last executing test programs: 23.265299702s ago: executing program 1 (id=3018): bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0xa) 22.907899295s ago: executing program 1 (id=3021): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x300}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r3, 0x34da2000) 21.621022637s ago: executing program 1 (id=3028): socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x15) epoll_create1(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[], 0x0) 20.461598038s ago: executing program 1 (id=3034): r0 = socket$kcm(0x10, 0x2, 0x10) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000003c0)={r5, 0x9, 0xf, 0x73f, 0x10001, 0x9a}, &(0x7f0000000400)=0x14) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in=@multicast1, 0x0, 0x0, 0x33}}, 0x28}}, 0x0) recvmmsg(r1, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 18.747916942s ago: executing program 1 (id=3041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1daa000000000000711019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 18.334974295s ago: executing program 1 (id=3043): socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x15) epoll_create1(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[], 0x0) 2.764511106s ago: executing program 4 (id=3156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_newroute={0x2c, 0x18, 0x111, 0xfffffffe, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, [@RTA_PRIORITY={0x8, 0x6, 0x1}, @RTA_EXPIRES={0x8, 0x17, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x44840) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x3}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'vxcan1\x00'}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}]}, 0x48}}, 0x801) 2.529539263s ago: executing program 0 (id=3158): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.517347963s ago: executing program 4 (id=3159): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000140)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x36}}}, 0x1e) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000400)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000c40)={0x18, 0x2, {0x1, @remote}}, 0x1e) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0700000000000000000007000000140001800600010002000000080003"], 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0xb, 0x8, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x40, 0x10, 0x3, 0x8}}) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1}]}}]}, 0x98}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x110, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x110}, 0x1, 0x0, 0x0, 0x40044}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000002d40)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(r5, &(0x7f0000000800)=[{{&(0x7f00000005c0)=@alg, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000880)=""/147, 0x93}], 0x2, &(0x7f0000000940)=""/252, 0xfc}, 0x5}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3f096d47}, 0x1c) close(r13) socket$alg(0x26, 0x5, 0x0) 2.237726703s ago: executing program 3 (id=3161): r0 = socket(0x40000000015, 0x805, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.206850488s ago: executing program 0 (id=3162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c00)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x0, @rand_addr=0x64010102}}, {{0x2, 0x0, @dev}}]}, 0x190) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, 0xfffffffffffffd94) listen(r2, 0x6) 2.016215191s ago: executing program 2 (id=3163): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r2 = gettid() socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x20, 0x0, 0x4802}, 0x0) 1.633429701s ago: executing program 3 (id=3164): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socket(0x23, 0x80805, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES8=r0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r2, 0x1, 0x7}, 0x14) 1.495172182s ago: executing program 4 (id=3165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000006a00), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000006a40)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xfffff001}}}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x800) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x1dc, r2, 0x500, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4b7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2533}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe01}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4014) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3cfaff00", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf2503000000180001801400020073797a5f74756e00000000000000000005000300000000000500050001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r3, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.467721067s ago: executing program 2 (id=3166): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r1 = gettid() r2 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r0, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x20, 0x0, 0x4802}, 0x0) 1.273327758s ago: executing program 3 (id=3167): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc0", 0x42}], 0x1}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r2, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08009e"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 1.249855993s ago: executing program 0 (id=3168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x5, 0x8}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, r3, 0x190, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xc7, 0x2a, [@dsss={0x3, 0x1, 0x3}, @challenge={0x10, 0x1, 0x86}, @tim={0x5, 0xbb, {0x9, 0xca, 0x80, "8ff658ea9c9353dc5022168a0009cc7ae2ae19fc787a2212922e5eecc9e8c1aa583990e249eae25f533d1676847afed2815aa84c81c1a306572f8d5a7a93f89cc305ad4f7c8147be4b3d6cd92c0b64454b17ad38631112b0ccc7d89ef92b5e7e311dd379b4f41ff013c623e135b2783f726fbe0109b1a6b5fea795bf299333f6b4aa363fac1679837435c0645361078917eb1551d9ce9070ac910a15494be88a3186a85dc256fec47382daeddac8403a089de98c11633258"}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0xc0}, 0xc0) 1.214684152s ago: executing program 4 (id=3169): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8d}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4008870}, 0x24000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000700)=[{0x90, 0x3a, 0x1, "2ccbd21c32edfdd409aff1cd392f202f2b8fde5624ff10f0a716c65f0fe4dc04e8f5e1eca834c20e4264dd06b7cd490da9a7f6a28edbca243dc74c89476ab1b68baebc44bbd498f3856e8d87b94d9b1e1fc8b4ae76b32fe0f65c4a8295dc69eabade18413a95016f0566145578eef845004940f9b64bd868c22a6db7"}, {0x98, 0x104, 0xfffffe05, "83d6e1162a79cc8f9560458a450eeb121e7cbda1ce53eb99bbecb7b10c6ad3dd52f0ef4234b8db0384c348be38482249dba7b4871e2e792d4169655c5f607be0373a53707d8b4280097074ae6659b4a3c105ab87f574b5872f145c6e6152ab46de56614f0c76fac9ad135924ee3a877f9ff8695190a00ff2c2649ca31158f60f6852471fab780321"}], 0x128}}], 0x1, 0x0) 1.020184826s ago: executing program 2 (id=3170): epoll_create1(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[], 0x0) 999.562458ms ago: executing program 3 (id=3171): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 920.989571ms ago: executing program 4 (id=3172): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @null]}, 0x48) getsockname$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14) (async) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x29, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0xc, 0xb, 0x2a9b0d058360986f, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x0, 0x1, 0x6, 0x2, 0x100, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4d}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf53c0000}}, @alu={0x7, 0x0, 0xb, 0x3, 0x4, 0xffffffffffffffe6, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async, rerun: 32) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000480)={0x7fffffff, 0x0}, 0x8) (rerun: 32) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@cgroup, r3, 0xf, 0x6024, 0xffffffffffffffff, @void, @void, @value=r4}, 0x20) (async) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}, 0x48) (async) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xffffff9b}], 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) (async) r8 = accept4$ax25(r1, &(0x7f0000000540)={{0x3, @null}, [@netrom, @remote, @null, @netrom, @bcast, @bcast, @default]}, &(0x7f00000005c0)=0x48, 0x80000) bind$ax25(r8, &(0x7f0000000600)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c00010000000b00000f0f0008000500", @ANYRES32=r7], 0x38}}, 0x0) (async) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000680)={'sit0\x00', {0x2, 0x0, @empty}}) 831.040684ms ago: executing program 0 (id=3173): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x819, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) 782.638236ms ago: executing program 2 (id=3174): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xc, 0x2, 0x3, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x24040000) (async) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xc, 0x2, 0x3, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x24040000) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x6}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000580)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643ccdf5feed2da500c8dafb25813612c0c3c27cb47895a3f5b563a669c40b24ee38c7e9514268567b465587724025bb595f0952f2d493fd8ed90233b507134b2d63bb597330c0d28b9c71eeb27a8bbddb84be1d2cc47211cc7913f2ebbc1804a8c1103d13518a1dfe539f3c003afd786e923aea01855baa21fa813388f78dac85d0ad04fa7073b7fa61462f191f001e921281cd3dc06a07edda14765cb703b374b2babca736370898c2a56cff14a36fa0722d9e25bffad3a10b640b9c2085", 0xdc, 0x0, &(0x7f0000000400)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10017}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e22}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r8, &(0x7f00000026c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYRESHEX=r0, @ANYRESDEC=r8], 0x38}, 0x1, 0x0, 0x0, 0x85}, 0x40800) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r10) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, r11, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x8c, r11, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcc20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3e0e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6e73}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x8050) (async) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x8c, r11, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcc20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3e0e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6e73}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x8050) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7f, 0x0, 0x1}, {0x200}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7f, 0x0, 0x1}, {0x200}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r12 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_icmp(0xa, 0x2, 0x3a) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x4}, &(0x7f0000000480)=0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r5) (async) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r5) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r14, 0x8, 0x3, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 659.908733ms ago: executing program 3 (id=3175): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r5, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x4) (async, rerun: 64) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) sendmmsg(r6, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0), 0x10) (async) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010000040000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 608.980826ms ago: executing program 4 (id=3176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="08000400", @ANYRES8], 0x38}}, 0x4000000) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="380000009233e67f00ef6371641a1ce0966d357a1c7d7dcf88f37a2c8aeec86da84a9ca00a2c08b9b691d89b520ba261fc994d950e4d9b690571cb9f11e4a59cc7ce746987f867b0ccb3b3a546539d3f7774204d1a6d5f8af951a7cdaeaf9dd4369ee16127bd922835d12d98c7953c6b767cc35624aca5b3abe3", @ANYRES64=r4, @ANYBLOB="000000000001410000001c001700000000000000006574683a73797a6b616c6c65723000"/48], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r7, 0x0, 0x0, 0x40080, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x5c, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f00000001c0)={0x9}, 0x10) sendto$inet(r10, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048890}, 0x4008000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x107001, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e40)=ANY=[@ANYBLOB="3c00000010004b0428bd7000000000007a000000", @ANYRES32=r14, @ANYBLOB="02000000120000001c0012800b00010062726964676500000c0002c796e4e968edf082e1c87d5f7a4623e880080003001b000000"], 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001dc0)=[{{&(0x7f0000000340)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001ac0)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000500)="0983e6ec1e8dc3a8976533f77202ff180f7ce7f9ec3f6f9dbedf4b1ae44f1008a84badf5e1170c8be054b5b8779a661e120079b88d3d93cb169dbe6b8a8552e678cf582550976578bb9204f567a8ee2588d74555eaaf2dac8fca20c0f9f90d2662eb0d9eb37da9d8903f8ad64ec8ae5a4207bdd3adf46f9fd4b5ded8d65b858d03e6d8e7c9beba10458aa8531b37c2d7c2d85ef2c530b3a807261edbf966d7bda2942720417043bda144e5b974344de5f81cac4144eef221b8aa3150edb4", 0xbe}, {&(0x7f00000005c0)="1cff1670343b2260027462f6ad9513709d3f02509f98eea969b975a991c1a596c85dfb57ca5d1e7f1bb2850b8868bf55f42defdd44ac6cc7b8e6e7d8c589a781b03b877630534ab0edeba8f25e9fcc44", 0x50}, {&(0x7f0000000640)="8b89d45d3298ef44c1655de87e68615c2344141b6baaf05632a0864839998bb9c0eaf9dcf80882bc6b71fb7f7d5101ab4595eb786378ce5f058a74c07f8ef71201b353a72985fe79c03c46858db4893de1806a4323679dcc5fd4829c163fab54d0186e32f65efa89b6dfce68bca38f36ac64e15922924fd0e3906d3f25ef7cf7f40e0a1d5637ef30e0cae387c81497403bd51f62254606b48467807647d489666078b6fb7bffcf883a6c", 0xaa}, {&(0x7f00000017c0)="9b7f3ba3dca7eb92d435675b40beaed36bb61b7c360270767008be27f76040dd11c3f12ea934bfcd387636d86b691505f6a277beaca6d8ad17022e8b09651f54a333951844c20bd851253ddbe27fc7e47e670d85054434963f92d8799ccf2de7bb96d4b2a9cee4efbe8efb65c6a2fe81efb5940d93089f1332d00b608859075471141887546ac02f213a4ad38a67b12b49cda7653a96da4466a430530b497e43657a15a0c55ceb0d5c7d707bc054550174ae767d501d29226e81821c6fdc2be7c3358c6bdca34e87ac1771241dfee069355b1d73402ff7f7e1fdda5535", 0xdd}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000003c0)="d0dba0239477d430972b2fea8613dcad81fcfcfa1bd06d7c1354aafa5e7f1fe9bf440a02b63d1f03963d50040c52faac97d0", 0x32}, {&(0x7f00000018c0)="9133f1385e61508cc27445e54d454fb4478f0f7c848580f5d475c619bb952e3ffe55cb13220b4b7d9338e3b2cc80588813b77889c5e83ad284a1c50b088c283db3ccc94c5969da04fb75c454be716343c88de42bb4cd29c1d74b5fcf0cbdff9e00a0d5e5af0d6c813890de3cf872f4825f97538f3d42c0c8859f4a7b7a5574c679c4d0", 0x83}, {&(0x7f0000001980)="8c60827022ada0c68b6e8d02e1fcf55515635219d3da67c322496e09ffc4e8072ed794ebfb8b1f44acce905c6448ead02cad48a0839aa7de5b93d1d9a9cc16d175ade54df009c992fa4cfcd389d1a93cc6115f654f1a49a221563abfc811e1babfe7030d4826aec74479020692e7a56c4e76", 0x72}, {&(0x7f0000001f80)="dc5f5c82002268c4dfb1c9c3f0d47d5f4ca385e1ed461c5157a7007c95746746379b5f848bd53b93337f77d9dd8841f3a4d27a0e4ebafb3f4ee54daf1e14a971b337828e0ec31cdf9b121d8e161c7b41bdf5bd500f85d2a5df26712f23c8fdc968f656c9b71dc0ae1a83652974542784b8a5b351438d55bd217504e893a1d19a928c69515bd1", 0x86}], 0xa}}, {{&(0x7f0000000700)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000001b80)="802e4544acf7da3d6bfb46025ac3d563b139bf492532f13e0deb83ce2e27a44f927dcf704a25173c5866319b9d5326aa3ef92932b21966e117b1db8b5fe7488ac5c8093d60e00f606622c495c765d917f43787e416b418506a2cc813d9f628df0d474b6acf4b41a17bd4aa601c759dfb9991b173d409", 0x76}], 0x1, &(0x7f0000001c40)=ANY=[@ANYBLOB="98000000000000000000000007000000008913eae0000001ffffffffac1414aae000000244109a400000334b000000ff000001ff441c8a81e00000010000000564010100000000daffffffff00000007440c7b316401010200000006440c42b00000000900800004071f05ac1414aaffffffff00000000e0000001e0000002e0000002ac141431070f9cac1e0001000000000a01010200001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14141064010101000000001400000000000000000000000200000003000000000000001400000000000000000000000200000005000000000000001c000000000000000000000008000000", @ANYRES32=r14, @ANYBLOB="e0000002e0000001000000001400000000000000000000000100000005000000000000001c000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB="e0000002ac1414bb000000001c000000000000000000000008000000", @ANYRES32=r11, @ANYBLOB="ac1414c40000000000000000"], 0x160}}], 0x2, 0x4) 526.468553ms ago: executing program 0 (id=3177): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x2de89ed507d52c2, 0xe, 0x0, 0xfffffffb}, 0xc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002e0f7000fbdbdf251b000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) 391.627994ms ago: executing program 3 (id=3178): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x9}], 0x1c) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000103) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0) shutdown(r2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 