last executing test programs: 7.425602666s ago: executing program 3 (id=2785): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r1, 0x1, 0xfffffffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000340)={0x10003, {{0x2, 0x800, @multicast2}}, {{0x2, 0x4e23, @loopback}}}, 0xa9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x6}]}, {0x0, [0x0, 0x0, 0x61, 0x0]}}, 0x0, 0x52}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0x84) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="680000000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007000000380008800c0001010800094000000094"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0xae5, 0x6, {{0x20, 0x4, 0x3, 0x26, 0x80, 0x66, 0x0, 0x80, 0x4, 0x0, @broadcast, @private=0xa010102, {[@ra={0x94, 0x4}, @cipso={0x86, 0x3c, 0x3, [{0x6, 0xd, "0f90ccf0889327e3adbaa4"}, {0x6, 0x12, "a2bea231fc176ddb42698e06a4e98302"}, {0x6, 0x7, "ee182932dc"}, {0x5, 0x3, "85"}, {0x2, 0x4, "e4f1"}, {0x0, 0x9, "fd5adbbb998507"}]}, @rr={0x7, 0x2b, 0x63, [@loopback, @dev={0xac, 0x14, 0x14, 0x44}, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x23}, @empty, @loopback, @rand_addr=0x64010102, @remote, @multicast2]}]}}}}}) r6 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ea}, [], {0x14, 0x3f9}}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5}, 0x94) 7.3179373s ago: executing program 3 (id=2789): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x42, 0x9, 0x70bd27, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44804}, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) getuid() r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r3, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100000027080000000000008d3e9ffa9f00000800040000000000"], 0x1c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x16c, 0x1, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0xaa, 0x6, "19ac3d26e76af977ebdd84f4eda9d7ffba4ace83bb3a0b81142bacfb0496406bce6b2fe8cffbde2e3b77d2536be90a104147f0013472dcd848d52648492543d3cdd9a34b600609c89ddf373db61830b8f68a7488791ee5ebcf093e7422b7ae2a042a335bd06424c47229d707ed4859fac45af91f447beff2583abae301e2165c31217835daf13e0a1611da903583a1376c52f3a954e0a6a2cd917adb2b2b7094217fd91d29ce"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x68, 0x6, "510a0d6a15f6a1f4e50104e926f179173f9a8302ceb3e09473b7ecab39868ec8ed54fa8074de381014000035ca1a4194deb56d19a4f3f8faf6e63a9c4cee48deea3bb7af9bc1ccb68d759d4da848bea6588909eb77b78dc751af66f705df82c8c47fc4b5"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x8878b673a1b71796}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x18, 0x6, "84d0af3fd1a42d3c46e3e5855581784587591729"}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40004000}, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x20, 0x8, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x26, 0x14, 0x67, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x42, 0x9, 0x70bd27, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44804}, 0x84) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) getuid() (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r3, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100000027080000000000008d3e9ffa9f00000800040000000000"], 0x1c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x16c, 0x1, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0xaa, 0x6, "19ac3d26e76af977ebdd84f4eda9d7ffba4ace83bb3a0b81142bacfb0496406bce6b2fe8cffbde2e3b77d2536be90a104147f0013472dcd848d52648492543d3cdd9a34b600609c89ddf373db61830b8f68a7488791ee5ebcf093e7422b7ae2a042a335bd06424c47229d707ed4859fac45af91f447beff2583abae301e2165c31217835daf13e0a1611da903583a1376c52f3a954e0a6a2cd917adb2b2b7094217fd91d29ce"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x68, 0x6, "510a0d6a15f6a1f4e50104e926f179173f9a8302ceb3e09473b7ecab39868ec8ed54fa8074de381014000035ca1a4194deb56d19a4f3f8faf6e63a9c4cee48deea3bb7af9bc1ccb68d759d4da848bea6588909eb77b78dc751af66f705df82c8c47fc4b5"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x8878b673a1b71796}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x18, 0x6, "84d0af3fd1a42d3c46e3e5855581784587591729"}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40004000}, 0x1) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x20, 0x8, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x26, 0x14, 0x67, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) (async) 7.197202798s ago: executing program 3 (id=2791): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061106a000000000000000000000000009500000000000002"], 0x0}, 0x90) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) epoll_create1(0xcd52dcdb6de9c7d3) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000140)) 7.02415786s ago: executing program 3 (id=2793): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'veth0_to_hsr\x00', @remote}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 6.965630046s ago: executing program 3 (id=2796): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084894) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r9, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x40810) 6.75010487s ago: executing program 3 (id=2799): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="ac0000001000010000000000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="800000000001000084001680800001800c000400ffff0000a400000010000600040000000054000c8014000100d3000000ce0300000500000088a8000014000100990c0000460800000100000088a800001400010004000000ee0900000400000088a8000014000100150b00009c01000005000000810000000c000500050000000300000008001b0000000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000801) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000140)={0x2, 'veth1_to_batadv\x00', 0x1}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113200000000008510000002000000b7000000000000009500c200000000e0410000120000f3d6"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111dc000000000006000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000007000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000de9500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 1.687238503s ago: executing program 0 (id=2867): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x2000}]}}}]}, 0x3c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r4) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x4, 0x7, 0x3, 0x4177, 0x25dfdbfe, {0x2, 0x0, 0x5}}, 0x14}}, 0x8000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18010000060a0b0400000000000000000200000034000480300001800a0001006d617463680000002000028008000240000000030b000100736f636b6574000005000300d60000000900010073797a30000000000900020073797a32"], 0x140}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112dd000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.519902416s ago: executing program 2 (id=2868): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x6], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00'}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000005716", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r10 = socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_netdev_private(r8, 0x89f6, &(0x7f00000003c0)="0ea1ff3adc06ececbd7a7c35f10bfeb3d7bb4e2325e1c1599c806ab444db76d49d70618531deac727b643d48489535d83c26050b38db9a727aecd98e5dbc89db5848f1bf0766ae52d38302669da65166fd0754ec9f05e538d6898a81023439b9ce0629da4b7ddf8f9e2e78b3d7f675f9e9540bb898fef7d8d89ac22d6e45686c7adb75c35ac20179ecbe2ba4682cdc2bd580b6f455f92090d5386e73e65a446662f31a6b948cec3aa80549c2cb6e8ef9f2de9ce2e5d5691e4484dc04deff67939d5f33348aaf4190d0cdd5ebd9c3a0b0689347c2a481cd600b5a93331817609245e18ff3f0cda21a930b") ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.468253637s ago: executing program 0 (id=2870): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x9, 0x68, 0x8000, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x91, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4f20, 0x4e20, 0x7d, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x0, @void}, "6279cb22459ff50866ff829694a603d3c443eead410baf7b350c12fa15932138ee8f6a6d2afdde33d5a4298b32860f7d3d68030697e95d9cff97f976b3ac6d8c10e10601a959b4bf18b7d52cd3b5a4c19759c5eb55c033fbf5a6b311de39eb228702b8bf55388a273db8f23105e37c7125"}}}}, 0x9f) 1.331732546s ago: executing program 2 (id=2872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb"], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4f) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000b5080500000000000000000001000000050003000100000006000240000000000c00043eead9667e6bfc00065a9a789b7c68bf1dd9339c46d6353e4cecda0d428f235820b6d257be9fe111c6b185601ce1ec84a55d4e4442f0775f3d8a6f6bf4c7e1b5e99219cf497576524f80aab9f2bc639614c671c44f4f73a517ed32c4ae5a9e3263e424a072ae39ec88391108532de0f739aa00000000000000000000000000000033068478bab74d227ec97846a5", @ANYRES64=r0, @ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 1.318020515s ago: executing program 1 (id=2873): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='xdp_cpumap_kthread\x00', r2, 0x0, 0x100}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0) 1.184015687s ago: executing program 2 (id=2874): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet6_mreq(r2, 0x29, 0x2d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000740)=@mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @device_b, @from_mac=@broadcast, {0xb, 0x5}, @value=@ver_80211n={0x0, 0x9, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x1901, 0xfff9, @broadcast, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x24}, {0x6, 0x1}, {0x12, 0x1}, {0x60, 0x1}]}, @void, [{0xdd, 0x65, "7418c9b8d588a36d29e87d527f96b230e8b5fae66ea34caa1a60c07595fe4771863295ea3939f0c46f9a74fe65f11e8a5700eb4eb966c001bb02a8fb76b8046887362f5d0226577d96bac070681b638d83ec3a4ccd8edd290fdd12cc92947f89a9248eafeb"}, {0xdd, 0x94, "b2c33ac7ac4de81f98e9893bb5955911df3fa3a02eaf65a0297d57a2960e6e4a67ae4abadddd98ae931247e165fbff13804370fa2691b5426c8624153799dc864303c512f8d4611d873f1d83606f50855d3426618e83b74d70ab0e2b7607b9d6ab8a9e9a5a95702aa774ca185b8ecda4b69157f49777eb41b93e08c7f0cffa6b004ea0e5aaa4a7aa2cab8c6bf57504ccce86ee5e"}, {0xdd, 0xf1, "e885bafec5403f74066a095373a9b727cdea2be787802099fe09148ae24e9e9686c57a892355b798065d90f1b460cbdc6f775b203cd0769dfde55ef209683a930464ebacbe945254706089606a280b2f5fabd5f9b1514b86245bb63a56f95345df5fda9af6f9287ee2ec0e1727fa0726f2e742f114d4d4ff96ede5780202e146c15b3bfaad6b8f8654fe9007fa1f9e11b78702bd35dc99d9ecb3a10fa71691e7b08c5fcf4173be030b6b1967711f3378e6d9c67467f307e687d28455e529bf9c84991c4422b280754efc0b8830af5ac4b2848b74aef662429844f9c1a0f533c51f733635afd2405ade272cc3c4c5a0e4f6"}, {0xdd, 0xd4, "d13a73754681dc67c118ac877e7b6661ae527bb8a556c70b563c88a2c9253ec9927aea69597299f4b5789915f6b6b57c14c390ac2e4b0e8d2a78e5bf0bf11df3841df5719a61b16e6e7ba3464af10ba608ab7635ece431f393af301eaf271c97484da2a71a843df8a521da52a478748ecf3af5b8b00dd809b9edab832d9459c0099a45d29842ac83ad264279ac247d2d2a4ec4986e3161e3ddf4206c9ec14789b3142b914157a78c7eb2230799eeb760bf5b341670a7731277c37a1f6b9cc7ab9dcf51e713e97de6fa059ebd220a68765f761dca"}, {0xdd, 0x66, "4c013312de346d2257f9b80c91548e9fabb7e014faee30dc2e0abd64acaa478eb39f7e8ee25832ba189babd154da229827e9567be2517d1d5bad6a16fab94a46ef60957aca0fbd98eac11da20015d97c2999daf3d6127434693f9933c015e310344f4be9c3bc"}, {0xdd, 0xb4, "d8a2913462c0a20225a16326784afae5e453176072e901971913224e72f57e779c7daf420372d3903bb20f19a36a25e2d787c1a81123d8b0a25c48a73cd05ffc0eefd3f4c2c497ba5857833149a71d7d15c0334b30283361e47902b2f00845b9fea1ebc27ecd236b4c188725d18a6e051e06699bf1cab711b489e283b36fe768b20be1587227e1c90cca08597e4536bda5c54e33d32101a5e1022c91a465fc7c4a3475b4b77dc30e4fe37ad33a6f68d0c2893e61"}, {0xdd, 0x1d, "99ca56f1cc82f0ed110aa496515f4b5636ca30663e6eb802fb8c5aafdd"}, {0xdd, 0xa7, "09461dce62bc17f1844fb5509ecc3d9f2b181f31ff632b01bb9d4193f1fc2061add8f49ea65b9ee9e360a2dbcc050ea5b12a82100937f3a130a019fd6f5c8f8367c8c686591fbec1cb1f57c95ee14e51c2afc59ba0c9d9562dc917365498cb7e2accc354d83fe233b75dc1f11b1aab178e293c723f5ef24c74bf9f9b023fd052c2323e168f23669ba29a0a32cdade197a2dc87bf4da4fcaf4d6474d7d7a6b0c0b71b7d36374cee"}, {0xdd, 0x9, "c0ad83202ec35d328e"}, {0xdd, 0xc3, "27fdb68fa7c392664b309bb6b74e35edd8064058ea98e77680a5aecb247bd8b5219227ca0fcde4e51961a1037050189581f91be5ee1a80b83771144ced5d8bba3951ad6c3fba06f9d35eceba4450d1da36639fcbde41c2c73cdb830fe5dbf16c248e51fb6d80e9e9d889a15f2afd656c8682fa74aad3e87f9ccc198dedef8dd637ccf4a0c54e851394c2442fb865683bf20c3cdb726dd835365183a8273db1582a8faa5d62c4184b6b174b2d15f41804c099674d734b7350908207ff2bdf67d912002f"}]}, 0x5b0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000000000000254400000000000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000370000000800700000000200000000000a0018000303030303030000"], 0x3c}}, 0x24040890) r4 = socket$inet(0x2, 0x0, 0x5) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000040)) 1.154787223s ago: executing program 1 (id=2875): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000200)={0x1, 0x1, '\x00', 0x71, 0x8}) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fcdbdf254300000008000300", @ANYRES32=r6, @ANYBLOB="0da646d3542d7a05000000000d0a591900000000000000087671307a970f"], 0x28}, 0x1, 0x0, 0x0, 0x4004015}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r3], 0x44}}, 0x0) 1.099998225s ago: executing program 0 (id=2876): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x0, 0x3, 0xffffffff}}, 0x2e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00ff000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async) sendmmsg(r0, &(0x7f000000b200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8044) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1000001, 0x3a}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x5) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x100000b, 0x13012, r3, 0x0) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3f2}, 0x1c) 1.024112655s ago: executing program 4 (id=2877): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x48b0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES64=r0], 0xa0}, 0x1, 0x0, 0x0, 0x4020}, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 935.90691ms ago: executing program 1 (id=2878): r0 = socket(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20040894) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="6800000000000000000dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x18) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x14) socket$nl_audit(0x10, 0x3, 0x9) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) socket(0x2b, 0x1, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20040894) (async) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="6800000000000000000dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x18) (async) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x14) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) socket(0x40000000015, 0x5, 0x0) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) (async) 896.094658ms ago: executing program 4 (id=2879): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0xea}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40010) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000900), 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@updpolicy={0xc0, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x80}, {0x1, 0x0, 0x9}, {0x0, 0x5}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0xc0}}, 0x4000) 799.848346ms ago: executing program 0 (id=2880): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)="a17abd7c18cf849b288a9ccf2f6cd01576a60e6a75d6095b906da81195ee210632ff5cdbe4df675c43a84cd27a40c1d374c2dd354d30bcd60c2a2b860f008238d717d6cf0b4e0ac29adfbbbc393abeb74c65354f62d57392aa528e867c9db4d77bb7f63d2527382860a9ec32c53b2899227748bff0ecff", 0x0, 0x800}, 0x38) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48240, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRESHEX, @ANYBLOB="000000000000000040001280810001"], 0x68}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}, 0x2}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x110, 0x4) (async) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0xe4e, 0x4) sendmsg$key(r5, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000400)=ANY=[@ANYBLOB="020b6d0500000a00000000000028bd7000073500000100140088000000089c19000300040002004e22ac141410000000000000000002004e20ac1414bb0000004000"/82], 0x50}}, 0x4040002) (async) recvmmsg(r5, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0xf64}], 0x1, 0x10020, 0x0) sendmmsg$inet(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000100)={0x2, 0x5e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000340)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000800)=[{&(0x7f00000005c0)="bd91b8cc83e90f01f53a7a818771eb63080d5940e1edbbf38d98116c1f670957451301165396a8a75fc834b54adaddc93bb025f18201ce935ff882b31e6f7adc8b66382917955624b4a4fe13de5d3167d81d8dbdcf0c6a7b654a385475e7d6732dc6c1de6e0310430ff32737c79edb79a55b4c9e41b8929713a631820c5609a96d70f07eb70ac6a5676c516dedc69ac24dc919b02bcd4054e05e0ba8456f7d2b80ee487d1118b8d2125bb6d1f96c50a58a9654baf3f83337e8cd9b1905c7dd0b72", 0xc1}, {&(0x7f0000000500)='T[jtMq*', 0x7}, {&(0x7f00000006c0)="b05fd286ee336f2dd787a501a4da81e649839db8b87ff69cc4a030178ff49bf8b761aad988db815fd8b0fce5568a2c0dbbcae6bf2502d3a7579896c71a83d519c46f3e4bbbc12f9f632ba1e390c201b997d369d773c5612c30c99ef58dc4a2412c7dd61340fa31f9c93f33c9756403c88c040fec3a11605106e1cc73ec3050599c7ea5d5b43facc76f74d75b", 0x8c}, {&(0x7f0000000b40)="adaca0d1a4db90062c269f6b7179021bbf4e8bfaece96d5ba400bb06d00faa83a91d47367d2a2954894061eb64b5594b927b2c65466d18d0ef227dfad4c5a5b09297517437981d66fe3d7efbe41d5d1a50", 0x51}, {&(0x7f0000000a00)="183003980fdce1ca38b77f6b0ea9d78670f48f86b52a5525d729bbe75dbe3863c99ab439ef9090d7fe72101a539bbb304e1fd054f007e7185bdd96e034cbd5d001a1ca44cecac6847c872dd5f849be29f21e4436442692dee655744dfe1b71467225eaadc0a7c61a66ec27f1bb23ad609f8b97a1898a832fcf2965410cfaefdb279cb197e2cf772698244a5cc2acebd043e172fca63818c4f09486f99394da098b7534e850fcdbdc2d2042250c1a5a105da13729bb", 0xb5}], 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="110000000000000020000000010000000500000000000000180000000000000000000000070000000704939e8903e400140000000000000000000000010000007105000000000000"], 0x48}}], 0x2, 0x8004) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000006b80)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0xa, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r2], 0x2e8}}], 0x1, 0x4800) (async) recvfrom(r5, 0x0, 0x0, 0x40000067, 0x0, 0x0) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000080)={'sit0\x00'}) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xae488932234ed647}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@gettfilter={0x2c, 0x2e, 0x230, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0x10}, {0xe, 0xc}, {0xffff, 0xffff}}, [{0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20001010}, 0x40010) write$cgroup_devices(r10, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:* mr'], 