last executing test programs: 2.721807022s ago: executing program 4 (id=2561): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x15, 0x0, &(0x7f0000001040)) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r6 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000540)=0x2, 0x4) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff03076003008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) r7 = socket(0x14, 0x2, 0x4) ioctl$SIOCX25GDTEFACILITIES(r7, 0x400461f1, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000802000d3fb0b"], 0x1c}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000900041122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000000c0), 0x2, r8}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/56, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r8}, 0x38) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x8, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) 1.68137324s ago: executing program 0 (id=2578): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x95}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r1 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000001f40)={0x1f, 0x0, @fixed}, &(0x7f0000001f80)=0xe, 0x800) bind$bt_l2cap(r4, &(0x7f0000001fc0)={0x1f, 0x8, @none, 0xfed0}, 0xe) r5 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x6, 0x9]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000001f00)=0x200, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4cc00) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000001177fbac141416e000030a89079f03b180004408050300845013f2325f009409050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000850000008b00000095000000fcff0000"], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.600532679s ago: executing program 1 (id=2579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) read$alg(r3, &(0x7f0000000040)=""/136, 0x88) write$nci(r3, &(0x7f0000000040)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x1, 0x3, 0x8, 0x0, {0x0, 0x1}}, 0x5) sendmmsg$alg(r3, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080c0}], 0x1, 0x8800) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, &(0x7f0000000500)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20040801}, 0x20008040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.471812513s ago: executing program 1 (id=2581): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r7 = accept(r3, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r7) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0xac, r8, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x884b}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfe}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000044}, 0x8800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f00000002c0)={0x6, {{0xa, 0x4e22, 0x5, @private2, 0x2}}, {{0xa, 0xa, 0x5, @local, 0x10001}}}, 0x108) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) 1.427093969s ago: executing program 0 (id=2583): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1e4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1b}]}}}]}, 0x44}}, 0x0) 1.350826303s ago: executing program 4 (id=2585): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) (async) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x7f7, 0x4) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) (async) recvfrom$packet(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000002ffebdf2530000000", @ANYRES32=r8, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltclass={0x54, 0x29, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xb, 0x5}, {0x6, 0x4}, {0xffff, 0xfff3}}, [@tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @TCA_RATE={0x6, 0x5, {0x6d, 0x1}}, @TCA_RATE={0x6, 0x5, {0xd, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0xc880) close(r1) 1.19166777s ago: executing program 0 (id=2586): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r0, 0x5082}], 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x22, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x14, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r3) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8b937c3b6630b948}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x6c, r6, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008000}, 0x804) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c044}, 0x80d5) 1.135569595s ago: executing program 4 (id=2587): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1}, &(0x7f00000000c0), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x7, [@volatile={0x5, 0x0, 0x0, 0x9, 0x3}, @restrict={0x3, 0x0, 0x0, 0xb, 0x3}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x5a, 0x2}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x5, 0x4}, {0x10}, {0xe, 0x2}, {0xb, 0x3}, {0x4, 0x5}, {0xf, 0x4}, {0x7, 0x4}]}, @fwd={0xe}, @enum={0x2, 0x5, 0x0, 0x6, 0x4, [{0xa, 0xf630}, {0x9, 0x10000}, {0x2, 0x1}, {0x6, 0x3}, {0x7, 0x6}]}, @typedef={0xe, 0x0, 0x0, 0x8, 0x2}, @float={0x1, 0x0, 0x0, 0x10, 0x10}, @enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x2}, {0x9, 0x3}]}]}, {0x0, [0x0, 0x61, 0x5f, 0x0, 0x0]}}, &(0x7f0000000880)=""/118, 0xff, 0x76, 0x0, 0x1}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x6, &(0x7f0000000940)=@raw=[@call={0x85, 0x0, 0x0, 0x77}, @map_idx={0x18, 0xa}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x1, 0xa, 0x2a1d0000, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x40}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b80)=@o_path={&(0x7f0000000b40)='./file0\x00'}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x1a, 0x1, 0x1, 0x400, 0x43044, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) unshare(0x20000400) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r6}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r7}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r8, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_lsm={0x1d, 0x1f, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0xb}, @generic={0x2c, 0xc, 0xf, 0x1, 0x8}, @alu={0x7, 0x0, 0x9, 0x4, 0xb, 0xfffffffffffffffe, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xd, 0xb, 0x7, 0xfffffffffffffff8, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x7f, 0x24, &(0x7f0000000300)=""/36, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x4, 0x1, 0xf634}, 0x10, r8, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000e00)={{r3}, "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"}) 995.370681ms ago: executing program 0 (id=2589): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @mcast2}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000240)="81c81b9a7c56271506e47a7ba4d3ffd35c67618cf50c18d261057edfe333b366e3a6116b3a4e4ec6ae8a048c39a9dfbfacb72bf4652aa87a08ad4f10f1b1acd3008c6a71e53b2d379bc317d60254f062", 0x50}, {&(0x7f0000000300)="9c4f00346cd789c943351d5e3812274807b9503c1ddac6001229a93abb66d57fd2a03b07f81ec6", 0x27}, {&(0x7f0000000500)="575ea382b9a16bc9825441aaf07ef1b0428f4b7b69ddf489403dd2a1eba568986ae9bb1160dcfdf064408fa4b5e882c56396e0d1f126cd3faa5a56c5f2e9a15e9b5d7e67a29ce48383c2675c98f746d25479b15ea110c9095d8a0359da286382b01e", 0x62}, {&(0x7f0000002280)="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", 0x424}], 0x4, &(0x7f0000000740)=[@hopopts={{0xb0, 0x29, 0x36, {0x2f, 0x13, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x8, 0x5, [0x7f, 0x9, 0x8000000000000001, 0x6, 0x2, 0x7, 0x8, 0x6]}}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x3}, @generic={0x80, 0x3c, "fa143e1a106b19c70ea0542d6d63da3d5e395944f9b3a32d7d56f9ac88221c36e046c8dd1b3bbdbc12f0ebac42dabfe74668b9390e9dfe93f026f544"}]}}}], 0xb0}}], 0x1, 0x80) 958.253442ms ago: executing program 4 (id=2590): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120005001600010000000800150000c422"], 0x48}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x60, 0x30, 0x3, 0x0, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839", 0x5}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)=""/76, 0x4c}], 0x1}, 0x40fd) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 947.215913ms ago: executing program 0 (id=2591): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000580)=""/29, &(0x7f00000005c0)=0x1d) r3 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r3, &(0x7f0000000400)={&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/107, 0x6b}, {&(0x7f0000000340)=""/121, 0x79}], 0x2, &(0x7f0000000500)=""/100, 0x64}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x6c001}, 0x10) 823.002426ms ago: executing program 4 (id=2593): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000680)="7afc70f82141dbb13c5173da307bc457", 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x9}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100)={r4, 0x100000}, &(0x7f00000001c0)=0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x70bd28, 0x40000, {0x2, 0x1f, 0xd, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00'}) (async) socket(0x2b, 0x80801, 0x1) (async) setsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000680)="7afc70f82141dbb13c5173da307bc457", 0x10) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x9}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100)={r4, 0x100000}, &(0x7f00000001c0)=0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x70bd28, 0x40000, {0x2, 0x1f, 0xd, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async) 784.898282ms ago: executing program 3 (id=2594): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (rerun: 64) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r3, 0x8, 0x9, 0x0, 0x12, 0x1}, &(0x7f0000000100)=0x14) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r3, 0x7c4}, 0x8) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, r4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) 619.679528ms ago: executing program 4 (id=2595): socket(0x400000000010, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x340440f1) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f00000007c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x401b, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 619.273682ms ago: executing program 3 (id=2596): r0 = socket$isdn(0x22, 0x2, 0x26) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044942, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0x20}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f5, &(0x7f0000000000)) r4 = socket(0x2b, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000800001c0040"], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000407910000000000000670000c200000000950005000000000071a13928b72c696950a4edd77f9876d874394900f3bde847f8c78119dfbc27abc969c82ce6f6f0b2e10179582eed3525598659f1307bc7dea42e897c2305fd2a9989f18e0b716808f6491a914b82ce112e8a52578b3a8078cfd0b7d34cd51a741cdf3bdf46d174934650e575b0f5097a4d8f97c4b165abe4bb2be76d95cdba3f0b3a790af9d04d66016aeb34cf29cfd883a854803074ce6d65e4f15f11719754006007593f2f12b706682b684633803352f0e8ce93a2570ca6dd0ff917652d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="0000eb810000000000ffffffffff000000000000", @ANYRES32=r10], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r11, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r12, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000980)='%pB \x00'}, 0x20) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r13, &(0x7f0000000340), 0x0}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=r13, 0x4) r15 = openat$cgroup(r8, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r8, r15, 0x0, 0x0, @void}, 0x10) 618.695156ms ago: executing program 2 (id=2597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @encap={0x1c}]}, 0x158}}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380)=0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@RTM_GETNSID={0x3c, 0x5a, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NETNSA_FD={0x8}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={r5, 0x3}, &(0x7f0000000080)=0x8) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0], 0x80}, 0x1, 0x0, 0x0, 0x40080d1}, 0x20000804) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000cc0)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 510.020179ms ago: executing program 2 (id=2598): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000240)={r2, 0x2}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x94}]}, 0x10) (async) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) (async) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 32) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16=r6, @ANYRES16=r5, @ANYBLOB="4d7e00000000000000002a00000008002fdcffffffbf0a0001007770616e31000000"], 0x28}, 0x4, 0x700000000000000}, 0x4000) syz_emit_ethernet(0x117e, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0) 489.602243ms ago: executing program 1 (id=2599): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200025b97000fddbdf2562000000000600b400a10d00"/34], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040800) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x22, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) 343.540535ms ago: executing program 1 (id=2600): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c00028018000200080000000a0001"], 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x8}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 342.622688ms ago: executing program 3 (id=2601): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @mcast2}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000240)="81c81b9a7c56271506e47a7ba4d3ffd35c67618cf50c18d261057edfe333b366e3a6116b3a4e4ec6ae8a048c39a9dfbfacb72bf4652aa87a08ad4f10f1b1acd3008c6a71e53b2d379bc317d60254f062", 0x50}, {&(0x7f0000000300)="9c4f00346cd789c943351d5e3812274807b9503c1ddac6001229a93abb66d57fd2a03b07f81ec6", 0x27}, {&(0x7f0000000500)="575ea382b9a16bc9825441aaf07ef1c0428f4b7b69ddf489403dd2a1eba568986ae9bb8860dcfdf064408fa4b5e882c56396e0d1f126cd3faa5a56c5f2e9a15e9b5d7e67a29ce48383c2675c98f746d25479b15ea110c9095d8a0359da286382b01e", 0x62}, {&(0x7f0000002280)="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", 0x424}], 0x4, &(0x7f0000000740)=[@hopopts={{0xb0, 0x29, 0x36, {0x2f, 0x13, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x8, 0x5, [0x7f, 0x9, 0x8000000000000001, 0x6, 0x2, 0x7, 0x8, 0x6]}}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x3}, @generic={0x80, 0x3c, "fa143e1a106b19c70ea0542d6d63da3d5e395944f9b3a32d7d56f9ac88221c36e046c8dd1b3bbdbc12f0ebac42dabfe74668b9390e9dfe93f026f544"}]}}}], 0xb0}}], 0x1, 0x80) 326.581062ms ago: executing program 2 (id=2602): r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000), 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="a2e719fbf87a7c4e0d01a90736491ac4ee4ebb9e077fa3719d6d806e032cce74c9febdaa9d056fa09336fc16b76d5e0d17a14435926fc541da8cabc6caaa983f80840400ddede0907b0de788be072fbee85014453b5b6183c565", 