last executing test programs: 4.095791284s ago: executing program 1 (id=1633): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000002000000ac1e000100000000000000000000000000000700000000000a0040"], 0xb8}}, 0x0) 3.990774989s ago: executing program 1 (id=1635): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xffffffff, 0x3, 0x0, 0x40a}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4098) 3.839911349s ago: executing program 1 (id=1639): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x64, r1, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000000)={0x3, 'veth1_macvtap\x00', {0x4}, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0x200000ff, 0x4, 0x1}, 0x48) sendmsg$nl_xfrm(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=@updsa={0x154, 0x1a, 0x1, 0x10000000, 0x0, {{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@private2, {0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x70bd2d, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e22, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x154}}, 0x0) 2.59581597s ago: executing program 3 (id=1652): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r3 = socket(0x10, 0x803, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000300)=0x9c3cc356e0b08a4a, 0x4) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_TOS={0x5, 0x9, 0xa}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="010000"], 0x3c}}, 0x20000004) (async, rerun: 32) listen(r0, 0x40) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bond_slave_1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2.207655939s ago: executing program 3 (id=1656): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x164, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x50, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4ac6801c299c0432b44b3224489bab18"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "445e5cceb9504042466ab81f232faf506004606c7013aab3cd6ec52097e29a8d"}]}, @NL802154_ATTR_SEC_KEY={0xe8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a3c56349e68466c93794af636cd5b367155f66f5f1a2c81a3f27109286ba9281"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1000}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xd}, @NL802154_KEY_ATTR_ID={0x64, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffd}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403650f7168bc3141e963a1d95df3031"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7ff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xf}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x164}, 0x1, 0x0, 0x0, 0x44040}, 0x44) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000480), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004045}, 0x8001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r4, 0x10, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r7, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r7, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c010}, 0x48041) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000a80)={&(0x7f0000000940), 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x60, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x20}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xe}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x7c, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000001}, 0x4800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff}) sendto$unix(r10, &(0x7f0000000c40)="ce11e481d459f8accf", 0x9, 0x90, &(0x7f0000000c80)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xe8, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0xac, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1c460c1a7d55eabc4b740b0082f973b67c2ad03d181c1118a1571d7fd94130a3"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c321ba7c217f364f3d11c3a027ca086c60302fccf11ea23af45f4b6321d1e04a"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d7f3b85bf7cdd1d7e5e3c7c41771d53f4957be539a6f7181c4e6d3198892e04e"}]}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x48}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40080}, 0x4040000) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00), r11) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x50, r12, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40081) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000001080)={r10, 0x80000001, 0x2, 0x8}) syz_genetlink_get_family_id$team(&(0x7f0000001040), r13) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r14, &(0x7f0000002200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000021c0)={&(0x7f0000001140)={0x1060, 0x0, 0x501, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_DATA={0x22, 0xc5, "b6ccdb1fe76269b4cfd0bb9120a3e2b2d27df5c0bcbe753c0709a757bd27"}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}]}, 0x1060}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008080) 2.20716334s ago: executing program 4 (id=1657): socket(0x40000000015, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x28, 0x1, 0x3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x0, 0x0, 0xc, 0xfffffffc}, 0x9c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2.120443767s ago: executing program 1 (id=1658): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r4, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) r5 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) accept4$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000300)=0x10, 0x100000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000700)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='/\x00'/12, @ANYRES32=r7, @ANYBLOB="043c0b050ffa6a5d60e34cf838a33b597b453715539fef4e01010000519e9cd60bdaeddaa2c03ccf9d17a1c6fad705d5588bfbf7e8442aab780ab08f8653a9c2bca4d45e084dcb6367b330db6cd63f1df2c247ac4c8564292dc9123a6468a4b1e35dc30e7b157f497e816688b9c77054bd311987971b2e1b6727a21765f0691918f00bdb518b70a69fb2b08de8bdfd40c3651edd129ebe6a18b6eaffe21409621f8ed29d9a8765984ae90872ebb3dd7bbecdd32fe2b631e7f92449a219f76a298952271242f1242a3945482af1a091056025330f8519ed30d8aa9c4669871cc3c603b2bed5e9b92ad03f3d53c7a399a157d659539d5f63b2bd7a0d001a5d8510e27554971f806b68dbf1a16db85c5fde98c6e3e7306fb29fbcfd99095e5392ae608897b76c21735f8b6e56d6024c8a84c0dedf4496c87f105337c129daf6fa82e25f64804727a310", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="2f0000001400000004"], 0x20) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xc, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xb86}]}, 0x2c}}, 0x40) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000018400000000000000000500000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a0104000000000c0000000700000208000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000230c0001400000000000000101500000000c0a010100000000000000000700fffc0900020073797a31000000000900010073797a300000000024000380200000800800034000000002140007800c000100636f756e746572"], 0x100}, 0x1, 0x0, 0x0, 0x4040854}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="06001800030000000500060004000000050016000100000008001c"], 0x84}}, 0x0) 2.048498515s ago: executing program 0 (id=1659): r0 = socket(0x1e, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffd}]}}]}, 0x38}}, 0x0) 1.752039902s ago: executing program 4 (id=1661): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="b810000000000000100100000d"], 0x10b8}, 0xff00) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000140)={{}, [@bcast, @remote, @null, @default, @default, @null, @default, @netrom]}, &(0x7f0000000040)=0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x2000, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x2}}}}}}, 0x0) bind$qrtr(r2, &(0x7f0000000000)={0x2a, 0x1, 0x7fff}, 0xc) bind$qrtr(r2, &(0x7f0000001000)={0x2a, 0x1, 0x7fff}, 0xc) syz_init_net_socket$ax25(0x3, 0x2, 0xf0) (async) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) (async) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="b810000000000000100100000d"], 0x10b8}, 0xff00) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000140)={{}, [@bcast, @remote, @null, @default, @default, @null, @default, @netrom]}, &(0x7f0000000040)=0x48) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5}, 0x10) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x2000, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x2}}}}}}, 0x0) (async) bind$qrtr(r2, &(0x7f0000000000)={0x2a, 0x1, 0x7fff}, 0xc) (async) bind$qrtr(r2, &(0x7f0000001000)={0x2a, 0x1, 0x7fff}, 0xc) (async) 1.656200458s ago: executing program 2 (id=1662): r0 = socket(0xa, 0x3, 0x95) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}, {0xa, 0x8, 0xfffffffe, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfff, 0x2, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) r1 = socket$inet(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x6c, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x37, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x6]}, {}, {}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote, 0x6}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x4, 0x7fff, 0x0, 0x0, 0x3fd, 0x0, 0x58, 0x200]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) 1.603461634s ago: executing program 0 (id=1663): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x91, "c8891c93319b854ca711541903362e77757054e16674be8ddad51c3ff7ce9926e3f44f0aa8046941e7ced3838a526348afca136f31b983d08f788c4a806cecf9b47725caadb9cdfcaa82b5e6256595337ac53ba482041f522e3fcd34be85f543a1f95fa63ca686a036e78e828282de602221b013fff6767d2ecd247da7a2b24cef6b6842e31762ae7c63c467c5a8fd63f1"}, &(0x7f00000001c0)=0x99) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x58a9, 0x8}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000685b6c5617ad066276a881fb623f809321d994e14deca4f6f9ba3ab88eef6a61"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000040)=r3, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000280)=r2, 0x4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000740)='net_prio.prioidx\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r7, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x803, 0x2) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r10, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200000}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmsg(r9, &(0x7f0000000680)={&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/60, 0x3c}, {&(0x7f0000000580)=""/114, 0x72}, {&(0x7f0000000600)=""/43, 0x2b}], 0x3}, 0x2022) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x0, 0x0) recvfrom(r4, &(0x7f00000006c0)=""/120, 0x78, 0x100, &(0x7f0000000780)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x2, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x24}, 0x94) 1.51377672s ago: executing program 3 (id=1664): r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) bind$qrtr(r2, &(0x7f0000000000)={0x2a, 0x1, 0xfffffffe}, 0xc) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.278696938s ago: executing program 2 (id=1665): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x58}, 0x1, 0x7}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='rss_stat\x00', r2, 0x0, 0x40}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 1.196053576s ago: executing program 3 (id=1666): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000a90b00000100000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000989f8ddbd75cbd8d0ea33a6700"/28], 0x48) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@deltaction={0x18, 0x31, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = socket(0x2d, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000480)={r6}, &(0x7f00000004c0)=0x8) unshare(0x24020400) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c11000007000000030000000000000802000000050000000000000e05000000000000000000002e004f00683c1fc62c92d8862099cb26903d141923690b95c435bcb9491d377b7dad59ce19778406a42d6f0b259f5088a77fce2fe29beb925897e600130cc77e595ae285"], 0x0, 0x3b}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xfffffffffffffe66}, 0x48) accept4(r0, 0x0, &(0x7f0000000080), 0x80000) 1.195894862s ago: executing program 4 (id=1667): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.158901651s ago: executing program 1 (id=1668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0xffa1, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r1, 0x309, 0x0, 0x0, {0x1d}}, 0x14}}, 0x0) 1.083409215s ago: executing program 4 (id=1669): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000200001030000000000000000000000080018004e214e21"], 0x24}, 0x1, 0x0, 0x0, 0x24040084}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r2 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}], 0x1, 0x40800) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r3}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000040)={'ip6gre0\x00', 0x400}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r6, r8}, 0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_DETACH(0x22, &(0x7f00000004c0)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r9, r10, 0x4, r6}, 0x10) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'wlan0\x00', 0x400}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000002f00000018000380100003800c00018005000208000000000400010018000180140002007369743000"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', r3, 0x2d, 0xb2, 0x5, 0x101, 0x41, @empty, @local, 0x80, 0x1, 0x5, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r1, 0x2f, 0x2, 0x1, 0xcc3, 0x18, @mcast1, @private1, 0x7800, 0x7800, 0x4, 0xfffffffb}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="50010000", @ANYRES16=r12, @ANYBLOB="20002abd7000fbdbdf250d000000780001801400020070696d36726567000000000000000000080003000300000008000100", @ANYRES32=r3, @ANYBLOB="1400020069705f767469300000000000000000001400020076657468305f746f5f7465616d0000001400020070696d367265673000000000000000001400020067656e65766531000000000000000000500001801400020076657468305f746f5f7465616d00000008000300020000001400020076657468305f746f5f6272696467650014000200776c616e31000000000000000000000008000300020000002c00018014000200776c616e31000000000000000000000014000200626f6e643000000000000000000000004800018014000200726f736530000000000000000000000008000100", @ANYRES32=r13, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="0800030001000000"], 0x150}, 0x1, 0x0, 0x0, 0x2200080c}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ffffffff95000000000000a84704309b7f00000000"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd1a}, 0x94) 1.031948837s ago: executing program 2 (id=1670): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x7f}, 0x18) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 963.810875ms ago: executing program 1 (id=1671): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x29, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x3, 0x5ef, 0x9, 0xbe, 0xd1, [0x3, 0xf2]}}) ioctl$FIOCLEX(r0, 0x5451) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x40880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x2f, &(0x7f0000000040), 0x3b) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000100), 0x4) 746.791666ms ago: executing program 2 (id=1672): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8acc05024", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 632.119201ms ago: executing program 0 (id=1673): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f0000000300)) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x6e6bb4, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x38}}}]}, 0x50}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d0001000000000400c20cae199db8f5d400000000000000"], 0x1c}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1}, {r0, 0x10219}, {r3, 0x140}], 0x3, &(0x7f00000000c0)={r5, r6+60000000}, &(0x7f0000000180)={[0x5]}, 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) 579.208796ms ago: executing program 2 (id=1674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000040)={{0x0, 0x5, 0x10, 0x3, 0x26, 0x2, 0x8000, 0x986, 0x7ff, 0x56, 0x6, 0xf5d1, 0x7, 0x10001, 0x6}, 0x8, [0x0]}) (async) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000c"], 0x28, 0xe000}, 0x5}], 0x1, 0x0) (async, rerun: 64) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) (async) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) (async) recvfrom$l2tp6(r2, 0x0, 0x0, 0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x0) (rerun: 64) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f00000000c0)={0x6, 'ip6gre0\x00', {0x4}, 0x8}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffffd, 0x2, @TCA_ETF_PARMS={0x10}}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}]}, 0x5c}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r3, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) (rerun: 32) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 503.350688ms ago: executing program 4 (id=1675): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x3, @vifc_lcl_ifindex=r1, @private=0xa010101}, 0x10) r5 = socket(0x10, 0x803, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) socket(0x23, 0xa, 0x7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}}, 0x0) 452.231139ms ago: executing program 0 (id=1676): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000130000000000000000000003000000000000000000a0040"], 0xb8}}, 0x0) 370.852202ms ago: executing program 0 (id=1677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000000)=0x2, 0xfcc0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114"], 0xc8}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x48, 0x1401, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xffffffff}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x800001}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x200080c1) 341.812868ms ago: executing program 2 (id=1678): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000000)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9a}, @cb_func={0x18, 0xf, 0x4, 0x0, 0x3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', r1, r4, 0x1}, 0x50) 216.14932ms ago: executing program 3 (id=1679): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) sendto$phonet(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0x8, 