179.283264ms ago: executing program 0 (id=3179): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r1 = gettid() r2 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r0, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x20, 0x0, 0x4802}, 0x0) 172.7896ms ago: executing program 2 (id=3180): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc0", 0x42}], 0x1}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r2, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08009e"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 0s ago: executing program 2 (id=3181): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x84, 0x3e, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x909'}]}, @generic="44bed478436d8b5efef2f348e429199e4e077fd5daeabac4c8939b3e25d5128fd0e7fefb5a6639a11e3ac7536fcf28734049f3456412bbef88b4a42190dd64c34d858f155f5d99e91ae564ef27bda3e9236dbab281b234200fb74a79d5a5"]}, 0x84}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) kernel console output (not intermixed with test programs): dge_slave_0) entered disabled state [ 226.885459][ T8997] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.033484][ T9019] siw: device registration error -23 [ 227.256162][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.876'. [ 228.172614][ T9034] netlink: 'syz.3.879': attribute type 1 has an invalid length. [ 228.205377][ T9034] netlink: 9422 bytes leftover after parsing attributes in process `syz.3.879'. [ 228.342939][ T9040] gtp1: entered promiscuous mode [ 228.357294][ T9040] gtp1: entered allmulticast mode [ 228.437461][ T9040] validate_nla: 1 callbacks suppressed [ 228.437483][ T9040] netlink: 'syz.0.882': attribute type 1 has an invalid length. [ 228.510889][ T9050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.886'. [ 228.527203][ T9050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.886'. [ 228.544860][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'. [ 228.559067][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'. [ 228.628673][ T9056] netlink: 'syz.4.888': attribute type 10 has an invalid length. [ 228.653391][ T9056] netlink: 40 bytes leftover after parsing attributes in process `syz.4.888'. [ 228.727939][ T9056] team0: Port device geneve0 added [ 228.821173][ T9069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.891'. [ 228.925456][ T9075] team0: Device vti0 is of different type [ 228.996428][ T9084] netlink: 'syz.1.896': attribute type 18 has an invalid length. [ 229.049148][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 229.117181][ T9081] syzkaller0: entered promiscuous mode [ 229.124850][ T9081] syzkaller0: entered allmulticast mode [ 229.170877][ T9079] netlink: 'syz.3.895': attribute type 11 has an invalid length. [ 229.526878][ T9106] veth7: entered promiscuous mode [ 229.715518][ T9124] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.763376][ T9126] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 230.151101][ T9142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.916624][ T9169] netlink: 'syz.4.922': attribute type 10 has an invalid length. [ 230.942176][ T9169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.958941][ T9169] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 231.065233][ T9178] FAULT_INJECTION: forcing a failure. [ 231.065233][ T9178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.078988][ T9178] CPU: 0 UID: 0 PID: 9178 Comm: syz.3.926 Not tainted syzkaller #0 PREEMPT(full) [ 231.079006][ T9178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.079014][ T9178] Call Trace: [ 231.079018][ T9178] [ 231.079023][ T9178] dump_stack_lvl+0x189/0x250 [ 231.079043][ T9178] ? __pfx____ratelimit+0x10/0x10 [ 231.079060][ T9178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.079074][ T9178] ? __pfx__printk+0x10/0x10 [ 231.079090][ T9178] ? __might_fault+0xb0/0x130 [ 231.079113][ T9178] should_fail_ex+0x414/0x560 [ 231.079131][ T9178] _copy_from_user+0x2d/0xb0 [ 231.079146][ T9178] ___sys_sendmsg+0x158/0x2a0 [ 231.079170][ T9178] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.079230][ T9178] ? __fget_files+0x2a/0x420 [ 231.079257][ T9178] ? __fget_files+0x3a0/0x420 [ 231.079296][ T9178] __x64_sys_sendmsg+0x19b/0x260 [ 231.079320][ T9178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 231.079352][ T9178] ? __pfx_ksys_write+0x10/0x10 [ 231.079375][ T9178] ? rcu_is_watching+0x15/0xb0 [ 231.079402][ T9178] ? do_syscall_64+0xbe/0x3b0 [ 231.079435][ T9178] do_syscall_64+0xfa/0x3b0 [ 231.079460][ T9178] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.079484][ T9178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.079504][ T9178] ? clear_bhb_loop+0x60/0xb0 [ 231.079528][ T9178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.079546][ T9178] RIP: 0033:0x7f758338ebe9 [ 231.079565][ T9178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.079581][ T9178] RSP: 002b:00007f758418c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.079602][ T9178] RAX: ffffffffffffffda RBX: 00007f75835b5fa0 RCX: 00007f758338ebe9 [ 231.079616][ T9178] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 231.079629][ T9178] RBP: 00007f758418c090 R08: 0000000000000000 R09: 0000000000000000 [ 231.079640][ T9178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.079651][ T9178] R13: 00007f75835b6038 R14: 00007f75835b5fa0 R15: 00007fff5357d278 [ 231.079684][ T9178] [ 231.409889][ T9184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.625349][ T9187] __nla_validate_parse: 4 callbacks suppressed [ 231.625474][ T9187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.929'. [ 231.650108][ T9187] netlink: 'syz.1.929': attribute type 1 has an invalid length. [ 231.657979][ T9187] netlink: 108 bytes leftover after parsing attributes in process `syz.1.929'. [ 231.706711][ T9195] netlink: 'syz.2.932': attribute type 11 has an invalid length. [ 231.717645][ T9195] netlink: 224 bytes leftover after parsing attributes in process `syz.2.932'. [ 232.052608][ T9217] FAULT_INJECTION: forcing a failure. [ 232.052608][ T9217] name failslab, interval 1, probability 0, space 0, times 0 [ 232.125216][ T9217] CPU: 0 UID: 0 PID: 9217 Comm: syz.1.937 Not tainted syzkaller #0 PREEMPT(full) [ 232.125250][ T9217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.125262][ T9217] Call Trace: [ 232.125270][ T9217] [ 232.125280][ T9217] dump_stack_lvl+0x189/0x250 [ 232.125312][ T9217] ? __pfx____ratelimit+0x10/0x10 [ 232.125340][ T9217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.125363][ T9217] ? __pfx__printk+0x10/0x10 [ 232.125398][ T9217] ? __pfx___might_resched+0x10/0x10 [ 232.125424][ T9217] should_fail_ex+0x414/0x560 [ 232.125456][ T9217] should_failslab+0xa8/0x100 [ 232.125487][ T9217] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 232.125526][ T9217] ? __alloc_skb+0x112/0x2d0 [ 232.125561][ T9217] __alloc_skb+0x112/0x2d0 [ 232.125595][ T9217] netlink_sendmsg+0x5c6/0xb30 [ 232.125636][ T9217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.125669][ T9217] ? aa_sock_msg_perm+0xf1/0x1d0 [ 232.125702][ T9217] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 232.125724][ T9217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.125753][ T9217] __sock_sendmsg+0x219/0x270 [ 232.125782][ T9217] ____sys_sendmsg+0x505/0x830 [ 232.125810][ T9217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.125842][ T9217] ? import_iovec+0x74/0xa0 [ 232.125870][ T9217] ___sys_sendmsg+0x21f/0x2a0 [ 232.125894][ T9217] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.125957][ T9217] ? __fget_files+0x2a/0x420 [ 232.125985][ T9217] ? __fget_files+0x3a0/0x420 [ 232.126027][ T9217] __x64_sys_sendmsg+0x19b/0x260 [ 232.126051][ T9217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 232.126083][ T9217] ? __pfx_ksys_write+0x10/0x10 [ 232.126106][ T9217] ? rcu_is_watching+0x15/0xb0 [ 232.126132][ T9217] ? do_syscall_64+0xbe/0x3b0 [ 232.126163][ T9217] do_syscall_64+0xfa/0x3b0 [ 232.126188][ T9217] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.126214][ T9217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.126239][ T9217] ? clear_bhb_loop+0x60/0xb0 [ 232.126263][ T9217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.126282][ T9217] RIP: 0033:0x7fdb25b8ebe9 [ 232.126302][ T9217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.126318][ T9217] RSP: 002b:00007fdb26a7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.126340][ T9217] RAX: ffffffffffffffda RBX: 00007fdb25db5fa0 RCX: 00007fdb25b8ebe9 [ 232.126353][ T9217] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 232.126366][ T9217] RBP: 00007fdb26a7c090 R08: 0000000000000000 R09: 0000000000000000 [ 232.126378][ T9217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.126389][ T9217] R13: 00007fdb25db6038 R14: 00007fdb25db5fa0 R15: 00007ffc2f501ac8 [ 232.126421][ T9217] [ 232.155020][ T9222] netlink: 128 bytes leftover after parsing attributes in process `syz.3.934'. [ 232.652678][ T9233] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 232.664207][ T9233] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 232.672829][ T9233] gretap1: entered promiscuous mode [ 232.678147][ T9233] gretap1: entered allmulticast mode [ 232.701465][ T9229] block nbd2: not configured, cannot reconfigure [ 232.713380][ T9229] netlink: 'syz.2.938': attribute type 29 has an invalid length. [ 232.986311][ T9244] netlink: 100 bytes leftover after parsing attributes in process `syz.1.943'. [ 233.010807][ T9250] netlink: 32 bytes leftover after parsing attributes in process `syz.3.945'. [ 233.107118][ T9256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.947'. [ 233.157760][ T9259] netlink: 'syz.3.948': attribute type 6 has an invalid length. [ 233.174145][ T9259] IPVS: ip_vs_edit_dest(): server weight less than zero [ 233.242382][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 234.439861][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'. [ 234.457140][ T9299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.501228][ T9299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.531565][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'. [ 234.707630][ T9315] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.715599][ T9315] IPv6: NLM_F_CREATE should be set when creating new route [ 234.736901][ T9315] syzkaller0: entered promiscuous mode [ 234.745750][ T9315] syzkaller0: entered allmulticast mode [ 234.796450][ T9321] netlink: 'syz.0.962': attribute type 83 has an invalid length. [ 235.186676][ T9345] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 235.379494][ T9356] netlink: 'syz.1.970': attribute type 1 has an invalid length. [ 235.404283][ T9357] netlink: 'syz.3.972': attribute type 1 has an invalid length. [ 235.633440][ T9360] can: request_module (can-proto-4) failed. [ 236.028158][ T195] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 236.028170][ T9385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.048895][ T9391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.097901][ T9388] pim6reg1: entered promiscuous mode [ 236.146473][ T9388] pim6reg1: entered allmulticast mode [ 236.204382][ T9397] sctp: [Deprecated]: syz.1.981 (pid 9397) Use of int in max_burst socket option. [ 236.204382][ T9397] Use struct sctp_assoc_value instead [ 237.913871][ T9415] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004 [ 237.965593][ T9423] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.982266][ T9425] __nla_validate_parse: 5 callbacks suppressed [ 237.982292][ T9425] netlink: 256 bytes leftover after parsing attributes in process `syz.1.992'. [ 238.165403][ T9429] netlink: 'syz.3.993': attribute type 4 has an invalid length. [ 238.365825][ T9453] netlink: 24 bytes leftover after parsing attributes in process `syz.0.999'. [ 238.465078][ T9459] tipc: Enabled bearer , priority 10 [ 238.484755][ T9447] hsr0 speed is unknown, defaulting to 1000 [ 238.495408][ T9447] lo speed is unknown, defaulting to 1000 [ 238.504249][ T9464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1001'. [ 238.514718][ T9453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.999'. [ 238.569563][ T9464] openvswitch: netlink: Duplicate or invalid key (type 0). [ 238.601665][ T9464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.676520][ T9499] netlink: 'syz.1.1009': attribute type 1 has an invalid length. [ 239.701360][ T9499] netlink: 'syz.1.1009': attribute type 1 has an invalid length. [ 239.955053][ T9516] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1013'. [ 239.997799][ T9515] macvtap1: entered promiscuous mode [ 240.040746][ T9515] vlan0: entered promiscuous mode [ 240.046376][ T9515] macvtap1: entered allmulticast mode [ 240.072147][ T9515] vlan0: entered allmulticast mode [ 240.107943][ T9515] veth0_vlan: entered allmulticast mode [ 240.151806][ T9525] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1016'. [ 240.324248][ T9537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1019'. [ 240.515851][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'. [ 240.647133][ T9554] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1026'. [ 240.666697][ T9555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1027'. [ 240.765490][ T9554] tipc: Enabled bearer , priority 10 [ 240.800711][ T9554] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 241.633473][ T9612] netlink: 'syz.1.1042': attribute type 1 has an invalid length. [ 241.658342][ T9612] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 241.681743][ T9612] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 241.701934][ T9612] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 242.112647][ T9634] hsr_slave_1 (unregistering): left promiscuous mode [ 243.059825][ T9680] __nla_validate_parse: 5 callbacks suppressed [ 243.059847][ T9680] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1059'. [ 243.123210][ T9680] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.285714][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1064'. [ 243.310403][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1063'. [ 243.327911][ T9700] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 1, id = 0 [ 243.375194][ T9704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1066'. [ 243.603813][ T9708] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 243.639716][ T9708] netlink: 'syz.3.1067': attribute type 2 has an invalid length. [ 243.656583][ T9708] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1067'. [ 243.679111][ T9708] nbd: must specify at least one socket [ 243.692964][ T9713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1070'. [ 244.183338][ T9735] gre1: entered promiscuous mode [ 244.197552][ T9735] gre1: entered allmulticast mode [ 244.566729][ T9754] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1083'. [ 244.706362][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1084'. [ 244.856634][ T9760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1085'. [ 245.150670][ T9766] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1087'. [ 245.303631][ T9773] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 246.518644][ T9785] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 246.562877][ T9828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.604793][ T9830] pimreg: entered allmulticast mode [ 246.875520][ T9848] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 246.876640][ T9850] netlink: 'syz.2.1114': attribute type 1 has an invalid length. [ 246.912100][ T9850] netlink: 'syz.2.1114': attribute type 1 has an invalid length. [ 246.958190][ T9853] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.965602][ T9853] IPv6: NLM_F_CREATE should be set when creating new route [ 247.768353][ T9885] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 248.087679][ T9906] netlink: 'syz.1.1135': attribute type 2 has an invalid length. [ 248.107970][ T9906] __nla_validate_parse: 12 callbacks suppressed [ 248.107992][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1135'. [ 248.171093][ T9906] team_slave_0: entered promiscuous mode [ 248.177221][ T9906] team_slave_1: entered promiscuous mode [ 248.201460][ T9906] macsec2: entered promiscuous mode [ 248.206830][ T9906] team0: entered promiscuous mode [ 248.219452][ T9906] macsec2: entered allmulticast mode [ 248.224798][ T9906] team0: entered allmulticast mode [ 248.276253][ T9916] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.285135][ T9906] team_slave_0: entered allmulticast mode [ 248.295597][ T9906] team_slave_1: entered allmulticast mode [ 248.304627][ T9915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1137'. [ 248.308563][ T9906] team0: Device macsec2 is already an upper device of the team interface [ 248.322980][ T9915] nbd: must specify a size in bytes for the device [ 248.334873][ T9920] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.342503][ T9906] team0: left allmulticast mode [ 248.347715][ T9906] team_slave_0: left allmulticast mode [ 248.348832][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1140'. [ 248.357793][ T9906] team_slave_1: left allmulticast mode [ 248.368831][ T9906] team0: left promiscuous mode [ 248.378159][ T9906] team_slave_0: left promiscuous