0x9) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYBLOB="1433010000000000140012800b00010062726964676500000400028008000a00", @ANYRESDEC, @ANYBLOB="94af363a5176159827e2da940b3247b50bece0f0073ebe4834"], 0x3c}, 0x1, 0xba01}, 0x0) 759.177637ms ago: executing program 4 (id=2881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1e, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="530d848863dec3c7ae8a00375434699a4f233ddb792876d6c572093219d41593565ff30cb8c6f568856e30ec444782f258ebd3713492eea7b896b76f02f68f11061d55d299e990db59b37d29ad7c3b53b653fc104008bf71965f4e586b2c07a263fc80", 0x63) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20003caa1155e3ba0000000a03000000000000000000070000000900010073797a30000000004c000000090a019f48000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c08000640ffffff000800034000000008400000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014000380100000800800034000000000040001801400000010000100000000000000"], 0xd4}}, 0x0) 754.336959ms ago: executing program 1 (id=2882): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x2040840) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x2040840) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e8000000010901040000000000530000000000000900010073797a31000000000900010073797a310000000008000340000000000c0004800800014000000000100002000c00028007000100000000000800054000000000840002001400018008000100ffffffff08000200ac1e000114000180080001000a01010008000200ffffffff06000340000300000c0002"], 0xe8}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) (async) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r3, &(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, &(0x7f0000001380)=0x80) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) openat$cgroup_ro(r5, &(0x7f0000000480)='rdma.current\x00', 0x0, 0x0) (async) openat$cgroup_ro(r5, &(0x7f0000000480)='rdma.current\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711234000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0xf}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0xd, &(0x7f0000000040), 0x4) (async) setsockopt$inet_tcp_int(r7, 0x6, 0xd, &(0x7f0000000040), 0x4) setsockopt$inet_mreqn(r7, 0x0, 0x20, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r9) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff0000000108000700263a2f2f140002"], 0x44}, 0x1, 0x1000000}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff0000000108000700263a2f2f140002"], 0x44}, 0x1, 0x1000000}, 0x0) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4805) pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000040)='\x00!', 0x2}, {&(0x7f0000000140)="abffa99a7d6ed2dcacc958fd3a5c773e03b4a54890c6ba34d4a318f17925141e844a5882851431385aa863defbc0d479f945bbd8eb945276a091970bbeccd52a559731b33c20fd6eb7d6adb5ba81c0eccf6ee0dfd3f702812d39c7853360046b50ad6a4436d4247a5e920c58f140a138faa35246b17306e25f6e34b456ccefe6c20a544cb784ec517071b8f1563bb232c4019084d9003f1a2832609a0e8eb141c1ded373dd38c0e827721ecab5570c9b"}, {&(0x7f0000000240)="43e51f1bce2ede7abb6a4b66c403f7e047ecee20f0c2fcb0e9a0fa457ecafec104711845155c12d3083c2643fa79d4831d46244b8543a725fd5366f46c47f28a49d9cd9504e8fcb98c7295b91fddb7740713db6271cd2cabd133fcda03c5c0f034350170b69e304f501b3d0b0adab4ab55293a945272119c6ce79f8290df879fff628d42f94b5057e51e8a86a1879350d393acc57a51418944c4ebd0bc038ee67565694f4a4a655c4c280a6c171c3d9f3526cd4edb361a"}, {&(0x7f0000000300)="f2671cb24621eed7e7a51d5659a146245add4a2f90cb80f9129d9a161de443485cc5ee75345f3572a222faec0745c7d800937747222bbd7f4dc9514a4799640f8255dc6a4743dab90efdb54b411a188a4e021ae5b392d4de7029e547a196c8990184ef06499677b80d5e21e063b3e263e1b2d2df8b2200a968be53e544fc"}], 0x1000000000000215, 0x5, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0) 603.945137ms ago: executing program 4 (id=2883): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042801400018006000600800a000006001700980a0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r3) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000680)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e3031d32944bf20590000a2bc5603ca00000f7f8907000020008d42188fedc22eedc6d100000101ff0000000309", 0x48}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f00000001c0)={@bcast, @bcast, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x3c, r4, 0x5, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0xa7, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000580)=[{&(0x7f0000000a40)={0x1c, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}, @generic="f4"]}, 0x1c}], 0x1}, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r3) sendmsg$SEG6_CMD_DUMPHMAC(r9, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r10, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) 486.606764ms ago: executing program 1 (id=2884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}}, 0x800) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 445.543826ms ago: executing program 2 (id=2885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2b, 0x1, 0x1) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x8, @local, 0x1}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0010002000fc00000020a976db", @ANYRES32=0x0, @ANYBLOB="0000000000000000140014006272696467655f736c6176655f3100006ffe0500", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 360.024029ms ago: executing program 0 (id=2886): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018013a000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008c0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) recvmmsg(r0, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/111, 0x6f}], 0x1, &(0x7f00000003c0)=""/47, 0x2f}, 0x3}], 0x1, 0x22, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=@getnexthop={0x20, 0x6a, 0x3265e22d371e5647, 0x70bd2c, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000000) (async) socket$kcm(0x29, 0x2, 0x0) 271.546968ms ago: executing program 2 (id=2887): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="4a84324eda", 0x5}], 0x1}}], 0x2, 0x0) close(r0) syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], "6be2"}}}}}}}, 0x0) 223.610932ms ago: executing program 0 (id=2888): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@i, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000005200010000000000000000000203000008000900"], 0x1c}}, 0x0) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x200, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000000206010800000000000000000c0007800800064000160005050005000a000000050001000700000005000400000000000900020073797a31000000001000030068610900000000000000630000000000d429a15d4007545a1b3a4d7b62a1f30c76d24e7a39050348592f9932740a8320090900b319c30b0ef2495eefc32c81e8c2d0b02f241f8bbe001ddb95dc679f3a25caab004df40d796c"], 0x54}}, 0x0) 143.961819ms ago: executing program 4 (id=2889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x76, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}]}]}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20008004) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xec97}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7d}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) 119.457964ms ago: executing program 1 (id=2890): socket(0x10, 0x803, 0x8) (async) r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$unix(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000680)=""/219, 0xdb}], 0x1}, 0x10000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r3) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x14, r4, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r3) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYRES64=r8, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4048000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000f14010000000000000000000c002e0072646d615f636d"], 0x1c}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000f14010000000000000000000c002e0072646d615f636d"], 0x1c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 46.301835ms ago: executing program 4 (id=2891): r0 = socket$netlink(0x10, 0x3, 0x9) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xcc000, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@private1, @dev={0xac, 0x14, 0x14, 0x16}, 0x1a, 0x4}}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000100)={0x23, 0x41, 0xc, 0x6}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='reno\x00', 0x5) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000180), 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000001c0)) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r6) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r7, 0x10, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x20}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2e}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x84) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x7f, 0x9, 0xd, 0xcb, 0x22e}, @jmp={0x5, 0x0, 0xa, 0xa, 0x0, 0x100, 0xfffffffffffffff0}]}, &(0x7f00000003c0)='syzkaller\x00', 0x1000, 0x91, &(0x7f0000000400)=""/145, 0x41100, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0x0, 0xfffffff8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x4, 0x1, 0xb, 0x8}], 0x10, 0x2c}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000640)=@generic={&(0x7f0000000340)='./file0\x00', r8}, 0x18) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000680)=""/4096) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001680)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001700)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001900)={'ip6gre0\x00', &(0x7f0000001880)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x0, 0x9, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x7, 0x1, 0x0, 0x401}}) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000001940), 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001a00)={0x8, 0x0}, 0x8) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a40)={0x0, 0x80000000, 0x8}, 0xc) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x72b, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b00)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) pipe(&(0x7f0000001b80)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001c40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001bc0), &(0x7f0000001c00)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0xf, 0x1e, &(0x7f0000001740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe1be, 0x0, 0x0, 0x0, 0x8}, [@map_fd={0x18, 0x48fa57d4b8acb0d3, 0x1, 0x0, r9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8d6}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}]}, &(0x7f0000001840)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x72, '\x00', r11, @fallback=0x6, r12, 0x8, &(0x7f0000001980)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000019c0)={0x1, 0x2, 0x3, 0x8}, 0x10, r13, r8, 0x1, &(0x7f0000001d80)=[r3, r14, r15, r16, r8, r17, r18, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001dc0)=[{0x0, 0x1, 0x2, 0xc}], 0x10, 0x8}, 0x94) 0s ago: executing program 2 (id=2892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20) socket$packet(0x11, 0x3, 0x300) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)=""/119, 0x77, 0x10000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000000)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, 'osf\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x8000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x0) kernel console output (not intermixed with test programs): 152.731658][ T8145] nbd: couldn't find a device at index -373114624 [ 152.819448][ T8153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.873050][ T8153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.895859][ T8157] openvswitch: netlink: Flow actions attr not present in new flow. [ 153.036656][ T8160] vxcan2: entered promiscuous mode [ 153.136180][ T8166] netlink: 252 bytes leftover after parsing attributes in process `syz.1.635'. [ 153.230096][ T8176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.637'. [ 153.255019][ T8174] macvtap1: entered promiscuous mode [ 153.260564][ T8174] vlan0: entered promiscuous mode [ 153.266368][ T8174] macvtap1: entered allmulticast mode [ 153.271965][ T8174] vlan0: entered allmulticast mode [ 153.390223][ T8181] netlink: 300 bytes leftover after parsing attributes in process `syz.0.641'. [ 153.415031][ T8183] netlink: 232 bytes leftover after parsing attributes in process `syz.3.640'. [ 153.432834][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 153.644693][ T8194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.642'. [ 153.671730][ T8197] netlink: 228 bytes leftover after parsing attributes in process `syz.0.643'. [ 154.381378][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.653'. [ 154.595783][ T8234] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.602578][ T8260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.728096][ T8229] bond3: (slave veth7): Enslaving as an active interface with a down link [ 154.773997][ T8243] pim6reg: entered allmulticast mode [ 154.809249][ T8252] bond3: (slave veth0_to_bond): making interface the new active one [ 154.851766][ T8252] veth0_to_bond: entered promiscuous mode [ 154.865866][ T8252] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 155.175119][ T8291] validate_nla: 6 callbacks suppressed [ 155.175139][ T8291] netlink: 'syz.4.665': attribute type 1 has an invalid length. [ 155.315054][ T8298] netlink: 'syz.2.669': attribute type 10 has an invalid length. [ 155.366815][ T8304] netlink: 'syz.2.669': attribute type 10 has an invalid length. [ 155.383456][ T8298] team0: Device dummy0 failed to register rx_handler [ 155.532842][ T8313] block nbd0: server does not support multiple connections per device. [ 155.558892][ T8313] block nbd0: shutting down sockets [ 155.894565][ T8333] netlink: 'syz.1.676': attribute type 2 has an invalid length. [ 155.996999][ T8337] netlink: 'syz.3.680': attribute type 4 has an invalid length. [ 156.079690][ T8338] netlink: 'syz.3.680': attribute type 4 has an invalid length. [ 156.625929][ T8360] netlink: 'syz.4.685': attribute type 13 has an invalid length. [ 156.744638][ T8362] netlink: 'syz.3.686': attribute type 4 has an invalid length. [ 156.823605][ T8366] openvswitch: netlink: Key type 71 is out of range max 32 [ 157.109735][ T8380] netlink: 'syz.4.693': attribute type 2 has an invalid length. [ 157.117773][ T8380] nbd: must specify a device to reconfigure [ 157.399897][ T8397] macsec1: entered promiscuous mode [ 157.403298][ T8399] netlink: 'syz.4.698': attribute type 11 has an invalid length. [ 157.407039][ T8397] macsec1: entered allmulticast mode [ 157.598078][ T8413] __nla_validate_parse: 13 callbacks suppressed [ 157.598103][ T8413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.702'. [ 157.621855][ T8414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.704'. [ 157.663351][ T8403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.702'. [ 158.315221][ T8458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.717'. [ 158.808478][ T8491] netlink: 'syz.2.727': attribute type 1 has an invalid length. [ 158.838826][ T8491] netlink: 224 bytes leftover after parsing attributes in process `syz.2.727'. [ 159.006841][ T8498] bond2 (unregistering): Released all slaves [ 159.224687][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'. [ 159.835755][ T8539] netlink: 40 bytes leftover after parsing attributes in process `syz.1.741'. [ 159.932738][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.743'. [ 159.942241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.974515][ T8544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.743'. [ 160.011719][ T8544] bond0: entered promiscuous mode [ 160.037486][ T8544] bond_slave_0: entered promiscuous mode [ 160.051419][ T8549] netlink: 244 bytes leftover after parsing attributes in process `syz.3.744'. [ 160.065506][ T8544] bond_slave_1: entered promiscuous mode [ 160.075604][ T8544] bond0: left promiscuous mode [ 160.081328][ T8549] unsupported nlmsg_type 40 [ 160.097595][ T8544] bond_slave_0: left promiscuous mode [ 160.108288][ T8544] bond_slave_1: left promiscuous mode [ 160.150584][ T8551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.248729][ T8551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.311195][ T8562] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1 [ 160.504653][ T8567] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 160.822708][ T1340] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 161.933850][ T8645] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.941735][ T8645] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.353253][ T8645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.380465][ T8645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.898167][ T8645] vlan0: left allmulticast mode [ 162.903926][ T8645] veth0_vlan: left allmulticast mode [ 162.909394][ T8645] vlan0: left promiscuous mode [ 162.920076][ T8645] macvtap1: left promiscuous mode [ 162.928427][ T8645] macvtap1: left allmulticast mode [ 162.955687][ T8645] veth3: left allmulticast mode [ 162.968731][ T8645] gretap1: left promiscuous mode [ 162.977443][ T8645] gretap1: left allmulticast mode [ 163.008960][ T75] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.063891][ T75] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.100293][ T75] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.118723][ T75] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.135790][ T75] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.146586][ T75] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.156584][ T75] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.165769][ T75] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.954218][ T3496] veth0_to_bond: left promiscuous mode [ 199.625741][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.839143][ T8678] __nla_validate_parse: 5 callbacks suppressed [ 205.839165][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 205.881612][ T8678] netlink: 'syz.4.778': attribute type 1 has an invalid length. [ 205.890362][ T8678] netlink: 'syz.4.778': attribute type 2 has an invalid length. [ 205.945856][ T8690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.775'. [ 206.048121][ T8697] netlink: 'syz.0.782': attribute type 10 has an invalid length. [ 206.911150][ T8733] netlink: 'syz.0.793': attribute type 6 has an invalid length. [ 206.954075][ T8738] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 206.980810][ T8738] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 207.076993][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 207.191246][ T8753] 8021q: VLANs not supported on ip_vti0 [ 207.480883][ T8768] netlink: 144 bytes leftover after parsing attributes in process `syz.3.802'. [ 207.518191][ T8768] netlink: 'syz.3.802': attribute type 1 has an invalid length. [ 207.526954][ T8767] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 