last executing test programs: 9.575204154s ago: executing program 2 (id=1407): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x20000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 8.621514777s ago: executing program 2 (id=1412): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x0, 0xffffffff}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x20, 0x3, @private1, 0x9}]}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex, 0xffffffffffffffff, 0x26, 0x10}, 0x20) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000040)={r4, @in6={{0xa, 0x4e20, 0x6ba5, @empty, 0x43}}, 0x5}, 0x90) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000d7566f1b0000000010000000383f67ab2d40117e693a957b651d3056656973b4017bb842582748f2dde5422139c0e62945a121603c1286e1b5991a2d425f2c52dab9a330682f55", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r7}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000540)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x2a, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @printk={@llu}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, r10, 0x7}, 0x10) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x28011, r1, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000005c0)={r3}) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r12, &(0x7f0000000700)={&(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@flowinfo={{0x14, 0x29, 0xb, 0x8d2}}], 0x18}, 0x24004800) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x74, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x60, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa}]}]}, 0x74}}, 0x20008080) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x2000) 8.477993824s ago: executing program 2 (id=1413): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000005c0)={{0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, {0xa, 0x0, 0x1, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x1, 0x8, 0x0, 0x9}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61123000000000006113340000000000bf1000000000000015000200091bf3ff3d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280), &(0x7f0000000380)=0x4) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket(0x2b, 0x80801, 0x1) shutdown(r10, 0x1) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01"], 0x3c}}, 0x0) 8.150985083s ago: executing program 2 (id=1415): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "0049f2"}]}], {0x14}}, 0x94}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x80}, {r0, 0x2110}], 0x2, 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xa25, 0xec1, 0x6df1, 0x7f, 0x9}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000240)={r3, @in={{0x2, 0x4e20, @local}}}, 0x84) 6.829195624s ago: executing program 2 (id=1420): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff000000, 0xff], 'virt_wifi0\x00', 'geneve1\x00', {}, {}, 0x3a, 0x10, 0x0, 0x60}, 0x0, 0xe0, 0x128, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x19a}, {0x1}], 0x1, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x84, 0x2, 0x4}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@srh={{0x30}, {0x21, 0x3, 0x4, 0x7, 0x8001, 0x84, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x9, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/ipc\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x810) 6.376441711s ago: executing program 2 (id=1423): unshare(0x6a040000) r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, 0x0, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x50, 0x25, 0x109, 0x70bd29, 0xfffffffc, {0x11}, [@typed={0x3b, 0x14e, 0x0, 0x0, @str='\x00X\xdf39Ws\x14\x03\xa37i\xb2C5\t\x83\x88a\x1f\x89\xe0 \xd6)\x86+\x8d\x17|9\xba\x83b\xb0\x83\xaf\x1f\x9cm\xe9}\xca\xc8\x91@\xe6\v\x97\x1e\xa6\xc9\x87\xc0,'}]}, 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x7cc5c281160b411a, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xff}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0xfffffffffffffdff}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 5.053253942s ago: executing program 3 (id=1433): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x83dff000) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x60040200) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001480)={0x24, 0x12, 0x0, 0x201, 0x0, 0x25dfdbfe, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}, @nested={0x8, 0xe8, 0x0, 0x1, [@nested={0x4, 0x43}]}]}, 0x24}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) 3.700945852s ago: executing program 4 (id=1444): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x1, 0x4, 0x10, {0x0, 0x0, 0x0, r2, 0x10}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_MTU={0x8}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 3.133588264s ago: executing program 1 (id=1447): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000240)="112efc61dfb89b674a9c6721decb", 0xe, 0x8010, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r2 = socket(0xa, 0x3, 0xff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="5e546507da932c3e8c628a600b17cbe584d2f93ce23f60e91af3fbcf0e16db6e759d420151c6c575", 0x77}], 0x1}}], 0x1, 0x4046040) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) 2.618842514s ago: executing program 1 (id=1448): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000040601040000007e4bf42b53fc5d1b00"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0xe821651e0a1b45fc) getsockopt$inet6_tcp_int(r0, 0x6, 0x2a, 0x0, &(0x7f0000000b40)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000040601040000007e4bf42b53fc5d1b00"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0xe821651e0a1b45fc) (async) getsockopt$inet6_tcp_int(r0, 0x6, 0x2a, 0x0, &(0x7f0000000b40)) (async) 2.560935504s ago: executing program 1 (id=1449): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0xb}, {0xb, 0xffff}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000840)={'sit0\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x10, 0x80, 0x0, 0x4, {{0x4c, 0x4, 0x3, 0x9, 0x130, 0x64, 0x0, 0x5, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @rr={0x7, 0x17, 0xa5, [@dev={0xac, 0x14, 0x14, 0xe}, @loopback, @rand_addr=0x64010102, @broadcast, @remote]}, @cipso={0x86, 0x27, 0x1, [{0x7, 0x7, "9308c88eb8"}, {0x6, 0x4, "9f67"}, {0x0, 0xe, "b0ad86a4109c0a97d83c56a4"}, {0x6, 0x4, "9ce5"}, {0x1, 0x4, 'tM'}]}, @timestamp_addr={0x44, 0x2c, 0xee, 0x1, 0x4, [{@local, 0x1000}, {@local, 0x2}, {@remote, 0x400}, {@empty, 0x283}, {@rand_addr=0x64010101, 0x5}]}, @lsrr={0x83, 0x17, 0xf8, [@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @private=0xa010102]}, @timestamp={0x44, 0x18, 0x64, 0x0, 0x2, [0xfffffff8, 0xfffffc94, 0x8, 0x3, 0x2]}, @timestamp_prespec={0x44, 0x3c, 0xf7, 0x3, 0x3, [{@private=0xa010102, 0x2b5e}, {@dev={0xac, 0x14, 0x14, 0x36}, 0xf1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}, {@multicast2, 0x2c1}, {@multicast1, 0x1}, {@loopback, 0x9}, {@local, 0x9}]}, @cipso={0x86, 0x40, 0xffffffffffffffff, [{0x1, 0x10, "8942f1fc170663a722491465b449"}, {0x1, 0xa, "e46bffdba0ac7853"}, {0x5, 0x3, 'r'}, {0x0, 0x3, "88"}, {0x2, 0x3, 'M'}, {0x0, 0x7, "d98676664c"}, {0x6, 0x2}, {0x2, 0xe, "2af8dc03ae0f88c45e3534d5"}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000008c0)={'gretap0\x00', &(0x7f0000000880)={'ip_vti0\x00', 0x0, 0x20, 0x1, 0x9, 0x1be, {{0x8, 0x4, 0x3, 0x6, 0x20, 0x64, 0x0, 0x8, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2e}, {[@generic={0x83, 0xb, "925ff3b4e363b529f6"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6tnl0\x00', 0x0, 0x29, 0xf7, 0x82, 0xffffffff, 0x16f443a76e6d5f9f, @private0, @private1, 0x1, 0x10, 0x6, 0xffff}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000000c0), 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x118, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) r10 = socket$inet(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r10, 0x0, 0x487, 0x0, &(0x7f00000001c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000080)='cgroup.events\x00', 0x275a, 0x0) read$alg(r12, &(0x7f0000000040)=""/12, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0xc8, 0x8, 0x1c8, 0x5803, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0xffffff00, 0xff, 0xffffffff], [0xff, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x1, 0x4}, 0x0, 0x1a0, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@recent0={{0xf8}, {0xa7, 0x8, 0x0, 0x1, 'syz0\x00', 0xfe}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xb, 0x4, 0x3}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x4], 0x81, 0x32, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x4, 0x4}, {0x0, 0x3, 0x1}, 0x4, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 2.185346736s ago: executing program 4 (id=1450): unshare(0x2c060000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x114, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x102, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff732144f7ad7c1b9d", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) unshare(0x2c020400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x141) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000180)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, &(0x7f0000000140)=""/58, 0x3a}, 0xa}], 0x1, 0x42, &(0x7f0000000200)={r2, r3+60000000}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 2.052927015s ago: executing program 1 (id=1451): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000008500000006000000850000000e00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'memory'}, {0x2b, 'cpu'}, {0x2d, 'net_cls'}, {0x2d, 'hugetlb'}, {0x2d, 'net'}, {0x2b, 'memory'}]}, 0x2c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000980)="639a520f1ae99a0fb7ec33c9e900", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.9722222s ago: executing program 4 (id=1452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) close(r0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r3, 0x200}], 0x1, &(0x7f0000000200)={r4, r5+10000000}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000002ac0)=""/4067, 0xfe3}, {&(0x7f0000000600)=""/86, 0x56}], 0x4}, 0x9}], 0x1, 0x40000000, 0x0) 1.936354989s ago: executing program 0 (id=1453): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006608000000000000180000000800000000000000010100009500000000000000c60a000000000102180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 1.8619026s ago: executing program 1 (id=1454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x3000000, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) 1.757968242s ago: executing program 1 (id=1455): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x70bd2a, 0x24dfdbfe, {{@in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x102, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2e, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) unshare(0x6a040000) r1 = socket(0x5, 0x800, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x40, 0x7, 0x9, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x8, 0xce0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl1\x00', r2, 0x4, 0x10, 0xd1, 0xb, 0x11, @dev={0xfe, 0x80, '\x00', 0x1d}, @remote, 0x10, 0x700, 0x9, 0x80000001}}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@ipv6_deladdrlabel={0x30, 0x49, 0x400, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x18, 0x0, 0x0, 0x6f}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x200, 0x70bd2a, 0x25dfdbfb, {0x80, 0x14, 0x0, 0x6, 0x0, 0x1, 0x1b5e15e7446ccf1, 0xb, 0x600}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x64000004) 1.751399236s ago: executing program 0 (id=1456): syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x440, 0x2e8, 0x2e8, 0x440, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x328, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @inet=@rpfilter={{0x28}, {0x9}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0x0, 0xffffffff], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) 1.653972684s ago: executing program 4 (id=1457): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000000)={'geneve1\x00', {0x2, 0x4e20, @multicast1}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x24, 0x32, 0x101}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {0x0, 0xffffffff}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.382892696s ago: executing program 4 (id=1458): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYRESHEX=r0], 0x44}, 0x1, 0x0, 0x0, 0x40051}, 0x24) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000001580)=0x2, 0x4) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) close(0x4) (async) listen(r4, 0x0) (async) connect$unix(r4, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x3e) 1.28535931s ago: executing program 4 (id=1459): socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$inet(0x2, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a782200", @ANYRES32=r10, @ANYBLOB="1400020000000000000000000000ffff000000bfa1c36161eb84fd1bd792b417b20400"], 0x2c}}, 0x0) 1.001386667s ago: executing program 3 (id=1460): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x6, 0xfe, 0x0, 0x3, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_nat_t_type={0x1, 0x14, 0x81}]}, 0x18}}, 0x68f4f00d3aa7dce4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = getuid() sendmsg$nl_xfrm(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@report={0x4c, 0x20, 0x1, 0x70bd2b, 0x25dfdbfd, {0x5e, {@in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x0, 0x4e21, 0x8001, 0x0, 0x20, 0x180, 0x87, 0x0, r3}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x4, 0xd}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x110, r7, 0x952ba000) 586.590837ms ago: executing program 0 (id=1461): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x3f, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 472.353479ms ago: executing program 3 (id=1462): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000203000000000000000000000b0200000000000000000000090200"], 0x0, 0x3e}, 0x28) 398.153668ms ago: executing program 0 (id=1463): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c0007"], 0x40c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x8, 0x4c, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x43}}, {@multicast2, 0x4000}]}, @lsrr={0x83, 0xb, 0xcb, [@broadcast, @multicast2]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) 332.76919ms ago: executing program 3 (id=1464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltfilter={0x2c, 0x2d, 0x220, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x7, 0xf}, {0xa, 0x1}, {0x2, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff7}]}, 0x2c}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 284.19294ms ago: executing program 0 (id=1465): r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r0) unshare(0x400) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r1, &(0x7f0000000580)=@llc={0x1a, 0xffff, 0x1, 0x4, 0x4, 0x38, @random="cd43612bf6b9"}, 0x80) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000080)=0x8, 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 145.428393ms ago: executing program 3 (id=1466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x300, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) 97.280498ms ago: executing program 0 (id=1467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, 0x0, &(0x7f0000000180)}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) pipe(&(0x7f0000000540)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000580)={0x0, 0x9}, &(0x7f00000005c0)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000004c0)="b5331d9bb3768a75145669ecc916c8e7514699457cbcdc5548cfcddd8fd68c4089", 0x21}, {&(0x7f0000000600)="61a89e6a412cba212960cc4e74e20c7c1befa8b43ff09ed8f7785479a2dab8496c72d4ad68be8299f0f0b7e2d544db1bc43283c49688b1d4401220e24d6e3623591c0d5bdde2b7ff32cf36cfafc69b287b9794589643d12f2ef920d89333a4acd9d607c900eb0b1ae48fdc05cb5061d9e373006c4a68162a1fd9ad87f63f8751fa9656d03daf000cae7695f740580df0b3a65cfb584faa17804a2ae2", 0x9c}, {&(0x7f0000000500)="21bedf5aad8823820c8a4fb2aa0eab61960e64ebc92ecb408f48df3746074c046bf24e13fe2ed2c2da002e982da992a849831f", 0x33}], 0x3, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x124, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0xfd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010100, @multicast2, @loopback]}, @lsrr={0x83, 0x13, 0xf7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @multicast2]}, @timestamp_addr={0x44, 0x3c, 0xd9, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x2455}, {@multicast2, 0x4}, {@remote, 0x9}, {@broadcast, 0xa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0x4c, 0xc, 0x1, 0x6, [{@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x10}, {@local, 0x4}, {@rand_addr=0x64010101, 0x3}, {@local, 0x7}, {@multicast2, 0x1}, {@private=0xa010100, 0x6}, {@local, 0x8}, {@local, 0x245d}]}, @generic={0x94, 0xd, "a20ed458452c6ceb3bc089"}, @cipso={0x86, 0x41, 0x2, [{0x0, 0x6, "30a77b74"}, {0x5, 0x8, "109f87c7e7aa"}, {0x1, 0xa, "fe7c480d425ca735"}, {0x85307bc80177278, 0x9, "681edac50abe8b"}, {0x2, 0xb, "5b9fcc3d0c2d68185e"}, {0x7, 0xd, "499fd0c9660196bf249873"}, {0x7, 0x2}]}, @lsrr={0x83, 0xb, 0xb7, [@private=0xa010102, @multicast1]}]}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x41, 0x0, 0x7, [0x12c, 0x1, 0x5, 0x7, 0x1ff]}, @end, @timestamp={0x44, 0x10, 0xc2, 0x0, 0xe, [0x8001, 0xfffff800, 0x1000]}, @timestamp_addr={0x44, 0x24, 0x8d, 0x1, 0x5, [{@private=0xa010102, 0x101}, {@private=0xa010102, 0x1}, {@multicast1, 0x9}, {@rand_addr=0x64010100}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x1f0}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 3 (id=1468): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000dc0), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000001500)={0x40000003, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000012c0), &(0x7f0000001300)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x1e, 0x4, &(0x7f0000002040)=ANY=[@ANYRES64=0xffffffffffffffff], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) poll(0x0, 0x0, 0x7) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{}, &(0x7f0000000c80), &(0x7f0000000cc0)=r2}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000009000000000000000900000d0000000000000000050000000b00000004000000090000000200000008000000020000000f000000010000000d0000000400000001000000000000000b00000000000000060000000100000000002e6100002e5f00"], &(0x7f0000000ec0)=""/225, 0x75, 0xe1, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91102d000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r3, @ANYRES8=r3], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x9, 0x1c, &(0x7f0000003380)=ANY=[@ANYBLOB="18b906000080000000000000090000009500000048000000850000006a00000018110000", @ANYBLOB="790f486aa3abbdd3140bd2ca006ca873", @ANYBLOB="0000000000000000b70200000000000085000000860000001855000000000000000000000000000018630000040000000000000005000000b7080000000000007b8af8ff00000000b7080000000100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186b00000300000000000000fd0000009500000000000000"], &(0x7f0000000e00)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000002380)=""/4096, 0x41000, 0x40, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000001000)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001040)={0x4, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001100)=[r7, r4], &(0x7f00000011c0)=[{0x3, 0x3, 0x7, 0x3}, {0x1, 0x3, 0x9, 0x7}], 0x10, 0x1}, 0x94) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001140), 0x0, 0x4040005) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x404c0bc) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000010000107000004416f1800000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0x13, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x1ad72f7) socket$inet_tcp(0x2, 0x1, 0x0) kernel console output (not intermixed with test programs): ge_slave_1) entered disabled state [ 89.311549][ T5831] bridge_slave_1: entered allmulticast mode [ 89.319577][ T5831] bridge_slave_1: entered promiscuous mode [ 89.339447][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.350254][ T5832] team0: Port device team_slave_1 added [ 89.358940][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.381448][ T5830] team0: Port device team_slave_0 added [ 89.410669][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.432917][ T5830] team0: Port device team_slave_1 added [ 89.474115][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.496927][ T5829] team0: Port device team_slave_0 added [ 89.503526][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.511046][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.537043][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.564340][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.590669][ T5829] team0: Port device team_slave_1 added [ 89.597126][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.604191][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.631697][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.646523][ T5833] team0: Port device team_slave_0 added [ 89.663196][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.670533][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.696740][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.728781][ T5833] team0: Port device team_slave_1 added [ 89.745248][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.748304][ T5838] Bluetooth: hci3: command tx timeout [ 89.752705][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.759100][ T5848] Bluetooth: hci0: command tx timeout [ 89.784488][ T5847] Bluetooth: hci4: command tx timeout [ 89.795707][ T5835] Bluetooth: hci1: command tx timeout [ 89.805299][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.825354][ T5838] Bluetooth: hci2: command tx timeout [ 89.850027][ T5831] team0: Port device team_slave_0 added [ 89.863324][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.870894][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.897437][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.933161][ T5831] team0: Port device team_slave_1 added [ 89.950790][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.958057][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.984140][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.996703][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.004472][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.030949][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.064645][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.072257][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.101629][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.123608][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.130861][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.156906][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.175650][ T5832] hsr_slave_0: entered promiscuous mode [ 90.182225][ T5832] hsr_slave_1: entered promiscuous mode [ 90.201212][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.208283][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.234309][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.295967][ T5830] hsr_slave_0: entered promiscuous mode [ 90.302469][ T5830] hsr_slave_1: entered promiscuous mode [ 90.309312][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 90.315597][ T5830] Cannot create hsr debugfs directory [ 90.407225][ T5833] hsr_slave_0: entered promiscuous mode [ 90.413783][ T5833] hsr_slave_1: entered promiscuous mode [ 90.420246][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 90.426323][ T5833] Cannot create hsr debugfs directory [ 90.439179][ T5829] hsr_slave_0: entered promiscuous mode [ 90.446009][ T5829] hsr_slave_1: entered promiscuous mode [ 90.452155][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 90.458272][ T5829] Cannot create hsr debugfs directory [ 90.470753][ T5831] hsr_slave_0: entered promiscuous mode [ 90.477424][ T5831] hsr_slave_1: entered promiscuous mode [ 90.483615][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 90.489555][ T5831] Cannot create hsr debugfs directory [ 91.094298][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.125822][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.146246][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.165473][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.210549][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.231620][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.247907][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.267668][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.321139][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.339014][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.352476][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.369398][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.461478][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.484122][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.496038][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.508993][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.637695][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.650573][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.663472][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.688228][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.723226][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.784838][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.814394][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.826449][ T5835] Bluetooth: hci1: command tx timeout [ 91.826459][ T5848] Bluetooth: hci0: command tx timeout [ 91.837886][ T5847] Bluetooth: hci4: command tx timeout [ 91.843383][ T5838] Bluetooth: hci3: command tx timeout [ 91.866421][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.873642][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.906978][ T5835] Bluetooth: hci2: command tx timeout [ 91.914278][ T9] cfg80211: failed to load regulatory.db [ 91.922888][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.934726][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.941915][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.973794][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.989764][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.996919][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.034093][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.058065][ T1978] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.065282][ T1978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.095424][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.117484][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.124605][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.152116][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.163559][ T4522] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.170717][ T4522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.204479][ T1978] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.211663][ T1978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.233750][ T1978] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.240972][ T1978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.359528][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.430741][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.491381][ T4522] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.498627][ T4522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.560873][ T4522] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.568093][ T4522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.684129][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.900099][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.973295][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.981764][ T5832] veth0_vlan: entered promiscuous mode [ 93.030919][ T5832] veth1_vlan: entered promiscuous mode [ 93.183123][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.192881][ T5833] veth0_vlan: entered promiscuous mode [ 93.220812][ T5832] veth0_macvtap: entered promiscuous mode [ 93.248458][ T5832] veth1_macvtap: entered promiscuous mode [ 93.270492][ T5833] veth1_vlan: entered promiscuous mode [ 93.331855][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.366655][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.382186][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.405752][ T5829] veth0_vlan: entered promiscuous mode [ 93.418822][ T1138] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.433412][ T1138] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.444539][ T1138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.459172][ T1138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.482240][ T5829] veth1_vlan: entered promiscuous mode [ 93.524309][ T5833] veth0_macvtap: entered promiscuous mode [ 93.557393][ T5833] veth1_macvtap: entered promiscuous mode [ 93.646071][ T5830] veth0_vlan: entered promiscuous mode [ 93.677056][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.685023][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.699844][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.709703][ T5831] veth0_vlan: entered promiscuous mode [ 93.720662][ T5829] veth0_macvtap: entered promiscuous mode [ 93.732822][ T5830] veth1_vlan: entered promiscuous mode [ 93.757098][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.781816][ T5829] veth1_macvtap: entered promiscuous mode [ 93.794994][ T5831] veth1_vlan: entered promiscuous mode [ 93.807868][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.822011][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.831649][ T3455] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.843401][ T3455] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.864460][ T3455] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.884755][ T3455] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.906450][ T5847] Bluetooth: hci3: command tx timeout [ 93.906806][ T5848] Bluetooth: hci4: command tx timeout [ 93.912200][ T5835] Bluetooth: hci0: command tx timeout [ 93.922920][ T5838] Bluetooth: hci1: command tx timeout [ 93.930362][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.954855][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.986580][ T5838] Bluetooth: hci2: command tx timeout [ 93.992266][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.008329][ T1138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.021016][ T1138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.036162][ T1138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.053934][ T1138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.084752][ T5830] veth0_macvtap: entered promiscuous mode [ 94.151826][ T5830] veth1_macvtap: entered promiscuous mode [ 94.236377][ T5831] veth0_macvtap: entered promiscuous mode [ 94.270005][ T5831] veth1_macvtap: entered promiscuous mode [ 94.299543][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.310843][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.334209][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.342458][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.353596][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.366697][ T5954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6'. [ 94.375666][ T5954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6'. [ 94.384369][ T5954] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6'. [ 94.416802][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.458595][ T5954] netlink: 'syz.3.6': attribute type 7 has an invalid length. [ 94.470781][ T4522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.484769][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.486040][ T4522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.499056][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.521891][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.537690][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.555784][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.572531][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.585965][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.610385][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.684985][ T1138] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.724682][ T1138] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.763340][ T1138] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.800402][ T1138] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.054419][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.085686][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.211148][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.246394][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.355494][ T5964] sctp: [Deprecated]: syz.0.1 (pid 5964) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.355494][ T5964] Use struct sctp_sack_info instead [ 95.685178][ T5983] Zero length message leads to an empty skb [ 95.801101][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.837289][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.986154][ T5835] Bluetooth: hci0: command tx timeout [ 95.991622][ T5835] Bluetooth: hci3: command tx timeout [ 95.995317][ T5848] Bluetooth: hci4: command tx timeout [ 95.997634][ T5838] Bluetooth: hci1: command tx timeout [ 96.067695][ T5835] Bluetooth: hci2: command tx timeout [ 96.402308][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.431828][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.582197][ T6002] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.734303][ T6002] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.806219][ T6008] netlink: 'syz.1.13': attribute type 4 has an invalid length. [ 96.828498][ T6008] netlink: 17 bytes leftover after parsing attributes in process `syz.1.13'. [ 97.153086][ T6002] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.321646][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 97.388762][ T6002] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.438657][ T6033] sctp: [Deprecated]: syz.2.3 (pid 6033) Use of int in max_burst socket option. [ 97.438657][ T6033] Use struct sctp_assoc_value instead [ 97.608322][ T6032] warning: `syz.0.