mode [ 248.383728][ T9906] team_slave_1: left promiscuous mode [ 248.417410][ T9916] bridge3: entered promiscuous mode [ 248.422931][ T9916] bridge3: entered allmulticast mode [ 248.439914][ T9920] bridge4: entered promiscuous mode [ 248.445195][ T9920] bridge4: entered allmulticast mode [ 248.694115][ T9934] bridge1: entered promiscuous mode [ 248.707785][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1144'. [ 248.718389][ T9934] bridge1: entered allmulticast mode [ 248.829013][ T9939] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.854213][ T9939] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 249.173079][ T9960] tipc: Enabling of bearer rejected, failed to enable media [ 249.299922][ T9964] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1154'. [ 249.375144][ T9970] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1155'. [ 249.509142][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1157'. [ 249.623624][ T9970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1155'. [ 249.889442][ T9998] tipc: Started in network mode [ 249.894385][ T9998] tipc: Node identity 3e29038485a, cluster identity 4711 [ 249.903035][T10001] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1162'. [ 249.919498][ T9998] tipc: Enabled bearer , priority 0 [ 249.931264][ T9998] tipc: Resetting bearer [ 249.943555][ T9997] tipc: Disabling bearer [ 250.204994][T10023] netlink: 'syz.1.1169': attribute type 1 has an invalid length. [ 250.220965][T10023] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1169'. [ 250.243862][T10018] "syz.4.1168" (10018) uses obsolete ecb(arc4) skcipher [ 250.296838][T10029] IPVS: Error connecting to the multicast addr [ 250.842279][T10044] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 251.623163][T10091] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20003 [ 253.467883][T10120] lo: entered promiscuous mode [ 253.475404][T10120] tunl0: entered promiscuous mode [ 253.484492][T10120] gre0: entered promiscuous mode [ 253.525449][T10120] gretap0: entered promiscuous mode [ 253.550784][T10120] erspan0: entered promiscuous mode [ 253.563299][T10120] ip_vti0: entered promiscuous mode [ 253.592845][T10109] hsr0 speed is unknown, defaulting to 1000 [ 253.618679][T10109] lo speed is unknown, defaulting to 1000 [ 253.647850][T10132] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 254.222683][T10158] tipc: Enabled bearer , priority 10 [ 254.415640][T10164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.870237][T10187] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 255.033916][T10189] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 255.051259][T10189] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 255.065083][T10189] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 255.316261][T10206] tipc: Started in network mode [ 255.334312][T10206] tipc: Node identity 86b747371ec7, cluster identity 4711 [ 255.342620][ T5966] tipc: Node number set to 3146318724 [ 255.376557][T10206] tipc: Enabled bearer , priority 0 [ 255.399296][T10210] syzkaller0: entered promiscuous mode [ 255.412724][T10210] syzkaller0: entered allmulticast mode [ 255.419702][T10213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.450422][T10206] tipc: Resetting bearer [ 255.494797][T10204] tipc: Resetting bearer [ 255.558085][T10219] __nla_validate_parse: 63 callbacks suppressed [ 255.558107][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1224'. [ 255.582069][T10213] netlink: 'syz.2.1225': attribute type 1 has an invalid length. [ 255.613894][T10204] tipc: Disabling bearer [ 255.620050][T10213] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1225'. [ 255.657507][T10225] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1225'. [ 255.669054][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1225'. [ 255.839615][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1232'. [ 255.888283][T10234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1229'. [ 255.904606][T10236] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1232'. [ 256.007306][T10241] netlink: 'syz.1.1233': attribute type 1 has an invalid length. [ 256.018091][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.024671][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.123460][T10247] net veth1_virt_wifi .: renamed from virt_wifi0 [ 256.216686][T10254] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1237'. [ 256.249350][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'. [ 256.385819][T10264] netlink: 'syz.4.1241': attribute type 4 has an invalid length. [ 256.497671][T10269] veth1_macvtap: left promiscuous mode [ 256.763411][T10285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1249'. [ 257.279819][T10324] tipc: Enabled bearer , priority 0 [ 257.296999][T10324] syzkaller0: entered promiscuous mode [ 257.305142][T10324] syzkaller0: entered allmulticast mode [ 257.397143][T10324] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 257.436386][T10324] tipc: Resetting bearer [ 257.457195][T10321] tipc: Resetting bearer [ 257.489022][T10321] tipc: Disabling bearer [ 257.546273][T10336] netlink: 'syz.4.1264': attribute type 10 has an invalid length. [ 257.588092][T10336] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 258.120318][T10369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.935525][T10412] hsr0 speed is unknown, defaulting to 1000 [ 258.943183][T10412] lo speed is unknown, defaulting to 1000 [ 259.355921][T10426] netlink: 'syz.0.1292': attribute type 10 has an invalid length. [ 259.398359][T10430] netlink: 'syz.0.1292': attribute type 10 has an invalid length. [ 259.978440][T10459] bond3: entered allmulticast mode [ 259.984537][T10459] 8021q: adding VLAN 0 to HW filter on device bond3 [ 259.993319][T10459] bridge0: port 4(bond3) entered blocking state [ 260.000244][T10459] bridge0: port 4(bond3) entered disabled state [ 260.010944][T10459] bond3: entered promiscuous mode [ 260.017050][T10459] bridge0: port 4(bond3) entered blocking state [ 260.023562][T10459] bridge0: port 4(bond3) entered listening state [ 260.075447][T10467] team0: left allmulticast mode [ 260.082855][T10467] team_slave_0: left allmulticast mode [ 260.091436][T10467] team_slave_1: left allmulticast mode [ 260.097612][T10467] team0: left promiscuous mode [ 260.102630][T10467] team_slave_0: left promiscuous mode [ 260.108484][T10467] team_slave_1: left promiscuous mode [ 260.114780][T10467] bridge0: port 3(team0) entered disabled state [ 260.135454][T10467] bond0: (slave batadv0): Releasing backup interface [ 260.158646][T10467] : left allmulticast mode [ 260.164116][T10467] : left promiscuous mode [ 260.168722][T10467] bridge0: port 1() entered disabled state [ 260.178743][T10467] bridge_slave_1: left allmulticast mode [ 260.186553][T10467] bridge_slave_1: left promiscuous mode [ 260.193033][T10467] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.204126][T10467] bond1: (slave veth0_to_bond): Releasing active interface [ 260.218476][T10467] bond0: (slave bond_slave_0): Releasing backup interface [ 260.236262][T10467] bond0: (slave bond_slave_1): Releasing backup interface [ 260.260906][T10467] team0: Port device team_slave_0 removed [ 260.278538][T10467] team0: Port device team_slave_1 removed [ 260.286817][T10467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.294970][T10467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.303597][T10467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.311748][T10467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.325979][T10467] bond1: (slave veth3): Releasing active interface [ 260.333232][T10467] bond1: (slave veth3): the permanent HWaddr of slave - 82:e6:ca:72:9c:0d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 260.360814][T10467] bond1: (slave veth5): Releasing active interface [ 260.376757][T10467] bond3: left promiscuous mode [ 260.382062][T10467] bridge0: port 4(bond3) entered disabled state [ 260.396619][ T5936] lo speed is unknown, defaulting to 1000 [ 260.908395][T10497] __nla_validate_parse: 7 callbacks suppressed [ 260.908417][T10497] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1311'. [ 260.981874][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 261.016084][T10507] netlink: 'syz.0.1315': attribute type 11 has an invalid length. [ 261.364853][T10521] team0: Device gtp0 is of different type [ 261.381077][T10530] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1324'. [ 261.442044][T10537] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1325'. [ 261.706126][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1328'. [ 261.734501][T10552] netlink: 'syz.1.1329': attribute type 39 has an invalid length. [ 261.864416][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1331'. [ 261.881825][T10558] netlink: 'syz.4.1330': attribute type 1 has an invalid length. [ 261.916602][T10558] netlink: 'syz.4.1330': attribute type 2 has an invalid length. [ 261.946231][T10558] netlink: 'syz.4.1330': attribute type 1 has an invalid length. [ 262.027663][T10565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1333'. [ 262.068925][T10565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.076296][T10565] IPv6: NLM_F_CREATE should be set when creating new route [ 262.308441][T10580] netlink: 'syz.0.1337': attribute type 11 has an invalid length. [ 262.351826][T10583] tipc: Enabling of bearer rejected, failed to enable media [ 262.372498][T10585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1341'. [ 262.469769][T10589] tipc: Enabled bearer , priority 10 [ 263.073239][T10625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1354'. [ 263.083823][T10626] dvmrp4: entered allmulticast mode [ 263.103335][T10626] pimreg: left allmulticast mode [ 263.108556][T10626] dvmrp4: left allmulticast mode [ 263.227896][T10632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1359'. [ 263.597790][ T5966] tipc: Node number set to 2884443206 [ 264.364166][T10645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.399750][T10645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.855751][T10645] vlan0: left allmulticast mode [ 264.862946][T10645] veth0_vlan: left allmulticast mode [ 264.868510][T10645] vlan0: left promiscuous mode [ 265.096002][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.143142][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.175716][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.193673][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.222653][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.261328][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.297744][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.317244][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.339493][T10691] syz_tun: entered allmulticast mode [ 265.357376][T10691] syz_tun: left allmulticast mode [ 265.518862][T10704] netlink: 'syz.4.1374': attribute type 1 has an invalid length. [ 265.591307][T10705] bond2 (unregistering): Released all slaves [ 265.617354][T10704] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 265.986151][T10733] batadv1: entered allmulticast mode [ 266.264110][T10750] __nla_validate_parse: 5 callbacks suppressed [ 266.264133][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'. [ 266.505047][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'. [ 266.767804][T10792] netlink: 'syz.3.1400': attribute type 2 has an invalid length. [ 266.953627][T10796] netlink: 'syz.3.1400': attribute type 1 has an invalid length. [ 267.409744][T10800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1401'. [ 267.419081][T10800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1401'. [ 267.429368][T10800] 8021q: VLANs not supported on wg1 [ 267.787718][T10822] netlink: 'syz.2.1410': attribute type 30 has an invalid length. [ 267.894373][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'. [ 268.753801][T10861] netlink: 'syz.3.1419': attribute type 1 has an invalid length. [ 268.767795][T10861] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1419'. [ 269.126447][T10881] netlink: 'syz.1.1427': attribute type 9 has an invalid length. [ 269.157493][T10881] netlink: 'syz.1.1427': attribute type 9 has an invalid length. [ 269.244566][T10886] netem: incorrect gi model size [ 269.262174][T10886] netem: change failed [ 269.281304][T10886] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1430'. [ 269.368725][T10890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.822131][T10912] netlink: 'syz.0.1441': attribute type 5 has an invalid length. [ 269.958112][T10917] netlink: 'syz.2.1443': attribute type 10 has an invalid length. [ 269.978184][T10917] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 269.992930][ T6379] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.023982][ T6379] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.057856][T10922] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1445'. [ 270.083977][ T6379] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.110396][ T6379] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.170571][T10927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1446'. [ 270.257060][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1446'. [ 270.307847][T10929] syzkaller1: entered promiscuous mode [ 270.313872][T10929] syzkaller1: entered allmulticast mode [ 270.340374][T10929] syzkaller1: left promiscuous mode [ 270.345807][T10929] syzkaller1: left allmulticast mode [ 270.496432][T10945] netlink: 'syz.0.1454': attribute type 5 has an invalid length. [ 271.033230][T10981] netlink: 'syz.3.1463': attribute type 29 has an invalid length. [ 271.314093][T10992] __nla_validate_parse: 5 callbacks suppressed [ 271.314115][T10992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1466'. [ 271.435961][T10997] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1467'. [ 271.872324][T11018] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1475'. [ 272.095656][T11027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1479'. [ 272.302219][T11031] tipc: Enabled bearer , priority 0 [ 272.436164][T11030] tipc: Disabling bearer [ 272.497216][T11047] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1488'. [ 272.821896][T11061] siw: device registration error -23 [ 272.864297][T11061] hsr0 speed is unknown, defaulting to 1000 [ 272.872840][T11061] lo speed is unknown, defaulting to 1000 [ 272.921523][T11065] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1491'. [ 272.950721][T11067] validate_nla: 1 callbacks suppressed [ 272.950742][T11067] netlink: 'syz.2.1493': attribute type 1 has an invalid length. [ 273.073198][T11067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1493'. [ 273.094411][T11072] bond6: (slave gretap1): making interface the new active one [ 273.108867][T11072] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 273.125041][T11067] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.537463][T11096] netem: incorrect ge model size [ 273.553191][T11096] netem: change failed [ 273.711640][T11100] netlink: 'syz.4.1499': attribute type 9 has an invalid length. [ 273.722600][T11101] netlink: 'syz.4.1499': attribute type 9 has an invalid length. [ 273.732861][T11100] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.1499'. [ 273.765254][T11101] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.1499'. [ 273.778690][T11103] netlink: 'syz.3.1498': attribute type 11 has an invalid length. [ 273.838340][T11099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1499'. [ 274.351669][T11132] veth11: entered allmulticast mode [ 274.727411][T11154] macvtap1: entered promiscuous mode [ 274.762667][T11154] vlan0: entered promiscuous mode [ 274.768307][T11154] macvtap1: entered allmulticast mode [ 274.785233][T11154] vlan0: entered allmulticast mode [ 274.793052][T11154] veth0_vlan: entered allmulticast mode [ 274.831852][T11162] tipc: Enabled bearer , priority 0 [ 274.854768][T11156] syzkaller0: entered promiscuous mode [ 274.876084][T11156] syzkaller0: entered allmulticast mode [ 274.944195][T11156] tipc: Resetting bearer [ 274.968389][T11155] tipc: Resetting bearer [ 275.015069][T11155] tipc: Disabling bearer [ 275.139879][T11169] syzkaller1: entered promiscuous mode [ 275.145501][T11169] syzkaller1: entered allmulticast mode [ 275.550519][T11184] bridge_slave_1 (unregistering): left allmulticast mode [ 275.570381][T11184] bridge_slave_1 (unregistering): left promiscuous mode [ 275.587898][T11184] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.743027][T11198] netlink: 'syz.2.1528': attribute type 1 has an invalid length. [ 276.009867][ T5181] Bluetooth: hci0: command 0x0406 tx timeout [ 276.010151][ T5875] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 276.107809][T11207] netdevsim netdevsim3: Direct firmware load for /.€ failed with error -2 [ 276.136324][T11207] netdevsim netdevsim3: Falling back to sysfs fallback for: /.