207.530564][ T8768] netlink: 'syz.3.802': attribute type 4 has an invalid length. [ 207.554192][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 207.579024][ T8773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.805'. [ 207.589277][ T8768] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.802'. [ 207.923955][ T8785] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 208.178731][ T8800] netlink: 56 bytes leftover after parsing attributes in process `syz.0.813'. [ 208.414630][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'. [ 208.518670][ T8825] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20000 [ 208.708132][ T8833] netlink: 11 bytes leftover after parsing attributes in process `syz.3.824'. [ 208.887711][ T8842] netlink: 'syz.3.828': attribute type 29 has an invalid length. [ 208.929164][ T8842] netlink: 'syz.3.828': attribute type 29 has an invalid length. [ 209.020684][ T8851] nft_compat: unsupported protocol 0 [ 209.049505][ T8844] netlink: 'syz.2.829': attribute type 1 has an invalid length. [ 209.066916][ T8844] netlink: 'syz.2.829': attribute type 1 has an invalid length. [ 209.181854][ T8859] block nbd1: not configured, cannot reconfigure [ 209.348427][ T8869] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 209.676807][ T8876] hsr0 speed is unknown, defaulting to 1000 [ 209.850262][ T8894] sctp: [Deprecated]: syz.1.843 (pid 8894) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.850262][ T8894] Use struct sctp_sack_info instead [ 211.159661][ T8967] tipc: Enabled bearer , priority 10 [ 211.177024][ T8965] tipc: Started in network mode [ 211.201343][ T8965] tipc: Node identity 92c82e4ab615, cluster identity 4711 [ 211.231499][ T8965] tipc: Enabled bearer , priority 0 [ 211.255302][ T8968] syzkaller0: entered promiscuous mode [ 211.310559][ T8968] syzkaller0: entered allmulticast mode [ 211.375452][ T8965] tipc: Resetting bearer [ 211.408282][ T8965] __nla_validate_parse: 17 callbacks suppressed [ 211.408307][ T8965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.868'. [ 211.540503][ T8964] tipc: Resetting bearer [ 211.601819][ T8964] tipc: Disabling bearer [ 211.673621][ T8988] veth0: entered promiscuous mode [ 211.723528][ T8988] veth0: left promiscuous mode [ 211.820365][ T8996] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.878'. [ 211.844785][ T8995] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.878'. [ 211.858538][ T8997] netlink: 300 bytes leftover after parsing attributes in process `syz.1.877'. [ 211.900634][ T8997] netlink: 40 bytes leftover after parsing attributes in process `syz.1.877'. [ 211.936874][ T8997] hsr0 speed is unknown, defaulting to 1000 [ 212.282357][ T24] tipc: Node number set to 835935294 [ 212.416957][ T9030] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.886'. [ 212.643684][ T9047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.890'. [ 212.795655][ T9060] netlink: 204172 bytes leftover after parsing attributes in process `syz.4.895'. [ 213.392966][ T9083] validate_nla: 7 callbacks suppressed [ 213.392985][ T9083] netlink: 'syz.1.903': attribute type 1 has an invalid length. [ 213.436220][ T9083] netlink: 244 bytes leftover after parsing attributes in process `syz.1.903'. [ 213.662632][ T9100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.909'. [ 214.982290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.147721][ T9147] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 216.171618][ T9198] bridge0: port 2(batadv0) entered disabled state [ 216.230921][ T9198] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.794902][ T9248] __nla_validate_parse: 6 callbacks suppressed [ 217.794981][ T9248] netlink: 396 bytes leftover after parsing attributes in process `syz.2.947'. [ 217.852456][ T9247] netlink: 396 bytes leftover after parsing attributes in process `syz.2.947'. [ 217.872517][ T9247] openvswitch: netlink: Key type 85 is out of range max 32 [ 217.888279][ T9248] openvswitch: netlink: Key type 85 is out of range max 32 [ 217.960821][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.950'. [ 218.235180][ T9274] netlink: 68 bytes leftover after parsing attributes in process `syz.1.955'. [ 218.244708][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.955'. [ 218.395696][ T9277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.956'. [ 218.522363][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.958'. [ 218.657369][ T9287] netlink: 'syz.0.961': attribute type 1 has an invalid length. [ 218.695412][ T9289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.962'. [ 218.723418][ T9291] netlink: 32 bytes leftover after parsing attributes in process `syz.0.961'. [ 218.810731][ T9287] bond4: (slave gretap2): making interface the new active one [ 218.824337][ T9287] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 218.968943][ T9302] netlink: 256 bytes leftover after parsing attributes in process `syz.1.964'. [ 219.298358][ T9311] Bluetooth: MGMT ver 1.23 [ 219.399481][ T9313] veth0: entered promiscuous mode [ 219.477477][ T9317] netlink: zone id is out of range [ 219.487769][ T9317] netlink: zone id is out of range [ 219.493461][ T9317] netlink: zone id is out of range [ 219.587326][ T9326] Bluetooth: MGMT ver 1.23 [ 220.032689][ T9333] netlink: 'syz.3.974': attribute type 2 has an invalid length. [ 220.040518][ T9333] netlink: 'syz.3.974': attribute type 8 has an invalid length. [ 220.160081][ T9313] bond2: (slave vlan2): Releasing active interface [ 220.683599][ T9363] sctp: [Deprecated]: syz.3.982 (pid 9363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.683599][ T9363] Use struct sctp_sack_info instead [ 221.000395][ T9372] netlink: 'syz.3.985': attribute type 1 has an invalid length. [ 221.216716][ T9374] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.271547][ T9374] bond2: (slave bond3): making interface the new active one [ 221.301916][ T9374] bond2: (slave bond3): Enslaving as an active interface with an up link [ 221.388657][ T9394] netlink: 'syz.1.988': attribute type 1 has an invalid length. [ 221.399372][ T9372] bond2: (slave gretap2): Enslaving as a backup interface with an up link [ 221.424375][ T9394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.441285][ T9381] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.539934][ T9146] Set syz1 is full, maxelem 65536 reached [ 222.043015][ T9427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.128080][ T9435] netlink: 'syz.2.999': attribute type 58 has an invalid length. [ 222.185645][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 222.200231][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 222.207561][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 222.210080][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 222.331728][ T9445] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 222.667631][ T9459] netlink: 'syz.2.1008': attribute type 1 has an invalid length. [ 222.785306][ T9459] bond3: (slave gretap1): making interface the new active one [ 222.793918][ T9459] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 222.804944][ T9466] tipc: Enabling of bearer rejected, failed to enable media [ 222.825155][ T9466] __nla_validate_parse: 10 callbacks suppressed [ 222.825176][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1010'. [ 222.827379][ T9470] openvswitch: netlink: Missing key (keys=40, expected=100) [ 222.877562][ T9466] syzkaller1: entered promiscuous mode [ 222.883363][ T9466] syzkaller1: entered allmulticast mode [ 223.177152][ T9485] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1019'. [ 223.193538][ T9485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1019'. [ 223.420173][ T9506] netlink: zone id is out of range [ 223.495480][ T9512] netlink: 'syz.2.1026': attribute type 21 has an invalid length. [ 223.517225][ T9512] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1026'. [ 223.544141][ T9512] netlink: 'syz.2.1026': attribute type 4 has an invalid length. [ 223.554623][ T9515] netlink: 'syz.0.1027': attribute type 11 has an invalid length. [ 223.571833][ T9518] netlink: 'syz.2.1026': attribute type 21 has an invalid length. [ 223.587183][ T9519] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1026'. [ 223.601657][ T9512] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1026'. [ 223.621820][ T9518] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1026'. [ 223.661600][ T9519] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1026'. [ 223.736165][ T9518] validate_nla: 4 callbacks suppressed [ 223.736184][ T9518] netlink: 'syz.2.1026': attribute type 4 has an invalid length. [ 223.765033][ T9518] netlink: 'syz.2.1026': attribute type 5 has an invalid length. [ 223.779031][ T9518] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1026'. [ 223.818588][ T9530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1030'. [ 223.839489][ T9529] netlink: 'syz.1.1032': attribute type 10 has an invalid length. [ 223.878379][ T9530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.901285][ T9530] bond0: (slave rose0): Enslaving as an active interface with an up link [ 223.977417][ T9529] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.995923][ T9542] netlink: 'syz.3.1033': attribute type 1 has an invalid length. [ 224.013706][ T9529] bond0: (slave team0): Enslaving as an active interface with an up link [ 224.355535][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.556212][ T9541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.634131][ T9541] ipvlan1: left promiscuous mode [ 224.639380][ T9541] ipvlan1: left allmulticast mode [ 224.711137][ T9541] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 224.738042][ T9541] bond1: left promiscuous mode [ 224.746318][ T9541] bond1: left allmulticast mode [ 224.752294][ T9541] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 224.759774][ T9541] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 224.771002][ T9541] bridge1: left promiscuous mode [ 224.779469][ T9541] bridge1: left allmulticast mode [ 224.791674][ T9541] vlan2: left promiscuous mode [ 224.796692][ T9541] bridge0: left promiscuous mode [ 224.846640][ T9541] vlan0: left allmulticast mode [ 224.851710][ T9541] veth0_vlan: left allmulticast mode [ 224.861495][ T9541] vlan0: left promiscuous mode [ 224.869502][ T9541] macvtap1: left promiscuous mode [ 224.879653][ T9541] macvtap1: left allmulticast mode [ 225.093793][ T24] hsr0 speed is unknown, defaulting to 1000 [ 225.100565][ T5958] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.110412][ T24] syz1: Port: 1 Link DOWN [ 225.115171][ T5958] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.139130][ T9573] policy can only be matched on NF_INET_PRE_ROUTING [ 225.139152][ T9573] unable to load match [ 225.156494][ T5958] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.207321][ T5958] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.475973][ T9595] tipc: Enabled bearer , priority 0 [ 225.509588][ T9595] syzkaller0: entered promiscuous mode [ 225.527901][ T9595] syzkaller0: entered allmulticast mode [ 225.690545][ T9595] tipc: Resetting bearer [ 225.732505][ T9594] tipc: Resetting bearer [ 225.792925][ T9594] tipc: Disabling bearer [ 225.838935][ T9622] netlink: 'syz.4.1047': attribute type 4 has an invalid length. [ 226.287736][ T9647] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 226.458314][ T9661] netlink: 'syz.2.1059': attribute type 32 has an invalid length. [ 226.480552][ T9661] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 226.621400][ T9665] ip6gre1: entered allmulticast mode [ 227.185896][ T1340] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 227.977400][ T9743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.050957][ T9746] netlink: 'syz.3.1080': attribute type 8 has an invalid length. [ 228.184229][ T9752] __nla_validate_parse: 9 callbacks suppressed [ 228.184250][ T9752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1081'. [ 228.259242][ T9754] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1082'. [ 229.227351][ T9799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1093'. [ 229.418143][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'. [ 229.449642][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1098'. [ 229.471010][ T9816] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1096'. [ 229.499684][ T9816] 8021q: VLANs not supported on ip6tnl0 [ 229.737522][ T9824] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1101'. [ 229.964661][ T9834] tipc: Enabled bearer , priority 0 [ 229.974177][ T9834] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 229.981811][ T9834] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 230.006595][ T9834] tipc: Resetting bearer [ 230.031113][ T5958] tipc: Resetting bearer [ 230.063121][ T9838] : entered promiscuous mode [ 230.083309][ T9834] tipc: Resetting bearer [ 230.272822][ T9863] netlink: 'syz.0.1113': attribute type 1 has an invalid length. [ 230.299895][ T9863] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1113'. [ 230.339892][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1113'. [ 230.410483][ T9873] netlink: 159784 bytes leftover after parsing attributes in process `syz.1.1116'. [ 231.481309][ T9937] netlink: 'syz.1.1137': attribute type 1 has an invalid length. [ 231.525143][ T9937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.562715][ T9939] bond4: (slave veth1): Enslaving as an active interface with a down link [ 231.609341][ T9937] bond4: (slave veth0_to_bond): making interface the new active one [ 231.619846][ T9937] veth0_to_bond: entered promiscuous mode [ 231.627295][ T9937] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 232.538186][T10001] tipc: Enabling of bearer rejected, already enabled [ 232.716166][T10014] netlink: 'syz.4.1157': attribute type 11 has an invalid length. [ 233.649100][T10078] __nla_validate_parse: 15 callbacks suppressed [ 233.649123][T10078] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1175'. [ 233.803659][T10079] nbd1: detected capacity change from 0 to 127 [ 234.030967][T10084] netlink: 'syz.0.1178': attribute type 23 has an invalid length. [ 234.258139][T10110] vlan2: entered promiscuous mode [ 234.270565][T10110] bridge0: entered promiscuous mode [ 234.434628][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1187'. [ 234.479617][ T5866] block nbd1: Receive control failed (result -32) [ 234.583838][T10126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1190'. [ 234.764741][T10135] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1194'. [ 235.121461][T10160] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1199'. [ 235.139506][T10160] openvswitch: netlink: Flow actions attr not present in new flow. [ 235.451893][T10174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1203'. [ 235.949013][T10203] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1213'. [ 236.325620][T10217] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 236.336015][T10218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.595724][T10233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.699502][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1223'. [ 236.754081][T10237] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 236.796573][T10240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1224'. [ 237.110906][T10261] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1231'. [ 237.184061][T10262] bond0: entered promiscuous mode [ 237.212684][T10262] bond_slave_0: entered promiscuous mode [ 237.251865][T10262] bond_slave_1: entered promiscuous mode [ 237.278405][T10268] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 237.320546][T10269] : entered promiscuous mode [ 237.480154][T10282] netlink: 'syz.3.1238': attribute type 10 has an invalid length. [ 237.526891][T10282] bond0: (slave dummy0): Releasing backup interface [ 237.553845][T10286] netlink: 'syz.3.1238': attribute type 10 has an invalid length. [ 237.580587][T10282] team0: Port device dummy0 added [ 237.640430][T10286] team0: Port device dummy0 removed [ 237.694058][T10290] netlink: 'syz.2.1242': attribute type 13 has an invalid length. [ 237.695022][T10286] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 237.704465][T10290] netlink: 'syz.2.1242': attribute type 58 has an invalid length. [ 237.800300][T10299] netlink: 'syz.3.1246': attribute type 1 has an invalid length. [ 237.896644][T10299] 8021q: adding VLAN 0 to HW filter on device bond5 [ 239.228607][T10355] hsr0 speed is unknown, defaulting to 1000 [ 239.731818][T10384] tipc: Enabled bearer , priority 0 [ 239.779027][T10384] syzkaller0: entered promiscuous mode [ 239.804923][T10384] syzkaller0: entered allmulticast mode [ 239.956340][T10384] tipc: Resetting bearer [ 240.039618][T10384] tipc: Disabling bearer [ 240.069271][T10399] lo: entered promiscuous mode [ 240.093558][T10399] netlink: 'syz.3.1280': attribute type 2 has an invalid length. [ 240.160132][T10399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.425001][T10424] xfrm1: entered allmulticast mode [ 240.448257][ T5866] block nbd2: Receive control failed (result -32) [ 240.583014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.815632][T10445] __nla_validate_parse: 2 callbacks suppressed [ 240.815653][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 240.975005][T10445] macvtap2: entered promiscuous mode [ 240.980464][T10445] vlan0: entered promiscuous mode [ 240.987408][T10445] macvtap2: entered allmulticast mode [ 240.993863][T10445] vlan0: entered allmulticast mode [ 240.999139][T10445] veth0_vlan: entered allmulticast mode [ 241.165580][T10458] Unsupported ieee802154 address type: 0 [ 241.335406][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1297'. [ 241.364714][T10470] nbd: must specify a size in bytes for the device [ 241.439745][T10468] lo: left promiscuous mode [ 241.445495][T10468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1297'. [ 241.467231][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1300'. [ 241.783192][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1304'. [ 241.838839][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1304'. [ 241.901298][T10502] tipc: Started in network mode [ 241.922196][T10502] tipc: Node identity fffff001, cluster identity 4711 [ 241.936638][T10502] tipc: Node number set to 4294963201 [ 241.971296][T10503] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1307'. [ 241.982887][T10499] hsr0 speed is unknown, defaulting to 1000 [ 242.327717][T10532] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20000 [ 242.351400][T10532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1309'. [ 242.479095][T10532] ip6_vti0: entered promiscuous mode [ 242.540696][T10532] ip6_vti0: entered allmulticast mode [ 242.648905][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1313'. [ 242.667374][T10529] hsr0 speed is unknown, defaulting to 1000 [ 243.112929][ T75] veth0_to_bond: left promiscuous