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.411906][ T6041] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.421785][ T6048] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.541799][ T3546] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.657844][ T3546] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.706708][ T3455] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.909772][ T6064] netlink: 44 bytes leftover after parsing attributes in process `syz.3.23'. [ 98.935563][ T6057] syz.0.21 uses obsolete (PF_INET,SOCK_PACKET) [ 99.004644][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 99.013631][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'. [ 99.053126][ T6068] netlink: 'syz.1.25': attribute type 1 has an invalid length. [ 99.068761][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 99.078598][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'. [ 99.093645][ T3495] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.103462][ T3495] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.114626][ T3495] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.193621][ T6074] batman_adv: batadv0: Adding interface: veth3 [ 99.262369][ T6074] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.334917][ T6074] batman_adv: batadv0: Not using interface veth3 (retrying later): interface not active [ 99.355978][ T6082] syzkaller0: entered promiscuous mode [ 99.361520][ T6082] syzkaller0: entered allmulticast mode [ 99.383946][ T3495] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.407374][ T6075] tipc: Started in network mode [ 99.435429][ T6075] tipc: Node identity ca4065ad68b5, cluster identity 4711 [ 99.498685][ T6075] tipc: Enabled bearer , priority 0 [ 99.567535][ T6080] bridge1: entered promiscuous mode [ 99.598088][ T6080] bridge1: entered allmulticast mode [ 99.641480][ T6089] tipc: Started in network mode [ 99.656406][ T6089] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 99.691109][ T6089] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 99.705671][ T6089] tipc: Enabled bearer , priority 10 [ 99.728527][ T6053] tipc: Resetting bearer [ 99.782874][ T6053] tipc: Disabling bearer [ 99.884733][ T6093] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 100.817126][ T6042] tipc: Node number set to 1 [ 102.112646][ T6161] netlink: 'syz.4.51': attribute type 39 has an invalid length. [ 102.176085][ T6167] __nla_validate_parse: 1 callbacks suppressed [ 102.176106][ T6167] netlink: 76 bytes leftover after parsing attributes in process `syz.4.51'. [ 102.359580][ T6161] veth0_macvtap: left promiscuous mode [ 103.272154][ T6216] netlink: 'syz.2.64': attribute type 10 has an invalid length. [ 103.308036][ T6216] team0: Port device netdevsim0 added [ 103.365451][ T6221] netlink: 'syz.1.66': attribute type 1 has an invalid length. [ 103.429392][ T6226] netlink: 24 bytes leftover after parsing attributes in process `syz.4.67'. [ 103.438977][ T6226] netlink: 24 bytes leftover after parsing attributes in process `syz.4.67'. [ 103.449564][ T6221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.66'. [ 103.452871][ T6228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.67'. [ 103.468160][ T6228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.67'. [ 103.495848][ T6228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.67'. [ 103.504969][ T6228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.67'. [ 103.974480][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 104.055287][ T6240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.71'. [ 104.857603][ T6271] netlink: 'syz.0.79': attribute type 11 has an invalid length. [ 105.521761][ T6282] TCP: TCP_TX_DELAY enabled [ 105.792704][ T6291] netlink: 'syz.3.88': attribute type 3 has an invalid length. [ 106.171916][ T6298] bond0: entered promiscuous mode [ 106.190500][ T6298] bond_slave_0: entered promiscuous mode [ 106.202167][ T6298] bond_slave_1: entered promiscuous mode [ 106.603590][ T6315] sctp: [Deprecated]: syz.2.93 (pid 6315) Use of int in maxseg socket option. [ 106.603590][ T6315] Use struct sctp_assoc_value instead [ 107.684224][ T6358] __nla_validate_parse: 14 callbacks suppressed [ 107.684245][ T6358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.104'. [ 107.885266][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 107.940181][ T6364] Bluetooth: MGMT ver 1.23 [ 107.973998][ T6364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.105'. [ 108.289901][ T6376] tipc: Started in network mode [ 108.297932][ T6376] tipc: Node identity be8c49317407, cluster identity 4711 [ 108.307662][ T6376] tipc: Enabled bearer , priority 0 [ 108.400788][ T6376] syzkaller0: entered promiscuous mode [ 108.444507][ T6376] syzkaller0: entered allmulticast mode [ 108.499831][ T6376] tipc: Resetting bearer [ 108.507234][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.108'. [ 108.541377][ T6375] tipc: Resetting bearer [ 108.665739][ T6382] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 108.864736][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056596c00: rx timeout, send abort [ 108.883849][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056596c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 109.499467][ T6407] netlink: 32 bytes leftover after parsing attributes in process `syz.0.114'. [ 110.092043][ T6375] tipc: Disabling bearer [ 110.104744][ T6394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.121568][ T5991] tipc: Node number set to 3398125873 [ 110.141417][ T6406] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 110.398631][ T6410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.115'. [ 111.026225][ T6446] netlink: 40 bytes leftover after parsing attributes in process `syz.4.129'. [ 111.102606][ T6448] netlink: 64 bytes leftover after parsing attributes in process `syz.2.130'. [ 111.217229][ T6450] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 111.343569][ T6460] netlink: 120 bytes leftover after parsing attributes in process `syz.3.133'. [ 111.463405][ T6465] netlink: 'syz.0.136': attribute type 5 has an invalid length. [ 111.482893][ T6465] ip6erspan0: entered promiscuous mode [ 111.634103][ T6469] tipc: Started in network mode [ 111.640854][ T6469] tipc: Node identity , cluster identity 4711 [ 111.649223][ T6469] tipc: Failed to obtain node identity [ 111.654897][ T6469] tipc: Enabling of bearer rejected, failed to enable media [ 111.974689][ T6493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.142'. [ 112.097092][ T6496] netlink: 'syz.2.145': attribute type 1 has an invalid length. [ 112.326326][ T6497] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 112.346985][ T6497] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 112.403814][ T6497] bond1: (slave vxcan3): making interface the new active one [ 112.440178][ T6497] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 112.892719][ T6536] gretap0: entered promiscuous mode [ 112.910689][ T6536] macsec1: entered promiscuous mode [ 112.930111][ T6536] macsec1: entered allmulticast mode [ 112.957915][ T6536] gretap0: entered allmulticast mode [ 113.007222][ T6536] gretap0: left allmulticast mode [ 113.012882][ T6536] gretap0: left promiscuous mode [ 113.080253][ T6546] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.251636][ T6548] vlan2: entered promiscuous mode [ 113.325951][ T6548] gretap0: entered promiscuous mode [ 113.520800][ T6553] __nla_validate_parse: 2 callbacks suppressed [ 113.520818][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.160'. [ 114.204422][ T6572] netlink: 64 bytes leftover after parsing attributes in process `syz.1.165'. [ 114.238218][ T6572] block nbd0: not configured, cannot reconfigure [ 114.431003][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 114.482803][ T6581] netlink: 'syz.4.167': attribute type 1 has an invalid length. [ 114.501968][ T6581] netlink: 'syz.4.167': attribute type 2 has an invalid length. [ 114.530229][ T6581] netlink: 'syz.4.167': attribute type 1 has an invalid length. [ 114.701351][ T6589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.170'. [ 115.091458][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'. [ 115.223688][ T6612] netlink: 'syz.4.177': attribute type 29 has an invalid length. [ 115.335952][ T6617] netlink: 'syz.4.177': attribute type 29 has an invalid length. [ 115.398686][ T6612] netlink: 504 bytes leftover after parsing attributes in process `syz.4.177'. [ 115.408913][ T6612] unsupported nla_type 3302 [ 116.441086][ T6640] openvswitch: netlink: Key 6 has unexpected len 212 expected 2 [ 116.478521][ T6642] openvswitch: netlink: Key 6 has unexpected len 212 expected 2 [ 116.820035][ T6660] IPVS: length: 132 != 8 [ 116.833710][ T6660] pimreg: entered allmulticast mode [ 116.891186][ T6660] pimreg: left allmulticast mode [ 117.195768][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 117.793171][ T6683] netlink: 'syz.0.196': attribute type 1 has an invalid length. [ 118.591616][ T6697] netlink: del zone limit has 4 unknown bytes [ 118.607652][ T6707] syzkaller1: entered promiscuous mode [ 118.615723][ T6707] syzkaller1: entered allmulticast mode [ 118.671018][ T6702] openvswitch: netlink: IPv6 tunnel dst address is zero [ 118.814973][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'. [ 118.870336][ T6718] openvswitch: netlink: Missing key (keys=40, expected=80) [ 119.566313][ T6752] netlink: 96 bytes leftover after parsing attributes in process `syz.2.215'. [ 119.575504][ T6751] netlink: 96 bytes leftover after parsing attributes in process `syz.2.215'. [ 119.621251][ T6752] 8021q: VLANs not supported on ip6_vti0 [ 119.658731][ T6751] 8021q: VLANs not supported on ip6_vti0 [ 119.691507][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 119.900984][ T6760] syzkaller0: entered promiscuous mode [ 119.919366][ T6760] syzkaller0: entered allmulticast mode [ 119.950605][ T6760] tipc: Started in network mode [ 119.972272][ T6760] tipc: Node identity fe7cbf1721fb, cluster identity 4711 [ 119.981175][ T6760] tipc: Enabled bearer , priority 0 [ 120.040960][ T6759] tipc: Resetting bearer [ 120.146550][ T6759] tipc: Disabling bearer [ 120.180364][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.224'. [ 120.207746][ T6780] netlink: 'syz.2.225': attribute type 10 has an invalid length. [ 120.235920][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.244343][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.283582][ T6780] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.290897][ T6780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.299369][ T6780] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.306603][ T6780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.389471][ T6780] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 120.469286][ T6786] tun0: tun_chr_ioctl cmd 1074025681 [ 120.491267][ T6785] tun0: tun_chr_ioctl cmd 1074025681 [ 120.569183][ T6793] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 120.577753][ T6786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.746897][ T6799] vlan2: entered allmulticast mode [ 120.752094][ T6799] geneve1: entered allmulticast mode [ 121.828733][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.245'. [ 122.056215][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.247'. [ 122.085129][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 122.289523][ T6872] netlink: 'syz.4.252': attribute type 5 has an invalid length. [ 123.083586][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'. [ 123.124242][ T6911] netlink: 277 bytes leftover after parsing attributes in process `syz.1.260'. [ 123.570761][ T6925] netlink: 'syz.3.265': attribute type 1 has an invalid length. [ 123.646396][ T6929] bond_slave_0: entered promiscuous mode [ 123.652345][ T6929] bond_slave_1: entered promiscuous mode [ 123.658115][ T6929] bridge0: entered promiscuous mode [ 123.761742][ T6931] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 123.800578][ T6931] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 123.833167][ T6931] bond1: (slave vxcan3): making interface the new active one [ 123.890360][ T6931] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 124.006781][ T6940] bridge0: entered promiscuous mode [ 124.021394][ T6940] bridge0: port 3(macvtap1) entered blocking state [ 124.029424][ T6940] bridge0: port 3(macvtap1) entered disabled state [ 124.036865][ T6940] macvtap1: entered allmulticast mode [ 124.042471][ T6940] bridge0: entered allmulticast mode [ 124.066694][ T6940] macvtap1: left allmulticast mode [ 124.075018][ T6940] bridge0: left allmulticast mode [ 124.113361][ T6940] bridge0: left promiscuous mode [ 124.231609][ T6951] mac80211_hwsim hwsim4 : renamed from wlan0 (while UP) [ 124.654082][ T6972] xt_socket: unknown flags 0x50 [ 124.665336][ T6953] __nla_validate_parse: 3 callbacks suppressed [ 124.665354][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 125.383138][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'. [ 125.414554][ T7011] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 4, id = 0 [ 125.458673][ T7013] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.286'. [ 125.584504][ T7000] hsr_slave_1 (unregistering): left promiscuous mode [ 125.822113][ T7024] netlink: 92 bytes leftover after parsing attributes in process `syz.4.290'. [ 125.839331][ T7024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.290'. [ 126.024142][ T7037] netlink: 'syz.0.293': attribute type 15 has an invalid length. [ 126.214587][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'. [ 126.307242][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'. [ 126.350698][ T7051] Bluetooth: MGMT ver 1.23 [ 126.379252][ T7046] team1: entered promiscuous mode [ 126.384412][ T7046] team1: entered allmulticast mode [ 126.390223][ T7046] 8021q: adding VLAN 0 to HW filter on device team1 [ 126.445740][ T7045] team2: entered promiscuous mode [ 126.451026][ T7045] team2: entered allmulticast mode [ 126.457598][ T7045] 8021q: adding VLAN 0 to HW filter on device team2 [ 126.476277][ T7051] tipc: Enabling of bearer rejected, failed to enable media [ 126.685174][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 126.794545][ T7072] netlink: 'syz.3.301': attribute type 1 has an invalid length. [ 127.002355][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 127.025376][ T7082] hsr0: entered promiscuous mode [ 127.030450][ T7082] hsr0: entered allmulticast mode [ 127.042001][ T7082] hsr_slave_0: entered allmulticast mode [ 127.061614][ T7082] hsr_slave_1: entered allmulticast mode [ 127.390783][ T7105] netlink: 'syz.4.309': attribute type 1 has an invalid length. [ 127.400567][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 127.457968][ T7105] netlink: 'syz.4.309': attribute type 2 has an invalid length. [ 127.495304][ T7105] netlink: 'syz.4.309': attribute type 1 has an invalid length. [ 127.524832][ T7105] netlink: 'syz.4.309': attribute type 3 has an invalid length. [ 128.391158][ T5847] Bluetooth: hci2: command 0x0401 tx timeout [ 128.392551][ T5835] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 128.599637][ T7142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.756504][ T7142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.931231][ T7142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.129480][ T7142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.351185][ T7207] netlink: 'syz.3.334': attribute type 13 has an invalid length. [ 129.877873][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.885868][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.364815][ T7207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.390624][ T7207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.903203][ T177] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.917477][ T177] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.956706][ T177] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.970272][ T30] audit: type=1800 audit(1769279390.999:2): pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.337" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 130.991990][ T7218] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 131.015752][ T7218] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 131.029105][ T177] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.049142][ T177] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.073152][ T7218] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 131.088498][ T177] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.125877][ T1156] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.166320][ T1156] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.189117][ T7138] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.210206][ T7242] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 131.242834][ T7242] Cannot find set identified by id 3 to match [ 131.276359][ T7138] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.430493][ T7253] __nla_validate_parse: 11 callbacks suppressed [ 131.430513][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'. [ 131.496121][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'. [ 131.544226][ T7138] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.562857][ T7259] netlink: 48 bytes leftover after parsing attributes in process `syz.2.346'. [ 131.604244][ T7260] netlink: 'syz.4.347': attribute type 39 has an invalid length. [ 131.769820][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'. [ 131.769828][ T7138] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.793133][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'. [ 131.949963][ T7274] tipc: Started in network mode [ 131.954908][ T7274] tipc: Node identity 329809ed4ebf, cluster identity 4711 [ 131.983420][ T7274] tipc: Enabled bearer , priority 0 [ 132.008999][ T7274] syzkaller0: entered promiscuous mode [ 132.015521][ T7274] syzkaller0: entered allmulticast mode [ 132.037961][ T7280] netlink: 'syz.4.354': attribute type 1 has an invalid length. [ 132.049609][ T7278] Cannot find set identified by id 65534 to match [ 132.285895][ T7284] tipc: Resetting bearer [ 132.339175][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 132.376085][ T7288] syzkaller0: entered promiscuous mode [ 132.381663][ T7288] syzkaller0: entered allmulticast mode [ 132.666288][ T7301] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 132.719687][ T7302] netlink: 16 bytes leftover after parsing attributes in process `syz.3.359'. [ 133.586473][ T7272] tipc: Resetting bearer [ 133.601267][ T7272] tipc: Disabling bearer [ 133.610731][ T5950] tipc: Node number set to 2082933229 [ 133.800227][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 133.843107][ T7316] netlink: 