€ [ 276.166938][T11211] syzkaller0: entered promiscuous mode [ 276.179449][T11211] syzkaller0: entered allmulticast mode [ 276.394085][T11225] netlink: 'syz.1.1538': attribute type 13 has an invalid length. [ 276.635850][T11225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.825122][T11243] __nla_validate_parse: 13 callbacks suppressed [ 276.825144][T11243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1544'. [ 276.954250][T11248] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1546'. [ 277.031960][T11256] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 277.061822][T11256] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 277.085719][T11255] netlink: 'syz.1.1548': attribute type 1 has an invalid length. [ 277.086490][T11259] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 277.119649][T11255] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1548'. [ 277.148155][T11261] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1548'. [ 277.252600][T11264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1552'. [ 277.285862][T11261] hsr_slave_0: left promiscuous mode [ 277.294181][T11261] hsr_slave_1: left promiscuous mode [ 277.427808][T11264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1552'. [ 277.476991][T11264] tc_dump_action: action bad kind [ 277.637952][T11291] netlink: 'syz.3.1557': attribute type 23 has an invalid length. [ 277.848791][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1562'. [ 278.081077][T11313] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 278.127939][T11314] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 278.157419][T11313] tipc: Enabling of bearer rejected, failed to enable media [ 278.200782][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1567'. [ 278.210873][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1567'. [ 278.424113][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1572'. [ 279.220201][T10661] IPVS: starting estimator thread 0... [ 279.255752][T11377] netlink: 'syz.2.1587': attribute type 4 has an invalid length. [ 279.349439][T11379] IPVS: using max 28 ests per chain, 67200 per kthread [ 279.363744][T11377] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 279.487528][T11389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.824682][T11411] netlink: 'syz.1.1596': attribute type 4 has an invalid length. [ 279.911803][T11418] netlink: 'syz.1.1596': attribute type 4 has an invalid length. [ 280.023617][T11423] xfrm1: entered allmulticast mode [ 280.698601][T11458] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.716868][T11458] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.012226][T11458] tipc: Resetting bearer [ 281.226529][T11458] vlan0: left allmulticast mode [ 281.232868][T11458] veth0_vlan: left allmulticast mode [ 281.238465][T11458] vlan0: left promiscuous mode [ 281.283345][ T195] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.312741][ T195] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.335061][ T195] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.355956][ T195] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.539044][ T195] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.568655][ T195] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.578370][ T195] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.601328][T11486] netlink: 'syz.1.1613': attribute type 21 has an invalid length. [ 281.614605][ T195] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.831320][T11477] hsr0 speed is unknown, defaulting to 1000 [ 281.835680][T11499] openvswitch: netlink: Missing key (keys=40, expected=100) [ 281.866437][T11477] lo speed is unknown, defaulting to 1000 [ 281.945977][T11501] __nla_validate_parse: 12 callbacks suppressed [ 281.945998][T11501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1617'. [ 282.027772][T11503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1618'. [ 282.104056][T11505] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1619'. [ 282.125491][T11505] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1619'. [ 282.396905][T11516] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1621'. [ 282.476976][T11516] 0ªî{X¹¦: renamed from gretap0 [ 282.486813][T11519] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1622'. [ 282.501875][T11516] 0ªî{X¹¦: left promiscuous mode [ 282.517814][T11516] 0ªî{X¹¦: entered allmulticast mode [ 282.538468][T11522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1622'. [ 282.550882][T11516] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 282.568989][T11485] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1614'. [ 282.832376][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1626'. [ 283.178910][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1629'. [ 283.261197][T11551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.293606][T11551] bond0: (slave rose0): Enslaving as an active interface with an up link [ 283.612624][T11575] netlink: 'syz.1.1635': attribute type 16 has an invalid length. [ 283.641670][T11575] netlink: 'syz.1.1635': attribute type 17 has an invalid length. [ 283.729797][T11575] lo: left promiscuous mode [ 283.752181][T11575] tunl0: left promiscuous mode [ 283.778771][T11575] gre0: left promiscuous mode [ 283.807428][T11575] 0ªî{X¹¦: left allmulticast mode [ 283.813759][T11575] erspan0: left promiscuous mode [ 283.831377][T11575] ip_vti0: left promiscuous mode [ 283.896997][T11592] netlink: 'syz.4.1640': attribute type 21 has an invalid length. [ 283.940339][T11575] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.973040][T11575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.006933][T11601] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 284.023414][T11592] netlink: 'syz.4.1640': attribute type 14 has an invalid length. [ 285.556479][T11670] netlink: 'syz.0.1658': attribute type 21 has an invalid length. [ 285.610969][T11670] netlink: 'syz.0.1658': attribute type 21 has an invalid length. [ 285.961402][T11686] bond7: entered promiscuous mode [ 286.009338][T11686] bond7: entered allmulticast mode [ 286.027564][T11686] 8021q: adding VLAN 0 to HW filter on device bond7 [ 286.352578][T11706] syzkaller1: entered promiscuous mode [ 286.384702][T11706] syzkaller1: entered allmulticast mode [ 286.799453][T11732] netlink: 'syz.4.1674': attribute type 10 has an invalid length. [ 287.568419][T11773] tipc: Enabled bearer , priority 0 [ 287.698177][T11773] tipc: Disabling bearer [ 287.747258][T11781] __nla_validate_parse: 19 callbacks suppressed [ 287.747278][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'. [ 287.768292][T11783] netlink: 'syz.4.1688': attribute type 1 has an invalid length. [ 287.779516][T11781] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1686'. [ 287.804163][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'. [ 287.804951][T11785] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 287.821571][T11790] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1686'. [ 287.998235][T11793] bond2: (slave gretap2): making interface the new active one [ 288.002324][T11796] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1688'. [ 288.019951][T11793] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 288.171791][T11810] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1693'. [ 288.184515][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1693'. [ 288.348306][T11820] openvswitch: netlink: IP tunnel dst address not specified [ 289.158590][T11864] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1710'. [ 289.171763][T11863] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1710'. [ 289.254287][T11857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.465037][T11877] netlink: 'syz.2.1714': attribute type 8 has an invalid length. [ 289.604568][T11882] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1716'. [ 289.652850][T11883] netlink: 'syz.2.1714': attribute type 15 has an invalid length. [ 290.121469][T11906] netlink: 'syz.2.1723': attribute type 11 has an invalid length. [ 290.620025][T11927] veth0_to_team: mtu less than device minimum [ 291.723006][T11981] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 291.788922][T11985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.871214][T11985] netlink: 'syz.2.1742': attribute type 4 has an invalid length. [ 292.032065][T12000] netlink: 'syz.3.1746': attribute type 2 has an invalid length. [ 292.174145][T12007] netlink: 'syz.2.1748': attribute type 1 has an invalid length. [ 292.297455][T12007] 8021q: adding VLAN 0 to HW filter on device bond8 [ 292.351859][T12008] vlan2: entered allmulticast mode [ 292.371415][T12008] veth1: entered allmulticast mode [ 292.392207][T12008] bond8: (slave vlan2): Opening slave failed [ 292.477901][T12022] erspan0: entered promiscuous mode [ 292.487848][T12022] vlan0: entered promiscuous mode [ 292.786943][T12039] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 292.830778][T12042] __nla_validate_parse: 6 callbacks suppressed [ 292.830802][T12042] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1758'. [ 293.051730][T12057] C: renamed from team_slave_0 (while UP) [ 293.071676][T12057] netlink: 'syz.3.1762': attribute type 1 has an invalid length. [ 293.089748][T12057] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 293.162147][T12065] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 293.488894][T12083] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1771'. [ 293.614757][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1774'. [ 293.847437][T12105] netlink: 'syz.1.1777': attribute type 2 has an invalid length. [ 294.151639][T12118] netlink: 'syz.0.1781': attribute type 10 has an invalid length. [ 294.262503][T12118] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 294.358047][T12130] netlink: 'syz.4.1785': attribute type 16 has an invalid length. [ 294.377487][T12130] netlink: 'syz.4.1785': attribute type 17 has an invalid length. [ 294.483360][T12143] openvswitch: netlink: Flow key attr not present in new flow. [ 294.493576][T12142] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1790'. [ 294.527171][T12143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1785'. [ 294.563590][T12142] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1790'. [ 294.577879][T12130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.098059][T12179] pim6reg1: entered promiscuous mode [ 295.115120][T12179] pim6reg1: entered allmulticast mode [ 295.527496][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1800'. [ 295.559675][T12201] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1803'. [ 295.574079][T12198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1800'. [ 295.636339][T12198] netlink: 'syz.1.1800': attribute type 7 has an invalid length. [ 296.018224][T12195] infiniband syz0: set down [ 296.023770][T12195] infiniband syz0: added ipvlan1 [ 296.180357][T12195] RDS/IB: syz0: added [ 296.198777][T12195] smc: adding ib device syz0 with port count 1 [ 296.220332][T12239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'. [ 296.236781][T12195] smc: ib device syz0 port 1 has pnetid [ 296.446930][T12246] syzkaller0: entered promiscuous mode [ 296.461681][T12246] syzkaller0: entered allmulticast mode [ 296.599987][T12249] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 296.913946][T12266] netlink: 'syz.2.1822': attribute type 5 has an invalid length. [ 297.006850][T12267] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 297.218270][T12275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.326428][T12313] __nla_validate_parse: 4 callbacks suppressed [ 298.326451][T12313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1839'. [ 299.120617][T12336] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.179775][T12336] team0: Port device bond4 added [ 299.399106][T12350] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1850'. [ 299.416132][T12350] 0ªî{X¹¦: renamed from gretap0 [ 299.445883][T12350] 0ªî{X¹¦: entered allmulticast mode [ 299.500268][T12350] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 299.742068][T12365] nbd: must specify a device to reconfigure [ 299.770945][T12365] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 299.997755][T12366] tipc: Enabled bearer , priority 0 [ 300.011864][T12379] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1859'. [ 300.054793][T12367] tipc: Resetting bearer [ 300.088400][T12364] tipc: Disabling bearer [ 300.196384][T12385] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1862'. [ 300.225601][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1863'. [ 300.688124][T12393] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 300.708863][T12393] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 300.800283][T12393] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 300.823573][T12393] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 300.916850][T12393] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 300.926374][T12393] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 300.998633][T12393] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 301.018071][T12393] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 301.057503][T12393] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 301.088882][T12393] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 301.297900][T12446] netlink: 'syz.1.1878': attribute type 21 has an invalid length. [ 301.348273][T12446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1878'. [ 301.528026][T12453] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1880'. [ 302.386726][T12506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1894'. [ 302.389717][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1893'. [ 302.510498][T12515] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 302.833975][T12533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1898'. [ 302.867798][T12534] netlink: 'syz.2.1900': attribute type 10 has an invalid length. [ 302.936820][T12534] team0: Device ipvlan1 failed to register rx_handler [ 302.966599][T12539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.001509][T12539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.034189][T12539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.059084][T12545] netlink: 'syz.3.1901': attribute type 1 has an invalid length. [ 303.081512][T12539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.735721][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1910'. [ 303.780642][T12576] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 303.787856][T12576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.855866][T12583] netlink: zone id is out of range [ 303.882507][T12583] netlink: zone id is out of range [ 303.887686][T12583] netlink: zone id is out of range [ 303.899884][T12583] netlink: zone id is out of range [ 303.905254][T12583] netlink: zone id is out of range [ 303.965545][T12583] netlink: zone id is out of range [ 304.590958][T12617] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1921'. [ 304.644414][T12622] hsr0 speed is unknown, defaulting to 1000 [ 304.658211][T12622] lo speed is unknown, defaulting to 1000 [ 305.107070][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1927'. [ 305.864371][T12683] netlink: 'syz.4.1938': attribute type 29 has an invalid length. [ 305.905796][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1938'. [ 306.122479][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1944'. [ 306.145539][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1942'. [ 306.179065][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1944'. [ 306.237616][T12703] netlink: 212264 bytes leftover after parsing attributes in process `syz.4.1946'. [ 306.278723][T12703] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1946'. [ 306.607711][T12726] netlink: 'syz.1.1951': attribute type 1 has an invalid length. [ 306.663646][T12726] 8021q: adding VLAN 0 to HW filter on device bond3 [ 306.688269][T12732] bond3: (slave wlan0): Opening slave failed [ 306.814679][T12726] vlan2: entered allmulticast mode [ 306.827920][T12726] veth1: entered allmulticast mode [ 306.849603][T12726] bond3: (slave vlan2): Opening slave failed [ 306.917486][T12732] netlink: 'syz.1.1951': attribute type 14 has an invalid length. [ 306.917596][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1952'. [ 307.274915][T12754] pim6reg1: entered promiscuous mode [ 307.288524][T12754] pim6reg1: entered allmulticast mode [ 307.537270][T12764] net_ratelimit: 14 callbacks suppressed [ 307.537293][T12764] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 307.948363][T12791] openvswitch: netlink: Actions may not be safe on all matching packets [ 308.242616][T12808] netlink: 'syz.0.1971': attribute type 10 has an invalid length. [ 308.272173][T12808] openvswitch: netlink: Unknown key attributes 2 [ 308.280827][T12807] netlink: 'syz.1.1972': attribute type 12 has an invalid length. [ 308.787684][T12839] __nla_validate_parse: 7 callbacks suppressed [ 308.787707][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1978'. [ 309.328182][T12867] netlink: 'syz.4.1984': attribute type 5 has an invalid length. [ 309.477028][T12877] netlink: 'syz.0.1987': attribute type 1 has an invalid length. [ 309.668641][T12884] netlink: 'syz.0.1989': attribute type 2 has an invalid length. [ 310.273716][T12898] gtp2: entered promiscuous mode [ 310.305524][T12898] gtp2: entered allmulticast mode [ 310.363923][T12910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1996'. [ 310.555333][T12921] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1996'. [ 310.631765][T12923] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 