mode [ 243.168532][T10562] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20002 [ 243.266594][T10570] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1319'. [ 243.276390][T10570] netlink: 'syz.1.1319': attribute type 3 has an invalid length. [ 243.286401][T10570] netlink: 'syz.1.1319': attribute type 2 has an invalid length. [ 243.316264][T10571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.364572][T10567] netlink: 'syz.4.1321': attribute type 1 has an invalid length. [ 243.618402][T10585] vxlan0: entered promiscuous mode [ 243.648115][T10585] vxlan0: entered allmulticast mode [ 243.685013][ T3496] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.707655][ T3496] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.777195][ T3496] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.810663][ T3496] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.989618][T10599] dummy0: entered promiscuous mode [ 244.014504][T10599] dummy0: left promiscuous mode [ 244.415028][T10607] team0 (unregistering): Port device team_slave_0 removed [ 244.427869][T10607] team0 (unregistering): Port device team_slave_1 removed [ 245.042161][T10646] veth0_to_batadv: mtu less than device minimum [ 245.083956][T10653] netlink: 'syz.4.1346': attribute type 21 has an invalid length. [ 245.108891][T10653] IPv6: NLM_F_CREATE should be specified when creating new route [ 245.119230][T10653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.126844][T10653] IPv6: NLM_F_CREATE should be set when creating new route [ 245.134250][T10653] IPv6: NLM_F_CREATE should be set when creating new route [ 245.141512][T10653] IPv6: NLM_F_CREATE should be set when creating new route [ 245.233683][T10665] openvswitch: netlink: Missing key (keys=40, expected=100) [ 245.812822][T10708] netlink: 'syz.2.1362': attribute type 1 has an invalid length. [ 246.443484][T10739] __nla_validate_parse: 12 callbacks suppressed [ 246.443508][T10739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1369'. [ 246.459856][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'. [ 246.500136][T10738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1368'. [ 246.559218][T10744] tipc: Enabled bearer , priority 0 [ 246.601477][T10743] syzkaller0: entered promiscuous mode [ 246.617988][T10743] syzkaller0: entered allmulticast mode [ 246.720203][T10747] tipc: Resetting bearer [ 246.783285][T10747] tipc: Disabling bearer [ 246.786808][T10757] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1374'. [ 246.831148][T10753] syzkaller1: entered promiscuous mode [ 246.842883][T10753] syzkaller1: entered allmulticast mode [ 247.306150][T10776] syzkaller1: entered promiscuous mode [ 247.332982][T10776] syzkaller1: entered allmulticast mode [ 247.657760][T10794] netlink: 'syz.1.1381': attribute type 21 has an invalid length. [ 247.697180][T10794] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1381'. [ 247.713407][T10797] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 247.828318][T10798] hsr0 speed is unknown, defaulting to 1000 [ 248.200474][T10827] netlink: 'syz.2.1391': attribute type 1 has an invalid length. [ 248.215795][T10829] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1392'. [ 248.334207][T10833] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1393'. [ 248.450950][T10834] 8021q: adding VLAN 0 to HW filter on device bond6 [ 248.469020][T10834] bond5: (slave bond6): making interface the new active one [ 248.484278][T10834] bond5: (slave bond6): Enslaving as an active interface with an up link [ 248.618307][T10832] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1393'. [ 248.669000][T10856] netlink: 'syz.3.1399': attribute type 23 has an invalid length. [ 248.685552][T10855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1400'. [ 248.783677][T10855] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 248.912631][T10864] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 249.251941][T10892] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1409'. [ 249.282303][T10892] hsr_slave_1: left promiscuous mode [ 249.541871][T10903] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.465584][T10959] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 250.516021][T10959] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 250.538598][T10959] tipc: Resetting bearer [ 251.474202][T11006] __nla_validate_parse: 4 callbacks suppressed [ 251.474224][T11006] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1443'. [ 251.965599][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1451'. [ 251.982801][T11033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1451'. [ 251.991824][T11033] netlink: 'syz.4.1451': attribute type 6 has an invalid length. [ 252.120049][T11039] netlink: 'syz.2.1453': attribute type 1 has an invalid length. [ 252.175207][T11038] geneve2: entered promiscuous mode [ 252.249905][T11045] netlink: 'syz.4.1455': attribute type 22 has an invalid length. [ 252.261673][T11045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1455'. [ 252.280649][ T5958] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.290847][ T5958] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.301282][T11045] netlink: 'syz.4.1455': attribute type 22 has an invalid length. [ 252.309341][ T5958] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.320838][T11045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1455'. [ 252.333421][ T5958] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.522235][T11059] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.1458'. [ 252.628177][T11071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1464'. [ 253.055381][T11091] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1470'. [ 253.068648][T11093] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1470'. [ 253.238433][T11098] 8021q: adding VLAN 0 to HW filter on device bond7 [ 253.257375][T11098] team0: Port device bond7 added [ 253.264090][T11103] : renamed from xfrm0 (while UP) [ 253.350301][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 253.363363][T11116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.484461][T11116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.813979][T11139] netlink: 'syz.1.1481': attribute type 4 has an invalid length. [ 253.840755][T11139] netlink: 'syz.1.1481': attribute type 4 has an invalid length. [ 253.953766][T11142] netlink: 'syz.0.1482': attribute type 7 has an invalid length. [ 253.964830][T11142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.611951][T11176] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 255.039550][T11220] netlink: 'syz.0.1501': attribute type 10 has an invalid length. [ 255.119915][T11220] team0: Port device dummy0 added [ 255.231727][T11230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.224687][T11280] netlink: 'syz.4.1516': attribute type 9 has an invalid length. [ 256.289125][T11280] netlink: 'syz.4.1516': attribute type 9 has an invalid length. [ 256.633437][T11304] __nla_validate_parse: 7 callbacks suppressed [ 256.633463][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1526'. [ 256.805933][T11313] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1531'. [ 257.091016][T11330] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1533'. [ 257.142756][T11334] openvswitch: netlink: Actions may not be safe on all matching packets [ 257.167083][T11339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1536'. [ 257.176864][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1537'. [ 257.281242][T11344] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 257.771331][T11374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.793197][T11375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.834809][T11376] netlink: 'syz.4.1547': attribute type 1 has an invalid length. [ 257.860918][T11378] netlink: 'syz.2.1549': attribute type 4 has an invalid length. [ 258.329564][T11407] netlink: 'syz.1.1558': attribute type 10 has an invalid length. [ 258.361332][T11407] bond0: (slave wlan1): Opening slave failed [ 258.815330][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1566'. [ 258.831240][T11437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1566'. [ 259.013221][T11450] netlink: 'syz.1.1571': attribute type 5 has an invalid length. [ 259.021018][T11450] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1571'. [ 259.031638][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1571'. [ 259.096397][T11453] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 259.368167][T11462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1575'. [ 259.395874][T11466] netlink: 'syz.4.1577': attribute type 16 has an invalid length. [ 259.436030][T11466] netlink: 'syz.4.1577': attribute type 3 has an invalid length. [ 259.464336][T11462] pim6reg1: entered promiscuous mode [ 259.470667][T11462] pim6reg1: entered allmulticast mode [ 259.596059][T11468] netlink: 'syz.1.1578': attribute type 1 has an invalid length. [ 259.649863][T11471] netlink: 'syz.3.1579': attribute type 12 has an invalid length. [ 259.807795][T11476] bond8: (slave gretap1): making interface the new active one [ 259.826409][T11476] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 260.504961][T11512] dvmrp0: entered allmulticast mode [ 260.605872][T11519] dvmrp0: left allmulticast mode [ 260.926892][T11537] veth0: entered promiscuous mode [ 260.956154][T11536] veth0: left promiscuous mode [ 261.224275][T11553] tipc: Enabled bearer , priority 0 [ 261.231362][T11553] tipc: Enabling of bearer rejected, already enabled [ 261.307405][T11555] syzkaller0: entered promiscuous mode [ 261.330633][T11555] syzkaller0: entered allmulticast mode [ 261.345936][T11553] tipc: Enabling of bearer rejected, already enabled [ 261.376977][T11553] tipc: Enabling of bearer rejected, already enabled [ 261.457532][T11562] 8021q: adding VLAN 0 to HW filter on device bond4 [ 261.478830][T11562] team0: Port device bond4 added [ 261.637217][T11560] tipc: Resetting bearer [ 261.694091][T11560] tipc: Disabling bearer [ 261.872646][T11592] __nla_validate_parse: 6 callbacks suppressed [ 261.872669][T11592] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1614'. [ 262.543000][T11623] xt_limit: Overflow, try lower: 604147548/4200216962 [ 262.616373][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1628'. [ 262.648353][T11634] netlink: 'syz.4.1629': attribute type 13 has an invalid length. [ 262.671518][T11634] lo: entered promiscuous mode [ 262.681626][T11634] lo: entered allmulticast mode [ 262.691517][T11634] tunl0: entered promiscuous mode [ 262.705223][T11634] tunl0: entered allmulticast mode [ 262.720912][T11634] gre0: entered promiscuous mode [ 262.728505][T11634] gre0: entered allmulticast mode [ 262.744217][T11634] gretap0: entered promiscuous mode [ 262.750874][T11634] gretap0: entered allmulticast mode [ 262.767012][T11634] gretap0: refused to change device tx_queue_len [ 262.788738][T11634] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 262.809745][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1630'. [ 262.827227][T11643] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1630'. [ 262.873224][T11641] bridge0: port 3(syz_tun) entered blocking state [ 262.891541][T11641] bridge0: port 3(syz_tun) entered disabled state [ 262.928593][T11641] syz_tun: entered allmulticast mode [ 262.955349][T11641] syz_tun: entered promiscuous mode [ 263.085060][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'. [ 263.096967][T11641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1631'. [ 263.376635][T11672] netlink: 'syz.4.1638': attribute type 83 has an invalid length. [ 263.515565][T11682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1640'. [ 263.525360][T11682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1640'. [ 264.104864][T11710] netlink: 'syz.1.1648': attribute type 1 has an invalid length. [ 264.365179][T11713] bond9: (slave bridge2): making interface the new active one [ 264.380263][T11713] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 264.433612][T11724] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1652'. [ 264.624861][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1654'. [ 265.175957][T11771] netlink: 'syz.4.1665': attribute type 1 has an invalid length. [ 266.099041][T11823] netem: incorrect ge model size [ 266.109765][T11823] netem: change failed [ 266.389880][T11838] netlink: 'syz.2.1686': attribute type 9 has an invalid length. [ 266.490912][T11853] netlink: 'syz.1.1689': attribute type 1 has an invalid length. [ 266.521140][T11854] vxcan3: entered promiscuous mode [ 266.570859][T11853] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 267.017462][T11890] __nla_validate_parse: 7 callbacks suppressed [ 267.017485][T11890] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1695'. [ 267.236037][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1700'. [ 267.274461][T11900] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1702'. [ 267.294799][T11900] netlink: 'syz.2.1702': attribute type 9 has an invalid length. [ 267.316639][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1702'. [ 267.348994][T11901] netlink: 'syz.0.1701': attribute type 10 has an invalid length. [ 267.357368][T11901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1701'. [ 267.367339][T11901] batadv0: entered promiscuous mode [ 267.378664][T11901] batadv0: entered allmulticast mode [ 267.385494][T11901] bridge0: port 4(batadv0) entered blocking state [ 267.406364][T11901] bridge0: port 4(batadv0) entered disabled state [ 267.746930][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 267.756618][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 267.851412][T11932] tipc: Enabling of bearer rejected, already enabled [ 267.886506][T11935] bridge: RTM_NEWNEIGH with invalid ether address [ 267.897242][T11932] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 267.923327][T11932] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 267.931413][T11932] tipc: Resetting bearer [ 267.960645][T11933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.016371][T11932] netem: change failed [ 268.826061][T11987] sctp: [Deprecated]: syz.0.1730 (pid 11987) Use of int in maxseg socket option. [ 268.826061][T11987] Use struct sctp_assoc_value instead [ 268.857647][ T8886] tipc: Subscription rejected, illegal request [ 268.941589][T11992] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 268.952960][T11992] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 269.149515][T11995] policy can only be matched on NF_INET_PRE_ROUTING [ 269.149540][T11995] unable to load match [ 269.204595][T12007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1737'. [ 269.380126][T12013] nbd: must specify an index to disconnect [ 269.476365][T12017] netlink: 'syz.3.1741': attribute type 24 has an invalid length. [ 269.682680][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1742'. [ 269.948860][T12031] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 270.252392][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1751'. [ 270.508466][T12057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1749'. [ 270.522395][T12057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1749'. [ 270.603753][T12057] gretap2: entered promiscuous mode [ 270.627166][T12057] gretap2: entered allmulticast mode [ 271.071443][T12097] netlink: 'syz.4.1766': attribute type 4 has an invalid length. [ 271.097965][T12097] netlink: 'syz.4.1766': attribute type 4 has an invalid length. [ 271.405127][T12110] openvswitch: netlink: IPv6 tunnel dst address is zero [ 271.464379][T12110] netlink: 'syz.4.1770': attribute type 21 has an invalid length. [ 271.482227][T12110] netlink: 'syz.4.1770': attribute type 6 has an invalid length. [ 271.539153][T12121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.637003][T12122] 8021q: VLANs not supported on wg1 [ 272.618653][T12181] __nla_validate_parse: 9 callbacks suppressed [ 272.618675][T12181] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1792'. [ 272.807995][T12188] netlink: 'syz.3.1794': attribute type 25 has an invalid length. [ 272.817944][T12186] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 272.866824][T12192] syzkaller1: entered promiscuous mode [ 272.889573][T12195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1797'. [ 272.902823][T12192] syzkaller1: entered allmulticast mode [ 272.911200][T12195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1797'. [ 272.924275][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1796'. [ 272.933516][T12192] netlink: 'syz.2.1796': attribute type 5 has an invalid length. [ 272.941272][T12192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1796'. [ 273.206056][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1798'. [ 273.438556][T12224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1806'. [ 273.448983][T12224] tipc: Enabling of bearer rejected, failed to enable media [ 273.465931][T12227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1805'. [ 273.714299][T12238] netlink: 'syz.2.1809': attribute type 1 has an invalid length. [ 273.727213][T12238] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1809'. [ 273.751770][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1809'. [ 274.948422][T12317] veth0: entered promiscuous mode [ 274.955361][T12317] veth0: left promiscuous mode [ 274.961243][T12317] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 275.182765][T12329] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 275.471297][T12344] netlink: 'syz.0.1842': attribute type 83 has an invalid length. [ 275.478756][ T5958] batman_adv: batadv0: IGMP Querier appeared [ 275.485397][ T5958] batman_adv: batadv0: MLD Querier appeared [ 275.654509][T12358] netlink: 'syz.1.1847': attribute type 24 has an invalid length. [ 275.679004][T12358] ip6erspan0: entered promiscuous mode [ 275.695023][T12358] ip6erspan0: entered allmulticast mode [ 275.733051][T12363] netlink: 'syz.2.1849': attribute type 58 has an invalid length. [ 276.132822][T12373] tipc: Enabled bearer , priority 0 [ 276.156140][T12373] syzkaller0: entered promiscuous mode [ 276.167792][T12373] syzkaller0: entered allmulticast mode [ 276.243760][T12373] tipc: Resetting bearer [ 276.258976][T12370] tipc: Resetting bearer [ 276.309155][T12370] tipc: Disabling bearer [ 276.538284][T12392] sctp: [Deprecated]: syz.1.1860 (pid 12392) Use of int in maxseg socket option. [ 276.538284][T12392] Use struct sctp_assoc_value instead [ 276.819464][T12413] netlink: 'syz.1.1866': attribute type 6 has an invalid length. [ 276.839129][T12412] netlink: 'syz.1.1866': attribute type 6 has an invalid length. [ 277.275377][T12440] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 277.287110][T12442] netlink: 'syz.3.1874': attribute type 1 has an invalid length. [ 277.312466][T12442] netlink: 'syz.3.1874': attribute type 11 has an invalid length. [ 277.369502][T12446] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 