'syz.2.364': attribute type 1 has an invalid length. [ 133.856043][ T7318] netlink: 'syz.1.363': attribute type 1 has an invalid length. [ 133.863763][ T7318] netlink: 'syz.1.363': attribute type 2 has an invalid length. [ 133.891906][ T7318] netlink: 'syz.1.363': attribute type 1 has an invalid length. [ 133.901997][ T7316] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.914952][ T7319] netlink: 52 bytes leftover after parsing attributes in process `syz.2.364'. [ 133.928633][ T7318] netlink: 'syz.1.363': attribute type 3 has an invalid length. [ 134.118641][ T7324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.132664][ T7325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.334653][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 134.418391][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.518260][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.566685][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.812943][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.058895][ T7405] nbd: must specify a size in bytes for the device [ 136.605590][ T7425] Driver unsupported XDP return value 0 on prog (id 189) dev N/A, expect packet loss! [ 137.091250][ T7456] tipc: Enabled bearer , priority 0 [ 137.103822][ T7459] tipc: Enabling of bearer rejected, already enabled [ 137.129672][ T7458] tipc: Enabled bearer , priority 0 [ 137.137052][ T7456] syzkaller0: entered promiscuous mode [ 137.142761][ T7456] syzkaller0: entered allmulticast mode [ 137.151086][ T7458] syzkaller0: entered promiscuous mode [ 137.157048][ T7458] syzkaller0: entered allmulticast mode [ 137.213525][ T7458] tipc: Resetting bearer [ 137.244446][ T7456] tipc: Resetting bearer [ 137.257264][ T7466] __nla_validate_parse: 1 callbacks suppressed [ 137.257284][ T7466] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.397'. [ 137.274499][ T7457] tipc: Resetting bearer [ 137.296722][ T7466] netlink: ct family unspecified [ 137.305962][ T7457] tipc: Disabling bearer [ 137.327560][ T7455] tipc: Resetting bearer [ 137.361943][ T7455] tipc: Disabling bearer [ 137.597882][ T7480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.401'. [ 137.612391][ T7480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.401'. [ 137.627265][ T7482] netlink: 27 bytes leftover after parsing attributes in process `syz.2.402'. [ 137.744949][ T7488] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 137.877681][ T7496] netlink: 168 bytes leftover after parsing attributes in process `syz.3.406'. [ 137.985477][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 138.007456][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.014102][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.406'. [ 138.023332][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.442699][ T7513] netlink: 40 bytes leftover after parsing attributes in process `syz.0.413'. [ 139.133460][ T7552] netlink: 136 bytes leftover after parsing attributes in process `syz.0.419'. [ 139.182110][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 139.431423][ T7561] bridge4: entered allmulticast mode [ 139.612316][ T7572] netlink: 'syz.0.426': attribute type 13 has an invalid length. [ 139.631963][ T7572] netlink: 'syz.0.426': attribute type 17 has an invalid length. [ 139.776302][ T7575] FAULT_INJECTION: forcing a failure. [ 139.776302][ T7575] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 139.812644][ T7575] CPU: 0 UID: 0 PID: 7575 Comm: syz.4.427 Not tainted syzkaller #0 PREEMPT(full) [ 139.812672][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 139.812692][ T7575] Call Trace: [ 139.812700][ T7575] [ 139.812710][ T7575] dump_stack_lvl+0xe8/0x150 [ 139.812743][ T7575] should_fail_ex+0x412/0x560 [ 139.812778][ T7575] _copy_from_user+0x2d/0xb0 [ 139.812802][ T7575] ___sys_recvmsg+0x175/0x590 [ 139.812824][ T7575] ? get_pid_task+0x20/0x1f0 [ 139.812849][ T7575] ? get_pid_task+0x20/0x1f0 [ 139.812880][ T7575] ? __pfx____sys_recvmsg+0x10/0x10 [ 139.812917][ T7575] ? __fget_files+0x2a/0x420 [ 139.812961][ T7575] ? __fget_files+0x3a0/0x420 [ 139.812998][ T7575] __x64_sys_recvmsg+0x1ba/0x2a0 [ 139.813023][ T7575] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 139.813056][ T7575] ? __pfx_ksys_write+0x10/0x10 [ 139.813088][ T7575] do_syscall_64+0xe2/0xf80 [ 139.813107][ T7575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.813127][ T7575] ? trace_irq_disable+0x37/0x100 [ 139.813153][ T7575] ? clear_bhb_loop+0x60/0xb0 [ 139.813178][ T7575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.813197][ T7575] RIP: 0033:0x7fa234b9acb9 [ 139.813225][ T7575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.813241][ T7575] RSP: 002b:00007fa232dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 139.813270][ T7575] RAX: ffffffffffffffda RBX: 00007fa234e16180 RCX: 00007fa234b9acb9 [ 139.813285][ T7575] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 139.813298][ T7575] RBP: 00007fa232dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 139.813310][ T7575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.813321][ T7575] R13: 00007fa234e16218 R14: 00007fa234e16180 R15: 00007ffc3446d858 [ 139.813354][ T7575] [ 140.029492][ T7572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.598491][ T7605] netlink: 'syz.2.434': attribute type 1 has an invalid length. [ 140.971262][ T7618] bond1 (unregistering): Released all slaves [ 140.994115][ T7622] netlink: 'syz.3.439': attribute type 178 has an invalid length. [ 141.684888][ T7639] xt_hashlimit: max too large, truncated to 1048576 [ 141.719199][ T7639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.016975][ T7652] FAULT_INJECTION: forcing a failure. [ 142.016975][ T7652] name failslab, interval 1, probability 0, space 0, times 1 [ 142.075278][ T7652] CPU: 1 UID: 0 PID: 7652 Comm: syz.0.447 Not tainted syzkaller #0 PREEMPT(full) [ 142.075306][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 142.075319][ T7652] Call Trace: [ 142.075327][ T7652] [ 142.075335][ T7652] dump_stack_lvl+0xe8/0x150 [ 142.075367][ T7652] should_fail_ex+0x412/0x560 [ 142.075402][ T7652] should_failslab+0xa8/0x100 [ 142.075429][ T7652] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 142.075463][ T7652] ? __alloc_skb+0x1d0/0x7d0 [ 142.075491][ T7652] ? __local_bh_enable_ip+0xd0/0x130 [ 142.075519][ T7652] __alloc_skb+0x1d0/0x7d0 [ 142.075556][ T7652] netlink_dump+0x1ef/0xe80 [ 142.075593][ T7652] ? __pfx_netlink_dump+0x10/0x10 [ 142.075634][ T7652] ? kmem_cache_free+0x195/0x610 [ 142.075653][ T7652] ? netlink_recvmsg+0x5d6/0xa50 [ 142.075684][ T7652] netlink_recvmsg+0x690/0xa50 [ 142.075719][ T7652] ? __pfx_netlink_recvmsg+0x10/0x10 [ 142.075749][ T7652] ? __lock_acquire+0x6b5/0x2cf0 [ 142.075769][ T7652] ? aa_sock_msg_perm+0xf1/0x1b0 [ 142.075799][ T7652] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 142.075817][ T7652] ? security_socket_recvmsg+0x7e/0x2c0 [ 142.075849][ T7652] ? __pfx_netlink_recvmsg+0x10/0x10 [ 142.075874][ T7652] sock_recvmsg+0x22c/0x270 [ 142.075906][ T7652] ____sys_recvmsg+0x1e6/0x4a0 [ 142.075938][ T7652] ? __pfx_____sys_recvmsg+0x10/0x10 [ 142.075977][ T7652] ? import_iovec+0x73/0xa0 [ 142.076010][ T7652] ___sys_recvmsg+0x215/0x590 [ 142.076030][ T7652] ? get_pid_task+0x20/0x1f0 [ 142.076063][ T7652] ? __pfx____sys_recvmsg+0x10/0x10 [ 142.076089][ T7652] ? __fget_files+0x2a/0x420 [ 142.076133][ T7652] ? __fget_files+0x3a0/0x420 [ 142.076169][ T7652] __x64_sys_recvmsg+0x1ba/0x2a0 [ 142.076195][ T7652] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 142.076240][ T7652] ? __pfx_ksys_write+0x10/0x10 [ 142.076272][ T7652] do_syscall_64+0xe2/0xf80 [ 142.076292][ T7652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.076313][ T7652] ? trace_irq_disable+0x37/0x100 [ 142.076338][ T7652] ? clear_bhb_loop+0x60/0xb0 [ 142.076362][ T7652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.076380][ T7652] RIP: 0033:0x7f2f6299acb9 [ 142.076398][ T7652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.076414][ T7652] RSP: 002b:00007f2f63920028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 142.076435][ T7652] RAX: ffffffffffffffda RBX: 00007f2f62c15fa0 RCX: 00007f2f6299acb9 [ 142.076449][ T7652] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 142.076461][ T7652] RBP: 00007f2f63920090 R08: 0000000000000000 R09: 0000000000000000 [ 142.076473][ T7652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.076484][ T7652] R13: 00007f2f62c16038 R14: 00007f2f62c15fa0 R15: 00007ffd36a687c8 [ 142.076517][ T7652] [ 142.739684][ T7656] syz.3.444 (7656) used greatest stack depth: 17592 bytes left [ 142.933549][ T7671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.524519][ T7705] tipc: Enabled bearer , priority 0 [ 143.544077][ T7705] syzkaller0: entered promiscuous mode [ 143.555906][ T7705] syzkaller0: entered allmulticast mode [ 143.720319][ T7704] tipc: Resetting bearer [ 143.774348][ T7718] netlink: 'syz.2.456': attribute type 13 has an invalid length. [ 143.785614][ T7704] tipc: Disabling bearer [ 144.285462][ T7732] __nla_validate_parse: 3 callbacks suppressed [ 144.285482][ T7732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.459'. [ 145.223874][ T7769] xfrm0: entered promiscuous mode [ 145.243887][ T7769] xfrm0: entered allmulticast mode [ 145.354941][ T7773] Bluetooth: MGMT ver 1.23 [ 145.525923][ T7783] netlink: 'syz.3.468': attribute type 10 has an invalid length. [ 145.547185][ T7783] veth0_macvtap: left promiscuous mode [ 145.569549][ T7783] team0: Device veth0_macvtap failed to register rx_handler [ 145.599731][ T7789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.468'. [ 145.926184][ T7797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.474'. [ 145.936098][ T7798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.474'. [ 145.945807][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 146.630812][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.480'. [ 146.682059][ T7817] netlink: 32 bytes leftover after parsing attributes in process `syz.3.480'. [ 147.071020][ T7835] veth0: entered promiscuous mode [ 147.100087][ T7844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.486'. [ 147.128785][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.483'. [ 147.359826][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.487'. [ 147.461222][ T5923] IPVS: starting estimator thread 0... [ 147.585590][ T7861] IPVS: using max 25 ests per chain, 60000 per kthread [ 147.706320][ T7869] syzkaller0: entered promiscuous mode [ 147.711855][ T7869] syzkaller0: entered allmulticast mode [ 147.927360][ T7875] vxcan3: entered promiscuous mode [ 148.344239][ T7883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.454225][ T7903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.497060][ T7896] IPVS: nq: FWM 3 0x00000003 - no destination available [ 148.507999][ T7236] IPVS: starting estimator thread 0... [ 148.595813][ T7907] IPVS: using max 32 ests per chain, 76800 per kthread [ 148.620883][ T7912] netlink: 'syz.4.505': attribute type 5 has an invalid length. [ 148.653353][ T7903] bond4: option fail_over_mac: invalid value (127) [ 148.694126][ T7903] bond4 (unregistering): Released all slaves [ 149.234607][ T7933] batadv1: entered promiscuous mode [ 149.257958][ T7933] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 149.345922][ T7933] __nla_validate_parse: 12 callbacks suppressed [ 149.345941][ T7933] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.513'. [ 149.429209][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 149.438532][ T7943] netlink: 184 bytes leftover after parsing attributes in process `syz.2.516'. [ 149.513235][ T7954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.517'. [ 149.563425][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 149.587490][ T7954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.517'. [ 149.883408][ T7969] sit0: entered promiscuous mode [ 149.928726][ T7969] netlink: 1 bytes leftover after parsing attributes in process `syz.0.522'. [ 149.956575][ T7970] netlink: 1 bytes leftover after parsing attributes in process `syz.0.522'. [ 149.973554][ T7968] netlink: 52 bytes leftover after parsing attributes in process `syz.4.521'. [ 149.989011][ T7968] netlink: 52 bytes leftover after parsing attributes in process `syz.4.521'. [ 150.987944][ T8009] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 151.274270][ T8000] lo: entered allmulticast mode [ 151.301166][ T8018] lo: left allmulticast mode [ 151.334414][ T8029] ip6gre1: entered promiscuous mode [ 151.357408][ T8029] ip6gre1: entered allmulticast mode [ 151.447892][ T8034] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 151.492054][ T8035] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 151.717941][ T8051] tipc: Enabled bearer , priority 0 [ 151.725370][ T8049] tipc: Enabling of bearer rejected, already enabled [ 151.742136][ T8049] syzkaller0: entered promiscuous mode [ 151.764298][ T8049] syzkaller0: entered allmulticast mode [ 151.843769][ T8051] tipc: Resetting bearer [ 151.861472][ T8048] tipc: Resetting bearer [ 151.907142][ T8048] tipc: Disabling bearer [ 152.524806][ T8094] dvmrp12: entered allmulticast mode [ 152.539704][ T8087] dvmrp12: left allmulticast mode [ 152.729558][ T8109] netlink: 'syz.3.557': attribute type 29 has an invalid length. [ 152.738698][ T8109] netlink: 'syz.3.557': attribute type 29 has an invalid length. [ 153.503102][ T8140] team3: entered promiscuous mode [ 153.528675][ T8140] team3: entered allmulticast mode [ 153.547302][ T8140] 8021q: adding VLAN 0 to HW filter on device team3 [ 153.619332][ T8142] team4: entered promiscuous mode [ 153.624560][ T8142] team4: entered allmulticast mode [ 153.630340][ T8142] 8021q: adding VLAN 0 to HW filter on device team4 [ 154.699060][ T8172] __nla_validate_parse: 13 callbacks suppressed [ 154.699079][ T8172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.574'. [ 154.715169][ T8172] netlink: 64 bytes leftover after parsing attributes in process `syz.1.574'. [ 154.769171][ T8173] netlink: 36 bytes leftover after parsing attributes in process `syz.1.574'. [ 154.804075][ T8173] x_tables: ip_tables: osf match: only valid for protocol 6 [ 155.355998][ T8172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.574'. [ 155.827492][ T8192] netlink: 156 bytes leftover after parsing attributes in process `syz.1.579'. [ 156.025410][ T8198] netlink: 100 bytes leftover after parsing attributes in process `syz.0.582'. [ 156.137051][ T8203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.618074][ T8230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'. [ 156.659115][ T8230] openvswitch: netlink: Missing valid actions attribute. [ 156.690558][ T8230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.753336][ T8230] netlink: 'syz.2.590': attribute type 1 has an invalid length. [ 156.769531][ T8219] netlink: 192 bytes leftover after parsing attributes in process `syz.0.588'. [ 156.780826][ T8230] netlink: 224 bytes leftover after parsing attributes in process `syz.2.590'. [ 156.974425][ T8243] raw_sendmsg: syz.0.594 forgot to set AF_INET. Fix it! [ 157.143888][ T8250] netlink: 'syz.0.596': attribute type 12 has an invalid length. [ 157.241557][ T8252] netlink: 68 bytes leftover after parsing attributes in process `syz.4.597'. [ 157.506988][ T8272] ip6gretap0: entered promiscuous mode [ 157.531501][ T8272] ip6gretap0: left promiscuous mode [ 157.707808][ T8284] sctp: [Deprecated]: syz.1.605 (pid 8284) Use of int in max_burst socket option deprecated. [ 157.707808][ T8284] Use struct sctp_assoc_value instead [ 157.900851][ T8300] netlink: 'syz.1.611': attribute type 4 has an invalid length. [ 158.048456][ T8303] syzkaller1: entered promiscuous mode [ 158.055857][ T8308] netlink: 'syz.3.612': attribute type 5 has an invalid length. [ 158.063695][ T8303] syzkaller1: entered allmulticast mode [ 158.764043][ T8332] syzkaller1: entered promiscuous mode [ 158.777144][ T8335] xt_TPROXY: Can be used only with -p tcp or -p udp [ 158.783896][ T8332] syzkaller1: entered allmulticast mode [ 159.512135][ T8377] tipc: Enabled bearer , priority 0 [ 159.624696][ T8377] tipc: Disabling bearer [ 159.974606][ T8391] __nla_validate_parse: 7 callbacks suppressed [ 159.974627][ T8391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.636'. [ 160.224536][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 160.667272][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'. [ 160.676371][ T8426] netlink: 48 bytes leftover after parsing attributes in process `syz.1.647'. [ 160.695149][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.647'. [ 160.719531][ T8427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.863605][ T8426] vlan2: entered allmulticast mode [ 160.870599][ T8426] dummy0: entered allmulticast mode [ 160.897015][ T8435] ip6tnl0: Caught tx_queue_len zero misconfig [ 160.903254][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.651'. [ 160.977440][ T8440] netlink: 32 bytes leftover after parsing attributes in process `syz.4.653'. [ 161.033363][ T8443] netlink: 356 bytes leftover after parsing attributes in process `syz.0.654'. [ 161.155706][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.656'. [ 161.222857][ T8447] trusted_key: syz.2.656 sent an empty control message without MSG_MORE. [ 161.322247][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 161.340058][ T8447] netlink: 'syz.2.656': attribute type 13 has an invalid length. [ 161.538680][ T8447] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.546539][ T8447] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.557279][ T8447] bond_slave_0: left promiscuous