310.676892][T12923] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 310.705585][T12923] gretap3: entered promiscuous mode [ 310.724491][T12923] gretap3: entered allmulticast mode [ 310.804553][T12935] netlink: 'syz.0.2000': attribute type 1 has an invalid length. [ 310.988986][T12951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2004'. [ 311.049598][T12952] tipc: Enabled bearer , priority 0 [ 311.057487][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2004'. [ 311.078265][T12952] syzkaller0: entered promiscuous mode [ 311.099545][T12952] syzkaller0: entered allmulticast mode [ 311.130199][T12952] tipc: Resetting bearer [ 311.222724][T12959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2007'. [ 311.234527][T12948] tipc: Resetting bearer [ 311.275698][T12948] tipc: Disabling bearer [ 311.290654][T12963] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2008'. [ 311.875271][T12994] netlink: 'syz.4.2018': attribute type 13 has an invalid length. [ 312.119081][T13008] netlink: 'syz.4.2021': attribute type 1 has an invalid length. [ 312.134073][T13008] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2021'. [ 312.144800][T13008] netlink: 'syz.4.2021': attribute type 1 has an invalid length. [ 312.317801][T13016] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 312.706452][T13032] sctp: [Deprecated]: syz.2.2029 (pid 13032) Use of int in maxseg socket option. [ 312.706452][T13032] Use struct sctp_assoc_value instead [ 312.828453][T13032] netlink: 'syz.2.2029': attribute type 2 has an invalid length. [ 312.882896][T13032] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2029'. [ 312.968710][T13046] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2032'. [ 313.330513][T13054] 8021q: adding VLAN 0 to HW filter on device bond3 [ 313.348448][T13054] team0: Failed to send port change of device bond3 via netlink (err -105) [ 313.369910][T13054] team0: Failed to send options change via netlink (err -105) [ 313.403092][T13054] team0: Port device bond3 added [ 313.451433][T13064] hsr0 speed is unknown, defaulting to 1000 [ 313.460661][T13064] lo speed is unknown, defaulting to 1000 [ 313.588092][ T195] team0: Failed to send port change of device bond3 via netlink (err -105) [ 314.194995][T13099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.627681][T13117] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 314.905403][T13130] __nla_validate_parse: 2 callbacks suppressed [ 314.905426][T13130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2053'. [ 314.958850][T13130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2053'. [ 315.479038][T13157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2060'. [ 315.623746][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2062'. [ 315.695273][T13165] openvswitch: netlink: Flow key attr not present in new flow. [ 315.785325][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'. [ 315.788930][T13171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2065'. [ 315.805993][T13175] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 315.812729][T13176] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2062'. [ 315.979110][T13182] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2068'. [ 316.244728][T13195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.653264][ T5875] Bluetooth: hci0: command tx timeout [ 316.842928][T13219] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2078'. [ 317.144561][T13232] syz.4.2082 uses old SIOCAX25GETINFO [ 317.326653][T13241] tipc: Enabled bearer , priority 0 [ 317.363338][T13241] syzkaller0: entered promiscuous mode [ 317.385667][T13241] syzkaller0: entered allmulticast mode [ 317.410978][T13241] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 317.454556][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.457248][T13241] tipc: Resetting bearer [ 317.473121][T13249] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 317.580257][T13256] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2088'. [ 317.597192][T13253] tipc: Resetting bearer [ 317.671695][T13253] tipc: Disabling bearer [ 317.836794][T13271] netlink: 'syz.1.2093': attribute type 9 has an invalid length. [ 317.910858][T13271] netlink: 'syz.1.2093': attribute type 9 has an invalid length. [ 318.056582][T13283] tipc: Enabled bearer , priority 0 [ 318.203110][T13283] syzkaller0: entered promiscuous mode [ 318.224478][T13283] syzkaller0: entered allmulticast mode [ 318.240405][T13283] tipc: Resetting bearer [ 318.257153][T13284] sch_fq: defrate 0 ignored. [ 318.353842][T13296] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 318.411198][T13284] tipc: Resetting bearer [ 319.110073][T10687] tipc: Node number set to 2557495095 [ 320.247246][T13284] tipc: Disabling bearer [ 320.262229][T13303] __nla_validate_parse: 6 callbacks suppressed [ 320.262244][T13303] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2102'. [ 320.280534][T13302] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 320.538211][T13333] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2114'. [ 320.739978][T13336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2115'. [ 320.958516][T13361] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2121'. [ 321.387985][T13380] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 321.862943][T13387] pimreg3: entered allmulticast mode [ 322.445389][T13411] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2136'. [ 322.720862][T13424] netlink: 'syz.3.2140': attribute type 4 has an invalid length. [ 322.759432][T13424] netlink: 'syz.3.2140': attribute type 4 has an invalid length. [ 322.916648][T13430] netlink: 'syz.4.2143': attribute type 33 has an invalid length. [ 322.940686][T13430] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 323.051889][T13439] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2146'. [ 323.089872][T13442] netlink: 'syz.1.2147': attribute type 10 has an invalid length. [ 323.097765][T13442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2147'. [ 323.211994][T13442] team0: Port device geneve0 added [ 323.238563][ T6400] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.242769][T13450] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2148'. [ 323.254325][ T6400] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.278528][ T6400] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.313309][ T6400] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.459403][T13460] macsec0: entered promiscuous mode [ 323.475967][T13460] macsec0: entered allmulticast mode [ 323.493728][T13460] veth1_macvtap: entered allmulticast mode [ 323.503860][T13460] macsec0: left promiscuous mode [ 323.510592][T13460] macsec0: left allmulticast mode [ 323.516459][T13460] veth1_macvtap: left allmulticast mode [ 323.555477][T13466] netlink: 'syz.4.2152': attribute type 11 has an invalid length. [ 323.564091][T13466] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2152'. [ 323.580262][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2155'. [ 323.603719][T13465] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 323.621239][T13468] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 323.621578][T13465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.746265][T13470] netlink: 'syz.1.2157': attribute type 6 has an invalid length. [ 325.153500][T13544] netlink: 'syz.1.2180': attribute type 21 has an invalid length. [ 325.531857][T13553] netlink: 'syz.2.2182': attribute type 83 has an invalid length. [ 325.723730][T13575] __nla_validate_parse: 8 callbacks suppressed [ 325.723755][T13575] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2190'. [ 325.771361][T13575] sctp: [Deprecated]: syz.2.2190 (pid 13575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.771361][T13575] Use struct sctp_sack_info instead [ 325.811802][T13579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2191'. [ 325.822590][T13575] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 325.919177][T13579] geneve0: entered promiscuous mode [ 325.968102][T13586] netlink: 'syz.0.2192': attribute type 3 has an invalid length. [ 326.055753][T13597] netlink: 'syz.1.2196': attribute type 32 has an invalid length. [ 326.396722][T13621] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2204'. [ 326.654138][T13632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2208'. [ 326.663809][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2208'. [ 326.672822][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2208'. [ 326.698271][T13632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2208'. [ 326.854176][T13642] netem: change failed [ 326.874465][T13643] netem: change failed [ 327.046724][T13653] IPVS: length: 8 != 1152 [ 327.076647][T13657] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2219'. [ 327.360758][T13673] netlink: 'syz.2.2223': attribute type 10 has an invalid length. [ 327.394611][T13673] team0: Port device dummy0 added [ 327.456351][T13678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2225'. [ 327.461064][T13679] netlink: 'syz.2.2223': attribute type 10 has an invalid length. [ 327.473849][T13678] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2225'. [ 327.499733][T13674] netlink: 'syz.2.2223': attribute type 10 has an invalid length. [ 327.512810][T13678] gretap1: entered promiscuous mode [ 327.532890][T13678] gretap1: entered allmulticast mode [ 327.575337][T13679] team0: Port device dummy0 removed [ 327.589536][T13679] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 327.767081][T13678] syzkaller0: entered promiscuous mode [ 327.775723][T13678] syzkaller0: entered allmulticast mode [ 329.768074][T13710] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 330.162537][T13733] 8021q: adding VLAN 0 to HW filter on device bond4 [ 330.764783][T13771] __nla_validate_parse: 6 callbacks suppressed [ 330.764809][T13771] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2254'. [ 330.825406][T13774] dvmrp1: entered allmulticast mode [ 331.115366][T13795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2261'. [ 331.151500][T13798] netlink: 'syz.4.2263': attribute type 1 has an invalid length. [ 331.231111][T13798] 8021q: adding VLAN 0 to HW filter on device bond5 [ 331.271382][T13809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2265'. [ 331.288624][T13804] 8021q: adding VLAN 0 to HW filter on device bond5 [ 331.298444][T13804] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 331.317169][T13810] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2264'. [ 331.330418][T13804] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 331.423956][T13798] veth3: entered promiscuous mode [ 331.632153][T13826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2270'. [ 331.697068][T13830] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 331.991833][T13843] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2275'. [ 332.156465][T13843] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20000 [ 332.160394][T13852] netlink: 'syz.4.2276': attribute type 24 has an invalid length. [ 332.408806][T13864] tipc: Enabled bearer , priority 0 [ 332.419510][T13867] tipc: Enabling of bearer rejected, already enabled [ 332.563917][T13864] syzkaller0: entered promiscuous mode [ 332.569910][T13864] syzkaller0: entered allmulticast mode [ 332.576400][T13864] tipc: Resetting bearer [ 332.589398][T13863] tipc: Resetting bearer [ 332.832707][T13891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2287'. [ 332.917755][T13897] netlink: 'syz.3.2290': attribute type 13 has an invalid length. [ 333.366703][T13915] openvswitch: netlink: Multiple metadata blocks provided [ 334.984206][T13863] tipc: Disabling bearer [ 334.997257][T13897] lo: entered promiscuous mode [ 335.002373][T13897] lo: entered allmulticast mode [ 335.008985][T13897] tunl0: entered promiscuous mode [ 335.014590][T13897] tunl0: entered allmulticast mode [ 335.023470][T13897] gre0: entered promiscuous mode [ 335.028478][T13897] gre0: entered allmulticast mode [ 335.045216][T13897] gretap0: entered promiscuous mode [ 335.051435][T13897] gretap0: entered allmulticast mode [ 335.064065][T13897] erspan0: entered promiscuous mode [ 335.069513][T13897] erspan0: entered allmulticast mode [ 335.081233][T13897] erspan0: refused to change device tx_queue_len [ 335.087706][T13897] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 335.536882][T13951] netlink: 'syz.0.2302': attribute type 1 has an invalid length. [ 335.858706][T13967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2307'. [ 336.188151][T13982] netlink: 'syz.4.2312': attribute type 10 has an invalid length. [ 336.270305][T13987] netlink: 'syz.4.2312': attribute type 10 has an invalid length. [ 336.305656][T13982] team0: Port device dummy0 added [ 336.382447][T13987] team0: Port device dummy0 removed [ 336.457022][T13987] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 336.471429][T13997] tipc: Enabling of bearer rejected, failed to enable media [ 336.693000][T14003] 8021q: adding VLAN 0 to HW filter on device bond10 [ 336.761167][T14003] bond0: (slave bond10): Enslaving as an active interface with a down link [ 337.016415][T14014] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2324'. [ 337.526664][T14027] syzkaller0: entered promiscuous mode [ 337.536977][T14027] syzkaller0: entered allmulticast mode [ 337.686593][T14043] raw_sendmsg: syz.3.2335 forgot to set AF_INET. Fix it! [ 337.948476][T14062] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2336'. [ 338.345132][T14084] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 339.699974][T14060] lo speed is unknown, defaulting to 1000 [ 339.701010][T14066] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2339'. [ 339.734013][T14060] lo speed is unknown, defaulting to 1000 [ 339.753401][T14060] lo speed is unknown, defaulting to 1000 [ 339.942496][T14096] netlink: 'syz.0.2349': attribute type 2 has an invalid length. [ 339.961213][T14096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2349'. [ 340.156723][T14103] syzkaller1: entered promiscuous mode [ 340.168413][T14103] syzkaller1: entered allmulticast mode [ 340.175578][T14105] sctp: [Deprecated]: syz.3.2348 (pid 14105) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.175578][T14105] Use struct sctp_sack_info instead [ 340.245057][T14060] infiniband {yz0: set active [ 340.258307][ T43] lo speed is unknown, defaulting to 1000 [ 340.287848][T14060] infiniband {yz0: added lo [ 340.307861][T14060] {yz0: rxe_create_cq: returned err = -12 [ 340.323344][T14060] infiniband {yz0: Couldn't create ib_mad CQ [ 340.342611][T14060] infiniband {yz0: Couldn't open port 1 [ 340.422746][T14060] RDS/IB: {yz0: added [ 340.426962][T14060] smc: adding ib device {yz0 with port count 1 [ 340.455248][T14060] smc: ib device {yz0 port 1 has pnetid [ 340.479929][ T43] lo speed is unknown, defaulting to 1000 [ 340.491747][T14060] lo speed is unknown, defaulting to 1000 [ 341.168353][T14141] netlink: 'syz.3.2357': attribute type 39 has an invalid length. [ 341.310256][T14109] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.2352:14109 [ 341.477360][T14060] lo speed is unknown, defaulting to 1000 [ 341.722590][T14152] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2359'. [ 341.756862][T14154] wg1: entered promiscuous mode [ 341.777442][T14154] wg1: entered allmulticast mode [ 342.010562][T14168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2366'. [ 342.196056][T14172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2368'. [ 342.229187][T14177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2368'. [ 342.296097][T14180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2370'. [ 342.316930][T14060] lo speed is unknown, defaulting to 1000 [ 342.325743][T14184] netlink: 'syz.3.2371': attribute type 29 has an invalid length. [ 342.393066][T14184] netlink: 'syz.3.2371': attribute type 29 has an invalid length. [ 342.419665][T14186] netlink: 'syz.3.2371': attribute type 29 has an invalid length. [ 342.430262][T14184] netlink: 604 bytes leftover after parsing attributes in process `syz.3.2371'. [ 342.440255][T14184] netlink: 'syz.3.2371': attribute type 10 has an invalid length. [ 342.450234][T14180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2370'. [ 342.489320][T14184] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2371'. [ 342.596568][T14188] tipc: Enabled bearer , priority 0 [ 342.616398][T14188] syzkaller0: entered promiscuous mode [ 342.645701][T14188] syzkaller0: entered allmulticast mode [ 342.688500][T14187] tipc: Resetting bearer [ 342.750900][T14187] tipc: Disabling bearer [ 342.768593][T14199] tipc: Enabled bearer , priority 0 [ 342.775614][T14200] netem: change failed [ 342.831373][T14202] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2379'. [ 342.869263][T14202] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2379'. [ 342.962906][T14194] tipc: Disabling bearer [ 343.009519][T14060] lo speed is unknown, defaulting to 1000 [ 343.365624][T14227] veth5: entered allmulticast mode [ 343.411228][T14226] veth7: entered allmulticast mode [ 343.647366][T14060] lo speed is unknown, defaulting to 1000 [ 344.110696][T14259] netlink: 'syz.3.2394': attribute type 1 has an invalid length. [ 344.355061][T14272] tipc: Enabling of bearer rejected, failed to enable media [ 344.456236][T14277] sit1: entered promiscuous mode [ 344.533980][T14277] sit1: entered allmulticast mode [ 345.275804][T14326] pim6reg: entered allmulticast mode [ 345.357401][T14330] tipc: Enabled bearer , priority 0 [ 345.365909][T14330] syzkaller0: entered promiscuous mode [ 345.391664][T14330] syzkaller0: entered allmulticast mode [ 345.442831][T14330] tipc: Resetting bearer [ 345.459837][T14329] tipc: Resetting bearer [ 345.539996][T14329] tipc: Disabling bearer [ 345.774247][T14354] netem: change failed [ 346.624953][T14399] netlink: 'syz.4.2427': attribute type 16 has an invalid length. [ 346.659641][T14399] netlink: 'syz.4.2427': attribute type 17 has an invalid length. [ 346.670474][T10661] hsr0 speed is unknown, defaulting to 1000 [ 346.690719][T10661] syz1: Port: 1 Link DOWN [ 346.731038][T14403] __nla_validate_parse: 52 callbacks suppressed [ 346.731058][T14403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2430'. [ 346.770599][T14399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.832327][T14404] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2428'. [ 347.233552][T14416] bond6: entered promiscuous mode [ 347.247135][T14416] bond6: entered allmulticast mode [ 347.277474][T14416] 8021q: adding VLAN 0 to HW filter on device bond6 [ 347.543136][T14416] bond6 (unregistering): Released all slaves [ 347.662340][T14418] tipc: Disabling bearer [ 347.960335][T14453] sctp: [Deprecated]: syz.3.2440 (pid 14453) Use of int in max_burst socket option deprecated. [ 347.960335][T14453] Use struct sctp_assoc_value instead [ 347.976425][T14454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2441'. [ 347.976464][T14454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2441'. [ 348.004515][T14453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2440'. [ 348.025468][T14452] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2442'. [ 348.060468][T14453] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2440'. [ 348.070327][T14453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2440'. [ 348.262563][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2448'. [ 348.285580][T14466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2448'. [ 348.346398][T14474] netlink: 'syz.2.2450': attribute type 16 has an invalid length. [ 348.383802][T14474] netlink: 'syz.2.2450': attribute type 17 has an invalid length. [ 348.456221][T14474] 0ªî{X¹¦: left allmulticast mode [ 348.523235][T14474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.538435][T14474] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.549099][T14474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 348.596281][ T13] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 348.619726][ T13] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 348.820996][T14497] netlink: 'syz.1.2456': attribute type 1 has an invalid length. [ 348.846806][T14497] netlink: 'syz.1.2456': attribute type 1 has an invalid length. [ 348.860253][T14499] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 348.953481][T14503] veth0: entered promiscuous mode [ 348.978416][T14503] netlink: 'syz.3.2459': attribute type 2 has an invalid length. [ 349.146093][T14502] veth0: left promiscuous mode [ 349.240064][T14515] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 349.652113][T14539] 8021q: adding VLAN 0 to HW filter on device bond6 [ 350.125929][T14572] tipc: Enabled bearer , priority 0 [ 350.148796][T14572] syzkaller0: entered promiscuous mode [ 350.165216][T14572] syzkaller0: entered allmulticast mode [ 350.198478][T14575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.306775][T14579] veth0_to_bridge: mtu less than device minimum [ 350.318677][T14577] hsr0 speed is unknown, defaulting to 1000 [ 350.345953][T14577] lo speed is unknown, defaulting to 1000 [ 350.452409][T14569] tipc: Resetting bearer [ 350.527726][T14569] tipc: Disabling bearer [ 350.610758][T14593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.967371][T14577] lo speed is unknown, defaulting to 1000 [ 351.638217][T14638] netlink: 'syz.4.2506': attribute type 11 has an invalid length. [ 351.993840][T14647] vlan0: entered promiscuous mode [ 352.010103][T14647] bridge0: entered promiscuous mode [ 352.268351][T14672] netlink: 'syz.4.2516': attribute type 1 has an invalid length. [ 352.319337][T14676] __nla_validate_parse: 11 callbacks suppressed [ 352.319361][T14676] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2517'. [ 352.319939][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2516'. [ 352.343392][T14676] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2517'. [ 352.843090][T14692] netlink: 'syz.3.2525': attribute type 10 has an invalid length. [ 352.867455][T14697] netlink: 'syz.4.2526': attribute type 32 has an invalid length. [ 352.878998][T14697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2526'. [ 352.894398][T14700] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2525'. [ 352.923437][T14702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2527'. [ 352.936394][T14702] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2527'. [ 352.983161][T14700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2525'. [ 353.155798][T14692] veth0_macvtap: left promiscuous mode [ 353.209084][T14697] (unnamed net_device) (uninitialized): option coupled_control: invalid value (105) [ 353.503492][T14720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'. [ 353.566945][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2533'. [ 353.610520][T14729] netlink: 'syz.3.2534': attribute type 28 has an invalid length. [ 353.664128][T14731] netlink: 'syz.0.2535': attribute type 33 has an invalid length. [ 353.793063][T14737] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 353.811997][T14737] sctp: [Deprecated]: syz.3.2537 (pid 14737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.811997][T14737] Use struct sctp_sack_info instead [ 354.174544][T14761] tipc: Enabling of bearer rejected, failed to enable media [ 354.424654][T14774] veth0: entered promiscuous mode [ 354.628815][T14773] veth0: left promiscuous mode [ 354.821657][T14785] hsr0 speed is unknown, defaulting to 1000 [ 354.845611][T14791] tipc: Enabling of bearer rejected, failed to enable media [ 354.873343][T14785] lo speed is unknown, defaulting to 1000 [ 355.552247][T14785] lo speed is unknown, defaulting to 1000 [ 355.648670][T14824] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 355.734047][T14824] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 355.751857][T14824] gretap2: entered promiscuous mode [ 355.767845][T14824] gretap2: entered allmulticast mode [ 356.327706][T14853] veth0: entered promiscuous mode [ 356.503066][T14852] veth0: left promiscuous mode [ 356.964323][T14874] netlink: 'syz.3.2583': attribute type 2 has an invalid length. [ 357.457577][T14884] siw: device registration error -23 [ 358.161017][T14914] netlink: 'syz.0.2595': attribute type 1 has an invalid length. [ 358.173559][T14914] nbd: error processing sock list [ 358.183323][T14914] block nbd0: shutting down sockets [ 358.481094][T14935] __nla_validate_parse: 18 callbacks suppressed [ 358.481118][T14935] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2601'. [ 358.558428][T14940] netlink: 'syz.3.2600': attribute type 1 has an invalid length. [ 358.667914][T14944] bond6: (slave geneve2): Opening slave failed [ 358.773948][T14950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2606'. [ 358.783667][T14950] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2606'. [ 358.795827][T14950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2606'. [ 358.970307][T14964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2611'. [ 359.068297][T14968] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 359.098280][T14968] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 359.101034][T14970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2611'. [ 359.274790][T14976] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 359.421327][T14984] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 359.421838][T14979] IPVS: stopping backup sync thread 14984 ... [ 359.458595][T14982] dummy0: entered allmulticast mode [ 359.475125][T14982] dummy0: left allmulticast mode [ 359.705264][T15002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2624'. [ 360.564454][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2636'. [ 360.630063][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2636'. [ 360.814281][T15041] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2639'. [ 361.758197][T15093] bridge0: entered allmulticast mode [ 361.787267][T15093] bridge_slave_0: left allmulticast mode [ 361.803358][T15093] bridge_slave_0: left promiscuous mode [ 361.813418][T15093] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.873484][T15093] bridge0 (unregistering): left allmulticast mode [ 362.008179][T15106] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 363.904565][T15211] __nla_validate_parse: 7 callbacks suppressed [ 363.904586][T15211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2711'. [ 364.192816][T15224] tipc: Enabled bearer , priority 0 [ 364.208804][T15224] syzkaller0: entered promiscuous mode [ 364.220709][T15224] syzkaller0: entered allmulticast mode [ 364.274435][T15224] tipc: Resetting bearer [ 364.311786][T15221] tipc: Resetting bearer [ 364.342008][T15221] tipc: Disabling bearer [ 365.715610][T15282] vlan0: entered allmulticast mode [ 365.728334][T15282] bridge_slave_0: entered allmulticast mode [ 365.952756][T15290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2747'. [ 366.067464][T15290] bond6: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 366.087287][T15290] bond6: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 366.127501][T15290] bond6: (slave ipvlan0): Error -95 calling set_mac_address [ 366.926790][T15326] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2760'. [ 367.077067][T15329] wireguard1: entered promiscuous mode [ 367.095405][T15329] wireguard1: entered allmulticast mode [ 368.370807][T15363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 368.562122][T15367] tipc: Bearer : already 2 bearers with priority 10 [ 368.603260][T15367] tipc: Bearer : trying with adjusted priority [ 368.649741][T15367] tipc: New replicast peer: 255.255.255.255 [ 368.680560][T15367] tipc: Enabled bearer , priority 9 [ 370.114467][T15393] ipvlan0: entered promiscuous mode [ 370.214131][T15399] netlink: 'syz.4.2789': attribute type 4 has an invalid length. [ 370.228750][T15403] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2792'. [ 370.841168][T15412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2795'. [ 372.093608][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2807'. [ 372.532387][T15453] netlink: 'syz.0.2811': attribute type 64 has an invalid length. [ 374.870959][T15490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2822'. [ 374.945645][T15490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2822'. [ 375.893474][T15518] netlink: 'syz.3.2831': attribute type 33 has an invalid length. [ 375.944484][T15518] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 377.027279][T15538] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2837'. [ 377.070119][T15536] netlink: 'syz.0.2836': attribute type 1 has an invalid length. [ 377.460865][T15546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2836'. [ 377.552344][T15539] 8021q: adding VLAN 0 to HW filter on device bond8 [ 377.615377][T15539] bond7: (slave bond8): making interface the new active one [ 377.654451][T15539] bond7: (slave bond8): Enslaving as an active interface with an up link [ 377.805955][T15536] bond7: (slave gretap2): Enslaving as a backup interface with an up link [ 377.896857][T15546] 8021q: adding VLAN 0 to HW filter on device bond7 [ 378.249679][T15566] tunl0: entered promiscuous mode [ 378.298281][T15566] netlink: 'syz.4.2843': attribute type 3 has an invalid length. [ 378.352515][T15566] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2843'. [ 378.785180][T15576] netlink: zone id is out of range [ 378.792176][T15576] netlink: zone id is out of range [ 378.797338][T15576] netlink: zone id is out of range [ 378.843507][T15579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2846'. [ 378.883160][T15576] netlink: zone id is out of range [ 378.888355][T15576] netlink: zone id is out of range [ 378.908984][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.020257][T15576] netlink: zone id is out of range [ 379.059673][T15576] netlink: zone id is out of range [ 379.189929][T15576] netlink: zone id is out of range [ 379.202291][T15592] netlink: 'syz.1.2850': attribute type 1 has an invalid length. [ 379.243228][T15576] netlink: zone id is out of range [ 379.280114][T15576] netlink: zone id is out of range [ 379.616282][T15600] FAULT_INJECTION: forcing a failure. [ 379.616282][T15600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.638680][T15592] 8021q: adding VLAN 0 to HW filter on device bond4 [ 379.669404][T15598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2851'. [ 379.697360][T15599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2851'. [ 379.779756][T15600] CPU: 0 UID: 0 PID: 15600 Comm: syz.3.2852 Not tainted syzkaller #0 PREEMPT(full) [ 379.779789][T15600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 379.779802][T15600] Call Trace: [ 379.779810][T15600] [ 379.779819][T15600] dump_stack_lvl+0x189/0x250 [ 379.779851][T15600] ? __pfx____ratelimit+0x10/0x10 [ 379.779879][T15600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.779903][T15600] ? __pfx__printk+0x10/0x10 [ 379.779933][T15600] ? __might_fault+0xb0/0x130 [ 379.779973][T15600] should_fail_ex+0x414/0x560 [ 379.780006][T15600] _copy_from_user+0x2d/0xb0 [ 379.780030][T15600] ___sys_sendmsg+0x158/0x2a0 [ 379.780056][T15600] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.780118][T15600] ? __fget_files+0x2a/0x420 [ 379.780149][T15600] ? __fget_files+0x3a0/0x420 [ 379.780190][T15600] __sys_sendmmsg+0x227/0x430 [ 379.780217][T15600] ? __pfx___sys_sendmmsg+0x10/0x10 [ 379.780236][T15600] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 379.780295][T15600] ? ksys_write+0x22a/0x250 [ 379.780325][T15600] ? __pfx_ksys_write+0x10/0x10 [ 379.780348][T15600] ? rcu_is_watching+0x15/0xb0 [ 379.780377][T15600] __x64_sys_sendmmsg+0xa0/0xc0 [ 379.780400][T15600] do_syscall_64+0xfa/0x3b0 [ 379.780427][T15600] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.780454][T15600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.780474][T15600] ? clear_bhb_loop+0x60/0xb0 [ 379.780498][T15600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.780517][T15600] RIP: 0033:0x7f758338ebe9 [ 379.780536][T15600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.780554][T15600] RSP: 002b:00007f758418c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 379.780577][T15600] RAX: ffffffffffffffda RBX: 00007f75835b5fa0 RCX: 00007f758338ebe9 [ 379.780591][T15600] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 379.780611][T15600] RBP: 00007f758418c090 R08: 0000000000000000 R09: 0000000000000000 [ 379.780624][T15600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.780635][T15600] R13: 00007f75835b6038 R14: 00007f75835b5fa0 R15: 00007fff5357d278 [ 379.780669][T15600] [ 379.929458][T15596] vlan2: entered allmulticast mode [ 380.171333][T15596] bond4: (slave vlan2): Opening slave failed [ 380.361158][T15608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2853'. [ 380.818264][T15621] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2858'. [ 381.660989][T15636] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2860'. [ 381.728458][T15619] hsr0 speed is unknown, defaulting to 1000 [ 381.744152][T15619] lo speed is unknown, defaulting to 1000 [ 382.222693][T15645] hsr0 speed is unknown, defaulting to 1000 [ 382.280981][T15645] lo speed is unknown, defaulting to 1000 [ 382.380053][T15658] FAULT_INJECTION: forcing a failure. [ 382.380053][T15658] name failslab, interval 1, probability 0, space 0, times 0 [ 382.460272][T15658] CPU: 0 UID: 0 PID: 15658 Comm: syz.1.2864 Not tainted syzkaller #0 PREEMPT(full) [ 382.460308][T15658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 382.460321][T15658] Call Trace: [ 382.460329][T15658] [ 382.460339][T15658] dump_stack_lvl+0x189/0x250 [ 382.460371][T15658] ? __pfx____ratelimit+0x10/0x10 [ 382.460399][T15658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.460423][T15658] ? __pfx__printk+0x10/0x10 [ 382.460460][T15658] ? __pfx___might_resched+0x10/0x10 [ 382.460485][T15658] should_fail_ex+0x414/0x560 [ 382.460517][T15658] should_failslab+0xa8/0x100 [ 382.460549][T15658] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 382.460577][T15658] ? __alloc_skb+0x112/0x2d0 [ 382.460611][T15658] __alloc_skb+0x112/0x2d0 [ 382.460645][T15658] netlink_sendmsg+0x5c6/0xb30 [ 382.460686][T15658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.460718][T15658] ? aa_sock_msg_perm+0xf1/0x1d0 [ 382.460751][T15658] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 382.460774][T15658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.460804][T15658] __sock_sendmsg+0x219/0x270 [ 