0x5a}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) (async) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) 243.065576ms ago: executing program 1 (id=2603): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001200010400000000000000000000ff", @ANYBLOB="00000000000000001c00128009"], 0x50}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x400, 0x9, 0x10000, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="100001800c000480"], 0x28}}, 0x0) 195.639773ms ago: executing program 3 (id=2604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) read$alg(r3, &(0x7f0000000040)=""/136, 0x88) write$nci(r3, &(0x7f0000000040)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x1, 0x3, 0x8, 0x0, {0x0, 0x1}}, 0x5) sendmmsg$alg(r3, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080c0}], 0x1, 0x8800) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, &(0x7f0000000500)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20040801}, 0x20008040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 195.478236ms ago: executing program 2 (id=2605): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="360a000040000000611058000000000095000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 125.441782ms ago: executing program 2 (id=2606): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000010000300"/20, @ANYBLOB="000000000000000014001a800800028004c6f82d07f016b8b448bed3cd50f02b0c73dd6fb8372b90c6649a9e7f6a52d1f3c6845f231f6a0a2d602aac33d94ac12f425c35645f180d3a1ef0dbd8b8a5f1b05bb29c10835009f24bdfa135c9d4704b0578469dad6a595970a79ad20865ad00d436c94a7bf20a91", @ANYRES32=r1, @ANYRES16=r1, @ANYRES32=0x0], 0x34}, 0x1, 0x2}, 0x40) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e22, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, {0xa, 0x4e20, 0x1, @mcast2, 0x3}, 0x0, {[0xd2, 0x1ff, 0x81, 0x0, 0x8, 0x0, 0xd, 0x5]}}, 0x5c) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000010000300"/20, @ANYBLOB="000000000000000014001a800800028004c6f82d07f016b8b448bed3cd50f02b0c73dd6fb8372b90c6649a9e7f6a52d1f3c6845f231f6a0a2d602aac33d94ac12f425c35645f180d3a1ef0dbd8b8a5f1b05bb29c10835009f24bdfa135c9d4704b0578469dad6a595970a79ad20865ad00d436c94a7bf20a91", @ANYRES32=r1, @ANYRES16=r1, @ANYRES32=0x0], 0x34}, 0x1, 0x2}, 0x40) (async) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e22, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, {0xa, 0x4e20, 0x1, @mcast2, 0x3}, 0x0, {[0xd2, 0x1ff, 0x81, 0x0, 0x8, 0x0, 0xd, 0x5]}}, 0x5c) (async) 117.734219ms ago: executing program 3 (id=2607): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007311350000000000061c0000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x21, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x2, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0x1}], &(0x7f0000000140)='syzkaller\x00', 0x1, 0xa6, &(0x7f0000000280)=""/166, 0x41100, 0x31, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x8, 0x7fffffff, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x0, 0x3, 0xb, 0x1}, {0x4, 0x3, 0x8, 0x2}, {0x4, 0x2, 0x3, 0xb}, {0x4, 0x2, 0xd, 0x7}, {0x1, 0x3, 0x5, 0xa}, {0x3, 0x5, 0xe, 0x1}, {0x5, 0x4, 0x4}, {0x4, 0x4, 0x0, 0xc}], 0x10, 0x45}, 0x94) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000540)) 55.494048ms ago: executing program 1 (id=2608): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x3, 0x1, [0x35]}, &(0x7f0000000200)=0xa) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000300)={r3, 0x1}, 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x48090) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@deltclass={0x140, 0x29, 0x1, 0x70bd2b, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x10}, {0xe, 0xe}, {0x4, 0x3}}, [@c_cbq={{0x8}, {0x5c, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xd, 0xfff3}, 0x8, 0x8001}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x1c, 0x1, 0x18, 0x2, 0x9, 0x0, 0x4, 0x2}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x4, 0x0, 0x2, 0x6, 0x60000000, 0x900000, 0x4, 0x8}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x35, 0x0, 0x13, 0xf9, 0x8, 0x0, 0xffff, 0x7}}]}}, @c_atm={{0x8}, {0xa4, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x1}}, @TCA_ATM_FD={0x8, 0x1, r6}, @TCA_ATM_HDR={0x2d, 0x3, "58eddaeb503e33a5a04c362da4e06af46e554affdd06babdf5d7ecec79ef438ec787e1b6d23aaf9e39"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x6, 0xd}}, @TCA_ATM_FD={0x8, 0x1, r4}, @TCA_ATM_HDR={0x44, 0x3, "60227308800cb1f8ffa43a2542c0f91efc8f20b1f095311cc430258ff5c72bff1954e494877e9b9ac6e7e55d664c702c555025bb1154623237c30a0e065984fc"}, @TCA_ATM_HDR={0x9, 0x3, "f9f933648e"}]}}, @c_atm={{0x8}, {0x4}}]}, 0x140}, 0x1, 0x0, 0x0, 0x24040840}, 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4000000) ppoll(&(0x7f0000000180)=[{r2}], 0x1, &(0x7f0000001340), 0x0, 0x0) close(r1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000000010000108fdff763f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001a8004002d"], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) gettid() r10 = socket(0x10, 0x803, 0x0) mkdirat$cgroup(r6, &(0x7f0000000080)='syz1\x00', 0x1ff) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r9, 0x19c04, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x4802}, 0x28001) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x10, 0x40, 0x25dfdbfb, {}, [@IFLA_GROUP={0x8, 0x1b, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) 19.602757ms ago: executing program 2 (id=2609): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r3, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet6(r2, &(0x7f0000003040)={&(0x7f0000002e80)={0xa, 0x4e20, 0x800, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000007000000ffffac1414aa", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x10) (async) sendmsg$inet6(r2, &(0x7f0000003040)={&(0x7f0000002e80)={0xa, 0x4e20, 0x800, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000007000000ffffac1414aa", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xffffffffffdfffff, 0x0, 0x10, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x80002, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) (async) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x80002, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) recvmmsg(r2, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/54, 0x36}, {&(0x7f00000012c0)=""/226, 0xe2}], 0x2}, 0x81}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000013c0)=""/244, 0xf4}, {&(0x7f00000014c0)=""/166, 0xa6}, {&(0x7f0000001580)=""/176, 0xb0}, {&(0x7f0000001640)=""/220, 0xdc}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000001880)=""/245, 0xf5}, {&(0x7f0000001980)=""/179, 0xb3}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000001740)=""/9, 0x9}], 0x9, &(0x7f0000001b00)=""/254, 0xfe}, 0x5}, {{&(0x7f0000001c00)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/247, 0xf7}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/189, 0xbd}, {&(0x7f0000002ec0)=""/86, 0x56}, {&(0x7f0000002f40)=""/167, 0xa7}, {&(0x7f0000004080)=""/122, 0x7a}, {&(0x7f0000004100)=""/131, 0x83}], 0x8, &(0x7f0000001780)=""/57, 0x39}, 0x6}, {{&(0x7f0000004240)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000003000)=[{&(0x7f00000042c0)=""/252, 0xfc}], 0x1, &(0x7f00000043c0)=""/74, 0x4a}, 0x1}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000004440)=""/194, 0xc2}, {&(0x7f0000004540)=""/172, 0xac}, {&(0x7f0000004600)}], 0x3, &(0x7f0000004680)=""/199, 0xc7}, 0xfffffffb}], 0x5, 0x162, 0x0) 446.317µs ago: executing program 0 (id=2610): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32, @ANYBLOB="080002"], 0x20}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r3, 0x1, 0x4, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r4, &(0x7f0000000a00)="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", &(0x7f0000000380)=""/212, 0x4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@bridge_delneigh={0x68, 0x1d, 0x800, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r7, 0x4, 0x80, 0x4}, [@NDA_PROTOCOL={0x5, 0xc, 0x2}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @NDA_FLAGS_EXT={0x8}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_PROBES={0x8, 0x4, 0x9}, @NDA_NH_ID={0x8, 0xd, 0x1}, @NDA_PROTOCOL={0x5, 0xc, 0x3}, @NDA_PROBES={0x8, 0x4, 0x7}]}, 0x68}}, 0x20004090) 0s ago: executing program 3 (id=2611): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x50}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0c000280060001009b"], 0x24}}, 0x0) (async, rerun: 64) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) readv(r12, &(0x7f0000000700)=[{&(0x7f0000000180)=""/100, 0x64}], 0x1) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) (async) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000000)={'vlan0\x00', @local}) (async, rerun: 32) r13 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x6, 0x1, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): ] vlan2: entered allmulticast mode [ 154.837243][ T8248] bond0: entered allmulticast mode [ 154.843212][ T8248] bond_slave_0: entered allmulticast mode [ 154.849038][ T8248] bond_slave_1: entered allmulticast mode [ 154.895602][ T8255] netlink: 'syz.2.682': attribute type 1 has an invalid length. [ 154.903371][ T8255] netlink: 'syz.2.682': attribute type 1 has an invalid length. [ 154.911024][ T8255] netlink: 'syz.2.682': attribute type 4 has an invalid length. [ 155.520492][ T8293] __nla_validate_parse: 3 callbacks suppressed [ 155.520511][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.694'. [ 155.638687][ T8306] netlink: 68 bytes leftover after parsing attributes in process `syz.4.698'. [ 155.757847][ T8309] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 155.879810][ T8318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.901330][ T8318] bond0: (slave rose0): Enslaving as an active interface with an up link [ 156.130520][ T8333] netlink: 'syz.4.706': attribute type 39 has an invalid length. [ 156.502007][ T8334] infiniband syz1: set active [ 156.507588][ T8334] infiniband syz1: added bond0 [ 156.645456][ T8334] RDS/IB: syz1: added [ 156.672333][ T8334] smc: adding ib device syz1 with port count 1 [ 156.723169][ T8334] smc: ib device syz1 port 1 has pnetid [ 157.431668][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 160.494816][ T8391] netlink: 'syz.2.723': attribute type 8 has an invalid length. [ 160.538420][ T8394] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 160.549956][ T8394] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004 [ 160.584521][ T8391] netlink: 'syz.2.723': attribute type 17 has an invalid length. [ 160.597337][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 160.624078][ T8391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.723'. [ 161.004761][ T8409] netlink: 76 bytes leftover after parsing attributes in process `syz.3.728'. [ 161.026804][ T8412] netlink: 20 bytes leftover after parsing attributes in process `syz.1.729'. [ 161.052294][ T8412] tipc: Invalid UDP bearer configuration [ 161.052344][ T8412] tipc: Enabling of bearer rejected, failed to enable media [ 161.324250][ T8427] netlink: 348 bytes leftover after parsing attributes in process `syz.3.733'. [ 161.555850][ T8444] netlink: 'syz.3.737': attribute type 11 has an invalid length. [ 161.602353][ T8444] netlink: 'syz.3.737': attribute type 11 has an invalid length. [ 161.635546][ T8444] netlink: 152 bytes leftover after parsing attributes in process `syz.3.737'. [ 162.520105][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.748'. [ 162.652385][ T8492] netlink: 32 bytes leftover after parsing attributes in process `syz.0.749'. [ 162.700248][ T8492] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.749'. [ 162.727759][ T8492] netlink: zone id is out of range [ 162.735684][ T8492] netlink: zone id is out of range [ 162.749512][ T8492] netlink: zone id is out of range [ 162.773992][ T8492] netlink: zone id is out of range [ 162.793744][ T8492] netlink: zone id is out of range [ 162.806826][ T8492] netlink: zone id is out of range [ 162.819878][ T8492] netlink: get zone limit has 8 unknown bytes [ 163.004285][ T8505] netlink: 32 bytes leftover after parsing attributes in process `syz.0.755'. [ 163.448409][ T8535] netlink: 'syz.3.764': attribute type 2 has an invalid length. [ 164.297259][ T8570] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 164.512890][ T8573] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 164.539826][ T8573] bond4 (unregistering): Released all slaves [ 164.853910][ T8582] netlink: 'syz.2.776': attribute type 2 has an invalid length. [ 166.286298][ T8626] __nla_validate_parse: 3 callbacks suppressed [ 166.286319][ T8626] netlink: 25 bytes leftover after parsing attributes in process `syz.4.792'. [ 166.405918][ T8630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.791'. [ 166.426402][ T8635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.532336][ T8640] netlink: 48 bytes leftover after parsing attributes in process `syz.3.795'. [ 166.598860][ T8641] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.796'. [ 166.677684][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'. [ 167.176565][ T8671] sctp: [Deprecated]: syz.2.803 (pid 8671) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.176565][ T8671] Use struct sctp_sack_info instead [ 167.742885][ T8692] bond1 (unregistering): Released all slaves [ 167.827055][ T8703] netlink: 48 bytes leftover after parsing attributes in process `syz.3.814'. [ 167.914548][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 168.144996][ T8719] tipc: Enabled bearer , priority 0 [ 168.158083][ T8722] netlink: 'syz.4.818': attribute type 21 has an invalid length. [ 168.169925][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.818'. [ 168.174567][ T8715] syzkaller0: entered promiscuous mode [ 168.207375][ T8715] syzkaller0: entered allmulticast mode [ 168.271184][ T5017] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.271330][ T8722] netlink: 'syz.4.818': attribute type 21 has an invalid length. [ 168.308376][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.818'. [ 168.308529][ T8715] tipc: Resetting bearer [ 168.333775][ T8715] tipc: Disabling bearer [ 168.353255][ T5017] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.362598][ T1116] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.368875][ T8728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.821'. [ 168.380859][ T1116] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.272253][ T8777] netlink: 'syz.4.840': attribute type 2 has an invalid length. [ 170.190226][ T8840] tipc: Enabled bearer , priority 12 [ 170.631017][ T8876] netlink: 'syz.0.870': attribute type 1 has an invalid length. [ 