last executing test programs: 1.835381446s ago: executing program 1 (id=8270): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getchain={0x3c, 0x66, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x9, 0xf}, {0x10, 0x7}, {0x4, 0xfff2}}, [{0x8, 0xb, 0xe572}, {0x8, 0xb, 0xdd}, {0x8, 0xb, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x27, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x4) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r4, 0x0, 0x0, 0x400000000000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000011000100efffffff0000000007000000", @ANYRES32=r2, @ANYBLOB="40c400006f4ac92f83f1d299"], 0xfffffffffffffdc3}}, 0x0) 1.767782366s ago: executing program 2 (id=8271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x1000, 0x3, 0xc, 0x8, 0x7}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x2, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x48) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r9}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}}, 0x40800) (async) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"/344, @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r11) sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002dbd7000ffdbdf2501000000d88aeb5d140002006970766c616e31000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) accept4$inet6(r4, 0x0, &(0x7f0000000000), 0x80000) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r13, r13, 0x2e}, 0x20) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x8f7f, 0x0}, 0x2) r15 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r14, 0x4) (async) r16 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r15, r16, 0x4, r16}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.727369172s ago: executing program 4 (id=8274): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@empty, @private=0xa010100, @private=0xa010100}, 0xc) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000b80)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) 1.495872161s ago: executing program 2 (id=8275): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x3c, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x400) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x5, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xff000000, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r5) r6 = socket$netlink(0x10, 0x3, 0x5) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000012c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000b000080976b64087c603000"], 0x12c}], 0x1}, 0x84) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xc) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r10, &(0x7f0000000000)={0x23, 0x20}, 0x10) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r11, &(0x7f0000000000)={0x23, 0x20}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) getpid() sendmmsg$unix(r13, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000ac0)=[@rights={{0x1c, 0x1, 0x1, [r6, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r16}}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xffffffffffffffff, r16}}}, @cred={{0x1c, 0x1, 0x2, {r5, r15, r8}}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000d40)="27a43ec3780040a6cc3467cea27e0bfa9ecf3dfee14303ee84b6b880aed8563997c5bb82da5ed805c4c8e819ac87ec119454ae506e3710ccae12b2caa5fa4a1e9b4ba8df6fb5ff4e4d8d110970d371ec846b5e899ea66d47b2824d8a16d8412e31a5e67245850ebbe1b54333eb7637298be0350a48dcb4062a3065be4e7a0bc3073c78b8aa7631ddb2a33cc894acbdc1cd8dd52c4d619832b2cdff1239702deb4c86671e737fba126a00d7f8286adb80cbdaff57f4868d3badacc3669021c40655d69f8bf6b7e1472d8022bb32b1846cadd3668c73a19d783b0834d984c04e6f92d3d88165", 0xe5}, {&(0x7f00000005c0)="bcfffc04b2cb94a28fa95afec0acdef955176e8f8b573f941ab6e6f1fbb592ca56f35e17c5eff8a6ba0ccd5cfefa83b83bcba59fb3e8baa64dc4fc7a21dbca", 0x3f}], 0x2, &(0x7f0000000ac0), 0x0, 0x24048891}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="98d9fe8648dfa8e44034e7a9db3fe0f08f8ef2f9b7c96b0217197a0eebac340ee539a1ca59419d6051380cc48e7543770acb953bdf2034613ca46425857e8cca70f8560a331c49975e93a5ea89a0ee2df299a26d1814d50060897db13978159772ec06c69a90fffc50e450d83293ae3b", 0x70}, {&(0x7f0000000bc0)="5f88eb2a910b740b73e6bac59f3e785498a592ad586f2cdf715df65645ecaa88672b3c2742cf61", 0x27}], 0x2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r12, @ANYRES32, @ANYRES32=r12, @ANYRES32=r12, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="000000c7e8000000000000000700000002100000", @ANYRES32=r9, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r13, @ANYRES32=r12, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x40004}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000d40), 0x0, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r9, r7, r16}}}, @rights={{0x1c, 0x1, 0x1, [r11, 0xffffffffffffffff, r10]}}, @rights={{0x10}}], 0x68, 0x4000040}}], 0x4, 0x1) r17 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r17, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r18}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r23 = syz_open_procfs$namespace(r20, &(0x7f0000001780)='ns/ipc\x00') r24 = getpid() sendmmsg$unix(r19, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r20, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r20, @ANYRES32=0x0, @ANYRES32=r22, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r24, @ANYRES32=r21, @ANYRES32=0x0, @ANYBLOB="000000001800000000cfadc082ae51e6a516fa4f7991b9098c499866038cd280000000", @ANYRES32=r23, @ANYRES32], 0x58, 0x800}}], 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f0000000780)=0xe8) 1.494657139s ago: executing program 3 (id=8276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004010}, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}]}, 0x24}}, 0x40) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x900, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x1, 0x5b4e, 0x4, 0xffffff8e}}}, ["", "", "", "", ""]}, 0x30}}, 0x2000c040) (async) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000400)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000440)="bd5090b68c1d3f297bdb7179868e249155f01948ccfd1f1a76c7999543", 0x1d}, {&(0x7f0000000480)="ee4f43f9a22d687147b4d485a383d45122e07b76f7b1f21f8f4827d6f26f934513209e8ffd474ab7", 0x28}, {&(0x7f00000004c0)="80e74f4555d4daa1be", 0x9}, {&(0x7f0000000500)="243366dc61e482a5c647a234e34b05aa57a60361639111af1e07a93f047fa2a1042589ac97704455853feaae4375cc60098fd5e64e981382326e3366bf5d659ba6a5fe6ad6589ee77ac5b85f6a0c1789c526b14d", 0x54}, {&(0x7f0000000580)}], 0x5, &(0x7f0000000640)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0x7, 0x57, [@local]}, @generic={0x94, 0xb, "cd5fa2b25c5fb49c28"}, @generic={0x82, 0xd, "0333aabc68e64d0b7a9c4c"}]}}}], 0x60}, 0x20000080) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000800)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x6f, 0x8, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x10, 0x80000000, 0x9f}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000b40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1d4, r1, 0x112, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x8005}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10012814}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r8, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1000}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x200408c0}, 0x40000) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@enum64={0xe, 0x1, 0x0, 0x13, 0x0, 0xb, [{0x4, 0x9, 0x9}]}, @ptr={0xb, 0x0, 0x0, 0x2, 0x5}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xe, 0x2}, {0x9}, {0x1, 0x1}]}]}, {0x0, [0x2e, 0x2e, 0x30]}}, &(0x7f0000000d40)=""/142, 0x65, 0x8e, 0x0, 0x800, 0x10000}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0x18, 0x4, 0x1ff, 0x800, 0x11002, 0x1, 0x8238, '\x00', r6, r9, 0x2, 0x1, 0x2}, 0x50) (async) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x8]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x4, 0x6]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48014}, 0x40001) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r11, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, r12, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c814}, 0x40000) (async, rerun: 32) r13 = socket$netlink(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_MSG_GETOBJ(r13, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, 0x13, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001440)={0x1ff, 0x0}, 0x8) (async, rerun: 64) r15 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)=@generic={&(0x7f0000001480)='./file0\x00'}, 0x18) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001500)={r10, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x14, 0x12, &(0x7f0000001200)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @jmp={0x5, 0x0, 0x1, 0xb, 0x5, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f00000012c0)='syzkaller\x00', 0x7f, 0xd6, &(0x7f0000001300)=""/214, 0x41100, 0x10, '\x00', 0x0, @lirc_mode2, r9, 0x8, &(0x7f0000001400)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, r14, r15, 0x5, &(0x7f0000001540)=[r10, r16, r10, r10, r10, r10], &(0x7f0000001580)=[{0x2, 0x1, 0xa, 0x1}, {0x0, 0x3, 0x8}, {0x2, 0x3, 0x8, 0x1}, {0x3, 0x2, 0xb, 0x7}, {0x1, 0x1, 0xa, 0x3}], 0x10, 0x4}, 0x94) (async) setsockopt$SO_BINDTODEVICE_wg(r13, 0x1, 0x19, &(0x7f00000016c0)='wg1\x00', 0x4) (async, rerun: 64) sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x8840) (rerun: 64) 1.44097877s ago: executing program 4 (id=8277): syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaa3d63403aaaaaaaa0180c2001f196871f19a000086dd2c7b57843c127eb9cd602a84350014060000000000000400"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) sendto$packet(r1, &(0x7f0000000140)="df64bed0e57c6f09858f25bf41e4f2d7fe46db927aa3b8c455fcbf2ed61869dfa074bbf7b524afbcf0ab5e691e1af1f789cd615cad19926f84ccb566243c5c23db5171ea709794dae7ce0934c0d21ec369e1d74149685bbe727fbf91f33bb388fa556c0fdd6e701193474a8a17ffdab27a6470e5a35ab4a479224f7f60680e34d96470021c3f96e82c6d01a8862c95e73ef44d2dd4526e69e27e00e5a8a1", 0x9e, 0x4004000, 0x0, 0x0) 1.323993145s ago: executing program 1 (id=8279): r0 = socket$netlink(0x10, 0x3, 0x8000000004) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6fd9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a086535bd07820e690d2755768612bb7330a8b285f2585892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd0700"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) (async) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (rerun: 64) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x10}, 0x18) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', r4, 0xffffffffffffffff, 0x1}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x2, 0x18}, 0xc) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0x18, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @ringbuf_query]}, &(0x7f00000001c0)='GPL\x00', 0x401, 0x2a, &(0x7f00000003c0)=""/42, 0x40f00, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x9, 0x8000, 0xffff}, 0x10, 0x3c35, r7, 0x0, &(0x7f0000000940)=[r8, r9, r10, 0xffffffffffffffff], 0x0, 0x10, 0x81}, 0x94) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149014006040800", 0x58}], 0x1) 1.315473245s ago: executing program 3 (id=8280): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x0, 0x2b}, @in6=@mcast2, {}, {0x20000, 0x0, 0x0, 0x800000}, {}, 0x0, 0x0, 0x2, 0x4}, [@coaddr={0x14}]}, 0x104}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'sit0\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x38}}, 0x0) 1.253201703s ago: executing program 0 (id=8281): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c00)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000850}, 0x20008040) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x2d}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02805402038006"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.208150222s ago: executing program 4 (id=8282): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c0003ef05000100000000000c0002"], 0xc0}}, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000200)=0xb, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) 1.207868949s ago: executing program 2 (id=8283): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc14000000478803", 0xd, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 1.089402063s ago: executing program 3 (id=8284): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000001cc0), &(0x7f0000001d00)=0x8) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 1.065792976s ago: executing program 1 (id=8285): bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvfrom$inet(r0, &(0x7f0000000040)=""/86, 0x56, 0x40, &(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pK \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x3, 0x800, 0x2, 0x5, 0x4000, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='pimreg0\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000300)={0x0, 0xd8, 0x8205, 0x0, 0x6f3, 0x2, 0xd, 0x7f, 0x0}, &(0x7f0000000340)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000380)={r5, 0xd, 0x20}, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000003c0)=@int=0xc1, 0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224-x86\x00'}, 0x58) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x4, @local, 0x10001}, 0x1c) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0xfffffffd, 0xe, 0x1ff, 0x0, r1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x8}, 0x50) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000540)={r5, 0xc7, "ee31218a144a8c94b057f7a6fde3f2ebb3d4d4a993ca07d16d7beffd7b2cd9b53e55fd9e08fbdf95cf109bea0469c61d8ba50f56b9496266ff24b41c81bc4e6a00e99bc71b8617f68a08816ac363b2aac3bb9aa63e711be7b93f170c902cb16f90d0ca6455832b09af654271b61621d876244e0df972c2f19b948d1fb5d998d7b510743116ca9dd26ee9bc2e0d997e2726ab0f6f25d24a4dc64c21bc3ceada3201cf604fe20001cf3c232f0ed8fb1de74f247febaf6ff81de08f743ff0fe3a0bb8aa084a6db2c6"}, &(0x7f0000000640)=0xcf) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000680)={0x7, 0x0, 0xe630, 0x2, r9}, 0x10) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r2, 0x4ac69000) r10 = socket$unix(0x1, 0x1, 0x0) sendmsg$sock(r10, &(0x7f0000000a80)={&(0x7f00000006c0)=@rc={0x1f, @none, 0x64}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000740)="ae5e827922488e69b0e877b8ea43d98eb8ee7febfc1e0ffa40748cbdff98021d0c3cd5d84bf0285648a7548f6c16b9b7ee5e9e139d8cb111ccfe148777cf5a1098f0db9075872a65748eaaca53b50151de1e87ff54dbcdf16e650abfc56751ecfaeb047ada1091ebad4b590f4d62f1e395", 0x71}, {&(0x7f00000007c0)="067399abe721e9da3ca083abd12a318eaf319ce7672ac5466610423b7279d205575ab39ebfa94487a6a892eb822252fb9b9cfcb2d5c8eda60156649bd85ba7652f1f56553bdd804b7e903ed55a5249fed9a5b05a8d9239dcd5435da9472d2e5d", 0x60}, {&(0x7f0000000840)="fa1b3edc4f43fa33116f6fe8f137749bdf0f6ba319987bc4681910cd9f43", 0x1e}, {&(0x7f0000000880)="1b45556346b7789d1756920dd7", 0xd}, {&(0x7f00000008c0)="9dfcef67afb02e5e9afcb1f672a433347df83c541a5f045cccd78b43849ede610611867cf3ae431b8c307b86ed8556c0511efe92200a3f832df25706950b7c257232ef47b332e5a0c8fbfda27ea7a8b579be1b3e7baaada74fc11073b328af7784396cdb2d40564e6826", 0x6a}, {&(0x7f0000000940)="300d30f4a92aefde5efddbe7fe243febab82f06431844fd961549f2c8e789c8f98cd6403ee41bbd06e91acffd52b7cc813f55adc31c42b41e5bf9e7bafd3c28b6c66610858f4f7556799d552ef7d80db536d644eae9f72e7121e5d8a33ea20b3ea19e17057300c4abeff8bb6e1ac568334378e1fee892916901cef4e5a491af206d4eac2106d7256bcaad340152db4ef68df47bd8a3d7343d62cb78e15919ec682321bd74fc2b98946598854891e9defc47c9aaa47840bdd", 0xb8}], 0x6}, 0x800) close(r0) r11 = socket(0x12, 0x1, 0x8) poll(&(0x7f0000000ac0)=[{r3, 0x110}, {r0, 0x6000}], 0x2, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000b00)={@remote, 0x8, 0x2, 0x3, 0x1, 0x40, 0x3}, &(0x7f0000000b40)=0x20) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), r11) sendmsg$IPVS_CMD_DEL_DAEMON(r11, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xc8, r12, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x12}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0xa}}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d80)={r8}, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000dc0)={r9, 0xe74f}, 0x8) 1.040389292s ago: executing program 0 (id=8286): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x1c, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000002000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400249c8207fca6cadaa15d933d228d0000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b60000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000008520000002000000183a00000500000000000000000000008500000022000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x7, 0xcf, &(0x7f0000000200)=""/207, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, 0x0, 0x0) ioctl$int_in(r5, 0x5452, 0x0) writev(r5, &(0x7f0000019880), 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x1, 0x1, &(0x7f0000000100)="8d", 0x9, 0x8, 0x2, 0x5508, 0xc338, 0x1, 0x7, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r7 = accept(r0, 0x0, &(0x7f0000000580)) setsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f00000005c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='spmi_write_begin\x00', r2, 0x0, 0x7}, 0x18) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x7, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) pipe(&(0x7f00000004c0)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000030000005800018044000400200001e6f8b1830149b12e00000001d900000000000000000000000100000000200002000a00000000000000fe800000000000000004000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) sendto$inet6(r8, &(0x7f0000000140)="9f", 0x1, 0x4040000, 0x0, 0x0) 1.039866501s ago: executing program 2 (id=8287): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x0, @remote, 0x6b79}}, 0x25868d8, 0x4, 0x6, 0x8001, 0xa, 0x6, 0xba}, &(0x7f0000000080)=0x9c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r1, 0x87e3, 0x20, 0x0, 0x2}, &(0x7f0000000140)=0x18) r2 = socket$inet(0x2, 0x3, 0x2) socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xffffff}}}}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)={0x94, r8, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x3, 0x8}}, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, "d9"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0xb, 0x91, "c8224f47d85607"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff0100000000000000000000000000010600040001"], 0x58}}, 0x0) getsockopt$inet_buf(r6, 0x0, 0x24, &(0x7f0000000200)=""/185, &(0x7f0000000100)=0xb9) sendmsg$inet6(r4, &(0x7f0000000480)={&(0x7f0000000180)={0xa, 0x0, 0x40, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1d0}, 0x40080) 908.08769ms ago: executing program 4 (id=8288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xfdc3, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x3ff}, @TCA_FW_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 824.767547ms ago: executing program 0 (id=8289): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000010) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e, 0xf00}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 778.772633ms ago: executing program 3 (id=8290): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x19, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="85000000bc00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x90) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) ioctl(r3, 0x8b21, &(0x7f0000000180)="4577e14a52f353f37c25822b57696c06061e60ddf25f565af75b66ec2768fbfb87a63864c79dae6d4a6bce96b5fcb1ee275afa8b3b2dc9e3d607b7991b77b3351ca491cea420209f57fc87b966ddc748d04e56b35fc5ef8d22ba35f3d18f8a71c0f4104b8b420e96b3b98ac2702ea5126f8ab5ba1074b1e512e616e3990ba2d7b3e36a1421eaa0d6f625d96012c358e68b9e9e30e7394d84397b2d01a62993b9e720432ba3da50cd527f3bb1a0593b54742c864ec8ad03329ad017fe8d544f746f5205aaaf1e92a7f75785b4bdcb8f7756b5db38c55479464ac8d3fee068fe1ec3098ee51a2725bd000000000000000033b53937e0") 556.457492ms ago: executing program 2 (id=8291): r0 = socket(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0xf}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xbc, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x4}, {0x0, 0xd, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="120000007d000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000090fed7da000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) (async, rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r5, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r0}, 0x20) (rerun: 32) 555.907419ms ago: executing program 1 (id=8292): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000300000000020000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) 453.574456ms ago: executing program 4 (id=8293): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000001640)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f00000016c0)="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", 0xfd}, {&(0x7f0000000040)="174640b6d80fb2eedc81ba60cc0800", 0x1d}], 0x2}}, {{&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x2d, &(0x7f0000001540)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000140)="f7d11cb927605915ab0604862d63b118ea2b746b94c265f1679a99d1f75fceb83f65ad273ceeb462b8aa7dfb09ca683466b09c6aa8a3b41ec46e21619cdd5f96806786f6", 0x44}, {&(0x7f00000001c0)="b15f8e0f0ee447983ef3f73ce74ac53c0e58e99ee46e7620a923c6a54f9453dcdf48ce35486e9a47388dc859b9bd54cd7443fe927dbb9638b514bc6a9cecb802f506492fdeb396d21b2a971c6e90be710aada90a52c402816dee64a532b30f91ede7631984aa1facee3a68070896259a1cfaa21b40dde0189444057249e5c77be5986de4d24c1be0912bdf24dd096a99a59a258c51eed441a9277ffe5b6dac545512f7582ddd68839d", 0xa9}, {&(0x7f0000000280)="fab5b3f7f44b48afa892d88e3aad52793a5c03b596d1f2a946b29a3e66b485b57d7b30f32f12bee12e1623c324885714faee8f89bf4ce89e58274d8c674f7b056828892e542164e2fc2c0933c980505bcd1def2d20037b8013463fa77ac9ae111a668ab8d946ca1851a34b8fa9eb9f980058dabaefb928b4b2012f209a377bd6eff4c1eecdf26cdb3a27a8a309604c6a09c209189ce1408195581c9cf0eb8a51f381cefa9bffa51fe35be4a669d9b36ac8873891235bd2243c359930a6e59ec6a1bc8608b128ee118a013c", 0xcb}, {&(0x7f0000000380)="e48036043746ad8a52e9e07001a4013e33ff347696ae56bdb4f9ef1882b80894a144319b1a89d0e6e045981edc1b7abf585e4a5b63617c5ed11c819d84e734b6796595fa2d5876215d9bf2b68e4cbc12ce1ccf71693e5ac019583d2c3d8d47fa9e3d", 0x62}, {&(0x7f0000001440)="132b4ff90fa0910efd28aa501457f3cbb4dddafa00c34b3bffc6f3bcc7ecaf05c15f89a9e6ff2846f26b7555fe3f0532a77e603327b502b5839e4ce668397bc09f63df4a5145b454637ad55f0a2cc3bdcc228a52faab12d0e75fffe5a313dda924a7776f68e50590dc09b9fdb612ad7628dd0b03a11e73b7b31d5771815eda2b7f592a0fb4042af4229a61169bb48ec347e90df9b693b35543536c8bed5af59965507f5e377f244875c910bb9d3d8bd1ab8aac1ccfa476a9b7b8bda8d0ebec798cb59fed93ad86eb9de39fb00fd5ef0c24377af033099ba04a09df658b115aed5148e07755c7a04a72219dbd81fcba944a", 0xf1}], 0x6, &(0x7f00000019c0)=ANY=[@ANYBLOB="110000000000000000000000010000000400000000000000140000000000000000000000020000000600000000000000140000000000000000000000010000000500000000000000110000000000000000000000010000000700000000000000140000000000000000000000020000000800000000000000bc000000000000000000000007000000940400000089272498ac1e00010a010102ac141425ac1414bbac141421ffffffff7f000001ac1414bbac1e0001830d710979da50401c38240263861f00000003020ad1e95af9bc4c7d19010f36db044dcc9c0cfe460b596b94070b3a7f00000164010100861d0000000001111399a2430f9b51bae6148c5bbfd0ee0506970d800000026401010000007fffac1e010100000ce90a0101000000080000000000000000e2b7a6dd7111731116a16648c13796d73196a314ec3dcff60624dfb916ce7810af83a43504ebddd72a85e7abff43a94ace8a613354814e214acba3f2d6f0faef37531e8c95f5e54f2f4efc15b8ff64004c69387aa7b2803cd9e922afa0833348c55d7025fcf9c58a4cd874f1d8ac9d855c9924c9d62e6f015493886f02481e422c1e39b68baf8f070be506bb5a8fa4e042d67076e2df67b4bbcf1a379a70e547a8a345103107fa97a4505424015483203a4a023bddbee9cb8ec5aa7bfee39e88998fac11e9793ed414476123f0714134500c57fc4864af26e5e0398c9f7ad3d38557e7ccffae7ac2cbd9f6ab59604f364109dec45f1cfcfbd8c9a118776b9d9b7851bd7544f74b4e9f991990612d216d8aff00"/587], 0x138}}], 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'veth0_to_bridge\x00', @remote}) 432.836133ms ago: executing program 0 (id=8294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB='_'], 0x1c}}, 0x20024090) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x24040080) 320.062828ms ago: executing program 1 (id=8295): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x4}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) close(0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a"], 0xec}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 300.238072ms ago: executing program 2 (id=8296): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000010) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) (fail_nth: 7) 287.493356ms ago: executing program 0 (id=8297): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x2c}, 0x1ff}], 0x2, 0x20022, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x80}}, 0x0) sendmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) recvfrom$unix(r2, &(0x7f00000004c0)=""/249, 0xf9, 0x40, 0x0, 0x0) 219.942151ms ago: executing program 3 (id=8298): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000)=0x8000, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={r1, r2, r3}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x32) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10001}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f0000000100)=0x2, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 210.135059ms ago: executing program 4 (id=8299): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet(r1, &(0x7f0000000040)=""/37, 0x25, 0x40002021, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000100)=0x400, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000180), 0x2, 0x0) r4 = accept$ax25(r1, &(0x7f00000001c0)={{0x3, @rose}, [@rose, @default, @null, @default, @netrom, @default, @rose, @rose]}, &(0x7f0000000240)=0x48) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000280)={{r3}, 0xc, 0x8, 0x2}) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f00000002c0)={0x7, 'ipvlan0\x00', {0x5}, 0x7}) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300), 0x2) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000340)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000380)=r1, 0x4) r8 = socket$netlink(0x10, 0x3, 0xb) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000003c0)=0x3a, 0x4) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000400)) r9 = socket$inet(0x2, 0x6, 0x0) recvfrom$inet(r9, &(0x7f0000000440)=""/20, 0x14, 0x10021, &(0x7f0000000480)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000004c0)={0x2c, @private=0xa010101, 0x4e21, 0x0, 'wrr\x00', 0x6, 0x3, 0x3f}, 0x2c) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000000500)=0x73d) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r10, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r11, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) bind$netrom(r0, &(0x7f0000000680)={{0x3, @default}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r12, 0x400, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r8, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x140e, 0x8, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) socket$nl_generic(0x10, 0x3, 0x10) 87.536144ms ago: executing program 0 (id=8300): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB="08000d000000000008003f000802"], 0x4c}}, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000880), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) 20.040824ms ago: executing program 3 (id=8301): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x100000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(0x3) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010800000000fbdbdf25040117800c00180006ac0f"], 0x114}], 0x1}, 0x0) 0s ago: executing program 1 (id=8302): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x44, 0x10, 0xc03, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x44}}, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, &(0x7f0000000300)) (async) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in=@private, @in6=@dev}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8) kernel console output (not intermixed with test programs): T28384] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6394'. [ 683.540620][T28392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6395'. [ 683.747370][T28395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6396'. [ 683.882878][T28400] netlink: 'syz.2.6397': attribute type 13 has an invalid length. [ 683.891117][T28400] netlink: 'syz.2.6397': attribute type 58 has an invalid length. [ 683.901437][T28400] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6397'. [ 686.910288][T28159] hsr_slave_0: entered promiscuous mode [ 686.935107][T28159] hsr_slave_1: entered promiscuous mode [ 686.963775][T28159] debugfs: 'hsr0' already exists in 'hsr' [ 686.969581][T28159] Cannot create hsr debugfs directory [ 687.128122][T28417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 687.135568][T28417] IPv6: NLM_F_CREATE should be set when creating new route [ 687.158247][T28417] netlink: 'syz.4.6403': attribute type 10 has an invalid length. [ 687.185264][T28417] team0: Port device dummy0 added [ 687.334564][T28426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6407'. [ 687.352094][T28426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6407'. [ 687.354984][ T8954] IPVS: stop unused estimator thread 0... [ 687.384103][T28426] netlink: 'syz.2.6407': attribute type 15 has an invalid length. [ 687.412046][T28429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6405'. [ 687.519410][T28433] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6409'. [ 687.590698][T28433] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.598599][T28433] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.868005][T28444] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 687.887032][T28447] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 687.948392][T28159] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 688.003528][T28159] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 688.018741][T28159] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 688.030400][T28159] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 688.176822][T28462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6419'. [ 688.202479][T28462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6419'. [ 688.222067][T28462] netlink: 'syz.0.6419': attribute type 14 has an invalid length. [ 688.229982][T28462] netlink: 'syz.0.6419': attribute type 13 has an invalid length. [ 688.436433][T28159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.476097][T28159] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.512390][ T8947] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.519729][ T8947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.559776][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.567046][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.608809][T28482] netlink: 'syz.3.6425': attribute type 1 has an invalid length. [ 688.627522][T28486] nbd: must specify at least one socket [ 688.637320][T28486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6426'. [ 688.650447][T28486] block nbd5: Unsupported socket: should be TCP or UNIX. [ 688.749008][T28490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.902188][T28159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.960236][T28159] veth0_vlan: entered promiscuous mode [ 688.974605][T28159] veth1_vlan: entered promiscuous mode [ 689.007709][T28159] veth0_macvtap: entered promiscuous mode [ 689.021706][T28159] veth1_macvtap: entered promiscuous mode [ 689.053903][T28159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.067492][T28159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.103526][ T8932] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.125850][ T8932] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.148249][ T8932] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.159301][ T8932] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.306661][ T8954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.318744][ T8954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.400860][ T8954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.417174][T28501] netlink: 'syz.0.6429': attribute type 8 has an invalid length. [ 689.449173][T28501] netlink: 'syz.0.6429': attribute type 1 has an invalid length. [ 689.451155][ T8954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.660072][T28507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6429'. [ 689.688003][T28501] veth11: entered promiscuous mode [ 690.345700][T28542] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6441'. [ 690.535536][T28546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6442'. [ 690.543481][T28542] hsr0 speed is unknown, defaulting to 1000 [ 690.601778][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 690.615604][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 690.627315][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 690.638611][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 690.649283][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 690.650545][T28550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6443'. [ 690.679530][T28550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6443'. [ 690.813336][T28546] hsr_slave_0 (unregistering): left promiscuous mode [ 690.842362][T28542] lo speed is unknown, defaulting to 1000 [ 690.982375][T28550] syzkaller0: entered promiscuous mode [ 690.988053][T28550] syzkaller0: entered allmulticast mode [ 691.469210][T28574] delete_channel: no stack [ 692.728140][ T5847] Bluetooth: hci3: command tx timeout [ 694.320308][T28595] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6453'. [ 694.341147][T28593] netlink: 'syz.1.6452': attribute type 64 has an invalid length. [ 694.352282][T28595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 694.359551][T28595] IPv6: NLM_F_CREATE should be set when creating new route [ 694.367268][T28593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6452'. [ 694.420172][T28547] hsr0 speed is unknown, defaulting to 1000 [ 694.439207][T28547] lo speed is unknown, defaulting to 1000 [ 694.807131][ T5847] Bluetooth: hci3: command tx timeout [ 695.025793][T28547] chnl_net:caif_netlink_parms(): no params data found [ 695.242085][T28623] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 695.436984][T28636] netlink: 'syz.3.6464': attribute type 1 has an invalid length. [ 695.524136][T28636] 8021q: adding VLAN 0 to HW filter on device bond3 [ 695.534776][T28547] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.548102][T28547] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.559893][T28547] bridge_slave_0: entered allmulticast mode [ 695.568145][T28547] bridge_slave_0: entered promiscuous mode [ 695.579949][T28547] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.588052][T28547] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.595745][T28547] bridge_slave_1: entered allmulticast mode [ 695.604266][T28547] bridge_slave_1: entered promiscuous mode [ 695.678942][T28645] bond3: (slave veth3): Enslaving as an active interface with a down link [ 695.710058][T28636] veth5: entered promiscuous mode [ 695.721279][T28636] bond3: (slave veth5): Enslaving as an active interface with a down link [ 695.730097][T28649] : renamed from veth1_vlan (while UP) [ 695.768036][T28651] vlan3: entered allmulticast mode [ 695.832520][T28651] bond3: entered allmulticast mode [ 695.856713][T28651] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 696.076358][T28547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.125484][T28547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.335759][T28547] team0: Port device team_slave_0 added [ 696.348322][T28547] team0: Port device team_slave_1 added [ 696.465451][T28688] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 696.486294][T28688] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 696.512017][T28547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.548289][T28547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.576608][T28547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.595062][T28547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.605142][T28547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.634127][T28547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.680557][T28701] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6479'. [ 696.709044][T28701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6479'. [ 696.746967][T28547] hsr_slave_0: entered promiscuous mode [ 696.754292][T28547] hsr_slave_1: entered promiscuous mode [ 696.763194][T28547] debugfs: 'hsr0' already exists in 'hsr' [ 696.769014][T28547] Cannot create hsr debugfs directory [ 696.769893][T28705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6480'. [ 696.881285][ T5847] Bluetooth: hci3: command tx timeout [ 696.993292][T28547] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.005302][T28547] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.094764][T28547] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.105502][T28547] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.244860][T28547] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.261829][T28547] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.356555][T28547] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.369366][T28547] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.660041][T28547] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 697.726812][T28547] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 697.787897][T28547] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 697.848420][T10374] IPVS: starting estimator thread 0... [ 697.849303][T28547] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 697.915031][T28746] syzkaller0: entered promiscuous mode [ 697.930100][T28746] syzkaller0: entered allmulticast mode [ 697.941473][T28750] IPVS: using max 26 ests per chain, 62400 per kthread [ 698.262794][T28547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.306749][T28771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6501'. [ 698.318013][T28547] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.357232][ T8952] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.364602][ T8952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.435480][ T8942] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.442744][ T8942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.546388][T28782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6505'. [ 698.582674][T28781] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.6507'. [ 698.593124][T28782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6505'. [ 698.605564][T28781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6507'. [ 698.847565][T28797] netlink: 'syz.4.6510': attribute type 32 has an invalid length. [ 698.962073][ T5847] Bluetooth: hci3: command tx timeout [ 699.048530][T28547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.254537][T28547] veth0_vlan: entered promiscuous mode [ 699.343076][T28547] veth1_vlan: entered promiscuous mode [ 699.427441][T28823] __nla_validate_parse: 3 callbacks suppressed [ 699.427465][T28823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6516'. [ 699.642712][T28547] veth0_macvtap: entered promiscuous mode [ 699.659629][T28831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6517'. [ 699.703276][T28830] bridge3: entered promiscuous mode [ 699.721619][T28830] bridge3: entered allmulticast mode [ 699.735685][T28547] veth1_macvtap: entered promiscuous mode [ 699.829778][T28547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.871958][T28547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.939317][ T8932] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.977793][ T8932] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.016540][ T8932] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.074228][ T8932] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.408315][T28872] netlink: 'syz.2.6525': attribute type 19 has an invalid length. [ 700.552034][ T8952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.579995][ T8952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.650665][T28880] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6528'. [ 700.691285][ T8956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.724457][ T8956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.990196][T28898] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6532'. [ 701.030371][T28900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6533'. [ 701.030547][T28898] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6532'. [ 701.061926][T28903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6533'. [ 701.250031][T28912] netlink: 'syz.0.6534': attribute type 1 has an invalid length. [ 701.305816][T28906] syzkaller1: entered promiscuous mode [ 701.321292][T28906] syzkaller1: entered allmulticast mode [ 701.371735][T28904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6534'. [ 701.445137][T28910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.479044][T28902] veth3: entered promiscuous mode [ 701.517368][T28922] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6538'. [ 701.757949][ T8956] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.777651][ T8956] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.835378][T28932] netlink: 'syz.1.6541': attribute type 1 has an invalid length. [ 701.872066][T28932] netlink: 'syz.1.6541': attribute type 3 has an invalid length. [ 701.893506][T28932] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6541'. [ 701.948946][T28939] syzkaller0: entered promiscuous mode [ 701.962293][T28939] syzkaller0: entered allmulticast mode [ 701.975606][T28932] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.030809][T28932] bridge_slave_0 (unregistering): left allmulticast mode [ 702.040183][T28932] bridge_slave_0 (unregistering): left promiscuous mode [ 702.048835][T28932] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.192306][ T95] block nbd2: Possible stuck request ffff888024fd5080: control (read@0,1024B). Runtime 540 seconds [ 702.204294][ T95] block nbd2: Possible stuck request ffff888024fd5240: control (read@1024,1024B). Runtime 540 seconds [ 702.215664][ T95] block nbd2: Possible stuck request ffff888024fd5400: control (read@2048,1024B). Runtime 540 seconds [ 702.227245][ T95] block nbd2: Possible stuck request ffff888024fd55c0: control (read@3072,1024B). Runtime 540 seconds [ 702.472504][T28960] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 702.479280][T28960] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 703.122858][T28994] netlink: 'syz.0.6559': attribute type 3 has an invalid length. [ 703.143779][T28995] !: renamed from bond_slave_0 (while UP) [ 703.435878][T29008] netlink: 'syz.3.6564': attribute type 39 has an invalid length. [ 703.534756][T29013] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 703.992257][T29054] netlink: 'syz.4.6573': attribute type 10 has an invalid length. [ 704.010099][T29054] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 704.265669][T29068] netlink: 'syz.4.6579': attribute type 1 has an invalid length. [ 704.301670][T29068] bond1 (unregistering): Released all slaves [ 704.335157][T29072] ip6tnl1: entered promiscuous mode [ 704.340564][T29072] ip6tnl1: entered allmulticast mode [ 704.530301][T29076] __nla_validate_parse: 7 callbacks suppressed [ 704.530325][T29076] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6581'. [ 704.563628][T29078] netlink: 'syz.3.6582': attribute type 5 has an invalid length. [ 704.633551][T29080] tipc: Enabling of bearer rejected, failed to enable media [ 704.844529][T29102] tls_set_device_offload: netdev not found [ 705.034470][T29111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6589'. [ 705.159480][T29118] bond1 (unregistering): Released all slaves [ 705.334011][T29131] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6592'. [ 705.344636][T29131] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6592'. [ 705.442206][T29137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6596'. [ 705.454033][T29137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6596'. [ 705.466080][T29137] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6596'. [ 705.534763][T29134] syzkaller0: entered promiscuous mode [ 705.550610][T29134] syzkaller0: entered allmulticast mode [ 705.566616][T29137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6596'. [ 705.576832][T29137] netlink: 'syz.3.6596': attribute type 3 has an invalid length. [ 705.592494][T29137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6596'. [ 705.627690][T29137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6596'. [ 705.640678][T29137] netlink: 'syz.3.6596': attribute type 3 has an invalid length. [ 705.656792][T29134] openvswitch: netlink: Flow key attr not present in new flow. [ 706.172632][T29182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 706.404511][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 706.433029][T29170] team0 (unregistering): Port device team_slave_0 removed [ 706.448176][T29170] team0 (unregistering): Port device team_slave_1 removed [ 706.460190][T29170] team0 (unregistering): Port device dummy0 removed [ 706.625061][T29194] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.769333][T29194] bridge_slave_1 (unregistering): left allmulticast mode [ 706.779227][T29194] bridge_slave_1 (unregistering): left promiscuous mode [ 706.790520][T29194] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.053464][T29225] sctp: [Deprecated]: syz.0.6620 (pid 29225) Use of int in maxseg socket option. [ 707.053464][T29225] Use struct sctp_assoc_value instead [ 707.090753][T29226] xt_TCPMSS: Only works on TCP SYN packets [ 707.108035][T29222] validate_nla: 2 callbacks suppressed [ 707.108057][T29222] netlink: 'syz.2.6619': attribute type 33 has an invalid length. [ 707.194938][T29235] Bluetooth: MGMT ver 1.23 [ 707.503870][T29251] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:0 [ 707.569134][T29249] bond1: entered promiscuous mode [ 707.591257][T29249] bond1: entered allmulticast mode [ 707.604160][T29249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 707.874691][T29273] netlink: 'syz.0.6630': attribute type 1 has an invalid length. [ 708.013491][T29277] netlink: 'syz.2.6633': attribute type 3 has an invalid length. [ 708.169427][T29288] netlink: 'syz.4.6635': attribute type 1 has an invalid length. [ 708.184719][T29288] netlink: 'syz.4.6635': attribute type 4 has an invalid length. [ 708.284097][T29289] xt_CT: No such helper "pptp" [ 708.974548][T29326] block nbd5: Unsupported socket: should be TCP or UNIX. [ 709.053654][T29326] syzkaller0: entered promiscuous mode [ 709.059356][T29326] syzkaller0: entered allmulticast mode [ 709.456439][T29348] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.476790][T29348] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.484215][T29348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.646076][T29356] __nla_validate_parse: 13 callbacks suppressed [ 709.646100][T29356] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6657'. [ 709.685396][T29356] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6657'. [ 709.724135][T29356] netlink: 'syz.4.6657': attribute type 5 has an invalid length. [ 709.743240][T29356] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6657'. [ 709.826738][T29370] syzkaller1: entered promiscuous mode [ 709.834227][T29370] syzkaller1: entered allmulticast mode [ 709.883700][T29372] Cannot find add_set index 0 as target [ 709.909830][T29374] netlink: 'syz.0.6661': attribute type 1 has an invalid length. [ 710.006759][T29378] nbd: nbd1 already in use [ 710.017189][T29381] sctp: [Deprecated]: syz.4.6663 (pid 29381) Use of int in max_burst socket option deprecated. [ 710.017189][T29381] Use struct sctp_assoc_value instead [ 710.035307][T29378] block nbd1: NBD_DISCONNECT [ 710.050319][T29378] block nbd1: Send disconnect failed -32 [ 710.067703][T29378] block nbd1: shutting down sockets [ 710.137162][T29387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6666'. [ 710.183731][ T34] : left allmulticast mode [ 710.190829][ T34] bridge0: port 1() entered disabled state [ 710.534817][ T34] bond2 (unregistering): (slave gretap1): Releasing active interface [ 710.543329][ T34] gretap1 (unregistering): left promiscuous mode [ 710.549715][ T34] gretap1 (unregistering): left allmulticast mode [ 711.196819][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.208820][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.221959][ T34] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 711.233049][ T34] bond0 (unregistering): Released all slaves [ 711.250274][ T34] bond1 (unregistering): Released all slaves [ 711.435005][ T34] bond2 (unregistering): Released all slaves [ 711.598297][ T34] bond3 (unregistering): Released all slaves [ 711.616234][ T34] bond4 (unregistering): Released all slaves [ 711.769255][ T34] bond5 (unregistering): Released all slaves [ 711.929406][ T34] bond6 (unregistering): Released all slaves [ 711.949120][ T34] bond7 (unregistering): Released all slaves [ 711.968380][ T34] bond8 (unregistering): Released all slaves [ 712.149949][ T34] bond9 (unregistering): Released all slaves [ 712.309911][ T34] bond10 (unregistering): Released all slaves [ 712.635366][ T34] tipc: Left network mode [ 712.957891][T29423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6677'. [ 713.187804][T29429] sch_tbf: burst 0 is lower than device veth3 mtu (1514) ! [ 713.228920][T29434] geneve2: entered promiscuous mode [ 713.235703][T29434] geneve2: entered allmulticast mode [ 713.253879][T29439] erspan0: entered promiscuous mode [ 713.460298][T29444] netlink: 'syz.2.6683': attribute type 4 has an invalid length. [ 713.779725][T29459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6686'. [ 713.926372][T29470] tipc: Started in network mode [ 713.937827][T29470] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 713.968430][T29470] tipc: Enabled bearer , priority 10 [ 714.053567][T29477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 714.300401][T29497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6692'. [ 714.377835][T29501] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6694'. [ 714.481893][T29507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6697'. [ 714.493278][T29507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6697'. [ 714.493449][ T34] hsr_slave_0: left promiscuous mode [ 714.522290][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.540378][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.667808][ T34] pim6reg (unregistering): left allmulticast mode [ 714.740378][ T34] pimreg3 (unregistering): left allmulticast mode [ 714.948101][ T34] team0 (unregistering): Port device team_slave_1 removed [ 715.091877][T14822] tipc: Node number set to 10005162 [ 716.065276][ T34] IPVS: stop unused estimator thread 0... [ 716.467589][T29586] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6713'. [ 716.617730][T29595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6715'. [ 716.784376][T29598] syzkaller0: entered promiscuous mode [ 716.790079][T29598] syzkaller0: entered allmulticast mode [ 716.918780][T29599] syzkaller0: entered promiscuous mode [ 716.926214][T29599] syzkaller0: entered allmulticast mode [ 716.987000][T29618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6724'. [ 719.492275][T29630] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6727'. [ 719.772482][T29647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6732'. [ 719.827893][T29647] ip6gre1: entered allmulticast mode [ 720.080778][T29654] syzkaller0: entered promiscuous mode [ 720.109214][T29654] syzkaller0: entered allmulticast mode [ 720.263433][T29666] syzkaller0: entered promiscuous mode [ 720.271657][T29666] syzkaller0: entered allmulticast mode [ 722.940785][T29695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 725.235285][T29700] : renamed from lo (while UP) [ 725.513650][T29707] syzkaller0: entered promiscuous mode [ 725.519251][T29707] syzkaller0: entered allmulticast mode [ 725.558399][T29722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6752'. [ 725.572417][T29726] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6753'. [ 725.615044][T29715] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6748'. [ 725.933960][T29749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6762'. [ 726.007903][T29756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6764'. [ 726.094249][T29761] tipc: Started in network mode [ 726.099399][T29761] tipc: Node identity 12f100eac203, cluster identity 4711 [ 726.107422][T29761] tipc: Enabled bearer , priority 0 [ 726.115195][T29761] syzkaller0: entered promiscuous mode [ 726.120699][T29761] syzkaller0: entered allmulticast mode [ 726.151632][T29761] tipc: Resetting bearer [ 726.164080][T29759] tipc: Resetting bearer [ 726.212179][T29759] tipc: Disabling bearer [ 726.256064][T29767] syz_tun: entered allmulticast mode [ 726.270764][T29767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6767'. [ 726.283079][T29765] syz_tun: left allmulticast mode [ 726.328197][T29768] team0: Device ip6gre2 is of different type [ 726.440325][T29774] tipc: Enabled bearer , priority 0 [ 726.459864][T29774] syzkaller0: entered promiscuous mode [ 726.476977][T29774] syzkaller0: entered allmulticast mode [ 726.502434][T29774] tipc: Resetting bearer [ 726.511152][T29773] tipc: Resetting bearer [ 726.543589][T29773] tipc: Disabling bearer [ 726.572116][T29781] syzkaller1: entered promiscuous mode [ 726.577932][T29781] syzkaller1: entered allmulticast mode [ 726.604429][T29783] netlink: 'syz.0.6774': attribute type 83 has an invalid length. [ 726.631227][T29783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6774'. [ 726.879861][T29794] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6777'. [ 727.059128][T29809] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6781'. [ 727.069693][T29809] xt_policy: neither incoming nor outgoing policy selected [ 727.093654][T29806] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 727.120675][T29809] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6781'. [ 727.288032][T29821] netlink: 'syz.2.6785': attribute type 1 has an invalid length. [ 727.366192][T29821] 8021q: adding VLAN 0 to HW filter on device bond2 [ 727.467659][T29825] bond2: (slave veth5): Enslaving as an active interface with a down link [ 727.530361][T29834] gretap2: entered allmulticast mode [ 727.545537][T29834] bond2: (slave gretap2): making interface the new active one [ 727.559771][T29834] gretap2: entered promiscuous mode [ 727.568560][T29834] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 727.678438][T29843] netlink: 'syz.0.6792': attribute type 10 has an invalid length. [ 727.721698][T29843] team0: Port device dummy0 added [ 727.734581][T29846] openvswitch: netlink: Unknown nsh attribute 0 [ 727.744144][T29847] netlink: 'syz.2.6794': attribute type 1 has an invalid length. [ 727.755090][T29846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.180047][T29876] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 728.186623][T29876] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 728.203845][T29869] syzkaller0: entered promiscuous mode [ 728.212724][T29869] syzkaller0: entered allmulticast mode [ 728.235754][T29879] tipc: Started in network mode [ 728.247430][T29879] tipc: Node identity 8a6415c0e0bf, cluster identity 4711 [ 728.268665][T29879] tipc: Enabled bearer , priority 0 [ 729.381730][ T5840] tipc: Node number set to 1792742848 [ 730.853834][T29871] syzkaller0: entered promiscuous mode [ 730.859501][T29871] syzkaller0: entered allmulticast mode [ 730.868752][T29879] tipc: Resetting bearer [ 730.884155][T29870] tipc: Resetting bearer [ 730.929364][T29870] tipc: Disabling bearer [ 731.011924][T29904] blkio.reset_stats is deprecated [ 731.033302][T29906] __nla_validate_parse: 3 callbacks suppressed [ 731.033326][T29906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6813'. [ 731.245144][T29909] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6816'. [ 731.286616][T29909] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6816'. [ 731.405166][T29927] netlink: 'syz.0.6820': attribute type 1 has an invalid length. [ 731.504549][T29933] netlink: 'syz.0.6820': attribute type 1 has an invalid length. [ 731.523508][T29932] 8021q: VLANs not supported on ip6tnl0 [ 731.556199][T29938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6823'. [ 731.636572][T29943] netlink: 11 bytes leftover after parsing attributes in process `syz.2.6822'. [ 731.677516][T29943] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 731.744364][T29943] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.752263][T29943] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.795065][T29949] IPVS: length: 24 != 162274879224 [ 731.886688][T29956] x_tables: duplicate underflow at hook 4 [ 731.925073][T29955] syzkaller1: entered promiscuous mode [ 731.957329][T29955] syzkaller1: entered allmulticast mode [ 732.004720][T29955] xt_CONNSECMARK: invalid mode: 0 [ 732.105037][T29965] openvswitch: netlink: IP tunnel dst address not specified [ 732.244096][ T95] block nbd2: Possible stuck request ffff888024fd5080: control (read@0,1024B). Runtime 570 seconds [ 732.256917][ T95] block nbd2: Possible stuck request ffff888024fd5240: control (read@1024,1024B). Runtime 570 seconds [ 732.268649][ T95] block nbd2: Possible stuck request ffff888024fd5400: control (read@2048,1024B). Runtime 570 seconds [ 732.279919][ T95] block nbd2: Possible stuck request ffff888024fd55c0: control (read@3072,1024B). Runtime 570 seconds [ 732.444923][T29985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6838'. [ 732.476421][T29987] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6840'. [ 732.569782][T29991] netlink: 'syz.4.6839': attribute type 1 has an invalid length. [ 732.736336][T30000] bond1: (slave geneve2): making interface the new active one [ 732.766124][T30000] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 732.791356][T30008] netlink: 'syz.2.6847': attribute type 83 has an invalid length. [ 732.797423][ T8932] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 732.799457][T30011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6845'. [ 732.829092][ T8932] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 732.964928][ T8932] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 732.989867][ T8932] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 733.009830][ T30] audit: type=1107 audit(1762418694.296:7): pid=30020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='9TF雂鐆1,z嬅荟 [ 733.009830][ T30]  R祻Q暭z隳1柝R紼哝菉${K=碋B$M;}墟1ud鹕2芒$徱陹庰/站毲/遭虻R僂%勇p,i霣镤」/搡%6遢*[廂p p右 [ 733.009830][ T30] 56擛4篌9&跭z胶 盭3曤+!"