0x6}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, 0x0, 0x20008840) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f00000082c0)=[{{0x0, 0x0, 0x0}, 0x60}], 0x1, 0x40010002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) accept(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r6, 0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000000)=""/62, &(0x7f0000000040)=0x3e) 76.189648ms ago: executing program 0 (id=1680): r0 = socket(0x1, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) 43.399391ms ago: executing program 3 (id=1681): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f22d", 0x3) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x2, {0x0, 0xc25ecb9d809030cb, 0x2}, {0x1}, 0x2}, {0x1, 0x2, {0x0, 0x0, 0x3}, {0x1, 0x1}, 0x2}], 0x40) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvfrom$l2tp6(r4, 0x0, 0x0, 0x20, 0x0, 0x0) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005d80)=@newtfilter={0x3c, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xc, 0x2, [@TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x3c}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) 0s ago: executing program 4 (id=1682): socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x3a, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x119, 0x487, &(0x7f0000000500), &(0x7f0000000480)=0xfffffffffffffd69) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) setsockopt$inet6_udp_int(r5, 0x11, 0x65, &(0x7f0000000080)=0x2, 0x4) sendmmsg$inet6(r5, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) sendmmsg$inet6(r5, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x1ff, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newtaction={0x88, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x74, 0x1, [@m_mirred={0x70, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x4, 0x401}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x4, 0x8, 0x1, 0x1}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x2b1e}, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800", 0x2}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe33) kernel console output (not intermixed with test programs): dv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.942442][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.000431][ T5837] hsr_slave_0: entered promiscuous mode [ 91.007023][ T5837] hsr_slave_1: entered promiscuous mode [ 91.054340][ T5838] hsr_slave_0: entered promiscuous mode [ 91.061120][ T5838] hsr_slave_1: entered promiscuous mode [ 91.067509][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 91.073533][ T5838] Cannot create hsr debugfs directory [ 91.096334][ T5846] hsr_slave_0: entered promiscuous mode [ 91.103774][ T5846] hsr_slave_1: entered promiscuous mode [ 91.110006][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 91.115752][ T5846] Cannot create hsr debugfs directory [ 91.252625][ T5842] hsr_slave_0: entered promiscuous mode [ 91.260345][ T5842] hsr_slave_1: entered promiscuous mode [ 91.266482][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 91.272563][ T5842] Cannot create hsr debugfs directory [ 91.288492][ T5839] hsr_slave_0: entered promiscuous mode [ 91.295230][ T5839] hsr_slave_1: entered promiscuous mode [ 91.301739][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 91.307593][ T5839] Cannot create hsr debugfs directory [ 91.824815][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.851817][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.864649][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.891358][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.949732][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.976378][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.988812][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.004457][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.092001][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.110819][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.122382][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.138299][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.249379][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.262072][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.274005][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.299247][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.317686][ T51] Bluetooth: hci0: command tx timeout [ 92.397813][ T51] Bluetooth: hci1: command tx timeout [ 92.399324][ T5858] Bluetooth: hci2: command tx timeout [ 92.403280][ T5160] Bluetooth: hci3: command tx timeout [ 92.409835][ T5854] Bluetooth: hci4: command tx timeout [ 92.433045][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.446274][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.460910][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.473289][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.493351][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.523968][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.571753][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.579158][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.591167][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.598532][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.641388][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.681998][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.714062][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.721264][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.754941][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.762167][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.813001][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.859428][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.870716][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.921024][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.928253][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.972962][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.015400][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.022681][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.073317][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.081131][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.101082][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.125988][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.133653][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.205403][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.292685][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.315727][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.322937][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.332291][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.339497][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.384027][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.588996][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.613135][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.705800][ T5837] veth0_vlan: entered promiscuous mode [ 93.751290][ T5837] veth1_vlan: entered promiscuous mode [ 93.861918][ T5838] veth0_vlan: entered promiscuous mode [ 93.920824][ T5838] veth1_vlan: entered promiscuous mode [ 93.950855][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.001072][ T5837] veth0_macvtap: entered promiscuous mode [ 94.031115][ T5837] veth1_macvtap: entered promiscuous mode [ 94.073870][ T5838] veth0_macvtap: entered promiscuous mode [ 94.086295][ T5838] veth1_macvtap: entered promiscuous mode [ 94.124510][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.155323][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.176362][ T1108] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.200819][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.211216][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.225207][ T1108] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.234816][ T1108] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.244924][ T5842] veth0_vlan: entered promiscuous mode [ 94.260269][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.269659][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.282092][ T1108] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.325334][ T1088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.341040][ T5842] veth1_vlan: entered promiscuous mode [ 94.357821][ T1088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.394538][ T1088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.403681][ T5854] Bluetooth: hci0: command tx timeout [ 94.414636][ T1088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.479333][ T5858] Bluetooth: hci2: command tx timeout [ 94.479352][ T5160] Bluetooth: hci3: command tx timeout [ 94.484793][ T5858] Bluetooth: hci1: command tx timeout [ 94.499668][ T5854] Bluetooth: hci4: command tx timeout [ 94.584986][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.613699][ T5839] veth0_vlan: entered promiscuous mode [ 94.620492][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.655157][ T5842] veth0_macvtap: entered promiscuous mode [ 94.699515][ T5839] veth1_vlan: entered promiscuous mode [ 94.706617][ T5842] veth1_macvtap: entered promiscuous mode [ 94.737256][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.745236][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.806461][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.815792][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.835221][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.846828][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.850529][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.895172][ T5839] veth0_macvtap: entered promiscuous mode [ 94.908200][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.933116][ T5839] veth1_macvtap: entered promiscuous mode [ 94.942788][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.001418][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.011220][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.042130][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.060124][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.152705][ T5846] veth0_vlan: entered promiscuous mode [ 95.181832][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.184274][ T5966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.199825][ T5966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.222975][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.232584][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.264678][ T5846] veth1_vlan: entered promiscuous mode [ 95.289948][ T1108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.302722][ T1108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.328208][ T1108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.342722][ T1108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.421159][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.448255][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.474482][ T5846] veth0_macvtap: entered promiscuous mode [ 95.509679][ T5846] veth1_macvtap: entered promiscuous mode [ 95.566020][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.580493][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.589101][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.636347][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.720091][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.728763][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.736681][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.745327][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 95.759112][ T1145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.771748][ T1145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.789245][ T1145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.800285][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.808530][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.817970][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.825418][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.969358][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.993220][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.132966][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.145613][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.306109][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.338289][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.348113][ T5992] netlink: 196 bytes leftover after parsing attributes in process `syz.2.11'. [ 96.374613][ T5992] netlink: 'syz.2.11': attribute type 6 has an invalid length. [ 96.410613][ T5989] veth0_to_batadv: mtu less than device minimum [ 96.481827][ T5858] Bluetooth: hci0: command tx timeout [ 96.557537][ T5854] Bluetooth: hci4: command tx timeout [ 96.561629][ T5160] Bluetooth: hci3: command tx timeout [ 96.563006][ T5854] Bluetooth: hci2: command tx timeout [ 96.563071][ T5858] Bluetooth: hci1: command tx timeout [ 96.668942][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 96.716093][ T1088] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.725801][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 96.752928][ T1088] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.757628][ T5997] Zero length message leads to an empty skb [ 96.762680][ T1088] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.791374][ T5998] bridge_slave_0: left allmulticast mode [ 96.801235][ T5998] bridge_slave_0: left promiscuous mode [ 96.814820][ T5998] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.839784][ T5998] bridge_slave_1: left allmulticast mode [ 96.847108][ T5998] bridge_slave_1: left promiscuous mode [ 96.865244][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.918456][ T5998] bond0: (slave bond_slave_0): Releasing backup interface [ 96.933938][ T5998] bond0: (slave bond_slave_1): Releasing backup interface [ 96.964870][ T5998] team0: Port device team_slave_0 removed [ 96.985055][ T5998] team0: Port device team_slave_1 removed [ 97.000649][ T5998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.009026][ T5998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.022980][ T5998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.044117][ T24] cfg80211: failed to load regulatory.db [ 97.054104][ T5998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.090748][ T5998] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 97.143835][ T1088] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.352280][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18'. [ 97.416620][ T6020] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 97.431672][ T6020] openvswitch: netlink: Flow key attr not present in new flow. [ 97.491220][ T6020] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 97.591322][ T6027] warning: `syz.3.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.988771][ T6049] tipc: Started in network mode [ 98.007780][ T6058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28'. [ 98.037653][ T6049] tipc: Node identity , cluster identity 4711 [ 98.045479][ T6049] tipc: Failed to obtain node identity [ 98.057169][ T6049] tipc: Enabling of bearer rejected, failed to enable media [ 98.170484][ T6064] netlink: 596 bytes leftover after parsing attributes in process `syz.2.28'. [ 98.199868][ T6052] syzkaller0: entered promiscuous mode [ 98.214200][ T6052] syzkaller0: entered allmulticast mode [ 98.232895][ T6058] netlink: 'syz.2.28': attribute type 29 has an invalid length. [ 98.276730][ T6060] netlink: 'syz.2.28': attribute type 29 has an invalid length. [ 98.374244][ T6068] netlink: 'syz.0.32': attribute type 1 has an invalid length. [ 99.537952][ T6089] IPv6: addrconf: prefix option has invalid lifetime [ 99.592750][ T6091] Bluetooth: MGMT ver 1.23 [ 99.695719][ T6093] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.733463][ T6095] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.004550][ T6085] bridge1: entered promiscuous mode [ 100.010241][ T6085] bridge1: entered allmulticast mode [ 100.101704][ T6093] bridge_slave_1: left allmulticast mode [ 100.108226][ T6093] bridge_slave_1: left promiscuous mode [ 100.114286][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.135990][ T6093] bridge_slave_0: left allmulticast mode [ 100.157681][ T6093] bridge_slave_0: left promiscuous mode [ 100.163590][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.313276][ T6104] __nla_validate_parse: 1 callbacks suppressed [ 100.313290][ T6104] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.44'. [ 100.719669][ T6117] syz.0.48 uses obsolete (PF_INET,SOCK_PACKET) [ 100.987264][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.53'. [ 101.009738][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.53'. [ 101.209987][ T6143] netlink: 40 bytes leftover after parsing attributes in process `syz.1.56'. [ 101.649423][ T6158] netlink: 112 bytes leftover after parsing attributes in process `syz.0.62'. [ 101.686437][ T6158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.718818][ T6158] netlink: 'syz.0.62': attribute type 5 has an invalid length. [ 101.749652][ T6158] netlink: 140 bytes leftover after parsing attributes in process `syz.0.62'. [ 101.797802][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 101.868130][ T6167] netlink: 'syz.2.66': attribute type 1 has an invalid length. [ 101.890009][ T6167] netlink: 'syz.2.66': attribute type 2 has an invalid length. [ 101.900205][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.922034][ T6162] tipc: Started in network mode [ 101.927481][ T6162] tipc: Node identity c25d386c9d58, cluster identity 4711 [ 101.943795][ T6162] tipc: Enabled bearer , priority 0 [ 101.962666][ T1108] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.000086][ T1108] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.031721][ T6170] syzkaller0: entered promiscuous mode [ 102.051547][ T6170] syzkaller0: entered allmulticast mode [ 102.071997][ T2990] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.097436][ T6160] tipc: Resetting bearer [ 102.203109][ T6160] tipc: Disabling bearer [ 103.223363][ T6230] tipc: Started in network mode [ 103.239035][ T6230] tipc: Node identity 080211, cluster identity 4711 [ 103.252140][ T6230] tipc: Enabled bearer , priority 0 [ 103.270745][ T6230] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 103.295765][ T6230] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 103.322162][ T6230] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 103.354796][ T6230] tipc: Resetting bearer [ 103.912597][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.92'. [ 104.008082][ T6256] netlink: 64 bytes leftover after parsing attributes in process `syz.1.94'. [ 104.031945][ T6256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.94'. [ 104.192200][ T6264] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 104.237158][ T5160] Bluetooth: hci4: command 0x0405 tx timeout [ 104.348076][ T5905] tipc: Node number set to 134353152 [ 104.700805][ T6286] netlink: 'syz.0.107': attribute type 21 has an invalid length. [ 105.020308][ T6293] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 105.105093][ T6293] bond1 (unregistering): Released all slaves [ 105.381318][ T6323] Bluetooth: MGMT ver 1.23 [ 105.525068][ T6326] batadv0: entered promiscuous mode [ 105.563651][ T6326] bond0: entered promiscuous mode [ 105.586012][ T6326] bond_slave_0: entered promiscuous mode [ 105.594328][ T6326] bond_slave_1: entered promiscuous mode [ 105.631409][ T6326] hsr1: entered allmulticast mode [ 105.636546][ T6326] batadv0: entered allmulticast mode [ 105.657625][ T6326] bond0: entered allmulticast mode [ 105.670492][ T6326] bond_slave_0: entered allmulticast mode [ 105.686540][ T6326] bond_slave_1: entered allmulticast mode [ 105.712087][ T6326] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 105.798536][ T6337] netlink: 'syz.1.121': attribute type 10 has an invalid length. [ 105.837460][ T6337] __nla_validate_parse: 8 callbacks suppressed [ 105.837480][ T6337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.121'. [ 105.968148][ T6339] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 106.188161][ T6349] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.126'. [ 106.429551][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'. [ 106.465321][ T6364] block nbd0: Unsupported socket: should be TCP or UNIX. [ 106.535466][ T6368] batadv1: entered allmulticast mode [ 106.904413][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 106.939895][ T6388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.140'. [ 106.978801][ T6393] netlink: 'syz.4.142': attribute type 1 has an invalid length. [ 107.159944][ T6401] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.143'. [ 108.015420][ T6400] veth3: entered promiscuous mode [ 108.037258][ T6402] vlan2: entered allmulticast mode [ 108.042585][ T6402] geneve0: entered allmulticast mode [ 108.070856][ T6405] kthread_run failed with err -4 [ 108.245273][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 108.305212][ T6416] netlink: 5 bytes leftover after parsing attributes in process `syz.0.147'. [ 108.314667][ T6416] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 108.369828][ T6416] 0ªî{X¹¦: entered allmulticast mode [ 108.402595][ T6416] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 108.471010][ T6416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.147'. [ 108.508261][ T6432] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 109.047131][ T6459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.067988][ T6462] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 109.089171][ T6465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.164'. [ 109.294058][ T6476] netlink: 'syz.2.166': attribute type 1 has an invalid length. [ 109.318562][ T6475] netlink: 'syz.2.166': attribute type 1 has an invalid length. [ 109.525085][ T6475] bond1: entered promiscuous mode [ 109.562453][ T6475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.635237][ T6489] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 109.669683][ T6489] bond1 (unregistering): Released all slaves [ 109.800428][ T6498] netlink: 'syz.0.171': attribute type 11 has an invalid length. [ 109.920388][ T36] wlan1: Trigger new scan to find an IBSS to join [ 109.976488][ T6505] openvswitch: netlink: Message has 5368 unknown bytes. [ 110.047058][ T6505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.347177][ T6523] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 110.859006][ T6549] __nla_validate_parse: 14 callbacks suppressed [ 110.859027][ T6549] netlink: 300 bytes leftover after parsing attributes in process `syz.0.192'. [ 110.936888][ T6551] netlink: 64 bytes leftover after parsing attributes in process `syz.2.193'. [ 110.967803][ T6551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.193'. [ 111.160266][ T6560] netlink: 32 bytes leftover after parsing attributes in process `syz.4.197'. [ 111.179133][ T6561] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003 [ 111.455591][ T6574] macvlan0: entered promiscuous mode [ 111.468388][ T6574] batadv0: entered promiscuous mode [ 111.477610][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 111.498885][ T6574] debugfs: 'hsr1' already exists in 'hsr' [ 111.504774][ T6574] Cannot create hsr debugfs directory [ 111.537557][ T6574] hsr1: entered allmulticast mode [ 111.547388][ T6574] macvlan0: entered allmulticast mode [ 111.559002][ T6574] veth1_vlan: entered allmulticast mode [ 111.595127][ T6574] batadv0: entered allmulticast mode [ 111.618992][ T6574] macvlan0: left promiscuous mode [ 111.632383][ T6574] batadv0: left promiscuous mode [ 112.064588][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'. [ 112.067095][ T6597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.210'. [ 112.112708][ T6598] netlink: 64 bytes leftover after parsing attributes in process `syz.2.209'. [ 112.201982][ T6598] netlink: 24 bytes leftover after parsing attributes in process `syz.2.209'. [ 112.226746][ T6606] sctp: [Deprecated]: syz.1.208 (pid 6606) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.226746][ T6606] Use struct sctp_sack_info instead [ 112.888054][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.223'. [ 113.563876][ T6676] sctp: [Deprecated]: syz.1.233 (pid 6676) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.563876][ T6676] Use struct sctp_sack_info instead [ 113.642077][ T6675] delete_channel: no stack [ 113.900231][ T6688] netlink: 'syz.3.238': attribute type 10 has an invalid length. [ 113.928086][ T6687] veth3: entered promiscuous mode [ 113.933279][ T6687] veth3: entered allmulticast mode [ 113.973899][ T6688] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 113.989584][ T6692] netlink: 'syz.2.239': attribute type 10 has an invalid length. [ 114.171215][ T6701] syz_tun: entered allmulticast mode [ 114.253351][ T6701] syz_tun: left allmulticast mode [ 114.460598][ T6715] syzkaller1: entered promiscuous mode [ 114.485441][ T6715] syzkaller1: entered allmulticast mode [ 114.835163][ T6732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.930223][ T2990] wlan1: Trigger new scan to find an IBSS to join [ 115.042516][ T6739] tipc: Enabling of bearer rejected, already enabled [ 115.269955][ T6757] tipc: Started in network mode [ 115.274901][ T6757] tipc: Node identity 1a354fa48a9c, cluster identity 4711 [ 115.290326][ T6757] tipc: Enabled bearer , priority 0 [ 115.322819][ T6760] trusted_key: syz.2.259 sent an empty control message without MSG_MORE. [ 115.539132][ T6757] syzkaller0: entered promiscuous mode [ 115.564217][ T6757] syzkaller0: entered allmulticast mode [ 115.583100][ T6757] tipc: Resetting bearer [ 115.653959][ T6752] tipc: Resetting bearer [ 115.857785][ T1108] wlan1: Creating new IBSS network, BSSID 0e:43:51:22:c2:48 [ 116.110668][ T6798] __nla_validate_parse: 20 callbacks suppressed [ 116.110690][ T6798] netlink: 64 bytes leftover after parsing attributes in process `syz.1.265'. [ 116.387106][ T5926] tipc: Node number set to 2427015076 [ 116.906591][ T6752] tipc: Disabling bearer [ 116.916881][ T6771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.263'. [ 116.932014][ T6777] tipc: Enabled bearer , priority 0 [ 116.940393][ T6792] syzkaller0: entered promiscuous mode [ 116.946673][ T6792] syzkaller0: entered allmulticast mode [ 116.966256][ T6774] tipc: Resetting bearer [ 117.044896][ T6774] tipc: Disabling bearer [ 117.182540][ T6809] pim6reg1: entered promiscuous mode [ 117.192031][ T6809] pim6reg1: entered allmulticast mode [ 117.201556][ T6805] netlink: 64 bytes leftover after parsing attributes in process `syz.2.269'. [ 117.242301][ T6805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.269'. [ 117.394068][ T6805] netlink: 48 bytes leftover after parsing attributes in process `syz.2.269'. [ 117.452203][ T6819] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 117.467840][ T6819] netlink: 'syz.0.273': attribute type 1 has an invalid length. [ 117.530170][ T6819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.648428][ T6829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.273'. [ 117.740342][ T6823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.776449][ T6823] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 117.832959][ T6823] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 117.849772][ T6837] unsupported nla_type 52263 [ 117.955883][ T6819] veth3: entered promiscuous mode [ 117.965603][ T6819] bond1: (slave veth3): Enslaving as an active interface with a down link [ 117.983068][ T6829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.996254][ T6839] netlink: 20 bytes leftover after parsing attributes in process `syz.2.280'. [ 118.167405][ T6846] netlink: 'syz.0.283': attribute type 1 has an invalid length. [ 118.235435][ T6851] netlink: 'syz.2.284': attribute type 6 has an invalid length. [ 118.237880][ T6853] netlink: 64 bytes leftover after parsing attributes in process `syz.1.286'. [ 118.289250][ T6855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.286'. [ 118.353560][ T6853] netlink: 48 bytes leftover after parsing attributes in process `syz.1.286'. [ 118.649840][ T6878] veth1_to_team: entered promiscuous mode [ 118.656009][ T6878] macvtap1: entered promiscuous mode [ 118.661776][ T6878] macvtap1: entered allmulticast mode [ 118.687601][ T6878] veth1_to_team: entered allmulticast mode [ 120.723146][ T6939] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.163653][ T6985] __nla_validate_parse: 12 callbacks suppressed [ 121.163674][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 121.186240][ T6979] bond2: Invalid ad_actor_system MAC address. [ 121.196503][ T6979] bond2: option ad_actor_system: invalid value (1) [ 121.205932][ T6979] bond2 (unregistering): Released all slaves [ 121.213846][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880572bac00: rx timeout, send abort [ 121.237998][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.327'. [ 121.388350][ T6985] vlan2: entered promiscuous mode [ 121.393466][ T6985] bridge0: entered promiscuous mode [ 121.416451][ T6985] vlan2: entered allmulticast mode [ 121.436392][ T6989] netlink: 24 bytes leftover after parsing attributes in process `syz.3.328'. [ 121.457415][ T6985] bridge0: entered allmulticast mode [ 121.463985][ T6988] netlink: 64 bytes leftover after parsing attributes in process `syz.3.328'. [ 121.489698][ T6988] netlink: 48 bytes leftover after parsing attributes in process `syz.3.328'. [ 121.713973][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880572ba800: rx timeout, send abort [ 121.722969][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880572bac00: abort rx timeout. Force session deactivation [ 121.864292][ T7004] netlink: 'syz.2.333': attribute type 1 has an invalid length. [ 121.893935][ T7008] netlink: 48 bytes leftover after parsing attributes in process `syz.4.334'. [ 121.951928][ T7004] bond2: entered promiscuous mode [ 121.973930][ T7004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.013555][ T7014] netlink: 'syz.3.336': attribute type 4 has an invalid length. [ 122.062553][ T7004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.085001][ T7004] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 122.128965][ T7004] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 122.146064][ T7004] bond2: (slave wireguard0): making interface the new active one [ 122.155902][ T7004] wireguard0: entered promiscuous mode [ 122.163621][ T7004] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 122.222681][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880572ba800: abort rx timeout. Force session deactivation [ 122.319457][ T7017] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 122.329926][ T7017] wireguard0: left promiscuous mode [ 122.360075][ T7017] bond2 (unregistering): Released all slaves [ 122.700082][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 122.701363][ T7039] netlink: 'syz.2.344': attribute type 1 has an invalid length. [ 122.731046][ T7041] netlink: 44 bytes leftover after parsing attributes in process `syz.3.345'. [ 122.800573][ T7039] bond2: entered promiscuous mode [ 122.806254][ T7039] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.004254][ T7053] xt_l2tp: missing protocol rule (udp|l2tpip) [ 123.015103][ T7039] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.024895][ T7039] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 123.036382][ T7039] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 123.089481][ T7039] bond2: (slave wireguard1): making interface the new active one [ 123.114270][ T7058] netlink: 48 bytes leftover after parsing attributes in process `syz.3.348'. [ 123.114587][ T7039] wireguard1: entered promiscuous mode [ 123.159368][ T7039] bond2: (slave wireguard1): Enslaving as an active interface with an up link [ 123.332752][ T7044] bond2 (unregistering): (slave wireguard1): Releasing backup interface [ 123.342497][ T7044] wireguard1: left promiscuous mode [ 123.358420][ T7044] bond2 (unregistering): Released all slaves [ 123.783286][ T7078] netlink: 64 bytes leftover after parsing attributes in process `syz.4.355'. [ 123.856331][ T7083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.588537][ T5210] udevd[5210]: worker [5999] terminated by signal 33 (Unknown signal 33) [ 124.608706][ T5210] udevd[5210]: worker [5999] failed while handling '/devices/virtual/block/loop0' [ 124.962336][ T7142] netlink: 'syz.4.376': attribute type 1 has an invalid length. [ 124.992620][ T7144] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 125.100386][ T7149] tipc: Invalid UDP bearer configuration [ 125.100442][ T7149] tipc: Enabling of bearer rejected, failed to enable media [ 125.405648][ T7164] tipc: Started in network mode [ 125.420620][ T7164] tipc: Node identity 92633e1ffc5, cluster identity 4711 [ 125.438809][ T7164] tipc: Enabled bearer , priority 0 [ 125.476566][ T7164] syzkaller0: entered promiscuous mode [ 125.507075][ T7164] syzkaller0: entered allmulticast mode [ 125.664089][ T7164] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 125.793277][ T7179] tipc: Resetting bearer [ 125.799528][ T7196] netlink: 'syz.0.391': attribute type 6 has an invalid length. [ 125.819376][ T7182] netlink: 'syz.3.389': attribute type 1 has an invalid length. [ 125.830808][ T7163] tipc: Resetting bearer [ 125.863855][ T7163] tipc: Disabling bearer [ 125.911137][ T7199] netlink: 'syz.2.392': attribute type 5 has an invalid length. [ 125.989843][ T7199] geneve2: entered promiscuous mode [ 126.000445][ T7199] geneve2: entered allmulticast mode [ 126.030649][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 126.048686][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 126.128201][ T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 126.147667][ T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 126.332999][ T7224] __nla_validate_parse: 17 callbacks suppressed [ 126.333028][ T7224] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.398'. [ 126.610291][ T7242] netlink: 'syz.4.405': attribute type 2 has an invalid length. [ 126.628780][ T7242] netlink: 'syz.4.405': attribute type 1 has an invalid length. [ 126.763029][ T7237] "syz.1.404" (7237) uses obsolete ecb(arc4) skcipher [ 126.984996][ T7265] netlink: 'syz.2.410': attribute type 1 has an invalid length. [ 127.021984][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.412'. [ 127.039616][ T7266] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.411'. [ 127.041707][ T7270] syzkaller0: entered promiscuous mode [ 127.054743][ T7270] syzkaller0: entered allmulticast mode [ 127.124086][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.412'. [ 127.202569][ T7275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.413'. [ 127.212952][ T7275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.413'. [ 127.309486][ T7279] tipc: Enabling of bearer rejected, already enabled [ 127.341333][ T7279] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 127.387968][ T7284] netlink: 'syz.1.417': attribute type 1 has an invalid length. [ 127.398212][ T7284] netlink: 'syz.1.417': attribute type 2 has an invalid length. [ 127.453317][ T7284] netlink: 124 bytes leftover after parsing attributes in process `syz.1.417'. [ 127.594105][ T7293] netlink: 256 bytes leftover after parsing attributes in process `syz.3.420'. [ 127.721853][ T7302] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.425'. [ 128.047619][ T7308] can: request_module (can-proto-5) failed. [ 128.208008][ T7328] netlink: 48 bytes leftover after parsing attributes in process `syz.4.436'. [ 129.174789][ T7333] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 129.176905][ T7328] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 129.429416][ T7358] netlink: 'syz.3.445': attribute type 1 has an invalid length. [ 129.488342][ T7358] netlink: 'syz.3.445': attribute type 1 has an invalid length. [ 129.618983][ T7375] netlink: 'syz.0.447': attribute type 39 has an invalid length. [ 129.648978][ T7375] veth0_macvtap: left promiscuous mode [ 129.677066][ T7381] IPv6: addrconf: prefix option has invalid lifetime [ 129.751635][ T7383] tls_set_device_offload: netdev not found [ 129.967845][ T7394] geneve2: entered promiscuous mode [ 129.973215][ T7394] geneve2: entered allmulticast mode [ 130.197092][ T7403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.657226][ T7432] netlink: 'syz.4.467': attribute type 32 has an invalid length. [ 130.731206][ T7432] bond1: option coupled_control: invalid value (52) [ 130.750268][ T7432] bond1 (unregistering): Released all slaves [ 130.782481][ T7445] netlink: 'syz.3.473': attribute type 5 has an invalid length. [ 130.870497][ T7449] netlink: 'syz.2.475': attribute type 1 has an invalid length. [ 130.993926][ T7453] netlink: 'syz.1.477': attribute type 9 has an invalid length. [ 131.188199][ T7460] syzkaller1: entered promiscuous mode [ 131.201491][ T7460] syzkaller1: entered allmulticast mode [ 131.567243][ T7481] __nla_validate_parse: 19 callbacks suppressed [ 131.567266][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'. [ 132.251267][ T7490] netlink: 76 bytes leftover after parsing attributes in process `syz.4.488'. [ 132.277299][ T7490] netlink: 32 bytes leftover after parsing attributes in process `syz.4.488'. [ 132.520661][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 132.533623][ T7508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.496'. [ 132.595879][ T7506] validate_nla: 3 callbacks suppressed [ 132.595899][ T7506] netlink: 'syz.2.494': attribute type 1 has an invalid length. [ 132.633139][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 132.942270][ T7525] netlink: 'syz.2.502': attribute type 1 has an invalid length. [ 133.096514][ T7541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.508'. [ 133.209431][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 133.310723][ T7545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.349310][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'. [ 133.354440][ T7555] veth0: entered promiscuous mode [ 133.375244][ T7555] bond1: (slave macvlan0): Enslaving as a backup interface with an up link [ 133.465873][ T3521] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.498377][ T5926] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.517520][ T3521] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.551616][ T7570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.514'. [ 133.567693][ T7570] netlink: 'syz.1.514': attribute type 7 has an invalid length. [ 133.593695][ T7570] netlink: 'syz.1.514': attribute type 8 has an invalid length. [ 133.717356][ T5926] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.950032][ T7591] tipc: Enabling of bearer rejected, already enabled [ 133.975949][ T7596] tipc: Enabled bearer , priority 0 [ 134.057220][ T5926] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.068721][ T7602] netlink: 'syz.4.526': attribute type 1 has an invalid length. [ 134.086171][ T7603] IPv6: NLM_F_CREATE should be specified when creating new route [ 134.122244][ T7596] syzkaller0: entered promiscuous mode [ 134.132946][ T7596] syzkaller0: entered allmulticast mode [ 134.140150][ T7596] tipc: Resetting bearer [ 134.194538][ T12] tipc: Resetting bearer [ 134.203355][ T7606] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 134.205900][ T7610] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 134.257294][ T7595] tipc: Resetting bearer [ 134.977318][ T5961] tipc: Node number set to 1848851999 [ 135.372449][ T7595] tipc: Disabling bearer [ 135.531028][ T7633] netlink: 'syz.0.535': attribute type 1 has an invalid length. [ 135.754411][ T7647] netlink: 'syz.1.541': attribute type 1 has an invalid length. [ 135.927178][ T7655] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.937736][ T7654] netlink: 'syz.2.544': attribute type 25 has an invalid length. [ 135.965829][ T7654] netlink: 'syz.2.544': attribute type 7 has an invalid length. [ 136.598483][ T7697] __nla_validate_parse: 3 callbacks suppressed [ 136.598506][ T7697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.556'. [ 136.779630][ T7702] bond1 (unregistering): Released all slaves [ 137.197251][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 137.263932][ T7733] netlink: 'syz.3.568': attribute type 1 has an invalid length. [ 137.329166][ T7735] netlink: 40 bytes leftover after parsing attributes in process `syz.1.569'. [ 137.344120][ T5961] IPVS: starting estimator thread 0... [ 137.376596][ T7744] netlink: 40 bytes leftover after parsing attributes in process `syz.3.572'. [ 137.457120][ T7738] IPVS: using max 26 ests per chain, 62400 per kthread [ 137.500161][ T7750] openvswitch: netlink: Duplicate key (type 32). [ 137.590180][ T7747] vlan2: left promiscuous mode [ 137.595025][ T7747] bridge0: left promiscuous mode [ 137.771462][ T7765] netlink: 224 bytes leftover after parsing attributes in process `syz.4.580'. [ 137.805769][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.583'. [ 137.829708][ T7772] netlink: 64 bytes leftover after parsing attributes in process `syz.2.581'. [ 137.875165][ T7765] bond0: option ad_select: unable to set because the bond device is up [ 137.928898][ T7778] netlink: 'syz.1.583': attribute type 21 has an invalid length. [ 137.936787][ T7778] netlink: 128 bytes leftover after parsing attributes in process `syz.1.583'. [ 138.003604][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.012685][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.022207][ T7778] netlink: 'syz.1.583': attribute type 5 has an invalid length. [ 138.034083][ T7780] netlink: 'syz.3.585': attribute type 11 has an invalid length. [ 138.047112][ T7778] netlink: 3 bytes leftover after parsing attributes in process `syz.1.583'. [ 138.314097][ T7798] ksmbd: Unknown IPC event: 3, ignore. [ 138.433091][ T7805] netlink: 104 bytes leftover after parsing attributes in process `syz.0.592'. [ 138.437202][ T7808] netlink: 'syz.4.593': attribute type 2 has an invalid length. [ 138.526553][ T7810] syzkaller0: entered promiscuous mode [ 138.547904][ T7810] syzkaller0: entered allmulticast mode [ 138.703056][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.597'. [ 139.020293][ T7836] vlan0: entered promiscuous mode [ 139.041235][ T7836] bridge2: entered promiscuous mode [ 139.057266][ T7836] vlan0: entered allmulticast mode [ 139.065374][ T7836] bridge2: entered allmulticast mode [ 139.315296][ T7852] gretap0: entered promiscuous mode [ 139.361339][ T7859] netlink: 'syz.4.612': attribute type 12 has an invalid length. [ 140.021434][ T7895] tipc: Enabling of bearer rejected, failed to enable media [ 140.592843][ T7937] netlink: 'syz.4.639': attribute type 1 has an invalid length. [ 140.645160][ T7937] bond1: (slave geneve2): making interface the new active one [ 140.654198][ T7937] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 140.681993][ T7941] vlan2: entered promiscuous mode [ 140.687333][ T7941] veth1: entered promiscuous mode [ 140.692684][ T7941] vlan2: entered allmulticast mode [ 140.718086][ T7941] veth1: entered allmulticast mode [ 140.736478][ T3521] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 140.762462][ T3521] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 140.788582][ T3521] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 140.813624][ T3521] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 140.843275][ T7956] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 140.996455][ T7969] netlink: 'syz.1.650': attribute type 1 has an invalid length. [ 141.042015][ T7969] bond2: entered promiscuous mode [ 141.048490][ T7969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.092938][ T7966] delete_channel: no stack [ 141.102405][ T7966] netlink: 'syz.4.648': attribute type 15 has an invalid length. [ 141.170243][ T7969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.181006][ T7969] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 141.192172][ T7969] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 141.214378][ T7969] bond2: (slave wireguard0): making interface the new active one [ 141.223319][ T7969] wireguard0: entered promiscuous mode [ 141.231738][ T7969] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 141.442468][ T8000] netlink: 'syz.0.656': attribute type 3 has an invalid length. [ 141.657146][ T8016] __nla_validate_parse: 14 callbacks suppressed [ 141.657166][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.660'. [ 141.941511][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 142.356824][ T8061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.673'. [ 142.381600][ T8061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.673'. [ 142.404225][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'. [ 142.494562][ T8054] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 142.997540][ T8098] netlink: 'syz.1.689': attribute type 11 has an invalid length. [ 143.060681][ T8100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.688'. [ 143.118308][ T8106] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 143.132967][ T8100] netlink: 'syz.0.688': attribute type 2 has an invalid length. [ 143.528278][ T8137] netlink: 96 bytes leftover after parsing attributes in process `syz.4.702'. [ 143.550638][ T8137] vlan2: entered allmulticast mode [ 143.556003][ T8137] erspan0: entered allmulticast mode [ 143.570449][ T8138] netlink: 108 bytes leftover after parsing attributes in process `syz.3.700'. [ 143.588157][ T8138] netlink: 108 bytes leftover after parsing attributes in process `syz.3.700'. [ 143.632240][ T8138] netlink: 84 bytes leftover after parsing attributes in process `syz.3.700'. [ 143.881511][ T8150] netlink: 'syz.3.706': attribute type 1 has an invalid length. [ 143.892690][ T8150] nbd: couldn't find device at index 1048576 [ 144.233265][ T8170] netlink: 'syz.2.715': attribute type 11 has an invalid length. [ 144.247868][ T8170] netlink: 'syz.2.715': attribute type 11 has an invalid length. [ 145.047116][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.181370][ T8220] netlink: 'syz.0.734': attribute type 1 has an invalid length. [ 145.769683][ T8255] vlan4: entered promiscuous mode [ 145.774795][ T8255] bridge0: entered promiscuous mode [ 145.868203][ T1108] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 146.095685][ T8281] tipc: Enabling of bearer rejected, already enabled [ 146.337631][ T8297] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.525384][ T8306] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 146.610257][ T8310] block nbd0: Unsupported socket: should be TCP or UNIX. [ 146.772960][ T8317] IPv6: Can't replace route, no match found [ 146.925170][ T8328] openvswitch: netlink: Key type 313 is out of range max 32 [ 147.117864][ T8339] batman_adv: batadv0: Adding interface: netdevsim0 [ 147.124538][ T8339] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.187862][ T8339] batman_adv: batadv0: Interface activated: netdevsim0 [ 147.653433][ T8375] openvswitch: netlink: Key type 313 is out of range max 32 [ 147.966681][ T8388] __nla_validate_parse: 12 callbacks suppressed [ 147.966701][ T8388] netlink: 60 bytes leftover after parsing attributes in process `syz.2.795'. [ 147.999723][ T8395] netlink: 224 bytes leftover after parsing attributes in process `syz.0.798'. [ 148.617360][ T8423] netlink: 'syz.2.806': attribute type 11 has an invalid length. [ 148.643663][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'. [ 148.689577][ T8427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.808'. [ 148.751714][ T8431] bond2 (unregistering): Released all slaves [ 148.911688][ T8436] vlan5: entered promiscuous mode [ 148.947119][ T8436] bridge2: entered promiscuous mode [ 148.952671][ T8436] vlan5: entered allmulticast mode [ 148.973203][ T8436] bridge2: entered allmulticast mode [ 149.396452][ T8466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.403858][ T8466] IPv6: NLM_F_CREATE should be set when creating new route [ 149.411260][ T8466] IPv6: NLM_F_CREATE should be set when creating new route [ 149.418562][ T8466] IPv6: NLM_F_CREATE should be set when creating new route [ 149.446330][ T8466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.049449][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.822'. [ 150.174719][ T8478] FAULT_INJECTION: forcing a failure. [ 150.174719][ T8478] name failslab, interval 1, probability 0, space 0, times 1 [ 150.191287][ T8478] CPU: 0 UID: 0 PID: 8478 Comm: syz.0.824 Not tainted syzkaller #0 PREEMPT(full) [ 150.191319][ T8478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 150.191340][ T8478] Call Trace: [ 150.191348][ T8478] [ 150.191358][ T8478] dump_stack_lvl+0x189/0x250 [ 150.191402][ T8478] ? __pfx____ratelimit+0x10/0x10 [ 150.191436][ T8478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.191462][ T8478] ? __pfx__printk+0x10/0x10 [ 150.191501][ T8478] ? __pfx___might_resched+0x10/0x10 [ 150.191529][ T8478] should_fail_ex+0x414/0x560 [ 150.191565][ T8478] should_failslab+0xa8/0x100 [ 150.191596][ T8478] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 150.191624][ T8478] ? __alloc_skb+0x112/0x2d0 [ 150.191651][ T8478] __alloc_skb+0x112/0x2d0 [ 150.191677][ T8478] netlink_sendmsg+0x5c6/0xb30 [ 150.191712][ T8478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.191748][ T8478] ? aa_sock_msg_perm+0xf1/0x1d0 [ 150.191780][ T8478] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 150.191813][ T8478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.191837][ T8478] __sock_sendmsg+0x219/0x270 [ 150.191873][ T8478] ____sys_sendmsg+0x505/0x830 [ 150.191906][ T8478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.191942][ T8478] ? import_iovec+0x74/0xa0 [ 150.191971][ T8478] ___sys_sendmsg+0x21f/0x2a0 [ 150.192000][ T8478] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.192066][ T8478] ? __fget_files+0x2a/0x420 [ 150.192094][ T8478] ? __fget_files+0x3a0/0x420 [ 150.192135][ T8478] __x64_sys_sendmsg+0x19b/0x260 [ 150.192164][ T8478] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.192201][ T8478] ? __pfx_ksys_write+0x10/0x10 [ 150.192224][ T8478] ? rcu_is_watching+0x15/0xb0 [ 150.192254][ T8478] ? do_syscall_64+0xbe/0x3b0 [ 150.192281][ T8478] do_syscall_64+0xfa/0x3b0 [ 150.192301][ T8478] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.192334][ T8478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.192356][ T8478] ? clear_bhb_loop+0x60/0xb0 [ 150.192382][ T8478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.192403][ T8478] RIP: 0033:0x7f2d3b38eec9 [ 150.192428][ T8478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.192447][ T8478] RSP: 002b:00007f2d3c210038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.192473][ T8478] RAX: ffffffffffffffda RBX: 00007f2d3b5e5fa0 RCX: 00007f2d3b38eec9 [ 150.192489][ T8478] RDX: 0000000004040810 RSI: 00002000000002c0 RDI: 0000000000000006 [ 150.192503][ T8478] RBP: 00007f2d3c210090 R08: 0000000000000000 R09: 0000000000000000 [ 150.192516][ T8478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.192529][ T8478] R13: 00007f2d3b5e6038 R14: 00007f2d3b5e5fa0 R15: 00007ffe486ac758 [ 150.192563][ T8478] [ 150.486044][ T8471] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 150.613691][ T61] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.622972][ T61] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.647092][ T61] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.655969][ T61] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.181336][ T8525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.839'. [ 151.260753][ T8531] pim6reg: entered allmulticast mode [ 151.449207][ T8542] tipc: Enabled bearer , priority 0 [ 151.463755][ T8542] syzkaller0: entered promiscuous mode [ 151.471360][ T8542] syzkaller0: entered allmulticast mode [ 151.511487][ T8539] tipc: Resetting bearer [ 151.579816][ T8539] tipc: Disabling bearer [ 151.598275][ T8550] netlink: 'syz.3.851': attribute type 29 has an invalid length. [ 151.608230][ T8550] netlink: 'syz.3.851': attribute type 29 has an invalid length. [ 151.621161][ T8550] netlink: 'syz.3.851': attribute type 29 has an invalid length. [ 151.638449][ T8550] netlink: 'syz.3.851': attribute type 29 has an invalid length. [ 152.698139][ T8595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.864'. [ 152.902413][ T8603] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 152.945106][ T8603] bond3 (unregistering): Released all slaves [ 152.986953][ T8621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.868'. [ 153.186600][ T8623] netlink: 156 bytes leftover after parsing attributes in process `syz.4.869'. [ 153.891771][ T8664] netlink: 'syz.3.879': attribute type 7 has an invalid length. [ 154.041948][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'. [ 154.158082][ T8676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.885'. [ 154.340367][ T8687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.889'. [ 154.465466][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.891'. [ 154.692937][ T10] IPVS: starting estimator thread 0... [ 154.797838][ T8713] netlink: 40 bytes leftover after parsing attributes in process `syz.0.899'. [ 154.817082][ T8710] IPVS: using max 28 ests per chain, 67200 per kthread [ 154.910131][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'. [ 154.939469][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.896'. [ 154.991399][ T8728] openvswitch: netlink: IPv6 tunnel dst address is zero [ 155.130897][ T8709] team0 (unregistering): Port device team_slave_0 removed [ 155.164406][ T8709] team0 (unregistering): Port device team_slave_1 removed [ 155.265289][ T8708] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 155.284694][ T8708] bond4 (unregistering): Released all slaves [ 155.335315][ T8744] openvswitch: netlink: Message has 5368 unknown bytes. [ 155.414161][ T8744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.546404][ T8754] tipc: Enabling of bearer rejected, already enabled [ 155.612737][ T8755] netlink: 'syz.1.908': attribute type 11 has an invalid length. [ 155.635846][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 155.671212][ T8758] tipc: Enabling of bearer rejected, failed to enable media [ 155.901499][ T8771] netlink: 'syz.3.911': attribute type 1 has an invalid length. [ 156.075371][ T8771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.105124][ T8778] bond3: (slave gretap1): making interface the new active one [ 156.125661][ T8778] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 156.349154][ T8799] C: renamed from lo (while UP) [ 156.388873][ T8798] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 156.781345][ T8819] vlan3: entered allmulticast mode [ 156.786549][ T8819] hsr0: entered allmulticast mode [ 156.794282][ T8819] hsr_slave_0: entered allmulticast mode [ 156.803894][ T8824] openvswitch: netlink: Tunnel attr 254 out of range max 16 [ 156.813482][ T8819] hsr_slave_1: entered allmulticast mode [ 156.872957][ T8827] FAULT_INJECTION: forcing a failure. [ 156.872957][ T8827] name failslab, interval 1, probability 0, space 0, times 0 [ 156.920530][ T8827] CPU: 0 UID: 0 PID: 8827 Comm: syz.2.924 Not tainted syzkaller #0 PREEMPT(full) [ 156.920559][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 156.920572][ T8827] Call Trace: [ 156.920581][ T8827] [ 156.920589][ T8827] dump_stack_lvl+0x189/0x250 [ 156.920621][ T8827] ? __pfx____ratelimit+0x10/0x10 [ 156.920655][ T8827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.920681][ T8827] ? __pfx__printk+0x10/0x10 [ 156.920715][ T8827] ? __lock_acquire+0xab9/0xd20 [ 156.920748][ T8827] should_fail_ex+0x414/0x560 [ 156.920784][ T8827] should_failslab+0xa8/0x100 [ 156.920816][ T8827] kmem_cache_alloc_noprof+0x73/0x3c0 [ 156.920842][ T8827] ? skb_clone+0x212/0x3a0 [ 156.920875][ T8827] skb_clone+0x212/0x3a0 [ 156.920906][ T8827] __netlink_deliver_tap+0x404/0x850 [ 156.920947][ T8827] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.920972][ T8827] netlink_deliver_tap+0x19c/0x1b0 [ 156.920996][ T8827] netlink_unicast+0x7fa/0x9e0 [ 156.921040][ T8827] ? __pfx_netlink_unicast+0x10/0x10 [ 156.921076][ T8827] ? netlink_sendmsg+0x642/0xb30 [ 156.921096][ T8827] ? skb_put+0x11b/0x210 [ 156.921124][ T8827] netlink_sendmsg+0x805/0xb30 [ 156.921158][ T8827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.921195][ T8827] ? aa_sock_msg_perm+0xf1/0x1d0 [ 156.921228][ T8827] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 156.921262][ T8827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.921286][ T8827] __sock_sendmsg+0x219/0x270 [ 156.921322][ T8827] ____sys_sendmsg+0x505/0x830 [ 156.921355][ T8827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.921392][ T8827] ? import_iovec+0x74/0xa0 [ 156.921422][ T8827] ___sys_sendmsg+0x21f/0x2a0 [ 156.921450][ T8827] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.921518][ T8827] ? __fget_files+0x2a/0x420 [ 156.921547][ T8827] ? __fget_files+0x3a0/0x420 [ 156.921589][ T8827] __x64_sys_sendmsg+0x19b/0x260 [ 156.921618][ T8827] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.921656][ T8827] ? __pfx_ksys_write+0x10/0x10 [ 156.921679][ T8827] ? rcu_is_watching+0x15/0xb0 [ 156.921709][ T8827] ? do_syscall_64+0xbe/0x3b0 [ 156.921736][ T8827] do_syscall_64+0xfa/0x3b0 [ 156.921756][ T8827] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.921789][ T8827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.921811][ T8827] ? clear_bhb_loop+0x60/0xb0 [ 156.921838][ T8827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.921858][ T8827] RIP: 0033:0x7fe95cf8eec9 [ 156.921878][ T8827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.921896][ T8827] RSP: 002b:00007fe95ddd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.921918][ T8827] RAX: ffffffffffffffda RBX: 00007fe95d1e5fa0 RCX: 00007fe95cf8eec9 [ 156.921934][ T8827] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 156.921947][ T8827] RBP: 00007fe95ddd3090 R08: 0000000000000000 R09: 0000000000000000 [ 156.921961][ T8827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.921973][ T8827] R13: 00007fe95d1e6038 R14: 00007fe95d1e5fa0 R15: 00007ffd3aff7648 [ 156.922008][ T8827] [ 157.234270][ T8831] netlink: 'syz.3.927': attribute type 1 has an invalid length. [ 157.338920][ T8831] 8021q: adding VLAN 0 to HW filter on device bond4 [ 157.375752][ T8831] bond4: (slave gretap2): making interface the new active one [ 157.387911][ T8831] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 157.907805][ T8871] netlink: 'syz.0.940': attribute type 2 has an invalid length. [ 158.179074][ T8879] __nla_validate_parse: 8 callbacks suppressed [ 158.179094][ T8879] netlink: 45 bytes leftover after parsing attributes in process `syz.4.943'. [ 158.246389][ T8882] netlink: 'syz.1.944': attribute type 1 has an invalid length. [ 158.361298][ T8882] 8021q: adding VLAN 0 to HW filter on device bond5 [ 158.371025][ T8888] netlink: 'syz.4.946': attribute type 11 has an invalid length. [ 158.446624][ T8883] veth7: entered promiscuous mode [ 158.475846][ T8883] bond5: (slave veth7): Enslaving as an active interface with a down link [ 158.499849][ T8900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.948'. [ 158.509995][ T8900] netlink: 44 bytes leftover after parsing attributes in process `syz.0.948'. [ 158.529943][ T8882] bond5: entered allmulticast mode [ 158.614160][ T8902] netlink: 96 bytes leftover after parsing attributes in process `syz.3.951'. [ 158.721665][ T8913] tipc: Enabling of bearer rejected, already enabled [ 158.825342][ T8916] netlink: 48 bytes leftover after parsing attributes in process `syz.1.956'. [ 158.892113][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'. [ 158.914577][ T8918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.957'. [ 158.973291][ T8918] vlan3: entered promiscuous mode [ 158.978489][ T8918] bridge3: entered promiscuous mode [ 158.984346][ T8918] vlan3: entered allmulticast mode [ 159.006995][ T8918] bridge3: entered allmulticast mode [ 159.079045][ T8929] netlink: 72 bytes leftover after parsing attributes in process `syz.1.961'. [ 159.103978][ T8929] netlink: 72 bytes leftover after parsing attributes in process `syz.1.961'. [ 159.118038][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 159.134850][ T8930] netlink: 72 bytes leftover after parsing attributes in process `syz.1.961'. [ 159.432976][ T8948] syzkaller1: entered promiscuous mode [ 159.450698][ T8948] syzkaller1: entered allmulticast mode [ 159.813686][ T8969] vlan3: entered promiscuous mode [ 159.827096][ T8969] bridge1: entered promiscuous mode [ 159.840876][ T8969] vlan3: entered allmulticast mode [ 159.847592][ T8969] bridge1: entered allmulticast mode [ 160.122929][ T8994] netlink: 'syz.0.980': attribute type 5 has an invalid length. [ 160.131242][ T8994] netlink: 'syz.0.980': attribute type 6 has an invalid length. [ 160.306869][ T9005] syzkaller1: entered promiscuous mode [ 160.327306][ T9005] syzkaller1: entered allmulticast mode [ 160.513763][ T9021] netlink: 'syz.1.991': attribute type 4 has an invalid length. [ 160.524215][ T9021] tipc: Enabled bearer , priority 0 [ 160.533743][ T9022] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 160.548058][ T9021] syzkaller0: entered promiscuous mode [ 160.553752][ T9021] syzkaller0: entered allmulticast mode [ 160.562972][ T2990] syzkaller0: tun_net_xmit 70 [ 160.597568][ T9021] tipc: Resetting bearer [ 160.612012][ T9021] syzkaller0: tun_net_xmit 90 [ 160.617021][ T9021] syzkaller0: tun_net_xmit 90 [ 160.652156][ T9019] tipc: Resetting bearer [ 160.679901][ T9019] tipc: Disabling bearer [ 160.985636][ T9044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.145312][ T9059] delete_channel: no stack [ 161.493532][ T9072] vlan4: entered promiscuous mode [ 161.501817][ T9072] bridge2: entered promiscuous mode [ 161.508205][ T9072] vlan4: entered allmulticast mode [ 161.513381][ T9072] bridge2: entered allmulticast mode [ 161.585145][ T9076] batadv_slave_1: entered promiscuous mode [ 161.601715][ T9076] batadv_slave_0: entered promiscuous mode [ 161.619136][ T9076] debugfs: 'hsr1' already exists in 'hsr' [ 161.628926][ T9076] Cannot create hsr debugfs directory [ 162.004962][ T9105] team0: Port device team_slave_1 removed [ 162.302665][ T9125] vlan1: entered promiscuous mode [ 162.310511][ T9125] bridge3: entered promiscuous mode [ 162.316035][ T9125] vlan1: entered allmulticast mode [ 162.323468][ T9125] bridge3: entered allmulticast mode [ 162.428682][ T9134] netlink: 'syz.0.1029': attribute type 1 has an invalid length. [ 162.501300][ T9134] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 162.513479][ T9134] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 162.560345][ T9142] gretap1: entered promiscuous mode [ 162.583885][ T9142] bond3: (slave gretap1): making interface the new active one [ 162.621479][ T9142] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 162.663538][ T9147] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 162.709998][ T9142] macvlan2: entered promiscuous mode [ 162.719921][ T9142] macvlan2: entered allmulticast mode [ 162.732775][ T9142] bond3: entered promiscuous mode [ 162.739062][ T9142] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.768484][ T9142] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 162.792738][ T9142] bond3: left promiscuous mode [ 163.372656][ T9180] __nla_validate_parse: 33 callbacks suppressed [ 163.372676][ T9180] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1044'. [ 163.390613][ T9180] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1044'. [ 163.403929][ T9180] netlink: 'syz.2.1044': attribute type 1 has an invalid length. [ 163.577453][ T9195] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1050'. [ 163.992784][ T9217] delete_channel: no stack [ 164.002768][ T9221] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20002 [ 164.100024][ T9215] team0 (unregistering): Port device team_slave_0 removed [ 164.116780][ T9215] team0 (unregistering): Port device team_slave_1 removed [ 164.125538][ T9226] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1061'. [ 164.414702][ T9233] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1063'. [ 164.459406][ T9238] openvswitch: netlink: Key type 313 is out of range max 32 [ 164.848999][ T9257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1070'. [ 164.860430][ T9257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1070'. [ 164.876033][ T9257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1070'. [ 164.892724][ T9257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1070'. [ 164.902252][ T9257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1070'. [ 165.060441][ T9274] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 165.254387][ T9281] bond1: left promiscuous mode [ 165.261697][ T9281] macvtap1: left promiscuous mode [ 165.270745][ T9281] geneve2: left promiscuous mode [ 165.325439][ T9290] tipc: Enabled bearer , priority 0 [ 165.426742][ T9290] syzkaller0: entered promiscuous mode [ 165.434037][ T9290] syzkaller0: entered allmulticast mode [ 165.442429][ T9290] tipc: Resetting bearer [ 165.472506][ T9289] tipc: Resetting bearer [ 166.194439][ T9317] netlink: 'syz.0.1086': attribute type 1 has an invalid length. [ 166.624817][ T9289] tipc: Disabling bearer [ 166.657915][ T9317] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 166.783047][ T9331] netlink: 'syz.3.1087': attribute type 1 has an invalid length. [ 166.820226][ T9328] tipc: Started in network mode [ 166.825171][ T9328] tipc: Node identity 3656d764ad91, cluster identity 4711 [ 166.832716][ T9328] tipc: Enabled bearer , priority 0 [ 166.848661][ T9328] syzkaller0: entered promiscuous mode [ 166.867032][ T9328] syzkaller0: entered allmulticast mode [ 166.925315][ T9331] 8021q: adding VLAN 0 to HW filter on device bond6 [ 167.043692][ T9346] netlink: 'syz.4.1094': attribute type 4 has an invalid length. [ 167.052587][ T9327] tipc: Resetting bearer [ 167.106511][ T9327] tipc: Disabling bearer [ 167.154599][ T9346] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20001 [ 167.356267][ T9363] openvswitch: netlink: Key type 313 is out of range max 32 [ 168.034103][ T9397] tipc: Enabling of bearer rejected, failed to enable media [ 168.099131][ T9399] bridge0: port 3(syz_tun) entered blocking state [ 168.105904][ T9399] bridge0: port 3(syz_tun) entered disabled state [ 168.113889][ T9399] syz_tun: entered allmulticast mode [ 168.121292][ T9399] syz_tun: entered promiscuous mode [ 168.127543][ T9399] bridge0: port 3(syz_tun) entered blocking state [ 168.134942][ T9399] bridge0: port 3(syz_tun) entered forwarding state [ 168.150688][ T9399] netlink: 'syz.0.1112': attribute type 10 has an invalid length. [ 168.161878][ T9399] bridge0: port 3(syz_tun) entered disabled state [ 168.169439][ T9399] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.206000][ T9399] bridge0: port 3(syz_tun) entered blocking state [ 168.212882][ T9399] bridge0: port 3(syz_tun) entered forwarding state [ 168.220053][ T9399] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.227574][ T9399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.252019][ T9399] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 168.370999][ T9408] openvswitch: netlink: Key type 313 is out of range max 32 [ 168.450872][ T9410] netlink: 'syz.0.1116': attribute type 4 has an invalid length. [ 168.461634][ T9410] __nla_validate_parse: 78 callbacks suppressed [ 168.461654][ T9410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1116'. [ 168.588455][ T9414] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1117'. [ 168.892482][ T12] wlan1: Trigger new scan to find an IBSS to join [ 168.954313][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1124'. [ 168.969343][ T9436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1124'. [ 168.979717][ T9438] netlink: 'syz.1.1125': attribute type 1 has an invalid length. [ 169.027981][ T9438] 8021q: adding VLAN 0 to HW filter on device bond6 [ 169.279072][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 169.445493][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1132'. [ 169.777603][ T9476] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 169.808709][ T9479] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1136'. [ 169.985208][ T9492] netlink: 'syz.0.1141': attribute type 10 has an invalid length. [ 169.994143][ T9492] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 170.032677][ T9492] batman_adv: batadv0: Removing interface: netdevsim0 [ 170.083572][ T9492] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 170.324868][ T9507] netlink: 'syz.1.1145': attribute type 11 has an invalid length. [ 170.333942][ T9507] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1145'. [ 170.489199][ T9512] openvswitch: netlink: Key type 313 is out of range max 32 [ 170.662165][ T9517] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1148'. [ 171.217562][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 171.326674][ T9554] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 171.453484][ T9566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.460841][ T9566] IPv6: NLM_F_CREATE should be set when creating new route [ 171.471287][ T9565] openvswitch: netlink: Key type 313 is out of range max 32 [ 171.759292][ T9581] tipc: Enabled bearer , priority 0 [ 171.773163][ T9581] tipc: Resetting bearer [ 171.785908][ T9580] tipc: Disabling bearer [ 171.919089][ T3521] wlan1: Trigger new scan to find an IBSS to join [ 172.009473][ T9601] netlink: 'syz.1.1181': attribute type 11 has an invalid length. [ 172.058469][ T9599] openvswitch: netlink: Message has 4 unknown bytes. [ 172.178976][ T2148] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.237454][ T9600] syzkaller0: entered promiscuous mode [ 172.253431][ T2148] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.255465][ T9600] syzkaller0: entered allmulticast mode [ 172.293998][ T9609] syzkaller1: entered promiscuous mode [ 172.310770][ T9609] syzkaller1: entered allmulticast mode [ 172.344202][ T9618] netlink: 'syz.3.1188': attribute type 1 has an invalid length. [ 172.385939][ T9618] 8021q: adding VLAN 0 to HW filter on device bond8 [ 172.631908][ T9632] netlink: 'syz.2.1191': attribute type 1 has an invalid length. [ 172.695828][ T9635] gre0: entered promiscuous mode [ 172.734905][ T9635] veth0_macvtap: left promiscuous mode [ 173.028504][ T9648] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 173.042299][ T9650] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 173.092949][ T9648] IPVS: length: 8 != 1152 [ 173.154508][ T9654] openvswitch: netlink: Key type 57 is out of range max 32 [ 173.368088][ T9656] bond0 (unregistering): left promiscuous mode [ 173.384705][ T9656] bond_slave_0: left promiscuous mode [ 173.394561][ T9656] bond_slave_1: left promiscuous mode [ 173.406295][ T9656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.420270][ T9656] bond_slave_0: left allmulticast mode [ 173.430499][ T9656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.449824][ T9656] bond_slave_1: left allmulticast mode [ 173.458898][ T9656] bond0 (unregistering): Released all slaves [ 173.698502][ T9672] openvswitch: netlink: Key type 313 is out of range max 32 [ 173.863611][ T9685] __nla_validate_parse: 9 callbacks suppressed [ 173.863634][ T9685] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1210'. [ 173.897071][ T9685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1210'. [ 174.070671][ T9688] macvtap0: entered promiscuous mode [ 174.076047][ T9688] vlan0: entered promiscuous mode [ 174.117516][ T9688] macvtap0: entered allmulticast mode [ 174.124270][ T9688] vlan0: entered allmulticast mode [ 174.130155][ T9688] veth0_vlan: entered allmulticast mode [ 174.174395][ T9695] netlink: 'syz.0.1212': attribute type 3 has an invalid length. [ 174.195207][ T9695] netlink: 'syz.0.1212': attribute type 3 has an invalid length. [ 174.333900][ T9701] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1214'. [ 174.413253][ T9709] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1216'. [ 174.494490][ T9709] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 174.666836][ T9718] openvswitch: netlink: Key type 313 is out of range max 32 [ 174.757883][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1220'. [ 