277.549972][T12452] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 277.723224][T12463] __nla_validate_parse: 20 callbacks suppressed [ 277.723244][T12463] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1882'. [ 277.897435][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1884'. [ 277.946828][T12475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1885'. [ 277.981329][T12475] openvswitch: netlink: EtherType 257 is less than min 600 [ 278.908034][T12508] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1890'. [ 278.956123][T12506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1893'. [ 279.388788][T12516] syzkaller1: entered promiscuous mode [ 279.401224][T12516] syzkaller1: entered allmulticast mode [ 279.693775][T12540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1902'. [ 279.721527][T12539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1902'. [ 279.730614][T12539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.741128][T12539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.195623][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1909'. [ 281.272838][T12596] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1922'. [ 281.287574][T12596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1922'. [ 281.390045][T12601] syzkaller0: entered promiscuous mode [ 281.403102][T12601] syzkaller0: entered allmulticast mode [ 281.566202][T12611] netlink: 'syz.3.1929': attribute type 1 has an invalid length. [ 281.813568][T12625] netlink: 'syz.1.1932': attribute type 4 has an invalid length. [ 281.832454][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.865403][T12637] netlink: 'syz.1.1932': attribute type 4 has an invalid length. [ 281.943464][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.024695][T12640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.091835][T12625] team0: Device vti0 is of different type [ 282.790733][T12682] __nla_validate_parse: 7 callbacks suppressed [ 282.790754][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1948'. [ 282.921245][T12691] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1953'. [ 283.661232][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1964'. [ 283.669163][T12742] syz.0.1968 uses old SIOCAX25GETINFO [ 284.076668][T12776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1974'. [ 284.100186][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'. [ 284.127141][T12768] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1974'. [ 284.154091][T12768] netlink: 'syz.1.1974': attribute type 1 has an invalid length. [ 284.570437][T12798] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 284.803523][T12820] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1987'. [ 284.902183][ T5868] Bluetooth: hci4: command 0x0405 tx timeout [ 285.228014][T12837] netlink: 'syz.1.1992': attribute type 33 has an invalid length. [ 285.396235][T12842] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:20003 [ 285.605615][T12846] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1994'. [ 285.877024][T12863] netlink: 'syz.3.1997': attribute type 4 has an invalid length. [ 285.923391][T12863] netlink: 'syz.3.1997': attribute type 4 has an invalid length. [ 286.093811][T12874] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2002'. [ 286.097332][T12871] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2000'. [ 286.124476][T12876] syz_tun: left allmulticast mode [ 286.139765][T12876] syz_tun: left promiscuous mode [ 286.145979][ T8651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.155145][T12876] bridge0: port 3(syz_tun) entered disabled state [ 286.164950][T12874] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 286.184202][T12874] openvswitch: netlink: Duplicate key (type 0). [ 286.206935][T12876] team0: Port device dummy0 removed [ 286.246487][T12876] bridge0: port 4(batadv0) entered disabled state [ 286.318777][T12876] bridge_slave_0: left allmulticast mode [ 286.325286][T12876] bridge_slave_0: left promiscuous mode [ 286.331135][T12876] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.361198][T12876] bridge_slave_1: left allmulticast mode [ 286.369111][T12876] bridge_slave_1: left promiscuous mode [ 286.376269][T12876] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.403071][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.427709][T12876] bond3: (slave veth0_to_bond): Releasing active interface [ 286.474769][T12876] bond0: (slave bond_slave_0): Releasing backup interface [ 286.508612][T12876] bond_slave_0: left promiscuous mode [ 286.540020][T12876] bond0: (slave bond_slave_1): Releasing backup interface [ 286.550743][T12876] bond_slave_1: left promiscuous mode [ 286.573917][T12876] team0: Port device team_slave_0 removed [ 286.604616][T12876] team0: Port device team_slave_1 removed [ 286.615324][T12876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.632753][T12876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.667170][T12876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.685466][T12876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.735624][T12876] bond1: (slave gretap1): Releasing active interface [ 286.783937][T12876] veth1_to_bond: left allmulticast mode [ 286.790443][T12876] veth1_to_bond: left promiscuous mode [ 286.822854][T12876] team0: Port device macvlan4 removed [ 286.849636][T12876] bond3: (slave veth7): Releasing active interface [ 286.884696][T12876] bond4: (slave gretap2): Releasing active interface [ 287.116225][T12893] netlink: zone id is out of range [ 287.150307][T12893] netlink: zone id is out of range [ 287.175479][T12893] netlink: zone id is out of range [ 287.183961][T12893] netlink: zone id is out of range [ 287.189230][T12893] netlink: del zone limit has 4 unknown bytes [ 287.216466][ T5868] block nbd3: Receive control failed (result -32) [ 287.458627][T12907] syzkaller1: entered promiscuous mode [ 287.486488][T12907] syzkaller1: entered allmulticast mode [ 287.863081][T12925] __nla_validate_parse: 1 callbacks suppressed [ 287.863103][T12925] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2017'. [ 288.924304][T12968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2031'. [ 289.616703][T13000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2039'. [ 289.932362][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2040'. [ 290.057844][T13016] netlink: 'syz.3.2042': attribute type 1 has an invalid length. [ 290.067807][T13016] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2042'. [ 290.094721][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2042'. [ 290.171774][T13016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2042'. [ 290.691373][T13043] net_ratelimit: 1 callbacks suppressed [ 290.691394][T13043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.095035][T13061] veth0_to_team: entered promiscuous mode [ 291.101016][T13061] veth0_to_team: entered allmulticast mode [ 291.249071][T13070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2059'. [ 291.459367][T13076] syzkaller0: entered promiscuous mode [ 291.467931][T13076] syzkaller0: entered allmulticast mode [ 291.517020][T13076] tipc: Enabling of bearer rejected, failed to enable media [ 291.545971][T13076] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 293.025938][T13084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2062'. [ 293.040754][T13085] syzkaller1: entered promiscuous mode [ 293.046475][T13085] syzkaller1: entered allmulticast mode [ 293.399094][T13121] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2076'. [ 293.968791][T13174] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2085'. [ 294.259889][T13200] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2091'. [ 294.379953][T13203] netlink: 'syz.1.2092': attribute type 11 has an invalid length. [ 294.388192][T13203] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2092'. [ 294.977888][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2099'. [ 295.001210][T13229] geneve2: entered promiscuous mode [ 295.012468][T13229] geneve2: entered allmulticast mode [ 295.137639][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2100'. [ 295.190749][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'. [ 295.215886][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'. [ 295.271104][T13190] lec:lec_atm_close: lec0: Shut down! [ 295.630987][T13257] xt_HMARK: proto mask must be zero with L3 mode [ 295.684324][T13257] netlink: 'syz.0.2109': attribute type 15 has an invalid length. [ 295.853032][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2110'. [ 297.755506][T13340] 0ªî{X¹¦: renamed from gretap0 [ 297.777531][T13340] 0ªî{X¹¦: entered allmulticast mode [ 297.806115][T13340] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 298.451826][T13368] syzkaller0: entered promiscuous mode [ 298.467040][T13368] syzkaller0: entered allmulticast mode [ 299.330852][T13412] __nla_validate_parse: 7 callbacks suppressed [ 299.330869][T13412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2149'. [ 300.127055][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2146'. [ 300.572176][T13435] netlink: 'syz.4.2158': attribute type 10 has an invalid length. [ 300.607351][T13435] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2158'. [ 300.647133][T13435] batadv0: entered promiscuous mode [ 300.673288][T13435] batadv0: entered allmulticast mode [ 300.679475][T13435] bridge0: port 3(batadv0) entered blocking state [ 300.701106][T13435] bridge0: port 3(batadv0) entered disabled state [ 300.729479][T13435] bridge0: port 3(batadv0) entered blocking state [ 300.736183][T13435] bridge0: port 3(batadv0) entered forwarding state [ 300.791291][T13447] netlink: 'syz.0.2161': attribute type 1 has an invalid length. [ 300.919402][T13453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2164'. [ 300.933343][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2164'. [ 300.970194][T13454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2164'. [ 300.995252][T13456] netlink: 'syz.1.2163': attribute type 4 has an invalid length. [ 301.056256][T13455] netlink: 'syz.1.2163': attribute type 4 has an invalid length. [ 301.171728][T13475] netlink: 'syz.0.2169': attribute type 32 has an invalid length. [ 301.199297][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2169'. [ 301.245095][ T75] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 301.254846][T13467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2165'. [ 301.264249][ T75] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 301.269080][T13475] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 301.410212][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2170'. [ 301.429626][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2171'. [ 301.705071][T13505] dvmrp0: entered allmulticast mode [ 301.712710][T13505] netlink: 'syz.1.2174': attribute type 4 has an invalid length. [ 301.741755][T13505] netlink: 'syz.1.2174': attribute type 4 has an invalid length. [ 302.077299][T13523] openvswitch: netlink: Missing key (keys=40, expected=80) [ 302.128460][T13529] tipc: Enabling of bearer rejected, failed to enable media [ 302.758744][T13562] tipc: Enabling of bearer rejected, failed to enable media [ 302.806148][T13565] 8021q: VLANs not supported on lo [ 302.970560][T13574] tipc: Enabled bearer , priority 0 [ 302.987579][T13574] syzkaller0: entered promiscuous mode [ 303.001711][T13574] syzkaller0: entered allmulticast mode [ 303.058022][T13583] syzkaller1: entered promiscuous mode [ 303.064880][T13583] syzkaller1: entered allmulticast mode [ 303.084272][T13574] tipc: Resetting bearer [ 303.253805][T13573] tipc: Resetting bearer [ 303.300313][T13573] tipc: Disabling bearer [ 303.655914][T13621] netem: change failed [ 304.568776][T13667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.697599][T13674] __nla_validate_parse: 2 callbacks suppressed [ 304.697621][T13674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2226'. [ 304.925851][T13687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2229'. [ 305.030405][T13691] 0ªî{X¹¦: left allmulticast mode [ 305.107234][T13700] sctp: [Deprecated]: syz.1.2232 (pid 13700) Use of int in max_burst socket option. [ 305.107234][T13700] Use struct sctp_assoc_value instead [ 305.660537][T13726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2241'. [ 305.731235][T13720] bond5: entered promiscuous mode [ 305.738397][T13720] bond5: entered allmulticast mode [ 305.747675][T13720] 8021q: adding VLAN 0 to HW filter on device bond5 [ 305.814800][T13728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2240'. [ 305.838807][T13728] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2240'. [ 306.078413][T13750] netlink: 'syz.3.2246': attribute type 6 has an invalid length. [ 306.324381][T13762] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2251'. [ 306.350767][T13762] netlink: 'syz.4.2251': attribute type 2 has an invalid length. [ 306.379330][T13762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2251'. [ 307.020335][T13787] tipc: Enabled bearer , priority 0 [ 307.035111][T13787] syzkaller0: entered promiscuous mode [ 307.041401][T13787] syzkaller0: entered allmulticast mode [ 307.147805][T13786] tipc: Resetting bearer [ 307.188266][T13801] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2265'. [ 307.204593][T13786] tipc: Disabling bearer [ 307.340793][T13808] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2266'. [ 307.347871][T13806] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2266'. [ 307.387236][T13803] bond0: entered promiscuous mode [ 307.398093][T13803] bond_slave_0: entered promiscuous mode [ 307.409210][T13803] bond_slave_1: entered promiscuous mode [ 307.419777][T13803] bond0: left promiscuous mode [ 307.428208][T13803] bond_slave_0: left promiscuous mode [ 307.447255][T13803] bond_slave_1: left promiscuous mode [ 307.546719][T13816] syz_tun: entered allmulticast mode [ 307.566392][T13816] dvmrp8: entered allmulticast mode [ 307.579610][T13818] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 307.588629][T13818] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 307.777604][T13829] veth5: entered allmulticast mode [ 307.795399][T13815] syz_tun: left allmulticast mode [ 307.800840][T13815] dvmrp8: left allmulticast mode [ 307.946827][T13836] netem: incorrect ge model size [ 307.953784][T13836] netem: change failed [ 308.069614][T13841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.361719][T13857] netlink: 'syz.4.2280': attribute type 21 has an invalid length. [ 308.375004][T13857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 308.565334][T13865] tipc: Enabling of bearer rejected, already enabled [ 308.585034][T13865] netem: change failed [ 309.531529][T13915] tc_dump_action: action bad kind [ 309.761155][T13925] __nla_validate_parse: 11 callbacks suppressed [ 309.761180][T13925] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2300'. [ 309.777877][T13925] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2300'. [ 309.932462][T13943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2305'. [ 310.011896][T13945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2307'. [ 310.106388][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2309'. [ 310.121648][T13959] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2310'. [ 310.135263][T13960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2308'. [ 310.163813][T13959] netlink: 'syz.3.2310': attribute type 7 has an invalid length. [ 310.188109][T13959] : entered promiscuous mode [ 310.214584][T13959] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2310'. [ 310.323076][T13968] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2312'. [ 310.389888][T13974] sctp: [Deprecated]: syz.0.2314 (pid 13974) Use of int in maxseg socket option. [ 310.389888][T13974] Use struct sctp_assoc_value instead [ 310.653594][T13992] netlink: 'syz.4.2319': attribute type 3 has an invalid length. [ 310.654820][T13987] tipc: Enabling of bearer rejected, failed to enable media [ 310.681635][T13992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.712936][T13997] erspan0: entered promiscuous mode [ 310.732353][T13997] erspan0: entered allmulticast mode [ 311.120620][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2328'. [ 311.185020][T14021] team1: entered promiscuous mode [ 311.190126][T14021] team1: entered allmulticast mode [ 311.235575][T14026] FAULT_INJECTION: forcing a failure. [ 311.235575][T14026] name failslab, interval 1, probability 0, space 0, times 1 [ 311.265433][T14029] pim6reg: entered allmulticast mode [ 311.270962][T14026] CPU: 0 UID: 0 PID: 14026 Comm: syz.1.2330 Not tainted syzkaller #0 PREEMPT(full) [ 311.270999][T14026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.271016][T14026] Call Trace: [ 311.271025][T14026] [ 311.271034][T14026] dump_stack_lvl+0x189/0x250 [ 311.271066][T14026] ? __pfx____ratelimit+0x10/0x10 [ 311.271094][T14026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.271120][T14026] ? __pfx__printk+0x10/0x10 [ 311.271158][T14026] ? __pfx___might_resched+0x10/0x10 [ 311.271185][T14026] should_fail_ex+0x414/0x560 [ 311.271220][T14026] should_failslab+0xa8/0x100 [ 311.271254][T14026] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 311.271285][T14026] ? __alloc_skb+0x112/0x2d0 [ 311.271322][T14026] __alloc_skb+0x112/0x2d0 [ 311.271359][T14026] netlink_sendmsg+0x5c6/0xb30 [ 311.271403][T14026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.271439][T14026] ? aa_sock_msg_perm+0xf1/0x1d0 [ 311.271476][T14026] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 311.271500][T14026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.271532][T14026] __sock_sendmsg+0x219/0x270 [ 311.271563][T14026] ____sys_sendmsg+0x505/0x830 [ 311.271592][T14026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.271626][T14026] ? import_iovec+0x74/0xa0 [ 311.271665][T14026] ___sys_sendmsg+0x21f/0x2a0 [ 311.271701][T14026] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.271766][T14026] ? __fget_files+0x2a/0x420 [ 311.271798][T14026] ? __fget_files+0x3a0/0x420 [ 311.271844][T14026] __x64_sys_sendmsg+0x19b/0x260 [ 311.271870][T14026] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.271903][T14026] ? __pfx_ksys_write+0x10/0x10 [ 311.271935][T14026] ? rcu_is_watching+0x15/0xb0 [ 311.271962][T14026] ? do_syscall_64+0xbe/0x3b0 [ 311.272005][T14026] do_syscall_64+0xfa/0x3b0 [ 311.272035][T14026] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.272065][T14026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.272087][T14026] ? clear_bhb_loop+0x60/0xb0 [ 311.272113][T14026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.272135][T14026] RIP: 0033:0x7fb2a6f8ebe9 [ 311.272160][T14026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.272180][T14026] RSP: 002b:00007fb2a7e05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.272207][T14026] RAX: ffffffffffffffda RBX: 00007fb2a71b5fa0 RCX: 