170.735148][ T8889] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 170.768994][ T8889] netlink: 'syz.3.872': attribute type 2 has an invalid length. [ 170.806904][ T8889] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 170.878004][ T8897] xt_l2tp: v2 sid > 0xffff: 1114112 [ 171.320175][ T8935] __nla_validate_parse: 18 callbacks suppressed [ 171.320197][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 171.392852][ T8932] netlink: 'syz.0.882': attribute type 4 has an invalid length. [ 171.823526][ T8918] netlink: 172 bytes leftover after parsing attributes in process `syz.4.880'. [ 171.842183][ T8931] netlink: 'syz.2.885': attribute type 1 has an invalid length. [ 172.042515][ T8949] openvswitch: netlink: Key type 2688 is out of range max 32 [ 172.192979][ T8957] netlink: 'syz.2.892': attribute type 11 has an invalid length. [ 172.208042][ T8957] netlink: 'syz.2.892': attribute type 11 has an invalid length. [ 172.216995][ T8957] netlink: 152 bytes leftover after parsing attributes in process `syz.2.892'. [ 172.229054][ T8961] netlink: 24 bytes leftover after parsing attributes in process `syz.3.894'. [ 172.270352][ T8961] netlink: 24 bytes leftover after parsing attributes in process `syz.3.894'. [ 172.524880][ T8974] netlink: 20 bytes leftover after parsing attributes in process `syz.4.896'. [ 172.806638][ T49] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.816665][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.173824][ T9000] openvswitch: netlink: IP tunnel dst address not specified [ 173.237451][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'. [ 173.256752][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.907'. [ 173.318901][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.908'. [ 173.412156][ T9012] tipc: Enabled bearer , priority 0 [ 173.422102][ T9021] syzkaller0: entered promiscuous mode [ 173.427609][ T9021] syzkaller0: entered allmulticast mode [ 173.501756][ T9021] tipc: Resetting bearer [ 173.560889][ T9021] tipc: Disabling bearer [ 173.571642][ T9028] Bluetooth: MGMT ver 1.23 [ 173.687101][ T9035] netlink: 'syz.3.914': attribute type 1 has an invalid length. [ 173.753858][ T9035] bond1: (slave ip6gretap1): making interface the new active one [ 173.765338][ T9035] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 173.991146][ T9054] pim6reg: entered allmulticast mode [ 174.010680][ T9055] pim6reg: left allmulticast mode [ 174.016924][ T9053] netlink: 48 bytes leftover after parsing attributes in process `syz.4.920'. [ 194.156008][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 216.711796][ T5882] Bluetooth: hci2: command 0x0406 tx timeout [ 216.717907][ T5882] Bluetooth: hci3: command 0x0406 tx timeout [ 216.724080][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 237.462787][ T9077] netlink: 'syz.4.929': attribute type 1 has an invalid length. [ 237.491942][ T9081] netlink: 'syz.0.925': attribute type 1 has an invalid length. [ 237.508163][ T9082] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.928'. [ 237.510698][ T9081] netlink: 236 bytes leftover after parsing attributes in process `syz.0.925'. [ 237.647292][ T9084] bond4: (slave ip6gretap1): making interface the new active one [ 237.674394][ T9084] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 237.796830][ T9097] tipc: Enabling of bearer rejected, failed to enable media [ 237.873630][ T9101] netlink: 48 bytes leftover after parsing attributes in process `syz.0.935'. [ 237.887975][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.935'. [ 238.041051][ T9112] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.065679][ T9112] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.087174][ T9112] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.095350][ T9101] hsr_slave_1 (unregistering): left promiscuous mode [ 238.103340][ T9112] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.103446][ T9112] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.103535][ T9112] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.103620][ T9112] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.103712][ T9112] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.103795][ T9112] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.103879][ T9112] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.103963][ T9112] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.104054][ T9112] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.104160][ T9112] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.452267][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.944'. [ 238.518942][ T9140] netlink: 'syz.1.947': attribute type 1 has an invalid length. [ 238.605394][ T9140] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 238.617356][ T36] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 238.618823][ T9140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.742869][ T8848] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 238.763685][ T9151] raw_sendmsg: syz.0.951 forgot to set AF_INET. Fix it! [ 238.831120][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 238.876697][ T9153] netlink: 128 bytes leftover after parsing attributes in process `syz.1.952'. [ 238.914659][ T9153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.952'. [ 238.955472][ T9160] netlink: 'syz.2.955': attribute type 5 has an invalid length. [ 238.998905][ T9160] netlink: 'syz.2.955': attribute type 10 has an invalid length. [ 239.038133][ T9160] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 239.069735][ T9168] netlink: 68 bytes leftover after parsing attributes in process `syz.3.957'. [ 239.376102][ T9188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.965'. [ 240.752207][ T9244] team0: Device wireguard1 is of different type [ 240.958160][ T9261] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 241.019842][ T9263] netlink: 'syz.4.984': attribute type 2 has an invalid length. [ 241.430542][ T9287] macsec0: left promiscuous mode [ 241.462120][ T9287] macsec0: left allmulticast mode [ 241.536544][ T9287] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 241.553657][ T9287] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 241.561783][ T9287] gretap1: entered promiscuous mode [ 241.567015][ T9287] gretap1: entered allmulticast mode [ 241.885290][ T9313] netlink: 'syz.3.998': attribute type 6 has an invalid length. [ 242.158895][ T9323] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 242.759487][ T9364] __nla_validate_parse: 3 callbacks suppressed [ 242.759506][ T9364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1017'. [ 242.782126][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1010'. [ 242.814609][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1010'. [ 242.826118][ T9346] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1010'. [ 242.837544][ T9346] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1010'. [ 242.923892][ T9367] : entered promiscuous mode [ 243.367995][ T9394] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1024'. [ 243.409329][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 243.589277][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 243.649651][ T9407] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1031'. [ 244.079903][ T9440] gre0: entered promiscuous mode [ 244.316111][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1043'. [ 245.108501][ T9495] C: renamed from team_slave_0 (while UP) [ 245.138376][ T9495] netlink: 'syz.3.1062': attribute type 1 has an invalid length. [ 245.148297][ T9495] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 245.333424][ T9505] netlink: 'syz.2.1065': attribute type 12 has an invalid length. [ 245.451353][ T9499] delete_channel: no stack [ 245.678082][ T9515] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.967422][ T9530] tap0: tun_chr_ioctl cmd 1074025678 [ 245.980509][ T9530] tap0: group set to 0 [ 246.007176][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 246.158168][ T9515] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.174886][ T9545] nftables ruleset with unbound set [ 246.314506][ T9515] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.497815][ T9515] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.611125][ T9566] tipc: Enabling of bearer rejected, failed to enable media [ 246.810490][ T1116] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.872694][ T1116] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.942954][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.998965][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.104539][ T9589] tipc: Enabled bearer , priority 0 [ 247.119760][ T9589] syzkaller0: entered promiscuous mode [ 247.128212][ T9595] FAULT_INJECTION: forcing a failure. [ 247.128212][ T9595] name failslab, interval 1, probability 0, space 0, times 0 [ 247.136143][ T9589] syzkaller0: entered allmulticast mode [ 247.157736][ T9593] tipc: Resetting bearer [ 247.174474][ T9595] CPU: 0 UID: 0 PID: 9595 Comm: syz.3.1088 Not tainted syzkaller #0 PREEMPT(full) [ 247.174503][ T9595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.174524][ T9595] Call Trace: [ 247.174533][ T9595] [ 247.174542][ T9595] dump_stack_lvl+0x189/0x250 [ 247.174576][ T9595] ? __pfx____ratelimit+0x10/0x10 [ 247.174600][ T9595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.174626][ T9595] ? __pfx__printk+0x10/0x10 [ 247.174664][ T9595] ? __pfx___might_resched+0x10/0x10 [ 247.174688][ T9595] should_fail_ex+0x414/0x560 [ 247.174727][ T9595] should_failslab+0xa8/0x100 [ 247.174766][ T9595] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 247.174796][ T9595] ? __alloc_skb+0x112/0x2d0 [ 247.174825][ T9595] __alloc_skb+0x112/0x2d0 [ 247.174854][ T9595] netlink_sendmsg+0x5c6/0xb30 [ 247.174888][ T9595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.174916][ T9595] ? aa_sock_msg_perm+0xf1/0x1d0 [ 247.174941][ T9595] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 247.174965][ T9595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.174990][ T9595] __sock_sendmsg+0x21c/0x270 [ 247.175027][ T9595] ____sys_sendmsg+0x505/0x830 [ 247.175061][ T9595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.175100][ T9595] ? import_iovec+0x74/0xa0 [ 247.175132][ T9595] ___sys_sendmsg+0x21f/0x2a0 [ 247.175162][ T9595] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.175231][ T9595] ? __fget_files+0x2a/0x420 [ 247.175249][ T9595] ? __fget_files+0x3a0/0x420 [ 247.175280][ T9595] __x64_sys_sendmsg+0x19b/0x260 [ 247.175311][ T9595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.175351][ T9595] ? __pfx_ksys_write+0x10/0x10 [ 247.175377][ T9595] ? rcu_is_watching+0x15/0xb0 [ 247.175417][ T9595] ? do_syscall_64+0xbe/0x3b0 [ 247.175472][ T9595] do_syscall_64+0xfa/0x3b0 [ 247.175494][ T9595] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.175534][ T9595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.175555][ T9595] ? clear_bhb_loop+0x60/0xb0 [ 247.175581][ T9595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.175602][ T9595] RIP: 0033:0x7fd8fe38eec9 [ 247.175622][ T9595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.175639][ T9595] RSP: 002b:00007fd8ff201038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.175674][ T9595] RAX: ffffffffffffffda RBX: 00007fd8fe5e5fa0 RCX: 00007fd8fe38eec9 [ 247.175689][ T9595] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 247.175702][ T9595] RBP: 00007fd8ff201090 R08: 0000000000000000 R09: 0000000000000000 [ 247.175714][ T9595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.175726][ T9595] R13: 00007fd8fe5e6038 R14: 00007fd8fe5e5fa0 R15: 00007ffe70393c58 [ 247.175759][ T9595] [ 247.727295][ T9593] tipc: Disabling bearer [ 247.767762][ T9607] tipc: Resetting bearer [ 247.885861][ T9588] tipc: Resetting bearer [ 247.910320][ T9588] tipc: Disabling bearer [ 247.999795][ T9626] bond1: entered promiscuous mode [ 248.006886][ T9626] bond1: entered allmulticast mode [ 248.027631][ T9626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.074563][ T9623] bond2: entered promiscuous mode [ 248.079840][ T9623] bond2: entered allmulticast mode [ 248.085629][ T9623] 8021q: adding VLAN 0 to HW filter on device bond2 [ 248.168940][ T9634] __nla_validate_parse: 14 callbacks suppressed [ 248.168958][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1099'. [ 248.713987][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1105'. [ 248.833039][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1109'. [ 248.964922][ T9681] FAULT_INJECTION: forcing a failure. [ 248.964922][ T9681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.983690][ T9681] CPU: 1 UID: 0 PID: 9681 Comm: syz.3.1112 Not tainted syzkaller #0 PREEMPT(full) [ 248.983719][ T9681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 248.983732][ T9681] Call Trace: [ 248.983740][ T9681] [ 248.983748][ T9681] dump_stack_lvl+0x189/0x250 [ 248.983779][ T9681] ? __pfx____ratelimit+0x10/0x10 [ 248.983802][ T9681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.983828][ T9681] ? __pfx__printk+0x10/0x10 [ 248.983857][ T9681] ? __might_fault+0xb0/0x130 [ 248.983899][ T9681] should_fail_ex+0x414/0x560 [ 248.983936][ T9681] _copy_from_iter+0x1de/0x1790 [ 248.983970][ T9681] ? rcu_is_watching+0x15/0xb0 [ 248.983992][ T9681] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 248.984024][ T9681] ? __pfx__copy_from_iter+0x10/0x10 [ 248.984051][ T9681] ? __build_skb_around+0x257/0x3e0 [ 248.984080][ T9681] ? netlink_sendmsg+0x642/0xb30 [ 248.984101][ T9681] ? skb_put+0x11b/0x210 [ 248.984129][ T9681] netlink_sendmsg+0x6b2/0xb30 [ 248.984163][ T9681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.984190][ T9681] ? aa_sock_msg_perm+0xf1/0x1d0 [ 248.984214][ T9681] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.984237][ T9681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.984262][ T9681] __sock_sendmsg+0x21c/0x270 [ 248.984305][ T9681] ____sys_sendmsg+0x505/0x830 [ 248.984339][ T9681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.984377][ T9681] ? import_iovec+0x74/0xa0 [ 248.984409][ T9681] ___sys_sendmsg+0x21f/0x2a0 [ 248.984439][ T9681] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.984506][ T9681] ? __fget_files+0x2a/0x420 [ 248.984525][ T9681] ? __fget_files+0x3a0/0x420 [ 248.984555][ T9681] __x64_sys_sendmsg+0x19b/0x260 [ 248.984586][ T9681] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 248.984624][ T9681] ? __pfx_ksys_write+0x10/0x10 [ 248.984650][ T9681] ? rcu_is_watching+0x15/0xb0 [ 248.984677][ T9681] ? do_syscall_64+0xbe/0x3b0 [ 248.984706][ T9681] do_syscall_64+0xfa/0x3b0 [ 248.984729][ T9681] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.984751][ T9681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.984782][ T9681] ? clear_bhb_loop+0x60/0xb0 [ 248.984806][ T9681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.984825][ T9681] RIP: 0033:0x7fd8fe38eec9 [ 248.984842][ T9681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.984859][ T9681] RSP: 002b:00007fd8ff201038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.984880][ T9681] RAX: ffffffffffffffda RBX: 00007fd8fe5e5fa0 RCX: 00007fd8fe38eec9 [ 248.984894][ T9681] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 248.984906][ T9681] RBP: 00007fd8ff201090 R08: 0000000000000000 R09: 0000000000000000 [ 248.984918][ T9681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.984930][ T9681] R13: 00007fd8fe5e6038 R14: 00007fd8fe5e5fa0 R15: 00007ffe70393c58 [ 248.984961][ T9681] [ 249.016389][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'. [ 249.280442][ T9688] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1115'. [ 249.350448][ T9692] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1115'. [ 249.364787][ T9684] netlink: 'syz.0.1114': attribute type 1 has an invalid length. [ 249.386127][ T9693] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.399021][ T9684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1114'. [ 249.409102][ T9692] 0{X: renamed from gretap0 [ 249.449582][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'. [ 249.514395][ T9692] 0{X: left promiscuous mode [ 249.519848][ T9692] 0{X: entered allmulticast mode [ 249.531157][ T9692] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 249.721698][ T9706] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1117'. [ 249.742302][ T9706] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1117'. [ 249.866109][ T9710] macvtap1: entered allmulticast mode [ 249.873778][ T9706] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 249.922047][ T9710] veth0_macvtap: entered allmulticast mode [ 249.990878][ T9719] bond0: entered allmulticast mode [ 250.010119][ T9719] bond_slave_0: entered allmulticast mode [ 250.033376][ T9719] bond_slave_1: entered allmulticast mode [ 250.059580][ T9719] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 250.330054][ T9726] netlink: 'syz.0.1125': attribute type 12 has an invalid length. [ 250.352389][ T9726] netlink: 'syz.0.1125': attribute type 1 has an invalid length. [ 250.551587][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.586006][ T9738] netlink: 'syz.2.1130': attribute type 10 has an invalid length. [ 250.614411][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.641072][ T9738] bridge_slave_1: left allmulticast mode [ 250.662260][ T9738] bridge_slave_1: left promiscuous mode [ 250.685107][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.794814][ T9738] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 251.461542][ T9782] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 251.470232][ T9782] bond2: option packets_per_slave: allowed values 0 - 65535 [ 251.480841][ T9782] bond2 (unregistering): Released all slaves [ 251.912916][ T51] Bluetooth: hci0: command tx timeout [ 251.980805][ T9794] netlink: 'syz.2.1146': attribute type 27 has an invalid length. [ 252.424918][ T9819] netlink: 'syz.4.1151': attribute type 1 has an invalid length. [ 253.040317][ T9858] FAULT_INJECTION: forcing a failure. [ 253.040317][ T9858] name failslab, interval 1, probability 0, space 0, times 0 [ 253.061402][ T9858] CPU: 1 UID: 0 PID: 9858 Comm: syz.1.1160 Not tainted syzkaller #0 PREEMPT(full) [ 253.061437][ T9858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 253.061451][ T9858] Call Trace: [ 253.061459][ T9858] [ 253.061468][ T9858] dump_stack_lvl+0x189/0x250 [ 253.061497][ T9858] ? __pfx____ratelimit+0x10/0x10 [ 253.061522][ T9858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.061547][ T9858] ? __pfx__printk+0x10/0x10 [ 253.061583][ T9858] ? __pfx___might_resched+0x10/0x10 [ 253.061608][ T9858] should_fail_ex+0x414/0x560 [ 253.061644][ T9858] should_failslab+0xa8/0x100 [ 253.061678][ T9858] __kmalloc_noprof+0xcb/0x4f0 [ 253.061705][ T9858] ? __kasan_kmalloc+0x93/0xb0 [ 253.061731][ T9858] ? nla_strdup+0x9d/0x140 [ 253.061758][ T9858] nla_strdup+0x9d/0x140 [ 253.061783][ T9858] nf_tables_newtable+0x491/0x1890 [ 253.061809][ T9858] ? nfnetlink_has_listeners+0x22/0x50 [ 253.061870][ T9858] nfnetlink_rcv+0x1132/0x2520 [ 253.061938][ T9858] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 253.062028][ T9858] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.062072][ T9858] netlink_unicast+0x82c/0x9e0 [ 253.062114][ T9858] ? __pfx_netlink_unicast+0x10/0x10 [ 253.062150][ T9858] ? netlink_sendmsg+0x642/0xb30 [ 253.062171][ T9858] ? skb_put+0x11b/0x210 [ 253.062200][ T9858] netlink_sendmsg+0x805/0xb30 [ 253.062234][ T9858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.062261][ T9858] ? aa_sock_msg_perm+0xf1/0x1d0 [ 253.062285][ T9858] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 253.062308][ T9858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.062333][ T9858] __sock_sendmsg+0x21c/0x270 [ 253.062367][ T9858] ____sys_sendmsg+0x505/0x830 [ 253.062404][ T9858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.062442][ T9858] ? import_iovec+0x74/0xa0 [ 253.062475][ T9858] ___sys_sendmsg+0x21f/0x2a0 [ 253.062505][ T9858] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.062571][ T9858] ? __fget_files+0x2a/0x420 [ 253.062589][ T9858] ? __fget_files+0x3a0/0x420 [ 253.062620][ T9858] __x64_sys_sendmsg+0x19b/0x260 [ 253.062652][ T9858] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 253.062690][ T9858] ? __pfx_ksys_write+0x10/0x10 [ 253.062717][ T9858] ? rcu_is_watching+0x15/0xb0 [ 253.062744][ T9858] ? do_syscall_64+0xbe/0x3b0 [ 253.062773][ T9858] do_syscall_64+0xfa/0x3b0 [ 253.062796][ T9858] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.062818][ T9858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.062839][ T9858] ? clear_bhb_loop+0x60/0xb0 [ 253.062872][ T9858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.062893][ T9858] RIP: 0033:0x7fb11d18eec9 [ 253.062912][ T9858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.062930][ T9858] RSP: 002b:00007fb11df61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.062953][ T9858] RAX: ffffffffffffffda RBX: 00007fb11d3e5fa0 RCX: 00007fb11d18eec9 [ 253.062969][ T9858] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 253.062982][ T9858] RBP: 00007fb11df61090 R08: 0000000000000000 R09: 0000000000000000 [ 253.062996][ T9858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.063008][ T9858] R13: 00007fb11d3e6038 R14: 00007fb11d3e5fa0 R15: 00007ffc9c706288 [ 253.063043][ T9858] [ 253.479994][ T9865] __nla_validate_parse: 10 callbacks suppressed [ 253.480015][ T9865] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1163'. [ 253.504283][ T9865] netlink: zone id is out of range [ 253.516970][ T9865] netlink: zone id is out of range [ 253.523848][ T9865] netlink: zone id is out of range [ 253.568859][ T9865] netlink: zone id is out of range [ 253.575305][ T9865] netlink: zone id is out of range [ 253.580445][ T9865] netlink: zone id is out of range [ 253.586670][ T9865] netlink: zone id is out of range [ 253.592568][ T9865] netlink: zone id is out of range [ 253.598084][ T9865] netlink: zone id is out of range [ 253.605973][ T9865] netlink: zone id is out of range [ 253.703779][ T9873] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 253.905707][ T9892] FAULT_INJECTION: forcing a failure. [ 253.905707][ T9892] name failslab, interval 1, probability 0, space 0, times 0 [ 253.923694][ T9892] CPU: 0 UID: 0 PID: 9892 Comm: syz.0.1174 Not tainted syzkaller #0 PREEMPT(full) [ 253.923724][ T9892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 253.923738][ T9892] Call Trace: [ 253.923758][ T9892] [ 253.923767][ T9892] dump_stack_lvl+0x189/0x250 [ 253.923798][ T9892] ? __pfx____ratelimit+0x10/0x10 [ 253.923821][ T9892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.923847][ T9892] ? __pfx__printk+0x10/0x10 [ 253.923884][ T9892] ? __pfx___might_resched+0x10/0x10 [ 253.923910][ T9892] should_fail_ex+0x414/0x560 [ 253.923949][ T9892] should_failslab+0xa8/0x100 [ 253.923982][ T9892] __kmalloc_noprof+0xcb/0x4f0 [ 253.924010][ T9892] ? __kasan_kmalloc+0x93/0xb0 [ 253.924037][ T9892] ? nla_strdup+0x9d/0x140 [ 253.924064][ T9892] nla_strdup+0x9d/0x140 [ 253.924089][ T9892] nf_tables_newtable+0x491/0x1890 [ 253.924115][ T9892] ? nfnetlink_has_listeners+0x22/0x50 [ 253.924170][ T9892] nfnetlink_rcv+0x1132/0x2520 [ 253.924238][ T9892] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 253.924290][ T9892] ? ref_tracker_free+0x63a/0x7d0 [ 253.924348][ T9892] ? __netlink_deliver_tap+0x807/0x850 [ 253.924373][ T9892] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.924415][ T9892] netlink_unicast+0x82c/0x9e0 [ 253.924459][ T9892] ? __pfx_netlink_unicast+0x10/0x10 [ 253.924495][ T9892] ? netlink_sendmsg+0x642/0xb30 [ 253.924516][ T9892] ? skb_put+0x11b/0x210 [ 253.924545][ T9892] netlink_sendmsg+0x805/0xb30 [ 253.924580][ T9892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.924608][ T9892] ? aa_sock_msg_perm+0xf1/0x1d0 [ 253.924632][ T9892] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 253.924655][ T9892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.924680][ T9892] __sock_sendmsg+0x21c/0x270 [ 253.924717][ T9892] ____sys_sendmsg+0x505/0x830 [ 253.924760][ T9892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.924799][ T9892] ? import_iovec+0x74/0xa0 [ 253.924831][ T9892] ___sys_sendmsg+0x21f/0x2a0 [ 253.924862][ T9892] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.924931][ T9892] ? __fget_files+0x2a/0x420 [ 253.925001][ T9892] ? __fget_files+0x3a0/0x420 [ 253.925033][ T9892] __x64_sys_sendmsg+0x19b/0x260 [ 253.925065][ T9892] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 253.925103][ T9892] ? __pfx_ksys_write+0x10/0x10 [ 253.925130][ T9892] ? rcu_is_watching+0x15/0xb0 [ 253.925158][ T9892] ? do_syscall_64+0xbe/0x3b0 [ 253.925187][ T9892] do_syscall_64+0xfa/0x3b0 [ 253.925210][ T9892] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.925233][ T9892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.925254][ T9892] ? clear_bhb_loop+0x60/0xb0 [ 253.925281][ T9892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.925301][ T9892] RIP: 0033:0x7f1c7718eec9 [ 253.925320][ T9892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.925339][ T9892] RSP: 002b:00007f1c780de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.925362][ T9892] RAX: ffffffffffffffda RBX: 00007f1c773e5fa0 RCX: 00007f1c7718eec9 [ 253.925378][ T9892] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 253.925391][ T9892] RBP: 00007f1c780de090 R08: 0000000000000000 R09: 0000000000000000 [ 253.925404][ T9892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.925417][ T9892] R13: 00007f1c773e6038 R14: 00007f1c773e5fa0 R15: 00007ffd44a80d38 [ 253.925450][ T9892] [ 253.928280][ T9895] sctp: [Deprecated]: syz.1.1175 (pid 9895) Use of int in max_burst socket option deprecated. [ 253.928280][ T9895] Use struct sctp_assoc_value instead [ 254.114978][ T9893] netlink: 'syz.3.1173': attribute type 10 has an invalid length. [ 254.230641][ T9909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1176'. [ 254.314264][ T9893] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.329784][ T9893] bridge_slave_1: left allmulticast mode [ 254.342583][ T9893] bridge_slave_1: left promiscuous mode [ 254.348469][ T9893] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.363696][ T9893] bridge_slave_1: entered allmulticast mode [ 254.370628][ T9893] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 254.419931][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1177'. [ 254.883559][ T9923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1178'. [ 255.037361][ T9938] netlink: 'syz.4.1183': attribute type 1 has an invalid length. [ 255.043485][ T9935] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1184'. [ 255.128851][ T9932] gretap2: entered promiscuous mode [ 255.175322][ T9939] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1184'. [ 255.180080][ T9938] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1183'. [ 255.377251][ T9956] FAULT_INJECTION: forcing a failure. [ 255.377251][ T9956] name failslab, interval 1, probability 0, space 0, times 0 [ 255.414814][ T9956] CPU: 1 UID: 0 PID: 9956 Comm: syz.0.1189 Not tainted syzkaller #0 PREEMPT(full) [ 255.414846][ T9956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 255.414861][ T9956] Call Trace: [ 255.414870][ T9956] [ 255.414880][ T9956] dump_stack_lvl+0x189/0x250 [ 255.414912][ T9956] ? __pfx____ratelimit+0x10/0x10 [ 255.415035][ T9956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.415066][ T9956] ? __pfx__printk+0x10/0x10 [ 255.415104][ T9956] ? __pfx___might_resched+0x10/0x10 [ 255.415124][ T9956] ? fs_reclaim_acquire+0x7d/0x100 [ 255.415150][ T9956] should_fail_ex+0x414/0x560 [ 255.415191][ T9956] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 255.415217][ T9956] should_failslab+0xa8/0x100 [ 255.415251][ T9956] __kvmalloc_node_noprof+0x161/0x5f0 [ 255.415285][ T9956] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 255.415318][ T9956] rhashtable_init_noprof+0x4ee/0xbb0 [ 255.415353][ T9956] rhltable_init_noprof+0x1e/0x60 [ 255.415381][ T9956] nf_tables_newtable+0x68f/0x1890 [ 255.415435][ T9956] nfnetlink_rcv+0x1132/0x2520 [ 255.415506][ T9956] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 255.415559][ T9956] ? ref_tracker_free+0x63a/0x7d0 [ 255.415627][ T9956] ? __netlink_deliver_tap+0x807/0x850 [ 255.415652][ T9956] ? netlink_deliver_tap+0x2e/0x1b0 [ 255.415698][ T9956] netlink_unicast+0x82c/0x9e0 [ 255.415744][ T9956] ? __pfx_netlink_unicast+0x10/0x10 [ 255.415792][ T9956] ? netlink_sendmsg+0x642/0xb30 [ 255.415815][ T9956] ? skb_put+0x11b/0x210 [ 255.415846][ T9956] netlink_sendmsg+0x805/0xb30 [ 255.415891][ T9956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.415919][ T9956] ? aa_sock_msg_perm+0xf1/0x1d0 [ 255.415944][ T9956] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 255.415966][ T9956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.415993][ T9956] __sock_sendmsg+0x21c/0x270 [ 255.416031][ T9956] ____sys_sendmsg+0x505/0x830 [ 255.416065][ T9956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.416104][ T9956] ? import_iovec+0x74/0xa0 [ 255.416137][ T9956] ___sys_sendmsg+0x21f/0x2a0 [ 255.416168][ T9956] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.416238][ T9956] ? __fget_files+0x2a/0x420 [ 255.416256][ T9956] ? __fget_files+0x3a0/0x420 [ 255.416288][ T9956] __x64_sys_sendmsg+0x19b/0x260 [ 255.416319][ T9956] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 255.416359][ T9956] ? __pfx_ksys_write+0x10/0x10 [ 255.416386][ T9956] ? rcu_is_watching+0x15/0xb0 [ 255.416414][ T9956] ? do_syscall_64+0xbe/0x3b0 [ 255.416443][ T9956] do_syscall_64+0xfa/0x3b0 [ 255.416467][ T9956] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.416489][ T9956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.416510][ T9956] ? clear_bhb_loop+0x60/0xb0 [ 255.416537][ T9956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.416559][ T9956] RIP: 0033:0x7f1c7718eec9 [ 255.416579][ T9956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.416598][ T9956] RSP: 002b:00007f1c780de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.416628][ T9956] RAX: ffffffffffffffda RBX: 00007f1c773e5fa0 RCX: 00007f1c7718eec9 [ 255.416644][ T9956] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 255.416658][ T9956] RBP: 00007f1c780de090 R08: 0000000000000000 R09: 0000000000000000 [ 255.416671][ T9956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.416684][ T9956] R13: 00007f1c773e6038 R14: 00007f1c773e5fa0 R15: 00007ffd44a80d38 [ 255.416745][ T9956] [ 255.765168][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.825731][ T9963] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1190'. [ 255.828051][ T9965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1192'. [ 255.901935][ T9969] netlink: 'syz.3.1193': attribute type 1 has an invalid length. [ 255.924671][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1190'. [ 255.956113][ T9965] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 255.967381][ T9965] bond3 (unregistering): Released all slaves [ 255.999655][ T9971] dvmrp1: entered allmulticast mode [ 256.029963][ T9960] veth1_macvtap: left promiscuous mode [ 256.087250][ T9972] FAULT_INJECTION: forcing a failure. [ 256.087250][ T9972] name failslab, interval 1, probability 0, space 0, times 0 [ 256.105825][ T9972] CPU: 0 UID: 0 PID: 9972 Comm: syz.3.1193 Not tainted syzkaller #0 PREEMPT(full) [ 256.105858][ T9972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 256.105871][ T9972] Call Trace: [ 256.105879][ T9972] [ 256.105887][ T9972] dump_stack_lvl+0x189/0x250 [ 256.105917][ T9972] ? __pfx____ratelimit+0x10/0x10 [ 256.105939][ T9972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.105963][ T9972] ? __pfx__printk+0x10/0x10 [ 256.105997][ T9972] ? __pfx___might_resched+0x10/0x10 [ 256.106015][ T9972] ? fs_reclaim_acquire+0x7d/0x100 [ 256.106039][ T9972] should_fail_ex+0x414/0x560 [ 256.106070][ T9972] should_failslab+0xa8/0x100 [ 256.106102][ T9972] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 256.106128][ T9972] ? __d_alloc+0x36/0x7a0 [ 256.106152][ T9972] __d_alloc+0x36/0x7a0 [ 256.106179][ T9972] d_alloc_parallel+0xe5/0x15e0 [ 256.106216][ T9972] ? __lock_acquire+0xab9/0xd20 [ 256.106271][ T9972] ? __pfx_d_alloc_parallel+0x10/0x10 [ 256.106301][ T9972] ? __raw_spin_lock_init+0x45/0x100 [ 256.106329][ T9972] ? __init_waitqueue_head+0xa9/0x150 [ 256.106359][ T9972] __lookup_slow+0x116/0x3d0 [ 256.106387][ T9972] ? __pfx___lookup_slow+0x10/0x10 [ 256.106421][ T9972] ? d_lookup+0x8a/0xa0 [ 256.106446][ T9972] ? lookup_noperm+0x112/0x220 [ 256.106474][ T9972] simple_start_creating+0xfd/0x1e0 [ 256.106496][ T9972] ? __pfx_simple_start_creating+0x10/0x10 [ 256.106530][ T9972] start_creating+0x10f/0x180 [ 256.106564][ T9972] __debugfs_create_file+0x79/0x4f0 [ 256.106603][ T9972] debugfs_create_file_full+0x3f/0x60 [ 256.106641][ T9972] ref_tracker_dir_debugfs+0x14e/0x270 [ 256.106663][ T9972] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 256.106719][ T9972] ? rcu_is_watching+0x15/0xb0 [ 256.106740][ T9972] ? alloc_netdev_mqs+0xa3/0x11b0 [ 256.106776][ T9972] ? __raw_spin_lock_init+0x45/0x100 [ 256.106834][ T9972] alloc_netdev_mqs+0x26f/0x11b0 [ 256.106872][ T9972] ? __pfx_ip6gre_tap_setup+0x10/0x10 [ 256.106908][ T9972] rtnl_create_link+0x31f/0xd10 [ 256.106950][ T9972] rtnl_newlink_create+0x25c/0xb00 [ 256.106984][ T9972] ? __mutex_lock+0x5bb/0x1350 [ 256.107016][ T9972] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 256.107048][ T9972] ? __pfx___mutex_lock+0x10/0x10 [ 256.107085][ T9972] ? ns_capable+0x8a/0xf0 [ 256.107112][ T9972] rtnl_newlink+0x16d6/0x1c70 [ 256.107138][ T9972] ? netlink_sendmsg+0x805/0xb30 [ 256.107176][ T9972] ? __pfx_rtnl_newlink+0x10/0x10 [ 256.107229][ T9972] ? kasan_quarantine_put+0xdd/0x220 [ 256.107257][ T9972] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.107287][ T9972] ? nlmon_xmit+0xb0/0x100 [ 256.107312][ T9972] ? kmem_cache_free+0x18f/0x400 [ 256.107351][ T9972] ? __local_bh_enable_ip+0x12d/0x1c0 [ 256.107374][ T9972] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.107399][ T9972] ? __local_bh_enable_ip+0x12d/0x1c0 [ 256.107420][ T9972] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 256.107448][ T9972] ? __dev_queue_xmit+0x27b/0x3b50 [ 256.107478][ T9972] ? __dev_queue_xmit+0x27b/0x3b50 [ 256.107507][ T9972] ? __dev_queue_xmit+0x27b/0x3b50 [ 256.107539][ T9972] ? __dev_queue_xmit+0x1d79/0x3b50 [ 256.107576][ T9972] ? __lock_acquire+0xab9/0xd20 [ 256.107639][ T9972] ? __pfx_rtnl_newlink+0x10/0x10 [ 256.107663][ T9972] rtnetlink_rcv_msg+0x7cc/0xb70 [ 256.107691][ T9972] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 256.107713][ T9972] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 256.107735][ T9972] ? ref_tracker_free+0x63a/0x7d0 [ 256.107756][ T9972] ? __asan_memcpy+0x40/0x70 [ 256.107781][ T9972] ? __pfx_ref_tracker_free+0x10/0x10 [ 256.107800][ T9972] ? __skb_clone+0x63/0x7a0 [ 256.107840][ T9972] netlink_rcv_skb+0x208/0x470 [ 256.107872][ T9972] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 256.107899][ T9972] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 256.107937][ T9972] ? netlink_deliver_tap+0x2e/0x1b0 [ 256.107971][ T9972] netlink_unicast+0x82c/0x9e0 [ 256.108027][ T9972] ? __pfx_netlink_unicast+0x10/0x10 [ 256.108063][ T9972] ? netlink_sendmsg+0x642/0xb30 [ 256.108103][ T9972] ? skb_put+0x11b/0x210 [ 256.108132][ T9972] netlink_sendmsg+0x805/0xb30 [ 256.108169][ T9972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.108198][ T9972] ? aa_sock_msg_perm+0xf1/0x1d0 [ 256.108223][ T9972] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 256.108247][ T9972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.108273][ T9972] __sock_sendmsg+0x21c/0x270 [ 256.108312][ T9972] ____sys_sendmsg+0x505/0x830 [ 256.108348][ T9972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.108388][ T9972] ? import_iovec+0x74/0xa0 [ 256.108422][ T9972] ___sys_sendmsg+0x21f/0x2a0 [ 256.108454][ T9972] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.108527][ T9972] ? __fget_files+0x2a/0x420 [ 256.108546][ T9972] ? __fget_files+0x3a0/0x420 [ 256.108579][ T9972] __x64_sys_sendmsg+0x19b/0x260 [ 256.108611][ T9972] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 256.108652][ T9972] ? __pfx_ksys_write+0x10/0x10 [ 256.108679][ T9972] ? rcu_is_watching+0x15/0xb0 [ 256.108707][ T9972] ? do_syscall_64+0xbe/0x3b0 [ 256.108737][ T9972] do_syscall_64+0xfa/0x3b0 [ 256.108761][ T9972] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.108783][ T9972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.108804][ T9972] ? clear_bhb_loop+0x60/0xb0 [ 256.108830][ T9972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.108867][ T9972] RIP: 0033:0x7fd8fe38eec9 [ 256.108886][ T9972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.108905][ T9972] RSP: 002b:00007fd8ff1e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.108927][ T9972] RAX: ffffffffffffffda RBX: 00007fd8fe5e6090 RCX: 00007fd8fe38eec9 [ 256.108943][ T9972] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 256.108957][ T9972] RBP: 00007fd8ff1e0090 R08: 0000000000000000 R09: 0000000000000000 [ 256.108971][ T9972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.108984][ T9972] R13: 00007fd8fe5e6128 R14: 00007fd8fe5e6090 R15: 00007ffe70393c58 [ 256.109019][ T9972] [ 256.133033][ T9972] bond2: (slave ip6gretap2): making interface the new active one [ 256.706297][ T9972] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 256.715160][ T9972] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 256.723736][ T9972] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 256.733006][ T9974] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 256.819669][ T9981] netlink: 'syz.3.1197': attribute type 11 has an invalid length. [ 256.937124][ T9984] bond4: option lp_interval: invalid value (0) [ 256.938888][ T9989] sctp: [Deprecated]: syz.0.1201 (pid 9989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.938888][ T9989] Use struct sctp_sack_info instead [ 256.949939][ T9984] bond4: option lp_interval: allowed values 1 - 2147483647 [ 256.972475][ T9984] bond4 (unregistering): Released all slaves [ 257.739213][T10037] netlink: 'syz.4.1214': attribute type 13 has an invalid length. [ 258.374123][T10078] bridge6: port 1(veth3) entered blocking state [ 258.392942][T10078] bridge6: port 1(veth3) entered disabled state [ 258.399966][T10078] veth3: entered allmulticast mode [ 258.438911][T10078] veth3: entered promiscuous mode [ 258.530573][T10086] bridge6: port 2(veth5) entered blocking state [ 258.538843][T10086] bridge6: port 2(veth5) entered disabled state [ 258.551936][T10086] veth5: entered allmulticast mode [ 258.570667][T10086] veth5: entered promiscuous mode [ 258.894266][T10118] sctp: [Deprecated]: syz.0.1241 (pid 10118) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.894266][T10118] Use struct sctp_sack_info instead [ 258.923038][T10121] __nla_validate_parse: 18 callbacks suppressed [ 258.923058][T10121] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1243'. [ 258.981077][T10124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1244'. [ 259.347267][T10154] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1250'. [ 259.610681][T10167] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1254'. [ 259.643880][T10167] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1254'. [ 259.734825][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1254'. [ 260.035213][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1261'. [ 260.458570][T10207] FAULT_INJECTION: forcing a failure. [ 260.458570][T10207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.485046][T10207] CPU: 0 UID: 0 PID: 10207 Comm: syz.2.1270 Not tainted syzkaller #0 PREEMPT(full) [ 260.485075][T10207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 260.485088][T10207] Call Trace: [ 260.485095][T10207] [ 260.485104][T10207] dump_stack_lvl+0x189/0x250 [ 260.485133][T10207] ? __pfx____ratelimit+0x10/0x10 [ 260.485154][T10207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.485178][T10207] ? __pfx__printk+0x10/0x10 [ 260.485206][T10207] ? __might_fault+0xb0/0x130 [ 260.485245][T10207] should_fail_ex+0x414/0x560 [ 260.485279][T10207] _copy_from_user+0x2d/0xb0 [ 260.485305][T10207] core_sys_select+0x4b7/0xa20 [ 260.485353][T10207] ? __pfx_core_sys_select+0x10/0x10 [ 260.485407][T10207] ? __pfx_set_user_sigmask+0x10/0x10 [ 260.485440][T10207] __se_sys_pselect6+0x27a/0x300 [ 260.485474][T10207] ? __pfx___se_sys_pselect6+0x10/0x10 [ 260.485503][T10207] ? __pfx_ksys_write+0x10/0x10 [ 260.485526][T10207] ? rcu_is_watching+0x15/0xb0 [ 260.485552][T10207] ? __x64_sys_pselect6+0x21/0xf0 [ 260.485582][T10207] do_syscall_64+0xfa/0x3b0 [ 260.485604][T10207] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.485624][T10207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.485643][T10207] ? clear_bhb_loop+0x60/0xb0 [ 260.485667][T10207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.485704][T10207] RIP: 0033:0x7f98f238eec9 [ 260.485723][T10207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.485741][T10207] RSP: 002b:00007f98f3144038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 260.485762][T10207] RAX: ffffffffffffffda RBX: 00007f98f25e5fa0 RCX: 00007f98f238eec9 [ 260.485778][T10207] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 260.485792][T10207] RBP: 00007f98f3144090 R08: 0000000000000000 R09: 0000000000000000 [ 260.485805][T10207] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 260.485818][T10207] R13: 00007f98f25e6038 R14: 00007f98f25e5fa0 R15: 00007fffbd2a9cd8 [ 260.485852][T10207] [ 260.728409][T10209] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1271'. [ 260.739411][T10209] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1271'. [ 260.752540][T10211] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1272'. [ 260.827905][T10219] net_ratelimit: 776 callbacks suppressed [ 260.827928][T10219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.869803][T10224] bridge_slave_0: invalid flags given to default FDB implementation [ 261.333550][T10252] gretap2: entered promiscuous mode [ 261.338905][T10252] gretap2: entered allmulticast mode [ 261.562766][T10265] FAULT_INJECTION: forcing a failure. [ 261.562766][T10265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.594392][T10265] CPU: 1 UID: 0 PID: 10265 Comm: syz.1.1287 Not tainted syzkaller #0 PREEMPT(full) [ 261.594422][T10265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 261.594436][T10265] Call Trace: [ 261.594444][T10265] [ 261.594453][T10265] dump_stack_lvl+0x189/0x250 [ 261.594483][T10265] ? __pfx____ratelimit+0x10/0x10 [ 261.594507][T10265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.594532][T10265] ? __pfx__printk+0x10/0x10 [ 261.594562][T10265] ? __might_fault+0xb0/0x130 [ 261.594603][T10265] should_fail_ex+0x414/0x560 [ 261.594641][T10265] _copy_from_user+0x2d/0xb0 [ 261.594670][T10265] core_sys_select+0x604/0xa20 [ 261.594712][T10265] ? __pfx_core_sys_select+0x10/0x10 [ 261.594776][T10265] ? __pfx_set_user_sigmask+0x10/0x10 [ 261.594810][T10265] __se_sys_pselect6+0x27a/0x300 [ 261.594849][T10265] ? __pfx___se_sys_pselect6+0x10/0x10 [ 261.594880][T10265] ? __pfx_ksys_write+0x10/0x10 [ 261.594906][T10265] ? rcu_is_watching+0x15/0xb0 [ 261.594933][T10265] ? __x64_sys_pselect6+0x21/0xf0 [ 261.594965][T10265] do_syscall_64+0xfa/0x3b0 [ 261.594991][T10265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.595011][T10265] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 261.595033][T10265] ? clear_bhb_loop+0x60/0xb0 [ 261.595059][T10265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.595079][T10265] RIP: 0033:0x7fb11d18eec9 [ 261.595097][T10265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.595115][T10265] RSP: 002b:00007fb11df61038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 261.595138][T10265] RAX: ffffffffffffffda RBX: 00007fb11d3e5fa0 RCX: 00007fb11d18eec9 [ 261.595153][T10265] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 261.595179][T10265] RBP: 00007fb11df61090 R08: 0000000000000000 R09: 0000000000000000 [ 