mode [ 161.562907][ T8447] bond_slave_1: left promiscuous mode [ 161.643547][ T8447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.658592][ T8447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.826845][ T8473] ip6gretap1: entered allmulticast mode [ 161.837325][ T6544] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.852542][ T6544] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.862242][ T6544] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.871671][ T6544] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.975116][ T6544] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.003386][ T6544] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.170817][ T6544] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.201442][ T6544] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.472935][ T8489] syzkaller0: entered promiscuous mode [ 162.501256][ T8489] syzkaller0: entered allmulticast mode [ 162.562872][ T8506] netlink: 'syz.4.670': attribute type 10 has an invalid length. [ 162.712438][ T8512] Bluetooth: MGMT ver 1.23 [ 162.766448][ T8506] veth0_vlan: left promiscuous mode [ 162.786827][ T8506] veth0_vlan: entered promiscuous mode [ 162.797864][ T8506] team0: Device veth0_vlan failed to register rx_handler [ 162.967880][ T8518] netlink: 'syz.1.673': attribute type 3 has an invalid length. [ 163.788835][ T8554] xt_CT: No such helper "netbios-ns" [ 163.957297][ T8565] ipt_REJECT: TCP_RESET invalid for non-tcp [ 164.041385][ T8572] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 164.074259][ T8572] bond1 (unregistering): Released all slaves [ 164.505506][ T8601] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 164.717722][ T8613] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.139563][ T8631] __nla_validate_parse: 5 callbacks suppressed [ 165.139583][ T8631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.708'. [ 165.199097][ T8622] tipc: Enabled bearer , priority 0 [ 165.292957][ T8630] IPVS: Unknown mcast interface: dvmrp0 [ 165.305343][ T8625] syzkaller0: entered promiscuous mode [ 165.310873][ T8625] syzkaller0: entered allmulticast mode [ 165.358034][ T8621] netlink: 44 bytes leftover after parsing attributes in process `syz.4.705'. [ 165.418382][ T8616] tipc: Resetting bearer [ 165.475346][ T8615] tipc: Resetting bearer [ 165.514914][ T8615] tipc: Disabling bearer [ 165.536523][ T8647] FAULT_INJECTION: forcing a failure. [ 165.536523][ T8647] name failslab, interval 1, probability 0, space 0, times 0 [ 165.600619][ T8647] CPU: 0 UID: 0 PID: 8647 Comm: syz.3.713 Not tainted syzkaller #0 PREEMPT(full) [ 165.600649][ T8647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 165.600661][ T8647] Call Trace: [ 165.600670][ T8647] [ 165.600678][ T8647] dump_stack_lvl+0xe8/0x150 [ 165.600710][ T8647] should_fail_ex+0x412/0x560 [ 165.600746][ T8647] should_failslab+0xa8/0x100 [ 165.600772][ T8647] __kmalloc_noprof+0xde/0x7e0 [ 165.600792][ T8647] ? sock_kmalloc+0xd6/0x160 [ 165.600819][ T8647] sock_kmalloc+0xd6/0x160 [ 165.600845][ T8647] ____sys_sendmsg+0x1ce/0x810 [ 165.600875][ T8647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.600906][ T8647] ? import_iovec+0x73/0xa0 [ 165.600940][ T8647] ___sys_sendmsg+0x2a5/0x360 [ 165.600960][ T8647] ? __lock_acquire+0x6b5/0x2cf0 [ 165.600986][ T8647] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.601013][ T8647] ? kstrtouint+0x6e/0xe0 [ 165.601068][ T8647] ? __fget_files+0x2a/0x420 [ 165.601092][ T8647] ? __fget_files+0x3a0/0x420 [ 165.601128][ T8647] __sys_sendmmsg+0x27c/0x4e0 [ 165.601156][ T8647] ? __pfx___sys_sendmmsg+0x10/0x10 [ 165.601175][ T8647] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 165.601223][ T8647] ? ksys_write+0x242/0x270 [ 165.601244][ T8647] ? __pfx_ksys_write+0x10/0x10 [ 165.601271][ T8647] __x64_sys_sendmmsg+0xa0/0xc0 [ 165.601294][ T8647] do_syscall_64+0xe2/0xf80 [ 165.601313][ T8647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.601332][ T8647] ? trace_irq_disable+0x37/0x100 [ 165.601359][ T8647] ? clear_bhb_loop+0x60/0xb0 [ 165.601384][ T8647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.601403][ T8647] RIP: 0033:0x7f7360d9acb9 [ 165.601421][ T8647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.601437][ T8647] RSP: 002b:00007f7361bdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 165.601458][ T8647] RAX: ffffffffffffffda RBX: 00007f7361015fa0 RCX: 00007f7360d9acb9 [ 165.601473][ T8647] RDX: 0000000000000001 RSI: 0000200000002880 RDI: 0000000000000003 [ 165.601490][ T8647] RBP: 00007f7361bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 165.601503][ T8647] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 165.601515][ T8647] R13: 00007f7361016038 R14: 00007f7361015fa0 R15: 00007ffeb7e52a48 [ 165.601548][ T8647] [ 166.263722][ T8670] netlink: 20 bytes leftover after parsing attributes in process `syz.4.720'. [ 166.448423][ T8674] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 166.468779][ T8677] netlink: 'syz.2.723': attribute type 1 has an invalid length. [ 166.669355][ T8690] netlink: 128 bytes leftover after parsing attributes in process `syz.4.726'. [ 166.819641][ T8691] tipc: Enabling of bearer rejected, failed to enable media [ 166.884940][ T8697] macsec1: entered promiscuous mode [ 166.908270][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.729'. [ 166.920274][ T8702] netlink: 60 bytes leftover after parsing attributes in process `syz.4.729'. [ 166.925521][ T8697] ip6gretap0: entered promiscuous mode [ 166.963468][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.729'. [ 166.982434][ T8697] ip6gretap0: left promiscuous mode [ 167.011049][ T8704] netlink: 'syz.4.729': attribute type 15 has an invalid length. [ 167.180723][ T8716] netlink: 40 bytes leftover after parsing attributes in process `syz.3.733'. [ 167.262664][ T8714] xt_CT: No such helper "snmp" [ 167.392456][ T8726] netlink: 64 bytes leftover after parsing attributes in process `syz.0.735'. [ 167.466877][ T8731] netlink: 96 bytes leftover after parsing attributes in process `syz.4.738'. [ 167.513610][ T8731] vlan3: entered allmulticast mode [ 167.535464][ T8731] gretap0: entered allmulticast mode [ 167.737450][ T8738] team5: entered promiscuous mode [ 167.752861][ T8738] team5: entered allmulticast mode [ 167.773553][ T8738] 8021q: adding VLAN 0 to HW filter on device team5 [ 167.870504][ T8746] team6: entered promiscuous mode [ 167.878357][ T8746] team6: entered allmulticast mode [ 167.898857][ T8746] 8021q: adding VLAN 0 to HW filter on device team6 [ 168.277258][ T8770] netlink: 'syz.3.749': attribute type 2 has an invalid length. [ 168.871949][ T8797] syzkaller0: entered promiscuous mode [ 168.897650][ T8797] syzkaller0: entered allmulticast mode [ 169.503484][ T8819] IPVS: Scheduler module ip_vs_sip not found [ 169.536994][ T8830] netlink: 'syz.2.765': attribute type 10 has an invalid length. [ 169.563763][ T8830] bond0: entered promiscuous mode [ 169.572144][ T8830] bond_slave_0: entered promiscuous mode [ 169.595463][ T8830] bond_slave_1: entered promiscuous mode [ 169.609221][ T8830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.635660][ T8830] bridge0: port 3(bond0) entered blocking state [ 169.642934][ T8830] bridge0: port 3(bond0) entered disabled state [ 169.655361][ T8830] bond0: entered allmulticast mode [ 169.663005][ T8830] bond_slave_0: entered allmulticast mode [ 169.680506][ T8830] bond_slave_1: entered allmulticast mode [ 169.694330][ T8830] bridge0: entered allmulticast mode [ 169.711454][ T8830] bond0: left allmulticast mode [ 169.722509][ T8830] bond_slave_0: left allmulticast mode [ 169.734601][ T8830] bond_slave_1: left allmulticast mode [ 169.747150][ T8830] bridge0: left allmulticast mode [ 169.769392][ T8836] vlan2: entered promiscuous mode [ 169.778433][ T8836] geneve1: entered promiscuous mode [ 169.791749][ T8836] vlan2: entered allmulticast mode [ 169.804007][ T8836] geneve1: entered allmulticast mode [ 170.045276][ T8851] openvswitch: netlink: Flow key attr not present in new flow. [ 170.111560][ T8854] netlink: 'syz.3.773': attribute type 1 has an invalid length. [ 170.120280][ T8854] netlink: 'syz.3.773': attribute type 1 has an invalid length. [ 170.387597][ T8871] __nla_validate_parse: 12 callbacks suppressed [ 170.387618][ T8871] netlink: 14 bytes leftover after parsing attributes in process `syz.4.774'. [ 170.489693][ T8871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.510955][ T8871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.537598][ T8871] bond0 (unregistering): Released all slaves [ 170.677326][ T8878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.776'. [ 171.421784][ T8908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.605486][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.784'. [ 172.086490][ T8938] netlink: 'syz.1.790': attribute type 1 has an invalid length. [ 172.141384][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'. [ 172.261684][ T8899] netlink: 'syz.2.782': attribute type 13 has an invalid length. [ 172.310762][ T8940] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 172.336831][ T8940] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 172.377346][ T8951] syz_tun: entered allmulticast mode [ 172.411685][ T8899] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 172.444299][ T8953] syz_tun: left allmulticast mode [ 172.451628][ T8963] netlink: 'syz.4.795': attribute type 33 has an invalid length. [ 172.459568][ T8963] netlink: 152 bytes leftover after parsing attributes in process `syz.4.795'. [ 172.486341][ T8963] `: renamed from team0 (while UP) [ 172.619356][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 172.722918][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.798'. [ 173.033580][ T8987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.801'. [ 173.147026][ T8990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.804'. [ 173.162891][ T8999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.528621][ T9012] netlink: 280 bytes leftover after parsing attributes in process `syz.4.808'. [ 173.554966][ T9012] x_tables: duplicate underflow at hook 2 [ 173.561955][ T9012] Cannot find set identified by id 65534 to match [ 174.143801][ T9050] rdma_rxe: rxe_newlink: failed to add veth1_virt_wifi [ 174.613568][ T9048] infiniband syz2: set active [ 174.662909][ T9048] infiniband syz2: added veth1_virt_wifi [ 174.812319][ T9048] RDS/IB: syz2: added [ 174.834822][ T9048] smc: adding ib device syz2 with port count 1 [ 174.847518][ T9048] smc: ib device syz2 port 1 has no pnetid [ 175.055623][ T9094] netlink: 'syz.0.831': attribute type 30 has an invalid length. [ 175.119027][ T9094] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 175.171172][ T9094] bond1 (unregistering): Released all slaves [ 175.474361][ T9106] lo: entered allmulticast mode [ 175.493325][ T9106] lo: left allmulticast mode [ 175.501932][ T9106] __nla_validate_parse: 9 callbacks suppressed [ 175.501949][ T9106] netlink: 16 bytes leftover after parsing attributes in process `syz.0.836'. [ 176.389912][ T9130] syzkaller1: entered promiscuous mode [ 176.399419][ T9130] syzkaller1: entered allmulticast mode [ 176.530729][ T7236] IPVS: starting estimator thread 0... [ 176.546110][ T9136] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 176.565422][ T9136] IPVS: ip_vs_add_dest(): server weight less than zero [ 176.583894][ T9136] IPVS: rr: FWM 3 0x00000003 - no destination available [ 176.635226][ T9138] IPVS: using max 34 ests per chain, 81600 per kthread [ 176.676705][ T9140] blkio.reset_stats is deprecated [ 176.863301][ T9147] netlink: 76 bytes leftover after parsing attributes in process `syz.2.848'. [ 176.912111][ T9148] netlink: 76 bytes leftover after parsing attributes in process `syz.2.848'. [ 176.981756][ T9144] geneve0: entered promiscuous mode [ 176.993383][ T9144] geneve0: entered allmulticast mode [ 177.169801][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 177.386721][ T9162] netlink: 28 bytes leftover after parsing attributes in process `syz.2.851'. [ 177.431559][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'. [ 177.440735][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'. [ 177.690401][ T9173] netlink: 'syz.3.854': attribute type 1 has an invalid length. [ 177.705258][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.854'. [ 178.201351][ T9192] sctp: [Deprecated]: syz.3.857 (pid 9192) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.201351][ T9192] Use struct sctp_sack_info instead [ 178.625983][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.633335][ T5835] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 178.681076][ T9213] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 178.712332][ T9213] bridge7: entered allmulticast mode [ 178.980587][ T9224] netlink: 'syz.0.865': attribute type 10 has an invalid length. [ 179.120742][ T9234] netlink: 'syz.3.866': attribute type 39 has an invalid length. [ 179.146838][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.867'. [ 179.182542][ T9224] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.208903][ T9224] bond0: (slave team0): Enslaving as an active interface with an up link [ 179.901014][ T9281] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.193235][ T9291] netlink: 'syz.1.876': attribute type 1 has an invalid length. [ 180.448294][ T9299] netlink: 24 bytes leftover after parsing attributes in process `syz.2.877'. [ 180.475610][ T9301] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 180.571141][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.877'. [ 180.615158][ T9312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.877'. [ 180.768942][ T9299] bond4: entered promiscuous mode [ 180.799377][ T9299] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.112416][ T9299] bond4 (unregistering): Released all slaves [ 181.210709][ T9305] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 181.225771][ T9305] bond4 (unregistering): Released all slaves [ 181.292399][ T9301] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.330404][ T9313] bond4: (slave veth7): Enslaving as an active interface with a down link [ 181.356788][ T9315] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 181.363804][ T9315] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 181.416386][ T9322] bond0: (slave team0): Releasing backup interface [ 181.449538][ T9322] bridge_slave_0: left allmulticast mode [ 181.458139][ T9322] bridge_slave_0: left promiscuous mode [ 181.464066][ T9322] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.485397][ T9322] bridge_slave_1: left allmulticast mode [ 181.491160][ T9322] bridge_slave_1: left promiscuous mode [ 181.497559][ T9322] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.523655][ T9322] bond0: (slave bond_slave_0): Releasing backup interface [ 181.563233][ T9322] bond0: (slave bond_slave_1): Releasing backup interface [ 181.587591][ T9322] team0: Port device team_slave_0 removed [ 181.613909][ T9322] team0: Port device team_slave_1 removed [ 181.620819][ T9322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.630192][ T9322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.639754][ T9322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.648071][ T9322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.658740][ T9322] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 181.867520][ T9351] sctp: [Deprecated]: syz.4.887 (pid 9351) Use of int in max_burst socket option. [ 181.867520][ T9351] Use struct sctp_assoc_value instead [ 182.278330][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.891'. [ 182.297592][ T9368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.891'. [ 182.434746][ T9374] netlink: 96 bytes leftover after parsing attributes in process `syz.1.894'. [ 182.468952][ T9374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.894'. [ 182.502065][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 182.659834][ T9381] netlink: 128 bytes leftover after parsing attributes in process `syz.3.896'. [ 182.732371][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.753632][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.781662][ T9387] tipc: Enabled bearer , priority 0 [ 182.822024][ T9387] syzkaller0: entered promiscuous mode [ 182.835873][ T9387] syzkaller0: entered allmulticast mode [ 182.923664][ T9387] tipc: Resetting bearer [ 182.933713][ T9384] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 182.975822][ T9378] netlink: 'syz.4.895': attribute type 10 has an invalid length. [ 182.990011][ T9378] `: Device ipvlan1 failed to register rx_handler [ 183.077607][ T9378] netlink: 36 bytes leftover after parsing attributes in process `syz.4.895'. [ 183.165574][ T9385] tipc: Resetting bearer [ 183.173648][ T9348] netlink: 'syz.2.884': attribute type 6 has an invalid length. [ 183.293479][ T9385] tipc: Disabling bearer [ 183.346471][ T9407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.903'. [ 184.044678][ T9433] pim6reg1: entered promiscuous mode [ 184.078325][ T9433] pim6reg1: entered allmulticast mode [ 185.218838][ T9470] bridge2: entered promiscuous mode [ 185.224568][ T9470] bridge2: entered allmulticast mode [ 185.373852][ T6153] IPVS: starting estimator thread 0... [ 185.475705][ T9484] IPVS: using max 27 ests per chain, 64800 per kthread [ 185.505780][ T9489] netlink: 'syz.0.925': attribute type 1 has an invalid length. [ 185.709783][ T9496] __nla_validate_parse: 7 callbacks suppressed [ 185.709803][ T9496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.927'. [ 185.794797][ T9495] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.929'. [ 