174.778695][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1220'. [ 174.856688][ T9725] vlan4: entered promiscuous mode [ 174.881693][ T9725] bridge4: entered promiscuous mode [ 174.895320][ T9725] vlan4: entered allmulticast mode [ 174.912202][ T9725] bridge4: entered allmulticast mode [ 174.913440][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1222'. [ 174.958066][ T61] wlan1: Trigger new scan to find an IBSS to join [ 174.967654][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1222'. [ 174.994140][ T9731] bridge0: port 3(vlan2) entered blocking state [ 175.031681][ T9741] openvswitch: netlink: Message has 5372 unknown bytes. [ 175.039863][ T9741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.053472][ T9731] bridge0: port 3(vlan2) entered disabled state [ 175.060541][ T9731] vlan2: entered allmulticast mode [ 175.068048][ T9731] bridge0: entered allmulticast mode [ 175.085349][ T9731] vlan2: left allmulticast mode [ 175.091173][ T9731] bridge0: left allmulticast mode [ 175.279464][ T9758] team0: Cannot enslave team device to itself [ 175.285929][ T9759] team0: Cannot enslave team device to itself [ 175.552218][ T9767] bond0: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 175.565865][ T9767] bond0 (unregistering): Released all slaves [ 175.661826][ T9770] syzkaller1: entered promiscuous mode [ 175.668010][ T9770] syzkaller1: entered allmulticast mode [ 175.765567][ T9746] netlink: 'syz.0.1225': attribute type 1 has an invalid length. [ 175.775595][ T9746] netlink: 'syz.0.1225': attribute type 2 has an invalid length. [ 175.882498][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1235'. [ 175.907798][ T9775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1235'. [ 175.918649][ T1145] wlan1: Creating new IBSS network, BSSID 8a:7e:35:52:7e:69 [ 175.956119][ T9775] vlan6: entered promiscuous mode [ 175.964965][ T9775] bridge3: entered promiscuous mode [ 175.970594][ T9775] vlan6: entered allmulticast mode [ 175.975976][ T9775] bridge3: entered allmulticast mode [ 176.127524][ T9788] openvswitch: netlink: Key 32 has unexpected len 155 expected 2 [ 176.222693][ T9793] 8021q: VLANs not supported on ip_vti0 [ 176.242095][ T9795] 8021q: VLANs not supported on ip_vti0 [ 176.290004][ T9799] FAULT_INJECTION: forcing a failure. [ 176.290004][ T9799] name failslab, interval 1, probability 0, space 0, times 0 [ 176.303007][ T9799] CPU: 1 UID: 0 PID: 9799 Comm: syz.0.1243 Not tainted syzkaller #0 PREEMPT(full) [ 176.303037][ T9799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 176.303051][ T9799] Call Trace: [ 176.303060][ T9799] [ 176.303070][ T9799] dump_stack_lvl+0x189/0x250 [ 176.303103][ T9799] ? __pfx____ratelimit+0x10/0x10 [ 176.303139][ T9799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.303168][ T9799] ? __pfx__printk+0x10/0x10 [ 176.303203][ T9799] ? skb_network_protocol+0x508/0x760 [ 176.303233][ T9799] ? __lock_acquire+0xab9/0xd20 [ 176.303264][ T9799] should_fail_ex+0x414/0x560 [ 176.303301][ T9799] should_failslab+0xa8/0x100 [ 176.303333][ T9799] kmem_cache_alloc_noprof+0x73/0x3c0 [ 176.303359][ T9799] ? skb_clone+0x212/0x3a0 [ 176.303393][ T9799] skb_clone+0x212/0x3a0 [ 176.303419][ T9799] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 176.303447][ T9799] dev_queue_xmit_nit+0x416/0xcc0 [ 176.303471][ T9799] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 176.303508][ T9799] dev_hard_start_xmit+0x1be/0x830 [ 176.303555][ T9799] __dev_queue_xmit+0x1b8d/0x3b50 [ 176.303596][ T9799] ? __dev_queue_xmit+0x27b/0x3b50 [ 176.303643][ T9799] ? __pfx___dev_queue_xmit+0x10/0x10 [ 176.303695][ T9799] ? __copy_skb_header+0xa7/0x550 [ 176.303724][ T9799] ? __asan_memcpy+0x40/0x70 [ 176.303767][ T9799] ? skb_clone+0x246/0x3a0 [ 176.303799][ T9799] __netlink_deliver_tap+0x5ad/0x850 [ 176.303838][ T9799] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.303864][ T9799] netlink_deliver_tap+0x19c/0x1b0 [ 176.303889][ T9799] netlink_unicast+0x7fa/0x9e0 [ 176.303936][ T9799] ? __pfx_netlink_unicast+0x10/0x10 [ 176.303973][ T9799] ? netlink_sendmsg+0x642/0xb30 [ 176.303993][ T9799] ? skb_put+0x11b/0x210 [ 176.304021][ T9799] netlink_sendmsg+0x805/0xb30 [ 176.304056][ T9799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.304083][ T9799] ? aa_sock_msg_perm+0xf1/0x1d0 [ 176.304116][ T9799] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.304149][ T9799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.304174][ T9799] __sock_sendmsg+0x219/0x270 [ 176.304211][ T9799] ____sys_sendmsg+0x505/0x830 [ 176.304244][ T9799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.304287][ T9799] ? import_iovec+0x74/0xa0 [ 176.304317][ T9799] ___sys_sendmsg+0x21f/0x2a0 [ 176.304347][ T9799] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.304416][ T9799] ? __fget_files+0x2a/0x420 [ 176.304446][ T9799] ? __fget_files+0x3a0/0x420 [ 176.304488][ T9799] __x64_sys_sendmsg+0x19b/0x260 [ 176.304518][ T9799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.304565][ T9799] ? rcu_is_watching+0x15/0xb0 [ 176.304597][ T9799] ? do_syscall_64+0xbe/0x3b0 [ 176.304624][ T9799] do_syscall_64+0xfa/0x3b0 [ 176.304645][ T9799] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.304685][ T9799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.304707][ T9799] ? clear_bhb_loop+0x60/0xb0 [ 176.304734][ T9799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.304755][ T9799] RIP: 0033:0x7f2d3b38eec9 [ 176.304776][ T9799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.304794][ T9799] RSP: 002b:00007f2d3c210038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.304817][ T9799] RAX: ffffffffffffffda RBX: 00007f2d3b5e5fa0 RCX: 00007f2d3b38eec9 [ 176.304845][ T9799] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000008 [ 176.304858][ T9799] RBP: 00007f2d3c210090 R08: 0000000000000000 R09: 0000000000000000 [ 176.304871][ T9799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.304883][ T9799] R13: 00007f2d3b5e6038 R14: 00007f2d3b5e5fa0 R15: 00007ffe486ac758 [ 176.304918][ T9799] [ 176.659466][ T9799] openvswitch: netlink: Key type 313 is out of range max 32 [ 176.786274][ T2990] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 177.388316][ T9842] netlink: 'syz.4.1256': attribute type 1 has an invalid length. [ 177.425730][ T9842] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.448996][ T9842] bond3: (slave geneve3): making interface the new active one [ 177.460675][ T9842] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 177.512325][ T9838] netlink: 'syz.1.1254': attribute type 83 has an invalid length. [ 177.642285][ T9853] vlan7: entered allmulticast mode [ 177.647670][ T9853] hsr0: entered allmulticast mode [ 177.652802][ T9853] hsr_slave_0: entered allmulticast mode [ 177.662306][ T9853] hsr_slave_1: entered allmulticast mode [ 177.702722][ T9855] FAULT_INJECTION: forcing a failure. [ 177.702722][ T9855] name failslab, interval 1, probability 0, space 0, times 0 [ 177.717876][ T9855] CPU: 1 UID: 0 PID: 9855 Comm: syz.3.1261 Not tainted syzkaller #0 PREEMPT(full) [ 177.717905][ T9855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 177.717918][ T9855] Call Trace: [ 177.717926][ T9855] [ 177.717935][ T9855] dump_stack_lvl+0x189/0x250 [ 177.717967][ T9855] ? __pfx____ratelimit+0x10/0x10 [ 177.718002][ T9855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.718029][ T9855] ? __pfx__printk+0x10/0x10 [ 177.718066][ T9855] ? __pfx___might_resched+0x10/0x10 [ 177.718089][ T9855] ? fs_reclaim_acquire+0x7d/0x100 [ 177.718125][ T9855] should_fail_ex+0x414/0x560 [ 177.718161][ T9855] should_failslab+0xa8/0x100 [ 177.718191][ T9855] __kmalloc_noprof+0xcb/0x4f0 [ 177.718216][ T9855] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 177.718253][ T9855] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 177.718292][ T9855] genl_family_rcv_msg_doit+0xb8/0x300 [ 177.718335][ T9855] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 177.718374][ T9855] ? apparmor_capable+0x137/0x1b0 [ 177.718399][ T9855] ? bpf_lsm_capable+0x9/0x20 [ 177.718423][ T9855] ? security_capable+0x7e/0x2e0 [ 177.718468][ T9855] genl_rcv_msg+0x60e/0x790 [ 177.718505][ T9855] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.718533][ T9855] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 177.718572][ T9855] netlink_rcv_skb+0x205/0x470 [ 177.718591][ T9855] ? __lock_acquire+0xab9/0xd20 [ 177.718613][ T9855] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.718643][ T9855] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.718688][ T9855] ? down_read+0x1ad/0x2e0 [ 177.718715][ T9855] genl_rcv+0x28/0x40 [ 177.718741][ T9855] netlink_unicast+0x82c/0x9e0 [ 177.718785][ T9855] ? __pfx_netlink_unicast+0x10/0x10 [ 177.718821][ T9855] ? netlink_sendmsg+0x642/0xb30 [ 177.718841][ T9855] ? skb_put+0x11b/0x210 [ 177.718869][ T9855] netlink_sendmsg+0x805/0xb30 [ 177.718903][ T9855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.718931][ T9855] ? aa_sock_msg_perm+0xf1/0x1d0 [ 177.718963][ T9855] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.718995][ T9855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.719019][ T9855] __sock_sendmsg+0x219/0x270 [ 177.719055][ T9855] ____sys_sendmsg+0x505/0x830 [ 177.719088][ T9855] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.719125][ T9855] ? import_iovec+0x74/0xa0 [ 177.719155][ T9855] ___sys_sendmsg+0x21f/0x2a0 [ 177.719183][ T9855] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.719252][ T9855] ? __fget_files+0x2a/0x420 [ 177.719280][ T9855] ? __fget_files+0x3a0/0x420 [ 177.719321][ T9855] __x64_sys_sendmsg+0x19b/0x260 [ 177.719350][ T9855] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.719388][ T9855] ? __pfx_ksys_write+0x10/0x10 [ 177.719411][ T9855] ? rcu_is_watching+0x15/0xb0 [ 177.719441][ T9855] ? do_syscall_64+0xbe/0x3b0 [ 177.719475][ T9855] do_syscall_64+0xfa/0x3b0 [ 177.719496][ T9855] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.719530][ T9855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.719550][ T9855] ? clear_bhb_loop+0x60/0xb0 [ 177.719576][ T9855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.719597][ T9855] RIP: 0033:0x7fc98a38eec9 [ 177.719617][ T9855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.719633][ T9855] RSP: 002b:00007fc98b1df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.719655][ T9855] RAX: ffffffffffffffda RBX: 00007fc98a5e5fa0 RCX: 00007fc98a38eec9 [ 177.719670][ T9855] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000008 [ 177.719684][ T9855] RBP: 00007fc98b1df090 R08: 0000000000000000 R09: 0000000000000000 [ 177.719697][ T9855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.719708][ T9855] R13: 00007fc98a5e6038 R14: 00007fc98a5e5fa0 R15: 00007ffe285eb978 [ 177.719741][ T9855] [ 178.759919][ T9887] netlink: 'syz.2.1273': attribute type 142 has an invalid length. [ 178.778069][ T2148] hid (null): unknown global tag 0xe [ 178.805247][ T2148] hid (null): nested delimiters [ 178.942093][ T9900] __nla_validate_parse: 4 callbacks suppressed [ 178.942112][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 178.972019][ T9896] FAULT_INJECTION: forcing a failure. [ 178.972019][ T9896] name failslab, interval 1, probability 0, space 0, times 0 [ 179.007243][ T9896] CPU: 0 UID: 0 PID: 9896 Comm: syz.4.1275 Not tainted syzkaller #0 PREEMPT(full) [ 179.007273][ T9896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 179.007286][ T9896] Call Trace: [ 179.007294][ T9896] [ 179.007303][ T9896] dump_stack_lvl+0x189/0x250 [ 179.007336][ T9896] ? __pfx____ratelimit+0x10/0x10 [ 179.007380][ T9896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.007407][ T9896] ? __pfx__printk+0x10/0x10 [ 179.007442][ T9896] ? __pfx___might_resched+0x10/0x10 [ 179.007465][ T9896] ? fs_reclaim_acquire+0x7d/0x100 [ 179.007501][ T9896] should_fail_ex+0x414/0x560 [ 179.007537][ T9896] should_failslab+0xa8/0x100 [ 179.007567][ T9896] kmem_cache_alloc_noprof+0x73/0x3c0 [ 179.007592][ T9896] ? ovs_flow_alloc+0x24/0x1f0 [ 179.007626][ T9896] ovs_flow_alloc+0x24/0x1f0 [ 179.007658][ T9896] ovs_flow_cmd_new+0x1ee/0xd80 [ 179.007677][ T9896] ? stack_depot_save_flags+0x40/0x860 [ 179.007708][ T9896] ? netlink_unicast+0x771/0x9e0 [ 179.007748][ T9896] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 179.007834][ T9896] ? __nla_parse+0x40/0x60 [ 179.007859][ T9896] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 179.007900][ T9896] genl_family_rcv_msg_doit+0x212/0x300 [ 179.007937][ T9896] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 179.007980][ T9896] ? bpf_lsm_capable+0x9/0x20 [ 179.008005][ T9896] ? security_capable+0x7e/0x2e0 [ 179.008040][ T9896] genl_rcv_msg+0x60e/0x790 [ 179.008076][ T9896] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.008104][ T9896] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 179.008127][ T9896] ? __asan_memcpy+0x40/0x70 [ 179.008147][ T9896] ? __pfx_ref_tracker_free+0x10/0x10 [ 179.008189][ T9896] netlink_rcv_skb+0x205/0x470 [ 179.008209][ T9896] ? __lock_acquire+0xab9/0xd20 [ 179.008230][ T9896] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.008261][ T9896] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.008305][ T9896] ? down_read+0x1ad/0x2e0 [ 179.008350][ T9896] genl_rcv+0x28/0x40 [ 179.008384][ T9896] netlink_unicast+0x82c/0x9e0 [ 179.008428][ T9896] ? __pfx_netlink_unicast+0x10/0x10 [ 179.008465][ T9896] ? netlink_sendmsg+0x642/0xb30 [ 179.008485][ T9896] ? skb_put+0x11b/0x210 [ 179.008513][ T9896] netlink_sendmsg+0x805/0xb30 [ 179.008548][ T9896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.008576][ T9896] ? aa_sock_msg_perm+0xf1/0x1d0 [ 179.008609][ T9896] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.008642][ T9896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.008666][ T9896] __sock_sendmsg+0x219/0x270 [ 179.008703][ T9896] ____sys_sendmsg+0x505/0x830 [ 179.008736][ T9896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.008773][ T9896] ? import_iovec+0x74/0xa0 [ 179.008803][ T9896] ___sys_sendmsg+0x21f/0x2a0 [ 179.008833][ T9896] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.008901][ T9896] ? __fget_files+0x2a/0x420 [ 179.008930][ T9896] ? __fget_files+0x3a0/0x420 [ 179.008972][ T9896] __x64_sys_sendmsg+0x19b/0x260 [ 179.009002][ T9896] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.009040][ T9896] ? __pfx_ksys_write+0x10/0x10 [ 179.009063][ T9896] ? rcu_is_watching+0x15/0xb0 [ 179.009094][ T9896] ? do_syscall_64+0xbe/0x3b0 [ 179.009120][ T9896] do_syscall_64+0xfa/0x3b0 [ 179.009140][ T9896] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.009173][ T9896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.009195][ T9896] ? clear_bhb_loop+0x60/0xb0 [ 179.009221][ T9896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.009242][ T9896] RIP: 0033:0x7f2c4fb8eec9 [ 179.009262][ T9896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.009281][ T9896] RSP: 002b:00007f2c50956038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.009304][ T9896] RAX: ffffffffffffffda RBX: 00007f2c4fde5fa0 RCX: 00007f2c4fb8eec9 [ 179.009320][ T9896] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000008 [ 179.009334][ T9896] RBP: 00007f2c50956090 R08: 0000000000000000 R09: 0000000000000000 [ 179.009348][ T9896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.009360][ T9896] R13: 00007f2c4fde6038 R14: 00007f2c4fde5fa0 R15: 00007ffc28813968 [ 179.009404][ T9896] [ 179.197562][ T9900] net_ratelimit: 1 callbacks suppressed [ 179.197584][ T9900] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 179.683708][ T9919] netlink: 'syz.2.1281': attribute type 1 has an invalid length. [ 179.684351][ T9920] netlink: 'syz.2.1281': attribute type 1 has an invalid length. [ 179.863593][ T9926] bond2: (slave gretap1): making interface the new active one [ 179.902344][ T9926] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 179.941835][ T9932] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1284'. [ 179.989773][ T9932] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1284'. [ 180.032735][ T9932] xt_socket: unknown flags 0xd0 [ 180.084909][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1287'. [ 180.264602][ T9947] netlink: 'syz.3.1290': attribute type 1 has an invalid length. [ 180.287042][ T9947] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1290'. [ 180.323131][ T9950] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1292'. [ 180.434920][ T9956] openvswitch: netlink: Key type 313 is out of range max 32 [ 180.582552][ T9961] netlink: 'syz.0.1294': attribute type 1 has an invalid length. [ 180.647311][ T9961] 8021q: adding VLAN 0 to HW filter on device bond5 [ 180.668661][ T9964] bond5: (slave ip6erspan0): making interface the new active one [ 180.679644][ T9964] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 180.967137][ T1088] wlan1: Trigger new scan to find an IBSS to join [ 180.981541][ T9972] team0: Device vti0 is of different type [ 181.367157][ T5956] IPVS: starting estimator thread 0... [ 181.371988][ T9993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1303'. [ 181.393602][ T9991] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1306'. [ 181.477183][ T9992] IPVS: using max 31 ests per chain, 74400 per kthread [ 181.508983][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1308'. [ 181.550542][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1308'. [ 181.585081][ T2148] hid-generic 0005:0D45:1012.0001: unknown global tag 0xe [ 181.623434][ T2148] hid-generic 0005:0D45:1012.0001: item 0 2 1 14 parsing failed [ 181.646219][ T2148] hid-generic 0005:0D45:1012.0001: probe with driver hid-generic failed with error -22 [ 181.712904][T10000] vlan5: entered promiscuous mode [ 181.726238][T10000] bridge5: entered promiscuous mode [ 181.735162][T10000] vlan5: entered allmulticast mode [ 181.757523][T10000] bridge5: entered allmulticast mode [ 181.829042][T10007] openvswitch: netlink: Key type 313 is out of range max 32 [ 182.227309][T10027] openvswitch: netlink: Flow actions attr not present in new flow. [ 182.281871][T10029] netlink: 'syz.2.1317': attribute