╊}觢僶v.钐^aD5伮,譂=櫛<奭=' [ 733.077727][T30017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6848'. [ 733.236197][T30041] netlink: 'syz.4.6854': attribute type 2 has an invalid length. [ 733.454243][T30046] FAULT_INJECTION: forcing a failure. [ 733.454243][T30046] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 733.485306][T30050] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6858'. [ 733.511388][T30046] CPU: 1 UID: 0 PID: 30046 Comm: syz.2.6856 Not tainted syzkaller #0 PREEMPT(full) [ 733.511452][T30046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 733.511595][T30046] Call Trace: [ 733.511606][T30046] [ 733.511673][T30046] dump_stack_lvl+0x189/0x250 [ 733.511700][T30046] ? __pfx____ratelimit+0x10/0x10 [ 733.511722][T30046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 733.511745][T30046] ? __pfx__printk+0x10/0x10 [ 733.511772][T30046] ? __might_fault+0xb0/0x130 [ 733.511816][T30046] should_fail_ex+0x414/0x560 [ 733.511854][T30046] _copy_from_user+0x2d/0xb0 [ 733.511882][T30046] ___sys_sendmsg+0x158/0x2a0 [ 733.511908][T30046] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.511969][T30046] ? __fget_files+0x2a/0x420 [ 733.511988][T30046] ? __fget_files+0x3a0/0x420 [ 733.512020][T30046] __sys_sendmmsg+0x227/0x430 [ 733.512050][T30046] ? __pfx___sys_sendmmsg+0x10/0x10 [ 733.512083][T30046] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 733.512138][T30046] ? ksys_write+0x22a/0x250 [ 733.512170][T30046] ? __pfx_ksys_write+0x10/0x10 [ 733.512207][T30046] __x64_sys_sendmmsg+0xa0/0xc0 [ 733.512232][T30046] do_syscall_64+0xfa/0xfa0 [ 733.512261][T30046] ? lockdep_hardirqs_on+0x9c/0x150 [ 733.512290][T30046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.512312][T30046] ? clear_bhb_loop+0x60/0xb0 [ 733.512338][T30046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.512369][T30046] RIP: 0033:0x7f8c3f78f6c9 [ 733.512389][T30046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.512412][T30046] RSP: 002b:00007f8c406bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 733.512435][T30046] RAX: ffffffffffffffda RBX: 00007f8c3f9e5fa0 RCX: 00007f8c3f78f6c9 [ 733.512451][T30046] RDX: 0000000000000027 RSI: 00002000000017c0 RDI: 0000000000000006 [ 733.512479][T30046] RBP: 00007f8c406bc090 R08: 0000000000000000 R09: 0000000000000000 [ 733.512493][T30046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.512505][T30046] R13: 00007f8c3f9e6038 R14: 00007f8c3f9e5fa0 R15: 00007fff16034988 [ 733.512541][T30046] [ 734.382016][T30084] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 734.413801][T30084] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 734.475571][T30086] 8021q: VLANs not supported on xfrm0 [ 734.506350][ T5840] IPVS: starting estimator thread 0... [ 734.561549][T30090] hsr0 speed is unknown, defaulting to 1000 [ 734.592896][T30090] lo speed is unknown, defaulting to 1000 [ 734.601539][T30099] IPVS: using max 26 ests per chain, 62400 per kthread [ 734.629673][T30102] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 734.703560][T30105] netlink: 'syz.2.6869': attribute type 10 has an invalid length. [ 734.775251][T30105] team0: Port device dummy0 added [ 734.799001][T30111] FAULT_INJECTION: forcing a failure. [ 734.799001][T30111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.812822][T30111] CPU: 0 UID: 0 PID: 30111 Comm: syz.1.6872 Not tainted syzkaller #0 PREEMPT(full) [ 734.812852][T30111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 734.812866][T30111] Call Trace: [ 734.812875][T30111] [ 734.812885][T30111] dump_stack_lvl+0x189/0x250 [ 734.812919][T30111] ? __pfx____ratelimit+0x10/0x10 [ 734.812948][T30111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.812978][T30111] ? __pfx__printk+0x10/0x10 [ 734.813016][T30111] should_fail_ex+0x414/0x560 [ 734.813054][T30111] _copy_from_user+0x2d/0xb0 [ 734.813081][T30111] __copy_msghdr+0x3c5/0x5b0 [ 734.813108][T30111] ___sys_sendmsg+0x1a5/0x2a0 [ 734.813134][T30111] ? __pfx____sys_sendmsg+0x10/0x10 [ 734.813198][T30111] ? __fget_files+0x2a/0x420 [ 734.813218][T30111] ? __fget_files+0x3a0/0x420 [ 734.813251][T30111] __sys_sendmmsg+0x227/0x430 [ 734.813280][T30111] ? __pfx___sys_sendmmsg+0x10/0x10 [ 734.813314][T30111] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 734.813367][T30111] ? ksys_write+0x22a/0x250 [ 734.813401][T30111] ? __pfx_ksys_write+0x10/0x10 [ 734.813436][T30111] __x64_sys_sendmmsg+0xa0/0xc0 [ 734.813462][T30111] do_syscall_64+0xfa/0xfa0 [ 734.813510][T30111] ? lockdep_hardirqs_on+0x9c/0x150 [ 734.813540][T30111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.813561][T30111] ? clear_bhb_loop+0x60/0xb0 [ 734.813587][T30111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.813608][T30111] RIP: 0033:0x7f11d7b8f6c9 [ 734.813627][T30111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.813646][T30111] RSP: 002b:00007f11d8a91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 734.813669][T30111] RAX: ffffffffffffffda RBX: 00007f11d7de5fa0 RCX: 00007f11d7b8f6c9 [ 734.813685][T30111] RDX: 0000000000000027 RSI: 00002000000017c0 RDI: 0000000000000006 [ 734.813699][T30111] RBP: 00007f11d8a91090 R08: 0000000000000000 R09: 0000000000000000 [ 734.813712][T30111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.813725][T30111] R13: 00007f11d7de6038 R14: 00007f11d7de5fa0 R15: 00007fffec0f53c8 [ 734.813761][T30111] [ 735.163748][T30116] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 735.588576][T30139] batadv_slave_0: entered promiscuous mode [ 735.597873][T30139] batman_adv: batadv0: Adding interface: macsec1 [ 735.613710][T30139] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 735.664645][T30139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.678456][T30139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.693163][T30139] batman_adv: batadv0: Interface activated: macsec1 [ 735.699117][T30148] nbd: must specify a device to reconfigure [ 735.719670][T30153] block nbd1: Unsupported socket: should be TCP or UNIX. [ 736.072241][T30174] __nla_validate_parse: 45 callbacks suppressed [ 736.072266][T30174] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6889'. [ 736.096917][T30177] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6888'. [ 736.111888][T30177] unsupported nlmsg_type 40 [ 736.600186][T30206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6897'. [ 736.778188][T30217] netlink: 'syz.0.6899': attribute type 16 has an invalid length. [ 736.791699][T30217] netlink: 'syz.0.6899': attribute type 17 has an invalid length. [ 736.861322][T30217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 736.902086][T30220] veth1_to_bond: entered allmulticast mode [ 736.943983][T30226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6901'. [ 737.137669][T30226] bond0: (slave bond_slave_1): Releasing backup interface [ 737.162983][T30233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6904'. [ 737.205431][T30226] veth1_to_bond (unregistering): left allmulticast mode [ 737.547083][T30260] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 737.599168][T30262] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6913'. [ 738.277785][T30284] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20003 [ 739.698817][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 740.355973][ T8955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.365708][ T8955] bond_slave_0: left promiscuous mode [ 740.371658][ T8955] bond_slave_0: left allmulticast mode [ 740.378848][ T8955] bond0 (unregistering): Released all slaves [ 740.395472][ T8955] bond1 (unregistering): Released all slaves [ 740.409924][ T8955] bond2 (unregistering): Released all slaves [ 740.426589][ T8955] bond3 (unregistering): Released all slaves [ 740.596531][ T8955] bond4 (unregistering): (slave veth7): Releasing active interface [ 740.604838][ T8955] veth0_to_bond: entered promiscuous mode [ 740.614035][ T8955] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 740.625918][ T8955] bond4 (unregistering): Released all slaves [ 740.641048][ T8955] bond5 (unregistering): Released all slaves [ 740.656428][ T8955] bond6 (unregistering): Released all slaves [ 740.671397][ T8955] bond7 (unregistering): Released all slaves [ 740.692368][ T8955] bond8 (unregistering): Released all slaves [ 740.841611][ T8955] : left promiscuous mode [ 740.993364][ T8955] : left promiscuous mode [ 741.041570][ T8956] gretap2: left promiscuous mode [ 741.146330][ T8955] tipc: Disabling bearer [ 741.158130][ T8955] tipc: Left network mode [ 741.262880][T30324] netlink: 'syz.2.6927': attribute type 10 has an invalid length. [ 741.307509][T30324] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.314848][T30324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.376359][T30324] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 741.559081][T30335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6931'. [ 741.739853][T30341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6933'. [ 741.795210][T30341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6933'. [ 741.804918][T30341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6933'. [ 741.955563][ T8955] hsr_slave_0: left promiscuous mode [ 741.981069][ T8955] hsr_slave_1: left promiscuous mode [ 741.996899][ T8955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.024049][ T8955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.051806][T30361] sctp: [Deprecated]: syz.0.6939 (pid 30361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 742.051806][T30361] Use struct sctp_sack_info instead [ 742.074287][ T8955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.097183][ T8955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.735184][ T8955] vlan0: left allmulticast mode [ 742.740134][ T8955] veth0_vlan: left allmulticast mode [ 742.745801][ T8955] vlan0: left promiscuous mode [ 742.752136][ T8955] veth1_macvtap: left promiscuous mode [ 742.757914][ T8955] veth1_vlan: left promiscuous mode [ 742.763582][ T8955] veth0_vlan: left promiscuous mode [ 743.034240][ T8955] pimreg (unregistering): left allmulticast mode [ 743.849494][T30358] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 743.859543][T30358] bond3 (unregistering): Released all slaves [ 743.884547][T30375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6944'. [ 743.896637][T30375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6944'. [ 743.934346][T30375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6944'. [ 743.946491][T30375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6944'. [ 744.306944][T30403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6950'. [ 744.409636][T30406] netlink: 'syz.2.6953': attribute type 1 has an invalid length. [ 744.685665][ T8955] IPVS: stop unused estimator thread 0... [ 744.921733][T30423] syzkaller0: entered promiscuous mode [ 744.927476][T30423] syzkaller0: entered allmulticast mode [ 747.607990][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 747.869992][T30464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6966'. [ 747.940042][T30470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6967'. [ 748.044295][T30476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6969'. [ 748.305874][T30486] bond3: option all_slaves_active: invalid value (222) [ 748.332538][T30486] bond3 (unregistering): Released all slaves [ 748.423663][T30501] bond2: entered allmulticast mode [ 748.429619][T30501] 8021q: adding VLAN 0 to HW filter on device bond2 [ 748.439035][T30501] bridge0: port 2(bond2) entered blocking state [ 748.455444][T30501] bridge0: port 2(bond2) entered disabled state [ 748.465809][T30501] bond2: entered promiscuous mode [ 748.472326][T30501] bridge0: port 2(bond2) entered blocking state [ 748.478830][T30501] bridge0: port 2(bond2) entered forwarding state [ 748.533852][T30500] erspan0: entered promiscuous mode [ 748.543268][T30500] erspan0: entered allmulticast mode [ 748.849449][ T34] bridge0: port 2(bond2) entered disabled state [ 748.978010][T30531] netlink: 'syz.4.6983': attribute type 11 has an invalid length. [ 749.310686][T30560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6988'. [ 749.332190][T30560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.464544][T30560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.498714][T30566] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6992'. [ 749.884286][T30573] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6994'. [ 749.896650][T30574] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 749.916358][T30575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6994'. [ 750.002246][T30582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6997'. [ 750.128829][T30586] bond0: entered promiscuous mode [ 750.151510][T30586] !: entered promiscuous mode [ 750.163395][T30586] bond_slave_1: entered promiscuous mode [ 750.193396][T30586] batadv0: entered promiscuous mode [ 750.218259][T30586] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 750.301916][T30593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6996'. [ 750.369040][T30597] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.415226][T30602] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 750.423491][T30602] openvswitch: netlink: Duplicate key (type 1). [ 750.700358][T30616] netlink: 'syz.4.7006': attribute type 10 has an invalid length. [ 750.849089][T30616] bridge_slave_1: left allmulticast mode [ 750.861843][T30616] bridge_slave_1: left promiscuous mode [ 750.868070][T30616] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.894597][T30616] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 750.928366][T30620] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 751.188155][T30639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7013'. [ 751.248234][T30642] syzkaller1: entered promiscuous mode [ 751.259719][T30642] syzkaller1: entered allmulticast mode [ 751.407767][T30653] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 751.901984][T30681] bond3 (unregistering): Released all slaves [ 753.691028][ T5847] Bluetooth: hci0: command tx timeout [ 753.877290][ T8952] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.903582][ T8952] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 753.932754][ T8952] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.957971][ T8952] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 753.979760][T30756] __nla_validate_parse: 4 callbacks suppressed [ 753.979784][T30756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7038'. [ 753.995803][ T8952] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.995843][ T8952] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 753.996615][ T8952] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.996647][ T8952] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 754.061174][T30760] netlink: 'syz.1.7039': attribute type 9 has an invalid length. [ 754.332829][T30774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7040'. [ 754.370074][T30778] tipc: Enabled bearer , priority 10 [ 754.379757][T30772] netlink: 'syz.1.7042': attribute type 1 has an invalid length. [ 754.430070][T30772] 8021q: adding VLAN 0 to HW filter on device bond1 [ 754.430270][T30777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7042'. [ 754.504055][T30783] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7044'. [ 754.655459][T30792] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7046'. [ 754.960512][T30817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7051'. [ 755.055653][T30817] syzkaller1: entered promiscuous mode [ 755.080608][T30817] syzkaller1: entered allmulticast mode [ 755.138513][T30827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7055'. [ 755.222408][T30834] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7057'. [ 755.246141][T30834] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7057'. [ 755.491144][T30743] tipc: Node number set to 3505520874 [ 755.497455][T30844] bond0: option ad_select: unable to set because the bond device is up [ 755.879916][T30873] netlink: 'syz.0.7072': attribute type 1 has an invalid length. [ 755.942211][T30873] 8021q: adding VLAN 0 to HW filter on device bond3 [ 755.968742][T30873] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 755.981977][T30873] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7072'. [ 756.740665][T30932] netlink: 'syz.1.7091': attribute type 4 has an invalid length. [ 756.842741][T30940] netlink: 'syz.3.7095': attribute type 11 has an invalid length. [ 756.850775][T30940] netlink: 'syz.3.7095': attribute type 11 has an invalid length. [ 757.290268][T30970] gretap0: entered promiscuous mode [ 757.442137][T30979] syz_tun: entered allmulticast mode [ 757.525190][T30978] syz_tun: left allmulticast mode [ 758.223770][T31029] nbd: socks must be embedded in a SOCK_ITEM attr [ 758.366170][T31039] bridge_slave_0: default FDB implementation only supports local addresses [ 758.700396][T31059] veth0: entered promiscuous mode [ 759.472033][T31081] netlink: 'syz.4.7139': attribute type 8 has an invalid length. [ 759.746783][T31095] bridge0: port 3(batadv1) entered blocking state [ 759.794887][T31095] bridge0: port 3(batadv1) entered disabled state [ 759.802044][T31095] batadv1: entered allmulticast mode [ 759.809813][T31095] batadv1: entered promiscuous mode [ 759.853153][T31096] bridge0: port 4(batadv2) entered blocking state [ 759.882619][T31096] bridge0: port 4(batadv2) entered disabled state [ 759.909239][T31096] batadv2: entered allmulticast mode [ 759.917833][T31096] batadv2: entered promiscuous mode [ 759.927754][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 759.935806][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 