last executing test programs: 10.402271739s ago: executing program 1 (id=2711): r0 = socket(0x2b, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x1a, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x1, @multicast}, 0x0, {0x2, 0x4e23, @private=0xa010100}, 'xfrm0\x00'}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x40}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 2.745067478s ago: executing program 4 (id=2787): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0x8, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711091000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100030a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0) pipe(&(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000f33abd84e4d7718d1e00bc229ef00500", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000db5a00fea1000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000150000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.591764404s ago: executing program 4 (id=2790): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x8, 0x0, 0x8000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000"], 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r6, 0x40106183, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, 0x0) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @private2}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) read$alg(r9, &(0x7f0000000000)=""/35, 0x1c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x1403, 0x4, 0x70bd2c, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x88060}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1b}}, &(0x7f0000000480)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x36, 0x0, &(0x7f00000003c0)="e02742e8680d85ff970c2d2f86dd1835e83dcd7105227dad63d67dfbeb9f39fc145a147f3958c985e6f1e330389c6546a8d9547652e5", 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.772850195s ago: executing program 1 (id=2714): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x14, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0xfffffe49, 0x0, 0xffffffffffffffff, 0x6}, 0x42) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000240)=0x5, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000001000000000100000000ca30e2d6cb3ff8c1dab78299950000000b0000000014001462666f6164636173742dcc186e6b0000f32c6e48071bfcdcb6406e1f5fca4f4f7a4998590cc299c7e6683d0bb042c2cb453d74ab15bd88f7602ea5ac71d414392fd1ac9176f5d550ca402de73fffb02458aad36574273e3ee96f2396fac3b2fac49bcc59f4923e8e02de97cc01bfe7ffad69"], 0x30}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) clock_gettime(0x0, &(0x7f0000004380)={0x0, 0x0}) recvmmsg(r6, &(0x7f00000042c0)=[{{&(0x7f0000000840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000940)=""/67, 0x43}, {&(0x7f0000000300)=""/34, 0x22}, {&(0x7f00000009c0)=""/89, 0x59}, {&(0x7f0000000a40)=""/136, 0x88}, {&(0x7f0000000b00)=""/4096, 0x1000}], 0x5, &(0x7f0000001bc0)=""/96, 0x60}, 0x5}, {{&(0x7f0000001c40)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/2, 0x2}, {&(0x7f0000001cc0)=""/120, 0x78}, {&(0x7f0000002dc0)=""/136, 0x88}], 0x3, &(0x7f0000002e80)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000003e80)=@nfc_llcp, 0x80, &(0x7f0000004200)=[{&(0x7f0000001d40)=""/24, 0x18}, {&(0x7f0000003f00)=""/251, 0xfb}, {&(0x7f0000004000)=""/63, 0x3f}, {&(0x7f0000004040)=""/30, 0x1e}, {&(0x7f0000004080)=""/4, 0x4}, {&(0x7f00000040c0)}, {&(0x7f0000004100)=""/232, 0xe8}], 0x7, &(0x7f0000004280)=""/52, 0x34}, 0x1bf0000}], 0x3, 0x120, &(0x7f00000043c0)={r7, r8+60000000}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r9, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e24, 0x9, @remote, 0x30000000}, 0x1c) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004400)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@llc={0x4, {@snap={0x1, 0x1, "87e2", "7a3bd9", 0x805, "dd10149002f6de1f07ee398522d3124311f613e8"}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=r10, @ANYBLOB="000100008e8404003c001280090001005e6f6ee4000000002c000280050210000100000008001a00ffffffff050006000a00000005000100030000000800030008000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40891}, 0x20004090) 1.697144999s ago: executing program 2 (id=2799): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r0, 0x0) accept$ax25(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000000)={{{@in, @in=@private}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000140)=0xe8) socket$inet6(0xa, 0x5, 0x0) 1.623102214s ago: executing program 3 (id=2800): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0) 1.622761806s ago: executing program 4 (id=2801): socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) close(0x3) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3a6168654", 0x6}, {&(0x7f0000000a80)='\x00\x00\x00egS!\x00', 0x8}], 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @rand_addr=0x64010102}, {0x0, @random="fa486edc6f6a"}, 0x0, {0x2, 0x4e20, @remote}, 'xfrm0\x00'}) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) 1.501417876s ago: executing program 1 (id=2802): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0xfffffffffffffffc}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) (async) r1 = accept4(r0, &(0x7f0000000000)=@nl=@proc, &(0x7f0000000100)=0x80, 0x80000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x0) (async) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf68c}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x20008000) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d0001000700000000000000100a0210000100395900000000"], 0x1c}}, 0x0) 1.333002552s ago: executing program 3 (id=2804): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdce) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/18, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000003c0)={@private}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)) socket$netlink(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) 1.332221252s ago: executing program 1 (id=2805): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x18}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x70}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x9, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000040)=0x80) 1.299327442s ago: executing program 4 (id=2806): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x3, &(0x7f0000000100)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) 1.154440566s ago: executing program 3 (id=2807): unshare(0x22020400) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f0000000040)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x2, 0x2, 0x1, 0x1, 0x9, 0x20, 0xfffffffffffffff0}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @generic={0x4, 0x3, 0x8, 0x3, 0xfffffffd}]}, &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000140)="df", 0x1}], 0x1, 0x0) write(r3, &(0x7f0000000300)="6a8b63bd33", 0x5) (async, rerun: 32) ioctl$FIONCLEX(r1, 0x5450) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_mreq(r7, 0x3a, 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000140)={0x38, r6, 0x400, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x1) 1.082630752s ago: executing program 4 (id=2809): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1001a1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x0) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1001a1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000100000001800018014000200776c616e310000000000000000000000080006000300000008000700f3"], 0x3c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000100000001800018014000200776c616e310000000000000000000000080006000300000008000700f3"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000", @ANYRES64=r1, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRES32=r3, @ANYRES64=r0, @ANYRESOCT=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 1.046405674s ago: executing program 1 (id=2811): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f00000004000000040000001200000010300000", @ANYRES32, @ANYBLOB="0f00000000000000000000000000000000000000d45d159b814c0d8cb5f781c7315453701a02a779ba526db33ed29054b127a4a36e52ad1abafa7b21a464012995934e85da4305a8dcafcb409f2ae9f087e51ea7e98a46995a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) r3 = socket(0x10, 0x803, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0x10, 0x1000) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) bind$rds(r0, &(0x7f0000000200)={0xa, 0x0, @private}, 0x1c) 978.103701ms ago: executing program 0 (id=2812): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="7a0af8ff7525732cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000f700000000b2595285fa97ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5956fc4a33ca263e2b5d47b2b00000000b1a297cfddd73f30f2382f6c2d3ffdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000010000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e3841bef895c5a637b0bf2eac3cb07b74a72291a1a2b523dd81b6651b1ee29e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c92cdfbea882b0b18914781ceb10814cf4ee23ddb79fff5eb156e0a000000000000f2bd164a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8fdf3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c980000cfb215af2c1a3c22243cce23b00000a857d61b0d66c3f6da8aed31027c33204ea0fa0620111920d3f24980e9995a510bd87b06440a0a26130098b901c53a02cfbfd8bcbdec9f34542c3c9652adefde555ecd28ebc88082bab431ee3e1adb5b0ad14c79dd4411ecc96c512f3b72a9b3a0c3e07ec6b427bdc0bf3963e9f802a5feab82a989db62d8d1339f842b3f593d6c24fe015ec63c658ba7c4fae17514f802709ab4fa5caa932d4b65a5ecfc422899513ddde6ec04974f9981a8c155c26e0da70e524832ab04dec9ce66a62ceffbb15b1857c93666fe043a266a451f9a1e1f054211b9ae566b58f4f356c7a4054ce13f6fcc58912a175bd9cc3c494894ad39b36e34e608f4ac00cf22c27bb8c12bcf4beeb579fc9fa1c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x3c, r6, 0x509, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x20}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x4044000) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x1}}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_pressure(r10, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r11, &(0x7f0000000040)={'some', 0x20, 0x1, 0x20, 0xffffffffffffff3c}, 0x2f) r12 = socket$inet(0x10, 0x3, 0x0) r13 = accept4$tipc(r9, &(0x7f00000000c0), &(0x7f0000000400)=0x10, 0x800) setsockopt$TIPC_MCAST_BROADCAST(r13, 0x10f, 0x85) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) 896.537148ms ago: executing program 4 (id=2813): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'ipvlan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYRESOCT=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000001c0)={0x1adb9, 0x100c, 0x0, 0x7, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x2}}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @func={0x9}]}}, 0x0, 0x4a}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=@newtaction={0x48, 0x32, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r10, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="48001100", @ANYRES16=r10, @ANYBLOB="000127bd7000fddbdf250800000006000e00920000000c001000050000000000000008000b0000000000060002000100000008001700", @ANYRES32=r4, @ANYBLOB="08001800ac1e0101"], 0x48}}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan0\x00'}]}]}, 0x4c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 855.145825ms ago: executing program 3 (id=2814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x4, &(0x7f0000000000), 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="00006003ffffffffffffaaaaaaaaaa0286dd"], 0x32) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000000d080006400000008c080004400000001705000200940000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 763.775908ms ago: executing program 2 (id=2815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'dh\x00', 0x1, 0x4, 0x72}, 0x2c) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x4, 0x6, 0x77}, {@remote, 0x4e20, 0x10001, 0xc, 0x2}}, 0x44) (async) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r5, 0x2b5}, 0x8) (async) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={r5, 0x1}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 752.835964ms ago: executing program 0 (id=2816): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000160033060000000000000080ff0100000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d232000000fc02000000000000000000230000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000500000000000000ffffffffffffffff0000000000000000050000000000000004000000020000000000000006000000020000000a00049819000000000000000c0015005c073500010000"], 0xfc}, 0x1, 0x6000000000000000}, 0x0) 629.01166ms ago: executing program 0 (id=2817): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdce) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/18, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000003c0)={@private}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)) socket$netlink(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) 545.844678ms ago: executing program 2 (id=2818): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (async) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x4, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xfff1, 0xffff}, {0x6, 0xf2e7f6eb9de7c365}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x4, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xfff1, 0xffff}, {0x6, 0xf2e7f6eb9de7c365}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x1000000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x3}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x1000000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x3}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000100)={0x400, "e27be1"}, 0x6) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x3, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xee87}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x82}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}]}, 0x60}, 0x1, 0x0, 0x0, 0x40800}, 0x4008801) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x3, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xee87}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x82}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}]}, 0x60}, 0x1, 0x0, 0x0, 0x40800}, 0x4008801) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f00000002c0)={'b', ' *:* ', 'rwm\x00'}, 0xa) r10 = socket$inet(0x2, 0x3, 0x5) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x110, 0x2e0, 0x2e0, 0x110, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast2, @empty, 0x0, 0x0, 0x3, 0xe, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@remote}, 0x4, 0x5, 0xfff8, 0x91fe, 0x3, 0x0, 'bridge0\x00', 'veth1_to_bond\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0xff000000, 0xa, 0x2, {@mac=@random="0acc9bdf614c", {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x4, 0xfff7, 0x2, 0xf, 0xb, 0x0, 'veth0_to_bond\x00', 'pimreg1\x00', {}, {}, 0x0, 0x282}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r7, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}}], 0x2, 0x11, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r7) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r7) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x1c, r11, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000841) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x1c, r11, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000841) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907071200000f0000ff3f21000000170a001700000000040014001000030001302564aa25b9a64411f6bbf44dc48f57", 0x39}], 0x1) 475.463449ms ago: executing program 0 (id=2819): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="09000000040000000004000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {0x95, 0x0, 0x102}}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 420.899923ms ago: executing program 3 (id=2820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) write$6lowpan_enable(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r6}, 0x70) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syz_tun\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_bt_hci(r8, 0x800448d2, &(0x7f0000000400)="e4d7091de5a942f7fe6c97d1a470559ab70a5f09800d9bee") r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x9, 0x5, 0x9, 0x12, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 328.503822ms ago: executing program 0 (id=2821): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}]}, 0x1c}}, 0x40002) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}]}, 0x1c}}, 0x40002) (async) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 321.255609ms ago: executing program 2 (id=2822): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20004000, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) 170.403552ms ago: executing program 2 (id=2823): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/542], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000bc0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@empty, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'vmac(tnepres-generic)\x00'}}}]}, 0x184}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x64000) openat$tun(0xffffffffffffff9c, 0x0, 0x18103, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x9, 0x10001, 0xb, 0x81}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, 0x0, 0x0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x4e) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) 169.926796ms ago: executing program 3 (id=2824): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000026c0)=@raw={'raw\x00', 0x8, 0x3, 0x12a8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x11d8, 0xffffffff, 0xffffffff, 0x11d8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}}}}, {{@uncond, 0x0, 0x10d8, 0x1108, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0x6, {0x60c738bd}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x802, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1308) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x18) socket(0x2c, 0x3, 0x0) epoll_create1(0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x200008, 0x5, 0x4}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) 