 636.252499][ C0] netlink_rcv_skb+0x232/0x4b0 [ 636.252525][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 636.252551][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 636.252581][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 636.252610][ C0] netlink_unicast+0x80f/0x9b0 [ 636.252635][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 636.252656][ C0] ? netlink_sendmsg+0x650/0xb40 [ 636.252681][ C0] ? skb_put+0x11b/0x210 [ 636.252709][ C0] netlink_sendmsg+0x813/0xb40 [ 636.252739][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.252775][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 636.252803][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 636.252829][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.252853][ C0] ____sys_sendmsg+0xa68/0xad0 [ 636.252883][ C0] ? __might_fault+0xaf/0x130 [ 636.252919][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 636.252954][ C0] ? import_iovec+0x73/0xa0 [ 636.252988][ C0] ___sys_sendmsg+0x2a5/0x360 [ 636.253017][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 636.253050][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.253081][ C0] ? futex_wake+0x4ac/0x580 [ 636.253116][ C0] ? __fget_files+0x2a/0x420 [ 636.253140][ C0] ? __fget_files+0x3a0/0x420 [ 636.253169][ C0] __x64_sys_sendmsg+0x1bd/0x2a0 [ 636.253201][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 636.253237][ C0] ? rcu_is_watching+0x15/0xb0 [ 636.253263][ C0] do_syscall_64+0xe2/0xf80 [ 636.253289][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.253311][ C0] ? trace_irq_disable+0x37/0x100 [ 636.253333][ C0] ? clear_bhb_loop+0x60/0xb0 [ 636.253358][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.253380][ C0] RIP: 0033:0x7f1aeb79aeb9 [ 636.253399][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.253420][ C0] RSP: 002b:00007f1aec5b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.253444][ C0] RAX: ffffffffffffffda RBX: 00007f1aeba16090 RCX: 00007f1aeb79aeb9 [ 636.253462][ C0] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 636.253476][ C0] RBP: 00007f1aeb808c1f R08: 0000000000000000 R09: 0000000000000000 [ 636.253491][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.253504][ C0] R13: 00007f1aeba16128 R14: 00007f1aeba16090 R15: 00007ffdbf3836e8 [ 636.253529][ C0] [ 637.545484][T25870] 8021q: adding VLAN 0 to HW filter on device bond6