382.460834][T15658] ____sys_sendmsg+0x52d/0x830 [ 382.460861][T15658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.460893][T15658] ? import_iovec+0x74/0xa0 [ 382.460919][T15658] ___sys_sendmsg+0x21f/0x2a0 [ 382.460955][T15658] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.461018][T15658] ? __fget_files+0x2a/0x420 [ 382.461046][T15658] ? __fget_files+0x3a0/0x420 [ 382.461088][T15658] __sys_sendmmsg+0x227/0x430 [ 382.461116][T15658] ? __pfx___sys_sendmmsg+0x10/0x10 [ 382.461133][T15658] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 382.461191][T15658] ? ksys_write+0x22a/0x250 [ 382.461220][T15658] ? __pfx_ksys_write+0x10/0x10 [ 382.461242][T15658] ? rcu_is_watching+0x15/0xb0 [ 382.461271][T15658] __x64_sys_sendmmsg+0xa0/0xc0 [ 382.461300][T15658] do_syscall_64+0xfa/0x3b0 [ 382.461326][T15658] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.461353][T15658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.461372][T15658] ? clear_bhb_loop+0x60/0xb0 [ 382.461397][T15658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.461417][T15658] RIP: 0033:0x7fdb25b8ebe9 [ 382.461436][T15658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.461453][T15658] RSP: 002b:00007fdb26a7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 382.461476][T15658] RAX: ffffffffffffffda RBX: 00007fdb25db5fa0 RCX: 00007fdb25b8ebe9 [ 382.461491][T15658] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 382.461505][T15658] RBP: 00007fdb26a7c090 R08: 0000000000000000 R09: 0000000000000000 [ 382.461518][T15658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.461530][T15658] R13: 00007fdb25db6038 R14: 00007fdb25db5fa0 R15: 00007ffc2f501ac8 [ 382.461564][T15658] [ 382.909151][T15619] lo speed is unknown, defaulting to 1000 [ 383.025484][T15662] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2866'. [ 383.109306][T15662] netlink: 'syz.4.2866': attribute type 7 has an invalid length. [ 383.139290][T15662] netlink: 'syz.4.2866': attribute type 8 has an invalid length. [ 383.147099][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2866'. [ 383.261538][T15662] gretap0: entered promiscuous mode [ 383.299236][T15662] batadv_slave_1: entered promiscuous mode [ 383.348193][T15662] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.429180][T15668] netlink: 'syz.1.2868': attribute type 75 has an invalid length. [ 384.087230][T15680] net_ratelimit: 16 callbacks suppressed [ 384.087253][T15680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.790735][T15645] lo speed is unknown, defaulting to 1000 [ 384.838057][T15694] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2876'. [ 385.094541][T15700] openvswitch: netlink: Flow key attribute not present in set flow. [ 386.250664][T15723] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2883'. [ 386.405093][T15723] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 386.928598][T10661] IPVS: starting estimator thread 0... [ 387.100729][T15748] IPVS: using max 23 ests per chain, 55200 per kthread [ 387.369815][T15754] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2892'. [ 387.433928][T15754] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2892'. [ 387.509461][T15757] dvmrp0: entered allmulticast mode [ 387.525139][T15754] netlink: 'syz.1.2892': attribute type 5 has an invalid length. [ 387.564302][T15754] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2892'. [ 387.715867][T15764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2894'. [ 387.769987][T15765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2894'. [ 388.145454][T15774] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2896'. [ 388.578931][T15781] netlink: 'syz.1.2899': attribute type 5 has an invalid length. [ 389.641060][T15796] FAULT_INJECTION: forcing a failure. [ 389.641060][T15796] name failslab, interval 1, probability 0, space 0, times 0 [ 389.691680][T15797] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 389.788693][T15796] CPU: 1 UID: 0 PID: 15796 Comm: syz.4.2907 Not tainted syzkaller #0 PREEMPT(full) [ 389.788726][T15796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 389.788739][T15796] Call Trace: [ 389.788747][T15796] [ 389.788757][T15796] dump_stack_lvl+0x189/0x250 [ 389.788787][T15796] ? __pfx____ratelimit+0x10/0x10 [ 389.788816][T15796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.788840][T15796] ? __pfx__printk+0x10/0x10 [ 389.788875][T15796] ? __pfx___might_resched+0x10/0x10 [ 389.788894][T15796] ? fs_reclaim_acquire+0x7d/0x100 [ 389.788941][T15796] should_fail_ex+0x414/0x560 [ 389.788973][T15796] should_failslab+0xa8/0x100 [ 389.789004][T15796] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 389.789033][T15796] ? __alloc_skb+0x112/0x2d0 [ 389.789068][T15796] __alloc_skb+0x112/0x2d0 [ 389.789107][T15796] netlink_ack+0x146/0xa50 [ 389.789131][T15796] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 389.789158][T15796] ? ref_tracker_free+0x63a/0x7d0 [ 389.789186][T15796] ? __asan_memcpy+0x40/0x70 [ 389.789208][T15796] ? __pfx_ref_tracker_free+0x10/0x10 [ 389.789249][T15796] netlink_rcv_skb+0x28c/0x470 [ 389.789279][T15796] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 389.789309][T15796] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 389.789350][T15796] ? netlink_deliver_tap+0x2e/0x1b0 [ 389.789389][T15796] netlink_unicast+0x82c/0x9e0 [ 389.789425][T15796] ? __pfx_netlink_unicast+0x10/0x10 [ 389.789452][T15796] ? netlink_sendmsg+0x642/0xb30 [ 389.789479][T15796] ? skb_put+0x11b/0x210 [ 389.789513][T15796] netlink_sendmsg+0x805/0xb30 [ 389.789553][T15796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.789585][T15796] ? aa_sock_msg_perm+0xf1/0x1d0 [ 389.789618][T15796] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 389.789640][T15796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.789669][T15796] __sock_sendmsg+0x219/0x270 [ 389.789698][T15796] ____sys_sendmsg+0x52d/0x830 [ 389.789726][T15796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 389.789758][T15796] ? import_iovec+0x74/0xa0 [ 389.789785][T15796] ___sys_sendmsg+0x21f/0x2a0 [ 389.789808][T15796] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.789872][T15796] ? __fget_files+0x2a/0x420 [ 389.789908][T15796] ? __fget_files+0x3a0/0x420 [ 389.789950][T15796] __sys_sendmmsg+0x227/0x430 [ 389.789977][T15796] ? __pfx___sys_sendmmsg+0x10/0x10 [ 389.789995][T15796] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 389.790054][T15796] ? ksys_write+0x22a/0x250 [ 389.790084][T15796] ? __pfx_ksys_write+0x10/0x10 [ 389.790107][T15796] ? rcu_is_watching+0x15/0xb0 [ 389.790134][T15796] __x64_sys_sendmmsg+0xa0/0xc0 [ 389.790158][T15796] do_syscall_64+0xfa/0x3b0 [ 389.790186][T15796] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.790212][T15796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.790233][T15796] ? clear_bhb_loop+0x60/0xb0 [ 389.790258][T15796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.790278][T15796] RIP: 0033:0x7efeac18ebe9 [ 389.790298][T15796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.790315][T15796] RSP: 002b:00007efead01a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 389.790339][T15796] RAX: ffffffffffffffda RBX: 00007efeac3b5fa0 RCX: 00007efeac18ebe9 [ 389.790354][T15796] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 389.790368][T15796] RBP: 00007efead01a090 R08: 0000000000000000 R09: 0000000000000000 [ 389.790380][T15796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.790393][T15796] R13: 00007efeac3b6038 R14: 00007efeac3b5fa0 R15: 00007ffc0194d558 [ 389.790426][T15796] [ 390.156401][T15797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2906'. [ 390.759900][T15799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.797321][T15801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.810816][T15796] netlink: 'syz.4.2907': attribute type 5 has an invalid length. [ 391.183536][ T5181] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 391.193465][ T5181] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 391.202703][ T5181] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 391.212691][ T5181] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 391.222277][ T5181] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 391.241203][ T5875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 391.248810][ T5875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 391.256610][ T5875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 391.265180][ T5875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 391.273448][ T5875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 392.587878][T15799] veth1_to_bond: entered allmulticast mode [ 392.885882][T15802] veth1_to_bond: left allmulticast mode [ 392.917968][T15804] hsr0 speed is unknown, defaulting to 1000 [ 392.927946][T15809] netlink: 'syz.4.2910': attribute type 15 has an invalid length. [ 392.970164][T15804] lo speed is unknown, defaulting to 1000 [ 392.987581][T15809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2910'. [ 393.110227][T15809] netlink: 'syz.4.2910': attribute type 15 has an invalid length. [ 393.121158][ T49] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 393.174636][T15809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2910'. [ 393.188043][ T49] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 393.234604][ T15] sched: DL replenish lagged too much [ 393.260269][ T49] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 393.295653][ T5875] Bluetooth: hci5: command tx timeout [ 393.348402][ T49] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 394.578337][T15843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2921'. [ 394.717695][T15804] lo speed is unknown, defaulting to 1000 [ 395.369810][ T5875] Bluetooth: hci5: command tx timeout [ 396.875680][T15881] netlink: 'syz.0.2932': attribute type 11 has an invalid length. [ 396.912896][T15881] netlink: 'syz.0.2932': attribute type 4 has an invalid length. [ 396.936154][T15881] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2932'. [ 397.232069][T15890] netlink: 'syz.0.2935': attribute type 15 has an invalid length. [ 397.271035][T15890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2935'. [ 397.449402][ T5875] Bluetooth: hci5: command tx timeout [ 397.464856][T15896] openvswitch: netlink: IP tunnel dst address not specified [ 397.486361][T15897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 398.444961][T15906] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2941'. [ 398.477061][T15804] chnl_net:caif_netlink_parms(): no params data found [ 399.529431][ T5875] Bluetooth: hci5: command tx timeout [ 399.950916][T15947] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2953'. [ 400.439983][T15804] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.447219][T15804] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.532806][T15804] bridge_slave_0: entered allmulticast mode [ 400.564320][T15804] bridge_slave_0: entered promiscuous mode [ 400.595883][T15961] team0: Device vti0 is of different type [ 400.823274][T15804] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.865732][T15804] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.921650][T15804] bridge_slave_1: entered allmulticast mode [ 400.967277][T15804] bridge_slave_1: entered promiscuous mode [ 401.252551][T15978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2960'. [ 401.337149][T15804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.454787][T15804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.983211][T15991] tc_dump_action: action bad kind [ 402.031811][T15804] team0: Port device team_slave_0 added [ 402.095457][T15804] team0: Port device team_slave_1 added [ 402.290825][T15996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2967'. [ 402.587850][T15998] veth0: entered promiscuous mode [ 402.618521][T15804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.651674][T15804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.739248][T15804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.760355][T15997] veth0: left promiscuous mode [ 402.769291][T15804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.800443][T15804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.876770][T15804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.223240][T15804] hsr_slave_0: entered promiscuous mode [ 403.254682][T15804] hsr_slave_1: entered promiscuous mode [ 404.796585][T15804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.832992][T16043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2981'. [ 404.856835][T15804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.301944][T15804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.358015][T15804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.417847][T16061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2986'. [ 406.121238][T15804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.160484][T16079] netlink: 'syz.4.2991': attribute type 1 has an invalid length. [ 406.194019][T15804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.521223][T16079] 8021q: adding VLAN 0 to HW filter on device bond7 [ 406.997997][T15804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.036934][T15804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.120480][T16091] bond0: (slave dummy0): Releasing backup interface [ 407.495846][T16091] bond0: (slave bond_slave_0): Releasing backup interface [ 407.535918][T16091] bond0: (slave bond_slave_1): Releasing backup interface [ 407.562253][T16091] team0: Port device team_slave_0 removed [ 407.584911][T16091] team0: Port device team_slave_1 removed [ 407.597617][T16091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.615484][T16091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.636036][T16091] bond0: (slave geneve1): Releasing backup interface [ 407.683575][T16091] bond1: (slave bond2): Releasing backup interface [ 407.694173][T16091] bond2: left promiscuous mode [ 407.702213][T16091] bond2: left allmulticast mode [ 407.722245][T16091] bond3: (slave bond4): Releasing backup interface [ 407.743951][T16091] bond6: (slave gretap1): Releasing active interface [ 407.791407][T16091] bond0: (slave bond10): Releasing backup interface [ 407.898972][T16106] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2995'. [ 407.983616][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2995'. [ 408.198655][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'. [ 408.335906][T16104] veth0_virt_wifi: renamed from veth0_vlan [ 408.375323][ T6379] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.416865][ T6379] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.478374][ T6379] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.547733][ T6379] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.635702][T16118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.737275][T16123] netlink: 'syz.1.3000': attribute type 1 has an invalid length. [ 408.998675][T16123] 8021q: adding VLAN 0 to HW filter on device bond5 [ 409.107983][T16126] bond5: (slave gretap1): making interface the new active one [ 409.192273][T16126] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 409.577336][T15804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 409.661229][T15804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 409.812147][T15804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 409.878105][T16158] netlink: 'syz.1.3004': attribute type 10 has an invalid length. [ 409.960355][T15804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 410.220605][T16158] bridge_slave_1: left allmulticast mode [ 410.284617][T16158] bridge_slave_1: left promiscuous mode [ 410.347499][T16158] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.498621][T16165] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3006'. [ 410.914136][T16182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3009'. [ 411.673524][T16195] ip6gre1: entered allmulticast mode [ 411.710721][T16200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3014'. [ 411.933305][T16204] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3015'. [ 411.962335][T15804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.999526][T16198] can: request_module (can-proto-0) failed. [ 412.191964][T15804] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.311868][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.319181][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.402282][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.409562][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.731674][T16216] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 413.023307][ T30] audit: type=1804 audit(1755648380.152:11): pid=16225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3021" name="/newroot/615/cgroup.controllers" dev="tmpfs" ino=3160 res=1 errno=0 [ 413.173715][ T30] audit: type=1800 audit(1755648380.152:12): pid=16225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3021" name="cgroup.controllers" dev="tmpfs" ino=3160 res=0 errno=0 [ 414.362915][T15804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.836308][T15804] veth0_vlan: entered promiscuous mode [ 415.017188][T15804] veth1_vlan: entered promiscuous mode [ 415.312382][T15804] veth0_macvtap: entered promiscuous mode [ 