29.473308ms ago: executing program 0 (id=2825): ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)={0x7, 0x40, 0x4, 0x1, 0x5b80}) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x4000085) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r2], 0x50}, 0x1, 0x900000000000000}, 0x2) 28.627889ms ago: executing program 1 (id=2826): r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newchain={0x78, 0x64, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfffb, 0xfff2}, {0xfff3, 0xe}, {0xfff1, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xea, 0x6}}, @TCA_CHAIN={0xfffffffffffffe2d, 0xb, 0x8ffff}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @filter_kind_options=@f_u32, @TCA_CHAIN={0x8, 0xb, 0x72c9}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x400003}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x7ff}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffd, 0xfffffffe, 0xb, 0x1, 0xfffffffc, 0xffff, 0x5, 0x4000007}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) 0s ago: executing program 2 (id=2827): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0) kernel console output (not intermixed with test programs): tover after parsing attributes in process `syz.1.195'. [ 147.521032][ T6594] netlink: 'syz.0.201': attribute type 12 has an invalid length. [ 147.554223][ T6594] netlink: 132 bytes leftover after parsing attributes in process `syz.0.201'. [ 147.592845][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'. [ 147.605598][ T6597] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 147.708455][ T6594] bond1: Invalid ad_actor_system MAC address. [ 147.727081][ T6594] bond1: option ad_actor_system: invalid value (1) [ 147.741001][ T6594] bond1 (unregistering): Released all slaves [ 147.862929][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.207'. [ 148.105349][ T6624] IPVS: length: 94 != 24 [ 148.249548][ T6636] netlink: 'syz.4.211': attribute type 1 has an invalid length. [ 148.372022][ T6635] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 148.621938][ T6655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.776014][ T6655] bond0: (slave rose0): Enslaving as an active interface with an up link [ 148.813735][ T6665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.218'. [ 149.344824][ T6689] sctp: [Deprecated]: syz.1.224 (pid 6689) Use of int in max_burst socket option deprecated. [ 149.344824][ T6689] Use struct sctp_assoc_value instead [ 150.174820][ T6733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.234'. [ 150.407713][ T6740] netlink: 'syz.3.235': attribute type 33 has an invalid length. [ 151.067814][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.248'. [ 151.125851][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'. [ 151.142380][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'. [ 151.143369][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.272266][ T6787] netlink: 96 bytes leftover after parsing attributes in process `syz.3.250'. [ 151.321232][ T6771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.408439][ T6794] netlink: 96 bytes leftover after parsing attributes in process `syz.3.250'. [ 151.781496][ T6812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.257'. [ 152.156789][ T6835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 152.250236][ T6843] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20004 [ 152.477123][ T6857] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.268'. [ 152.930273][ T6882] netlink: 96 bytes leftover after parsing attributes in process `syz.2.275'. [ 153.047744][ T6885] netlink: 'syz.1.276': attribute type 4 has an invalid length. [ 153.425003][ T6911] netlink: 288 bytes leftover after parsing attributes in process `syz.4.284'. [ 153.554327][ T6905] lo: entered promiscuous mode [ 153.585839][ T6905] netlink: 'syz.0.281': attribute type 2 has an invalid length. [ 153.620555][ T6905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.996333][ T6939] netlink: 'syz.4.290': attribute type 7 has an invalid length. [ 154.090397][ T6943] SET target dimension over the limit! [ 154.213765][ T6951] syzkaller1: entered allmulticast mode [ 154.876338][ T6982] netlink: 'syz.1.305': attribute type 10 has an invalid length. [ 154.885951][ T6984] netlink: 'syz.0.306': attribute type 11 has an invalid length. [ 154.893920][ T6984] netlink: 'syz.0.306': attribute type 11 has an invalid length. [ 154.956071][ T6982] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 154.977158][ T6981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.232258][ T7001] tipc: Enabled bearer , priority 0 [ 155.241817][ T7001] syzkaller0: entered promiscuous mode [ 155.249398][ T7001] syzkaller0: entered allmulticast mode [ 155.262994][ T7001] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 155.414946][ T7001] tipc: Resetting bearer [ 155.424720][ T7007] netlink: 'syz.2.316': attribute type 13 has an invalid length. [ 155.637919][ T6999] tipc: Resetting bearer [ 155.662544][ T6999] tipc: Disabling bearer [ 155.700003][ T7027] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 155.719458][ T7027] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.196744][ T7059] __nla_validate_parse: 7 callbacks suppressed [ 156.196761][ T7059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.333'. [ 156.211917][ T7053] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.214268][ T7053] bond0: (slave bond2): Enslaving as an active interface with an up link [ 156.250329][ T7063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.333'. [ 156.272077][ T7054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.331'. [ 156.479741][ T7060] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 157.016452][ T7092] netlink: 'syz.2.344': attribute type 10 has an invalid length. [ 157.132197][ T7099] syzkaller0: entered promiscuous mode [ 157.147673][ T7099] syzkaller0: entered allmulticast mode [ 157.192870][ T7106] bridge_slave_0: left allmulticast mode [ 157.235113][ T7106] bridge_slave_0: left promiscuous mode [ 157.244757][ T7109] netlink: 64 bytes leftover after parsing attributes in process `syz.0.349'. [ 157.284748][ T7106] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.305822][ T7106] bridge_slave_1: left allmulticast mode [ 157.311806][ T7106] bridge_slave_1: left promiscuous mode [ 157.318065][ T7106] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.335525][ T7106] bond0: (slave bond_slave_0): Releasing backup interface [ 157.348332][ T7106] bond0: (slave bond_slave_1): Releasing backup interface [ 157.364602][ T7106] team0: Port device team_slave_0 removed [ 157.366970][ T7117] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.350'. [ 157.385371][ T7106] team0: Port device team_slave_1 removed [ 157.391748][ T7106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.399191][ T7106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.407731][ T7106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.416265][ T7106] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 157.459145][ T7109] team0: Mode changed to "loadbalance" [ 157.485809][ T7117] lo: Caught tx_queue_len zero misconfig [ 157.591660][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 157.884197][ T7142] netlink: 76 bytes leftover after parsing attributes in process `syz.0.361'. [ 157.894380][ T7139] syzkaller1: entered promiscuous mode [ 157.899870][ T7139] syzkaller1: entered allmulticast mode [ 157.947419][ T7142] TC_ACT_REPEAT abuse ? [ 158.040389][ T7148] unsupported nlmsg_type 40 [ 158.188539][ T7150] netlink: 'syz.0.365': attribute type 2 has an invalid length. [ 158.210067][ T7152] netlink: 'syz.0.365': attribute type 2 has an invalid length. [ 158.226224][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'. [ 158.233338][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 158.246147][ T7152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 158.259653][ T7154] netlink: 'syz.3.364': attribute type 64 has an invalid length. [ 158.291479][ T7160] nbd: must specify at least one socket [ 158.540790][ T7174] tipc: Started in network mode [ 158.570478][ T7174] tipc: Node identity , cluster identity 4711 [ 158.590779][ T7174] tipc: Failed to set node id, please configure manually [ 158.610707][ T7174] tipc: Enabling of bearer rejected, failed to enable media [ 158.760546][ T7187] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 158.850338][ T7189] team0: Device gtp0 is of different type [ 158.877339][ T7198] Bluetooth: MGMT ver 1.23 [ 158.890898][ T7194] dvmrp0: entered allmulticast mode [ 158.898442][ T7194] syzkaller0: entered promiscuous mode [ 158.904310][ T7194] syzkaller0: entered allmulticast mode [ 159.355977][ T7216] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 159.592510][ T7232] netlink: 'syz.1.388': attribute type 1 has an invalid length. [ 159.974367][ T7252] sctp: [Deprecated]: syz.0.396 (pid 7252) Use of int in max_burst socket option. [ 159.974367][ T7252] Use struct sctp_assoc_value instead [ 160.040012][ T7253] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 160.171332][ T7260] vlan0: entered allmulticast mode [ 160.177715][ T7260] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 160.348329][ T7275] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 161.159058][ T7316] netlink: 'syz.1.420': attribute type 4 has an invalid length. [ 161.308780][ T7321] netlink: 'syz.4.422': attribute type 21 has an invalid length. [ 161.388028][ T7326] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.462245][ T7345] __nla_validate_parse: 10 callbacks suppressed [ 161.462263][ T7345] netlink: 48 bytes leftover after parsing attributes in process `syz.1.427'. [ 161.501125][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'. [ 161.512342][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 175.243921][ T7353] netlink: 88 bytes leftover after parsing attributes in process `syz.3.429'. [ 175.253383][ T7353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.429'. [ 175.262268][ T7353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.429'. [ 175.341338][ T7353] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.429'. [ 175.600751][ T7375] ªªªªªª: renamed from wg2 (while UP) [ 175.669017][ T1217] IPVS: starting estimator thread 0... [ 175.695625][ T7377] IPVS: dh: FWM 3 0x00000003 - no destination available [ 175.776822][ T7382] IPVS: using max 32 ests per chain, 76800 per kthread [ 175.806303][ T7383] block nbd0: server does not support multiple connections per device. [ 175.859611][ T7383] block nbd0: shutting down sockets [ 175.913342][ T7389] block nbd2: not configured, cannot reconfigure [ 175.948548][ T7393] sctp: [Deprecated]: syz.1.442 (pid 7393) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.948548][ T7393] Use struct sctp_sack_info instead [ 175.980251][ T7394] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 176.034976][ T7394] netlink: 'syz.3.441': attribute type 33 has an invalid length. [ 176.062705][ T7394] netlink: 152 bytes leftover after parsing attributes in process `syz.3.441'. [ 176.251890][ T7404] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 176.305894][ T7413] Bluetooth: MGMT ver 1.23 [ 176.317731][ T7404] bond3: (slave lo): Enslaving as a backup interface with an up link [ 176.364060][ T7404] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 176.433745][ T7409] netlink: 288 bytes leftover after parsing attributes in process `syz.0.445'. [ 176.499052][ T7423] netlink: 156 bytes leftover after parsing attributes in process `syz.2.448'. [ 176.510582][ T7423] netlink: 156 bytes leftover after parsing attributes in process `syz.2.448'. [ 176.592475][ T7428] netlink: 18 bytes leftover after parsing attributes in process `syz.1.449'. [ 176.773167][ T7435] ip6tnl0: Caught tx_queue_len zero misconfig [ 176.799678][ T7433] pimreg: entered allmulticast mode [ 176.837921][ T7433] bridge1: entered promiscuous mode [ 176.849792][ T7433] bridge1: entered allmulticast mode [ 176.878529][ T7433] team0: Port device bridge1 added [ 176.899275][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'. [ 176.928931][ T7438] bridge0: port 3(team0) entered blocking state [ 176.944067][ T7438] bridge0: port 3(team0) entered disabled state [ 176.958107][ T7438] team0: entered allmulticast mode [ 176.982838][ T7438] team_slave_0: entered allmulticast mode [ 176.999076][ T7438] team_slave_1: entered allmulticast mode [ 177.022526][ T7438] team0: entered promiscuous mode [ 177.042008][ T7438] team_slave_0: entered promiscuous mode [ 177.062561][ T7438] team_slave_1: entered promiscuous mode [ 177.370162][ T7459] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 177.379780][ T7461] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 177.410010][ T7461] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 177.855359][ T7486] macvtap1: entered promiscuous mode [ 177.883338][ T7486] vlan0: entered promiscuous mode [ 177.888798][ T7486] macvtap1: entered allmulticast mode [ 177.905605][ T7448] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 177.935258][ T7486] vlan0: entered allmulticast mode [ 177.948767][ T7486] veth0_vlan: entered allmulticast mode [ 178.523466][ T7520] veth0_macvtap: left promiscuous mode [ 178.639859][ T7523] tipc: Enabled bearer , priority 0 [ 178.684508][ T7523] syzkaller0: entered promiscuous mode [ 178.692148][ T7533] netlink: 'syz.4.486': attribute type 10 has an invalid length. [ 178.713316][ T7523] syzkaller0: entered allmulticast mode [ 178.738217][ T7523] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 178.748332][ T7527] Cannot find add_set index 1 as target [ 178.784186][ T7523] tipc: Resetting bearer [ 178.805793][ T7522] tipc: Resetting bearer [ 178.835368][ T7522] tipc: Disabling bearer [ 179.110475][ T7550] netlink: 'syz.3.492': attribute type 1 has an invalid length. [ 179.354751][ T7569] tipc: Enabling of bearer rejected, failed to enable media [ 179.411461][ T7569] syzkaller0: entered promiscuous mode [ 179.446252][ T7569] syzkaller0: entered allmulticast mode [ 179.695438][ T7588] bond0: Caught tx_queue_len zero misconfig [ 179.854393][ T7599] dvmrp0: entered allmulticast mode [ 179.903726][ T7601] sit0: entered promiscuous mode [ 179.912783][ T7601] netlink: 'syz.3.506': attribute type 1 has an invalid length. [ 180.317790][ T7621] netlink: 'syz.2.514': attribute type 1 has an invalid length. [ 180.501112][ T7627] bond3: (slave gretap1): making interface the new active one [ 180.510609][ T7627] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 180.631480][ T7639] __nla_validate_parse: 10 callbacks suppressed [ 180.631497][ T7639] netlink: 108 bytes leftover after parsing attributes in process `syz.3.517'. [ 180.666916][ T7639] netlink: 108 bytes leftover after parsing attributes in process `syz.3.517'. [ 180.710055][ T7639] netlink: 108 bytes leftover after parsing attributes in process `syz.3.517'. [ 180.755429][ T7639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.517'. [ 180.839627][ T7651] netlink: 'syz.2.524': attribute type 10 has an invalid length. [ 180.863824][ T7651] netlink: 40 bytes leftover after parsing attributes in process `syz.2.524'. [ 180.918730][ T7651] team0: Port device geneve0 added [ 181.150146][ T7667] bond0: (slave bond_slave_0): Releasing backup interface [ 181.160038][ T7667] bond0: (slave bond_slave_1): Releasing backup interface [ 181.176543][ T7667] team0: Port device team_slave_0 removed [ 181.201350][ T7671] netlink: 64 bytes leftover after parsing attributes in process `syz.2.529'. [ 181.204183][ T7667] team0: Port device team_slave_1 removed [ 181.217830][ T7667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.225882][ T7667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.235199][ T7667] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 181.262335][ T7671] team0: No ports can be present during mode change [ 181.385895][ T7679] netlink: 56 bytes leftover after parsing attributes in process `syz.3.533'. [ 181.430562][ T7679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.533'. [ 181.448557][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.533'. [ 181.491450][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 182.165271][ T7718] macsec1: entered promiscuous mode [ 182.205378][ T7718] macsec1: entered allmulticast mode [ 182.224933][ T7718] bond2: (slave macsec1): Error -34 calling dev_set_mtu [ 182.295465][ T7730] netlink: 'syz.2.551': attribute type 8 has an invalid length. [ 182.301499][ T7723] macsec1: entered promiscuous mode [ 182.312548][ T7723] macsec1: entered allmulticast mode [ 182.320698][ T7723] bond2: (slave macsec1): Error -34 calling dev_set_mtu [ 182.331843][ T7732] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 182.342808][ T7732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.811911][ T7751] netlink: 'syz.2.561': attribute type 13 has an invalid length. [ 183.113038][ T7774] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 183.138735][ T1226] IPVS: starting estimator thread 0... [ 183.158743][ T7780] Cannot find add_set index 0 as target [ 183.246120][ T7782] IPVS: using max 28 ests per chain, 67200 per kthread [ 183.336359][ T7791] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 183.374925][ T7791] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 183.526164][ T7803] vlan2: entered allmulticast mode [ 183.531316][ T7803] gretap0: entered allmulticast mode [ 183.642944][ T7821] bond4: peer notification delay (16) is not a multiple of miimon (100), value rounded to 0 ms [ 183.657990][ T7821] bond4 (unregistering): Released all slaves [ 183.745001][ T7832] netlink: 'syz.0.584': attribute type 11 has an invalid length. [ 183.922273][ T7845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.076484][ T7854] FAULT_INJECTION: forcing a failure. [ 184.076484][ T7854] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 184.090786][ T7854] CPU: 1 UID: 0 PID: 7854 Comm: syz.0.592 Not tainted syzkaller #0 PREEMPT(full) [ 184.090808][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.090823][ T7854] Call Trace: [ 184.090830][ T7854] [ 184.090837][ T7854] dump_stack_lvl+0x189/0x250 [ 184.090871][ T7854] ? __pfx____ratelimit+0x10/0x10 [ 184.090884][ T7854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.090896][ T7854] ? __pfx__printk+0x10/0x10 [ 184.090906][ T7854] ? __might_fault+0xb0/0x130 [ 184.090924][ T7854] should_fail_ex+0x414/0x560 [ 184.090942][ T7854] _copy_from_user+0x2d/0xb0 [ 184.090954][ T7854] __sys_sendto+0x25c/0x520 [ 184.090965][ T7854] ? __pfx___sys_sendto+0x10/0x10 [ 184.090972][ T7854] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 184.090992][ T7854] ? __fget_files+0x3a0/0x420 [ 184.091006][ T7854] ? ksys_write+0x22a/0x250 [ 184.091021][ T7854] ? __pfx_ksys_write+0x10/0x10 [ 184.091035][ T7854] __x64_sys_sendto+0xde/0x100 [ 184.091046][ T7854] do_syscall_64+0xfa/0xfa0 [ 184.091058][ T7854] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.091070][ T7854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.091079][ T7854] ? clear_bhb_loop+0x60/0xb0 [ 184.091090][ T7854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.091099][ T7854] RIP: 0033:0x7f1a3ad8f6c9 [ 184.091114][ T7854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.091121][ T7854] RSP: 002b:00007f1a3bbc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 184.091139][ T7854] RAX: ffffffffffffffda RBX: 00007f1a3afe5fa0 RCX: 00007f1a3ad8f6c9 [ 184.091146][ T7854] RDX: 0000000000000036 RSI: 0000200000000140 RDI: 0000000000000008 [ 184.091152][ T7854] RBP: 00007f1a3bbc7090 R08: 00002000000001c0 R09: 0000000000000014 [ 184.091158][ T7854] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 184.091163][ T7854] R13: 00007f1a3afe6038 R14: 00007f1a3afe5fa0 R15: 00007ffe24b4b668 [ 184.091179][ T7854] [ 184.377295][ T7860] syzkaller0: entered promiscuous mode [ 184.387402][ T7860] syzkaller0: entered allmulticast mode [ 184.774634][ T7870] netlink: 'syz.3.596': attribute type 1 has an invalid length. [ 185.050939][ T7887] IPVS: persistence engine module ip_vs_pe_À not found [ 185.932664][ T7891] hsr_slave_0 (unregistering): left promiscuous mode [ 185.942250][ T7887] __nla_validate_parse: 20 callbacks suppressed [ 185.942265][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 185.958817][ T7887] netlink: 'syz.3.601': attribute type 22 has an invalid length. [ 185.967663][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'. [ 186.013409][ T146] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.022317][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 186.032174][ T7887] netlink: 'syz.3.601': attribute type 22 has an invalid length. [ 186.040805][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'. [ 186.052480][ T146] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.099320][ T1314] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.110991][ T1314] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.168184][ T7912] FAULT_INJECTION: forcing a failure. [ 186.168184][ T7912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.187788][ T7910] tipc: Started in network mode [ 186.196923][ T7910] tipc: Node identity 626edc9875da, cluster identity 4711 [ 186.207038][ T7912] CPU: 1 UID: 0 PID: 7912 Comm: syz.1.608 Not tainted syzkaller #0 PREEMPT(full) [ 186.207062][ T7912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.207072][ T7912] Call Trace: [ 186.207079][ T7912] [ 186.207087][ T7912] dump_stack_lvl+0x189/0x250 [ 186.207113][ T7912] ? __pfx____ratelimit+0x10/0x10 [ 186.207136][ T7912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.207164][ T7912] ? __pfx__printk+0x10/0x10 [ 186.207194][ T7912] should_fail_ex+0x414/0x560 [ 186.207224][ T7912] _copy_to_user+0x31/0xb0 [ 186.207248][ T7912] simple_read_from_buffer+0xe1/0x170 [ 186.207276][ T7912] proc_fail_nth_read+0x1b3/0x220 [ 186.207301][ T7912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.207324][ T7912] ? rw_verify_area+0x2a6/0x4d0 [ 186.207344][ T7912] ? __lock_acquire+0xab9/0xd20 [ 186.207358][ T7912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.207376][ T7912] vfs_read+0x200/0xa30 [ 186.207396][ T7912] ? fdget_pos+0x247/0x320 [ 186.207415][ T7912] ? __pfx___mutex_lock+0x10/0x10 [ 186.207438][ T7912] ? __pfx_vfs_read+0x10/0x10 [ 186.207461][ T7912] ? __fget_files+0x2a/0x420 [ 186.207481][ T7912] ? __fget_files+0x3a0/0x420 [ 186.207495][ T7912] ? __fget_files+0x2a/0x420 [ 186.207519][ T7912] ksys_read+0x145/0x250 [ 186.207543][ T7912] ? __pfx_ksys_read+0x10/0x10 [ 186.207568][ T7912] ? do_syscall_64+0xbe/0xfa0 [ 186.207594][ T7912] do_syscall_64+0xfa/0xfa0 [ 186.207615][ T7912] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.207636][ T7912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.207653][ T7912] ? clear_bhb_loop+0x60/0xb0 [ 186.207673][ T7912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.207690][ T7912] RIP: 0033:0x7f3a5d18e0dc [ 186.207705][ T7912] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 186.207718][ T7912] RSP: 002b:00007f3a5e0a1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.207737][ T7912] RAX: ffffffffffffffda RBX: 00007f3a5d3e5fa0 RCX: 00007f3a5d18e0dc [ 186.207749][ T7912] RDX: 000000000000000f RSI: 00007f3a5e0a10a0 RDI: 0000000000000009 [ 186.207760][ T7912] RBP: 00007f3a5e0a1090 R08: 0000000000000000 R09: 0000000000000014 [ 186.207770][ T7912] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 186.207780][ T7912] R13: 00007f3a5d3e6038 R14: 00007f3a5d3e5fa0 R15: 00007ffefeadc778 [ 186.207809][ T7912] [ 186.464412][ T7910] tipc: Enabled bearer , priority 0 [ 186.531351][ T7920] syzkaller0: entered promiscuous mode [ 186.537591][ T7920] syzkaller0: entered allmulticast mode [ 186.548281][ T7920] tipc: Resetting bearer [ 186.595730][ T7908] tipc: Resetting bearer [ 186.626371][ T7922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.799274][ T7936] netlink: 32 bytes leftover after parsing attributes in process `syz.2.613'. [ 187.910645][ T7908] tipc: Disabling bearer [ 187.986157][ T1226] tipc: Node number set to 397728920 [ 188.111607][ T7985] veth0_to_bridge: entered promiscuous mode [ 188.123300][ T7988] raw_sendmsg: syz.1.626 forgot to set AF_INET. Fix it! [ 188.130634][ T7983] veth0_to_bridge: left promiscuous mode [ 188.326530][ T8004] : renamed from hsr0 (while UP) [ 188.480949][ T8017] netlink: 96 bytes leftover after parsing attributes in process `syz.1.637'. [ 188.576444][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.641'. [ 188.585472][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.641'. [ 188.622511][ T8025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.640'. [ 188.692547][ T8034] netlink: 'syz.3.641': attribute type 18 has an invalid length. [ 188.762695][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'. [ 189.329834][ T8078] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 189.730152][ T8104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.130521][ T8126] dvmrp0: entered allmulticast mode [ 190.256555][ C0] Unknown status report in ack skb [ 190.429962][ T8151] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 190.579681][ T8163] macvtap0: entered promiscuous mode [ 190.600716][ T8163] vlan0: entered promiscuous mode [ 190.607159][ T8163] macvtap0: entered allmulticast mode [ 190.612550][ T8163] vlan0: entered allmulticast mode [ 190.621478][ T8163] veth0_vlan: entered allmulticast mode [ 190.651709][ T8165] macvtap1: entered promiscuous mode [ 190.667760][ T8165] macvtap1: entered allmulticast mode [ 190.690504][ T8172] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 190.979724][ T8196] __nla_validate_parse: 19 callbacks suppressed [ 190.979741][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 191.042160][ T8198] netlink: 'syz.1.695': attribute type 12 has an invalid length. [ 191.315656][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.704'. [ 191.372360][ T8225] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 191.395359][ T8225] bond4 (unregistering): Released all slaves [ 191.437460][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.706'. [ 191.500825][ T8235] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 191.533403][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'. [ 191.642631][ T8244] netlink: 'syz.3.709': attribute type 1 has an invalid length. [ 191.705223][ T8244] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.739449][ T8244] ip6erspan0: entered promiscuous mode [ 191.750758][ T8244] bond4: (slave ip6erspan0): making interface the new active one [ 191.760406][ T8244] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 191.809212][ T8250] netlink: 36 bytes leftover after parsing attributes in process `syz.4.712'. [ 191.846877][ T8255] netlink: 64 bytes leftover after parsing attributes in process `syz.1.713'. [ 191.848582][ T8254] bridge_slave_0: left allmulticast mode [ 191.861522][ T8254] bridge_slave_0: left promiscuous mode [ 191.868511][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.886893][ T8254] bridge_slave_1: left allmulticast mode [ 191.892644][ T8254] bridge_slave_1: left promiscuous mode [ 191.898506][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.921447][ T8254] bond0: (slave bond_slave_0): Releasing backup interface [ 191.958767][ T8254] bond0: (slave bond_slave_1): Releasing backup interface [ 191.989841][ T8254] team0: Port device team_slave_0 removed [ 192.019321][ T8254] team0: Port device team_slave_1 removed [ 192.035277][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.042894][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.054779][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.062328][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.074894][ T8254] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 192.096623][ T8271] netlink: 68 bytes leftover after parsing attributes in process `syz.2.718'. [ 192.109885][ T8255] team0: Mode changed to "loadbalance" [ 192.194951][ T8272] netlink: 68 bytes leftover after parsing attributes in process `syz.2.718'. [ 192.404473][ T8286] netlink: 48 bytes leftover after parsing attributes in process `syz.0.723'. [ 192.413530][ T8290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.415211][ T8290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.434385][ T8291] lo: Caught tx_queue_len zero misconfig [ 192.471960][ T8293] C: renamed from team_slave_0 (while UP) [ 192.486013][ T8293] netlink: 'syz.3.726': attribute type 1 has an invalid length. [ 192.498377][ T8293] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 192.541714][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 192.557070][ T8296] kthread_run failed with err -4 [ 192.617704][ T8306] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 192.677572][ T8308] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 192.710496][ T8312] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:20003 [ 192.759386][ T8308] team0: No ports can be present during mode change [ 193.157025][ T8343] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.190683][ T8341] syzkaller0: entered promiscuous mode [ 193.196856][ T8341] syzkaller0: entered allmulticast mode [ 193.287208][ T8353] netlink: 'syz.4.750': attribute type 11 has an invalid length. [ 193.312231][ T8357] netlink: 'syz.4.750': attribute type 11 has an invalid length. [ 193.321318][ T8343] team0: No ports can be present during mode change [ 193.474862][ T8365] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 193.653251][ T8378] nbd: must specify a size in bytes for the device [ 193.709686][ T8387] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 194.054571][ T8399] netlink: 'syz.1.765': attribute type 1 has an invalid length. [ 194.168101][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.180820][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.909533][ T8408] syzkaller1: entered promiscuous mode [ 195.915848][ T8408] syzkaller1: entered allmulticast mode [ 196.080118][ T8442] __nla_validate_parse: 8 callbacks suppressed [ 196.080135][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 196.205829][ T8451] netlink: 168 bytes leftover after parsing attributes in process `syz.3.780'. [ 196.231113][ T8451] netlink: 'syz.3.780': attribute type 21 has an invalid length. [ 196.268419][ T8451] netlink: 'syz.3.780': attribute type 1 has an invalid length. [ 196.285796][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 196.305269][ T8463] vxcan1: entered promiscuous mode [ 196.310421][ T8463] vxcan1: entered allmulticast mode [ 196.327035][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.778'. [ 196.348426][ T8462] netlink: 76 bytes leftover after parsing attributes in process `syz.1.782'. [ 196.399417][ T8462] netlink: 'syz.1.782': attribute type 1 has an invalid length. [ 196.478309][ T8462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 196.784828][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 196.797515][ T8486] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.788'. [ 197.177605][ T8496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.793'. [ 197.282984][ T8501] netlink: 'syz.1.794': attribute type 33 has an invalid length. [ 197.645744][ T8498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.794'. [ 197.655690][ T8509] netlink: 'syz.4.796': attribute type 63 has an invalid length. [ 197.663812][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.797'. [ 198.451413][ T36] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x9e [ 198.468890][ T8560] delete_channel: no stack [ 198.651186][ T8570] vlan1: entered allmulticast mode [ 198.664654][ T8570] gretap0: entered allmulticast mode [ 198.752346][ T8573] netlink: 'syz.3.812': attribute type 63 has an invalid length. [ 199.376348][ T8595] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 199.529701][ T8607] netlink: 'syz.4.824': attribute type 4 has an invalid length. [ 199.815291][ T8623] pimreg: entered allmulticast mode [ 200.426875][ T8672] netlink: 'syz.0.843': attribute type 1 has an invalid length. [ 200.796338][ T8705] netlink: 'syz.3.851': attribute type 10 has an invalid length. [ 200.806967][ T8705] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.823894][ T8705] bridge_slave_1: left allmulticast mode [ 200.829570][ T8705] bridge_slave_1: left promiscuous mode [ 200.855268][ T8705] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.906427][ T8705] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 200.947766][ T8711] netlink: 'syz.1.854': attribute type 1 has an invalid length. [ 200.980360][ T8711] netlink: 'syz.1.854': attribute type 2 has an invalid length. [ 201.068026][ T8719] tipc: Enabled bearer , priority 0 [ 201.095415][ T8719] syzkaller0: entered promiscuous mode [ 201.107582][ T8719] syzkaller0: entered allmulticast mode [ 201.181136][ T8719] tipc: Resetting bearer [ 201.211581][ T8718] tipc: Resetting bearer [ 201.242269][ T8718] tipc: Disabling bearer [ 201.444234][ T1226] IPVS: starting estimator thread 0... [ 201.469883][ T8748] __nla_validate_parse: 15 callbacks suppressed [ 201.469900][ T8748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.864'. [ 201.544978][ T8746] IPVS: using max 31 ests per chain, 74400 per kthread [ 201.566259][ T8743] bond5 (unregistering): Released all slaves [ 201.596165][ T8757] batadv_slave_1: entered promiscuous mode [ 201.597014][ T8755] netlink: 48 bytes leftover after parsing attributes in process `syz.1.866'. [ 201.633372][ T8756] batadv_slave_1: left promiscuous mode [ 201.811739][ T8773] netlink: 96 bytes leftover after parsing attributes in process `syz.4.873'. [ 201.830337][ T8773] vlan2: entered allmulticast mode [ 201.836177][ T8773] gretap0: entered allmulticast mode [ 201.968767][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.877'. [ 201.981435][ T8783] netlink: 'syz.4.876': attribute type 4 has an invalid length. [ 202.227461][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 202.238480][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 202.623950][ T8835] netlink: 60 bytes leftover after parsing attributes in process `syz.1.895'. [ 202.647778][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 202.654875][ T8835] trusted_key: syz.1.895 sent an empty control message without MSG_MORE. [ 202.694742][ T8835] netlink: 100 bytes leftover after parsing attributes in process `syz.1.895'. [ 202.755954][ T8845] x_tables: duplicate underflow at hook 1 [ 202.775686][ T8849] netlink: 36 bytes leftover after parsing attributes in process `syz.0.900'. [ 202.968778][ T8858] bond4: Removing last arp target with arp_interval on [ 203.203968][ T8882] sctp: [Deprecated]: syz.2.910 (pid 8882) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.203968][ T8882] Use struct sctp_sack_info instead [ 204.632951][ T8980] can: request_module (can-proto-5) failed. [ 205.543036][ T8968] tipc: Enabled bearer , priority 0 [ 205.563622][ T8976] syzkaller0: entered promiscuous mode [ 205.569141][ T8976] syzkaller0: entered allmulticast mode [ 205.656473][ T8987] tipc: Resetting bearer [ 205.681294][ T8967] tipc: Resetting bearer [ 205.702386][ T8967] tipc: Disabling bearer [ 205.805562][ T9004] netlink: 'syz.0.947': attribute type 29 has an invalid length. [ 205.824260][ T9004] netlink: 'syz.0.947': attribute type 29 has an invalid length. [ 206.000837][ T9018] syz_tun: entered allmulticast mode [ 206.138131][ T9030] netlink: 'syz.4.958': attribute type 1 has an invalid length. [ 206.249090][ T9040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.414578][ T9053] !