type 9 has an invalid length. [ 182.350505][T10032] netlink: 'syz.0.1318': attribute type 1 has an invalid length. [ 182.460016][T10032] 8021q: adding VLAN 0 to HW filter on device bond6 [ 182.501238][T10038] bond6: (slave gretap2): making interface the new active one [ 182.516754][T10048] netlink: 'syz.2.1323': attribute type 1 has an invalid length. [ 182.529580][T10038] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 182.713526][T10050] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 182.784636][T10050] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 182.868976][T10052] vlan6: entered promiscuous mode [ 182.881882][T10052] bridge4: entered promiscuous mode [ 182.889734][T10052] vlan6: entered allmulticast mode [ 182.907078][T10052] bridge4: entered allmulticast mode [ 183.300898][T10091] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 183.401509][T10098] delete_channel: no stack [ 183.523871][T10103] openvswitch: netlink: Key type 313 is out of range max 32 [ 183.816043][T10117] netlink: 'syz.3.1344': attribute type 29 has an invalid length. [ 183.846143][T10117] netlink: 'syz.3.1344': attribute type 29 has an invalid length. [ 183.900476][T10122] netlink: 'syz.3.1344': attribute type 29 has an invalid length. [ 183.943453][T10122] netlink: 'syz.3.1344': attribute type 29 has an invalid length. [ 184.067164][T10132] __nla_validate_parse: 11 callbacks suppressed [ 184.067186][T10132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1347'. [ 184.093252][T10127] syzkaller0: entered promiscuous mode [ 184.108739][T10127] syzkaller0: entered allmulticast mode [ 184.230245][T10140] sctp: [Deprecated]: syz.2.1351 (pid 10140) Use of int in maxseg socket option. [ 184.230245][T10140] Use struct sctp_assoc_value instead [ 184.345073][T10145] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1352'. [ 184.487606][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1354'. [ 184.612987][T10158] netlink: 'syz.0.1354': attribute type 11 has an invalid length. [ 184.621295][T10158] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1354'. [ 184.630956][T10160] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1357'. [ 184.648269][T10152] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1355'. [ 185.008182][T10176] openvswitch: netlink: Key type 313 is out of range max 32 [ 185.248384][T10186] "syz.3.1369" (10186) uses obsolete ecb(arc4) skcipher [ 185.314611][T10192] netlink: 'syz.4.1371': attribute type 2 has an invalid length. [ 185.328867][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1369'. [ 185.433375][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 185.450155][T10200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1372'. [ 185.561112][T10211] vlan6: entered promiscuous mode [ 185.566685][T10211] bridge6: entered promiscuous mode [ 185.572727][T10213] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1375'. [ 185.582476][T10211] vlan6: entered allmulticast mode [ 185.588981][T10211] bridge6: entered allmulticast mode [ 185.810816][T10228] netlink: 'syz.3.1380': attribute type 1 has an invalid length. [ 185.881109][T10228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.927380][ T1088] wlan1: Trigger new scan to find an IBSS to join [ 185.929812][T10234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.941837][T10234] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 185.941962][T10228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.955630][T10234] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 186.014340][T10230] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 186.026293][T10230] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 186.112059][T10245] delete_channel: no stack [ 186.369659][T10254] vlan2: entered promiscuous mode [ 186.374853][T10254] bridge1: entered promiscuous mode [ 186.385016][T10254] vlan2: entered allmulticast mode [ 186.390699][T10254] bridge1: entered allmulticast mode [ 186.837701][ T2990] wlan1: Creating new IBSS network, BSSID 0a:ff:8d:00:00:00 [ 187.172162][T10309] vlan7: entered promiscuous mode [ 187.187727][T10309] bridge4: entered promiscuous mode [ 187.200023][T10309] vlan7: entered allmulticast mode [ 187.212228][T10309] bridge4: entered allmulticast mode [ 187.345995][T10320] syzkaller1: entered promiscuous mode [ 187.354819][T10324] FAULT_INJECTION: forcing a failure. [ 187.354819][T10324] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 187.368388][T10320] syzkaller1: entered allmulticast mode [ 187.381032][T10324] CPU: 0 UID: 0 PID: 10324 Comm: syz.2.1407 Not tainted syzkaller #0 PREEMPT(full) [ 187.381060][T10324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 187.381072][T10324] Call Trace: [ 187.381080][T10324] [ 187.381089][T10324] dump_stack_lvl+0x189/0x250 [ 187.381120][T10324] ? __pfx____ratelimit+0x10/0x10 [ 187.381153][T10324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.381179][T10324] ? __pfx__printk+0x10/0x10 [ 187.381211][T10324] ? __might_fault+0xb0/0x130 [ 187.381250][T10324] should_fail_ex+0x414/0x560 [ 187.381285][T10324] _copy_from_user+0x2d/0xb0 [ 187.381312][T10324] __sys_sendto+0x25c/0x520 [ 187.381338][T10324] ? __pfx___sys_sendto+0x10/0x10 [ 187.381358][T10324] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 187.381396][T10324] ? __fget_files+0x3a0/0x420 [ 187.381438][T10324] ? ksys_write+0x22a/0x250 [ 187.381468][T10324] ? __pfx_ksys_write+0x10/0x10 [ 187.381490][T10324] ? rcu_is_watching+0x15/0xb0 [ 187.381522][T10324] __x64_sys_sendto+0xde/0x100 [ 187.381549][T10324] do_syscall_64+0xfa/0x3b0 [ 187.381571][T10324] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.381604][T10324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.381626][T10324] ? clear_bhb_loop+0x60/0xb0 [ 187.381653][T10324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.381674][T10324] RIP: 0033:0x7fe95cf8eec9 [ 187.381693][T10324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.381719][T10324] RSP: 002b:00007fe95ddd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 187.381742][T10324] RAX: ffffffffffffffda RBX: 00007fe95d1e5fa0 RCX: 00007fe95cf8eec9 [ 187.381758][T10324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 187.381771][T10324] RBP: 00007fe95ddd3090 R08: 0000200000000480 R09: 0000000000000010 [ 187.381785][T10324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.381798][T10324] R13: 00007fe95d1e6038 R14: 00007fe95d1e5fa0 R15: 00007ffd3aff7648 [ 187.381833][T10324] [ 188.019177][T10347] openvswitch: netlink: Key type 313 is out of range max 32 [ 188.026857][T10347] FAULT_INJECTION: forcing a failure. [ 188.026857][T10347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.098509][T10347] CPU: 1 UID: 0 PID: 10347 Comm: syz.4.1416 Not tainted syzkaller #0 PREEMPT(full) [ 188.098539][T10347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 188.098552][T10347] Call Trace: [ 188.098560][T10347] [ 188.098570][T10347] dump_stack_lvl+0x189/0x250 [ 188.098601][T10347] ? __pfx____ratelimit+0x10/0x10 [ 188.098637][T10347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.098664][T10347] ? __pfx__printk+0x10/0x10 [ 188.098713][T10347] should_fail_ex+0x414/0x560 [ 188.098749][T10347] _copy_to_user+0x31/0xb0 [ 188.098778][T10347] simple_read_from_buffer+0xe1/0x170 [ 188.098812][T10347] proc_fail_nth_read+0x1b3/0x220 [ 188.098839][T10347] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.098874][T10347] ? rw_verify_area+0x2a6/0x4d0 [ 188.098898][T10347] ? __lock_acquire+0xab9/0xd20 [ 188.098917][T10347] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.098941][T10347] vfs_read+0x1fd/0xa30 [ 188.098965][T10347] ? fdget_pos+0x247/0x320 [ 188.098999][T10347] ? __pfx___mutex_lock+0x10/0x10 [ 188.099023][T10347] ? __pfx_vfs_read+0x10/0x10 [ 188.099051][T10347] ? __fget_files+0x2a/0x420 [ 188.099085][T10347] ? __fget_files+0x3a0/0x420 [ 188.099113][T10347] ? __fget_files+0x2a/0x420 [ 188.099154][T10347] ksys_read+0x145/0x250 [ 188.099182][T10347] ? __pfx_ksys_read+0x10/0x10 [ 188.099204][T10347] ? rcu_is_watching+0x15/0xb0 [ 188.099236][T10347] ? do_syscall_64+0xbe/0x3b0 [ 188.099263][T10347] do_syscall_64+0xfa/0x3b0 [ 188.099281][T10347] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.099314][T10347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.099336][T10347] ? clear_bhb_loop+0x60/0xb0 [ 188.099362][T10347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.099383][T10347] RIP: 0033:0x7f2c4fb8d8dc [ 188.099403][T10347] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 188.099421][T10347] RSP: 002b:00007f2c50956030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 188.099443][T10347] RAX: ffffffffffffffda RBX: 00007f2c4fde5fa0 RCX: 00007f2c4fb8d8dc [ 188.099459][T10347] RDX: 000000000000000f RSI: 00007f2c509560a0 RDI: 0000000000000009 [ 188.099473][T10347] RBP: 00007f2c50956090 R08: 0000000000000000 R09: 0000000000000000 [ 188.099486][T10347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.099498][T10347] R13: 00007f2c4fde6038 R14: 00007f2c4fde5fa0 R15: 00007ffc28813968 [ 188.099534][T10347] [ 188.358221][T10348] vlan3: entered promiscuous mode [ 188.363401][T10348] bridge2: entered promiscuous mode [ 188.370867][T10348] vlan3: entered allmulticast mode [ 188.376249][T10348] bridge2: entered allmulticast mode [ 188.496372][T10354] veth0: entered promiscuous mode [ 188.511266][T10352] veth0: left promiscuous mode [ 188.557464][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.659475][T10359] openvswitch: netlink: Flow key attr not present in new flow. [ 189.160226][T10399] tipc: Enabling of bearer rejected, failed to enable media [ 189.449894][T10409] __nla_validate_parse: 14 callbacks suppressed [ 189.449916][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1439'. [ 189.465876][T10409] netlink: 'syz.4.1439': attribute type 30 has an invalid length. [ 189.475127][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1439'. [ 189.638362][T10420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1441'. [ 189.685406][T10420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1441'. [ 189.972493][T10437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1448'. [ 189.991131][T10437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1448'. [ 190.189338][T10454] FAULT_INJECTION: forcing a failure. [ 190.189338][T10454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.203750][T10454] CPU: 0 UID: 0 PID: 10454 Comm: syz.0.1454 Not tainted syzkaller #0 PREEMPT(full) [ 190.203780][T10454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 190.203794][T10454] Call Trace: [ 190.203802][T10454] [ 190.203811][T10454] dump_stack_lvl+0x189/0x250 [ 190.203844][T10454] ? __pfx____ratelimit+0x10/0x10 [ 190.203879][T10454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.203906][T10454] ? __pfx__printk+0x10/0x10 [ 190.203954][T10454] should_fail_ex+0x414/0x560 [ 190.203990][T10454] _copy_to_user+0x31/0xb0 [ 190.204018][T10454] simple_read_from_buffer+0xe1/0x170 [ 190.204052][T10454] proc_fail_nth_read+0x1b3/0x220 [ 190.204078][T10454] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.204104][T10454] ? rw_verify_area+0x2a6/0x4d0 [ 190.204127][T10454] ? __lock_acquire+0xab9/0xd20 [ 190.204146][T10454] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.204170][T10454] vfs_read+0x1fd/0xa30 [ 190.204194][T10454] ? fdget_pos+0x247/0x320 [ 190.204227][T10454] ? __pfx___mutex_lock+0x10/0x10 [ 190.204250][T10454] ? __pfx_vfs_read+0x10/0x10 [ 190.204277][T10454] ? __fget_files+0x2a/0x420 [ 190.204310][T10454] ? __fget_files+0x3a0/0x420 [ 190.204336][T10454] ? __fget_files+0x2a/0x420 [ 190.204375][T10454] ksys_read+0x145/0x250 [ 190.204404][T10454] ? __pfx_ksys_read+0x10/0x10 [ 190.204425][T10454] ? rcu_is_watching+0x15/0xb0 [ 190.204453][T10454] ? do_syscall_64+0xbe/0x3b0 [ 190.204488][T10454] do_syscall_64+0xfa/0x3b0 [ 190.204508][T10454] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.204542][T10454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.204563][T10454] ? clear_bhb_loop+0x60/0xb0 [ 190.204589][T10454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.204610][T10454] RIP: 0033:0x7f2d3b38d8dc [ 190.204630][T10454] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 190.204649][T10454] RSP: 002b:00007f2d3c210030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.204672][T10454] RAX: ffffffffffffffda RBX: 00007f2d3b5e5fa0 RCX: 00007f2d3b38d8dc [ 190.204687][T10454] RDX: 000000000000000f RSI: 00007f2d3c2100a0 RDI: 0000000000000005 [ 190.204700][T10454] RBP: 00007f2d3c210090 R08: 0000000000000000 R09: 0000000000000010 [ 190.204713][T10454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.204726][T10454] R13: 00007f2d3b5e6038 R14: 00007f2d3b5e5fa0 R15: 00007ffe486ac758 [ 190.204761][T10454] [ 190.298382][T10457] netlink: 'syz.3.1456': attribute type 1 has an invalid length. [ 190.617336][T10460] macvlan1: entered promiscuous mode [ 190.622792][T10460] macvlan1: entered allmulticast mode [ 190.630015][T10460] bond9: entered promiscuous mode [ 190.637014][T10460] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 190.651664][T10460] bond9: left promiscuous mode [ 190.671465][T10473] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1457'. [ 190.684873][T10466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1457'. [ 191.438853][T10524] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1477'. [ 191.547436][T10531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.601645][T10531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1478'. [ 191.648978][ T61] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.677993][ T61] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.708592][ T61] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.737397][ T61] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.679972][T10596] !: renamed from dummy0 (while UP) [ 193.137283][T10615] veth1_to_bond: entered allmulticast mode [ 193.160653][T10615] netlink: 'syz.0.1499': attribute type 1 has an invalid length. [ 193.215814][T10614] veth1_to_bond: left allmulticast mode [ 193.543606][T10645] mac80211_hwsim hwsim7 ÿ: renamed from wlan1 (while UP) [ 193.695806][T10648] netlink: 'syz.1.1510': attribute type 22 has an invalid length. [ 193.764375][T10658] xt_bpf: check failed: parse error [ 193.771748][T10648] netlink: 'syz.1.1510': attribute type 22 has an invalid length. [ 193.917737][T10659] syzkaller0: entered promiscuous mode [ 193.928066][T10659] syzkaller0: entered allmulticast mode [ 194.006033][T10667] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 195.617897][T10700] __nla_validate_parse: 14 callbacks suppressed [ 195.617919][T10700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1529'. [ 195.634770][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 195.661238][T10704] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 195.704809][T10706] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1531'. [ 195.749415][T10706] xt_policy: neither incoming nor outgoing policy selected [ 195.921933][T10720] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 195.976417][T10720] bond4 (unregistering): Released all slaves [ 196.046202][T10728] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1537'. [ 196.208428][T10740] nbd: must specify a device to reconfigure [ 196.227758][T10741] FAULT_INJECTION: forcing a failure. [ 196.227758][T10741] name failslab, interval 1, probability 0, space 0, times 0 [ 196.253673][T10735] netlink: 'syz.3.1543': attribute type 2 has an invalid length. [ 196.264037][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1543'. [ 196.267190][T10741] CPU: 1 UID: 0 PID: 10741 Comm: syz.0.1541 Not tainted syzkaller #0 PREEMPT(full) [ 196.267224][T10741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 196.267240][T10741] Call Trace: [ 196.267250][T10741] [ 196.267261][T10741] dump_stack_lvl+0x189/0x250 [ 196.267298][T10741] ? __pfx____ratelimit+0x10/0x10 [ 196.267338][T10741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.267368][T10741] ? __pfx__printk+0x10/0x10 [ 196.267413][T10741] ? __pfx___might_resched+0x10/0x10 [ 196.267444][T10741] should_fail_ex+0x414/0x560 [ 196.267486][T10741] should_failslab+0xa8/0x100 [ 196.267521][T10741] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 196.267552][T10741] ? __alloc_skb+0x112/0x2d0 [ 196.267583][T10741] __alloc_skb+0x112/0x2d0 [ 196.267614][T10741] netlink_sendmsg+0x5c6/0xb30 [ 196.267652][T10741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.267684][T10741] ? aa_sock_msg_perm+0xf1/0x1d0 [ 196.267721][T10741] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.267758][T10741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.267785][T10741] __sock_sendmsg+0x219/0x270 [ 196.267825][T10741] ____sys_sendmsg+0x505/0x830 [ 196.267861][T10741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.267903][T10741] ? import_iovec+0x74/0xa0 [ 196.267935][T10741] ___sys_sendmsg+0x21f/0x2a0 [ 196.267966][T10741] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.268040][T10741] ? __fget_files+0x2a/0x420 [ 196.268073][T10741] ? __fget_files+0x3a0/0x420 [ 196.268118][T10741] __x64_sys_sendmsg+0x19b/0x260 [ 196.268150][T10741] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.268212][T10741] ? __pfx_ksys_write+0x10/0x10 [ 196.268237][T10741] ? rcu_is_watching+0x15/0xb0 [ 196.268269][T10741] ? do_syscall_64+0xbe/0x3b0 [ 196.268299][T10741] do_syscall_64+0xfa/0x3b0 [ 196.268320][T10741] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.268357][T10741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.268383][T10741] ? clear_bhb_loop+0x60/0xb0 [ 196.268413][T10741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.268436][T10741] RIP: 0033:0x7f2d3b38eec9 [ 196.268456][T10741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.268476][T10741] RSP: 002b:00007f2d3c210038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.268502][T10741] RAX: ffffffffffffffda RBX: 00007f2d3b5e5fa0 RCX: 00007f2d3b38eec9 [ 196.268520][T10741] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 196.268535][T10741] RBP: 00007f2d3c210090 R08: 0000000000000000 