415.397185][T15804] veth1_macvtap: entered promiscuous mode [ 415.586766][T15804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.621118][T16272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3036'. [ 415.702649][T15804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.926013][ T6379] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.994543][ T6379] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.200198][ T6379] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.253210][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.930046][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.937925][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.110081][T16290] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3040'. [ 417.248967][T16290] bridge8: entered promiscuous mode [ 417.301728][T16290] bridge8: entered allmulticast mode [ 417.480929][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.544353][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.339792][T16313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2904'. [ 418.429414][T16313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2904'. [ 418.701067][ T6398] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.780797][ T6398] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.869539][ T6398] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.955485][ T6398] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.873368][T16349] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3056'. [ 421.186999][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.257112][T16358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3058'. [ 421.383344][ T5181] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 421.396253][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.409541][ T5181] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 421.418793][ T5181] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 421.439688][ T5181] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 421.457953][ T5181] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 421.523174][T16361] hsr0 speed is unknown, defaulting to 1000 [ 421.532102][T16361] lo speed is unknown, defaulting to 1000 [ 421.701017][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.731431][T16374] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3063'. [ 421.780510][T16374] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3063'. [ 421.817541][T16371] bond0: (slave wlan1): Releasing backup interface [ 421.853044][T16371] team0: Port device bond4 removed [ 421.885763][T16371] bond7: (slave bond8): Releasing backup interface [ 421.910658][T16371] bond7: (slave bond8): the permanent HWaddr of slave - a6:c5:1b:0f:8b:ab - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 421.928881][T16371] bond7: (slave gretap2): making interface the new active one [ 421.948635][T16371] bond7: (slave gretap2): Releasing backup interface [ 421.996054][T16371] syz.0.3062 (16371) used greatest stack depth: 16904 bytes left [ 422.061749][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.112911][T16361] lo speed is unknown, defaulting to 1000 [ 422.114213][T16388] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3067'. [ 422.396800][T16397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3069'. [ 422.736563][ T49] bridge_slave_0: left allmulticast mode [ 422.737937][T16410] netlink: 'syz.4.3075': attribute type 1 has an invalid length. [ 422.764890][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.914600][T16417] netlink: 'syz.2.3076': attribute type 1 has an invalid length. [ 422.948785][T16417] netlink: 784 bytes leftover after parsing attributes in process `syz.2.3076'. [ 423.259421][T16432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3081'. [ 423.355346][ T49] tipc: Disabling bearer [ 423.459501][ T49] bond5 (unregistering): (slave gretap1): Releasing active interface [ 423.527909][ T49] dvmrp1 (unregistering): left allmulticast mode [ 423.534798][ T5181] Bluetooth: hci3: command tx timeout [ 423.597296][ T49] team0: Port device geneve0 removed [ 423.794343][ T49] bond1 (unregistering): Released all slaves [ 423.821448][ T49] bond0 (unregistering): Released all slaves [ 423.838578][ T49] bond2 (unregistering): Released all slaves [ 423.967154][ T49] bond3 (unregistering): Released all slaves [ 424.091146][ T49] bond4 (unregistering): Released all slaves [ 424.223442][ T49] bond5 (unregistering): Released all slaves [ 424.808556][T16467] netlink: 'syz.2.3089': attribute type 5 has an invalid length. [ 424.911402][T16461] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 425.011690][T16361] chnl_net:caif_netlink_parms(): no params data found [ 425.227687][T16481] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 425.266007][T16489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3095'. [ 425.496450][T16481] syzkaller0: entered promiscuous mode [ 425.502700][T16481] syzkaller0: entered allmulticast mode [ 425.552382][T16361] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.573828][T16361] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.584427][T16361] bridge_slave_0: entered allmulticast mode [ 425.599318][T16361] bridge_slave_0: entered promiscuous mode [ 425.609860][ T5181] Bluetooth: hci3: command tx timeout [ 425.615584][T16501] syzkaller0: left promiscuous mode [ 425.628924][T16501] syzkaller0: left allmulticast mode [ 425.637844][T16361] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.646649][T16361] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.654048][T16361] bridge_slave_1: entered allmulticast mode [ 425.664582][T16361] bridge_slave_1: entered promiscuous mode [ 425.707145][T16507] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 425.826081][T16513] netlink: 'syz.2.3102': attribute type 2 has an invalid length. [ 426.100688][ T5966] hid-generic 0005:0B57:05DF.0002: collection stack underflow [ 426.108246][ T5966] hid-generic 0005:0B57:05DF.0002: item 0 0 0 12 parsing failed [ 426.126186][ T5966] hid-generic 0005:0B57:05DF.0002: probe with driver hid-generic failed with error -22 [ 427.699817][ T5181] Bluetooth: hci3: command tx timeout [ 428.027210][ T49] tipc: Left network mode [ 428.060272][T16361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.114508][T16361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.233191][T16549] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3115'. [ 428.434629][T16563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3118'. [ 428.453952][T16361] team0: Port device team_slave_0 added [ 428.523601][T16361] team0: Port device team_slave_1 added [ 428.610600][T16570] netlink: 'syz.0.3120': attribute type 21 has an invalid length. [ 428.661837][T16566] netlink: 'syz.0.3120': attribute type 21 has an invalid length. [ 428.674840][T16566] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3120'. [ 428.680202][T16570] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3120'. [ 428.766595][T16361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.800677][T16361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.812194][T16570] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 428.836507][T16361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.838404][T16566] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3120'. [ 428.871542][T16361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.878903][T16361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.908881][T16361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.553362][T16361] hsr_slave_0: entered promiscuous mode [ 429.601114][T16361] hsr_slave_1: entered promiscuous mode [ 429.638075][T16361] debugfs: 'hsr0' already exists in 'hsr' [ 429.648243][T16361] Cannot create hsr debugfs directory [ 429.676814][T16600] ipvlan0: entered promiscuous mode [ 429.702323][T16600] ipvlan0: entered allmulticast mode [ 429.709566][T16600] veth0_vlan: entered allmulticast mode [ 429.769836][ T5181] Bluetooth: hci3: command tx timeout [ 429.858324][T16619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3132'. [ 429.870462][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3135'. [ 430.221560][T16639] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 430.662245][ T6398] smc: removing ib device syz0 [ 431.003621][ T49] team0 (unregistering): Port device team_slave_1 removed [ 431.058115][ T49] team0 (unregistering): Port device team_slave_0 removed [ 431.478780][ T13] smc: removing ib device {yz0 [ 431.510012][ T10] lo speed is unknown, defaulting to 1000 [ 431.549484][ T10] {yz0: Port: 1 Link DOWN [ 432.405032][T16691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3151'. [ 433.022102][T16711] sctp: [Deprecated]: syz.3.3157 (pid 16711) Use of struct sctp_assoc_value in delayed_ack socket option. [ 433.022102][T16711] Use struct sctp_sack_info instead [ 433.362766][T16714] IPv6: sit3: Disabled Multicast RS [ 433.465281][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3159'. [ 434.092196][T16740] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3164'. [ 434.298882][T16361] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 434.364965][T16361] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 434.458078][T16361] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 434.537045][T16361] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 435.118735][T16361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.261626][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3176'. [ 435.356519][T16775] syzkaller0: entered promiscuous mode [ 435.372474][T16775] syzkaller0: entered allmulticast mode [ 435.425876][T16361] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.436585][T16775] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 435.491789][ T195] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.499053][ T195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.554786][ T6400] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.562112][ T6400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.663637][T16361] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe1ac: 0000 [#1] SMP KASAN PTI [ 435.675773][T16361] KASAN: probably user-memory-access in range [0x00000000ffff0d60-0x00000000ffff0d67] [ 435.685353][T16361] CPU: 1 UID: 0 PID: 16361 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 435.686279][T16802] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3181'. [ 435.694935][T16361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 435.694957][T16361] RIP: 0010:____ip_mc_inc_group+0x214/0xde0 [ 435.694991][T16361] Code: 4b 89 05 01 48 c7 c7 80 9c 9e 8c be ec 05 00 00 48 c7 c2 00 9d 9e 8c e8 6a 7a 99 f7 44 89 e8 4d 8d 34 c6 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 2e 09 1f f8 4d 8b 2e 4d 85 ed 0f 84 [ 435.695009][T16361] RSP: 0018:ffffc9001ab5eb30 EFLAGS: 00010206 [ 435.695030][T16361] RAX: 000000001fffe1ac RBX: dffffc0000000000 RCX: ffff88807d9c9e00 [ 435.704153][T16802] openvswitch: netlink: Flow actions attr not present in new flow. [ 435.714108][T16361] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 435.714128][T16361] RBP: 0000000000000001 R08: ffffffff8f537ba7 R09: 1ffffffff1ea6f74 [ 435.714142][T16361] R10: dffffc0000000000 R11: fffffbfff1ea6f75 R12: 00000000010000e0 [ 435.714155][T16361] R13: 00000000000001ac R14: 00000000ffff0d60 R15: 0000000000000cc0 [ 435.714168][T16361] FS: 0000555560b65500(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 435.714185][T16361] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 435.714199][T16361] CR2: 00007f4ce12454e8 CR3: 000000004cb4a000 CR4: 00000000003526f0 [ 435.817581][T16361] Call Trace: [ 435.820880][T16361] [ 435.823826][T16361] ip_mc_up+0x125/0x300 [ 435.828089][T16361] inetdev_event+0xfb3/0x15b0 [ 435.833038][T16361] ? __pfx_del_netdev_default_ips_join+0x10/0x10 [ 435.839452][T16361] ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10 [ 435.846302][T16361] ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10 [ 435.853510][T16361] ? __pfx_inetdev_event+0x10/0x10 [ 435.858714][T16361] notifier_call_chain+0x1b3/0x3e0 [ 435.863860][T16361] __dev_notify_flags+0x18d/0x2e0 [ 435.868919][T16361] ? __pfx___dev_notify_flags+0x10/0x10 [ 435.874498][T16361] ? __dev_change_flags+0x4cc/0x6d0 [ 435.879885][T16361] ? __pfx___dev_change_flags+0x10/0x10 [ 435.885796][T16361] ? do_setlink+0x8ce/0x41c0 [ 435.890389][T16361] netif_change_flags+0xe8/0x1a0 [ 435.895367][T16361] do_setlink+0xc55/0x41c0 [ 435.899792][T16361] ? rcu_is_watching+0x15/0xb0 [ 435.904648][T16361] ? __lock_acquire+0xab9/0xd20 [ 435.909774][T16361] ? __pfx_do_setlink+0x10/0x10 [ 435.914892][T16361] ? __lock_acquire+0xab9/0xd20 [ 435.920021][T16361] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 435.926394][T16361] ? rcu_is_watching+0x15/0xb0 [ 435.931160][T16361] ? __mutex_lock+0xd36/0x1360 [ 435.936020][T16361] ? __mutex_lock+0x5b6/0x1360 [ 435.941054][T16361] ? rtnl_newlink+0x8db/0x1c70 [ 435.946102][T16361] ? __pfx___mutex_lock+0x10/0x10 [ 435.951319][T16361] ? ns_capable+0x8a/0xf0 [ 435.955649][T16361] ? rtnl_link_get_net_capable+0x16a/0x350 [ 435.961562][T16361] rtnl_newlink+0x160b/0x1c70 [ 435.966275][T16361] ? __pfx_rtnl_newlink+0x10/0x10 [ 435.971318][T16361] ? __lock_acquire+0xab9/0xd20 [ 435.976187][T16361] ? __lock_acquire+0xab9/0xd20 [ 435.981053][T16361] ? __lock_acquire+0xab9/0xd20 [ 435.986096][T16361] ? is_bpf_text_address+0x26/0x2b0 [ 435.991407][T16361] ? is_bpf_text_address+0x292/0x2b0 [ 435.996880][T16361] ? is_bpf_text_address+0x26/0x2b0 [ 436.002088][T16361] ? __lock_acquire+0xab9/0xd20 [ 436.006952][T16361] ? __pfx_rtnl_newlink+0x10/0x10 [ 436.012087][T16361] rtnetlink_rcv_msg+0x7cc/0xb70 [ 436.017029][T16361] ? __lock_acquire+0xab9/0xd20 [ 436.021980][T16361] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 436.027101][T16361] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 436.032595][T16361] netlink_rcv_skb+0x205/0x470 [ 436.037411][T16361] ? __lock_acquire+0xab9/0xd20 [ 436.042363][T16361] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 436.047852][T16361] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 436.053152][T16361] ? netlink_deliver_tap+0x2e/0x1b0 [ 436.058361][T16361] netlink_unicast+0x82c/0x9e0 [ 436.063221][T16361] ? __pfx_netlink_unicast+0x10/0x10 [ 436.068511][T16361] ? netlink_sendmsg+0x642/0xb30 [ 436.073545][T16361] ? skb_put+0x11b/0x210 [ 436.077898][T16361] netlink_sendmsg+0x805/0xb30 [ 436.082711][T16361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.088013][T16361] ? aa_sock_msg_perm+0xf1/0x1d0 [ 436.093048][T16361] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 436.098342][T16361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.103722][T16361] __sock_sendmsg+0x219/0x270 [ 436.108435][T16361] __sys_sendto+0x3bd/0x520 [ 436.112991][T16361] ? __pfx___sys_sendto+0x10/0x10 [ 436.118139][T16361] ? fput_close_sync+0x119/0x200 [ 436.123086][T16361] ? __pfx_fput_close_sync+0x10/0x10 [ 436.128562][T16361] __x64_sys_sendto+0xde/0x100 [ 436.133352][T16361] do_syscall_64+0xfa/0x3b0 [ 436.137868][T16361] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.143160][T16361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.149227][T16361] ? clear_bhb_loop+0x60/0xb0 [ 436.153913][T16361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.159824][T16361] RIP: 0033:0x7f064fb90a7c [ 436.164240][T16361] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 436.183955][T16361] RSP: 002b:00007fff210235c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 436.192464][T16361] RAX: ffffffffffffffda RBX: 00007f06508e4620 RCX: 00007f064fb90a7c [ 436.200524][T16361] RDX: 000000000000002c RSI: 00007f06508e4670 RDI: 0000000000000003 [ 436.208597][T16361] RBP: 0000000000000000 R08: 00007fff21023614 R09: 000000000000000c [ 436.216571][T16361] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 436.224540][T16361] R13: 0000000000000000 R14: 00007f06508e4670 R15: 0000000000000000 [ 436.232714][T16361] [ 436.235879][T16361] Modules linked in: [ 436.241979][T16361] ---[ end trace 0000000000000000 ]--- [ 436.330001][T16361] RIP: 0010:____ip_mc_inc_group+0x214/0xde0 [ 436.336082][T16361] Code: 4b 89 05 01 48 c7 c7 80 9c 9e 8c be ec 05 00 00 48 c7 c2 00 9d 9e 8c e8 6a 7a 99 f7 44 89 e8 4d 8d 34 c6 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 2e 09 1f f8 4d 8b 2e 4d 85 ed 0f 84 [ 436.357848][T16361] RSP: 0018:ffffc9001ab5eb30 EFLAGS: 00010206 [ 436.367179][T16361] RAX: 000000001fffe1ac RBX: dffffc0000000000 RCX: ffff88807d9c9e00 [ 436.375376][T16361] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 436.383611][T16361] RBP: 0000000000000001 R08: ffffffff8f537ba7 R09: 1ffffffff1ea6f74 [ 436.391951][T16361] R10: dffffc0000000000 R11: fffffbfff1ea6f75 R12: 00000000010000e0 [ 436.441865][T16361] R13: 00000000000001ac R14: 00000000ffff0d60 R15: 0000000000000cc0 [ 436.450201][T16361] FS: 0000555560b65500(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 436.464845][T16361] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 436.471657][T16361] CR2: 00007f4ce12454e8 CR3: 000000004cb4a000 CR4: 00000000003526f0 [ 436.482644][T16361] Kernel panic - not syncing: Fatal exception [ 436.489130][T16361] Kernel Offset: disabled [ 436.493541][T16361] Rebooting in 86400 seconds..