261.595191][T10265] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 261.595203][T10265] R13: 00007fb11d3e6038 R14: 00007fb11d3e5fa0 R15: 00007ffc9c706288 [ 261.595245][T10265] [ 262.321624][T10305] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 262.372791][T10305] openvswitch: netlink: Actions may not be safe on all matching packets [ 262.464255][T10318] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 262.500510][T10312] netlink: 'syz.3.1304': attribute type 3 has an invalid length. [ 262.530780][T10312] netlink: 'syz.3.1304': attribute type 3 has an invalid length. [ 262.558282][T10312] netlink: 'syz.3.1304': attribute type 3 has an invalid length. [ 262.569341][T10312] netlink: 'syz.3.1304': attribute type 3 has an invalid length. [ 262.580794][T10312] netlink: 'syz.3.1304': attribute type 3 has an invalid length. [ 262.589853][T10312] netlink: 'syz.3.1304': attribute type 3 has an invalid length. [ 262.598022][T10312] netlink: 'syz.3.1304': attribute type 3 has an invalid length. [ 262.607946][T10312] netlink: 'syz.3.1304': attribute type 3 has an invalid length. [ 262.616059][T10312] netlink: 'syz.3.1304': attribute type 3 has an invalid length. [ 262.625387][T10312] netlink: 'syz.3.1304': attribute type 3 has an invalid length. [ 263.490860][T10368] tipc: Enabling of bearer rejected, failed to enable media [ 263.935023][ T5986] IPVS: starting estimator thread 0... [ 263.947233][T10392] IPVS: ip_vs_add_dest(): server weight less than zero [ 264.052687][T10393] IPVS: using max 28 ests per chain, 67200 per kthread [ 264.713187][T10419] __nla_validate_parse: 15 callbacks suppressed [ 264.713207][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1335'. [ 264.884991][T10429] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1339'. [ 265.310317][T10437] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1340'. [ 265.323565][T10437] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 265.331107][T10437] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 265.348198][T10437] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 265.414616][T10441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1341'. [ 265.447147][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1341'. [ 265.493293][T10441] xfrm1: entered promiscuous mode [ 265.512066][T10441] xfrm1: entered allmulticast mode [ 265.532449][T10441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1341'. [ 265.542489][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1341'. [ 266.251578][T10484] bond6: (slave ip6gretap2): making interface the new active one [ 266.259999][T10484] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 266.268787][T10484] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 266.277059][T10484] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 267.212684][T10555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.350448][T10566] team0: Port device dummy0 added [ 267.468588][T10576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1387'. [ 267.536078][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'. [ 267.647091][T10591] validate_nla: 54 callbacks suppressed [ 267.647111][T10591] netlink: 'syz.2.1391': attribute type 21 has an invalid length. [ 267.663121][T10591] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1391'. [ 267.845704][T10604] netlink: 'syz.4.1396': attribute type 10 has an invalid length. [ 267.904319][T10604] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 268.086772][T10611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.158882][T10615] netlink: 'syz.1.1401': attribute type 1 has an invalid length. [ 268.218987][T10620] netlink: 'syz.0.1403': attribute type 19 has an invalid length. [ 268.230366][T10620] netlink: 'syz.0.1403': attribute type 19 has an invalid length. [ 268.259697][T10620] netlink: 'syz.0.1403': attribute type 1 has an invalid length. [ 268.289687][T10620] netlink: 'syz.0.1403': attribute type 24 has an invalid length. [ 268.346955][T10627] netlink: 'syz.0.1403': attribute type 19 has an invalid length. [ 268.668849][T10648] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 268.699190][T10648] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.708345][T10648] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.516653][T10673] netlink: 'syz.2.1417': attribute type 12 has an invalid length. [ 270.123000][T10698] netlink: 'syz.0.1424': attribute type 8 has an invalid length. [ 270.547303][T10717] __nla_validate_parse: 7 callbacks suppressed [ 270.547324][T10717] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1430'. [ 270.740030][T10724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1432'. [ 270.886516][T10730] pimreg3: entered allmulticast mode [ 270.912539][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'. [ 271.161321][T10749] bridge_slave_1: left allmulticast mode [ 271.169674][T10749] bridge_slave_1: left promiscuous mode [ 271.175899][T10749] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.198982][T10749] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 271.506668][T10764] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1445'. [ 271.753948][T10775] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1448'. [ 271.813819][T10773] tipc: Enabled bearer , priority 0 [ 271.854886][T10773] syzkaller0: entered promiscuous mode [ 271.880081][T10773] syzkaller0: entered allmulticast mode [ 271.964568][T10783] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 272.128866][T10771] tipc: Resetting bearer [ 272.179155][T10771] tipc: Disabling bearer [ 272.215287][T10793] netlink: 'syz.2.1454': attribute type 11 has an invalid length. [ 272.244292][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 272.254194][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1453'. [ 272.544944][T10807] tipc: Enabled bearer , priority 0 [ 272.569965][T10810] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1459'. [ 272.606543][T10807] syzkaller0: entered promiscuous mode [ 272.621698][T10807] syzkaller0: entered allmulticast mode [ 272.696528][T10807] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1458'. [ 272.738264][T10807] tipc: Resetting bearer [ 272.788781][T10805] tipc: Resetting bearer [ 272.833599][T10805] tipc: Disabling bearer [ 272.863849][T10820] syzkaller1: entered promiscuous mode [ 272.869453][T10820] syzkaller1: entered allmulticast mode [ 272.928703][T10824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1465'. [ 273.058132][T10831] bond4: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 273.846877][T10885] syzkaller0: entered promiscuous mode [ 273.857445][T10885] syzkaller0: entered allmulticast mode [ 276.196901][T10948] __nla_validate_parse: 8 callbacks suppressed [ 276.196923][T10948] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1507'. [ 276.302924][T10956] pim6reg1: entered promiscuous mode [ 276.323745][T10956] pim6reg1: entered allmulticast mode [ 276.394891][T10964] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1510'. [ 276.610321][T10979] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1514'. [ 276.652918][T10982] ieee802154 phy0 wpan0: encryption failed: -22 [ 276.920995][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1519'. [ 276.961975][T10998] validate_nla: 2 callbacks suppressed [ 276.961997][T10998] netlink: 'syz.4.1521': attribute type 1 has an invalid length. [ 277.110169][T11014] netlink: 'syz.0.1526': attribute type 178 has an invalid length. [ 277.120076][T11014] sock: sock_timestamping_bind_phc: sock not bind to device [ 277.343360][T11025] ip6gretap0: Device is already in use. [ 277.407904][T11031] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1531'. [ 277.436876][T11028] netlink: 'syz.0.1530': attribute type 10 has an invalid length. [ 277.476591][T11028] team0: Device dummy0 failed to register rx_handler [ 277.798401][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1537'. [ 277.814042][T11054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1537'. [ 277.828787][T11060] netlink: 'syz.1.1539': attribute type 1 has an invalid length. [ 277.880238][T11060] netlink: 'syz.1.1539': attribute type 3 has an invalid length. [ 277.906539][T11060] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1539'. [ 277.947727][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1541'. [ 278.167041][T11075] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.1543'. [ 278.384453][T11085] sit1: entered promiscuous mode [ 278.392979][T11085] sit1: entered allmulticast mode [ 278.671863][T11100] 0{X: left allmulticast mode [ 278.789924][T11100] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.868783][T11115] netlink: 'syz.1.1557': attribute type 5 has an invalid length. [ 278.904566][T11100] bridge_slave_0: left allmulticast mode [ 278.910331][T11100] bridge_slave_0: left promiscuous mode [ 278.916348][T11100] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.931194][T11100] bond0: (slave bridge_slave_1): Releasing backup interface [ 278.939381][T11100] bridge_slave_1: left allmulticast mode [ 278.956331][T11100] bond0: (slave bond_slave_0): Releasing backup interface [ 278.964189][T11100] bond_slave_0: left allmulticast mode [ 278.977422][T11100] bond0: (slave bond_slave_1): Releasing backup interface [ 278.986118][T11100] bond_slave_1: left allmulticast mode [ 279.000100][T11100] team0: Port device C removed [ 279.011773][T11100] team0: Port device team_slave_1 removed [ 279.021679][T11100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.032858][T11100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.045346][T11100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.057040][T11100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.137974][T11100] vlan2: left allmulticast mode [ 279.143400][T11100] bond0: left allmulticast mode [ 279.157210][T11100] bond1: (slave ip6gretap1): Releasing active interface [ 279.168535][T11100] bond2: (slave ip6gretap2): Releasing active interface [ 279.264319][T11118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.285744][T11114] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.437693][ T8858] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.446478][ T8858] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.486414][T11114] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.532869][ T8858] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.551236][ T8858] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.670588][T11114] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.800444][T11114] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.025185][ T8848] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.101075][ T8858] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.175712][ T8858] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.246038][ T8858] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.583573][T11174] FAULT_INJECTION: forcing a failure. [ 280.583573][T11174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.635058][T11174] CPU: 0 UID: 0 PID: 11174 Comm: syz.1.1577 Not tainted syzkaller #0 PREEMPT(full) [ 280.635087][T11174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 280.635101][T11174] Call Trace: [ 280.635109][T11174] [ 280.635118][T11174] dump_stack_lvl+0x189/0x250 [ 280.635150][T11174] ? __pfx____ratelimit+0x10/0x10 [ 280.635173][T11174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.635198][T11174] ? __pfx__printk+0x10/0x10 [ 280.635251][T11174] should_fail_ex+0x414/0x560 [ 280.635288][T11174] _copy_from_user+0x2d/0xb0 [ 280.635322][T11174] __copy_msghdr+0x3c5/0x5b0 [ 280.635354][T11174] ___sys_sendmsg+0x1a5/0x2a0 [ 280.635383][T11174] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.635449][T11174] ? __fget_files+0x2a/0x420 [ 280.635467][T11174] ? __fget_files+0x3a0/0x420 [ 280.635507][T11174] __sys_sendmmsg+0x227/0x430 [ 280.635556][T11174] ? __pfx___sys_sendmmsg+0x10/0x10 [ 280.635586][T11174] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 280.635640][T11174] ? ksys_write+0x22a/0x250 [ 280.635670][T11174] ? __pfx_ksys_write+0x10/0x10 [ 280.635695][T11174] ? rcu_is_watching+0x15/0xb0 [ 280.635724][T11174] __x64_sys_sendmmsg+0xa0/0xc0 [ 280.635754][T11174] do_syscall_64+0xfa/0x3b0 [ 280.635776][T11174] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.635799][T11174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.635820][T11174] ? clear_bhb_loop+0x60/0xb0 [ 280.635846][T11174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.635867][T11174] RIP: 0033:0x7fb11d18eec9 [ 280.635886][T11174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.635905][T11174] RSP: 002b:00007fb11df61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 280.635928][T11174] RAX: ffffffffffffffda RBX: 00007fb11d3e5fa0 RCX: 00007fb11d18eec9 [ 280.635944][T11174] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 280.635957][T11174] RBP: 00007fb11df61090 R08: 0000000000000000 R09: 0000000000000000 [ 280.635971][T11174] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 280.635983][T11174] R13: 00007fb11d3e6038 R14: 00007fb11d3e5fa0 R15: 00007ffc9c706288 [ 280.636020][T11174] [ 281.570555][T11211] __nla_validate_parse: 9 callbacks suppressed [ 281.570577][T11211] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1585'. [ 282.274439][T11240] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1598'. [ 282.302447][T11241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1597'. [ 282.468032][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1601'. [ 282.543119][T11258] veth0: entered promiscuous mode [ 282.549141][T11258] veth0: left promiscuous mode [ 282.574187][T11259] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 282.856251][T11268] netlink: 'syz.2.1605': attribute type 33 has an invalid length. [ 282.883715][T11268] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 282.898360][T11268] bond3 (unregistering): Released all slaves [ 283.271792][T11281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1609'. [ 283.451647][T11290] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 283.680121][T11304] C: entered promiscuous mode [ 283.697052][T11304] tunl0: entered promiscuous mode [ 283.726387][T11304] gre0: entered promiscuous mode [ 283.784478][T11304] gretap0: entered promiscuous mode [ 283.865647][T11314] netlink: 'syz.1.1620': attribute type 2 has an invalid length. [ 283.980214][T11304] erspan0: entered promiscuous mode [ 284.035599][T11304] ip_vti0: entered promiscuous mode [ 284.275126][ T8848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.286379][ T8848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.360736][T11328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.400756][T11335] netlink: 'syz.2.1628': attribute