R09: 0000000000000000 [ 196.268550][T10741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.268563][T10741] R13: 00007f2d3b5e6038 R14: 00007f2d3b5e5fa0 R15: 00007ffe486ac758 [ 196.268599][T10741] [ 196.372368][T10745] xt_limit: Overflow, try lower: 271964/0 [ 196.609593][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1546'. [ 196.627702][T10751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1546'. [ 196.728387][T10757] vlan8: entered promiscuous mode [ 196.744906][T10757] bridge5: entered promiscuous mode [ 196.779814][T10757] vlan8: entered allmulticast mode [ 196.805476][T10757] bridge5: entered allmulticast mode [ 196.988307][T10772] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1553'. [ 197.009253][T10770] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1552'. [ 197.080667][T10780] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1556'. [ 197.244921][T10782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.252358][T10782] IPv6: NLM_F_CREATE should be set when creating new route [ 197.259685][T10782] IPv6: NLM_F_CREATE should be set when creating new route [ 197.393196][T10799] raw_sendmsg: syz.1.1560 forgot to set AF_INET. Fix it! [ 197.617651][T10809] vlan9: entered promiscuous mode [ 197.653420][T10809] bridge6: entered promiscuous mode [ 197.664813][T10809] vlan9: entered allmulticast mode [ 197.678424][T10809] bridge6: entered allmulticast mode [ 198.324830][T10854] ip6tnl1: entered promiscuous mode [ 198.352054][T10862] vlan4: entered promiscuous mode [ 198.358236][T10862] bridge3: entered promiscuous mode [ 198.363658][T10862] vlan4: entered allmulticast mode [ 198.369991][T10862] bridge3: entered allmulticast mode [ 198.487895][T10868] netlink: 'syz.4.1584': attribute type 12 has an invalid length. [ 198.501130][T10868] netlink: 'syz.4.1584': attribute type 11 has an invalid length. [ 198.512162][T10870] delete_channel: no stack [ 198.907757][T10898] tipc: Invalid UDP bearer configuration [ 198.907817][T10898] tipc: Enabling of bearer rejected, failed to enable media [ 199.674139][T10945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.728814][T10945] bond0: (slave rose0): Enslaving as an active interface with an up link [ 199.888668][T10957] netlink: 'syz.1.1609': attribute type 21 has an invalid length. [ 200.163037][T10976] FAULT_INJECTION: forcing a failure. [ 200.163037][T10976] name failslab, interval 1, probability 0, space 0, times 0 [ 200.179915][T10976] CPU: 1 UID: 0 PID: 10976 Comm: syz.2.1615 Not tainted syzkaller #0 PREEMPT(full) [ 200.179943][T10976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 200.179958][T10976] Call Trace: [ 200.179970][T10976] [ 200.179980][T10976] dump_stack_lvl+0x189/0x250 [ 200.180013][T10976] ? __pfx____ratelimit+0x10/0x10 [ 200.180048][T10976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.180076][T10976] ? __pfx__printk+0x10/0x10 [ 200.180112][T10976] ? __pfx___might_resched+0x10/0x10 [ 200.180137][T10976] ? fs_reclaim_acquire+0x7d/0x100 [ 200.180174][T10976] should_fail_ex+0x414/0x560 [ 200.180211][T10976] should_failslab+0xa8/0x100 [ 200.180242][T10976] __kmalloc_noprof+0xcb/0x4f0 [ 200.180265][T10976] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 200.180314][T10976] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 200.180350][T10976] genl_start+0x180/0x6c0 [ 200.180375][T10976] ? netlink_lookup+0x30/0x200 [ 200.180403][T10976] __netlink_dump_start+0x469/0x7e0 [ 200.180433][T10976] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 200.180464][T10976] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 200.180491][T10976] ? genl_get_cmd+0x67f/0x910 [ 200.180523][T10976] ? __pfx_genl_start+0x10/0x10 [ 200.180546][T10976] ? __pfx_genl_dumpit+0x10/0x10 [ 200.180570][T10976] ? __pfx_genl_done+0x10/0x10 [ 200.180613][T10976] genl_rcv_msg+0x5da/0x790 [ 200.180646][T10976] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.180671][T10976] ? __pfx_ethnl_default_start+0x10/0x10 [ 200.180693][T10976] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 200.180714][T10976] ? __pfx_ethnl_default_done+0x10/0x10 [ 200.180739][T10976] ? __asan_memcpy+0x40/0x70 [ 200.180758][T10976] ? __pfx_ref_tracker_free+0x10/0x10 [ 200.180797][T10976] netlink_rcv_skb+0x205/0x470 [ 200.180815][T10976] ? __lock_acquire+0xab9/0xd20 [ 200.180834][T10976] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.180871][T10976] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.180912][T10976] ? down_read+0x1ad/0x2e0 [ 200.180939][T10976] genl_rcv+0x28/0x40 [ 200.180964][T10976] netlink_unicast+0x82c/0x9e0 [ 200.181006][T10976] ? __pfx_netlink_unicast+0x10/0x10 [ 200.181041][T10976] ? netlink_sendmsg+0x642/0xb30 [ 200.181060][T10976] ? skb_put+0x11b/0x210 [ 200.181088][T10976] netlink_sendmsg+0x805/0xb30 [ 200.181120][T10976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.181146][T10976] ? aa_sock_msg_perm+0xf1/0x1d0 [ 200.181179][T10976] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 200.181212][T10976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.181236][T10976] __sock_sendmsg+0x219/0x270 [ 200.181271][T10976] ____sys_sendmsg+0x505/0x830 [ 200.181303][T10976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.181339][T10976] ? import_iovec+0x74/0xa0 [ 200.181368][T10976] ___sys_sendmsg+0x21f/0x2a0 [ 200.181395][T10976] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.181458][T10976] ? __fget_files+0x2a/0x420 [ 200.181485][T10976] ? __fget_files+0x3a0/0x420 [ 200.181524][T10976] __x64_sys_sendmsg+0x19b/0x260 [ 200.181552][T10976] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.181590][T10976] ? __pfx_ksys_write+0x10/0x10 [ 200.181612][T10976] ? rcu_is_watching+0x15/0xb0 [ 200.181643][T10976] ? do_syscall_64+0xbe/0x3b0 [ 200.181669][T10976] do_syscall_64+0xfa/0x3b0 [ 200.181688][T10976] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.181721][T10976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.181742][T10976] ? clear_bhb_loop+0x60/0xb0 [ 200.181768][T10976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.181787][T10976] RIP: 0033:0x7fe95cf8eec9 [ 200.181807][T10976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.181825][T10976] RSP: 002b:00007fe95ddd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.181848][T10976] RAX: ffffffffffffffda RBX: 00007fe95d1e5fa0 RCX: 00007fe95cf8eec9 [ 200.181872][T10976] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 200.181885][T10976] RBP: 00007fe95ddd3090 R08: 0000000000000000 R09: 0000000000000000 [ 200.181899][T10976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.181911][T10976] R13: 00007fe95d1e6038 R14: 00007fe95d1e5fa0 R15: 00007ffd3aff7648 [ 200.181943][T10976] [ 200.851401][T10989] __nla_validate_parse: 22 callbacks suppressed [ 200.851421][T10989] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1620'. [ 200.871140][T10992] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1618'. [ 200.885316][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1619'. [ 201.057028][T11002] lo: entered allmulticast mode [ 201.282696][T11022] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 201.413541][T11033] netlink: 'syz.2.1629': attribute type 2 has an invalid length. [ 201.601616][T11040] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1631'. [ 201.629785][T11046] netlink: 'syz.3.1632': attribute type 10 has an invalid length. [ 202.094890][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1642'. [ 202.107696][T11066] bond0: entered promiscuous mode [ 202.112921][T11066] bond_slave_0: entered promiscuous mode [ 202.120292][T11066] bond_slave_1: entered promiscuous mode [ 202.141145][T11076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1642'. [ 202.270420][T11076] vlan2: entered promiscuous mode [ 202.275552][T11076] bridge4: entered promiscuous mode [ 202.305904][T11081] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 202.308167][T11076] vlan2: entered allmulticast mode [ 202.341928][T11076] bridge4: entered allmulticast mode [ 202.645725][T11094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1645'. [ 202.722342][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1646'. [ 202.761840][T11101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1646'. [ 202.911076][T11111] veth0: left promiscuous mode [ 202.931958][T11111] netlink: 'syz.3.1648': attribute type 2 has an invalid length. [ 202.987478][T11110] syzkaller0: entered promiscuous mode [ 202.993022][T11110] syzkaller0: entered allmulticast mode [ 203.026138][T11110] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 203.144269][T11124] netlink: 'syz.3.1652': attribute type 21 has an invalid length. [ 203.205073][T11124] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.213232][T11124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.220525][T11124] IPv6: NLM_F_CREATE should be set when creating new route [ 203.228102][T11124] IPv6: NLM_F_CREATE should be set when creating new route [ 203.235446][T11124] IPv6: NLM_F_CREATE should be set when creating new route [ 203.286179][T11130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1653'. [ 203.368424][ T1108] bond1: (slave macvlan0): link status definitely down, disabling slave [ 203.758722][T11161] netlink: 'syz.2.1660': attribute type 1 has an invalid length. [ 204.124104][T11159] bond7 (unregistering): Released all slaves [ 204.223831][T11184] netlink: 'syz.3.1664': attribute type 21 has an invalid length. [ 204.254687][T11184] netlink: 'syz.3.1664': attribute type 4 has an invalid length. [ 204.282837][T11184] netlink: 'syz.3.1664': attribute type 5 has an invalid length. [ 204.921401][T11216] bond7: entered allmulticast mode [ 204.927649][T11216] 8021q: adding VLAN 0 to HW filter on device bond7 [ 204.935452][T11216] bridge0: port 1(bond7) entered blocking state [ 204.961263][T11216] bridge0: port 1(bond7) entered disabled state [ 204.982019][T11216] bond7: entered promiscuous mode [ 205.331461][T11243] vlan10: entered allmulticast mode [ 205.366329][T11243] bridge0: entered allmulticast mode [ 205.382833][T11243] bridge7: port 1(vlan10) entered blocking state [ 205.399927][T11243] bridge7: port 1(vlan10) entered disabled state [ 205.420333][T11243] vlan10: entered promiscuous mode [ 205.460847][T11243] bridge0: entered promiscuous mode [ 205.709696][T11262] netlink: 'syz.4.1682': attribute type 9 has an invalid length. [ 205.718048][T11262] [ 205.720405][T11262] ====================================================== [ 205.727444][T11262] WARNING: possible circular locking dependency detected [ 205.734494][T11262] syzkaller #0 Not tainted [ 205.738932][T11262] ------------------------------------------------------ [ 205.745974][T11262] syz.4.1682/11262 is trying to acquire lock: [ 205.752061][T11262] ffffffff8f21a298 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 205.761419][T11262] [ 205.761419][T11262] but task is already holding lock: [ 205.768794][T11262] ffff888057054470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 205.778149][T11262] [ 205.778149][T11262] which lock already depends on the new lock. [ 205.778149][T11262] [ 205.788564][T11262] [ 205.788564][T11262] the existing dependency chain (in reverse order) is: [ 205.797584][T11262] [ 205.797584][T11262] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 205.805591][T11262] lock_acquire+0x120/0x360 [ 205.810622][T11262] _raw_spin_lock_bh+0x36/0x50 [ 205.815928][T11262] nr_rt_ioctl+0x193/0xd50 [ 205.820878][T11262] sock_do_ioctl+0xdc/0x300 [ 205.825934][T11262] sock_ioctl+0x576/0x790 [ 205.830819][T11262] __se_sys_ioctl+0xfc/0x170 [ 205.836037][T11262] do_syscall_64+0xfa/0x3b0 [ 205.841071][T11262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.847498][T11262] [ 205.847498][T11262] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 205.855334][T11262] lock_acquire+0x120/0x360 [ 205.860370][T11262] _raw_spin_lock_bh+0x36/0x50 [ 205.865678][T11262] nr_rt_device_down+0xa9/0x720 [ 205.871059][T11262] nr_device_event+0x137/0x150 [ 205.876352][T11262] notifier_call_chain+0x1b6/0x3e0 [ 205.881994][T11262] __dev_notify_flags+0x18d/0x2e0 [ 205.887547][T11262] netif_change_flags+0xe8/0x1a0 [ 205.893011][T11262] dev_change_flags+0x130/0x260 [ 205.898384][T11262] dev_ioctl+0x7b4/0x1150 [ 205.903237][T11262] sock_do_ioctl+0x22c/0x300 [ 205.908368][T11262] sock_ioctl+0x576/0x790 [ 205.913241][T11262] __se_sys_ioctl+0xfc/0x170 [ 205.918356][T11262] do_syscall_64+0xfa/0x3b0 [ 205.923396][T11262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.929841][T11262] [ 205.929841][T11262] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 205.937760][T11262] validate_chain+0xb9b/0x2140 [ 205.943057][T11262] __lock_acquire+0xab9/0xd20 [ 205.948263][T11262] lock_acquire+0x120/0x360 [ 205.953294][T11262] _raw_spin_lock_bh+0x36/0x50 [ 205.958592][T11262] nr_remove_neigh+0x25/0xe0 [ 205.963706][T11262] nr_add_node+0x1d9f/0x2570 [ 205.968817][T11262] nr_rt_ioctl+0xc12/0xd50 [ 205.973759][T11262] sock_do_ioctl+0xdc/0x300 [ 205.978795][T11262] sock_ioctl+0x576/0x790 [ 205.983658][T11262] __se_sys_ioctl+0xfc/0x170 [ 205.988776][T11262] do_syscall_64+0xfa/0x3b0 [ 205.993804][T11262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.000240][T11262] [ 206.000240][T11262] other info that might help us debug this: [ 206.000240][T11262] [ 206.010466][T11262] Chain exists of: [ 206.010466][T11262] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 206.010466][T11262] [ 206.024304][T11262] Possible unsafe locking scenario: [ 206.024304][T11262] [ 206.031752][T11262] CPU0 CPU1 [ 206.037119][T11262] ---- ---- [ 206.042493][T11262] lock(&nr_node->node_lock); [ 206.047264][T11262] lock(nr_node_list_lock); [ 206.054387][T11262] lock(&nr_node->node_lock); [ 206.061682][T11262] lock(nr_neigh_list_lock); [ 206.066369][T11262] [ 206.066369][T11262] *** DEADLOCK *** [ 206.066369][T11262] [ 206.074520][T11262] 1 lock held by syz.4.1682/11262: [ 206.079716][T11262] #0: ffff888057054470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 206.089475][T11262] [ 206.089475][T11262] stack backtrace: [ 206.095368][T11262] CPU: 0 UID: 0 PID: 11262 Comm: syz.4.1682 Not tainted syzkaller #0 PREEMPT(full) [ 206.095388][T11262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 206.095399][T11262] Call Trace: [ 206.095407][T11262] [ 206.095416][T11262] dump_stack_lvl+0x189/0x250 [ 206.095441][T11262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.095461][T11262] ? __pfx__printk+0x10/0x10 [ 206.095485][T11262] ? stack_trace_save+0x9c/0xe0 [ 206.095513][T11262] print_circular_bug+0x2ee/0x310 [ 206.095536][T11262] check_noncircular+0x134/0x160 [ 206.095559][T11262] validate_chain+0xb9b/0x2140 [ 206.095577][T11262] ? do_syscall_64+0xfa/0x3b0 [ 206.095604][T11262] __lock_acquire+0xab9/0xd20 [ 206.095622][T11262] ? nr_remove_neigh+0x25/0xe0 [ 206.095639][T11262] lock_acquire+0x120/0x360 [ 206.095653][T11262] ? nr_remove_neigh+0x25/0xe0 [ 206.095673][T11262] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 206.095697][T11262] ? nr_remove_neigh+0x25/0xe0 [ 206.095713][T11262] _raw_spin_lock_bh+0x36/0x50 [ 206.095738][T11262] ? nr_remove_neigh+0x25/0xe0 [ 206.095754][T11262] nr_remove_neigh+0x25/0xe0 [ 206.095772][T11262] nr_add_node+0x1d9f/0x2570 [ 206.095790][T11262] ? dev_get_by_name+0x21/0x200 [ 206.095813][T11262] ? dev_get_by_name+0x21/0x200 [ 206.095834][T11262] ? dev_get_by_name+0x21/0x200 [ 206.095855][T11262] ? nr_call_to_digi+0x136/0x1b0 [ 206.095871][T11262] nr_rt_ioctl+0xc12/0xd50 [ 206.095890][T11262] ? kasan_quarantine_put+0xdd/0x220 [ 206.095909][T11262] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 206.095929][T11262] ? apparmor_capable+0x137/0x1b0 [ 206.095950][T11262] ? capable+0x89/0xe0 [ 206.095966][T11262] ? nr_ioctl+0x1b1/0x3b0 [ 206.095989][T11262] sock_do_ioctl+0xdc/0x300 [ 206.096014][T11262] ? __pfx_sock_do_ioctl+0x10/0x10 [ 206.096036][T11262] ? __lock_acquire+0xab9/0xd20 [ 206.096058][T11262] sock_ioctl+0x576/0x790 [ 206.096081][T11262] ? __pfx_sock_ioctl+0x10/0x10 [ 206.096103][T11262] ? __fget_files+0x2a/0x420 [ 206.096127][T11262] ? __fget_files+0x3a0/0x420 [ 206.096148][T11262] ? __fget_files+0x2a/0x420 [ 206.096171][T11262] ? bpf_lsm_file_ioctl+0x9/0x20 [ 206.096188][T11262] ? __pfx_sock_ioctl+0x10/0x10 [ 206.096210][T11262] __se_sys_ioctl+0xfc/0x170 [ 206.096228][T11262] do_syscall_64+0xfa/0x3b0 [ 206.096243][T11262] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.096269][T11262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.096286][T11262] ? clear_bhb_loop+0x60/0xb0 [ 206.096305][T11262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.096321][T11262] RIP: 0033:0x7f2c4fb8eec9 [ 206.096337][T11262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.096353][T11262] RSP: 002b:00007f2c50956038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.096377][T11262] RAX: ffffffffffffffda RBX: 00007f2c4fde5fa0 RCX: 00007f2c4fb8eec9 [ 206.096390][T11262] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000006 [ 206.096402][T11262] RBP: 00007f2c4fc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 206.096413][T11262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.096423][T11262] R13: 00007f2c4fde6038 R14: 00007f2c4fde5fa0 R15: 00007ffc28813968 [ 206.096443][T11262] [ 206.417537][T11261] __nla_validate_parse: 6 callbacks suppressed [ 206.417557][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1680'. [ 206.502529][T11273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1681'. [ 206.525314][T11261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1680'. [ 206.583007][T11261] vlan7: entered promiscuous mode [ 206.594090][T11261] bridge7: entered promiscuous mode [ 206.602514][T11261] vlan7: entered allmulticast mode [ 206.609183][T11261] bridge7: entered allmulticast mode [ 208.397284][ T3587] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 211.757159][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 211.757180][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 211.757192][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 211.767163][ T5843] Bluetooth: hci3: command 0x0406 tx timeout