186.132271][ T9086] udevd[9086]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 186.226364][ T8773] udevd[8773]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 186.834353][ T5835] Bluetooth: hci4: link tx timeout [ 186.841486][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 186.861284][ T5835] Bluetooth: hci4: link tx timeout [ 186.885240][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 186.945144][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 187.050320][ T9542] netlink: 40 bytes leftover after parsing attributes in process `syz.1.937'. [ 187.268389][ T9542] netlink: 9 bytes leftover after parsing attributes in process `syz.1.937'. [ 187.307803][ T9542] netlink: 9 bytes leftover after parsing attributes in process `syz.1.937'. [ 187.344335][ T9548] bond0 (unregistering): Released all slaves [ 187.817656][ T9572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.942'. [ 187.828923][ T9572] xt_hashlimit: size too large, truncated to 1048576 [ 187.838214][ T9572] xt_hashlimit: max too large, truncated to 1048576 [ 188.697190][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.944'. [ 188.738677][ T9601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.950'. [ 188.756615][ T9580] netlink: 121 bytes leftover after parsing attributes in process `syz.1.944'. [ 188.781600][ T9601] openvswitch: netlink: Flow key attr not present in new flow. [ 188.812107][ T9601] netlink: 64 bytes leftover after parsing attributes in process `syz.2.950'. [ 188.933709][ T9611] FAULT_INJECTION: forcing a failure. [ 188.933709][ T9611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.983866][ T9611] CPU: 0 UID: 0 PID: 9611 Comm: syz.2.952 Not tainted syzkaller #0 PREEMPT(full) [ 188.983895][ T9611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 188.983908][ T9611] Call Trace: [ 188.983917][ T9611] [ 188.983926][ T9611] dump_stack_lvl+0xe8/0x150 [ 188.983958][ T9611] should_fail_ex+0x412/0x560 [ 188.983992][ T9611] _copy_from_user+0x2d/0xb0 [ 188.984016][ T9611] sctp_setsockopt+0x1c4/0x12c0 [ 188.984053][ T9611] ? sock_common_setsockopt+0x36/0xc0 [ 188.984081][ T9611] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 188.984112][ T9611] do_sock_setsockopt+0x17c/0x1b0 [ 188.984137][ T9611] __x64_sys_setsockopt+0x13d/0x1b0 [ 188.984163][ T9611] do_syscall_64+0xe2/0xf80 [ 188.984182][ T9611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.984201][ T9611] ? trace_irq_disable+0x37/0x100 [ 188.984228][ T9611] ? clear_bhb_loop+0x60/0xb0 [ 188.984253][ T9611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.984272][ T9611] RIP: 0033:0x7f0554f9acb9 [ 188.984291][ T9611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.984307][ T9611] RSP: 002b:00007f0555e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 188.984328][ T9611] RAX: ffffffffffffffda RBX: 00007f0555215fa0 RCX: 00007f0554f9acb9 [ 188.984342][ T9611] RDX: 0000000000000079 RSI: 0000000000000084 RDI: 0000000000000003 [ 188.984354][ T9611] RBP: 00007f0555e8a090 R08: 0000000000000008 R09: 0000000000000000 [ 188.984366][ T9611] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 188.984378][ T9611] R13: 00007f0555216038 R14: 00007f0555215fa0 R15: 00007ffe1f758238 [ 188.984409][ T9611] [ 189.047484][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 189.177060][ T9616] netlink: 'syz.4.954': attribute type 22 has an invalid length. [ 191.503296][ T9715] syzkaller0: entered promiscuous mode [ 191.510430][ T9715] syzkaller0: entered allmulticast mode [ 191.668181][ T9726] netlink: 'syz.4.974': attribute type 2 has an invalid length. [ 191.680260][ T9731] __nla_validate_parse: 4 callbacks suppressed [ 191.680280][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.977'. [ 191.702671][ T9726] netlink: 'syz.4.974': attribute type 2 has an invalid length. [ 191.767125][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'. [ 191.804762][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'. [ 191.851985][ T9734] team0: Port device gtp0 added [ 192.027831][ T9743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.982'. [ 192.066318][ T9743] netlink: 14 bytes leftover after parsing attributes in process `syz.1.982'. [ 192.144290][ T9732] infiniband syz1: set down [ 192.149051][ T9732] infiniband syz1: added ipvlan0 [ 192.193590][ T9732] RDS/IB: syz1: added [ 192.197841][ T9732] smc: adding ib device syz1 with port count 1 [ 192.204963][ T9732] smc: ib device syz1 port 1 has no pnetid [ 192.228872][ T9743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.252090][ T9743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.274453][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 192.277735][ T9743] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 192.298593][ T9743] bond0 (unregistering): Released all slaves [ 192.327386][ T9748] ipvlan2: entered promiscuous mode [ 192.334468][ T9748] bridge0: port 3(ipvlan2) entered blocking state [ 192.342237][ T9748] bridge0: port 3(ipvlan2) entered disabled state [ 192.349098][ T9748] ipvlan2: entered allmulticast mode [ 192.354458][ T9748] bridge0: entered allmulticast mode [ 192.370357][ T9748] ipvlan2: left allmulticast mode [ 192.376516][ T9748] bridge0: left allmulticast mode [ 192.462790][ T9761] netlink: 'syz.1.987': attribute type 10 has an invalid length. [ 192.489287][ T9761] netlink: 156 bytes leftover after parsing attributes in process `syz.1.987'. [ 192.645805][ T9769] openvswitch: netlink: Message has 1 unknown bytes. [ 192.672905][ T9769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.868460][ T9772] syzkaller1: entered promiscuous mode [ 192.874008][ T9772] syzkaller1: entered allmulticast mode [ 193.403063][ T9787] netlink: 'syz.1.995': attribute type 2 has an invalid length. [ 193.480552][ T9787] : entered promiscuous mode [ 193.625248][ T9791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.995'. [ 193.673895][ T9806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.999'. [ 194.001459][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1004'. [ 194.640838][ T9835] team0 (unregistering): Port device gtp0 removed [ 195.134333][ T9832] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 195.142340][ T9832] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 195.211281][ T9832] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 195.225129][ T9832] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 195.253490][ T9832] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 195.265638][ T9832] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 195.314261][ T9832] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 195.328662][ T9832] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 195.369524][ T9832] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 195.391861][ T9832] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 195.493951][ T9871] netlink: 'syz.0.1013': attribute type 1 has an invalid length. [ 195.671946][ T9881] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 195.691783][ T9881] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 195.728910][ T9883] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 195.806884][ T9871] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 195.831448][ T9887] macvlan2: entered promiscuous mode [ 195.837083][ T9887] macvlan2: entered allmulticast mode [ 195.843231][ T9887] bond1: entered promiscuous mode [ 195.849384][ T9887] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 195.858716][ T9887] bond1: left promiscuous mode [ 195.944393][ T9862] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 196.183268][ T9897] : renamed from bond_slave_0 [ 196.244132][ T9907] netlink: 'syz.1.1015': attribute type 8 has an invalid length. [ 196.282492][ T9913] netlink: 'syz.1.1015': attribute type 8 has an invalid length. [ 196.830761][ T9934] __nla_validate_parse: 7 callbacks suppressed [ 196.830782][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 197.313351][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1027'. [ 197.481562][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1031'. [ 197.512027][ T9977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1031'. [ 198.224826][ T9972] macsec1: entered promiscuous mode [ 198.245194][ T9972] macsec1: entered allmulticast mode [ 198.339270][ T9971] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.397905][T10002] FAULT_INJECTION: forcing a failure. [ 198.397905][T10002] name failslab, interval 1, probability 0, space 0, times 0 [ 198.437141][T10002] CPU: 0 UID: 0 PID: 10002 Comm: syz.3.1035 Not tainted syzkaller #0 PREEMPT(full) [ 198.437170][T10002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 198.437183][T10002] Call Trace: [ 198.437191][T10002] [ 198.437199][T10002] dump_stack_lvl+0xe8/0x150 [ 198.437232][T10002] should_fail_ex+0x412/0x560 [ 198.437267][T10002] should_failslab+0xa8/0x100 [ 198.437294][T10002] __kmalloc_noprof+0xde/0x7e0 [ 198.437313][T10002] ? sock_kmalloc+0xd6/0x160 [ 198.437341][T10002] sock_kmalloc+0xd6/0x160 [ 198.437366][T10002] skcipher_recvmsg+0x54f/0x1140 [ 198.437409][T10002] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 198.437428][T10002] ? __lock_acquire+0x6b5/0x2cf0 [ 198.437453][T10002] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 198.437471][T10002] ? security_socket_recvmsg+0x7e/0x2c0 [ 198.437503][T10002] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 198.437524][T10002] sock_recvmsg+0x22c/0x270 [ 198.437556][T10002] ____sys_recvmsg+0x1e6/0x4a0 [ 198.437588][T10002] ? __pfx_____sys_recvmsg+0x10/0x10 [ 198.437627][T10002] ? import_iovec+0x73/0xa0 [ 198.437653][T10002] ___sys_recvmsg+0x215/0x590 [ 198.437682][T10002] ? __pfx____sys_recvmsg+0x10/0x10 [ 198.437709][T10002] ? __fget_files+0x2a/0x420 [ 198.437754][T10002] ? __fget_files+0x3a0/0x420 [ 198.437790][T10002] do_recvmmsg+0x334/0x800 [ 198.437821][T10002] ? __pfx_do_recvmmsg+0x10/0x10 [ 198.437857][T10002] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 198.437898][T10002] __x64_sys_recvmmsg+0x198/0x250 [ 198.437924][T10002] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 198.437960][T10002] do_syscall_64+0xe2/0xf80 [ 198.437979][T10002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.437998][T10002] ? trace_irq_disable+0x37/0x100 [ 198.438024][T10002] ? clear_bhb_loop+0x60/0xb0 [ 198.438049][T10002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.438068][T10002] RIP: 0033:0x7f7360d9acb9 [ 198.438087][T10002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.438103][T10002] RSP: 002b:00007f7361bdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 198.438131][T10002] RAX: ffffffffffffffda RBX: 00007f7361015fa0 RCX: 00007f7360d9acb9 [ 198.438146][T10002] RDX: 0000000000000001 RSI: 0000200000003f40 RDI: 0000000000000004 [ 198.438158][T10002] RBP: 00007f7361bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 198.438170][T10002] R10: 0000000000012160 R11: 0000000000000246 R12: 0000000000000001 [ 198.438182][T10002] R13: 00007f7361016038 R14: 00007f7361015fa0 R15: 00007ffeb7e52a48 [ 198.438214][T10002] [ 198.776927][ T9971] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.979888][ T9971] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.043406][T10025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1041'. [ 199.114385][T10028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1039'. [ 199.157399][ T9971] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.291913][T10041] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 199.385858][T10043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1043'. [ 199.395234][T10043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1043'. [ 199.429195][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.638237][ T8773] udevd[8773]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 199.869701][ T9256] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.003865][ T9256] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.122523][ T9256] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.178479][ T9256] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.338544][T10083] FAULT_INJECTION: forcing a failure. [ 200.338544][T10083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.388009][T10083] CPU: 0 UID: 0 PID: 10083 Comm: syz.3.1049 Not tainted syzkaller #0 PREEMPT(full) [ 200.388037][T10083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 200.388050][T10083] Call Trace: [ 200.388058][T10083] [ 200.388067][T10083] dump_stack_lvl+0xe8/0x150 [ 200.388100][T10083] should_fail_ex+0x412/0x560 [ 200.388134][T10083] _copy_to_user+0x31/0xb0 [ 200.388160][T10083] simple_read_from_buffer+0xe1/0x170 [ 200.388190][T10083] proc_fail_nth_read+0x1bb/0x230 [ 200.388215][T10083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.388240][T10083] ? rw_verify_area+0x2a6/0x4d0 [ 200.388269][T10083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.388292][T10083] vfs_read+0x20c/0xa70 [ 200.388310][T10083] ? fdget_pos+0x246/0x320 [ 200.388349][T10083] ? __pfx___mutex_lock+0x10/0x10 [ 200.388371][T10083] ? __pfx_vfs_read+0x10/0x10 [ 200.388392][T10083] ? __fget_files+0x2a/0x420 [ 200.388422][T10083] ? __fget_files+0x3a0/0x420 [ 200.388445][T10083] ? __fget_files+0x2a/0x420 [ 200.388480][T10083] ksys_read+0x150/0x270 [ 200.388502][T10083] ? __pfx_ksys_read+0x10/0x10 [ 200.388534][T10083] do_syscall_64+0xe2/0xf80 [ 200.388553][T10083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.388573][T10083] ? trace_irq_disable+0x37/0x100 [ 200.388599][T10083] ? clear_bhb_loop+0x60/0xb0 [ 200.388624][T10083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.388651][T10083] RIP: 0033:0x7f7360d5b58e [ 200.388670][T10083] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 200.388686][T10083] RSP: 002b:00007f7361bdefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 200.388706][T10083] RAX: ffffffffffffffda RBX: 00007f7361bdf6c0 RCX: 00007f7360d5b58e [ 200.388721][T10083] RDX: 000000000000000f RSI: 00007f7361bdf0a0 RDI: 0000000000000005 [ 200.388733][T10083] RBP: 00007f7361bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 200.388745][T10083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.388757][T10083] R13: 00007f7361016038 R14: 00007f7361015fa0 R15: 00007ffeb7e52a48 [ 200.388791][T10083] [ 200.684207][T10089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.587197][T10128] openvswitch: netlink: Flow key attribute not present in set flow. [ 201.795435][T10135] netlink: 'syz.3.1062': attribute type 1 has an invalid length. [ 201.899986][T10135] bond2: entered promiscuous mode [ 201.905720][T10135] bond2: entered allmulticast mode [ 201.911282][T10135] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.177841][T10156] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 202.410920][T10147] syzkaller0: entered promiscuous mode [ 202.461626][T10147] syzkaller0: entered allmulticast mode [ 202.625863][T10147] openvswitch: netlink: Multiple metadata blocks provided [ 203.353565][T10188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1070'. [ 203.413855][T10190] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1072'. [ 204.293608][T10199] netlink: 'syz.2.1073': attribute type 1 has an invalid length. [ 204.973548][T10188] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.084491][T10200] bond4: entered promiscuous mode [ 205.090360][T10200] bond4: entered allmulticast mode [ 205.096951][T10200] 8021q: adding VLAN 0 to HW filter on device bond4 [ 205.112401][T10206] netlink: 'syz.4.1075': attribute type 10 has an invalid length. [ 205.144502][T10201] 8021q: adding VLAN 0 to HW filter on device bond5 [ 205.153069][T10201] bond5: entered promiscuous mode [ 205.159048][T10201] bond5: entered allmulticast mode [ 205.164922][T10201] bond4: (slave bond5): Enslaving as a backup interface with a down link [ 205.177274][T10207] netlink: 'syz.4.1075': attribute type 10 has an invalid length. [ 205.208355][T10206] `: Port device dummy0 added [ 205.247315][T10207] `: Port device dummy0 removed [ 205.373106][T10218] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 205.401289][T10220] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1079'. [ 205.475488][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1078'. [ 205.643205][T10222] bond0: entered promiscuous mode [ 205.661572][T10222] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 205.704833][T10222] bond0: left promiscuous mode [ 205.713784][T10237] netlink: 'syz.0.1081': attribute type 1 has an invalid length. [ 205.997728][T10241] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1084'. [ 206.164117][T10249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1085'. [ 206.750829][T10269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1090'. [ 207.037389][ T30] audit: type=1800 audit(1769279467.079:3): pid=10277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1093" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=1010 res=0 errno=0 [ 207.195602][T10284] netlink: 'syz.4.1095': attribute type 6 has an invalid length. [ 208.390848][T10315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1103'. [ 208.738344][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'. [ 208.954103][T10340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1110'. [ 209.027691][T10346] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1112'. [ 209.614348][T10361] dvmrp0: entered allmulticast mode [ 210.990276][T10404] netlink: 'syz.0.1121': attribute type 1 has an invalid length. [ 211.043266][T10408] netlink: 'syz.4.1123': attribute type 11 has an invalid length. [ 211.072536][T10403] xt_hashlimit: size too large, truncated to 1048576 [ 