€ÿ: renamed from bond_slave_0 (while UP) [ 206.510014][ T9057] __nla_validate_parse: 16 callbacks suppressed [ 206.510031][ T9057] netlink: 32 bytes leftover after parsing attributes in process `syz.3.964'. [ 206.624404][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 206.642960][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 206.740000][ T9073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.970'. [ 206.761902][ T9073] pim6reg: entered allmulticast mode [ 206.768528][ T9073] pim6reg: left allmulticast mode [ 206.852233][ T9077] netlink: 104 bytes leftover after parsing attributes in process `syz.1.971'. [ 206.924880][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 206.930873][ T9085] netlink: 'syz.1.974': attribute type 23 has an invalid length. [ 206.951163][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 207.044509][ T5902] IPVS: starting estimator thread 0... [ 207.052679][ T9094] netlink: del zone limit has 4 unknown bytes [ 207.084188][ T9098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.100644][ T9098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.977'. [ 207.119432][ T9100] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 207.142536][ T9094] syz.1.976 (9094) used greatest stack depth: 15320 bytes left [ 207.150281][ T9096] IPVS: using max 32 ests per chain, 76800 per kthread [ 207.346441][ T9109] netlink: 'syz.3.982': attribute type 83 has an invalid length. [ 207.467950][ T9124] netlink: 48 bytes leftover after parsing attributes in process `syz.4.983'. [ 207.486892][ T9120] team0 (unregistering): left allmulticast mode [ 207.493719][ T9120] team_slave_0: left allmulticast mode [ 207.499200][ T9120] team_slave_1: left allmulticast mode [ 207.504783][ T9120] bridge1: left allmulticast mode [ 207.509815][ T9120] team0 (unregistering): left promiscuous mode [ 207.516158][ T9120] team_slave_0: left promiscuous mode [ 207.522186][ T9120] team_slave_1: left promiscuous mode [ 207.528269][ T9120] bridge1: left promiscuous mode [ 207.535652][ T9120] bridge0: port 3(team0) entered disabled state [ 207.547291][ T9120] team0 (unregistering): Port device team_slave_0 removed [ 207.556224][ T9120] team0 (unregistering): Port device team_slave_1 removed [ 207.567076][ T9120] team0 (unregistering): Port device bridge1 removed [ 207.742426][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'. [ 208.090330][ T9166] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.732329][ T9168] netlink: 'syz.2.991': attribute type 4 has an invalid length. [ 209.000283][ T9208] Cannot find add_set index 0 as target [ 209.299561][ T9235] netlink: zone id is out of range [ 209.342322][ T9235] netlink: zone id is out of range [ 209.348044][ T9235] netlink: zone id is out of range [ 209.356982][ T9235] netlink: get zone limit has 4 unknown bytes [ 209.527376][ T8694] nci: nci_ntf_packet: unknown ntf opcode 0x25 [ 209.596839][ T9257] team0: Device wireguard0 is of different type [ 209.637459][ T9261] bond3: Unable to set up delay as MII monitoring is disabled [ 209.646738][ T9261] bond3 (unregistering): Released all slaves [ 210.178266][ T9289] netlink: 'syz.1.1034': attribute type 1 has an invalid length. [ 211.389916][ T9324] netlink: 'syz.4.1046': attribute type 5 has an invalid length. [ 211.462880][ T9331] bridge0: port 1(ipvlan2) entered blocking state [ 211.482819][ T9331] bridge0: port 1(ipvlan2) entered disabled state [ 211.503141][ T9331] ipvlan2: entered allmulticast mode [ 211.512236][ T9331] bridge0: entered allmulticast mode [ 211.536913][ T9331] ipvlan2: left allmulticast mode [ 211.542870][ T9331] bridge0: left allmulticast mode [ 211.607863][ T9339] __nla_validate_parse: 14 callbacks suppressed [ 211.607879][ T9339] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1051'. [ 211.744531][ T9350] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 211.753485][ T9350] bond3: option packets_per_slave: allowed values 0 - 65535 [ 211.767864][ T9350] bond3 (unregistering): Released all slaves [ 211.781992][ T9358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1056'. [ 211.795480][ T9358] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1056'. [ 211.804682][ T9358] team0: No ports can be present during mode change [ 211.971735][ T9369] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1059'. [ 212.037787][ T9376] syzkaller0: entered promiscuous mode [ 212.046296][ T9376] syzkaller0: entered allmulticast mode [ 212.123836][ T9383] netlink: 'syz.3.1062': attribute type 11 has an invalid length. [ 212.144982][ T9383] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.1062'. [ 212.254669][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1062'. [ 212.307834][ T9387] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1064'. [ 212.484078][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 212.720189][ T9413] ip6_vti0: entered allmulticast mode [ 212.755415][ T9404] ip6_vti0: left allmulticast mode [ 212.881405][ T9421] netlink: 'syz.2.1076': attribute type 10 has an invalid length. [ 212.892800][ T9421] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1076'. [ 213.019554][ T9430] netlink: 'syz.4.1079': attribute type 39 has an invalid length. [ 213.169436][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1079'. [ 213.204422][ T9444] netlink: 'syz.1.1084': attribute type 1 has an invalid length. [ 213.223835][ T9444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.236096][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1085'. [ 213.685141][ T9469] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 213.892173][ T9486] netlink: 'syz.1.1097': attribute type 2 has an invalid length. [ 213.917192][ T9493] netlink: 'syz.1.1097': attribute type 2 has an invalid length. [ 214.020939][ T9498] netlink: 'syz.2.1099': attribute type 9 has an invalid length. [ 214.044416][ T9498] SET target dimension over the limit! [ 214.099354][ T9504] veth1_to_bond: entered allmulticast mode [ 214.263730][ T9504] veth1_to_bond (unregistering): left allmulticast mode [ 214.302120][ T9510] v: renamed from vlan0 (while UP) [ 214.425629][ T5851] Bluetooth: hci4: link tx timeout [ 214.431280][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.441089][ T5851] Bluetooth: hci4: link tx timeout [ 214.447053][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.479566][ T9523] syzkaller0: entered promiscuous mode [ 214.484149][ T9519] sctp: [Deprecated]: syz.3.1106 (pid 9519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.484149][ T9519] Use struct sctp_sack_info instead [ 214.485446][ T9523] syzkaller0: entered allmulticast mode [ 214.515792][ T9523] 0: reclassify loop, rule prio 0, protocol 800 [ 215.251690][ T9577] blkio.reset_stats is deprecated [ 215.271824][ T9579] netlink: 'syz.1.1128': attribute type 1 has an invalid length. [ 215.294166][ T9577] ipt_ECN: cannot use operation on non-tcp rule [ 215.451414][ T9590] team0: No ports can be present during mode change [ 215.566505][ T9599] netlink: 'syz.1.1135': attribute type 83 has an invalid length. [ 215.580944][ T9599] netlink: 'syz.1.1135': attribute type 10 has an invalid length. [ 215.691643][ T9598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.711183][ T9602] vlan4: entered allmulticast mode [ 215.720770][ T9602] bond1: entered allmulticast mode [ 216.131673][ T9638] team0: Unable to change to the same mode the team is in [ 216.158180][ T9640] vlan2: entered allmulticast mode [ 216.272741][ T9645] veth5: entered promiscuous mode [ 216.290454][ T9645] veth5: entered allmulticast mode [ 216.485197][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 216.701133][ T9676] __nla_validate_parse: 26 callbacks suppressed [ 216.701151][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1163'. [ 216.740691][ T9678] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1165'. [ 216.821730][ T9683] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1163'. [ 216.912483][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'. [ 217.051919][ T9697] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1174'. [ 217.092402][ T9702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1173'. [ 217.101782][ T9700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1173'. [ 217.182484][ T9706] validate_nla: 2 callbacks suppressed [ 217.182500][ T9706] netlink: 'syz.4.1176': attribute type 8 has an invalid length. [ 217.208649][ T9710] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1177'. [ 217.237274][ T9710] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1177'. [ 217.251501][ T9710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1177'. [ 217.262655][ T9710] bridge_slave_1: entered promiscuous mode [ 217.269736][ T9710] bridge_slave_1: entered allmulticast mode [ 217.308980][ T9716] netlink: 'syz.2.1179': attribute type 39 has an invalid length. [ 218.109686][ T9756] vlan0: left allmulticast mode [ 218.115873][ T9756] veth0_vlan: left allmulticast mode [ 218.121166][ T9756] vlan0: left promiscuous mode [ 218.176269][ T7805] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.194392][ T7805] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 218.233244][ T7805] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.244117][ T7805] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 218.414327][ T7805] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.435072][ T7805] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 218.454543][ T7805] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.489686][ T7805] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 218.566835][ T9802] xt_hashlimit: size too large, truncated to 1048576 [ 218.633838][ T9795] netlink: 'syz.2.1205': attribute type 1 has an invalid length. [ 219.231446][ T9842] netlink: 'syz.1.1220': attribute type 1 has an invalid length. [ 219.275892][ T9842] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.291825][ T9841] tipc: Started in network mode [ 219.298652][ T9841] tipc: Node identity eeb98fa26cb8, cluster identity 4711 [ 219.308659][ T9841] tipc: Enabled bearer , priority 0 [ 219.401523][ T9847] bond3: (slave veth5): Enslaving as an active interface with a down link [ 219.432946][ T9851] tipc: Resetting bearer [ 219.480280][ T9842] vlan4: entered allmulticast mode [ 219.495943][ T9842] bond3: entered allmulticast mode [ 219.515719][ T9842] bond3: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 219.560037][ T9839] tipc: Disabling bearer [ 219.848993][ T9865] syzkaller0: entered promiscuous mode [ 219.855707][ T9865] syzkaller0: entered allmulticast mode [ 219.907123][ T9877] netlink: 'syz.2.1227': attribute type 30 has an invalid length. [ 219.916384][ T9875] netlink: 'syz.2.1227': attribute type 30 has an invalid length. [ 221.040786][ T9961] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.096749][ T9965] vlan4: entered allmulticast mode [ 221.112041][ T9965] bond5: entered allmulticast mode [ 221.453117][ T9981] $Hÿ: renamed from bond0 (while UP) [ 221.474339][ T9981] $Hÿ: entered promiscuous mode [ 221.519011][ T9981] syzkaller0: entered promiscuous mode [ 221.538281][ T9981] syzkaller0: entered allmulticast mode [ 221.585671][ T9981] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 221.642296][ T9999] IPv6: sit3: Disabled Multicast RS [ 221.687901][ T9999] sit3: entered allmulticast mode [ 221.900559][T10021] __nla_validate_parse: 159 callbacks suppressed [ 221.900577][T10021] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.1269'. [ 221.921984][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1269'. [ 222.008687][T10028] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1271'. [ 222.019748][T10028] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1271'. [ 222.032361][T10028] netlink: 'syz.3.1271': attribute type 6 has an invalid length. [ 222.032522][T10024] bond0: option miimon: invalid value (18446744073709551585) [ 222.040491][T10028] netlink: 'syz.3.1271': attribute type 5 has an invalid length. [ 222.040519][T10028] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1271'. [ 222.083611][T10024] bond0: option miimon: allowed values 0 - 2147483647 [ 222.091446][T10033] SET target dimension over the limit! [ 222.114927][T10024] bond0 (unregistering): Released all slaves [ 222.150375][T10033] netlink: 'syz.1.1269': attribute type 12 has an invalid length. [ 222.158870][T10033] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1269'. [ 222.175072][T10035] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1273'. [ 222.207314][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1274'. [ 222.236033][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1274'. [ 222.356007][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1276'. [ 222.529936][T10054] netlink: 'syz.2.1277': attribute type 1 has an invalid length. [ 222.607313][T10063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.705345][T10057] macvlan3: entered promiscuous mode [ 222.710787][T10057] macvlan3: entered allmulticast mode [ 222.731459][ T8694] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x75 [ 222.744231][T10057] bond0: entered promiscuous mode [ 222.762087][T10057] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 222.777433][T10057] bond0: left promiscuous mode [ 222.844528][T10085] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.861824][T10074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.208440][T10119] syz_tun: entered allmulticast mode [ 223.239075][T10121] tipc: Enabled bearer , priority 0 [ 223.249028][T10121] syzkaller0: entered promiscuous mode [ 223.254602][T10121] syzkaller0: entered allmulticast mode [ 223.278403][T10121] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 223.318149][T10121] tipc: Resetting bearer [ 223.337115][T10120] tipc: Resetting bearer [ 223.355032][T10127] x_tables: duplicate underflow at hook 4 [ 223.377182][T10132] netlink: 'syz.1.1301': attribute type 10 has an invalid length. [ 223.391392][T10120] tipc: Disabling bearer [ 223.413121][T10132] dummy0: entered promiscuous mode [ 223.428888][T10132] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 223.885456][T10170] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 223.905473][T10170] batadv_slave_0: entered promiscuous mode [ 223.916954][T10170] hsr1: Slave A (wlan0) is not up; please bring it up to get a fully working HSR network [ 223.928685][T10170] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 223.940677][T10170] hsr1: entered allmulticast mode [ 223.945979][T10170] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 223.953124][T10170] batadv_slave_0: entered allmulticast mode [ 224.159854][T10193] syzkaller0: create flow: hash 2247452857 index 2 [ 224.182763][ T8694] syzkaller0: tun_net_xmit 76 [ 224.189486][ T8694] syzkaller0: tun_net_xmit 48 [ 224.215778][ T5902] syzkaller0: tun_net_xmit 76 [ 224.276234][T10193] syzkaller0: delete flow: hash 2247452857 index 2 [ 224.293783][ T43] syzkaller0: tun_net_xmit 76 [ 224.438510][T10203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.358119][ T7800] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.367505][ T7800] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.401104][ T7800] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.420117][ T7800] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.621805][T10240] batman_adv: batadv0: Adding interface: dummy0 [ 225.640767][T10240] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.653454][T10244] xt_TCPMSS: Only works on TCP SYN packets [ 225.684514][T10240] batman_adv: batadv0: Interface activated: dummy0 [ 225.691076][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880578abc00: rx timeout, send abort [ 225.776669][T10250] netlink: 'syz.0.1338': attribute type 3 has an invalid length. [ 226.191870][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880578abc00: abort rx timeout. Force session deactivation [ 226.560149][T10309] tipc: Enabled bearer , priority 0 [ 226.573898][T10308] tipc: Resetting bearer [ 226.596910][T10308] tipc: Disabling bearer [ 226.744519][T10323] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.828657][T10333] netlink: 'syz.0.1366': attribute type 11 has an invalid length. [ 226.836674][T10333] netlink: 'syz.0.1366': attribute type 11 has an invalid length. [ 226.920516][T10335] __nla_validate_parse: 23 callbacks suppressed [ 226.920532][T10335] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1368'. [ 226.944919][T10336] ieee802154 phy0 wpan0: encryption failed: -22 [ 226.970659][T10339] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1369'. [ 227.058728][T10344] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1370'. [ 227.290378][T10356] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 227.380280][T10365] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1377'. [ 227.417267][T10367] xt_policy: too many policy elements [ 227.512405][T10375] netlink: 'syz.4.1379': attribute type 24 has an invalid length. [ 227.698176][T10385] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1381'. [ 227.918870][T10403] netlink: 'syz.0.1387': attribute type 1 has an invalid length. [ 227.997209][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1387'. [ 228.020155][T10403] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.056422][T10414] netlink: 'syz.4.1389': attribute type 1 has an invalid length. [ 228.087286][T10414] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1389'. [ 228.196936][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1393'. [ 228.206932][T10414] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1389'. [ 228.317057][T10431] netlink: 'syz.1.1394': attribute type 15 has an invalid length. [ 228.343116][T10433] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1395'. [ 228.548823][T10440] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.559563][T10450] netlink: 'syz.4.1398': attribute type 39 has an invalid length. [ 229.023537][T10488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.047747][T10488] netlink: 'syz.0.1402': attribute type 1 has an invalid length. [ 229.123578][T10478] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 229.866068][T10541] vlan2: entered allmulticast mode [ 229.891922][T10544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.612632][T10594] syzkaller0: entered promiscuous mode [ 230.635155][T10594] syzkaller0: entered allmulticast mode [ 230.836624][T10608] tipc: Enabled bearer , priority 0 [ 230.860733][T10608] syzkaller0: entered promiscuous mode [ 230.876500][T10608] syzkaller0: entered allmulticast mode [ 230.957066][T10611] tipc: Resetting bearer [ 230.993501][T10611] tipc: Disabling bearer [ 231.031406][T10622] batadv2: entered allmulticast mode [ 231.080992][T10628] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 231.093118][T10628] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 231.124845][T10628] veth1: entered promiscuous mode [ 231.134398][T10628] veth1: entered allmulticast mode [ 232.096593][T10702] __nla_validate_parse: 24 callbacks suppressed [ 232.096610][T10702] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1460'. [ 232.226899][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'. [ 232.389075][T10715] syzkaller0: entered promiscuous mode [ 232.420729][T10715] syzkaller0: entered allmulticast mode [ 232.551587][T10735] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1466'. [ 234.213807][T10771] syzkaller0: entered promiscuous mode [ 234.219416][T10771] syzkaller0: entered allmulticast mode [ 234.236095][T10791] netlink: 'syz.3.1474': attribute type 10 has an invalid length. [ 234.245045][T10791] batadv0: entered allmulticast mode [ 234.252779][T10791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.288753][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1477'. [ 234.292203][T10798] netlink: 'syz.3.1474': attribute type 10 has an invalid length. [ 234.325622][T10791] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 234.339021][T10798] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1474'. [ 234.353315][T10798] batadv0: entered promiscuous mode [ 234.364228][T10798] bond0: (slave batadv0): Releasing backup interface [ 234.392187][T10798] bridge0: port 2(batadv0) entered blocking state [ 234.407881][T10798] bridge0: port 2(batadv0) entered disabled state [ 234.693713][ T8695] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 234.703560][ T8695] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 234.920616][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1487'. [ 235.230646][T10834] v (unregistering): left allmulticast mode [ 235.241032][T10834] veth0_vlan (unregistering): left allmulticast mode [ 235.244703][T10855] netlink: 'syz.4.1489': attribute type 10 has an invalid length. [ 235.258041][T10834] v (unregistering): left promiscuous mode [ 235.367965][T10860] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1491'. [ 235.385599][T10863] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1491'. [ 235.457120][T10855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.609277][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1493'. [ 235.657520][T10871] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 235.677531][T10871] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 235.699286][T10880] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1496'. [ 235.710086][T10871] gretap1: entered promiscuous mode [ 235.715857][T10871] gretap1: entered allmulticast mode [ 235.988003][T10901] netlink: 'syz.1.1500': attribute type 4 has an invalid length. [ 236.072824][T10889] netlink: 'syz.1.1500': attribute type 4 has an invalid length. [ 236.401636][T10929] netlink: 'syz.3.1511': attribute type 1 has an invalid length. [ 236.410334][T10929] netlink: 'syz.3.1511': attribute type 11 has an invalid length. [ 236.597474][T10943] netlink: 'syz.3.1516': attribute type 64 has an invalid length. [ 236.971838][T10966] "syz.0.1524" (10966) uses obsolete ecb(arc4) skcipher [ 237.012895][T10976] xt_limit: Overflow, try lower: 271964/0 [ 237.198000][T10979] __nla_validate_parse: 9 callbacks suppressed [ 237.198017][T10979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1527'. [ 237.230346][T10979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1527'. [ 237.577303][T11017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1539'. [ 237.665339][T11022] netlink: 'syz.1.1541': attribute type 1 has an invalid length. [ 237.674709][T11022] netlink: 'syz.1.1541': attribute type 11 has an invalid length. [ 237.682622][T11022] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1541'. [ 237.800616][T11023] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.801028][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1541'. [ 237.803759][T11033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1544'. [ 238.161594][T11056] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1554'. [ 238.178151][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1555'. [ 238.266594][T11058] syzkaller0: entered promiscuous mode [ 238.272112][T11058] syzkaller0: entered allmulticast mode [ 238.290771][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1555'. [ 238.585737][T11077] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1563'. [ 238.594257][T11075] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 238.813084][T11090] batman_adv: batadv0: Adding interface: dummy0 [ 238.824250][T11090] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 239.610344][T11154] validate_nla: 2 callbacks suppressed [ 239.610361][T11154] netlink: 'syz.4.1588': attribute type 16 has an invalid length. [ 239.638384][T11154] netlink: 'syz.4.1588': attribute type 17 has an invalid length. [ 239.785246][T11165] netlink: 'syz.3.1593': attribute type 7 has an invalid length. [ 239.798013][T11154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.819544][T11165] netlink: 'syz.3.1593': attribute type 8 has an invalid length. [ 239.849951][T11154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.914739][ T1217] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 240.300305][T11196] x_tables: duplicate underflow at hook 4 [ 240.321607][T11198] netlink: 'syz.4.1600': attribute type 12 has an invalid length. [ 240.342158][T11198] netlink: 'syz.4.1600': attribute type 29 has an invalid length. [ 240.944163][T11235] netlink: 'syz.1.1615': attribute type 1 has an invalid length. [ 241.226551][T11260] netlink: 'syz.3.1624': attribute type 1 has an invalid length. [ 241.303064][T11260] bond5: (slave gretap1): making interface the new active one [ 241.311743][T11260] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 241.590569][ T7804] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.600031][ T7804] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.626595][ T7804] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.636120][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 241.644338][ T7804] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.656982][T11293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.690934][T11295] netlink: 'syz.0.1637': attribute type 1 has an invalid length. [ 241.699350][T11295] netlink: 'syz.0.1637': attribute type 7 has an invalid length. [ 241.722153][T11295] NCSI netlink: No device for ifindex 65584 [ 241.744779][T11297] SET target dimension over the limit! [ 241.977556][T11315] netlink: zone id is out of range [ 242.002893][T11315] netlink: set zone limit has 8 unknown bytes [ 242.053826][T11323] openvswitch: netlink: Flow key attr not present in new flow. [ 242.403629][ T43] IPVS: starting estimator thread 0... [ 242.503382][T11350] IPVS: using max 31 ests per chain, 74400 per kthread [ 242.740621][T11376] tipc: Enabled bearer , priority 0 [ 242.806071][T11376] syzkaller0: entered promiscuous mode [ 242.818746][T11376] syzkaller0: entered allmulticast mode [ 242.833834][T11383] __nla_validate_parse: 35 callbacks suppressed [ 242.833850][T11383] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1665'. [ 242.859572][T11384] ip6gre2: entered promiscuous mode [ 242.873482][T11384] ip6gre2: entered allmulticast mode [ 242.881994][ T7804] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 242.892056][ T7804] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 242.902160][T11390] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 242.910331][ T5956] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 242.971921][T11395] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1669'. [ 242.987589][T11396] tipc: Resetting bearer [ 243.046504][ T43] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 243.057157][T11376] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 243.072547][T11375] tipc: Resetting bearer [ 243.124821][T11375] tipc: Disabling bearer [ 243.133577][ T43] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 243.147756][T11408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.223588][T11410] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1675'. [ 243.317390][T11420] syzkaller0: entered promiscuous mode [ 243.322910][T11420] syzkaller0: entered allmulticast mode [ 243.352153][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 243.371212][T11420] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1676'. [ 243.396323][T11420] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 243.510124][T11429] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1681'. [ 243.646517][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1683'. [ 243.902926][T11445] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 244.098460][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1688'. [ 244.111594][T11452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1688'. [ 244.126854][T11448] tipc: Enabling of bearer rejected, failed to enable media [ 244.339281][T11468] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1693'. [ 244.574566][T11479] syzkaller0: entered promiscuous mode [ 244.583524][T11479] syzkaller0: entered allmulticast mode [ 244.610866][T11481] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 244.620423][T11481] team0: Device macvtap0 is already an upper device of the team interface [ 244.695898][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 244.878388][T11510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1707'. [ 245.016695][ T8694] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 245.263947][T11533] batman_adv: batadv0: Interface deactivated: dummy0 [ 245.271306][T11533] dummy0: left promiscuous mode [ 245.571195][T11533] vlan2: left allmulticast mode [ 245.589206][T11533] gretap0: left allmulticast mode [ 245.642722][T11533] gretap1: left promiscuous mode [ 245.648999][T11533] gretap1: left allmulticast mode [ 245.675263][ T50] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.686067][ T50] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.722817][ T50] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.738699][ T50] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.771370][ T50] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.789554][ T50] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.820835][ T50] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.846743][ T50] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.102224][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 246.491494][T11613] bond0: entered promiscuous mode [ 246.500547][T11613] !€ÿ: entered promiscuous mode [ 246.508056][T11613] bond_slave_1: entered promiscuous mode [ 246.514551][T11613] bond2: entered promiscuous mode [ 246.524768][T11613] gretap0: entered promiscuous mode [ 246.536662][T11613] hsr0: entered promiscuous mode [ 246.629425][T11624] vlan1: entered allmulticast mode [ 246.635003][T11624] bridge_slave_0: entered allmulticast mode [ 246.662140][T11627] validate_nla: 12 callbacks suppressed [ 246.662157][T11627] netlink: 'syz.3.1736': attribute type 1 has an invalid length. [ 246.711207][T11627] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 246.752491][T11627] veth3: entered promiscuous mode [ 246.774051][T11627] bond6: (slave veth3): Enslaving as a backup interface with a down link [ 246.807163][T11630] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.825584][ T7805] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 246.985990][ T50] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 247.043400][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 247.169080][T11647] syzkaller0: entered promiscuous mode [ 247.188817][T11647] syzkaller0: entered allmulticast mode [ 247.470618][T11666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.508408][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 247.635685][T11669] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 247.691604][T11669] bond4 (unregistering): Released all slaves [ 247.826271][T11691] openvswitch: netlink: Flow key attr not present in new flow. [ 247.879904][T11696] __nla_validate_parse: 34 callbacks suppressed [ 247.879921][T11696] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1757'. [ 247.949056][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1757'. [ 248.134650][T11709] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 248.346287][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1767'. [ 248.502088][T11734] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1771'. [ 248.534152][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 248.602156][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 248.758298][T11754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1777'. [ 248.913645][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1782'. [ 248.943851][T11774] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1783'. [ 249.105532][T11784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1787'. [ 249.123145][T11786] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1785'. [ 249.291528][T11790] vlan2: entered allmulticast mode [ 249.585177][T11817] netlink: 'syz.0.1797': attribute type 5 has an invalid length. [ 250.086453][T11857] netlink: 'syz.1.1811': attribute type 21 has an invalid length. [ 250.117126][T11857] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 250.175995][T11857] bond6 (unregistering): Released all slaves [ 250.181771][T11866] netlink: 'syz.0.1815': attribute type 10 has an invalid length. [ 250.212061][T11866] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.229548][T11866] bond0: (slave team0): Enslaving as an active interface with an up link [ 250.464036][T11887] tipc: Invalid UDP bearer configuration [ 250.464086][T11887] tipc: Enabling of bearer rejected, failed to enable media [ 250.536043][T11892] netlink: 'syz.4.1825': attribute type 10 has an invalid length. [ 250.597129][T11892] netlink: 'syz.4.1825': attribute type 10 has an invalid length. [ 250.623634][T11892] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 250.857173][T11907] syzkaller0: entered promiscuous mode [ 250.879163][T11907] syzkaller0: entered allmulticast mode [ 251.212752][T11933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.266330][T11934] netlink: 'syz.2.1839': attribute type 8 has an invalid length. [ 251.304274][T11934] erspan0: entered promiscuous mode [ 251.309586][T11934] erspan0: entered allmulticast mode [ 251.344098][T11939] batadv0: entered allmulticast mode [ 252.172891][T11994] netlink: 'syz.4.1857': attribute type 10 has an invalid length. [ 252.186208][T11994] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 252.197910][T11994] netlink: 'syz.4.1857': attribute type 10 has an invalid length. [ 252.566143][ T5863] Bluetooth: hci2: command 0x0406 tx timeout [ 252.569891][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 252.572885][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 253.044140][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 253.173717][T12034] __nla_validate_parse: 21 callbacks suppressed [ 253.173734][T12034] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1871'. [ 253.237085][T12038] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1874'. [ 253.357084][T12045] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1877'. [ 253.380573][T12049] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1879'. [ 253.412911][T12050] bridge2: entered promiscuous mode [ 253.441851][T12050] bridge2: entered allmulticast mode [ 253.459111][T12052] netlink: 'syz.2.1877': attribute type 1 has an invalid length. [ 253.503598][T12045] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1877'. [ 253.622363][T12068] netlink: 'syz.1.1886': attribute type 13 has an invalid length. [ 253.631540][T12068] netlink: 'syz.1.1886': attribute type 58 has an invalid length. [ 253.640097][T12068] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1886'. [ 253.640102][T12069] netlink: 'syz.3.1883': attribute type 4 has an invalid length. [ 253.691198][T12073] netlink: 'syz.3.1883': attribute type 4 has an invalid length. [ 253.924394][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 254.025275][T12095] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 254.331755][T12119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1903'. [ 254.458924][T12125] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 254.528797][T12129] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1907'. [ 254.705148][T12140] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1913'. [ 254.709450][T12142] netlink: 'syz.4.1911': attribute type 10 has an invalid length. [ 254.728474][T12142] bond0: (slave wlan1): Opening slave failed [ 254.750366][T12143] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1914'. [ 254.762822][T12145] netlink: 'syz.0.1912': attribute type 5 has an invalid length. [ 254.792527][T12145] dvmrp0: entered allmulticast mode [ 254.806286][T12145] dvmrp0: left allmulticast mode [ 254.963074][T12156] sit1: entered promiscuous mode [ 254.963402][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 254.975674][T12156] sit1: entered allmulticast mode [ 255.127749][T12167] netlink: 'syz.4.1920': attribute type 3 has an invalid length. [ 255.611910][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.834448][T12209] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 256.003292][ T5860] Bluetooth: hci4: command 0x0405 tx timeout [ 256.275147][T12235] atomic_op ffff8880549f2198 conn xmit_atomic 0000000000000000 [ 256.303876][T12237] FAULT_INJECTION: forcing a failure. [ 256.303876][T12237] name failslab, interval 1, probability 0, space 0, times 1 [ 256.323450][T12237] CPU: 0 UID: 0 PID: 12237 Comm: syz.0.1945 Not tainted syzkaller #0 PREEMPT(full) [ 256.323487][T12237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 256.323513][T12237] Call Trace: [ 256.323521][T12237] [ 256.323528][T12237] dump_stack_lvl+0x189/0x250 [ 256.323555][T12237] ? __pfx____ratelimit+0x10/0x10 [ 256.323578][T12237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.323598][T12237] ? __pfx__printk+0x10/0x10 [ 256.323621][T12237] ? __pfx___might_resched+0x10/0x10 [ 256.323638][T12237] ? fs_reclaim_acquire+0x7d/0x100 [ 256.323666][T12237] should_fail_ex+0x414/0x560 [ 256.323694][T12237] should_failslab+0xa8/0x100 [ 256.323713][T12237] kmem_cache_alloc_node_noprof+0x77/0x710 [ 256.323735][T12237] ? __alloc_skb+0x112/0x2d0 [ 256.323756][T12237] __alloc_skb+0x112/0x2d0 [ 256.323776][T12237] alloc_skb_with_frags+0xca/0x890 [ 256.323803][T12237] ? is_bpf_text_address+0x26/0x2b0 [ 256.323824][T12237] sock_alloc_send_pskb+0x84d/0x980 [ 256.323842][T12237] ? __lock_acquire+0xab9/0xd20 [ 256.323875][T12237] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 256.323894][T12237] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 256.323915][T12237] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.323936][T12237] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 256.323955][T12237] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 256.323978][T12237] __ip_append_data+0x2ce8/0x40c0 [ 256.324017][T12237] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 256.324057][T12237] ? __pfx___ip_append_data+0x10/0x10 [ 256.324076][T12237] ? ipv4_mtu+0x53b/0x650 [ 256.324110][T12237] ? ip_setup_cork+0x577/0x9a0 [ 256.324134][T12237] ip_make_skb+0x1de/0x3f0 [ 256.324161][T12237] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 256.324183][T12237] ? __pfx_ip_make_skb+0x10/0x10 [ 256.324224][T12237] udp_sendmsg+0x1925/0x2170 [ 256.324255][T12237] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 256.324275][T12237] ? __pfx_udp_sendmsg+0x10/0x10 [ 256.324296][T12237] ? count_memcg_event_mm+0x21/0x260 [ 256.324324][T12237] ? count_memcg_event_mm+0x21/0x260 [ 256.324363][T12237] ? sock_rps_record_flow+0x19/0x410 [ 256.324389][T12237] ? inet_sendmsg+0x29c/0x370 [ 256.324404][T12237] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 256.324424][T12237] __sock_sendmsg+0x19c/0x270 [ 256.324450][T12237] ____sys_sendmsg+0x52d/0x830 [ 256.324474][T12237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.324508][T12237] ? import_iovec+0x74/0xa0 [ 256.324532][T12237] ___sys_sendmsg+0x21f/0x2a0 [ 256.324553][T12237] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.324607][T12237] ? __fget_files+0x2a/0x420 [ 256.324622][T12237] ? __fget_files+0x3a0/0x420 [ 256.324648][T12237] __sys_sendmmsg+0x227/0x430 [ 256.324672][T12237] ? __pfx___sys_sendmmsg+0x10/0x10 [ 256.324697][T12237] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 256.324735][T12237] ? ksys_write+0x22a/0x250 [ 256.324759][T12237] ? __pfx_ksys_write+0x10/0x10 [ 256.324786][T12237] __x64_sys_sendmmsg+0xa0/0xc0 [ 256.324807][T12237] do_syscall_64+0xfa/0xfa0 [ 256.324829][T12237] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.324851][T12237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.324867][T12237] ? clear_bhb_loop+0x60/0xb0 [ 256.324888][T12237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.324904][T12237] RIP: 0033:0x7f1a3ad8f6c9 [ 256.324919][T12237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.324933][T12237] RSP: 002b:00007f1a3bbc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 256.324951][T12237] RAX: ffffffffffffffda RBX: 00007f1a3afe5fa0 RCX: 00007f1a3ad8f6c9 [ 256.324963][T12237] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 256.324974][T12237] RBP: 00007f1a3bbc7090 R08: 0000000000000000 R09: 0000000000000000 [ 256.324984][T12237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.324994][T12237] R13: 00007f1a3afe6038 R14: 00007f1a3afe5fa0 R15: 00007ffe24b4b668 [ 256.325024][T12237] [ 256.801608][T12252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.260287][T12291] validate_nla: 2 callbacks suppressed [ 257.260305][T12291] netlink: 'syz.2.1955': attribute type 21 has an invalid length. [ 257.341854][T12286] syzkaller0: entered promiscuous mode [ 257.381908][T12286] syzkaller0: entered allmulticast mode [ 257.429414][T12291] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 257.441374][T12291] bond6 (unregistering): Released all slaves [ 257.468219][T12300] tipc: Started in network mode [ 257.476066][T12300] tipc: Node identity , cluster identity 4711 [ 257.482313][T12300] tipc: Failed to obtain node identity [ 257.498721][T12300] tipc: Enabling of bearer rejected, failed to enable media [ 257.540917][T12306] bond7 (unregistering): Released all slaves [ 258.583572][T12308] tipc: Enabled bearer , priority 0 [ 258.590465][T12317] syzkaller0: entered promiscuous mode [ 258.596281][T12317] syzkaller0: entered allmulticast mode [ 258.603878][T12319] sch_tbf: burst 1298 is lower than device syzkaller0 mtu (1514) ! [ 258.632010][T12323] tipc: Resetting bearer [ 258.675909][T12307] tipc: Resetting bearer [ 258.729848][T12307] tipc: Disabling bearer [ 258.905985][T12347] netlink: 'syz.0.1979': attribute type 9 has an invalid length. [ 258.949813][T12347] netlink: 'syz.0.1979': attribute type 11 has an invalid length. [ 258.964632][T12347] netlink: 'syz.0.1979': attribute type 12 has an invalid length. [ 258.983503][T12347] __nla_validate_parse: 12 callbacks suppressed [ 258.983516][T12347] netlink: 210060 bytes leftover after parsing attributes in process `syz.0.1979'. [ 259.030164][T12360] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1981'. [ 259.111827][T12368] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1983'. [ 259.130447][T12370] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1982'. [ 259.140917][T12370] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1982'. [ 259.172336][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1984'. [ 259.269842][T12377] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1986'. [ 259.296035][T12379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.316972][T12381] netlink: 'syz.3.1988': attribute type 1 has an invalid length. [ 259.341668][T12381] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1988'. [ 259.417736][T12385] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 259.449094][T12392] netlink: 'syz.0.1992': attribute type 21 has an invalid length. [ 259.449260][T12389] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 259.471184][T12385] netlink: 'syz.2.1990': attribute type 21 has an invalid length. [ 259.471952][T12389] bond7 (unregistering): Released all slaves [ 259.489997][T12392] IPv6: NLM_F_CREATE should be specified when creating new route [ 259.554182][T12394] syzkaller1: entered promiscuous mode [ 259.559712][T12394] syzkaller1: entered allmulticast mode [ 259.684489][T12401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1997'. [ 259.693578][T12403] ipt_ECN: cannot use operation on non-tcp rule [ 259.891695][T12417] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2003'. [ 259.903807][T12411] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 260.452561][T12460] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 260.652523][T12483] Set syz0 is full, maxelem 0 reached [ 260.946192][T12506] netlink: 'syz.2.2032': attribute type 2 has an invalid length. [ 260.986366][T12506] 9: entered promiscuous mode [ 261.225226][T12524] netlink: 'syz.2.2041': attribute type 1 has an invalid length. [ 261.278496][T12524] 8021q: adding VLAN 0 to HW filter on device bond6 [ 261.310169][T12527] bond6: (slave veth3): Enslaving as an active interface with a down link [ 261.350666][T12524] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 261.368279][T12524] netlink: 'syz.2.2041': attribute type 1 has an invalid length. [ 261.471651][T12542] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 261.663767][T12546] syzkaller0: entered promiscuous mode [ 261.669689][T12546] syzkaller0: entered allmulticast mode [ 262.151023][T12597] atomic_op ffff888053922198 conn xmit_atomic 0000000000000000 [ 263.654910][T12648] bond7: entered promiscuous mode [ 263.662035][T12656] block nbd0: not configured, cannot reconfigure [ 263.668808][T12648] bond7: entered allmulticast mode [ 263.677992][T12656] netlink: 'syz.3.2074': attribute type 15 has an invalid length. [ 263.689648][T12648] 8021q: adding VLAN 0 to HW filter on device bond7 [ 263.777055][T12660] netlink: 'syz.4.2079': attribute type 28 has an invalid length. [ 263.787224][T12660] netlink: 'syz.4.2079': attribute type 3 has an invalid length. [ 264.441956][T12693] xt_hashlimit: size too large, truncated to 1048576 [ 264.641724][T12728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.657801][T12728] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 264.665189][T12728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.741561][T12733] 8021q: VLANs not supported on gre0 [ 264.788416][T12735] pim6reg1: entered promiscuous mode [ 264.793898][T12735] pim6reg1: entered allmulticast mode [ 264.898396][T12738] __nla_validate_parse: 15 callbacks suppressed [ 264.898408][T12738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2102'. [ 265.395057][T12752] hsr0 speed is unknown, defaulting to 1000 [ 265.404871][T12757] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2108'. [ 265.416391][T12752] hsr0 speed is unknown, defaulting to 1000 [ 265.425755][T12752] hsr0 speed is unknown, defaulting to 1000 [ 265.436250][T12758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2108'. [ 265.475748][T12752] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 265.551558][T12752] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 265.679137][T12752] hsr0 speed is unknown, defaulting to 1000 [ 265.706168][T12752] hsr0 speed is unknown, defaulting to 1000 [ 265.748331][T12752] hsr0 speed is unknown, defaulting to 1000 [ 265.757236][T12752] hsr0 speed is unknown, defaulting to 1000 [ 265.785831][T12752] hsr0 speed is unknown, defaulting to 1000 [ 265.925644][T12791] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 266.562236][T12833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.668172][T12840] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 266.676618][T12840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2133'. [ 266.721282][T12840] nftables ruleset with unbound set [ 266.799002][T12843] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2135'. [ 266.918535][T12856] mac80211_hwsim hwsim7 ÿ: renamed from wlan1 [ 267.014125][T12864] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 267.021976][T12864] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2142'. [ 267.045722][T12864] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2142'. [ 267.057851][T12865] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 267.263627][T12884] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 267.344362][T12890] netlink: 'syz.0.2150': attribute type 12 has an invalid length. [ 267.398032][T12890] bond3: option primary_reselect: invalid value (255) [ 267.409280][T12890] bond3 (unregistering): Released all slaves [ 267.436518][T12898] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2153'. [ 267.596349][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2156'. [ 267.609446][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2156'. [ 267.914632][T12930] netlink: 'syz.4.2160': attribute type 11 has an invalid length. [ 268.019795][T12931] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 268.326699][T12953] netlink: 'syz.1.2174': attribute type 1 has an invalid length. [ 268.403720][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 268.434586][T12953] 8021q: adding VLAN 0 to HW filter on device bond7 [ 268.618101][T12974] syzkaller1: entered promiscuous mode [ 268.636434][T12974] syzkaller1: entered allmulticast mode [ 268.919189][T12993] netlink: 'syz.4.2186': attribute type 1 has an invalid length. [ 269.881245][T13072] 8021q: adding VLAN 0 to HW filter on device bond8 [ 269.941559][T13077] __nla_validate_parse: 16 callbacks suppressed [ 269.941576][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2216'. [ 270.067024][T13085] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2220'. [ 270.150293][T13091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2222'. [ 270.469163][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2231'. [ 270.561371][T13121] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 270.765417][T13126] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.2237'. [ 270.966223][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 271.023794][T13141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2243'. [ 271.042187][T13145] netlink: 'syz.3.2244': attribute type 15 has an invalid length. [ 271.077254][T13145] pim6reg1: entered promiscuous mode [ 271.104753][T13145] pim6reg1: entered allmulticast mode [ 271.150008][T13151] netlink: 'syz.4.2246': attribute type 1 has an invalid length. [ 271.222063][T13151] 8021q: adding VLAN 0 to HW filter on device bond4 [ 271.268866][T13157] bond4: (slave geneve2): making interface the new active one [ 271.278861][T13157] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 271.300728][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.336188][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.366653][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.381902][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.496300][T13172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2255'. [ 271.557763][T13174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2256'. [ 271.565888][T13177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2257'. [ 271.784334][T13189] vetè0_virt_wifi: renamed from dummy0 [ 271.824520][T13189] netlink: 'syz.1.2261': attribute type 10 has an invalid length. [ 271.852831][T13189] batadv0: entered allmulticast mode [ 271.884812][T13198] netlink: 'syz.1.2261': attribute type 10 has an invalid length. [ 271.892840][T13189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.922145][T13198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2261'. [ 271.934066][T13189] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 271.968367][T13198] batadv0: entered promiscuous mode [ 271.987144][T13198] bond0: (slave batadv0): Releasing backup interface [ 272.004595][T13198] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 272.034142][T13205] tipc: Enabled bearer , priority 0 [ 272.047890][T13189] netlink: 'syz.1.2261': attribute type 12 has an invalid length. [ 272.057585][T13209] netlink: 'syz.4.2266': attribute type 5 has an invalid length. [ 272.089548][T13205] syzkaller0: entered promiscuous mode [ 272.096421][T13205] syzkaller0: entered allmulticast mode [ 272.102681][T13205] tipc: Resetting bearer [ 272.151539][T13215] ip6t_srh: unknown srh match flags 5F28 [ 272.154170][T13189] bond9: option primary_reselect: invalid value (255) [ 272.163479][T13215] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 272.174799][T13189] bond9 (unregistering): Released all slaves [ 272.310836][ T50] tipc: Resetting bearer [ 272.344393][T13204] tipc: Resetting bearer [ 273.334815][T13204] tipc: Disabling bearer [ 273.344980][ T5902] tipc: Node number set to 2181140386 [ 273.634528][T13258] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 274.170526][T13297] x_tables: duplicate underflow at hook 2 [ 274.772669][T13348] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 274.936328][T13358] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 274.948960][T13363] __nla_validate_parse: 15 callbacks suppressed [ 274.948977][T13363] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2321'. [ 274.997160][T13365] tipc: Enabled bearer , priority 0 [ 275.023849][T13365] syzkaller0: entered promiscuous mode [ 275.029517][T13365] syzkaller0: entered allmulticast mode [ 275.100679][T13374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2324'. [ 275.111129][T13372] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2325'. [ 275.115692][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2322'. [ 275.164367][T13377] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 275.197130][T13377] tipc: Resetting bearer [ 275.203231][T13377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.274608][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2329'. [ 275.323052][T13392] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 275.398246][T13400] netlink: 'syz.4.2333': attribute type 25 has an invalid length. [ 275.408347][T13400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2333'. [ 275.510496][T13408] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2330'. [ 275.586279][T13413] netlink: 'syz.0.2334': attribute type 1 has an invalid length. [ 275.613760][T13413] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2334'. [ 275.794516][T13364] tipc: Resetting bearer [ 275.807457][T13364] tipc: Disabling bearer [ 276.111950][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2341'. [ 276.254975][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2343'. [ 276.607654][T13460] tipc: Failed to remove unknown binding: 66,1,1/0:354912121/354912123 [ 277.005188][T13481] netlink: 'syz.1.2359': attribute type 10 has an invalid length. [ 277.022097][T13481] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.031054][T13481] bond0: (slave team0): Enslaving as an active interface with an up link [ 277.059374][T13489] netlink: 'syz.4.2362': attribute type 15 has an invalid length. [ 277.457929][T13518] hsr0 speed is unknown, defaulting to 1000 [ 277.681862][T13532] veth1_to_bond: entered allmulticast mode [ 277.788494][T13532] veth1_to_bond (unregistering): left allmulticast mode [ 278.055935][T13549] unsupported nla_type 52263 [ 278.570062][T13575] netlink: 'syz.0.2386': attribute type 10 has an invalid length. [ 278.598592][T13575] batman_adv: batadv0: Removing interface: dummy0 [ 278.618674][T13572] netlink: 'syz.4.2387': attribute type 1 has an invalid length. [ 278.621939][T13578] netlink: 'syz.0.2386': attribute type 10 has an invalid length. [ 278.672021][T13575] team0: Port device dummy0 added [ 278.738067][T13578] team0: Port device dummy0 removed [ 278.751198][T13578] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 278.907985][T13590] 0: reclassify loop, rule prio 0, protocol 800 [ 278.972587][T13595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.985693][T13595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.997546][T13597] xt_policy: neither incoming nor outgoing policy selected [ 279.006106][T13595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.014291][T13595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.030874][T13595] bridge0: port 2(batadv0) entered disabled state [ 279.058115][T13601] netlink: 'syz.2.2397': attribute type 11 has an invalid length. [ 279.137388][T13604] netlink: 'syz.0.2399': attribute type 4 has an invalid length. [ 279.320499][T13617] syzkaller0: entered promiscuous mode [ 279.332036][T13617] syzkaller0: entered allmulticast mode [ 279.358230][T13617] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 279.695246][T13645] netlink: 'syz.4.2414': attribute type 28 has an invalid length. [ 279.707209][T13645] netlink: 'syz.4.2414': attribute type 3 has an invalid length. [ 279.802286][T13652] syzkaller0: entered promiscuous mode [ 279.809063][T13652] syzkaller0: entered allmulticast mode [ 279.991098][T13664] pim6reg1: entered promiscuous mode [ 279.996559][T13664] pim6reg1: entered allmulticast mode [ 280.004093][T13664] __nla_validate_parse: 28 callbacks suppressed [ 280.004107][T13664] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2420'. [ 280.103144][ T30] audit: type=1800 audit(1762965469.549:2): pid=13656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2416" name="memory.events" dev="tmpfs" ino=2242 res=0 errno=0 [ 280.182565][T13672] tipc: Enabling of bearer rejected, failed to enable media [ 280.330903][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2428'. [ 280.345981][T13681] xt_TCPMSS: Only works on TCP SYN packets [ 280.359914][T13684] xt_TCPMSS: Only works on TCP SYN packets [ 280.371123][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2428'. [ 280.380694][T13683] batadv_slave_1: entered promiscuous mode [ 280.389442][T13682] batadv_slave_1: left promiscuous mode [ 280.414530][T13686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2430'. [ 280.491538][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2432'. [ 280.523907][T13692] validate_nla: 2 callbacks suppressed [ 280.523924][T13692] netlink: 'syz.1.2434': attribute type 1 has an invalid length. [ 280.649572][T13700] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2434'. [ 280.655000][T13692] 8021q: adding VLAN 0 to HW filter on device bond10 [ 280.669018][T13692] bond9: (slave bond10): making interface the new active one [ 280.678368][T13692] bond9: (slave bond10): Enslaving as an active interface with an up link [ 280.682122][T13701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2435'. [ 280.807572][T13710] SET target dimension over the limit! [ 280.922041][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2442'. [ 280.982485][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2443'. [ 281.018928][T13725] tipc: Enabled bearer , priority 0 [ 281.038901][T13725] syzkaller0: entered promiscuous mode [ 281.048265][T13725] syzkaller0: entered allmulticast mode [ 281.058670][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2444'. [ 281.144702][T13725] tipc: Resetting bearer [ 281.155694][T13724] tipc: Resetting bearer [ 281.192611][T13724] tipc: Disabling bearer [ 281.335184][T13748] pim6reg: entered allmulticast mode [ 281.659116][T13777] netlink: 'syz.1.2459': attribute type 6 has an invalid length. [ 282.352682][T13833] netlink: 'syz.4.2476': attribute type 3 has an invalid length. [ 282.802926][T13866] @: entered promiscuous mode [ 282.824060][T13866] @: entered allmulticast mode [ 282.990600][T13884] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 283.058846][T13891] netlink: 'syz.4.2496': attribute type 1 has an invalid length. [ 283.067780][T13891] NCSI netlink: No device for ifindex 0 [ 283.196445][T13899] netlink: 'syz.4.2498': attribute type 11 has an invalid length. [ 283.262464][T13900] bond7 (unregistering): Released all slaves [ 283.310453][T13905] syzkaller0: entered promiscuous mode [ 283.316622][T13905] syzkaller0: entered allmulticast mode [ 283.634647][T13929] tipc: Enabled bearer , priority 0 [ 283.644927][T13929] syzkaller0: entered promiscuous mode [ 283.658154][T13929] syzkaller0: entered allmulticast mode [ 283.696283][T13929] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 283.737699][T13929] tipc: Resetting bearer [ 283.751847][T13927] tipc: Resetting bearer [ 283.786937][T13927] tipc: Disabling bearer [ 284.286805][T13981] : entered promiscuous mode [ 284.422113][T13992] openvswitch: netlink: nsh attribute has 495 unknown bytes. [ 284.430936][T13992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.958692][T14018] tipc: Enabled bearer , priority 0 [ 285.015366][T14018] syzkaller0: entered promiscuous mode [ 285.022120][T14018] syzkaller0: entered allmulticast mode [ 285.093320][T14018] tipc: Resetting bearer [ 285.107584][T14014] tipc: Resetting bearer [ 285.169724][T14014] tipc: Disabling bearer [ 285.177619][T14031] netlink: 'syz.1.2543': attribute type 5 has an invalid length. [ 285.325424][T14038] __nla_validate_parse: 16 callbacks suppressed [ 285.325440][T14038] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2546'. [ 285.454726][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2547'. [ 285.466049][T14047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2547'. [ 285.475543][T14047] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2547'. [ 285.484839][T14047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2547'. [ 285.735788][T14052] syzkaller0: entered promiscuous mode [ 285.748945][T14052] syzkaller0: entered allmulticast mode [ 286.286051][T14078] openvswitch: netlink: Unknown nsh attribute 0 [ 286.292386][T14078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.470844][T14085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2559'. [ 286.532252][T14089] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.048446][T14102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2563'. [ 287.062225][T14100] xt_hashlimit: overflow, rate too high: 0 [ 287.094722][T14107] netlink: 'syz.2.2565': attribute type 58 has an invalid length. [ 287.102734][T14107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2565'. [ 287.109970][T14100] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2564'. [ 287.175782][T14102] macvlan2: entered promiscuous mode [ 287.181846][T14102] macvlan2: entered allmulticast mode [ 287.192087][T14102] bond4: (slave macvlan2): Opening slave failed [ 287.487236][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2573'. [ 287.910828][T14171] x_tables: duplicate underflow at hook 1 [ 287.922170][T14171] netlink: 'syz.4.2582': attribute type 5 has an invalid length. [ 287.965945][T14174] tipc: Enabled bearer , priority 0 [ 287.973808][T14174] syzkaller0: entered promiscuous mode [ 287.979284][T14174] syzkaller0: entered allmulticast mode [ 288.040794][T14174] tipc: Resetting bearer [ 288.095218][T14173] tipc: Resetting bearer [ 288.131025][T14173] tipc: Disabling bearer [ 288.166231][T14187] netlink: 'syz.4.2590': attribute type 3 has an invalid length. [ 288.381745][T14200] veth5: entered promiscuous mode [ 288.408754][T14200] veth5: entered allmulticast mode [ 288.447599][T14209] sctp: [Deprecated]: syz.3.2598 (pid 14209) Use of int in maxseg socket option. [ 288.447599][T14209] Use struct sctp_assoc_value instead [ 288.555844][T14213] openvswitch: netlink: IP tunnel dst address not specified [ 288.761230][T14232] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 288.816242][T14236] hsr0 speed is unknown, defaulting to 1000 [ 288.817349][T14238] netlink: 'syz.1.2608': attribute type 3 has an invalid length. [ 288.902582][T14244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.048924][T14252] vxcan1: entered allmulticast mode [ 289.336929][T14212] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 289.353743][T14212] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 289.380097][T14212] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 289.403523][T14212] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 289.439104][T14279] netlink: 'syz.2.2619': attribute type 2 has an invalid length. [ 289.507084][T14212] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 289.513022][T14212] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 289.676424][T14299] netlink: 'syz.1.2628': attribute type 8 has an invalid length. [ 289.692472][T14212] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 289.703648][T14300] netlink: 'syz.3.2629': attribute type 1 has an invalid length. [ 289.714554][T14212] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 289.787487][T14305] netlink: 'syz.0.2630': attribute type 10 has an invalid length. [ 289.810888][T14300] bond8: entered promiscuous mode [ 289.820622][T14300] bond8: entered allmulticast mode [ 289.828337][T14300] 8021q: adding VLAN 0 to HW filter on device bond8 [ 289.891577][T14308] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 290.412037][T14355] SET target dimension over the limit! [ 290.435546][T14357] __nla_validate_parse: 19 callbacks suppressed [ 290.435566][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 290.453698][T14357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2644'. [ 290.464202][T14357] netlink: 'syz.1.2644': attribute type 12 has an invalid length. [ 290.472140][T14357] netlink: 'syz.1.2644': attribute type 11 has an invalid length. [ 290.682409][T14377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2649'. [ 290.848793][T14387] "syz.4.2653" (14387) uses obsolete ecb(arc4) skcipher [ 291.082573][T14408] C: renamed from team_slave_0 [ 291.096623][T14408] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 291.116794][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'. [ 291.133617][T14410] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 291.151416][T14410] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 291.172466][T14410] gretap1: entered promiscuous mode [ 291.188574][T14410] gretap1: entered allmulticast mode [ 291.418527][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2668'. [ 291.432744][T14435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2668'. [ 291.442245][T14435] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2668'. [ 291.443125][T14436] syzkaller0: entered promiscuous mode [ 291.457022][T14436] syzkaller0: entered allmulticast mode [ 291.463638][T14435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2668'. [ 291.466742][T14436] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 291.676838][T14446] bond11: Unable to set down delay as MII monitoring is disabled [ 291.686245][T14446] bond11 (unregistering): Released all slaves [ 291.793098][T14455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2674'. [ 291.880485][T14459] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20001 [ 292.000754][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2679'. [ 292.011530][T14467] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 292.341897][T14487] validate_nla: 2 callbacks suppressed [ 292.341915][T14487] netlink: 'syz.0.2685': attribute type 1 has an invalid length. [ 292.402322][T14487] netlink: 'syz.0.2685': attribute type 7 has an invalid length. [ 292.460186][T14487] netlink: 'syz.0.2685': attribute type 8 has an invalid length. [ 292.534710][T14487] NCSI netlink: No device for ifindex 65584 [ 292.686744][T14510] syzkaller0: entered promiscuous mode [ 292.692250][T14510] syzkaller0: entered allmulticast mode [ 294.026875][T14538] team0: Mode "loa" not found [ 294.034498][ T43] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 294.216344][T14572] netlink: 'syz.3.2706': attribute type 1 has an invalid length. [ 294.300341][T14578] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 294.499886][T14593] wlan0 speed is unknown, defaulting to 1000 [ 294.553448][ T43] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 294.571201][T14593] wlan0 speed is unknown, defaulting to 1000 [ 294.579520][T14593] wlan0 speed is unknown, defaulting to 1000 [ 294.617217][T14593] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 294.679887][T14593] wlan0 speed is unknown, defaulting to 1000 [ 294.688454][T14593] wlan0 speed is unknown, defaulting to 1000 [ 294.698157][T14593] wlan0 speed is unknown, defaulting to 1000 [ 294.709875][T14593] wlan0 speed is unknown, defaulting to 1000 [ 294.736695][T14593] wlan0 speed is unknown, defaulting to 1000 [ 294.873416][T14600] bond0: entered allmulticast mode [ 294.892619][T14600] !€ÿ: entered allmulticast mode [ 294.898621][T14600] bond_slave_1: entered allmulticast mode [ 294.906272][T14600] bond2: entered allmulticast mode [ 294.915496][T14604] team0: No ports can be present during mode change [ 295.140241][T14614] netlink: 'syz.0.2720': attribute type 1 has an invalid length. [ 295.147909][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 295.160203][ T5858] syz_tun (unregistering): left allmulticast mode [ 295.168130][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 295.171596][T14614] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 295.180291][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 295.191566][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 295.199841][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 295.214031][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 295.221558][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 295.229169][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 295.233899][T14614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.237708][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 295.257143][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 295.442944][T14616] hsr0 speed is unknown, defaulting to 1000 [ 295.538214][T14616] wlan0 speed is unknown, defaulting to 1000 [ 295.541088][T14634] __nla_validate_parse: 18 callbacks suppressed [ 295.541103][T14634] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2727'. [ 295.564810][T14632] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2727'. [ 295.874989][T14652] xt_TCPMSS: Only works on TCP SYN packets [ 295.884762][T14653] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 296.027735][ T918] hid (null): report_id 0 is invalid [ 296.043638][ T918] hid (null): unknown global tag 0xe [ 296.049428][ T918] hid (null): invalid report_size 1907485834 [ 296.071107][ T918] hid (null): global environment stack underflow [ 296.081383][ T918] hid (null): unknown global tag 0xd [ 296.105911][ T918] hid-generic 0005:0007:5507.0001: report_id 0 is invalid [ 296.123312][ T918] hid-generic 0005:0007:5507.0001: item 0 0 1 8 parsing failed [ 296.138400][ T918] hid-generic 0005:0007:5507.0001: probe with driver hid-generic failed with error -22 [ 296.316736][ T8694] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 296.325903][T14685] netlink: 'syz.0.2741': attribute type 10 has an invalid length. [ 296.508572][ T8694] dvmrp0 (unregistering): left allmulticast mode [ 296.762853][T14692] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 296.871723][ T8694] bond0 (unregistering): (slave ÿ): Releasing backup interface [ 296.881119][ T8694] bond0 (unregistering): (slave team0): Releasing backup interface [ 296.891103][ T8694] bond0 (unregistering): Released all slaves [ 296.904795][ T8694] bond1 (unregistering): Released all slaves [ 296.917939][ T8694] bond2 (unregistering): Released all slaves [ 296.998268][ T8694] bond3 (unregistering): (slave veth5): Releasing active interface [ 297.006909][ T8694] bond3 (unregistering): Released all slaves [ 297.084021][ T8694] bond4 (unregistering): Released all slaves [ 297.100748][ T8694] bond5 (unregistering): Released all slaves [ 297.114208][ T8694] bond6 (unregistering): Released all slaves [ 297.191927][ T8694] bond7 (unregistering): Released all slaves [ 297.263462][ T8694] bond8 (unregistering): Released all slaves [ 297.276644][ T8694] bond9 (unregistering): (slave bond10): Releasing backup interface [ 297.287359][ T8694] bond9 (unregistering): Released all slaves [ 297.359719][ T8694] bond10 (unregistering): Released all slaves [ 297.366109][ T5860] Bluetooth: hci3: command tx timeout [ 297.378308][T14616] chnl_net:caif_netlink_parms(): no params data found [ 297.399816][T14685] team0: Device ipvlan1 failed to register rx_handler [ 297.492161][T14687] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 297.515596][T14687] bond7 (unregistering): Released all slaves [ 297.589877][ T8694] tipc: Left network mode [ 297.662952][T14697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2747'. [ 297.680152][T14703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2748'. [ 297.730090][T14703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2748'. [ 297.770419][T14703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2748'. [ 297.913878][T14616] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.928756][T14616] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.939219][T14616] bridge_slave_0: entered allmulticast mode [ 297.949642][T14616] bridge_slave_0: entered promiscuous mode [ 297.970856][T14616] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.978296][T14616] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.988348][T14616] bridge_slave_1: entered allmulticast mode [ 297.998948][T14616] bridge_slave_1: entered promiscuous mode [ 298.096471][T14616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.108848][T14725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.121825][T14616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.196008][T14616] team0: Port device team_slave_0 added [ 298.205282][T14616] team0: Port device team_slave_1 added [ 298.250700][T14616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.267805][T14616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.294270][T14616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.330036][ T8694] hsr_slave_0: left promiscuous mode [ 298.336493][ T8694] hsr_slave_1: left promiscuous mode [ 298.342626][ T8694] batman_adv: batadv0: Removing interface: vetè0_virt_wifi [ 298.361680][T14733] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2756'. [ 298.813371][ T5860] Bluetooth: hci1: command tx timeout [ 299.067025][T14616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.074128][T14616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.101494][T14616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.123448][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 