00007fb2a6f8ebe9 [ 311.272224][T14026] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000006 [ 311.272237][T14026] RBP: 00007fb2a7e05090 R08: 0000000000000000 R09: 0000000000000000 [ 311.272250][T14026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.272262][T14026] R13: 00007fb2a71b6038 R14: 00007fb2a71b5fa0 R15: 00007ffcb4caa5e8 [ 311.272296][T14026] [ 311.738443][T14042] netlink: 'syz.3.2335': attribute type 10 has an invalid length. [ 311.780199][T14042] bond0: (slave wlan1): Opening slave failed [ 313.724299][T14144] netlink: 'syz.1.2362': attribute type 5 has an invalid length. [ 313.750802][T14144] geneve2: entered promiscuous mode [ 313.756723][T14144] geneve2: entered allmulticast mode [ 313.764467][ T37] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 313.812496][ T37] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 313.878006][ T37] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 314.204630][T14163] netlink: 'syz.3.2367': attribute type 8 has an invalid length. [ 314.766550][T14189] netlink: 'syz.3.2374': attribute type 19 has an invalid length. [ 314.805156][T14192] __nla_validate_parse: 5 callbacks suppressed [ 314.805179][T14192] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2376'. [ 314.839178][T14194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2375'. [ 315.035796][T14206] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 315.040593][T14207] netlink: 'syz.2.2380': attribute type 21 has an invalid length. [ 315.061393][T14207] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2380'. [ 315.108401][T14207] netlink: 'syz.2.2380': attribute type 5 has an invalid length. [ 315.143242][T14207] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2380'. [ 315.317806][T14222] mac80211_hwsim hwsim6 ÿ: renamed from wlan1 [ 315.535373][T14231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2387'. [ 315.771688][T14246] netlink: 'syz.2.2393': attribute type 1 has an invalid length. [ 315.951039][T14246] 8021q: adding VLAN 0 to HW filter on device bond9 [ 315.990054][T14250] bond9: (slave geneve3): making interface the new active one [ 316.001099][T14250] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 316.018912][ T75] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.051061][ T75] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.076137][ T75] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.094505][ T75] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.140715][T14259] sctp: [Deprecated]: syz.4.2397 (pid 14259) Use of int in max_burst socket option deprecated. [ 316.140715][T14259] Use struct sctp_assoc_value instead [ 316.231182][T14264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.395433][T14271] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2400'. [ 316.439209][T14278] tipc: Enabling of bearer rejected, already enabled [ 316.473529][T14279] netlink: 'syz.4.2402': attribute type 29 has an invalid length. [ 316.549529][T14286] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2404'. [ 316.859632][T14305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2409'. [ 316.917785][T14303] netlink: 'syz.0.2409': attribute type 10 has an invalid length. [ 317.019357][T14303] bridge_slave_1: entered promiscuous mode [ 317.027923][T14303] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 317.077046][T14312] tipc: Enabling of bearer rejected, already enabled [ 317.254680][T14312] tipc: Resetting bearer [ 317.280981][T14328] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2415'. [ 317.425512][T14334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2418'. [ 317.537506][T14346] netlink: 'syz.0.2423': attribute type 1 has an invalid length. [ 317.588341][T14349] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 317.656804][T14351] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 317.680030][T14351] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 317.865065][T14367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.979715][T14374] openvswitch: netlink: Unknown nsh attribute 0 [ 317.990736][T14374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.027624][T14372] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 318.218906][T14389] delete_channel: no stack [ 318.830847][T14421] openvswitch: netlink: IP tunnel dst address not specified [ 318.846321][T14423] netlink: 'syz.4.2443': attribute type 1 has an invalid length. [ 318.896904][T14423] geneve3: entered promiscuous mode [ 318.924482][T14423] geneve3: entered allmulticast mode [ 318.946707][T14107] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 318.970496][T14107] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 318.994914][T14107] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 319.007649][T14107] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 319.039095][T14429] netlink: 'syz.3.2446': attribute type 6 has an invalid length. [ 319.981709][T14483] __nla_validate_parse: 12 callbacks suppressed [ 319.981731][T14483] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2463'. [ 320.276723][T14505] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2468'. [ 320.369840][T14510] veth0_to_bridge: entered promiscuous mode [ 320.388703][T14510] veth0_to_bridge: left promiscuous mode [ 320.666868][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2472'. [ 320.831432][T14521] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 320.851153][T14521] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 320.921646][T14525] tipc: Enabled bearer , priority 0 [ 321.131582][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2477'. [ 321.146766][T14531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2477'. [ 321.170486][T14518] syzkaller0: entered promiscuous mode [ 321.182158][T14518] syzkaller0: entered allmulticast mode [ 321.195876][T14518] tipc: Resetting bearer [ 321.297516][T14535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.507038][ T37] tipc: Resetting bearer [ 321.534974][T14517] tipc: Resetting bearer [ 322.505553][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.210787][T14517] tipc: Disabling bearer [ 323.419101][T14578] FAULT_INJECTION: forcing a failure. [ 323.419101][T14578] name failslab, interval 1, probability 0, space 0, times 0 [ 323.436868][T14578] CPU: 1 UID: 0 PID: 14578 Comm: syz.1.2491 Not tainted syzkaller #0 PREEMPT(full) [ 323.436900][T14578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 323.436914][T14578] Call Trace: [ 323.436924][T14578] [ 323.436933][T14578] dump_stack_lvl+0x189/0x250 [ 323.436966][T14578] ? __pfx____ratelimit+0x10/0x10 [ 323.436996][T14578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.437023][T14578] ? __pfx__printk+0x10/0x10 [ 323.437062][T14578] ? __pfx___might_resched+0x10/0x10 [ 323.437081][T14578] ? fs_reclaim_acquire+0x7d/0x100 [ 323.437120][T14578] should_fail_ex+0x414/0x560 [ 323.437154][T14578] should_failslab+0xa8/0x100 [ 323.437188][T14578] __kmalloc_cache_noprof+0x70/0x3d0 [ 323.437219][T14578] ? flow_indr_dev_setup_offload+0x255/0x670 [ 323.437258][T14578] flow_indr_dev_setup_offload+0x255/0x670 [ 323.437291][T14578] ? __pfx_tc_block_indr_cleanup+0x10/0x10 [ 323.437317][T14578] tcf_block_offload_cmd+0x273/0x370 [ 323.437361][T14578] ? __pfx_tcf_block_offload_cmd+0x10/0x10 [ 323.437405][T14578] ? __pfx_down_write+0x10/0x10 [ 323.437432][T14578] ? tcf_block_get_ext+0x8d4/0x17d0 [ 323.437467][T14578] tcf_block_get_ext+0xfce/0x17d0 [ 323.437503][T14578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.437537][T14578] tcf_block_get+0x67/0xa0 [ 323.437566][T14578] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 323.437603][T14578] multiq_init+0x6d/0x2c0 [ 323.437634][T14578] ? __pfx_multiq_init+0x10/0x10 [ 323.437662][T14578] qdisc_create+0x7a9/0xea0 [ 323.437701][T14578] tc_modify_qdisc+0x1538/0x20e0 [ 323.437748][T14578] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 323.437822][T14578] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 323.437847][T14578] rtnetlink_rcv_msg+0x779/0xb70 [ 323.437884][T14578] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 323.437916][T14578] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 323.437945][T14578] ? ref_tracker_free+0x63a/0x7d0 [ 323.437976][T14578] ? __asan_memcpy+0x40/0x70 [ 323.438001][T14578] ? __pfx_ref_tracker_free+0x10/0x10 [ 323.438045][T14578] netlink_rcv_skb+0x205/0x470 [ 323.438079][T14578] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 323.438112][T14578] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 323.438169][T14578] ? netlink_deliver_tap+0x2e/0x1b0 [ 323.438210][T14578] netlink_unicast+0x82f/0x9e0 [ 323.438248][T14578] ? __pfx_netlink_unicast+0x10/0x10 [ 323.438284][T14578] ? netlink_sendmsg+0x642/0xb30 [ 323.438313][T14578] ? skb_put+0x11b/0x210 [ 323.438354][T14578] netlink_sendmsg+0x805/0xb30 [ 323.438397][T14578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.438434][T14578] ? aa_sock_msg_perm+0xf1/0x1d0 [ 323.438470][T14578] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 323.438493][T14578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.438526][T14578] __sock_sendmsg+0x219/0x270 [ 323.438558][T14578] ____sys_sendmsg+0x505/0x830 [ 323.438588][T14578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.438621][T14578] ? import_iovec+0x74/0xa0 [ 323.438651][T14578] ___sys_sendmsg+0x21f/0x2a0 [ 323.438676][T14578] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.438743][T14578] ? __fget_files+0x2a/0x420 [ 323.438782][T14578] ? __fget_files+0x3a0/0x420 [ 323.438828][T14578] __x64_sys_sendmsg+0x19b/0x260 [ 323.438854][T14578] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 323.438890][T14578] ? __pfx_ksys_write+0x10/0x10 [ 323.438915][T14578] ? rcu_is_watching+0x15/0xb0 [ 323.438943][T14578] ? do_syscall_64+0xbe/0x3b0 [ 323.438980][T14578] do_syscall_64+0xfa/0x3b0 [ 323.439009][T14578] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.439039][T14578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.439061][T14578] ? clear_bhb_loop+0x60/0xb0 [ 323.439087][T14578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.439107][T14578] RIP: 0033:0x7fb2a6f8ebe9 [ 323.439127][T14578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.439145][T14578] RSP: 002b:00007fb2a7e05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.439168][T14578] RAX: ffffffffffffffda RBX: 00007fb2a71b5fa0 RCX: 00007fb2a6f8ebe9 [ 323.439183][T14578] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000006 [ 323.439196][T14578] RBP: 00007fb2a7e05090 R08: 0000000000000000 R09: 0000000000000000 [ 323.439209][T14578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 323.439222][T14578] R13: 00007fb2a71b6038 R14: 00007fb2a71b5fa0 R15: 00007ffcb4caa5e8 [ 323.439256][T14578] [ 323.961437][T14595] netlink: 'syz.3.2494': attribute type 1 has an invalid length. [ 323.980263][T14590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2493'. [ 324.071784][T14603] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2495'. [ 324.100824][T14606] netlink: 'syz.3.2497': attribute type 1 has an invalid length. [ 324.362009][T14623] sctp: [Deprecated]: syz.0.2501 (pid 14623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.362009][T14623] Use struct sctp_sack_info instead [ 324.568216][T14627] FAULT_INJECTION: forcing a failure. [ 324.568216][T14627] name failslab, interval 1, probability 0, space 0, times 0 [ 324.591000][T14629] netlink: 'syz.4.2503': attribute type 10 has an invalid length. [ 324.603981][T14627] CPU: 0 UID: 0 PID: 14627 Comm: syz.1.2505 Not tainted syzkaller #0 PREEMPT(full) [ 324.604014][T14627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.604028][T14627] Call Trace: [ 324.604036][T14627] [ 324.604045][T14627] dump_stack_lvl+0x189/0x250 [ 324.604077][T14627] ? __pfx____ratelimit+0x10/0x10 [ 324.604107][T14627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.604134][T14627] ? __pfx__printk+0x10/0x10 [ 324.604168][T14627] ? __pfx___might_resched+0x10/0x10 [ 324.604190][T14627] ? fs_reclaim_acquire+0x7d/0x100 [ 324.604229][T14627] should_fail_ex+0x414/0x560 [ 324.604265][T14627] should_failslab+0xa8/0x100 [ 324.604299][T14627] __kmalloc_noprof+0xcb/0x4f0 [ 324.604327][T14627] ? tcf_block_get+0x67/0xa0 [ 324.604354][T14627] ? multiq_init+0x149/0x2c0 [ 324.604378][T14627] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 324.604415][T14627] multiq_init+0x149/0x2c0 [ 324.604446][T14627] ? __pfx_multiq_init+0x10/0x10 [ 324.604474][T14627] qdisc_create+0x7a9/0xea0 [ 324.604512][T14627] tc_modify_qdisc+0x1538/0x20e0 [ 324.604559][T14627] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 324.604622][T14627] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 324.604647][T14627] rtnetlink_rcv_msg+0x779/0xb70 [ 324.604683][T14627] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 324.604721][T14627] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 324.604750][T14627] ? ref_tracker_free+0x63a/0x7d0 [ 324.604781][T14627] ? __asan_memcpy+0x40/0x70 [ 324.604805][T14627] ? __pfx_ref_tracker_free+0x10/0x10 [ 324.604849][T14627] netlink_rcv_skb+0x205/0x470 [ 324.604883][T14627] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 324.604916][T14627] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 324.604962][T14627] ? netlink_deliver_tap+0x2e/0x1b0 [ 324.605007][T14627] netlink_unicast+0x82f/0x9e0 [ 324.605047][T14627] ? __pfx_netlink_unicast+0x10/0x10 [ 324.605079][T14627] ? netlink_sendmsg+0x642/0xb30 [ 324.605108][T14627] ? skb_put+0x11b/0x210 [ 324.605132][T14627] netlink_sendmsg+0x805/0xb30 [ 324.605177][T14627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.605213][T14627] ? aa_sock_msg_perm+0xf1/0x1d0 [ 324.605249][T14627] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 324.605273][T14627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.605307][T14627] __sock_sendmsg+0x219/0x270 [ 324.605338][T14627] ____sys_sendmsg+0x505/0x830 [ 324.605368][T14627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 324.605402][T14627] ? import_iovec+0x74/0xa0 [ 324.605432][T14627] ___sys_sendmsg+0x21f/0x2a0 [ 324.605457][T14627] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.605525][T14627] ? __fget_files+0x2a/0x420 [ 324.605557][T14627] ? __fget_files+0x3a0/0x420 [ 324.605602][T14627] __x64_sys_sendmsg+0x19b/0x260 [ 324.605628][T14627] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 324.605663][T14627] ? __pfx_ksys_write+0x10/0x10 [ 324.605690][T14627] ? rcu_is_watching+0x15/0xb0 [ 324.605726][T14627] ? do_syscall_64+0xbe/0x3b0 [ 324.605763][T14627] do_syscall_64+0xfa/0x3b0 [ 324.605792][T14627] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.605821][T14627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.605843][T14627] ? clear_bhb_loop+0x60/0xb0 [ 324.605870][T14627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.605890][T14627] RIP: 0033:0x7fb2a6f8ebe9 [ 324.605910][T14627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.605929][T14627] RSP: 002b:00007fb2a7e05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.605952][T14627] RAX: ffffffffffffffda RBX: 00007fb2a71b5fa0 RCX: 00007fb2a6f8ebe9 [ 324.605968][T14627] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000006 [ 324.605982][T14627] RBP: 00007fb2a7e05090 R08: 0000000000000000 R09: 0000000000000000 [ 324.605995][T14627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 324.606008][T14627] R13: 00007fb2a71b6038 R14: 00007fb2a71b5fa0 R15: 00007ffcb4caa5e8 [ 324.606044][T14627] [ 325.011143][T14636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2507'. [ 325.026712][T14629] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.036240][T14639] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2508'. [ 325.050692][T14629] bridge_slave_1: left allmulticast mode [ 325.058267][T14629] bridge_slave_1: left promiscuous mode [ 325.065590][T14629] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.080153][T14629] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 325.127740][T14636] bond0: entered promiscuous mode [ 325.133541][T14636] bond_slave_0: entered promiscuous mode [ 325.139791][T14636] bond_slave_1: entered promiscuous mode [ 325.149109][T14636] dummy0: entered promiscuous mode [ 325.161582][T14636] bond0: left promiscuous mode [ 325.172947][T14636] bond_slave_0: left promiscuous mode [ 325.179170][T14636] bond_slave_1: left promiscuous mode [ 325.190332][T14636] dummy0: left promiscuous mode [ 325.560546][T14666] netlink: 'syz.4.2516': attribute type 1 has an invalid length. [ 325.667761][T14666] 8021q: adding VLAN 0 to HW filter on device bond7 [ 325.784745][T14672] bond7: (slave veth9): Enslaving as an active interface with a down link [ 325.851567][T14666] bond7: (slave veth0_to_bond): making interface the new active one [ 325.888118][T14666] veth0_to_bond: entered promiscuous mode [ 325.907904][T14666] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 325.956896][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2520'. [ 325.968373][T14681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2520'. [ 325.978249][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2520'. [ 326.004240][T14681] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2520'. [ 326.056437][T14695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2522'. [ 326.085799][T14695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2522'. [ 326.137507][T14695] IPVS: Error connecting to the multicast addr [ 326.214001][T14704] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2524'. [ 326.301842][T14711] FAULT_INJECTION: forcing a failure. [ 326.301842][T14711] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 326.320440][T14711] CPU: 1 UID: 0 PID: 14711 Comm: syz.0.2526 Not tainted syzkaller #0 PREEMPT(full) [ 326.320471][T14711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.320485][T14711] Call Trace: [ 326.320493][T14711] [ 326.320503][T14711] dump_stack_lvl+0x189/0x250 [ 326.320536][T14711] ? __pfx____ratelimit+0x10/0x10 [ 326.320567][T14711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.320594][T14711] ? __pfx__printk+0x10/0x10 [ 326.320626][T14711] ? __might_fault+0xb0/0x130 [ 326.320670][T14711] should_fail_ex+0x414/0x560 [ 326.320705][T14711] _copy_from_iter+0x1db/0x16f0 [ 326.320736][T14711] ? __lock_acquire+0xab9/0xd20 [ 326.320769][T14711] ? __pfx__copy_from_iter+0x10/0x10 [ 326.320798][T14711] ? page_copy_sane+0x4e/0x280 [ 326.320831][T14711] copy_page_from_iter+0xdd/0x170 [ 326.320858][T14711] tun_get_user+0x1d7b/0x3e20 [ 326.320888][T14711] ? tun_get_user+0x6f6/0x3e20 [ 326.320918][T14711] ? aa_file_perm+0x44d/0x1550 [ 326.320940][T14711] ? __pfx_tun_get_user+0x10/0x10 [ 326.320960][T14711] ? _parse_integer_limit+0x1ae/0x1f0 [ 326.321002][T14711] ? __lock_acquire+0xab9/0xd20 [ 326.321040][T14711] ? ref_tracker_alloc+0x318/0x460 [ 326.321068][T14711] ? __lock_acquire+0xab9/0xd20 [ 326.321102][T14711] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 326.321139][T14711] ? tun_get+0x1c/0x2f0 [ 326.321166][T14711] ? tun_get+0x1c/0x2f0 [ 326.321186][T14711] ? tun_get+0x1c/0x2f0 [ 326.321211][T14711] tun_chr_write_iter+0x113/0x200 [ 326.321249][T14711] vfs_write+0x5c9/0xb30 [ 326.321285][T14711] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 326.321320][T14711] ? __pfx_vfs_write+0x10/0x10 [ 326.321362][T14711] ? __fget_files+0x2a/0x420 [ 326.321405][T14711] ksys_write+0x145/0x250 [ 326.321438][T14711] ? __pfx_ksys_write+0x10/0x10 [ 326.321464][T14711] ? rcu_is_watching+0x15/0xb0 [ 326.321491][T14711] ? do_syscall_64+0xbe/0x3b0 [ 326.321528][T14711] do_syscall_64+0xfa/0x3b0 [ 326.321558][T14711] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.321587][T14711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.321609][T14711] ? clear_bhb_loop+0x60/0xb0 [ 326.321635][T14711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.321656][T14711] RIP: 0033:0x7f61e618d69f [ 326.321677][T14711] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 326.321697][T14711] RSP: 002b:00007f61e6f65000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 326.321720][T14711] RAX: ffffffffffffffda RBX: 00007f61e63b5fa0 RCX: 00007f61e618d69f [ 326.321737][T14711] RDX: 000000000000007a RSI: 00002000000003c0 RDI: 00000000000000c8 [ 326.321750][T14711] RBP: 00007f61e6f65090 R08: 0000000000000000 R09: 0000000000000000 [ 326.321764][T14711] R10: 000000000000007a R11: 0000000000000293 R12: 0000000000000001 [ 326.321777][T14711] R13: 00007f61e63b6038 R14: 00007f61e63b5fa0 R15: 00007fffc1b03968 [ 326.321819][T14711] [ 326.637869][T14713] netlink: 'syz.1.2528': attribute type 12 has an invalid length. [ 326.707390][T14714] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2527'. [ 326.858798][T14727] lo: entered promiscuous mode [ 326.864752][T14727] tunl0: entered promiscuous mode [ 326.870021][T14727] gre0: entered promiscuous mode [ 326.879138][T14727] gretap0: entered promiscuous mode [ 326.885769][T14727] erspan0: entered promiscuous mode [ 326.891258][T14727] ip_vti0: entered promiscuous mode [ 326.900704][T14727] ip6_vti0: entered promiscuous mode [ 326.907170][T14727] sit0: entered promiscuous mode [ 326.916601][T14727] ip6tnl0: entered promiscuous mode [ 326.926131][T14727] ip6gre0: entered promiscuous mode [ 326.954634][T14727] syz_tun: entered promiscuous mode [ 326.962473][T14727] ip6gretap0: entered promiscuous mode [ 326.968312][T14727] bridge0: entered promiscuous mode [ 326.974369][T14727] bond0: entered promiscuous mode [ 326.979899][T14727] bond_slave_0: entered promiscuous mode [ 327.006899][T14727] bond_slave_1: entered promiscuous mode [ 327.022668][T14727] nlmon0: entered promiscuous mode [ 327.043822][T14727] batadv0: entered promiscuous mode [ 327.079946][T14727] veth0: entered promiscuous mode [ 327.092955][T14727] veth1: entered promiscuous mode [ 327.120576][T14727] wg0: entered promiscuous mode [ 327.133785][T14727] wg1: entered promiscuous mode [ 327.161589][T14727] wg2: entered promiscuous mode [ 327.191640][T14727] veth0_to_bridge: entered promiscuous mode [ 327.227178][T14727] veth1_to_bridge: entered promiscuous mode [ 327.234117][T14727] veth0_to_bond: entered promiscuous mode [ 327.240400][T14727] veth1_to_bond: entered promiscuous mode [ 327.247618][T14727] veth0_to_team: left allmulticast mode [ 327.254051][T14727] team_slave_0: entered promiscuous mode [ 327.260932][T14727] veth1_to_team: entered promiscuous mode [ 327.267969][T14727] team_slave_1: entered promiscuous mode [ 327.274090][T14727] veth0_to_batadv: entered promiscuous mode [ 327.280514][T14727] xfrm0: entered promiscuous mode [ 327.287884][T14727] veth1_to_hsr: entered promiscuous mode [ 327.293882][T14727] hsr_slave_1: entered promiscuous mode [ 327.299701][T14727] veth1_virt_wifi: entered promiscuous mode [ 327.306047][T14727] veth0_virt_wifi: entered promiscuous mode [ 327.312680][T14727] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 327.320641][T14727] vlan1: entered promiscuous mode [ 327.326129][T14727] macvlan0: entered promiscuous mode [ 327.331658][T14727] macvlan1: entered promiscuous mode [ 327.338072][T14727] ipvlan0: entered promiscuous mode [ 327.343910][T14727] ipvlan1: entered promiscuous mode [ 327.349630][T14727] macvtap0: entered promiscuous mode [ 327.358642][T14727] macsec0: entered promiscuous mode [ 327.365585][T14727] geneve0: entered promiscuous mode [ 327.371290][T14727] geneve1: entered promiscuous mode [ 327.381212][T14727] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 327.389506][T14727] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 327.397994][T14727] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 327.406982][T14727] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 327.414951][T14727] mac80211_hwsim hwsim6 ÿ: entered promiscuous mode [ 327.422218][T14727] bond1: entered promiscuous mode [ 327.427831][T14727] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 327.435455][T14727] sit1: entered promiscuous mode [ 327.440902][T14727] hsr1: entered promiscuous mode [ 327.451258][T14727] bond2: entered promiscuous mode [ 327.456887][T14727] erspan1: entered promiscuous mode [ 327.470080][T14727] bridge1: entered promiscuous mode [ 327.476727][T14727] vxcan2: entered promiscuous mode [ 327.487862][T14727] vxcan3: entered promiscuous mode [ 327.493927][T14727] vlan2: entered promiscuous mode [ 327.499391][T14727] dvmrp1: entered promiscuous mode [ 327.509417][T14727] bridge2: entered promiscuous mode [ 327.514929][T14727] macvlan2: entered promiscuous mode [ 327.520470][T14727] ipvlan2: entered promiscuous mode [ 327.529324][T14727] syztnl1: entered promiscuous mode [ 327.535214][T14727] macvtap1: entered promiscuous mode [ 327.540769][T14727] syztnl2: entered promiscuous mode [ 327.546497][T14727] ipvlan3: entered promiscuous mode [ 327.551935][T14727] bridge3: entered promiscuous mode [ 327.557364][T14727] ip6erspan0: entered promiscuous mode [ 327.563363][T14727] bond3: entered promiscuous mode [ 327.568440][T14727] gretap1: entered promiscuous mode [ 327.574213][T14727] bond4: entered promiscuous mode [ 327.579893][T14727] ip6tnl1: entered promiscuous mode [ 327.588419][T14727] vlan0: left allmulticast mode [ 327.593707][T14727] veth0_vlan: left allmulticast mode [ 327.599651][T14727] macvtap2: left allmulticast mode [ 327.609892][T14727] vxlan0: left allmulticast mode [ 327.616796][T14727] veth2: entered promiscuous mode [ 327.623835][T14727] veth3: entered promiscuous mode [ 327.629119][T14727] bond5: entered promiscuous mode [ 327.634289][T14727] bond6: entered promiscuous mode [ 327.641929][T14727] bond7: entered promiscuous mode [ 327.647317][T14727] netdevsim0.2: entered promiscuous mode [ 327.654248][T14727] ip6erspan1: entered promiscuous mode [ 327.659917][T14727] ip6tnl2: entered promiscuous mode [ 327.665461][T14727] bond8: entered promiscuous mode [ 327.671287][T14727] gretap2: left allmulticast mode [ 327.678502][T14727] syzkaller0.2: entered promiscuous mode [ 327.685115][T14727] gre1: entered promiscuous mode [ 327.690847][T14727] ip6tnl3: entered promiscuous mode [ 327.696517][T14727] veth4: entered promiscuous mode [ 327.701909][T14727] veth5: entered promiscuous mode [ 327.707122][T14727] veth5: left allmulticast mode [ 327.713747][T14727] pim6reg: entered promiscuous mode [ 327.724190][T14727] bond9: entered promiscuous mode [ 327.729265][T14727] geneve3: entered promiscuous mode [ 327.739372][T14727] gre2: entered promiscuous mode [ 327.745823][T14727] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 327.765181][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.782114][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.801388][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.818312][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.890445][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.911311][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.935435][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.991557][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.170062][T14781] erspan0: left promiscuous mode [ 328.188759][T14781] erspan0: left allmulticast mode [ 328.229336][T14781] team1: left promiscuous mode [ 328.255029][T14781] team1: left allmulticast mode [ 328.830830][T14824] netlink: 'syz.0.2553': attribute type 10 has an invalid length. [ 328.886170][T14824] team0: Port device geneve0 added [ 328.999496][T14834] FAULT_INJECTION: forcing a failure. [ 328.999496][T14834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.021304][T14834] CPU: 1 UID: 0 PID: 14834 Comm: syz.0.2556 Not tainted syzkaller #0 PREEMPT(full) [ 329.021410][T14834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 329.021424][T14834] Call Trace: [ 329.021432][T14834] [ 329.021440][T14834] dump_stack_lvl+0x189/0x250 [ 329.021491][T14834] ? __pfx____ratelimit+0x10/0x10 [ 329.021522][T14834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.021549][T14834] ? __pfx__printk+0x10/0x10 [ 329.021595][T14834] should_fail_ex+0x414/0x560 [ 329.021631][T14834] _copy_to_user+0x31/0xb0 [ 329.021660][T14834] simple_read_from_buffer+0xe1/0x170 [ 329.021699][T14834] proc_fail_nth_read+0x1b3/0x220 [ 329.021729][T14834] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 329.021757][T14834] ? rw_verify_area+0x2a6/0x4d0 [ 329.021784][T14834] ? __lock_acquire+0xab9/0xd20 [ 329.021814][T14834] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 329.021841][T14834] vfs_read+0x200/0xa30 [ 329.021868][T14834] ? fdget_pos+0x247/0x320 [ 329.021893][T14834] ? __pfx___mutex_lock+0x10/0x10 [ 329.021925][T14834] ? __pfx_vfs_read+0x10/0x10 [ 329.021955][T14834] ? __fget_files+0x2a/0x420 [ 329.021997][T14834] ? __fget_files+0x3a0/0x420 [ 329.022028][T14834] ? __fget_files+0x2a/0x420 [ 329.022072][T14834] ksys_read+0x145/0x250 [ 329.022104][T14834] ? __pfx_ksys_read+0x10/0x10 [ 329.022129][T14834] ? rcu_is_watching+0x15/0xb0 [ 329.022157][T14834] ? do_syscall_64+0xbe/0x3b0 [ 329.022193][T14834] do_syscall_64+0xfa/0x3b0 [ 329.022221][T14834] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.022249][T14834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.022271][T14834] ? clear_bhb_loop+0x60/0xb0 [ 329.022298][T14834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.022319][T14834] RIP: 0033:0x7f61e618d5fc [ 329.022347][T14834] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 329.022366][T14834] RSP: 002b:00007f61e6f65030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 329.022389][T14834] RAX: ffffffffffffffda RBX: 00007f61e63b5fa0 RCX: 00007f61e618d5fc [ 329.022406][T14834] RDX: 000000000000000f RSI: 00007f61e6f650a0 RDI: 0000000000000004 [ 329.022419][T14834] RBP: 00007f61e6f65090 R08: 0000000000000000 R09: 0000000000000000 [ 329.022432][T14834] R10: 000000000000007a R11: 0000000000000246 R12: 0000000000000001 [ 329.022445][T14834] R13: 00007f61e63b6038 R14: 00007f61e63b5fa0 R15: 00007fffc1b03968 [ 329.022482][T14834] [ 329.499214][T14840] bond0: (slave dummy0): Releasing backup interface [ 329.562575][T14852] ip6gre1: entered allmulticast mode [ 329.580152][T14850] IPVS: stopping backup sync thread 14860 ... [ 329.596302][T14849] syzkaller0: entered promiscuous mode [ 329.602181][T14849] syzkaller0: entered allmulticast mode [ 329.745497][ T44] IPVS: starting estimator thread 0... [ 329.751146][T14869] IPVS: ip_vs_edit_dest(): server weight less than zero [ 329.799439][T14869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.855938][T14869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.892103][T14871] IPVS: using max 26 ests per chain, 62400 per kthread [ 330.025636][T14884] __nla_validate_parse: 7 callbacks suppressed [ 330.025659][T14884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2571'. [ 330.069835][T14884] dummy0: entered promiscuous mode [ 330.110806][T14884] batadv_slave_1: entered promiscuous mode [ 330.120770][T14887] netlink: 'syz.4.2572': attribute type 1 has an invalid length. [ 330.137972][T14884] debugfs: 'hsr1' already exists in 'hsr' [ 330.158537][T14884] Cannot create hsr debugfs directory [ 330.239418][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2575'. [ 330.257818][T14887] 8021q: adding VLAN 0 to HW filter on device bond8 [ 330.299011][T14897] bond8: (slave veth11): Enslaving as an active interface with a down link [ 330.333690][T14904] bond7: (slave veth0_to_bond): Releasing active interface [ 330.341349][ T9] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 330.353801][T14904] veth0_to_bond: left promiscuous mode [ 330.366911][ T9] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 330.374396][T14904] bond8: (slave veth0_to_bond): making interface the new active one [ 330.388267][T14904] veth0_to_bond: entered promiscuous mode [ 330.394873][T14904] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 330.438037][T14906] netlink: 'syz.2.2576': attribute type 1 has an invalid length. [ 330.471900][T14887] bond8: (slave veth13): Enslaving as an active interface with a down link [ 330.853486][T14942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2584'. [ 330.863037][T14942] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2584'. [ 330.876727][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2584'. [ 330.963897][T14943] Bluetooth: MGMT ver 1.23 [ 331.026805][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2586'. [ 331.057694][T14948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2586'. [ 331.086601][T14952] gre1: entered promiscuous mode [ 331.091606][T14952] gre1: entered allmulticast mode [ 331.099090][T14956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2589'. [ 331.171532][T14948] geneve4: entered promiscuous mode [ 331.191708][T14948] geneve4: entered allmulticast mode [ 331.322507][T14963] tipc: Enabled bearer , priority 0 [ 331.346433][T14963] syzkaller0: entered promiscuous mode [ 331.360530][T14963] syzkaller0: entered allmulticast mode [ 331.377875][T14963] netlink: 212320 bytes leftover after parsing attributes in process `syz.3.2591'. [ 331.422324][T14975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2593'. [ 331.451484][T14963] tipc: Resetting bearer [ 331.484769][T14974] dvmrp0: entered allmulticast mode [ 331.505324][T14962] tipc: Resetting bearer [ 331.547866][T14962] tipc: Disabling bearer [ 331.719048][T14989] bridge_slave_0: default FDB implementation only supports local addresses [ 332.281494][T15024] netlink: 'syz.4.2609': attribute type 1 has an invalid length. [ 332.351005][T15024] 8021q: adding VLAN 0 to HW filter on device bond9 [ 332.404428][T15025] vlan0: entered allmulticast mode [ 332.409611][T15025] veth1: entered allmulticast mode [ 332.419480][T15025] bond9: (slave vlan0): making interface the new active one [ 332.434913][T15025] bond9: (slave vlan0): Enslaving as an active interface with an up link [ 333.397926][T15086] netlink: 'syz.3.2628': attribute type 11 has an invalid length. [ 333.408922][T15086] netlink: 'syz.3.2628': attribute type 11 has an invalid length. [ 333.644535][T15096] veth5: entered allmulticast mode [ 333.650500][T15100] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 334.086931][T15121] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 334.116264][T15116] netlink: 'syz.3.2640': attribute type 1 has an invalid length. [ 334.136023][T15129] netlink: 'syz.3.2640': attribute type 1 has an invalid length. [ 334.756325][T15170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.778835][T15170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.558219][T15209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.615053][T15211] __nla_validate_parse: 10 callbacks suppressed [ 335.615077][T15211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2662'. [ 335.755852][T15220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2666'. [ 335.802526][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2666'. [ 335.821925][T15215] veth7: entered allmulticast mode [ 336.216219][T15247] openvswitch: netlink: Actions may not be safe on all matching packets [ 336.382665][T15257] netlink: 'syz.0.2679': attribute type 83 has an invalid length. [ 336.726788][T15278] netlink: set zone limit has 8 unknown bytes [ 336.738886][T15278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2684'. [ 336.749020][T15278] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2684'. [ 336.758342][T15278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2684'. [ 336.767678][T15278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2684'. [ 336.944622][T15292] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2687'. [ 337.217938][T15301] netlink: 'syz.1.2688': attribute type 1 has an invalid length. [ 337.234896][T15301] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2688'. [ 337.250245][T15303] netlink: 'syz.1.2688': attribute type 1 has an invalid length. [ 337.261534][T15303] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2688'. [ 337.399304][T15306] netlink: 'syz.4.2690': attribute type 1 has an invalid length. [ 337.473580][T15310] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 337.498860][T15310] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 337.499771][T15312] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 337.525781][T15312] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 337.771268][T15326] IPv6: Can't replace route, no match found [ 337.978456][T15338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.053892][T15333] lo: entered promiscuous mode [ 338.060416][T15339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.112943][T15333] tunl0: entered promiscuous mode [ 338.163807][T15333] gre0: entered promiscuous mode [ 338.249299][T15333] gretap0: entered promiscuous mode [ 338.370607][T15333] erspan0: entered promiscuous mode [ 338.443869][T15333] ip_vti0: entered promiscuous mode [ 338.503742][T15333] ip6_vti0: left allmulticast mode [ 338.510264][T15333] sit0: entered promiscuous mode [ 338.573059][T15333] ip6tnl0: entered promiscuous mode [ 338.635530][T15333] ip6gre0: entered promiscuous mode [ 338.693153][T15333] ip6gretap0: entered promiscuous mode [ 338.736137][T15333] vcan0: entered promiscuous mode [ 338.822235][T15333] bond0: entered promiscuous mode [ 338.827352][T15333] bond_slave_0: entered promiscuous mode [ 338.842601][T15333] bond_slave_1: entered promiscuous mode [ 338.848624][T15333] bridge_slave_1: entered promiscuous mode [ 338.872705][T15333] team0: entered promiscuous mode [ 338.877800][T15333] team_slave_0: entered promiscuous mode [ 338.892274][T15333] team_slave_1: entered promiscuous mode [ 338.898198][T15333] bond7: entered promiscuous mode [ 338.962503][T15333] nlmon0: entered promiscuous mode [ 338.973218][T15333] caif0: entered promiscuous mode [ 339.005888][T15333] vxcan0: entered promiscuous mode [ 339.040978][T15333] vxcan1: entered promiscuous mode [ 339.049370][T15333] wg0: entered promiscuous mode [ 339.072707][T15333] wg1: entered promiscuous mode [ 339.092771][T15333] wg2: entered promiscuous mode [ 339.124703][T15333] veth0_to_bridge: entered promiscuous mode [ 339.182163][T15333] veth1_to_bridge: entered promiscuous mode [ 339.203438][T15333] veth0_to_bond: entered promiscuous mode [ 339.243112][T15333] veth1_to_bond: entered promiscuous mode [ 339.293894][T15333] veth0_to_team: entered promiscuous mode [ 339.334188][T15333] veth1_to_team: entered promiscuous mode [ 339.390029][T15333] veth0_to_batadv: entered promiscuous mode [ 339.417134][T15333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.443250][T15333] batadv_slave_0: entered promiscuous mode [ 339.455046][T15333] xfrm0: entered promiscuous mode [ 339.461307][T15333] veth0_to_hsr: entered promiscuous mode [ 339.533749][T15333] veth1_to_hsr: entered promiscuous mode [ 339.604193][T15333] hsr0: entered promiscuous mode [ 339.630600][T15333] veth1_virt_wifi: entered promiscuous mode [ 339.673020][T15333] veth0_virt_wifi: entered promiscuous mode [ 339.704640][T15333] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 339.805007][T15333] vlan0: entered promiscuous mode [ 339.810399][T15333] vlan1: entered promiscuous mode [ 339.816851][T15333] macvlan0: entered promiscuous mode [ 339.843358][T15333] macvlan1: entered promiscuous mode [ 339.854755][T15333] ipvlan0: entered promiscuous mode [ 339.904975][T15333] macvtap0: entered promiscuous mode [ 339.932104][T15333] macsec0: entered promiscuous mode [ 339.952968][T15333] geneve0: entered promiscuous mode [ 339.973362][T15333] geneve1: entered promiscuous mode [ 340.007124][T15333] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 340.026334][T15333] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 340.045199][T15333] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 340.060791][T15333] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 340.073591][T15333] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 340.080770][T15333] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 340.088486][T15333] gre1: entered promiscuous mode [ 340.094811][T15333] bond1: entered promiscuous mode [ 340.103202][T15333] bond2: entered promiscuous mode [ 340.125370][T15333] @: entered promiscuous mode [ 340.154605][T15333] bond3: entered promiscuous mode [ 340.159858][T15333] batadv1: entered promiscuous mode [ 340.165399][T15333] batadv2: entered promiscuous mode [ 340.175771][T15333] syztnl1: entered promiscuous mode [ 340.182244][T15333] pim6reg: entered promiscuous mode [ 340.196243][T15333] gre2: entered promiscuous mode [ 340.206881][T15333] ip6gretap1: entered promiscuous mode [ 340.215777][T15333] veth2: entered promiscuous mode [ 340.221161][T15333] veth3: entered promiscuous mode [ 340.236736][T15333] bond4: entered promiscuous mode [ 340.249466][T15333] veth0: entered promiscuous mode [ 340.258426][T15333] veth1: entered promiscuous mode [ 340.268191][T15333] bond5: entered promiscuous mode [ 340.277142][T15333] bond6: entered promiscuous mode [ 340.285056][T15333] bridge1: entered promiscuous mode [ 340.298670][T15333] veth0_vlan.2: entered promiscuous mode [ 340.305902][T15333] veth4: entered promiscuous mode [ 340.311255][T15333] veth5: entered promiscuous mode [ 340.320408][T15333] veth6: entered promiscuous mode [ 340.325804][T15333] veth7: entered promiscuous mode [ 340.330956][T15333] mac80211_hwsim hwsim15 wlan2: entered promiscuous mode [ 340.342946][T15333] bond8: entered promiscuous mode [ 340.348038][T15333] gretap1: entered promiscuous mode [ 340.358317][T15333] bond9: entered promiscuous mode [ 340.363776][T15333] bridge2: entered promiscuous mode [ 340.371219][T15333] vlan3: entered promiscuous mode [ 340.377570][T15333] vxcan2: entered promiscuous mode [ 340.387292][T15333] bridge3: entered promiscuous mode [ 340.397570][T15333] ip6erspan0: left allmulticast mode [ 340.418315][T15333] ip6tnl1: entered promiscuous mode [ 340.425334][T15333] xfrm1: entered promiscuous mode [ 340.431235][T15333] dvmrp0: entered promiscuous mode [ 340.443152][T15333] syztnl0: entered promiscuous mode [ 340.453300][T15333] geneve2: left allmulticast mode [ 340.464522][T15333] bridge4: entered promiscuous mode [ 340.471664][T15333] mac80211_hwsim hwsim25 wlan3: entered promiscuous mode [ 340.481034][T15333] syztnl2: entered promiscuous mode [ 340.528867][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.560483][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.612442][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 340.622130][T14107] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.631038][T14107] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.667781][T14107] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 340.685810][ T1340] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.717887][ T1340] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.758633][ T1340] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 340.862276][T15377] tc_dump_action: action bad kind [ 341.030430][T15388] netlink: 'syz.3.2713': attribute type 1 has an invalid length. [ 341.070929][T15388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.169917][T14107] tipc: Subscription rejected, illegal request [ 341.432765][T15413] __nla_validate_parse: 2 callbacks suppressed [ 341.432787][T15413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2721'. [ 341.478833][T15406] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2719'. [ 341.490912][T15406] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2719'. [ 341.672424][ T1340] veth0_to_bond: left promiscuous mode [ 341.850920][T15431] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2730'. [ 341.920317][T15434] tipc: Enabling of bearer rejected, failed to enable media [ 341.962318][T15434] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2729'. [ 342.036310][T15445] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2733'. [ 342.058349][T15445] openvswitch: netlink: Flow key attr not present in new flow. [ 342.251790][T15456] netlink: 'syz.0.2734': attribute type 2 has an invalid length. [ 342.293431][T15456] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2734'. [ 342.310233][T15459] netlink: 'syz.4.2736': attribute type 1 has an invalid length. [ 342.457893][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2736'. [ 342.482352][T15459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2736'. [ 342.517577][T15472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2739'. [ 342.922903][T15501] tipc: Can't bind to reserved service type 2 [ 343.585769][T15540] netlink: 'syz.4.2757': attribute type 12 has an invalid length. [ 343.627390][T15540] netlink: 'syz.4.2757': attribute type 11 has an invalid length. [ 343.720678][T15546] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 343.759350][T15546] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 343.851196][T15551] 8021q: VLANs not supported on caif0 [ 344.043929][T15563] netlink: 'syz.0.2765': attribute type 5 has an invalid length. [ 344.774418][T15606] veth1_to_bond: entered allmulticast mode [ 344.798587][T15611] syzkaller1: entered promiscuous mode [ 344.812798][T15611] syzkaller1: entered allmulticast mode [ 344.943297][T15606] bond0: (slave bond_slave_1): Releasing backup interface [ 345.070381][T15606] veth1_to_bond (unregistering): left allmulticast mode [ 345.107935][T15627] netlink: 'syz.0.2780': attribute type 11 has an invalid length. [ 345.250942][T15635] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 345.445119][T15649] netlink: 'syz.2.2786': attribute type 7 has an invalid length. [ 345.730759][T15667] netlink: 'syz.3.2793': attribute type 7 has an invalid length. [ 345.883626][T15673] nbd: nbd3 already in use [ 345.888685][T15673] nbd: nbd3 already in use [ 346.579688][T15702] __nla_validate_parse: 17 callbacks suppressed [ 346.579710][T15702] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2805'. [ 347.034297][T15722] syz_tun: entered allmulticast mode [ 347.051123][T15722] syz_tun: left allmulticast mode [ 347.299614][ T5866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 347.319203][ T5866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 347.335237][ T5866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 347.343964][ T5866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 347.351395][T15734] netlink: 'syz.0.2813': attribute type 39 has an invalid length. [ 347.355370][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.130523][T15770] netlink: 'syz.1.2823': attribute type 12 has an invalid length. [ 348.165475][T15773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2824'. [ 348.257510][T15779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2825'. [ 348.279542][T15777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2825'. [ 348.298089][T15781] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2826'. [ 348.778413][T15791] macvlan0: entered promiscuous mode [ 348.827142][T15791] macvlan0: entered allmulticast mode [ 348.870751][T15732] chnl_net:caif_netlink_parms(): no params data found [ 348.941816][T15801] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2832'. [ 349.262274][T15732] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.269507][T15732] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.310157][T15732] bridge_slave_0: entered allmulticast mode [ 349.321072][T15732] bridge_slave_0: entered promiscuous mode [ 349.356591][T15828] : renamed from ip6gretap0 (while UP) [ 349.396953][T15732] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.405860][T15732] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.425228][T15732] bridge_slave_1: entered allmulticast mode [ 349.458739][T15732] bridge_slave_1: entered promiscuous mode [ 349.466788][ T5866] Bluetooth: hci3: command tx timeout [ 349.676289][T15732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.716882][T15732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.820515][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2846'. [ 349.861805][T15732] team0: Port device team_slave_0 added [ 349.888877][T15732] team0: Port device team_slave_1 added [ 350.014582][T15861] delete_channel: no stack [ 350.021243][T15861] netlink: 'syz.1.2849': attribute type 1 has an invalid length. [ 350.047237][T15861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2849'. [ 350.067107][T15732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.079348][T15732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.110837][T15732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.111866][T15868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2852'. [ 350.175274][T15732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.201058][T15732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.203411][T15876] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2851'. [ 350.289063][T15732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.369874][T15885] xt_policy: too many policy elements [ 350.432769][T15882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.607447][T15891] tipc: Enabling of bearer rejected, failed to enable media [ 350.630025][T15732] hsr_slave_0: entered promiscuous mode [ 350.648404][T15732] hsr_slave_1: entered promiscuous mode [ 350.663937][T15732] debugfs: 'hsr0' already exists in 'hsr' [ 350.671258][T15732] Cannot create hsr debugfs directory [ 351.196613][T15920] xt_socket: unknown flags 0xd0 [ 351.421516][T15934] netlink: 'syz.4.2871': attribute type 1 has an invalid length. [ 351.481530][T15932] syzkaller1: entered promiscuous mode [ 351.497602][T15932] syzkaller1: entered allmulticast mode [ 351.544154][ T5866] Bluetooth: hci3: command tx timeout [ 351.763347][T15953] netlink: 'syz.0.2876': attribute type 7 has an invalid length. [ 351.806154][T15953] __nla_validate_parse: 5 callbacks suppressed [ 351.806186][T15953] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2876'. [ 351.959574][T15732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 351.996953][T15732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 352.034501][T15732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 352.055407][T15732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 352.124123][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2882'. [ 352.133863][T15972] netlink: 'syz.1.2882': attribute type 1 has an invalid length. [ 352.161822][T15972] netlink: 'syz.1.2882': attribute type 1 has an invalid length. [ 352.190909][T15972] netlink: 'syz.1.2882': attribute type 2 has an invalid length. [ 352.221536][T15972] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2882'. [ 352.243071][T15987] netlink: 'syz.4.2883': attribute type 10 has an invalid length. [ 352.322706][T15987] bridge0: port 2(team0) entered blocking state [ 352.334759][T15987] bridge0: port 2(team0) entered disabled state [ 352.351774][T15987] team0: entered allmulticast mode [ 352.371190][T15987] team_slave_0: entered allmulticast mode [ 352.378917][T15987] team_slave_1: entered allmulticast mode [ 352.403689][T15987] bond4: entered allmulticast mode [ 352.444292][T15987] team0: entered promiscuous mode [ 352.449699][T15987] team_slave_0: entered promiscuous mode [ 352.456149][T15987] team_slave_1: entered promiscuous mode [ 352.463150][T15987] bond4: entered promiscuous mode [ 352.469615][T15987] bridge0: port 2(team0) entered blocking state [ 352.476116][T15987] bridge0: port 2(team0) entered forwarding state [ 352.586754][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2888'. [ 352.719634][T15732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.738650][ T13] [ 352.741040][ T13] ============================================ [ 352.747210][ T13] WARNING: possible recursive locking detected [ 352.753391][ T13] syzkaller #0 Not tainted [ 352.757834][ T13] -------------------------------------------- [ 352.764000][ T13] kworker/u8:1/13 is trying to acquire lock: [ 352.770061][ T13] ffffe8ffffd90f60 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80 [ 352.771697][T15732] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.779332][ T13] [ 352.779332][ T13] but task is already holding lock: [ 352.779341][ T13] ffffe8ffffd90fb0 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 352.779401][ T13] [ 352.779401][ T13] other info that might help us debug this: [ 352.779409][ T13] Possible unsafe locking scenario: [ 352.779409][ T13] [ 352.779417][ T13] CPU0 [ 352.779423][ T13] ---- [ 352.779428][ T13] lock(&pd_list->lock); [ 352.779445][ T13] lock(&pd_list->lock); [ 352.779462][ T13] [ 352.779462][ T13] *** DEADLOCK *** [ 352.779462][ T13] [ 352.779469][ T13] May be due to missing lock nesting notation [ 352.779469][ T13] [ 352.779477][ T13] 3 locks held by kworker/u8:1/13: [ 352.779490][ T13] #0: ffff88801cb44948 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 352.779544][ T13] #1: ffffc90000127bc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 352.779597][ T13] #2: ffffe8ffffd90fb0 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 352.779656][ T13] [ 352.779656][ T13] stack backtrace: [ 352.779668][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 352.779692][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 352.779707][ T13] Workqueue: pencrypt_parallel padata_parallel_worker [ 352.779736][ T13] Call Trace: [ 352.779744][ T13] [ 352.779753][ T13] dump_stack_lvl+0x189/0x250 [ 352.779781][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.779812][ T13] ? __pfx__printk+0x10/0x10 [ 352.779844][ T13] ? print_lock_name+0xde/0x100 [ 352.779874][ T13] print_deadlock_bug+0x28b/0x2a0 [ 352.779897][ T13] validate_chain+0x1a3f/0x2140 [ 352.779930][ T13] ? __queue_work+0x102/0xfb0 [ 352.779954][ T13] ? look_up_lock_class+0x74/0x170 [ 352.779990][ T13] ? register_lock_class+0x51/0x320 [ 352.780024][ T13] ? __queue_work+0xc56/0xfb0 [ 352.780053][ T13] __lock_acquire+0xab9/0xd20 [ 352.780091][ T13] ? padata_do_serial+0x73e/0xb80 [ 352.780121][ T13] lock_acquire+0x120/0x360 [ 352.780155][ T13] ? padata_do_serial+0x73e/0xb80 [ 352.780190][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 352.780225][ T13] _raw_spin_lock+0x2e/0x40 [ 352.780253][ T13] ? padata_do_serial+0x73e/0xb80 [ 352.780284][ T13] padata_do_serial+0x73e/0xb80 [ 352.780325][ T13] ? padata_parallel_worker+0x44/0x1d0 [ 352.780356][ T13] padata_parallel_worker+0x72/0x1d0 [ 352.780388][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 352.780412][ T13] process_scheduled_works+0xae1/0x17b0 [ 352.780453][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 352.780489][ T13] worker_thread+0x8a0/0xda0 [ 352.780531][ T13] kthread+0x711/0x8a0 [ 352.780562][ T13] ? __pfx_worker_thread+0x10/0x10 [ 352.780584][ T13] ? __pfx_kthread+0x10/0x10 [ 352.780616][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 352.780644][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.780674][ T13] ? __pfx_kthread+0x10/0x10 [ 352.780705][ T13] ret_from_fork+0x3f9/0x770 [ 352.780730][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 352.780760][ T13] ? __switch_to_asm+0x39/0x70 [ 352.780790][ T13] ? __switch_to_asm+0x33/0x70 [ 352.780828][ T13] ? __pfx_kthread+0x10/0x10 [ 352.780857][ T13] ret_from_fork_asm+0x1a/0x30 [ 352.780901][ T13] [ 352.911497][T16010] netlink: 'syz.1.2890': attribute type 1 has an invalid length. [ 352.963001][T15732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.136154][T15732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.136835][T16020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2890'. [ 353.162790][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.170112][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.179401][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.186584][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.351227][T15732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.386547][T15732] veth0_vlan: entered promiscuous mode [ 353.397297][T15732] veth1_vlan: entered promiscuous mode [ 353.418797][T15732] veth0_macvtap: entered promiscuous mode [ 353.429578][T15732] veth1_macvtap: entered promiscuous mode [ 353.445149][T15732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.458755][T15732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.472522][T14107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.481428][T14107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.491398][T14107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.501517][T14107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.529717][T15732] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 353.556826][ T8886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.558059][T15732] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 353.565701][ T8886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.594271][T14107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.603061][T14107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.633154][ T5866] Bluetooth: hci3: command tx timeout [ 355.702889][ T5866] Bluetooth: hci3: command tx timeout