759.947161][T31109] Cannot find add_set index 1 as target [ 759.998158][T31109] __nla_validate_parse: 15 callbacks suppressed [ 759.998179][T31109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7146'. [ 760.016180][T31110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7146'. [ 760.159075][T31117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7149'. [ 760.241811][ T8956] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 760.252052][ T8956] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 760.288656][T31130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7151'. [ 760.324953][T31117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7149'. [ 760.349141][ T8952] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 760.359267][ T8952] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 760.385416][T31124] netlink: 'syz.3.7149': attribute type 10 has an invalid length. [ 760.476167][T31124] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 760.992265][T31165] netlink: 'syz.3.7159': attribute type 15 has an invalid length. [ 761.016541][T31165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7159'. [ 761.047722][T31167] xt_TCPMSS: Only works on TCP SYN packets [ 761.089704][ T8954] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 761.098961][ T8954] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 761.120367][T31165] netlink: 'syz.3.7159': attribute type 15 has an invalid length. [ 761.134118][T31165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7159'. [ 761.231551][ T8947] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 761.373461][T31173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7162'. [ 761.398411][T31173] syzkaller1: entered promiscuous mode [ 761.404743][T31173] syzkaller1: entered allmulticast mode [ 761.635588][T31179] netlink: 'syz.1.7163': attribute type 3 has an invalid length. [ 761.837308][T31184] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 761.940443][T31194] netlink: 'syz.2.7170': attribute type 142 has an invalid length. [ 761.968864][T31192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7169'. [ 762.030359][T31200] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 762.046391][T28498] IPVS: starting estimator thread 0... [ 762.109255][T31210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7174'. [ 762.151211][T31208] IPVS: using max 25 ests per chain, 60000 per kthread [ 762.186306][T31217] netlink: 'syz.4.7175': attribute type 11 has an invalid length. [ 762.298320][T31222] 0: reclassify loop, rule prio 0, protocol 800 [ 762.323593][ T95] block nbd2: Possible stuck request ffff888024fd5080: control (read@0,1024B). Runtime 600 seconds [ 762.334718][ T95] block nbd2: Possible stuck request ffff888024fd5240: control (read@1024,1024B). Runtime 600 seconds [ 762.346216][ T95] block nbd2: Possible stuck request ffff888024fd5400: control (read@2048,1024B). Runtime 600 seconds [ 762.357515][ T95] block nbd2: Possible stuck request ffff888024fd55c0: control (read@3072,1024B). Runtime 600 seconds [ 762.734305][T31238] x_tables: duplicate underflow at hook 1 [ 762.828067][T31242] netlink: 'syz.4.7187': attribute type 1 has an invalid length. [ 762.950337][T31252] SET target dimension over the limit! [ 762.999949][T31259] IPv6: Can't replace route, no match found [ 763.089847][T31242] bond3: entered promiscuous mode [ 763.135876][T31242] 8021q: adding VLAN 0 to HW filter on device bond3 [ 763.345090][T31272] team0: Device ip6gre1 is of different type [ 765.042420][T31111] Bluetooth: hci2: command 0x0406 tx timeout [ 766.674534][T31320] gretap0: left promiscuous mode [ 766.702478][T31320] bond3: left promiscuous mode [ 766.726380][T31308] syzkaller0: entered promiscuous mode [ 766.837813][T31328] netlink: 'syz.0.7202': attribute type 21 has an invalid length. [ 770.281748][T31405] tap0: tun_chr_ioctl cmd 1074025677 [ 770.287374][T31405] tap0: linktype set to 65534 [ 770.378987][T31408] __nla_validate_parse: 11 callbacks suppressed [ 770.379010][T31408] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7222'. [ 770.557619][T31424] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7226'. [ 770.590394][T31424] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7226'. [ 770.710051][T31430] netlink: 172 bytes leftover after parsing attributes in process `syz.2.7230'. [ 770.710787][T31431] netlink: 172 bytes leftover after parsing attributes in process `syz.2.7230'. [ 770.730185][T31434] netlink: 'syz.4.7229': attribute type 12 has an invalid length. [ 770.769280][T31434] bond4: option primary_reselect: invalid value (255) [ 770.780674][T31434] bond4 (unregistering): Released all slaves [ 770.904347][T31443] ipt_REJECT: TCP_RESET invalid for non-tcp [ 770.916256][T31443] netlink: 11 bytes leftover after parsing attributes in process `syz.0.7233'. [ 770.934039][T31443] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 771.023464][T31448] syzkaller0: entered promiscuous mode [ 771.044799][T31448] syzkaller0: entered allmulticast mode [ 771.325366][T31462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7239'. [ 771.601979][T31485] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7247'. [ 771.640536][T31488] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 771.673930][T31491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7248'. [ 771.679964][T31485] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 771.714300][T31485] bond6 (unregistering): Released all slaves [ 771.816103][T31494] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7249'. [ 772.100139][T31504] block nbd0: reconnected socket [ 772.110794][ T5847] block nbd0: Receive control failed (result -32) [ 772.118498][T31513] syzkaller1: entered promiscuous mode [ 772.131445][T31513] syzkaller1: entered allmulticast mode [ 772.266536][T31528] xt_connbytes: Forcing CT accounting to be enabled [ 772.294289][T31524] IPv6: NLM_F_CREATE should be specified when creating new route [ 772.338335][T31532] netlink: 'syz.1.7261': attribute type 1 has an invalid length. [ 772.423297][T31532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 772.464334][T31537] 8021q: adding VLAN 0 to HW filter on device bond2 [ 772.472602][T31537] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 772.486834][T31537] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 772.507169][T31545] netlink: 'syz.4.7264': attribute type 24 has an invalid length. [ 772.539580][T31532] veth9: entered promiscuous mode [ 772.555135][T31546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 773.383344][T31567] x_tables: duplicate underflow at hook 3 [ 775.274842][T31619] chnl_net:caif_netlink_parms(): no params data found [ 775.467200][T31632] netlink: 'syz.4.7291': attribute type 2 has an invalid length. [ 775.481625][T31632] __nla_validate_parse: 6 callbacks suppressed [ 775.481649][T31632] netlink: 119 bytes leftover after parsing attributes in process `syz.4.7291'. [ 775.525019][T31633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7292'. [ 775.553553][T31633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7292'. [ 775.557796][T31634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.622551][ T8942] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9a [ 776.064310][T31671] netlink: 'syz.0.7301': attribute type 6 has an invalid length. [ 776.334330][T31674] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7302'. [ 776.537504][T31682] ip6t_rpfilter: unknown options [ 776.585077][T31685] ip6t_rpfilter: unknown options [ 776.935385][T31705] Cannot find del_set index 49151 as target [ 777.012472][T31708] xt_ipcomp: unknown flags 1D [ 777.016752][T31711] vlan3: entered allmulticast mode [ 777.070121][T31715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7315'. [ 777.130168][T31715] 8021q: adding VLAN 0 to HW filter on device bond4 [ 777.166234][T31725] netlink: 'syz.3.7318': attribute type 1 has an invalid length. [ 777.269927][T31732] netlink: 'syz.3.7319': attribute type 9 has an invalid length. [ 777.278907][T31732] netlink: 'syz.3.7319': attribute type 11 has an invalid length. [ 777.287531][T31732] netlink: 'syz.3.7319': attribute type 12 has an invalid length. [ 777.298446][T31732] netlink: 210060 bytes leftover after parsing attributes in process `syz.3.7319'. [ 777.316463][T31732] openvswitch: netlink: Message has 4 unknown bytes. [ 777.368193][T31736] tipc: Enabled bearer , priority 0 [ 777.385808][T31736] syzkaller0: entered promiscuous mode [ 777.393258][T31736] syzkaller0: entered allmulticast mode [ 777.412203][T31736] tipc: Resetting bearer [ 777.420616][T31734] tipc: Resetting bearer [ 777.453849][T31734] tipc: Disabling bearer [ 777.727253][T31754] x_tables: duplicate underflow at hook 2 [ 778.136460][T31776] netlink: 'syz.0.7332': attribute type 3 has an invalid length. [ 778.156608][T31779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7333'. [ 778.360205][T31799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.473020][T31799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7337'. [ 778.487886][T31799] Unsupported xt match [ 778.487909][T31799] unable to load match [ 778.505597][T31799] syzkaller1: entered promiscuous mode [ 778.513545][T31799] syzkaller1: entered allmulticast mode [ 778.524327][T31801] hsr0 speed is unknown, defaulting to 1000 [ 778.577945][T31805] netlink: 'syz.4.7339': attribute type 9 has an invalid length. [ 778.586840][T31805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7339'. [ 778.807632][T31812] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7341'. [ 792.402333][ T95] block nbd2: Possible stuck request ffff888024fd5080: control (read@0,1024B). Runtime 630 seconds [ 792.413369][ T95] block nbd2: Possible stuck request ffff888024fd5240: control (read@1024,1024B). Runtime 630 seconds [ 792.424757][ T95] block nbd2: Possible stuck request ffff888024fd5400: control (read@2048,1024B). Runtime 630 seconds [ 792.436240][ T95] block nbd2: Possible stuck request ffff888024fd55c0: control (read@3072,1024B). Runtime 630 seconds [ 814.176079][ T8952] team0: left allmulticast mode [ 814.181930][ T8952] C: left allmulticast mode [ 814.186475][ T8952] team_slave_1: left allmulticast mode [ 814.192266][ T8952] hsr0: left allmulticast mode [ 814.197175][ T8952] hsr_slave_0: left allmulticast mode [ 814.203447][ T8952] hsr_slave_1: left allmulticast mode [ 814.209068][ T8952] team0: left promiscuous mode [ 814.214567][ T8952] C: left promiscuous mode [ 814.219222][ T8952] team_slave_1: left promiscuous mode [ 814.224901][ T8952] hsr0: left promiscuous mode [ 814.229888][ T8952] bridge0: port 3(team0) entered disabled state [ 814.239905][ T8952] bridge_slave_1: left allmulticast mode [ 814.246261][ T8952] bridge_slave_1: left promiscuous mode [ 814.253677][ T8952] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.263537][ T8952] bridge_slave_0: left allmulticast mode [ 814.269214][ T8952] bridge_slave_0: left promiscuous mode [ 814.275844][ T8952] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.628612][ T8952] dvmrp8 (unregistering): left allmulticast mode [ 814.764906][ T8952] bond2 (unregistering): (slave geneve2): Releasing active interface [ 814.954524][ T8952] bond1 (unregistering): (slave bridge2): Releasing active interface [ 815.400957][ T8952] bond0 (unregistering): (slave 1!): Releasing backup interface [ 815.410652][ T8952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.421583][ T8952] bond0 (unregistering): Released all slaves [ 815.436746][ T8952] bond1 (unregistering): Released all slaves [ 815.574028][ T8952] bond2 (unregistering): Released all slaves [ 815.588361][ T8952] bond3 (unregistering): Released all slaves [ 815.603442][ T8952] bond4 (unregistering): Released all slaves [ 815.756163][ T8952] bond5 (unregistering): Released all slaves [ 815.906088][ T8952] bond6 (unregistering): Released all slaves [ 816.091378][ T8952] bond7 (unregistering): Released all slaves [ 816.255369][ T8952] bond8 (unregistering): Released all slaves [ 816.411606][ T8952] bond9 (unregistering): Released all slaves [ 816.564227][ T8952] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 816.575876][ T8952] bond10 (unregistering): Released all slaves [ 816.787300][ T8952] : left promiscuous mode [ 816.843340][ T8952] tipc: Disabling bearer [ 816.848886][ T8952] tipc: Disabling bearer [ 816.862158][ T8952] tipc: Left network mode [ 816.959891][ T8952] hsr_slave_0: left promiscuous mode [ 816.966674][ T8952] hsr_slave_1: left promiscuous mode [ 817.014181][ T8952] pimreg3 (unregistering): left allmulticast mode [ 817.117004][ T8952] vlan1 (unregistering): left allmulticast mode [ 817.124268][ T8952] veth0_vlan (unregistering): left allmulticast mode [ 817.278919][ T8952] team0 (unregistering): Port device hsr0 removed [ 817.501841][ T8952] team0 (unregistering): Port device team_slave_1 removed [ 817.559119][ T8952] team0 (unregistering): Port device C removed [ 819.800308][ T8952] IPVS: stop unused estimator thread 0... [ 822.484989][ T95] block nbd2: Possible stuck request ffff888024fd5080: control (read@0,1024B). Runtime 660 seconds [ 822.495986][ T95] block nbd2: Possible stuck request ffff888024fd5240: control (read@1024,1024B). Runtime 660 seconds [ 822.507218][ T95] block nbd2: Possible stuck request ffff888024fd5400: control (read@2048,1024B). Runtime 660 seconds [ 822.518774][ T95] block nbd2: Possible stuck request ffff888024fd55c0: control (read@3072,1024B). Runtime 660 seconds [ 824.787423][T31816] netlink: 'syz.4.7346': attribute type 2 has an invalid length. [ 824.795944][T31816] netlink: 'syz.4.7346': attribute type 8 has an invalid length. [ 824.807447][T31816] __nla_validate_parse: 1 callbacks suppressed [ 824.807470][T31816] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7346'. [ 824.856256][T31821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 824.931224][T31826] pim6reg1: entered promiscuous mode [ 824.936603][T31826] pim6reg1: entered allmulticast mode [ 824.985794][T31829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7349'. [ 825.217786][T31847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7352'. [ 825.316128][T31853] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7354'. [ 825.468583][T31860] netlink: 'syz.1.7357': attribute type 21 has an invalid length. [ 825.542584][T31865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7358'. [ 828.019926][T31883] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7362'. [ 828.097117][T31886] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 828.303287][T31896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7368'. [ 828.695634][T31922] tipc: Enabled bearer , priority 0 [ 828.703396][T31923] syzkaller0: entered promiscuous mode [ 828.708927][T31923] syzkaller0: entered allmulticast mode [ 828.767779][T31928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7381'. [ 828.808671][T31930] netlink: 'syz.0.7382': attribute type 11 has an invalid length. [ 828.817088][T31921] tipc: Resetting bearer [ 828.886411][T31921] tipc: Disabling bearer [ 828.903605][T31933] netlink: 'syz.1.7383': attribute type 21 has an invalid length. [ 828.917333][T31933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7383'. [ 828.927889][T31930] syzkaller1: entered promiscuous mode [ 828.934163][T31930] syzkaller1: entered allmulticast mode [ 828.942806][T31935] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 828.967738][T31930] mac80211_hwsim hwsim64 wlan1: entered allmulticast mode [ 829.696551][T31982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7400'. [ 829.772229][T31984] netlink: 'syz.4.7402': attribute type 3 has an invalid length. [ 830.217444][T31986] __nla_validate_parse: 2 callbacks suppressed [ 830.217465][T31986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7401'. [ 830.235139][T31986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7401'. [ 830.290274][ T8952] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.300148][ T8952] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.310080][T31986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7401'. [ 830.336372][ T8952] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.346138][ T8952] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.357647][T31986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7401'. [ 830.476098][T32020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7411'. [ 830.532282][T32021] tipc: Enabled bearer , priority 0 [ 830.547099][T32021] syzkaller0: entered promiscuous mode [ 830.553986][T32021] syzkaller0: entered allmulticast mode [ 830.579718][T32018] syzkaller1: entered promiscuous mode [ 830.583878][T32022] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7411'. [ 830.585533][T32018] syzkaller1: entered allmulticast mode [ 830.639598][T32021] tipc: Resetting bearer [ 830.700459][ T30] audit: type=1107 audit(1762418791.986:8): pid=32019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='賸5烑寱%柰U鼳伱速犽0仚l卼枯/ 6驃▕鐩' [ 830.752410][ T30] audit: type=1107 audit(1762418791.986:9): pid=32019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='賸5烑寱%柰U鼳伱速犽0仚l卼枯/ 6驃▕鐩' [ 830.858138][T32034] tipc: Resetting bearer [ 830.967369][T32034] tipc: Disabling bearer [ 830.987739][T32048] syzkaller1: entered promiscuous mode [ 831.001283][T32048] syzkaller1: entered allmulticast mode [ 831.024456][T32057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7418'. [ 831.040230][T32055] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7417'. [ 831.061488][T32055] netlink: 'syz.3.7417': attribute type 1 has an invalid length. [ 831.160370][T32064] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 831.229836][T32068] netlink: 'syz.4.7422': attribute type 10 has an invalid length. [ 831.275270][T32055] veth9: entered promiscuous mode [ 831.286707][T32055] bond6: (slave veth9): Enslaving as a backup interface with a down link [ 831.309589][T32055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7417'. [ 831.370146][ T8952] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 831.376747][T32055] 8021q: adding VLAN 0 to HW filter on device bond6 [ 831.540111][T32089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7427'. [ 831.549036][ T8942] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 831.798905][T32100] netlink: 'syz.1.7431': attribute type 143 has an invalid length. [ 832.023390][T32121] sctp: [Deprecated]: syz.4.7437 (pid 32121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 832.023390][T32121] Use struct sctp_sack_info instead [ 832.642157][T32156] gretap0: entered promiscuous mode [ 832.695624][T32156] 0{X功: renamed from gretap0 [ 832.713146][T32156] 0{X功: left promiscuous mode [ 832.718268][T32156] 0{X功: entered allmulticast mode [ 832.743638][T32156] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 832.793010][T32166] vlan1: entered allmulticast mode [ 832.798218][T32166] veth0_vlan: entered allmulticast mode [ 832.829144][T32159] syzkaller0: entered allmulticast mode [ 832.992542][T32170] veth0: entered promiscuous mode [ 833.045400][T32174] tipc: Started in network mode [ 833.050347][T32174] tipc: Node identity 967d2e58e4aa, cluster identity 4711 [ 833.102563][T32174] tipc: Enabled bearer , priority 0 [ 833.439311][T32179] tipc: Disabling bearer [ 833.679071][T32206] netlink: 'syz.0.7465': attribute type 21 has an invalid length. [ 833.775075][T32205] block nbd1: server does not support multiple connections per device. [ 833.784416][T32205] block nbd1: shutting down sockets [ 833.810770][T32218] ip6gretap0: entered promiscuous mode [ 833.948289][T32227] pim6reg1: entered promiscuous mode [ 833.954378][T32227] pim6reg1: entered allmulticast mode [ 835.087235][T32309] netlink: 'syz.3.7495': attribute type 33 has an invalid length. [ 835.434249][T32322] __nla_validate_parse: 14 callbacks suppressed [ 835.434273][T32322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7497'. [ 835.570736][T32330] syzkaller1: entered promiscuous mode [ 835.597449][T32330] syzkaller1: entered allmulticast mode [ 835.775462][T32342] netlink: 'syz.4.7502': attribute type 12 has an invalid length. [ 835.791447][T32342] netlink: 'syz.4.7502': attribute type 29 has an invalid length. [ 835.802549][T32342] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7502'. [ 835.820013][T32342] netlink: 59 bytes leftover after parsing attributes in process `syz.4.7502'. [ 835.915031][T32350] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 836.679885][T32353] Bluetooth: MGMT ver 1.23 [ 836.785701][T32364] netlink: 4448 bytes leftover after parsing attributes in process `syz.0.7510'. [ 837.144773][T32379] netlink: 'syz.3.7516': attribute type 1 has an invalid length. [ 837.457234][T32397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7521'. [ 837.485430][T32399] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7522'. [ 837.654934][T32408] netlink: 18 bytes leftover after parsing attributes in process `syz.4.7524'. [ 837.667658][T28498] IPVS: starting estimator thread 0... [ 837.700575][T32406] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7525'. [ 837.722816][T32406] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7525'. [ 837.738585][T32408] netlink: 'syz.4.7524': attribute type 63 has an invalid length. [ 837.762755][T32411] IPVS: using max 24 ests per chain, 57600 per kthread [ 837.779176][T32408] netlink: 'syz.4.7524': attribute type 63 has an invalid length. [ 838.156058][T32428] syzkaller0: entered promiscuous mode [ 838.162779][T32428] syzkaller0: entered allmulticast mode [ 838.170449][T32437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 838.456671][T32442] team0: Device wireguard0 is of different type [ 838.738894][T32457] netlink: 'syz.1.7540': attribute type 1 has an invalid length. [ 841.323256][T32441] netlink: 'syz.0.7535': attribute type 1 has an invalid length. [ 841.557395][T32466] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 841.588526][T32466] syzkaller0: entered promiscuous mode [ 841.600451][T32466] syzkaller0: entered allmulticast mode [ 844.228936][T32502] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7548'. [ 844.239182][T32500] tipc: Enabled bearer , priority 0 [ 844.248545][T32500] syzkaller0: entered promiscuous mode [ 844.272021][T32500] syzkaller0: entered allmulticast mode [ 844.284923][T32500] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 844.344092][T32505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7549'. [ 844.375252][T32500] tipc: Resetting bearer [ 844.389446][T32513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7549'. [ 844.433161][T32499] tipc: Resetting bearer [ 844.493988][T32499] tipc: Disabling bearer [ 844.530404][T32519] netlink: 'syz.1.7553': attribute type 5 has an invalid length. [ 844.688129][T32530] xt_l2tp: missing protocol rule (udp|l2tpip) [ 844.702887][T32534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7558'. [ 844.958737][T32554] netlink: 'syz.2.7565': attribute type 11 has an invalid length. [ 844.991708][T32556] sctp: [Deprecated]: syz.3.7563 (pid 32556) Use of int in maxseg socket option. [ 844.991708][T32556] Use struct sctp_assoc_value instead [ 845.391310][T32574] syzkaller0: entered promiscuous mode [ 845.396865][T32574] syzkaller0: entered allmulticast mode [ 845.477895][T32574] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 845.584330][T32581] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 845.928329][T32607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7580'. [ 845.942523][T32613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7583'. [ 845.968563][T32613] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7583'. [ 845.977426][T32614] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7582'. [ 846.042493][T32620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7582'. [ 846.134753][T32620] veth0_macvtap: left promiscuous mode [ 846.218441][T32629] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7586'. [ 846.624313][T32648] netlink: 'syz.0.7594': attribute type 1 has an invalid length. [ 846.830178][T32645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 846.851952][T32645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 846.871663][T32645] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 846.881641][T32645] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.899478][T32645] bond0 (unregistering): Released all slaves [ 847.179071][T32670] gtp0: entered promiscuous mode [ 847.185048][T32670] gtp0: entered allmulticast mode [ 847.242619][T32671] netlink: 'syz.3.7601': attribute type 9 has an invalid length. [ 847.243610][T32673] xt_l2tp: wrong L2TP version: 0 [ 847.404311][T32681] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 847.423494][T32681] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 847.442301][T32681] gretap1: entered promiscuous mode [ 847.449446][T32681] gretap1: entered allmulticast mode [ 847.467515][T32679] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 847.633298][T32696] tipc: New replicast peer: 255.255.255.255 [ 847.639848][T32696] tipc: Enabled bearer , priority 10 [ 847.766669][T32700] openvswitch: netlink: Flow key attr not present in new flow. [ 847.935131][T32709] geneve3: entered promiscuous mode [ 847.940426][T32709] geneve3: entered allmulticast mode [ 848.059199][T32723] xt_l2tp: missing protocol rule (udp|l2tpip) [ 848.739353][T32724] netlink: 'syz.3.7620': attribute type 11 has an invalid length. [ 849.116690][ T319] netlink: 'syz.0.7638': attribute type 12 has an invalid length. [ 849.446833][ T340] __nla_validate_parse: 17 callbacks suppressed [ 849.446855][ T340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7642'. [ 849.515220][ T328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7641'. [ 849.787515][ T357] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7646'. [ 850.004638][ T366] netlink: 'syz.0.7652': attribute type 2 has an invalid length. [ 850.012555][ T366] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7652'. [ 850.013636][ T372] set match dimension is over the limit! [ 850.110024][ T373] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7654'. [ 850.193483][ T377] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7655'. [ 850.317249][ T386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7658'. [ 850.453771][ T393] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7662'. [ 850.501474][ T393] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7662'. [ 850.573935][ T407] netlink: 'syz.0.7665': attribute type 5 has an invalid length. [ 850.603923][ T407] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7665'. [ 850.623192][ T407] netlink: 'syz.0.7665': attribute type 5 has an invalid length. [ 850.655081][ T405] 8021q: VLANs not supported on ip6_vti0 [ 851.220588][ T440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.542162][ T469] netlink: 'syz.2.7685': attribute type 5 has an invalid length. [ 851.552367][ T468] netlink: 'syz.4.7686': attribute type 10 has an invalid length. [ 851.579018][ T468] netlink: 'syz.4.7686': attribute type 10 has an invalid length. [ 851.936339][ T496] SET target dimension over the limit! [ 851.942394][ T487] netlink: 'syz.3.7693': attribute type 10 has an invalid length. [ 851.942437][ T487] batadv0: entered promiscuous mode [ 851.942457][ T487] batadv0: entered allmulticast mode [ 851.942856][ T487] bridge0: port 5(batadv0) entered blocking state [ 851.943024][ T487] bridge0: port 5(batadv0) entered disabled state [ 851.991655][ T487] bridge0: port 5(batadv0) entered blocking state [ 851.998323][ T487] bridge0: port 5(batadv0) entered forwarding state [ 852.058536][ T496] vlan3: entered promiscuous mode [ 852.064336][ T496] bond0: entered promiscuous mode [ 852.082637][ T496] bond_slave_0: entered promiscuous mode [ 852.091765][ T496] bond_slave_1: entered promiscuous mode [ 852.214078][ T500] tipc: Enabling of bearer rejected, failed to enable media [ 852.271423][ T8956] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 852.280756][ T8956] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 852.503299][ T529] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 852.552389][ T530] netlink: 'syz.2.7707': attribute type 1 has an invalid length. [ 852.563271][ T95] block nbd2: Possible stuck request ffff888024fd5080: control (read@0,1024B). Runtime 690 seconds [ 852.577384][ T95] block nbd2: Possible stuck request ffff888024fd5240: control (read@1024,1024B). Runtime 690 seconds [ 852.589063][ T95] block nbd2: Possible stuck request ffff888024fd5400: control (read@2048,1024B). Runtime 690 seconds [ 852.602746][ T95] block nbd2: Possible stuck request ffff888024fd55c0: control (read@3072,1024B). Runtime 690 seconds [ 852.672713][ T533] tipc: Enabled bearer , priority 0 [ 852.680570][ T532] syzkaller0: entered promiscuous mode [ 852.710344][ T532] syzkaller0: entered allmulticast mode [ 852.744608][ T533] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 852.845318][ T547] tipc: New replicast peer: 255.255.255.255 [ 852.852437][ T547] tipc: Enabled bearer , priority 10 [ 852.862767][ T531] tipc: Resetting bearer [ 852.888109][ T531] tipc: Disabling bearer [ 853.116038][ T560] syzkaller0: entered promiscuous mode [ 853.149757][ T560] syzkaller0: entered allmulticast mode [ 853.276145][ T554] "syz.3.7716" (554) uses obsolete ecb(arc4) skcipher [ 853.765376][ T600] tipc: Enabled bearer , priority 0 [ 853.890668][ T600] syzkaller0: entered promiscuous mode [ 853.941137][ T600] syzkaller0: entered allmulticast mode [ 853.955435][ T600] tipc: Resetting bearer [ 853.971098][T28498] tipc: Node number set to 1926704728 [ 854.010046][ T599] tipc: Resetting bearer [ 854.080561][ T5847] Bluetooth: hci3: link tx timeout [ 854.091417][ T5847] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 854.091716][ T618] x_tables: duplicate underflow at hook 1 [ 854.104674][ T5847] Bluetooth: hci3: link tx timeout [ 854.110499][ T5847] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 856.179415][ T5847] Bluetooth: hci3: command 0x0405 tx timeout [ 856.699002][ T599] tipc: Disabling bearer [ 856.909487][ T645] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 856.938005][ T645] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 857.424703][ T680] __nla_validate_parse: 14 callbacks suppressed [ 857.424728][ T680] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.7756'. [ 857.565491][ T685] tipc: Enabling of bearer rejected, failed to enable media [ 857.678028][ T693] netlink: 'syz.1.7760': attribute type 8 has an invalid length. [ 858.202842][ T723] tipc: Started in network mode [ 858.207803][ T723] tipc: Node identity ac14140f, cluster identity 4711 [ 858.249107][ T723] tipc: New replicast peer: 255.255.255.255 [ 858.282537][ T723] tipc: Enabled bearer , priority 10 [ 858.378105][ T734] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7769'. [ 858.456345][ T739] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7771'. [ 858.488291][ T741] bond4: option miimon: invalid value (18446744073709551585) [ 858.496548][ T741] bond4: option miimon: allowed values 0 - 2147483647 [ 858.506237][ T741] bond4 (unregistering): Released all slaves [ 858.544218][ T748] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 858.548324][ T734] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7769'. [ 858.680627][ T757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7774'. [ 858.684949][ T734] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7769'. [ 858.804346][ T734] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7769'. [ 858.920276][ T734] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7769'. [ 859.013383][ T734] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7769'. [ 859.029893][ T776] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7779'. [ 859.356855][ T786] hsr0 speed is unknown, defaulting to 1000 [ 859.376455][ T794] netlink: 'syz.0.7785': attribute type 4 has an invalid length. [ 859.411890][T14822] tipc: Node number set to 2886997007 [ 861.153396][ T888] netlink: 'syz.3.7813': attribute type 1 has an invalid length. [ 862.284520][ T937] IPVS: length: 239 != 24 [ 862.289854][ T939] netlink: 'syz.0.7826': attribute type 1 has an invalid length. [ 862.298506][ T939] netlink: 'syz.0.7826': attribute type 2 has an invalid length. [ 862.732172][ T952] netlink: 'syz.4.7827': attribute type 23 has an invalid length. [ 862.769534][ T952] netlink: 'syz.4.7827': attribute type 32 has an invalid length. [ 863.766726][ T983] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20000 [ 863.795523][ T983] sctp: [Deprecated]: syz.4.7831 (pid 983) Use of int in max_burst socket option. [ 863.795523][ T983] Use struct sctp_assoc_value instead [ 865.277691][ T911] hsr0 speed is unknown, defaulting to 1000 [ 865.374750][ T988] __nla_validate_parse: 6 callbacks suppressed [ 865.374781][ T988] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7832'. [ 865.474037][ T996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7834'. [ 865.746796][ T1017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7839'. [ 866.144331][ T1028] gre1: entered promiscuous mode [ 866.149532][ T1028] gre1: entered allmulticast mode [ 866.716212][ T1074] v: renamed from veth1_vlan (while UP) [ 866.987376][ T1087] xt_cluster: node mask cannot exceed total number of nodes [ 867.605429][ T1121] syzkaller0: entered promiscuous mode [ 867.615237][ T1121] syzkaller0: entered allmulticast mode [ 867.625453][ T1120] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7867'. [ 867.635401][ T1119] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7867'. [ 867.646170][ T1118] tipc: Enabled bearer , priority 0 [ 867.752607][ T1125] tipc: Resetting bearer [ 867.842064][ T1125] tipc: Disabling bearer [ 868.239118][ T1166] netlink: 'syz.3.7881': attribute type 1 has an invalid length. [ 868.340285][ T1166] 8021q: adding VLAN 0 to HW filter on device bond8 [ 868.357226][ T1168] vlan0: entered promiscuous mode [ 868.374122][ T1168] bond8: entered promiscuous mode [ 868.379603][ T1168] vlan0: entered allmulticast mode [ 868.385284][ T1168] bond8: entered allmulticast mode [ 868.404282][ T1166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7881'. [ 868.587390][ T1178] IPv6: sit1: Disabled Multicast RS [ 868.602399][ T1178] sit1: entered allmulticast mode [ 868.676135][ T1168] bond8: (slave gretap0): making interface the new active one [ 868.683970][ T1168] gretap0: entered promiscuous mode [ 868.689624][ T1168] gretap0: entered allmulticast mode [ 868.701617][ T1168] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 868.808689][ T1194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7887'. [ 868.904945][ T1198] netlink: 'syz.3.7888': attribute type 4 has an invalid length. [ 868.953547][ T1202] netlink: 'syz.3.7888': attribute type 4 has an invalid length. [ 868.969650][ T1201] netlink: 'syz.4.7890': attribute type 6 has an invalid length. [ 868.980467][ T1201] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7890'. [ 869.015381][ T1201] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7890'. [ 869.218996][ T1221] netlink: 'syz.2.7895': attribute type 21 has an invalid length. [ 869.254693][ T1221] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7895'. [ 869.305769][ T1221] netlink: 'syz.2.7895': attribute type 21 has an invalid length. [ 869.372068][ T1221] netlink: 'syz.2.7895': attribute type 21 has an invalid length. [ 869.412521][ T1221] netlink: 'syz.2.7895': attribute type 21 has an invalid length. [ 869.431334][ T1221] netlink: 'syz.2.7895': attribute type 21 has an invalid length. [ 869.439733][ T1221] netlink: 'syz.2.7895': attribute type 21 has an invalid length. [ 869.571017][ T1228] nbd1: detected capacity change from 0 to 127 [ 869.578555][T31111] block nbd1: Receive control failed (result -32) [ 869.635106][ T1242] x_tables: duplicate underflow at hook 4 [ 870.331048][ T1279] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 870.335772][ T1280] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 870.785873][ T1306] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 870.913035][ T1310] __nla_validate_parse: 33 callbacks suppressed [ 870.913058][ T1310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7915'. [ 871.034278][ T1315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7918'. [ 871.207024][ T1324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7918'. [ 871.438151][ T1337] : entered promiscuous mode [ 872.006019][ T1367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 872.157069][ T1376] veth1_to_hsr: default FDB implementation only supports local addresses [ 872.200166][ T1380] Bluetooth: MGMT ver 1.23 [ 872.324633][ T1387] netlink: 196 bytes leftover after parsing attributes in process `syz.2.7946'. [ 872.425217][ T1388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7944'. [ 872.504474][ T1403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7948'. [ 872.844291][ T1420] vlan0: entered promiscuous mode [ 872.849670][ T1420] vlan0: entered allmulticast mode [ 872.996914][ T1432] IPVS: Error connecting to the multicast addr [ 873.267081][ T1448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7962'. [ 873.332637][ T1454] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 873.389630][ T1454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 873.504799][ T1465] validate_nla: 29 callbacks suppressed [ 873.504820][ T1465] netlink: 'syz.1.7968': attribute type 1 has an invalid length. [ 873.590426][ T1476] lo speed is unknown, defaulting to 1000 [ 873.618985][ T1476] lo speed is unknown, defaulting to 1000 [ 873.619031][ T1478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7971'. [ 873.646873][ T1476] lo speed is unknown, defaulting to 1000 [ 873.656332][ T1479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7970'. [ 873.697126][ T1478] syzkaller0: entered promiscuous mode [ 873.713722][ T1478] syzkaller0: entered allmulticast mode [ 873.942778][ T1476] infiniband syz0: set active [ 873.949643][ T1476] infiniband syz0: added lo [ 873.971869][T28498] lo speed is unknown, defaulting to 1000 [ 873.983266][ T1492] tipc: Enabled bearer , priority 0 [ 874.033145][ T1476] RDS/IB: syz0: added [ 874.040091][ T1476] smc: adding ib device syz0 with port count 1 [ 874.047135][ T1476] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 874.068188][ T1497] tipc: Disabling bearer [ 874.101862][T14822] lo speed is unknown, defaulting to 1000 [ 874.110059][ T1476] lo speed is unknown, defaulting to 1000 [ 874.269074][ T1504] netlink: 'syz.4.7978': attribute type 1 has an invalid length. [ 874.314613][ T1504] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7978'. [ 874.787610][ T1537] tipc: Enabling of bearer rejected, already enabled [ 874.801063][ T5847] Bluetooth: hci3: command 0x0405 tx timeout [ 874.885609][ T1540] pimreg: entered allmulticast mode [ 874.894462][ T1476] lo speed is unknown, defaulting to 1000 [ 874.934628][ T1540] ip6gre1: entered promiscuous mode [ 874.945617][ T1540] ip6gre1: entered allmulticast mode [ 875.327510][ T1476] lo speed is unknown, defaulting to 1000 [ 875.482565][ T1565] team_slave_0: entered promiscuous mode [ 875.488375][ T1565] team_slave_1: entered promiscuous mode [ 875.496678][ T1565] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 875.536174][ T1565] netlink: 'syz.3.7999': attribute type 1 has an invalid length. [ 875.710595][ T1571] netlink: 'syz.4.8003': attribute type 4 has an invalid length. [ 875.917885][ T1583] syzkaller0: entered promiscuous mode [ 875.923699][ T1583] syzkaller0: entered allmulticast mode [ 875.957282][ T1585] x_tables: duplicate underflow at hook 2 [ 876.007436][ T1476] lo speed is unknown, defaulting to 1000 [ 876.038690][ T1587] __nla_validate_parse: 8 callbacks suppressed [ 876.038711][ T1587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8008'. [ 876.139586][ T1583] syzkaller1: entered promiscuous mode [ 876.146808][ T1583] syzkaller1: entered allmulticast mode [ 876.507988][ T1476] lo speed is unknown, defaulting to 1000 [ 876.684322][ T1609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8013'. [ 876.686066][ T1611] netlink: 'syz.1.8014': attribute type 21 has an invalid length. [ 876.766561][ T1616] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8014'. [ 876.916219][ T1619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8015'. [ 876.968919][ T1623] netlink: 'syz.3.8016': attribute type 1 has an invalid length. [ 877.020212][ T1619] bond4 (unregistering): Released all slaves [ 877.146976][ T1476] lo speed is unknown, defaulting to 1000 [ 877.217307][ T1623] veth13: entered promiscuous mode [ 877.338674][ T1635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8020'. [ 877.715584][ T1476] lo speed is unknown, defaulting to 1000 [ 877.785194][ T1667] sctp: [Deprecated]: syz.1.8030 (pid 1667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 877.785194][ T1667] Use struct sctp_sack_info instead [ 877.834320][ T1659] team0: Device wireguard0 is of different type [ 878.117442][ T1683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8033'. [ 878.271730][ T1687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8035'. [ 878.336729][ T1476] lo speed is unknown, defaulting to 1000 [ 878.403743][ T1694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8037'. [ 878.469132][ T1697] syzkaller1: entered promiscuous mode [ 878.475239][ T1697] syzkaller1: entered allmulticast mode [ 878.559494][ T1700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8038'. [ 878.595424][ T1700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8038'. [ 878.674157][ T1700] netlink: 'syz.4.8038': attribute type 3 has an invalid length. [ 879.134849][ T1476] lo speed is unknown, defaulting to 1000 [ 879.145100][ T1722] tipc: Enabled bearer , priority 0 [ 879.154087][ T1722] syzkaller0: entered promiscuous mode [ 879.159722][ T1722] syzkaller0: entered allmulticast mode [ 879.170257][ T1722] tipc: Resetting bearer [ 879.271297][ T1721] tipc: Resetting bearer [ 879.354447][ T1721] tipc: Disabling bearer [ 879.992857][ T1747] vxcan4: entered allmulticast mode [ 880.020382][ T1749] vlan3: entered allmulticast mode [ 880.032906][ T1749] hsr0: entered allmulticast mode [ 880.039083][ T1749] hsr_slave_0: entered allmulticast mode [ 880.045370][ T1749] hsr_slave_1: entered allmulticast mode [ 880.310231][ T1764] netlink: 'syz.1.8059': attribute type 10 has an invalid length. [ 880.373937][ T1770] netlink: 'syz.1.8059': attribute type 10 has an invalid length. [ 880.452891][ T1764] team0: Port device geneve0 added [ 880.608593][ T1781] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 880.638546][ T1781] bond4 (unregistering): Released all slaves [ 880.892154][ T1799] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 880.900038][ T1799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 881.003609][ T1801] bond3: Unable to set down delay as MII monitoring is disabled [ 881.023916][ T1801] bond3 (unregistering): Released all slaves [ 881.291561][ T1824] netlink: 'syz.3.8076': attribute type 1 has an invalid length. [ 881.367307][T28498] IPVS: starting estimator thread 0... [ 881.404494][ T1824] 8021q: adding VLAN 0 to HW filter on device bond9 [ 881.472192][ T1834] IPVS: using max 28 ests per chain, 67200 per kthread [ 881.486532][ T1830] bond9: (slave veth13): Enslaving as an active interface with a down link [ 881.512723][ T1832] __nla_validate_parse: 11 callbacks suppressed [ 881.512745][ T1832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8079'. [ 881.565912][ T1824] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 881.742183][ T1842] netlink: 'syz.1.8081': attribute type 13 has an invalid length. [ 881.750086][ T1842] netlink: 200 bytes leftover after parsing attributes in process `syz.1.8081'. [ 882.295708][ T1889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8094'. [ 882.383673][ T1894] xt_HMARK: spi-set and port-set can't be combined [ 882.598590][ T1900] syzkaller0: entered promiscuous mode [ 882.620047][ T1900] syzkaller0: entered allmulticast mode [ 882.645105][ T95] block nbd2: Possible stuck request ffff888024fd5080: control (read@0,1024B). Runtime 720 seconds [ 882.656700][ T95] block nbd2: Possible stuck request ffff888024fd5240: control (read@1024,1024B). Runtime 720 seconds [ 882.668367][ T95] block nbd2: Possible stuck request ffff888024fd5400: control (read@2048,1024B). Runtime 720 seconds [ 882.679965][ T95] block nbd2: Possible stuck request ffff888024fd55c0: control (read@3072,1024B). Runtime 720 seconds [ 882.879699][ T1910] netlink: 120 bytes leftover after parsing attributes in process `syz.2.8101'. [ 883.107280][ T1925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8107'. [ 883.551664][ T1957] netlink: 'syz.1.8112': attribute type 29 has an invalid length. [ 884.154024][ T1965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8115'. [ 884.267884][ T1968] pimreg: entered allmulticast mode [ 884.305572][ T1971] syzkaller0: entered promiscuous mode [ 884.322942][ T1971] syzkaller0: entered allmulticast mode [ 884.443475][ T1976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8119'. [ 884.458842][ T1974] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8118'. [ 884.486157][ T1980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8121'. [ 884.576323][ T1976] hsr_slave_1 (unregistering): left promiscuous mode [ 884.596332][ T1974] 8021q: VLANs not supported on ip6gre0 [ 884.766267][ T1997] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 884.768172][ T1999] tipc: Enabling of bearer rejected, failed to enable media [ 884.870763][ T2002] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8127'. [ 885.112657][ T2014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 885.270645][ T2021] syzkaller0: entered promiscuous mode [ 885.276785][ T2021] syzkaller0: entered allmulticast mode [ 885.537996][ T2039] netlink: 'syz.3.8139': attribute type 39 has an invalid length. [ 885.755058][ T2049] veth0_to_bridge: entered promiscuous mode [ 885.942211][ T2047] veth0_to_bridge: left promiscuous mode [ 886.365935][ T2068] syzkaller0: entered promiscuous mode [ 886.374068][ T2068] syzkaller0: entered allmulticast mode [ 886.386468][ T2068] FAULT_INJECTION: forcing a failure. [ 886.386468][ T2068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.420485][ T2075] netlink: 'syz.4.8151': attribute type 8 has an invalid length. [ 886.421145][ T2068] CPU: 1 UID: 0 PID: 2068 Comm: syz.2.8149 Not tainted syzkaller #0 PREEMPT(full) [ 886.421183][ T2068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 886.421200][ T2068] Call Trace: [ 886.421211][ T2068] [ 886.421224][ T2068] dump_stack_lvl+0x189/0x250 [ 886.421266][ T2068] ? __pfx____ratelimit+0x10/0x10 [ 886.421307][ T2068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 886.421342][ T2068] ? __pfx__printk+0x10/0x10 [ 886.421369][ T2068] ? __might_fault+0xb0/0x130 [ 886.421418][ T2068] should_fail_ex+0x414/0x560 [ 886.421463][ T2068] _copy_from_user+0x2d/0xb0 [ 886.421499][ T2068] ___sys_sendmsg+0x158/0x2a0 [ 886.421529][ T2068] ? __pfx____sys_sendmsg+0x10/0x10 [ 886.421603][ T2068] ? __fget_files+0x2a/0x420 [ 886.421626][ T2068] ? __fget_files+0x3a0/0x420 [ 886.421673][ T2068] __x64_sys_sendmsg+0x19b/0x260 [ 886.421703][ T2068] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 886.421748][ T2068] ? __pfx_ksys_write+0x10/0x10 [ 886.421788][ T2068] ? do_syscall_64+0xbe/0xfa0 [ 886.421829][ T2068] do_syscall_64+0xfa/0xfa0 [ 886.421865][ T2068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.421891][ T2068] ? asm_common_interrupt+0x26/0x40 [ 886.421914][ T2068] ? clear_bhb_loop+0x60/0xb0 [ 886.421943][ T2068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.421968][ T2068] RIP: 0033:0x7f8c3f78f6c9 [ 886.421993][ T2068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 886.422014][ T2068] RSP: 002b:00007f8c406bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.422042][ T2068] RAX: ffffffffffffffda RBX: 00007f8c3f9e5fa0 RCX: 00007f8c3f78f6c9 [ 886.422063][ T2068] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 886.422079][ T2068] RBP: 00007f8c406bc090 R08: 0000000000000000 R09: 0000000000000000 [ 886.422096][ T2068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.422112][ T2068] R13: 00007f8c3f9e6038 R14: 00007f8c3f9e5fa0 R15: 00007fff16034988 [ 886.422154][ T2068] [ 886.593259][ T2080] __nla_validate_parse: 4 callbacks suppressed [ 886.593286][ T2080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8150'. [ 887.075146][ T2101] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 887.106043][ T2105] : entered promiscuous mode [ 887.160784][ T2105] tunl0: entered promiscuous mode [ 887.208832][ T2105] gre0: entered promiscuous mode [ 887.274215][ T2105] 0{X功: entered promiscuous mode [ 887.279608][ T2105] 0{X功: left allmulticast mode [ 887.305894][ T2120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8160'. [ 887.321547][ T2105] erspan0: left allmulticast mode [ 887.328401][ T2105] ip_vti0: entered promiscuous mode [ 887.527514][ T2136] netlink: 'syz.0.8163': attribute type 1 has an invalid length. [ 887.527720][ T2135] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8165'. [ 887.546658][ T2134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8163'. [ 887.683359][ T2142] syzkaller0: entered promiscuous mode [ 887.689641][ T2142] syzkaller0: entered allmulticast mode [ 887.698248][ T2142] FAULT_INJECTION: forcing a failure. [ 887.698248][ T2142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 887.711859][ T2142] CPU: 1 UID: 0 PID: 2142 Comm: syz.1.8168 Not tainted syzkaller #0 PREEMPT(full) [ 887.711891][ T2142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 887.711906][ T2142] Call Trace: [ 887.711916][ T2142] [ 887.711926][ T2142] dump_stack_lvl+0x189/0x250 [ 887.711962][ T2142] ? __pfx____ratelimit+0x10/0x10 [ 887.711993][ T2142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 887.712023][ T2142] ? __pfx__printk+0x10/0x10 [ 887.712062][ T2142] should_fail_ex+0x414/0x560 [ 887.712102][ T2142] _copy_from_user+0x2d/0xb0 [ 887.712132][ T2142] __copy_msghdr+0x3c5/0x5b0 [ 887.712161][ T2142] ___sys_sendmsg+0x1a5/0x2a0 [ 887.712188][ T2142] ? __pfx____sys_sendmsg+0x10/0x10 [ 887.712249][ T2142] ? __fget_files+0x2a/0x420 [ 887.712270][ T2142] ? __fget_files+0x3a0/0x420 [ 887.712304][ T2142] __x64_sys_sendmsg+0x19b/0x260 [ 887.712331][ T2142] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 887.712366][ T2142] ? __pfx_ksys_write+0x10/0x10 [ 887.712403][ T2142] ? do_syscall_64+0xbe/0xfa0 [ 887.712438][ T2142] do_syscall_64+0xfa/0xfa0 [ 887.712467][ T2142] ? lockdep_hardirqs_on+0x9c/0x150 [ 887.712498][ T2142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.712520][ T2142] ? clear_bhb_loop+0x60/0xb0 [ 887.712548][ T2142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.712579][ T2142] RIP: 0033:0x7f11d7b8f6c9 [ 887.712600][ T2142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.712620][ T2142] RSP: 002b:00007f11d8a91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 887.712644][ T2142] RAX: ffffffffffffffda RBX: 00007f11d7de5fa0 RCX: 00007f11d7b8f6c9 [ 887.712661][ T2142] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 887.712676][ T2142] RBP: 00007f11d8a91090 R08: 0000000000000000 R09: 0000000000000000 [ 887.712690][ T2142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.712704][ T2142] R13: 00007f11d7de6038 R14: 00007f11d7de5fa0 R15: 00007fffec0f53c8 [ 887.712742][ T2142] [ 888.084162][ T2144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8167'. [ 888.367058][ T2157] syzkaller0: entered promiscuous mode [ 888.372816][ T2157] syzkaller0: entered allmulticast mode [ 888.450209][ T2157] tipc: Enabled bearer , priority 0 [ 888.476895][ T2155] tipc: Resetting bearer [ 888.547221][ T2185] netlink: 'syz.2.8174': attribute type 1 has an invalid length. [ 888.592435][ T2155] tipc: Disabling bearer [ 888.617500][ T2188] netlink: 'syz.0.8175': attribute type 16 has an invalid length. [ 888.641971][ T2188] netlink: 'syz.0.8175': attribute type 17 has an invalid length. [ 888.657668][ T2181] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8174'. [ 888.768908][ T2186] bond0: (slave gretap3): making interface the new active one [ 888.778187][ T2186] bond0: (slave gretap3): Enslaving as an active interface with an up link [ 888.802721][ T2188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 888.819165][ T2191] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8177'. [ 888.832855][ T2181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.179642][ T2211] syzkaller0: entered promiscuous mode [ 889.185338][ T2211] syzkaller0: entered allmulticast mode [ 889.207649][ T2211] FAULT_INJECTION: forcing a failure. [ 889.207649][ T2211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 889.235837][ T2211] CPU: 0 UID: 0 PID: 2211 Comm: syz.4.8183 Not tainted syzkaller #0 PREEMPT(full) [ 889.235869][ T2211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 889.235884][ T2211] Call Trace: [ 889.235894][ T2211] [ 889.235904][ T2211] dump_stack_lvl+0x189/0x250 [ 889.235941][ T2211] ? __pfx____ratelimit+0x10/0x10 [ 889.235972][ T2211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 889.236003][ T2211] ? __pfx__printk+0x10/0x10 [ 889.236027][ T2211] ? __might_fault+0xb0/0x130 [ 889.236072][ T2211] should_fail_ex+0x414/0x560 [ 889.236112][ T2211] _copy_from_iter+0x1de/0x1790 [ 889.236137][ T2211] ? __lock_acquire+0xab9/0xd20 [ 889.236161][ T2211] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 889.236194][ T2211] ? __pfx__copy_from_iter+0x10/0x10 [ 889.236223][ T2211] ? dev_get_by_index+0x22/0x2e0 [ 889.236252][ T2211] ? dev_get_by_index+0x22/0x2e0 [ 889.236287][ T2211] packet_sendmsg+0x3072/0x5080 [ 889.236334][ T2211] ? match_mnt_path_str+0x770/0xb40 [ 889.236380][ T2211] ? __lock_acquire+0xab9/0xd20 [ 889.236413][ T2211] ? __pfx___might_resched+0x10/0x10 [ 889.236457][ T2211] ? __pfx_packet_sendmsg+0x10/0x10 [ 889.236488][ T2211] ? aa_sk_perm+0x81e/0x950 [ 889.236526][ T2211] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 889.236567][ T2211] ? __lock_acquire+0xab9/0xd20 [ 889.236586][ T2211] ? aa_sock_msg_perm+0xf1/0x1d0 [ 889.236622][ T2211] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 889.236644][ T2211] ? __pfx_packet_sendmsg+0x10/0x10 [ 889.236679][ T2211] __sock_sendmsg+0x21c/0x270 [ 889.236712][ T2211] ____sys_sendmsg+0x505/0x830 [ 889.236743][ T2211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 889.236778][ T2211] ? import_iovec+0x74/0xa0 [ 889.236810][ T2211] ___sys_sendmsg+0x21f/0x2a0 [ 889.236837][ T2211] ? __pfx____sys_sendmsg+0x10/0x10 [ 889.236903][ T2211] ? __fget_files+0x2a/0x420 [ 889.236923][ T2211] ? __fget_files+0x3a0/0x420 [ 889.236957][ T2211] __x64_sys_sendmsg+0x19b/0x260 [ 889.236985][ T2211] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 889.237021][ T2211] ? __pfx_ksys_write+0x10/0x10 [ 889.237057][ T2211] ? do_syscall_64+0xbe/0xfa0 [ 889.237093][ T2211] do_syscall_64+0xfa/0xfa0 [ 889.237122][ T2211] ? lockdep_hardirqs_on+0x9c/0x150 [ 889.237154][ T2211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.237176][ T2211] ? clear_bhb_loop+0x60/0xb0 [ 889.237203][ T2211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.237225][ T2211] RIP: 0033:0x7f791978f6c9 [ 889.237246][ T2211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.237266][ T2211] RSP: 002b:00007f791a55d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 889.237290][ T2211] RAX: ffffffffffffffda RBX: 00007f79199e5fa0 RCX: 00007f791978f6c9 [ 889.237306][ T2211] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 889.237320][ T2211] RBP: 00007f791a55d090 R08: 0000000000000000 R09: 0000000000000000 [ 889.237334][ T2211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.237347][ T2211] R13: 00007f79199e6038 R14: 00007f79199e5fa0 R15: 00007ffdf2b49208 [ 889.237393][ T2211] [ 889.609612][ T2219] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8184'. [ 889.727495][ T2235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8186'. [ 889.805100][ T2232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8185'. [ 890.170670][ T2250] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 890.213238][ T2258] netlink: 'syz.0.8193': attribute type 23 has an invalid length. [ 890.534289][ T2272] Cannot find add_set index 65532 as target [ 890.638421][ T2286] syzkaller0: entered promiscuous mode [ 890.670341][ T2286] syzkaller0: entered allmulticast mode [ 890.692145][ T2286] FAULT_INJECTION: forcing a failure. [ 890.692145][ T2286] name failslab, interval 1, probability 0, space 0, times 1 [ 890.805690][ T2286] CPU: 1 UID: 0 PID: 2286 Comm: syz.4.8201 Not tainted syzkaller #0 PREEMPT(full) [ 890.805722][ T2286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 890.805737][ T2286] Call Trace: [ 890.805746][ T2286] [ 890.805757][ T2286] dump_stack_lvl+0x189/0x250 [ 890.805794][ T2286] ? __pfx____ratelimit+0x10/0x10 [ 890.805825][ T2286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 890.805855][ T2286] ? __pfx__printk+0x10/0x10 [ 890.805885][ T2286] ? __pfx___might_resched+0x10/0x10 [ 890.805908][ T2286] ? fs_reclaim_acquire+0x7d/0x100 [ 890.805948][ T2286] should_fail_ex+0x414/0x560 [ 890.805992][ T2286] should_failslab+0xa8/0x100 [ 890.806026][ T2286] kmem_cache_alloc_node_noprof+0x77/0x710 [ 890.806059][ T2286] ? __alloc_skb+0x112/0x2d0 [ 890.806100][ T2286] __alloc_skb+0x112/0x2d0 [ 890.806139][ T2286] alloc_skb_with_frags+0xca/0x890 [ 890.806178][ T2286] sock_alloc_send_pskb+0x84d/0x980 [ 890.806227][ T2286] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 890.806260][ T2286] ? dev_get_by_index+0x22/0x2e0 [ 890.806288][ T2286] ? dev_get_by_index+0x22/0x2e0 [ 890.806323][ T2286] packet_sendmsg+0x33a0/0x5080 [ 890.806368][ T2286] ? match_mnt_path_str+0x770/0xb40 [ 890.806414][ T2286] ? __lock_acquire+0xab9/0xd20 [ 890.806440][ T2286] ? __pfx___might_resched+0x10/0x10 [ 890.806483][ T2286] ? __pfx_packet_sendmsg+0x10/0x10 [ 890.806514][ T2286] ? aa_sk_perm+0x81e/0x950 [ 890.806553][ T2286] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 890.806594][ T2286] ? __lock_acquire+0xab9/0xd20 [ 890.806613][ T2286] ? aa_sock_msg_perm+0xf1/0x1d0 [ 890.806648][ T2286] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 890.806670][ T2286] ? __pfx_packet_sendmsg+0x10/0x10 [ 890.806705][ T2286] __sock_sendmsg+0x21c/0x270 [ 890.806739][ T2286] ____sys_sendmsg+0x505/0x830 [ 890.806770][ T2286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 890.806804][ T2286] ? import_iovec+0x74/0xa0 [ 890.806837][ T2286] ___sys_sendmsg+0x21f/0x2a0 [ 890.806864][ T2286] ? __pfx____sys_sendmsg+0x10/0x10 [ 890.806930][ T2286] ? __fget_files+0x2a/0x420 [ 890.806951][ T2286] ? __fget_files+0x3a0/0x420 [ 890.806984][ T2286] __x64_sys_sendmsg+0x19b/0x260 [ 890.807020][ T2286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 890.807056][ T2286] ? __pfx_ksys_write+0x10/0x10 [ 890.807093][ T2286] ? do_syscall_64+0xbe/0xfa0 [ 890.807129][ T2286] do_syscall_64+0xfa/0xfa0 [ 890.807158][ T2286] ? lockdep_hardirqs_on+0x9c/0x150 [ 890.807189][ T2286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.807212][ T2286] ? clear_bhb_loop+0x60/0xb0 [ 890.807239][ T2286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.807261][ T2286] RIP: 0033:0x7f791978f6c9 [ 890.807282][ T2286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 890.807302][ T2286] RSP: 002b:00007f791a55d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 890.807325][ T2286] RAX: ffffffffffffffda RBX: 00007f79199e5fa0 RCX: 00007f791978f6c9 [ 890.807342][ T2286] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 890.807357][ T2286] RBP: 00007f791a55d090 R08: 0000000000000000 R09: 0000000000000000 [ 890.807371][ T2286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.807384][ T2286] R13: 00007f79199e6038 R14: 00007f79199e5fa0 R15: 00007ffdf2b49208 [ 890.807422][ T2286] [ 891.358233][ T2308] x_tables: duplicate underflow at hook 3 [ 891.717315][ T2335] __nla_validate_parse: 6 callbacks suppressed [ 891.717339][ T2335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8212'. [ 891.794895][ T2342] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8213'. [ 891.814593][ T2339] netlink: 'syz.4.8214': attribute type 25 has an invalid length. [ 891.833948][ T2339] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8214'. [ 891.865206][ T2347] netlink: 'syz.2.8216': attribute type 15 has an invalid length. [ 891.891306][ T2347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8216'. [ 891.897638][ T2350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8215'. [ 891.926393][ T34] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 891.945882][ T34] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 891.976616][ T34] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 891.986663][ T34] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 892.119883][ T2354] netlink: 'syz.0.8217': attribute type 4 has an invalid length. [ 892.209544][ T2365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8218'. [ 892.260499][ T2364] netlink: 'syz.1.8220': attribute type 10 has an invalid length. [ 892.366725][ T2364] team0: Port device dummy0 added [ 892.441522][ T2372] netlink: 'syz.0.8223': attribute type 21 has an invalid length. [ 892.449665][ T2372] netlink: 'syz.0.8223': attribute type 22 has an invalid length. [ 892.457859][ T2372] netlink: 'syz.0.8223': attribute type 23 has an invalid length. [ 892.468445][ T2372] netlink: 'syz.0.8223': attribute type 25 has an invalid length. [ 892.480350][ T2372] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8223'. [ 892.561513][ T2376] netlink: 816 bytes leftover after parsing attributes in process `syz.1.8225'. [ 892.658901][ T2382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8228'. [ 892.690049][ T2382] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8228'. [ 892.811399][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 892.817703][T31111] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 893.304091][ T2423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 893.320344][ T2423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 893.641641][ T2450] bond4: option resend_igmp: invalid value (32767) [ 893.648426][ T2450] bond4: option resend_igmp: allowed values 0 - 255 [ 893.659355][ T2450] bond4 (unregistering): Released all slaves [ 894.154178][ T2491] netlink: 'syz.0.8252': attribute type 1 has an invalid length. [ 894.170432][ T2498] syzkaller0: entered promiscuous mode [ 894.177026][ T2498] syzkaller0: entered allmulticast mode [ 894.185388][ T2497] tipc: Enabled bearer , priority 0 [ 894.207845][ T2497] tipc: Resetting bearer [ 894.258582][ T2499] tipc: Resetting bearer [ 894.300647][ T2499] tipc: Disabling bearer [ 895.693954][ T2618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 895.744046][ T2626] netlink: 'syz.4.8282': attribute type 2 has an invalid length. [ 895.896222][ T2639] tipc: Enabling of bearer rejected, already enabled [ 895.909926][ T2640] sctp: [Deprecated]: syz.1.8285 (pid 2640) Use of int in max_burst socket option deprecated. [ 895.909926][ T2640] Use struct sctp_assoc_value instead [ 896.205938][ T2663] syzkaller0: entered promiscuous mode [ 896.218004][ T2663] syzkaller0: entered allmulticast mode [ 896.706275][ T2695] syzkaller0: entered promiscuous mode [ 896.720063][ T2695] syzkaller0: entered allmulticast mode [ 896.752274][ T2695] FAULT_INJECTION: forcing a failure. [ 896.752274][ T2695] name failslab, interval 1, probability 0, space 0, times 0 [ 896.765577][ T2695] CPU: 0 UID: 0 PID: 2695 Comm: syz.2.8296 Not tainted syzkaller #0 PREEMPT(full) [ 896.765607][ T2695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 896.765622][ T2695] Call Trace: [ 896.765631][ T2695] [ 896.765641][ T2695] dump_stack_lvl+0x189/0x250 [ 896.765679][ T2695] ? __pfx____ratelimit+0x10/0x10 [ 896.765716][ T2695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 896.765747][ T2695] ? __pfx__printk+0x10/0x10 [ 896.765788][ T2695] should_fail_ex+0x414/0x560 [ 896.765828][ T2695] should_failslab+0xa8/0x100 [ 896.765853][ T2695] kmem_cache_alloc_noprof+0x74/0x6e0 [ 896.765885][ T2695] ? skb_ext_add+0x148/0x8f0 [ 896.765907][ T2695] ? tcf_gact_act+0x48d/0x680 [ 896.765942][ T2695] skb_ext_add+0x148/0x8f0 [ 896.765976][ T2695] tcf_classify+0xeba/0x1140 [ 896.766024][ T2695] multiq_enqueue+0xfd/0x4c0 [ 896.766059][ T2695] ? __pfx_multiq_enqueue+0x10/0x10 [ 896.766086][ T2695] ? do_raw_spin_lock+0x121/0x290 [ 896.766120][ T2695] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 896.766156][ T2695] dev_qdisc_enqueue+0x4e/0x260 [ 896.766191][ T2695] __dev_queue_xmit+0xe83/0x3b50 [ 896.766230][ T2695] ? __dev_queue_xmit+0x27b/0x3b50 [ 896.766276][ T2695] ? __pfx___dev_queue_xmit+0x10/0x10 [ 896.766310][ T2695] ? skb_partial_csum_set+0x107/0x360 [ 896.766354][ T2695] ? virtio_net_hdr_to_skb+0xdc4/0x15d0 [ 896.766394][ T2695] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 896.766424][ T2695] ? packet_xmit+0x68/0x330 [ 896.766451][ T2695] packet_sendmsg+0x3e33/0x5080 [ 896.766498][ T2695] ? match_mnt_path_str+0x770/0xb40 [ 896.766551][ T2695] ? __pfx___might_resched+0x10/0x10 [ 896.766595][ T2695] ? __pfx_packet_sendmsg+0x10/0x10 [ 896.766625][ T2695] ? aa_sk_perm+0x81e/0x950 [ 896.766662][ T2695] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 896.766702][ T2695] ? __lock_acquire+0xab9/0xd20 [ 896.766728][ T2695] ? aa_sock_msg_perm+0xf1/0x1d0 [ 896.766762][ T2695] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 896.766783][ T2695] ? __pfx_packet_sendmsg+0x10/0x10 [ 896.766817][ T2695] __sock_sendmsg+0x21c/0x270 [ 896.766850][ T2695] ____sys_sendmsg+0x505/0x830 [ 896.766879][ T2695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 896.766913][ T2695] ? import_iovec+0x74/0xa0 [ 896.766945][ T2695] ___sys_sendmsg+0x21f/0x2a0 [ 896.766971][ T2695] ? __pfx____sys_sendmsg+0x10/0x10 [ 896.767036][ T2695] ? __fget_files+0x2a/0x420 [ 896.767054][ T2695] ? __fget_files+0x3a0/0x420 [ 896.767087][ T2695] __x64_sys_sendmsg+0x19b/0x260 [ 896.767114][ T2695] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 896.767151][ T2695] ? __pfx_ksys_write+0x10/0x10 [ 896.767187][ T2695] ? do_syscall_64+0xbe/0xfa0 [ 896.767223][ T2695] do_syscall_64+0xfa/0xfa0 [ 896.767252][ T2695] ? lockdep_hardirqs_on+0x9c/0x150 [ 896.767284][ T2695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.767305][ T2695] ? clear_bhb_loop+0x60/0xb0 [ 896.767333][ T2695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.767355][ T2695] RIP: 0033:0x7f8c3f78f6c9 [ 896.767376][ T2695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.767395][ T2695] RSP: 002b:00007f8c406bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 896.767419][ T2695] RAX: ffffffffffffffda RBX: 00007f8c3f9e5fa0 RCX: 00007f8c3f78f6c9 [ 896.767435][ T2695] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 896.767449][ T2695] RBP: 00007f8c406bc090 R08: 0000000000000000 R09: 0000000000000000 [ 896.767464][ T2695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.767477][ T2695] R13: 00007f8c3f9e6038 R14: 00007f8c3f9e5fa0 R15: 00007fff16034988 [ 896.767516][ T2695] [ 896.768507][ T2695] ------------[ cut here ]------------ [ 896.964989][ T2707] __nla_validate_parse: 15 callbacks suppressed [ 896.965018][ T2707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8300'. [ 896.966968][ T2695] WARNING: CPU: 0 PID: 2695 at net/sched/cls_api.c:1869 tcf_classify+0xfd7/0x1140 [ 896.972563][ T2707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8300'. [ 896.977112][ T2695] Modules linked in: [ 897.167237][ T2695] CPU: 0 UID: 0 PID: 2695 Comm: syz.2.8296 Not tainted syzkaller #0 PREEMPT(full) [ 897.176619][ T2695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 897.186783][ T2695] RIP: 0010:tcf_classify+0xfd7/0x1140 [ 897.192274][ T2695] Code: e8 03 42 0f b6 04 30 84 c0 0f 85 41 01 00 00 66 41 89 1f eb 05 e8 e9 16 75 f8 bb ff ff ff ff e9 04 f9 ff ff e8 da 16 75 f8 90 <0f> 0b 90 49 83 c5 44 4c 89 eb 49 c1 ed 03 43 0f b6 44 35 00 84 c0 [ 897.211982][ T2695] RSP: 0018:ffffc9000b3571f0 EFLAGS: 00010293 [ 897.218102][ T2695] RAX: ffffffff894aed96 RBX: 0000000000000008 RCX: ffff888023ed1e40 [ 897.226183][ T2695] RDX: 0000000000000000 RSI: ffffffff8bbf05c0 RDI: ffffffff8bbf0580 [ 897.232940][ T2720] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8301'. [ 897.234242][ T2695] RBP: 0000000000000000 R08: 00000000ffffffff R09: 1ffffffff1c0bfd6 [ 897.234265][ T2695] R10: dffffc0000000000 R11: fffffbfff1c0bfd7 R12: ffff88805182a81c [ 897.259380][ T2695] R13: ffff88805182a780 R14: dffffc0000000000 R15: ffffc9000b3572c0 [ 897.267480][ T2695] FS: 00007f8c406bc6c0(0000) GS:ffff88812613c000(0000) knlGS:0000000000000000 [ 897.276548][ T2695] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 897.283245][ T2695] CR2: 00007f79199e7dac CR3: 0000000067aa6000 CR4: 00000000003526f0 [ 897.291313][ T2695] Call Trace: [ 897.294741][ T2695] [ 897.297740][ T2695] multiq_enqueue+0xfd/0x4c0 [ 897.302460][ T2695] ? __pfx_multiq_enqueue+0x10/0x10 [ 897.307720][ T2695] ? do_raw_spin_lock+0x121/0x290 [ 897.312965][ T2695] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 897.318416][ T2695] dev_qdisc_enqueue+0x4e/0x260 [ 897.323405][ T2695] __dev_queue_xmit+0xe83/0x3b50 [ 897.328441][ T2695] ? __dev_queue_xmit+0x27b/0x3b50 [ 897.333716][ T2695] ? __pfx___dev_queue_xmit+0x10/0x10 [ 897.339172][ T2695] ? skb_partial_csum_set+0x107/0x360 [ 897.344685][ T2695] ? virtio_net_hdr_to_skb+0xdc4/0x15d0 [ 897.350405][ T2695] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 897.356340][ T2695] ? packet_xmit+0x68/0x330 [ 897.360966][ T2695] packet_sendmsg+0x3e33/0x5080 [ 897.365901][ T2695] ? match_mnt_path_str+0x770/0xb40 [ 897.371258][ T2695] ? __pfx___might_resched+0x10/0x10 [ 897.376766][ T2695] ? __pfx_packet_sendmsg+0x10/0x10 [ 897.382084][ T2695] ? aa_sk_perm+0x81e/0x950 [ 897.386687][ T2695] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 897.393243][ T2695] ? __lock_acquire+0xab9/0xd20 [ 897.398152][ T2695] ? aa_sock_msg_perm+0xf1/0x1d0 [ 897.403663][ T2695] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 897.409016][ T2695] ? __pfx_packet_sendmsg+0x10/0x10 [ 897.414338][ T2695] __sock_sendmsg+0x21c/0x270 [ 897.419090][ T2695] ____sys_sendmsg+0x505/0x830 [ 897.423960][ T2695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 897.429316][ T2695] ? import_iovec+0x74/0xa0 [ 897.433940][ T2695] ___sys_sendmsg+0x21f/0x2a0 [ 897.438705][ T2695] ? __pfx____sys_sendmsg+0x10/0x10 [ 897.444099][ T2695] ? __fget_files+0x2a/0x420 [ 897.448746][ T2695] ? __fget_files+0x3a0/0x420 [ 897.453553][ T2695] __x64_sys_sendmsg+0x19b/0x260 [ 897.458555][ T2695] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 897.464140][ T2695] ? __pfx_ksys_write+0x10/0x10 [ 897.469074][ T2695] ? do_syscall_64+0xbe/0xfa0 [ 897.473884][ T2695] do_syscall_64+0xfa/0xfa0 [ 897.478447][ T2695] ? lockdep_hardirqs_on+0x9c/0x150 [ 897.483765][ T2695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.489885][ T2695] ? clear_bhb_loop+0x60/0xb0 [ 897.494687][ T2695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.500646][ T2695] RIP: 0033:0x7f8c3f78f6c9 [ 897.505170][ T2695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.524879][ T2695] RSP: 002b:00007f8c406bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 897.533410][ T2695] RAX: ffffffffffffffda RBX: 00007f8c3f9e5fa0 RCX: 00007f8c3f78f6c9 [ 897.541481][ T2695] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 897.549587][ T2695] RBP: 00007f8c406bc090 R08: 0000000000000000 R09: 0000000000000000 [ 897.557672][ T2695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.565740][ T2695] R13: 00007f8c3f9e6038 R14: 00007f8c3f9e5fa0 R15: 00007fff16034988 [ 897.573831][ T2695] [ 897.576890][ T2695] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 897.584198][ T2695] CPU: 0 UID: 0 PID: 2695 Comm: syz.2.8296 Not tainted syzkaller #0 PREEMPT(full) [ 897.593506][ T2695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 897.603586][ T2695] Call Trace: [ 897.606891][ T2695] [ 897.609835][ T2695] dump_stack_lvl+0x99/0x250 [ 897.614457][ T2695] ? __asan_memcpy+0x40/0x70 [ 897.619071][ T2695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 897.624292][ T2695] ? __pfx__printk+0x10/0x10 [ 897.628918][ T2695] vpanic+0x237/0x6d0 [ 897.632934][ T2695] ? __pfx_vpanic+0x10/0x10 [ 897.637564][ T2695] panic+0xb9/0xc0 [ 897.641314][ T2695] ? __pfx_panic+0x10/0x10 [ 897.645785][ T2695] __warn+0x31b/0x4b0 [ 897.649795][ T2695] ? tcf_classify+0xfd7/0x1140 [ 897.654599][ T2695] ? tcf_classify+0xfd7/0x1140 [ 897.659399][ T2695] report_bug+0x2be/0x4f0 [ 897.663770][ T2695] ? tcf_classify+0xfd7/0x1140 [ 897.668566][ T2695] ? tcf_classify+0xfd7/0x1140 [ 897.673367][ T2695] ? tcf_classify+0xfd9/0x1140 [ 897.678166][ T2695] handle_bug+0x84/0x160 [ 897.682426][ T2695] exc_invalid_op+0x1a/0x50 [ 897.686961][ T2695] asm_exc_invalid_op+0x1a/0x20 [ 897.691832][ T2695] RIP: 0010:tcf_classify+0xfd7/0x1140 [ 897.697230][ T2695] Code: e8 03 42 0f b6 04 30 84 c0 0f 85 41 01 00 00 66 41 89 1f eb 05 e8 e9 16 75 f8 bb ff ff ff ff e9 04 f9 ff ff e8 da 16 75 f8 90 <0f> 0b 90 49 83 c5 44 4c 89 eb 49 c1 ed 03 43 0f b6 44 35 00 84 c0 [ 897.716858][ T2695] RSP: 0018:ffffc9000b3571f0 EFLAGS: 00010293 [ 897.722963][ T2695] RAX: ffffffff894aed96 RBX: 0000000000000008 RCX: ffff888023ed1e40 [ 897.730958][ T2695] RDX: 0000000000000000 RSI: ffffffff8bbf05c0 RDI: ffffffff8bbf0580 [ 897.738965][ T2695] RBP: 0000000000000000 R08: 00000000ffffffff R09: 1ffffffff1c0bfd6 [ 897.746978][ T2695] R10: dffffc0000000000 R11: fffffbfff1c0bfd7 R12: ffff88805182a81c [ 897.754967][ T2695] R13: ffff88805182a780 R14: dffffc0000000000 R15: ffffc9000b3572c0 [ 897.762973][ T2695] ? tcf_classify+0xfd6/0x1140 [ 897.767791][ T2695] multiq_enqueue+0xfd/0x4c0 [ 897.772407][ T2695] ? __pfx_multiq_enqueue+0x10/0x10 [ 897.777628][ T2695] ? do_raw_spin_lock+0x121/0x290 [ 897.782688][ T2695] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 897.788094][ T2695] dev_qdisc_enqueue+0x4e/0x260 [ 897.792973][ T2695] __dev_queue_xmit+0xe83/0x3b50 [ 897.797942][ T2695] ? __dev_queue_xmit+0x27b/0x3b50 [ 897.803106][ T2695] ? __pfx___dev_queue_xmit+0x10/0x10 [ 897.808510][ T2695] ? skb_partial_csum_set+0x107/0x360 [ 897.813924][ T2695] ? virtio_net_hdr_to_skb+0xdc4/0x15d0 [ 897.819506][ T2695] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 897.825362][ T2695] ? packet_xmit+0x68/0x330 [ 897.829893][ T2695] packet_sendmsg+0x3e33/0x5080 [ 897.834807][ T2695] ? match_mnt_path_str+0x770/0xb40 [ 897.840053][ T2695] ? __pfx___might_resched+0x10/0x10 [ 897.845386][ T2695] ? __pfx_packet_sendmsg+0x10/0x10 [ 897.850617][ T2695] ? aa_sk_perm+0x81e/0x950 [ 897.855159][ T2695] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 897.861614][ T2695] ? __lock_acquire+0xab9/0xd20 [ 897.866482][ T2695] ? aa_sock_msg_perm+0xf1/0x1d0 [ 897.871458][ T2695] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 897.876759][ T2695] ? __pfx_packet_sendmsg+0x10/0x10 [ 897.881993][ T2695] __sock_sendmsg+0x21c/0x270 [ 897.886710][ T2695] ____sys_sendmsg+0x505/0x830 [ 897.891500][ T2695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 897.896877][ T2695] ? import_iovec+0x74/0xa0 [ 897.901414][ T2695] ___sys_sendmsg+0x21f/0x2a0 [ 897.906123][ T2695] ? __pfx____sys_sendmsg+0x10/0x10 [ 897.911396][ T2695] ? __fget_files+0x2a/0x420 [ 897.916003][ T2695] ? __fget_files+0x3a0/0x420 [ 897.920711][ T2695] __x64_sys_sendmsg+0x19b/0x260 [ 897.925671][ T2695] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 897.931178][ T2695] ? __pfx_ksys_write+0x10/0x10 [ 897.936074][ T2695] ? do_syscall_64+0xbe/0xfa0 [ 897.940782][ T2695] do_syscall_64+0xfa/0xfa0 [ 897.945316][ T2695] ? lockdep_hardirqs_on+0x9c/0x150 [ 897.950549][ T2695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.956643][ T2695] ? clear_bhb_loop+0x60/0xb0 [ 897.961339][ T2695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.967253][ T2695] RIP: 0033:0x7f8c3f78f6c9 [ 897.971682][ T2695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.991305][ T2695] RSP: 002b:00007f8c406bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 897.999745][ T2695] RAX: ffffffffffffffda RBX: 00007f8c3f9e5fa0 RCX: 00007f8c3f78f6c9 [ 898.007733][ T2695] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 898.015720][ T2695] RBP: 00007f8c406bc090 R08: 0000000000000000 R09: 0000000000000000 [ 898.023704][ T2695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.031690][ T2695] R13: 00007f8c3f9e6038 R14: 00007f8c3f9e5fa0 R15: 00007fff16034988 [ 898.039702][ T2695] [ 898.043130][ T2695] Kernel Offset: disabled [ 898.047468][ T2695] Rebooting in 86400 seconds..