299.162644][T14739] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 299.173599][T14749] tipc: Enabled bearer , priority 0 [ 299.180856][T14743] syzkaller0: entered promiscuous mode [ 299.186811][T14743] syzkaller0: entered allmulticast mode [ 299.290645][T14616] hsr_slave_0: entered promiscuous mode [ 299.315661][T14616] hsr_slave_1: entered promiscuous mode [ 299.327499][T14616] debugfs: 'hsr0' already exists in 'hsr' [ 299.346370][T14616] Cannot create hsr debugfs directory [ 299.364425][T14743] tipc: Resetting bearer [ 299.424868][T14766] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2760'. [ 299.438426][T14743] tipc: Disabling bearer [ 299.444797][ T5860] Bluetooth: hci3: command tx timeout [ 299.513868][T14769] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2762'. [ 299.524387][T14772] netlink: 'syz.2.2761': attribute type 10 has an invalid length. [ 299.940555][ T8694] IPVS: stop unused estimator thread 0... [ 300.096510][T14800] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2769'. [ 300.165867][T14800] netlink: 'syz.0.2769': attribute type 8 has an invalid length. [ 300.272567][T14803] team0: No ports can be present during mode change [ 300.526733][T14616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 300.546795][T14616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 300.577914][T14616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 300.589762][T14616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 300.636504][T14819] macvtap1: entered promiscuous mode [ 300.642011][T14819] vlan0: entered promiscuous mode [ 300.648074][T14819] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 300.657326][T14819] macvtap1: entered allmulticast mode [ 300.682732][T14819] macvtap2: entered promiscuous mode [ 300.688558][T14819] macvtap2: entered allmulticast mode [ 300.831092][T14616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.872770][T14831] __nla_validate_parse: 2 callbacks suppressed [ 300.872787][T14831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2776'. [ 300.875432][T14616] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.916855][ T8695] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.924067][ T8695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.967100][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.974301][ T8695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.189858][T14839] ip6tnl0: Caught tx_queue_len zero misconfig [ 301.371680][T14616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.493805][T14616] veth0_vlan: entered promiscuous mode [ 301.521656][T14851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2782'. [ 301.533706][ T5860] Bluetooth: hci3: command tx timeout [ 301.540697][T14616] veth1_vlan: entered promiscuous mode [ 301.549381][T14849] syzkaller1: entered promiscuous mode [ 301.555598][T14849] syzkaller1: entered allmulticast mode [ 301.568271][T14849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2783'. [ 301.632629][T14856] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2782'. [ 301.683360][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 301.702240][T14616] veth0_macvtap: entered promiscuous mode [ 301.740223][T14616] veth1_macvtap: entered promiscuous mode [ 301.827177][T14616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.858985][T14616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.919979][T14864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2786'. [ 301.939231][ T7800] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.992008][ T7800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.047705][ T7800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.077021][T14868] syzkaller0: entered promiscuous mode [ 302.082547][T14868] syzkaller0: entered allmulticast mode [ 302.123276][ T7800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.432218][T14881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2791'. [ 302.640502][ T8695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.674398][ T8695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.685443][T14893] netlink: zone id is out of range [ 302.713718][T14893] netlink: zone id is out of range [ 302.726622][T14893] netlink: zone id is out of range [ 302.739294][T14893] netlink: zone id is out of range [ 302.757806][T14881] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2791'. [ 302.767257][T14893] netlink: zone id is out of range [ 302.779012][ T8695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.793893][T14893] netlink: zone id is out of range [ 302.801290][ T8695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.817815][T14893] netlink: zone id is out of range [ 302.828787][T14893] netlink: zone id is out of range [ 302.908642][T14893] netlink: zone id is out of range [ 303.095940][T14904] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2714'. [ 303.104269][T14908] tipc: Enabled bearer , priority 0 [ 303.114144][T14906] tipc: Enabling of bearer rejected, already enabled [ 303.133507][T14905] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2797'. [ 303.159030][T14903] tipc: Disabling bearer [ 303.185341][T14912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2800'. [ 303.497415][T14932] tipc: Started in network mode [ 303.502505][T14932] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 303.522205][T14932] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 303.531654][T14932] tipc: Enabled bearer , priority 10 [ 303.543823][T14929] netlink: 'syz.3.2804': attribute type 1 has an invalid length. [ 303.604320][ T5860] Bluetooth: hci3: command tx timeout [ 303.870807][T14954] RDS: rds_bind could not find a transport for 3030:3030:3030:3030:3030::, load rds_tcp or rds_rdma? [ 304.013752][T14959] netlink: 'syz.4.2813': attribute type 3 has an invalid length. [ 304.076302][T14964] IPVS: set_ctl: invalid protocol: 0 172.20.20.11:21 [ 304.213975][T14969] netlink: 'syz.0.2817': attribute type 1 has an invalid length. [ 304.388981][T14978] tipc: Enabled bearer , priority 0 [ 304.399878][T14978] tipc: Resetting bearer [ 304.420769][T14976] tipc: Disabling bearer [ 304.513384][T14981] netlink: 'syz.0.2821': attribute type 21 has an invalid length. [ 304.521268][T14981] netlink: 'syz.0.2821': attribute type 22 has an invalid length. [ 304.555249][T14981] netlink: 'syz.0.2821': attribute type 23 has an invalid length. [ 304.563081][T14981] netlink: 'syz.0.2821': attribute type 25 has an invalid length. [ 304.596435][T14981] netlink: 'syz.0.2821': attribute type 26 has an invalid length. [ 304.643784][ T10] tipc: Node number set to 1 [ 304.672844][T14989] xt_cgroup: path and classid specified [ 304.704303][T14989] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 304.711869][T14989] IPv6: NLM_F_CREATE should be set when creating new route [ 304.719157][T14989] IPv6: NLM_F_CREATE should be set when creating new route [ 304.785863][T14989] ------------[ cut here ]------------ [ 304.791361][T14989] WARNING: CPU: 1 PID: 14989 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xed8/0x1080 [ 304.802356][T14989] Modules linked in: [ 304.808466][T14989] CPU: 1 UID: 0 PID: 14989 Comm: syz.3.2824 Not tainted syzkaller #0 PREEMPT(full) [ 304.819183][T14989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.830330][T14989] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 304.836674][T14989] Code: fa be 02 00 00 00 eb 0a e8 65 ca e1 fa be 01 00 00 00 4c 89 f7 e8 98 3d ab fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 49 ca e1 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 304.856581][T14989] RSP: 0018:ffffc900048aeee8 EFLAGS: 00010287 [ 304.862679][T14989] RAX: ffffffff86de3c47 RBX: 0000000000000002 RCX: 0000000000080000 [ 304.870905][T14989] RDX: ffffc9000d0e3000 RSI: 0000000000007671 RDI: 0000000000007672 [ 304.878975][T14989] RBP: dffffc0000000000 R08: ffff88805629882f R09: 1ffff1100ac53105 [ 304.887552][T14989] R10: dffffc0000000000 R11: ffffed100ac53106 R12: ffff88807cf26000 [ 304.895617][T14989] R13: ffffc900048af060 R14: 0000000000000001 R15: ffffc900048af078 [ 304.903644][T14989] FS: 00007f5a73f5d6c0(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 304.912583][T14989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 304.919881][T14989] CR2: 00007f5a713f6d58 CR3: 0000000077842000 CR4: 00000000003526f0 [ 304.928384][T14989] Call Trace: [ 304.931674][T14989] [ 304.934701][T14989] notifier_call_chain+0x1b6/0x3e0 [ 304.939836][T14989] ? atomic_notifier_call_chain+0x26/0x180 [ 304.945713][T14989] atomic_notifier_call_chain+0xda/0x180 [ 304.951359][T14989] call_fib_notifiers+0x31/0x60 [ 304.956244][T14989] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 304.962672][T14989] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 304.969780][T14989] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 304.975154][T14989] inet6_rtm_newroute+0x12f5/0x18c0 [ 304.980367][T14989] ? kmem_cache_free+0x19b/0x690 [ 304.985386][T14989] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 304.990948][T14989] ? __local_bh_enable_ip+0x12d/0x1c0 [ 304.996458][T14989] ? __dev_queue_xmit+0x27b/0x3b50 [ 305.001589][T14989] ? __dev_queue_xmit+0x1d79/0x3b50 [ 305.006912][T14989] ? kasan_save_track+0x3e/0x80 [ 305.011786][T14989] ? __kasan_slab_alloc+0x6c/0x80 [ 305.017385][T14989] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 305.023392][T14989] rtnetlink_rcv_msg+0x7cf/0xb70 [ 305.028387][T14989] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 305.033599][T14989] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 305.039076][T14989] ? ref_tracker_free+0x63a/0x7d0 [ 305.044209][T14989] ? __asan_memcpy+0x40/0x70 [ 305.048816][T14989] ? __pfx_ref_tracker_free+0x10/0x10 [ 305.054243][T14989] ? __skb_clone+0x63/0x7a0 [ 305.058768][T14989] netlink_rcv_skb+0x208/0x470 [ 305.063624][T14989] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 305.069113][T14989] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 305.074489][T14989] ? netlink_deliver_tap+0x2e/0x1b0 [ 305.079708][T14989] netlink_unicast+0x82f/0x9e0 [ 305.084591][T14989] ? __pfx_netlink_unicast+0x10/0x10 [ 305.089895][T14989] ? netlink_sendmsg+0x642/0xb30 [ 305.094912][T14989] ? skb_put+0x11b/0x210 [ 305.099171][T14989] netlink_sendmsg+0x805/0xb30 [ 305.104027][T14989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.109332][T14989] ? aa_sock_msg_perm+0xf1/0x1d0 [ 305.114355][T14989] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 305.120100][T14989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.126033][T14989] __sock_sendmsg+0x21c/0x270 [ 305.130741][T14989] ____sys_sendmsg+0x52d/0x830 [ 305.135593][T14989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.140900][T14989] ? import_iovec+0x74/0xa0 [ 305.145495][T14989] ___sys_sendmsg+0x21f/0x2a0 [ 305.150193][T14989] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.155509][T14989] ? __fget_files+0x2a/0x420 [ 305.160110][T14989] ? __fget_files+0x3a0/0x420 [ 305.165047][T14989] __sys_sendmmsg+0x227/0x430 [ 305.169897][T14989] ? __pfx___sys_sendmmsg+0x10/0x10 [ 305.175192][T14989] ? __pfx_do_futex+0x10/0x10 [ 305.179915][T14989] __x64_sys_sendmmsg+0xa0/0xc0 [ 305.184887][T14989] do_syscall_64+0xfa/0xfa0 [ 305.189405][T14989] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.194776][T14989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.200853][T14989] ? clear_bhb_loop+0x60/0xb0 [ 305.206096][T14989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.212003][T14989] RIP: 0033:0x7f5a7318f6c9 [ 305.216491][T14989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.236646][T14989] RSP: 002b:00007f5a73f5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 305.245530][T14989] RAX: ffffffffffffffda RBX: 00007f5a733e5fa0 RCX: 00007f5a7318f6c9 [ 305.253582][T14989] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000b [ 305.261562][T14989] RBP: 00007f5a73211f91 R08: 0000000000000000 R09: 0000000000000000 [ 305.269666][T14989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.277700][T14989] R13: 00007f5a733e6038 R14: 00007f5a733e5fa0 R15: 00007fff1f779308 [ 305.285824][T14989] [ 305.288865][T14989] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 305.296148][T14989] CPU: 1 UID: 0 PID: 14989 Comm: syz.3.2824 Not tainted syzkaller #0 PREEMPT(full) [ 305.305504][T14989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 305.315547][T14989] Call Trace: [ 305.318816][T14989] [ 305.321737][T14989] dump_stack_lvl+0x99/0x250 [ 305.326323][T14989] ? __asan_memcpy+0x40/0x70 [ 305.330905][T14989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.336090][T14989] ? __pfx__printk+0x10/0x10 [ 305.340675][T14989] vpanic+0x237/0x6d0 [ 305.344649][T14989] ? __pfx_vpanic+0x10/0x10 [ 305.349150][T14989] panic+0xb9/0xc0 [ 305.352857][T14989] ? __pfx_panic+0x10/0x10 [ 305.357275][T14989] __warn+0x31b/0x4b0 [ 305.361244][T14989] ? nsim_fib_event_nb+0xed8/0x1080 [ 305.366433][T14989] ? nsim_fib_event_nb+0xed8/0x1080 [ 305.371617][T14989] report_bug+0x2be/0x4f0 [ 305.375938][T14989] ? nsim_fib_event_nb+0xed8/0x1080 [ 305.381133][T14989] ? nsim_fib_event_nb+0xed8/0x1080 [ 305.386320][T14989] ? nsim_fib_event_nb+0xeda/0x1080 [ 305.391502][T14989] handle_bug+0x84/0x160 [ 305.395731][T14989] exc_invalid_op+0x1a/0x50 [ 305.400218][T14989] asm_exc_invalid_op+0x1a/0x20 [ 305.405052][T14989] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 305.410852][T14989] Code: fa be 02 00 00 00 eb 0a e8 65 ca e1 fa be 01 00 00 00 4c 89 f7 e8 98 3d ab fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 49 ca e1 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 305.430439][T14989] RSP: 0018:ffffc900048aeee8 EFLAGS: 00010287 [ 305.436493][T14989] RAX: ffffffff86de3c47 RBX: 0000000000000002 RCX: 0000000000080000 [ 305.444447][T14989] RDX: ffffc9000d0e3000 RSI: 0000000000007671 RDI: 0000000000007672 [ 305.452405][T14989] RBP: dffffc0000000000 R08: ffff88805629882f R09: 1ffff1100ac53105 [ 305.460364][T14989] R10: dffffc0000000000 R11: ffffed100ac53106 R12: ffff88807cf26000 [ 305.468322][T14989] R13: ffffc900048af060 R14: 0000000000000001 R15: ffffc900048af078 [ 305.476285][T14989] ? nsim_fib_event_nb+0xed7/0x1080 [ 305.481477][T14989] ? nsim_fib_event_nb+0xed7/0x1080 [ 305.486667][T14989] notifier_call_chain+0x1b6/0x3e0 [ 305.491767][T14989] ? atomic_notifier_call_chain+0x26/0x180 [ 305.497561][T14989] atomic_notifier_call_chain+0xda/0x180 [ 305.503186][T14989] call_fib_notifiers+0x31/0x60 [ 305.508025][T14989] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 305.514433][T14989] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 305.521449][T14989] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 305.526724][T14989] inet6_rtm_newroute+0x12f5/0x18c0 [ 305.531912][T14989] ? kmem_cache_free+0x19b/0x690 [ 305.536855][T14989] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 305.542386][T14989] ? __local_bh_enable_ip+0x12d/0x1c0 [ 305.547753][T14989] ? __dev_queue_xmit+0x27b/0x3b50 [ 305.552853][T14989] ? __dev_queue_xmit+0x1d79/0x3b50 [ 305.558033][T14989] ? kasan_save_track+0x3e/0x80 [ 305.562874][T14989] ? __kasan_slab_alloc+0x6c/0x80 [ 305.567908][T14989] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 305.573441][T14989] rtnetlink_rcv_msg+0x7cf/0xb70 [ 305.578371][T14989] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 305.583472][T14989] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 305.588919][T14989] ? ref_tracker_free+0x63a/0x7d0 [ 305.593931][T14989] ? __asan_memcpy+0x40/0x70 [ 305.598513][T14989] ? __pfx_ref_tracker_free+0x10/0x10 [ 305.603868][T14989] ? __skb_clone+0x63/0x7a0 [ 305.608368][T14989] netlink_rcv_skb+0x208/0x470 [ 305.613116][T14989] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 305.618565][T14989] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 305.623844][T14989] ? netlink_deliver_tap+0x2e/0x1b0 [ 305.629030][T14989] netlink_unicast+0x82f/0x9e0 [ 305.633790][T14989] ? __pfx_netlink_unicast+0x10/0x10 [ 305.639069][T14989] ? netlink_sendmsg+0x642/0xb30 [ 305.643990][T14989] ? skb_put+0x11b/0x210 [ 305.648219][T14989] netlink_sendmsg+0x805/0xb30 [ 305.652972][T14989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.658242][T14989] ? aa_sock_msg_perm+0xf1/0x1d0 [ 305.663169][T14989] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 305.668457][T14989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.673743][T14989] __sock_sendmsg+0x21c/0x270 [ 305.678419][T14989] ____sys_sendmsg+0x52d/0x830 [ 305.683184][T14989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.688478][T14989] ? import_iovec+0x74/0xa0 [ 305.692980][T14989] ___sys_sendmsg+0x21f/0x2a0 [ 305.697650][T14989] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.702868][T14989] ? __fget_files+0x2a/0x420 [ 305.707446][T14989] ? __fget_files+0x3a0/0x420 [ 305.712119][T14989] __sys_sendmmsg+0x227/0x430 [ 305.716787][T14989] ? __pfx___sys_sendmmsg+0x10/0x10 [ 305.721986][T14989] ? __pfx_do_futex+0x10/0x10 [ 305.726675][T14989] __x64_sys_sendmmsg+0xa0/0xc0 [ 305.731516][T14989] do_syscall_64+0xfa/0xfa0 [ 305.736008][T14989] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.741195][T14989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.747253][T14989] ? clear_bhb_loop+0x60/0xb0 [ 305.751918][T14989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.757798][T14989] RIP: 0033:0x7f5a7318f6c9 [ 305.762204][T14989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.781803][T14989] RSP: 002b:00007f5a73f5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 305.790224][T14989] RAX: ffffffffffffffda RBX: 00007f5a733e5fa0 RCX: 00007f5a7318f6c9 [ 305.798191][T14989] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000b [ 305.806148][T14989] RBP: 00007f5a73211f91 R08: 0000000000000000 R09: 0000000000000000 [ 305.814108][T14989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.822067][T14989] R13: 00007f5a733e6038 R14: 00007f5a733e5fa0 R15: 00007fff1f779308 [ 305.830044][T14989] [ 305.833315][T14989] Kernel Offset: disabled [ 305.837626][T14989] Rebooting in 86400 seconds..