type 5 has an invalid length. [ 284.408939][T11328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.423814][T11336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1626'. [ 284.526362][T11336] sctp: [Deprecated]: syz.3.1626 (pid 11336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.526362][T11336] Use struct sctp_sack_info instead [ 284.563312][T11341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1629'. [ 284.611129][T11344] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1630'. [ 284.700390][T11348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1634'. [ 284.726756][T11353] netlink: 'syz.2.1635': attribute type 10 has an invalid length. [ 284.741087][T11352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1632'. [ 284.785251][T11353] netlink: 'syz.2.1635': attribute type 10 has an invalid length. [ 284.828624][T11358] netlink: 'syz.4.1634': attribute type 4 has an invalid length. [ 284.931102][T11352] bond0 (unregistering): Released all slaves [ 284.970247][T11353] team0: Port device dummy0 removed [ 284.986356][T11353] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 285.202931][T11373] FAULT_INJECTION: forcing a failure. [ 285.202931][T11373] name failslab, interval 1, probability 0, space 0, times 0 [ 285.217400][T11373] CPU: 1 UID: 0 PID: 11373 Comm: syz.4.1640 Not tainted syzkaller #0 PREEMPT(full) [ 285.217430][T11373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 285.217445][T11373] Call Trace: [ 285.217454][T11373] [ 285.217464][T11373] dump_stack_lvl+0x189/0x250 [ 285.217505][T11373] ? __pfx____ratelimit+0x10/0x10 [ 285.217530][T11373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.217557][T11373] ? __pfx__printk+0x10/0x10 [ 285.217595][T11373] ? __pfx___might_resched+0x10/0x10 [ 285.217623][T11373] should_fail_ex+0x414/0x560 [ 285.217661][T11373] should_failslab+0xa8/0x100 [ 285.217697][T11373] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 285.217729][T11373] ? __kasan_kmalloc+0x93/0xb0 [ 285.217757][T11373] ? ip6_setup_cork+0x6c1/0x10e0 [ 285.217798][T11373] kmemdup_noprof+0x2b/0x70 [ 285.217824][T11373] ip6_setup_cork+0x6c1/0x10e0 [ 285.217869][T11373] ip6_make_skb+0x1bd/0x410 [ 285.217888][T11373] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 285.217926][T11373] ? __pfx_ip6_make_skb+0x10/0x10 [ 285.217957][T11373] ? sk_dst_check+0x25/0x480 [ 285.217994][T11373] ? udpv6_sendmsg+0x1656/0x24b0 [ 285.218029][T11373] udpv6_sendmsg+0x1b78/0x24b0 [ 285.218092][T11373] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 285.218126][T11373] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 285.218162][T11373] ? __lock_acquire+0xab9/0xd20 [ 285.218209][T11373] ? __local_bh_enable_ip+0x12d/0x1c0 [ 285.218229][T11373] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 285.218257][T11373] ? inet_send_prepare+0x1b9/0x270 [ 285.218307][T11373] ? inet_send_prepare+0x1b9/0x270 [ 285.218342][T11373] ? inet6_sendmsg+0xe4/0x120 [ 285.218370][T11373] __sock_sendmsg+0xe5/0x270 [ 285.218408][T11373] ____sys_sendmsg+0x52d/0x830 [ 285.218442][T11373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.218480][T11373] ? import_iovec+0x74/0xa0 [ 285.218519][T11373] ___sys_sendmsg+0x21f/0x2a0 [ 285.218549][T11373] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.218574][T11373] ? rcu_is_watching+0x15/0xb0 [ 285.218635][T11373] ? __fget_files+0x2a/0x420 [ 285.218654][T11373] ? __fget_files+0x3a0/0x420 [ 285.218684][T11373] __sys_sendmmsg+0x227/0x430 [ 285.218719][T11373] ? __pfx___sys_sendmmsg+0x10/0x10 [ 285.218782][T11373] ? rcu_is_watching+0x15/0xb0 [ 285.218811][T11373] __x64_sys_sendmmsg+0xa0/0xc0 [ 285.218841][T11373] do_syscall_64+0xfa/0x3b0 [ 285.218865][T11373] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.218887][T11373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.218908][T11373] ? clear_bhb_loop+0x60/0xb0 [ 285.218934][T11373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.218955][T11373] RIP: 0033:0x7f697698eec9 [ 285.218974][T11373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.218992][T11373] RSP: 002b:00007f697775d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 285.219015][T11373] RAX: ffffffffffffffda RBX: 00007f6976be5fa0 RCX: 00007f697698eec9 [ 285.219031][T11373] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 285.219045][T11373] RBP: 00007f697775d090 R08: 0000000000000000 R09: 0000000000000000 [ 285.219059][T11373] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 285.219072][T11373] R13: 00007f6976be6038 R14: 00007f6976be5fa0 R15: 00007ffdd5eff7c8 [ 285.219106][T11373] [ 285.744115][T11383] tipc: Enabling of bearer rejected, already enabled [ 285.798325][T11387] netlink: 'syz.2.1645': attribute type 3 has an invalid length. [ 285.887154][T11393] netlink: 'syz.0.1647': attribute type 1 has an invalid length. [ 285.940952][T11393] 8021q: adding VLAN 0 to HW filter on device bond7 [ 286.029769][T11398] bond7: (slave geneve2): making interface the new active one [ 286.050487][T11398] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 286.137478][T11408] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 286.467935][T11426] can: request_module (can-proto-5) failed. [ 286.589066][T11434] tipc: Enabled bearer , priority 0 [ 286.598409][T11434] syzkaller0: entered promiscuous mode [ 286.606346][T11434] syzkaller0: entered allmulticast mode [ 286.658821][T11434] tipc: Resetting bearer [ 286.700882][T11431] tipc: Resetting bearer [ 286.725731][T11443] __nla_validate_parse: 6 callbacks suppressed [ 286.725749][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1665'. [ 286.744874][T11431] tipc: Disabling bearer [ 287.233053][T11473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1673'. [ 287.533249][T11493] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1678'. [ 287.739707][T11501] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1682'. [ 287.756849][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1682'. [ 287.828491][T11510] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1685'. [ 288.075237][T11528] tunl0: entered promiscuous mode [ 288.080697][T11528] netlink: 'syz.3.1687': attribute type 3 has an invalid length. [ 288.098546][T11528] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1687'. [ 288.230073][T11535] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1690'. [ 288.246444][T11538] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 288.248819][T11541] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1690'. [ 288.641590][T11561] netlink: 'syz.2.1695': attribute type 33 has an invalid length. [ 288.780764][T11563] policy can only be matched on NF_INET_PRE_ROUTING [ 288.780785][T11563] unable to load match [ 288.964432][T11578] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 289.005932][T11578] netlink: 'syz.1.1697': attribute type 1 has an invalid length. [ 289.075089][T11580] 8021q: adding VLAN 0 to HW filter on device bond8 [ 289.112498][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1701'. [ 289.147894][T11578] bond6: entered promiscuous mode [ 289.164404][T11578] 8021q: adding VLAN 0 to HW filter on device bond6 [ 289.179095][T11598] Bluetooth: MGMT ver 1.23 [ 289.277737][T11602] bond6: (slave bridge8): making interface the new active one [ 289.285740][T11602] bridge8: entered promiscuous mode [ 289.296042][T11602] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 289.573700][T11621] netlink: 'syz.2.1711': attribute type 1 has an invalid length. [ 289.701665][T11630] netlink: 'syz.3.1714': attribute type 11 has an invalid length. [ 289.879812][T11645] syz_tun: entered allmulticast mode [ 289.893975][T11645] syz_tun: left allmulticast mode [ 289.917862][T11645] netlink: 'syz.1.1718': attribute type 12 has an invalid length. [ 290.032146][T11653] pim6reg1: entered promiscuous mode [ 290.037583][T11653] pim6reg1: entered allmulticast mode [ 290.285132][T11666] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 290.538118][T11684] netlink: 'syz.2.1730': attribute type 4 has an invalid length. [ 291.195197][T11700] netlink: 'syz.1.1735': attribute type 4 has an invalid length. [ 291.230651][T11704] netlink: 'syz.1.1735': attribute type 4 has an invalid length. [ 291.435100][T11713] veth0: entered promiscuous mode [ 291.453336][T11713] veth0: left promiscuous mode [ 291.659707][T11730] tipc: Enabled bearer , priority 0 [ 291.669080][T11730] syzkaller0: entered promiscuous mode [ 291.688070][T11730] syzkaller0: entered allmulticast mode [ 291.741184][T11737] __nla_validate_parse: 12 callbacks suppressed [ 291.741203][T11737] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1749'. [ 291.759181][T11730] tipc: Resetting bearer [ 291.816544][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1751'. [ 291.817183][T11730] tipc: Disabling bearer [ 291.929366][T11741] macvlan2: entered promiscuous mode [ 291.936208][T11741] macvlan2: entered allmulticast mode [ 291.943549][T11741] bond9: (slave macvlan2): Opening slave failed [ 292.009541][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1753'. [ 292.106929][T11746] netlink: 1476 bytes leftover after parsing attributes in process `syz.2.1752'. [ 292.148376][T11761] openvswitch: netlink: Duplicate or invalid key (type 0). [ 292.155914][T11761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.309589][T11766] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1757'. [ 292.546195][T11780] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1763'. [ 292.557449][T11781] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1764'. [ 292.736337][T11788] netlink: 'syz.2.1766': attribute type 1 has an invalid length. [ 292.747593][T11788] netlink: 'syz.2.1766': attribute type 3 has an invalid length. [ 292.760764][T11791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1767'. [ 292.770899][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1767'. [ 292.954016][T11795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1770'. [ 293.287694][T11821] syzkaller1: entered promiscuous mode [ 293.295546][T11821] syzkaller1: entered allmulticast mode [ 293.359903][T11827] tipc: Enabling of bearer rejected, failed to enable media [ 294.587776][T11879] validate_nla: 1 callbacks suppressed [ 294.587807][T11879] netlink: 'syz.3.1793': attribute type 50 has an invalid length. [ 294.616257][T11872] netlink: 'syz.3.1793': attribute type 50 has an invalid length. [ 295.112943][T11906] openvswitch: netlink: Duplicate or invalid key (type 0). [ 295.121110][T11906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.305699][ T8849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.328534][ T8849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.360946][T11919] netlink: 'syz.1.1810': attribute type 1 has an invalid length. [ 295.367198][T11923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.427550][T11919] 8021q: adding VLAN 0 to HW filter on device bond7 [ 295.509517][T11926] veth7: entered promiscuous mode [ 295.526258][T11926] bond7: (slave veth7): Enslaving as an active interface with a down link [ 295.557316][T11919] bond7: entered allmulticast mode [ 295.596454][T11926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.694265][T11940] netlink: 'syz.4.1817': attribute type 2 has an invalid length. [ 295.844962][T11946] team0: Device gtp0 is of different type [ 296.012221][T11952] : renamed from veth1_vlan (while UP) [ 296.035177][T11954] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 296.061175][T11954] netlink: 'syz.4.1822': attribute type 1 has an invalid length. [ 296.113354][T11954] 8021q: adding VLAN 0 to HW filter on device bond8 [ 296.188906][T11960] bond8: (slave geneve2): making interface the new active one [ 296.198761][T11960] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 296.291041][T11968] netlink: 'syz.1.1826': attribute type 9 has an invalid length. [ 296.330574][T11969] netlink: 'syz.0.1825': attribute type 1 has an invalid length. [ 296.794578][T11990] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 296.812360][T11990] bond4 (unregistering): Released all slaves [ 296.874090][T11987] __nla_validate_parse: 20 callbacks suppressed [ 296.874110][T11987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1831'. [ 296.964224][T12002] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1832'. [ 297.349106][T12017] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1840'. [ 297.360301][T12017] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1840'. [ 297.422044][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1840'. [ 297.572769][T12036] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1843'. [ 297.920647][T12055] netlink: 'syz.4.1849': attribute type 4 has an invalid length. [ 297.968998][T12055] netlink: 'syz.4.1849': attribute type 4 has an invalid length. [ 297.981222][T12057] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 298.218256][T12057] netlink: 'syz.1.1853': attribute type 1 has an invalid length. [ 298.279254][T12070] veth7: entered allmulticast mode [ 298.316386][T12057] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1853'. [ 298.473204][T12085] pim6reg1: entered promiscuous mode [ 298.497425][T12085] pim6reg1: entered allmulticast mode [ 298.513658][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 298.810060][T12101] tipc: Enabled bearer , priority 0 [ 298.904127][T12101] syzkaller0: entered promiscuous mode [ 298.909767][T12101] syzkaller0: entered allmulticast mode [ 298.920837][T12101] tipc: Resetting bearer [ 299.009511][T12099] tipc: Resetting bearer [ 299.103064][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1869'. [ 299.124842][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1869'. [ 299.879511][ T5971] tipc: Node number set to 2225305903 [ 300.370260][T12155] validate_nla: 1 callbacks suppressed [ 300.370280][T12155] netlink: 'syz.0.1876': attribute type 21 has an invalid length. [ 300.736888][T12099] tipc: Disabling bearer [ 300.749570][T12122] veth0_macvtap: left promiscuous mode [ 300.755631][T12122] macvtap0: entered allmulticast mode [ 300.765421][T12122] macvtap0: refused to change device tx_queue_len [ 300.772053][T12131] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 300.795420][T12155] netlink: 'syz.0.1876': attribute type 1 has an invalid length. [ 301.333166][T12189] netlink: 'syz.2.1885': attribute type 13 has an invalid length. [ 301.359291][T12195] netlink: 'syz.4.1887': attribute type 24 has an invalid length. [ 304.879385][T12243] __nla_validate_parse: 6 callbacks suppressed [ 304.879407][T12243] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1899'. [ 304.930256][T12245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1900'. [ 305.073333][T12254] netlink: 'syz.3.1904': attribute type 15 