211.106126][T10404] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.113220][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1121'. [ 211.132502][T10400] bond2: (slave gretap1): making interface the new active one [ 211.297250][T10400] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 211.319714][T10411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1122'. [ 211.944488][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1125'. [ 211.972516][T10409] bond2 (unregistering): (slave gretap1): Releasing active interface [ 211.986931][T10409] bond2 (unregistering): Released all slaves [ 212.015684][T10425] sit0: entered promiscuous mode [ 212.020840][T10425] netlink: 'syz.2.1122': attribute type 1 has an invalid length. [ 212.029039][T10425] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1122'. [ 212.401329][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1131'. [ 212.462025][T10449] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 212.921304][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 212.958558][T10471] sit0: entered promiscuous mode [ 213.181932][T10480] netlink: 'syz.4.1138': attribute type 1 has an invalid length. [ 213.196012][T10480] NCSI netlink: No device for ifindex 0 [ 213.399379][T10488] netlink: 'syz.1.1139': attribute type 1 has an invalid length. [ 213.436105][T10488] __nla_validate_parse: 3 callbacks suppressed [ 213.436125][T10488] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1139'. [ 213.504720][T10488] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1139'. [ 213.524003][T10488] netlink: 658 bytes leftover after parsing attributes in process `syz.1.1139'. [ 213.668710][T10505] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1143'. [ 213.718804][T10504] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1143'. [ 214.088177][T10524] C: renamed from team_slave_0 (while UP) [ 214.108884][T10524] netlink: 'syz.4.1149': attribute type 4 has an invalid length. [ 214.125570][T10524] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1149'. [ 214.155365][T10524] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 214.531452][T10547] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1154'. [ 214.636565][T10553] netlink: 'syz.0.1157': attribute type 21 has an invalid length. [ 214.675250][T10553] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1157'. [ 214.733761][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 214.794816][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1157'. [ 215.225336][T10580] xt_TCPMSS: Only works on TCP SYN packets [ 215.234547][T10584] tipc: Enabled bearer , priority 10 [ 215.257761][T10579] syzkaller0: entered promiscuous mode [ 215.263290][T10579] syzkaller0: entered allmulticast mode [ 215.417158][T10576] tipc: Resetting bearer [ 215.572623][T10574] tipc: Resetting bearer [ 215.657120][T10574] tipc: Disabling bearer [ 216.186125][T10616] ieee802154 phy0 wpan0: encryption failed: -22 [ 216.539785][T10637] ipt_REJECT: TCP_RESET invalid for non-tcp [ 219.679693][T10666] __nla_validate_parse: 4 callbacks suppressed [ 219.679714][T10666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1183'. [ 219.807079][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1185'. [ 219.850604][T10668] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1185'. [ 219.871159][T10668] openvswitch: netlink: Missing key (keys=40, expected=100) [ 220.115708][T10686] netlink: 'syz.2.1189': attribute type 1 has an invalid length. [ 220.501920][T10686] 8021q: adding VLAN 0 to HW filter on device bond6 [ 220.515410][T10690] bond6: option lacp_rate: unable to set because the bond device is up [ 220.651158][T10701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1190'. [ 220.663808][T10704] netlink: 'syz.2.1191': attribute type 4 has an invalid length. [ 220.673830][T10703] netlink: 'syz.2.1191': attribute type 4 has an invalid length. [ 220.686595][T10703] netlink: 'syz.2.1191': attribute type 1 has an invalid length. [ 220.694797][T10704] netlink: 'syz.2.1191': attribute type 1 has an invalid length. [ 220.703052][T10703] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1191'. [ 220.716788][T10704] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1191'. [ 221.146324][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1194'. [ 221.870365][T10734] netlink: 'syz.0.1199': attribute type 1 has an invalid length. [ 221.894604][T10734] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 221.976069][T10732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1200'. [ 222.183241][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'. [ 222.955169][T10762] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 222.972558][T10765] netlink: 'syz.1.1208': attribute type 1 has an invalid length. [ 223.163464][T10770] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 223.202308][T10770] bond0: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 223.249461][T10774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.263151][T10770] bond0: (slave vxcan3): making interface the new active one [ 223.284289][T10770] bond0: (slave vxcan3): Enslaving as an active interface with an up link [ 223.527443][T10781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1213'. [ 223.537361][T10777] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 223.639990][T10790] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 223.812980][T10792] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.969150][T10792] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.106654][T10792] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.241790][T10792] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.498913][ T6251] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.541259][ T6251] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.592548][ T6251] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.667491][ T6251] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.799641][T10822] __nla_validate_parse: 2 callbacks suppressed [ 224.799661][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1225'. [ 224.973303][T10833] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1228'. [ 225.053576][T10829] bond7: Removing last ns target with arp_interval on [ 225.193031][T10846] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1232'. [ 225.203639][T10845] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1232'. [ 225.236862][T10849] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1233'. [ 225.461650][T10860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1235'. [ 225.487920][T10859] netlink: 'syz.4.1236': attribute type 2 has an invalid length. [ 225.564147][T10859] !: entered promiscuous mode [ 225.682346][T10867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1237'. [ 225.798119][ T30] audit: type=1804 audit(1769279485.849:4): pid=10871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1240" name="/newroot/251/memory.events" dev="tmpfs" ino=1294 res=1 errno=0 [ 225.841412][ T30] audit: type=1800 audit(1769279485.849:5): pid=10871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1240" name="memory.events" dev="tmpfs" ino=1294 res=0 errno=0 [ 225.879750][ T30] audit: type=1804 audit(1769279485.849:6): pid=10871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1240" name="/newroot/251/memory.events" dev="tmpfs" ino=1294 res=1 errno=0 [ 226.077879][T10875] netlink: 'syz.2.1242': attribute type 1 has an invalid length. [ 226.103866][T10875] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1242'. [ 226.212494][T10878] netlink: 'syz.4.1243': attribute type 1 has an invalid length. [ 226.333946][T10881] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1244'. [ 226.351552][T10882] netlink: 'syz.4.1243': attribute type 1 has an invalid length. [ 226.360331][T10882] netlink: 'syz.4.1243': attribute type 2 has an invalid length. [ 226.370251][T10882] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1243'. [ 226.409736][T10878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.599257][T10887] SET target dimension over the limit! [ 226.656531][T10888] pim6reg1: entered allmulticast mode [ 226.970985][T10899] netlink: 'syz.1.1248': attribute type 13 has an invalid length. [ 227.321640][T10903] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 227.334294][T10903] bond2 (unregistering): Released all slaves [ 227.343531][T10923] openvswitch: netlink: Flow key attr not present in new flow. [ 227.531629][T10930] netlink: 'syz.2.1255': attribute type 29 has an invalid length. [ 227.557021][T10931] netlink: 'syz.2.1255': attribute type 29 has an invalid length. [ 228.162701][T10938] netlink: 'syz.0.1258': attribute type 62 has an invalid length. [ 228.251031][T10938] pimreg3: entered allmulticast mode [ 228.271198][T10938] netlink: 'syz.0.1258': attribute type 62 has an invalid length. [ 228.426984][T10944] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 228.476492][T10943] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 228.688783][T10944] syzkaller1: entered promiscuous mode [ 228.694436][T10944] syzkaller1: entered allmulticast mode [ 230.015727][T10998] __nla_validate_parse: 11 callbacks suppressed [ 230.015748][T10998] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1277'. [ 230.049247][T10997] delete_channel: no stack [ 230.246379][T11004] IPVS: ip_vs_add_dest(): server weight less than zero [ 230.407721][T11010] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1281'. [ 230.608340][T11020] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1284'. [ 230.700232][T11025] validate_nla: 1 callbacks suppressed [ 230.700250][T11025] netlink: 'syz.1.1285': attribute type 4 has an invalid length. [ 230.788531][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 230.804720][T11029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1286'. [ 230.828829][T11029] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 230.840475][T11029] erspan1: entered allmulticast mode [ 231.140447][T11032] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1287'. [ 231.486120][T11040] netlink: 'syz.2.1290': attribute type 8 has an invalid length. [ 231.540405][T11045] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 231.746456][T11050] veth6: entered allmulticast mode [ 231.765302][T11056] netlink: 'syz.1.1294': attribute type 4 has an invalid length. [ 231.785981][T11054] @0: renamed from bond_slave_1 [ 231.857233][T11061] syzkaller0: entered promiscuous mode [ 231.871814][T11061] syzkaller0: entered allmulticast mode [ 231.893699][T11060] tipc: Enabled bearer , priority 0 [ 231.938902][T11060] tipc: Enabling of bearer rejected, already enabled [ 231.951891][T11062] tipc: Resetting bearer [ 231.959960][T11060] tipc: Enabling of bearer rejected, already enabled [ 231.969737][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.021613][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.047859][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.074777][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.121476][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.156116][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.164672][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.195482][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.236344][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.255476][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.264060][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.286561][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.304796][T11074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.322169][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.345530][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.413572][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.427566][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.445522][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.492035][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.517989][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.557328][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.575551][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.584178][T11060] tipc: Enabling of bearer rejected, already enabled [ 232.709000][T11059] tipc: Resetting bearer [ 232.815527][T11091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1301'. [ 235.648512][T11059] tipc: Disabling bearer [ 235.785374][T11095] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 236.175953][T11117] ip6gre2: entered promiscuous mode [ 236.197568][T11117] bond1: option mode: unable to set because the bond device is up [ 236.602620][T11133] tipc: Enabled bearer , priority 0 [ 236.621410][T11133] syzkaller0: entered promiscuous mode [ 236.634960][T11133] syzkaller0: entered allmulticast mode [ 236.666583][T11133] tipc: Resetting bearer [ 236.767236][T11132] tipc: Resetting bearer [ 236.795545][T11132] tipc: Disabling bearer [ 236.851699][T11146] syzkaller1: entered promiscuous mode [ 236.875446][T11146] syzkaller1: entered allmulticast mode [ 237.081926][T11149] syzkaller0: entered promiscuous mode [ 237.093357][T11149] syzkaller0: entered allmulticast mode [ 238.840922][T11155] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 238.992330][T11181] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1325'. [ 239.185714][T11190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'. [ 239.206948][T11190] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1328'. [ 239.249863][T11190] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1328'. [ 239.291102][T11190] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 239.847772][T11212] sctp: [Deprecated]: syz.2.1333 (pid 11212) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.847772][T11212] Use struct sctp_sack_info instead [ 239.934209][T11206] lo speed is unknown, defaulting to 1000 [ 240.152852][T11223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1336'. [ 240.274755][T11206] lo speed is unknown, defaulting to 1000 [ 240.290202][T11224] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1336'. [ 241.530648][T11206] lo speed is unknown, defaulting to 1000 [ 241.997946][T11246] xt_TCPMSS: Only works on TCP SYN packets [ 242.008065][T11247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1343'. [ 242.026027][T11246] netlink: 'syz.0.1344': attribute type 13 has an invalid length. [ 242.048471][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'. [ 242.142461][T11254] netlink: 'syz.0.1344': attribute type 18 has an invalid length. [ 242.605703][T11270] netlink: 'syz.1.1351': attribute type 4 has an invalid length. [ 242.614530][T11270] netlink: 'syz.1.1351': attribute type 4 has an invalid length. [ 242.664309][T11206] infiniband syz0: set down [ 242.675646][T11206] infiniband syz0: added lo [ 242.684565][ T40] lo speed is unknown, defaulting to 1000 [ 242.818190][T11206] RDS/IB: syz0: added [ 242.822294][T11206] smc: adding ib device syz0 with port count 1 [ 242.873639][T11206] smc: ib device syz0 port 1 has no pnetid [ 242.892224][ T40] lo speed is unknown, defaulting to 1000 [ 242.938429][T11290] netlink: 'syz.2.1356': attribute type 1 has an invalid length. [ 242.968568][T11206] lo speed is unknown, defaulting to 1000 [ 242.983651][T11290] sctp: [Deprecated]: syz.2.1356 (pid 11290) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.983651][T11290] Use struct sctp_sack_info instead [ 243.174138][T11297] netlink: 'syz.2.1358': attribute type 6 has an invalid length. [ 243.257395][T11302] syzkaller0: entered promiscuous mode [ 243.262935][T11302] syzkaller0: entered allmulticast mode [ 243.569975][T11206] lo speed is unknown, defaulting to 1000 [ 243.917700][T11335] netlink: 'syz.2.1370': attribute type 1 has an invalid length. [ 243.945311][T11335] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1370'. [ 243.959367][T11327] netlink: 'syz.1.1368': attribute type 10 has an invalid length. [ 243.967575][T11327] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1368'. [ 243.997211][T11335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1370'. [ 244.031350][T11206] lo speed is unknown, defaulting to 1000 [ 244.210535][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'. [ 244.225964][T11343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1373'. [ 244.278186][T11206] lo speed is unknown, defaulting to 1000 [ 244.521335][T11206] lo speed is unknown, defaulting to 1000 [ 245.772610][T11206] lo speed is unknown, defaulting to 1000 [ 245.973682][T11206] lo speed is unknown, defaulting to 1000 [ 246.369887][T11353] tipc: Enabled bearer , priority 0 [ 246.386305][T11353] syzkaller0: entered promiscuous mode [ 246.402407][T11353] syzkaller0: entered allmulticast mode [ 246.469694][T11353] tipc: Resetting bearer [ 246.483715][T11352] tipc: Resetting bearer [ 246.523274][T11352] tipc: Disabling bearer [ 246.673069][T11357] netlink: 'syz.3.1378': attribute type 64 has an invalid length. [ 246.955458][T11363] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1380'. [ 246.972885][T11366] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1380'. [ 247.311394][T11371] geneve2: entered promiscuous mode [ 247.330286][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 39877 - 0 [ 247.341725][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 39877 - 0 [ 247.360558][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 39877 - 0 [ 247.409413][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 39877 - 0 [ 247.528002][T11376] netlink: 'syz.3.1385': attribute type 4 has an invalid length. [ 247.537994][T11376] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1385'. [ 247.620933][T11332] infiniband !yz!: set down [ 247.627478][T11376] block nbd1: server does not support multiple connections per device. [ 247.635730][T11332] infiniband !yz!: added team_slave_0 [ 247.641524][T11332] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 247.644880][T11376] block nbd1: shutting down sockets [ 247.662468][T11332] infiniband !yz!: Couldn't open port 1 [ 247.734286][T11332] RDS/IB: !yz!: added [ 247.741043][T11332] smc: adding ib device !yz! with port count 1 [ 247.749032][T11332] smc: ib device !yz! port 1 has no pnetid [ 247.887435][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1386'. [ 248.003932][T11389] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1387'. [ 248.176341][T11393] netlink: 'syz.4.1389': attribute type 21 has an invalid length. [ 248.192831][T11393] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1389'. [ 248.527955][T11406] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1391'. [ 249.568830][T11420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1396'. [ 249.982030][T11436] tipc: Enabling of bearer rejected, media not registered [ 250.041603][T11380] lo speed is unknown, defaulting to 1000 [ 251.748114][T11433] lo speed is unknown, defaulting to 1000 [ 251.976691][T11475] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20000 [ 252.273200][T11482] netlink: 'syz.1.1408': attribute type 39 has an invalid length. [ 252.446190][T11483] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1408'. [ 252.455818][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1408'. [ 252.507280][T11434] lo speed is unknown, defaulting to 1000 [ 252.850693][T11489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1410'. [ 253.273775][T11502] pim6reg: entered allmulticast mode [ 253.289523][T11502] pim6reg: left allmulticast mode [ 253.426254][T11503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1413'. [ 254.421422][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1419'. [ 254.458578][T11524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1419'. [ 254.482321][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1419'. [ 254.995302][T11532] xt_connbytes: Forcing CT accounting to be enabled [ 255.040225][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'. [ 255.188315][T11538] bridge7: entered promiscuous mode [ 256.469505][T11568] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1430'. [ 256.575500][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1431'. [ 256.704014][T11573] netlink: 'syz.0.1432': attribute type 4 has an invalid length. [ 256.712302][T11573] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1432'. [ 256.724064][T11573] xt_CONNSECMARK: invalid mode: 0 [ 256.789718][T11582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1432'. [ 256.822257][T11581] bond2: option arp_interval: invalid value (18446744073709551615) [ 256.834041][T11581] bond2: option arp_interval: allowed values 0 - 2147483647 [ 256.847180][T11581] bond2 (unregistering): Released all slaves [ 257.360561][T11595] pim6reg1: entered promiscuous mode [ 257.366169][T11595] pim6reg1: entered allmulticast mode [ 257.729105][T11544] lo speed is unknown, defaulting to 1000 [ 257.818195][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1442'. [ 257.992433][T11610] sit0: left promiscuous mode [ 258.138778][T11610] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.146714][T11610] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.159604][T11612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1445'. [ 258.741922][T11610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.807583][T11610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.209407][T11636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1449'. [ 259.255269][T11610] bridge4: left allmulticast mode [ 259.264626][T11610] vxcan3: left promiscuous mode [ 259.371176][T11579] lo speed is unknown, defaulting to 1000 [ 259.404286][ T40] syz2: Port: 1 Link DOWN [ 259.424803][ T9263] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.436236][ T9263] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.498897][ T9263] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.521859][T11642] netlink: 'syz.4.1450': attribute type 2 has an invalid length. [ 259.532858][ T9263] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.542061][T11642] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1450'. [ 260.064186][T11661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1457'. [ 260.078874][T11661] tc_dump_action: action bad kind [ 260.157541][T11661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1457'. [ 260.189794][T11661] xfrm1: entered promiscuous mode [ 260.198792][T11661] xfrm1: entered allmulticast mode [ 260.226093][T11661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1457'. [ 260.314017][T11666] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1458'. [ 260.739488][T11679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1459'. [ 260.836609][T11677] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1460'. [ 260.874300][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.158928][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'. [ 261.176120][T11684] xt_hashlimit: overflow, rate too high: 0 [ 261.306392][T11688] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1463'. [ 261.315882][T11688] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 261.515950][T11662] lo speed is unknown, defaulting to 1000 [ 261.722516][T11699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.730174][T11699] IPv6: NLM_F_CREATE should be set when creating new route [ 261.737552][T11699] IPv6: NLM_F_CREATE should be set when creating new route [ 261.791123][T11699] ------------[ cut here ]------------ [ 261.796879][T11699] i != fen6_info->nsiblings [ 261.796911][T11699] WARNING: drivers/net/netdevsim/fib.c:831 at nsim_fib_event_nb+0xed8/0x1080, CPU#0: syz.0.1467/11699 [ 261.812757][T11699] Modules linked in: [ 261.816845][T11699] CPU: 0 UID: 0 PID: 11699 Comm: syz.0.1467 Not tainted syzkaller #0 PREEMPT(full) [ 261.826670][T11699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 261.836862][T11699] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 261.842729][T11699] Code: fa be 02 00 00 00 eb 0a e8 75 08 c5 fa be 01 00 00 00 4c 89 f7 e8 a8 ce 9a fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 59 08 c5 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 261.862571][T11699] RSP: 0018:ffffc900035d6ea8 EFLAGS: 00010283 [ 261.868784][T11699] RAX: ffffffff86fd90b7 RBX: 0000000000000002 RCX: 0000000000080000 [ 261.877178][T11699] RDX: ffffc90004962000 RSI: 0000000000004a1e RDI: 0000000000004a1f [ 261.885303][T11699] RBP: dffffc0000000000 R08: ffff88807c01c02f R09: 1ffff1100f803805 [ 261.893323][T11699] R10: dffffc0000000000 R11: ffffed100f803806 R12: ffff888074095000 [ 261.901449][T11699] R13: ffffc900035d7020 R14: 0000000000000001 R15: ffffc900035d7038 [ 261.909612][T11699] FS: 00007f2f639206c0(0000) GS:ffff888125924000(0000) knlGS:0000000000000000 [ 261.918700][T11699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.925411][T11699] CR2: 000000110c36a3f1 CR3: 000000007ea90000 CR4: 00000000003526f0 [ 261.933427][T11699] Call Trace: [ 261.936824][T11699] [ 261.939803][T11699] notifier_call_chain+0x19d/0x3a0 [ 261.944973][T11699] ? atomic_notifier_call_chain+0x26/0x180 [ 261.950900][T11699] atomic_notifier_call_chain+0xda/0x180 [ 261.956692][T11699] call_fib_notifiers+0x31/0x60 [ 261.961596][T11699] call_fib6_multipath_entry_notifiers+0xf5/0x160 [ 261.968128][T11699] ? inet6_rtm_newroute+0xfb8/0x19e0 [ 261.973459][T11699] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 261.980691][T11699] ? inet6_rtm_newroute+0xfb8/0x19e0 [ 261.986099][T11699] ? inet6_rtm_newroute+0xfb8/0x19e0 [ 261.991429][T11699] inet6_rtm_newroute+0x14a2/0x19e0 [ 261.997301][T11699] ? kasan_quarantine_put+0xbb/0x1f0 [ 262.002642][T11699] ? lockdep_hardirqs_on+0x7a/0x110 [ 262.008501][T11699] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 262.014091][T11699] ? kmem_cache_free+0x195/0x610 [ 262.019711][T11699] ? nlmon_xmit+0xb0/0x100 [ 262.024202][T11699] ? lockdep_hardirqs_on+0x7a/0x110 [ 262.030059][T11699] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 262.036317][T11699] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 262.041329][T11699] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 262.047127][T11699] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 262.052647][T11699] ? ref_tracker_free+0x693/0x840 [ 262.058346][T11699] ? __copy_skb_header+0xa3/0x4a0 [ 262.063432][T11699] ? __pfx_ref_tracker_free+0x10/0x10 [ 262.069209][T11699] netlink_rcv_skb+0x232/0x4b0 [ 262.074129][T11699] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 262.079745][T11699] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 262.085147][T11699] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.090403][T11699] netlink_unicast+0x80f/0x9b0 [ 262.095288][T11699] ? __pfx_netlink_unicast+0x10/0x10 [ 262.100624][T11699] ? netlink_sendmsg+0x650/0xb40 [ 262.105709][T11699] ? skb_put+0x11b/0x210 [ 262.109995][T11699] netlink_sendmsg+0x813/0xb40 [ 262.114818][T11699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.120242][T11699] ? aa_sock_msg_perm+0xf1/0x1b0 [ 262.125351][T11699] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.130691][T11699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.136119][T11699] __sock_sendmsg+0x21c/0x270 [ 262.140850][T11699] ____sys_sendmsg+0x500/0x810 [ 262.146378][T11699] ? __might_fault+0xaf/0x130 [ 262.151123][T11699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.157064][T11699] ? import_iovec+0x73/0xa0 [ 262.161628][T11699] ___sys_sendmsg+0x2a5/0x360 [ 262.166433][T11699] ? __lock_acquire+0x6b5/0x2cf0 [ 262.171431][T11699] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.176798][T11699] ? __pfx_futex_wake_mark+0x10/0x10 [ 262.182162][T11699] ? __fget_files+0x2a/0x420 [ 262.186868][T11699] ? __fget_files+0x3a0/0x420 [ 262.191616][T11699] __sys_sendmmsg+0x27c/0x4e0 [ 262.196471][T11699] ? __pfx___sys_sendmmsg+0x10/0x10 [ 262.201873][T11699] ? do_futex+0x333/0x420 [ 262.206377][T11699] ? fd_install+0x94/0x3d0 [ 262.210844][T11699] ? lock_acquire+0x106/0x330 [ 262.215700][T11699] ? __pfx___se_sys_futex+0x10/0x10 [ 262.220943][T11699] ? fd_install+0x306/0x3d0 [ 262.225678][T11699] __x64_sys_sendmmsg+0xa0/0xc0 [ 262.230591][T11699] do_syscall_64+0xe2/0xf80 [ 262.235213][T11699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.241318][T11699] ? trace_irq_disable+0x37/0x100 [ 262.246514][T11699] ? clear_bhb_loop+0x60/0xb0 [ 262.251249][T11699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.257289][T11699] RIP: 0033:0x7f2f6299acb9 [ 262.261753][T11699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.281617][T11699] RSP: 002b:00007f2f63920028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 262.290195][T11699] RAX: ffffffffffffffda RBX: 00007f2f62c15fa0 RCX: 00007f2f6299acb9 [ 262.298324][T11699] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000a [ 262.306612][T11699] RBP: 00007f2f62a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 262.314632][T11699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.322754][T11699] R13: 00007f2f62c16038 R14: 00007f2f62c15fa0 R15: 00007ffd36a687c8 [ 262.330856][T11699] [ 262.333933][T11699] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 262.341288][T11699] CPU: 0 UID: 0 PID: 11699 Comm: syz.0.1467 Not tainted syzkaller #0 PREEMPT(full) [ 262.350702][T11699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 262.360800][T11699] Call Trace: [ 262.364128][T11699] [ 262.367100][T11699] vpanic+0x1e0/0x670 [ 262.371134][T11699] panic+0xc5/0xd0 [ 262.374904][T11699] ? __pfx_panic+0x10/0x10 [ 262.379409][T11699] __warn+0x315/0x4a0 [ 262.383435][T11699] ? nsim_fib_event_nb+0xed8/0x1080 [ 262.388778][T11699] ? nsim_fib_event_nb+0xed8/0x1080 [ 262.394136][T11699] __report_bug+0x29a/0x540 [ 262.399216][T11699] ? inet6_rtm_newroute+0x14a2/0x19e0 [ 262.404621][T11699] ? rtnetlink_rcv_msg+0x7d5/0xbe0 [ 262.409782][T11699] ? netlink_rcv_skb+0x232/0x4b0 [ 262.414768][T11699] ? nsim_fib_event_nb+0xed8/0x1080 [ 262.420023][T11699] ? __pfx___report_bug+0x10/0x10 [ 262.425121][T11699] ? nsim_fib_event_nb+0xed8/0x1080 [ 262.430374][T11699] report_bug+0x16a/0x220 [ 262.434753][T11699] ? nsim_fib_event_nb+0xed8/0x1080 [ 262.440087][T11699] ? nsim_fib_event_nb+0xeda/0x1080 [ 262.445324][T11699] handle_bug+0x98/0x200 [ 262.449610][T11699] exc_invalid_op+0x1a/0x50 [ 262.454142][T11699] asm_exc_invalid_op+0x1a/0x20 [ 262.459036][T11699] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 262.464870][T11699] Code: fa be 02 00 00 00 eb 0a e8 75 08 c5 fa be 01 00 00 00 4c 89 f7 e8 a8 ce 9a fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 59 08 c5 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 262.484493][T11699] RSP: 0018:ffffc900035d6ea8 EFLAGS: 00010283 [ 262.490589][T11699] RAX: ffffffff86fd90b7 RBX: 0000000000000002 RCX: 0000000000080000 [ 262.498586][T11699] RDX: ffffc90004962000 RSI: 0000000000004a1e RDI: 0000000000004a1f [ 262.506581][T11699] RBP: dffffc0000000000 R08: ffff88807c01c02f R09: 1ffff1100f803805 [ 262.514597][T11699] R10: dffffc0000000000 R11: ffffed100f803806 R12: ffff888074095000 [ 262.522615][T11699] R13: ffffc900035d7020 R14: 0000000000000001 R15: ffffc900035d7038 [ 262.530617][T11699] ? nsim_fib_event_nb+0xed7/0x1080 [ 262.535852][T11699] ? nsim_fib_event_nb+0xed7/0x1080 [ 262.541086][T11699] notifier_call_chain+0x19d/0x3a0 [ 262.546230][T11699] ? atomic_notifier_call_chain+0x26/0x180 [ 262.552065][T11699] atomic_notifier_call_chain+0xda/0x180 [ 262.557721][T11699] call_fib_notifiers+0x31/0x60 [ 262.562596][T11699] call_fib6_multipath_entry_notifiers+0xf5/0x160 [ 262.569032][T11699] ? inet6_rtm_newroute+0xfb8/0x19e0 [ 262.574333][T11699] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 262.581387][T11699] ? inet6_rtm_newroute+0xfb8/0x19e0 [ 262.586696][T11699] ? inet6_rtm_newroute+0xfb8/0x19e0 [ 262.592007][T11699] inet6_rtm_newroute+0x14a2/0x19e0 [ 262.597229][T11699] ? kasan_quarantine_put+0xbb/0x1f0 [ 262.602537][T11699] ? lockdep_hardirqs_on+0x7a/0x110 [ 262.607758][T11699] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 262.613317][T11699] ? kmem_cache_free+0x195/0x610 [ 262.618275][T11699] ? nlmon_xmit+0xb0/0x100 [ 262.622732][T11699] ? lockdep_hardirqs_on+0x7a/0x110 [ 262.627970][T11699] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 262.633527][T11699] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 262.638499][T11699] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 262.643657][T11699] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 262.649140][T11699] ? ref_tracker_free+0x693/0x840 [ 262.654189][T11699] ? __copy_skb_header+0xa3/0x4a0 [ 262.659233][T11699] ? __pfx_ref_tracker_free+0x10/0x10 [ 262.664637][T11699] netlink_rcv_skb+0x232/0x4b0 [ 262.669421][T11699] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 262.674915][T11699] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 262.680239][T11699] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.685463][T11699] netlink_unicast+0x80f/0x9b0 [ 262.690259][T11699] ? __pfx_netlink_unicast+0x10/0x10 [ 262.695582][T11699] ? netlink_sendmsg+0x650/0xb40 [ 262.700544][T11699] ? skb_put+0x11b/0x210 [ 262.704859][T11699] netlink_sendmsg+0x813/0xb40 [ 262.709660][T11699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.714970][T11699] ? aa_sock_msg_perm+0xf1/0x1b0 [ 262.719965][T11699] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.725304][T11699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.730633][T11699] __sock_sendmsg+0x21c/0x270 [ 262.735357][T11699] ____sys_sendmsg+0x500/0x810 [ 262.740171][T11699] ? __might_fault+0xaf/0x130 [ 262.745002][T11699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.750328][T11699] ? import_iovec+0x73/0xa0 [ 262.754873][T11699] ___sys_sendmsg+0x2a5/0x360 [ 262.759581][T11699] ? __lock_acquire+0x6b5/0x2cf0 [ 262.764633][T11699] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.769878][T11699] ? __pfx_futex_wake_mark+0x10/0x10 [ 262.775213][T11699] ? __fget_files+0x2a/0x420 [ 262.779849][T11699] ? __fget_files+0x3a0/0x420 [ 262.784586][T11699] __sys_sendmmsg+0x27c/0x4e0 [ 262.789296][T11699] ? __pfx___sys_sendmmsg+0x10/0x10 [ 262.794520][T11699] ? do_futex+0x333/0x420 [ 262.798876][T11699] ? fd_install+0x94/0x3d0 [ 262.803317][T11699] ? lock_acquire+0x106/0x330 [ 262.808024][T11699] ? __pfx___se_sys_futex+0x10/0x10 [ 262.813237][T11699] ? fd_install+0x306/0x3d0 [ 262.817865][T11699] __x64_sys_sendmmsg+0xa0/0xc0 [ 262.822738][T11699] do_syscall_64+0xe2/0xf80 [ 262.827264][T11699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.833346][T11699] ? trace_irq_disable+0x37/0x100 [ 262.838393][T11699] ? clear_bhb_loop+0x60/0xb0 [ 262.843093][T11699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.849003][T11699] RIP: 0033:0x7f2f6299acb9 [ 262.853451][T11699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.873213][T11699] RSP: 002b:00007f2f63920028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 262.881678][T11699] RAX: ffffffffffffffda RBX: 00007f2f62c15fa0 RCX: 00007f2f6299acb9 [ 262.889681][T11699] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000a [ 262.897686][T11699] RBP: 00007f2f62a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 262.905679][T11699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.913671][T11699] R13: 00007f2f62c16038 R14: 00007f2f62c15fa0 R15: 00007ffd36a687c8 [ 262.921684][T11699] [ 262.925311][T11699] Kernel Offset: disabled [ 262.929644][T11699] Rebooting in 86400 seconds..