has an invalid length. [ 305.096471][T12254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1904'. [ 305.125791][T12254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1904'. [ 305.142176][T12262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1901'. [ 305.590739][T12286] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1909'. [ 305.702659][T12293] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1911'. [ 305.729618][T12292] bridge0: port 1(batadv1) entered blocking state [ 305.737223][T12292] bridge0: port 1(batadv1) entered disabled state [ 305.740859][T12287] netlink: 'syz.4.1911': attribute type 1 has an invalid length. [ 305.753925][T12292] batadv1: entered allmulticast mode [ 305.762497][T12287] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1911'. [ 305.778457][T12292] batadv1: entered promiscuous mode [ 306.010221][T12311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.233680][ T1116] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 306.243623][ T1116] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 306.378132][T12335] netlink: 'syz.3.1923': attribute type 4 has an invalid length. [ 306.427897][T12338] : entered promiscuous mode [ 306.475069][T12338] team0: Device gtp1 is of different type [ 306.540982][T12330] syz.4.1924 (12330) used greatest stack depth: 15352 bytes left [ 306.651842][T12346] tipc: Enabling of bearer rejected, failed to enable media [ 306.781041][T12355] netlink: 'syz.2.1932': attribute type 1 has an invalid length. [ 306.793461][T12356] netlink: 'syz.0.1931': attribute type 11 has an invalid length. [ 306.862293][T12362] netlink: 'syz.0.1931': attribute type 1 has an invalid length. [ 306.874673][T12362] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1931'. [ 306.900062][T12355] 8021q: adding VLAN 0 to HW filter on device bond4 [ 306.991087][T12369] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1935'. [ 307.003917][T12365] bond4: (slave veth3): Enslaving as an active interface with a down link [ 307.071365][T12355] bond4: (slave veth5): Enslaving as an active interface with a down link [ 307.095793][T12371] bridge10: entered promiscuous mode [ 307.456037][T12397] pim6reg1: entered promiscuous mode [ 307.511527][T12397] pim6reg1: entered allmulticast mode [ 307.883574][T12418] netlink: 'syz.0.1952': attribute type 10 has an invalid length. [ 307.949230][T12418] geneve1: entered allmulticast mode [ 307.971657][T12418] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 308.100575][ T51] Bluetooth: hci4: link tx timeout [ 308.110426][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 308.237477][T12433] FAULT_INJECTION: forcing a failure. [ 308.237477][T12433] name failslab, interval 1, probability 0, space 0, times 0 [ 308.264484][T12433] CPU: 0 UID: 0 PID: 12433 Comm: syz.2.1957 Not tainted syzkaller #0 PREEMPT(full) [ 308.264513][T12433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 308.264527][T12433] Call Trace: [ 308.264536][T12433] [ 308.264545][T12433] dump_stack_lvl+0x189/0x250 [ 308.264575][T12433] ? __pfx____ratelimit+0x10/0x10 [ 308.264610][T12433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.264634][T12433] ? __pfx__printk+0x10/0x10 [ 308.264664][T12433] ? __lock_acquire+0xab9/0xd20 [ 308.264704][T12433] should_fail_ex+0x414/0x560 [ 308.264740][T12433] should_failslab+0xa8/0x100 [ 308.264772][T12433] kmem_cache_alloc_noprof+0x73/0x3c0 [ 308.264798][T12433] ? skb_clone+0x212/0x3a0 [ 308.264829][T12433] skb_clone+0x212/0x3a0 [ 308.264856][T12433] __netlink_deliver_tap+0x404/0x850 [ 308.264890][T12433] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.264913][T12433] netlink_deliver_tap+0x19c/0x1b0 [ 308.264934][T12433] netlink_unicast+0x7fa/0x9e0 [ 308.264974][T12433] ? __pfx_netlink_unicast+0x10/0x10 [ 308.265007][T12433] ? netlink_sendmsg+0x642/0xb30 [ 308.265027][T12433] ? skb_put+0x11b/0x210 [ 308.265053][T12433] netlink_sendmsg+0x805/0xb30 [ 308.265084][T12433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.265110][T12433] ? aa_sock_msg_perm+0xf1/0x1d0 [ 308.265132][T12433] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.265153][T12433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.265176][T12433] __sock_sendmsg+0x21c/0x270 [ 308.265210][T12433] ____sys_sendmsg+0x505/0x830 [ 308.265241][T12433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.265276][T12433] ? import_iovec+0x74/0xa0 [ 308.265305][T12433] ___sys_sendmsg+0x21f/0x2a0 [ 308.265333][T12433] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.265402][T12433] ? __fget_files+0x2a/0x420 [ 308.265419][T12433] ? __fget_files+0x3a0/0x420 [ 308.265448][T12433] __x64_sys_sendmsg+0x19b/0x260 [ 308.265477][T12433] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.265513][T12433] ? __pfx_ksys_write+0x10/0x10 [ 308.265546][T12433] ? do_syscall_64+0xbe/0x3b0 [ 308.265573][T12433] do_syscall_64+0xfa/0x3b0 [ 308.265597][T12433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.265616][T12433] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 308.265635][T12433] ? clear_bhb_loop+0x60/0xb0 [ 308.265659][T12433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.265678][T12433] RIP: 0033:0x7f98f238eec9 [ 308.265696][T12433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.265715][T12433] RSP: 002b:00007f98f05f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.265736][T12433] RAX: ffffffffffffffda RBX: 00007f98f25e6090 RCX: 00007f98f238eec9 [ 308.265750][T12433] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 308.265763][T12433] RBP: 00007f98f05f6090 R08: 0000000000000000 R09: 0000000000000000 [ 308.265776][T12433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.265787][T12433] R13: 00007f98f25e6128 R14: 00007f98f25e6090 R15: 00007fffbd2a9cd8 [ 308.265819][T12433] [ 308.680932][T12443] tipc: Enabled bearer , priority 0 [ 308.794812][T12443] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 308.826605][T12443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.849918][T12450] syzkaller0: entered promiscuous mode [ 308.855531][T12450] syzkaller0: entered allmulticast mode [ 308.866646][T12450] tipc: Resetting bearer [ 309.055956][ T8848] tipc: Resetting bearer [ 309.067310][T12442] tipc: Resetting bearer [ 310.153953][ T9072] Bluetooth: hci4: command 0x0405 tx timeout [ 310.460613][T12442] tipc: Disabling bearer [ 310.672057][T12501] __nla_validate_parse: 22 callbacks suppressed [ 310.672078][T12501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1976'. [ 310.841308][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1976'. [ 311.004684][T12522] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 311.017487][T12522] bond0 (unregistering): Released all slaves [ 311.163437][T12517] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 311.183595][T12517] bond0 (unregistering): Released all slaves [ 311.217587][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1983'. [ 311.234138][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1983'. [ 311.353558][T12541] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1988'. [ 311.375321][T12541] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1988'. [ 311.416531][T12541] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1988'. [ 311.446983][T12545] bridge_slave_0: left allmulticast mode [ 311.457361][T12545] bridge_slave_0: left promiscuous mode [ 311.463692][T12545] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.475885][T12545] bridge_slave_1: left allmulticast mode [ 311.481898][T12545] bridge_slave_1: left promiscuous mode [ 311.487731][T12545] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.518151][T12545] bond0: (slave bond_slave_0): Releasing backup interface [ 311.548952][T12545] bond0: (slave bond_slave_1): Releasing backup interface [ 311.590345][T12545] team0: Port device team_slave_0 removed [ 311.610475][T12545] team0: Port device team_slave_1 removed [ 311.617620][T12545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.628975][T12545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.639809][T12545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.648189][T12545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.660090][T12545] bond0: (slave geneve1): Releasing backup interface [ 311.684821][T12545] bond4: (slave ip6gretap1): Releasing active interface [ 311.708451][T12545] bond6: (slave ip6gretap2): Releasing active interface [ 311.728220][T12545] bond8: (slave geneve2): Releasing active interface [ 312.043810][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1993'. [ 312.044543][T12566] Bluetooth: MGMT ver 1.23 [ 312.069344][T12564] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1993'. [ 312.227060][T12577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1998'. [ 312.237261][T12574] bridge9: entered promiscuous mode [ 312.262001][T12574] bridge9: entered allmulticast mode [ 312.497163][T12589] FAULT_INJECTION: forcing a failure. [ 312.497163][T12589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.575548][T12584] ip6gre1: entered allmulticast mode [ 312.591506][T12589] CPU: 1 UID: 0 PID: 12589 Comm: syz.1.2002 Not tainted syzkaller #0 PREEMPT(full) [ 312.591553][T12589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 312.591574][T12589] Call Trace: [ 312.591584][T12589] [ 312.591594][T12589] dump_stack_lvl+0x189/0x250 [ 312.591627][T12589] ? __pfx____ratelimit+0x10/0x10 [ 312.591651][T12589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.591687][T12589] ? __pfx__printk+0x10/0x10 [ 312.591733][T12589] should_fail_ex+0x414/0x560 [ 312.591774][T12589] _copy_to_user+0x31/0xb0 [ 312.591811][T12589] simple_read_from_buffer+0xe1/0x170 [ 312.591851][T12589] proc_fail_nth_read+0x1b3/0x220 [ 312.591881][T12589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.591911][T12589] ? rw_verify_area+0x2a6/0x4d0 [ 312.591940][T12589] ? __lock_acquire+0xab9/0xd20 [ 312.591971][T12589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.591998][T12589] vfs_read+0x1fd/0xa30 [ 312.592027][T12589] ? fdget_pos+0x247/0x320 [ 312.592052][T12589] ? __pfx___mutex_lock+0x10/0x10 [ 312.592079][T12589] ? __pfx_vfs_read+0x10/0x10 [ 312.592110][T12589] ? __fget_files+0x2a/0x420 [ 312.592135][T12589] ? __fget_files+0x3a0/0x420 [ 312.592154][T12589] ? __fget_files+0x2a/0x420 [ 312.592184][T12589] ksys_read+0x145/0x250 [ 312.592216][T12589] ? __pfx_ksys_read+0x10/0x10 [ 312.592242][T12589] ? rcu_is_watching+0x15/0xb0 [ 312.592271][T12589] ? do_syscall_64+0xbe/0x3b0 [ 312.592301][T12589] do_syscall_64+0xfa/0x3b0 [ 312.592325][T12589] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.592348][T12589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.592372][T12589] ? clear_bhb_loop+0x60/0xb0 [ 312.592399][T12589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.592420][T12589] RIP: 0033:0x7fb11d18d8dc [ 312.592441][T12589] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 312.592460][T12589] RSP: 002b:00007fb11df40030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.592484][T12589] RAX: ffffffffffffffda RBX: 00007fb11d3e6090 RCX: 00007fb11d18d8dc [ 312.592501][T12589] RDX: 000000000000000f RSI: 00007fb11df400a0 RDI: 0000000000000006 [ 312.592515][T12589] RBP: 00007fb11df40090 R08: 0000000000000000 R09: 0000000000000000 [ 312.592529][T12589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.592542][T12589] R13: 00007fb11d3e6128 R14: 00007fb11d3e6090 R15: 00007ffc9c706288 [ 312.592579][T12589] [ 313.017989][T12597] erspan0: entered promiscuous mode [ 313.023861][T12597] vlan3: entered promiscuous mode [ 313.377824][T12618] bridge10: entered allmulticast mode [ 313.409126][T12626] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 314.073834][T12673] netlink: 'syz.3.2027': attribute type 1 has an invalid length. [ 314.202882][T12679] 8021q: adding VLAN 0 to HW filter on device bond9 [ 314.221278][T12683] tc_dump_action: action bad kind [ 314.360900][T12690] Unknown options in mask b7f2 [ 314.680443][T12707] netlink: 'syz.3.2040': attribute type 21 has an invalid length. [ 314.692521][T12707] netlink: 'syz.3.2040': attribute type 22 has an invalid length. [ 314.700418][T12707] netlink: 'syz.3.2040': attribute type 23 has an invalid length. [ 314.730130][T12707] netlink: 'syz.3.2040': attribute type 25 has an invalid length. [ 314.826179][T12718] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 315.734821][T12741] __nla_validate_parse: 18 callbacks suppressed [ 315.734843][T12741] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2052'. [ 315.771370][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2052'. [ 315.780959][T12743] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.2050'. [ 315.819730][T12745] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 315.931742][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2054'. [ 315.971791][T12754] bridge_slave_0: entered promiscuous mode [ 315.983211][T12758] netlink: 'syz.1.2058': attribute type 21 has an invalid length. [ 316.033834][T12758] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 316.049249][T12758] bond8 (unregistering): Released all slaves [ 316.053570][T12765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2058'. [ 316.301342][T12775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2061'. [ 316.348711][T12771] team0 (unregistering): Port device team_slave_0 removed [ 316.364298][T12771] team0 (unregistering): Port device team_slave_1 removed [ 316.392931][T12775] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 316.560487][T12782] bridge13: entered promiscuous mode [ 317.036464][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.122491][T12819] vlan0: entered promiscuous mode [ 317.172957][T12819] bridge0: entered promiscuous mode [ 317.282798][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2073'. [ 317.413851][T12830] tipc: Enabled bearer , priority 0 [ 317.468905][T12835] netlink: 'syz.0.2078': attribute type 64 has an invalid length. [ 317.487968][T12835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2078'. [ 317.521981][T12842] netlink: 'syz.0.2078': attribute type 64 has an invalid length. [ 317.527147][T12830] syzkaller0: entered promiscuous mode [ 317.530008][T12842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2078'. [ 317.544708][T12830] syzkaller0: entered allmulticast mode [ 317.545525][T12830] tipc: Resetting bearer [ 317.557878][T12829] tipc: Resetting bearer [ 317.564155][T12844] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2080'. [ 318.776377][T12829] tipc: Disabling bearer [ 318.792681][T12834] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 318.804152][T12834] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 318.816797][T12834] gretap0: entered promiscuous mode [ 318.823373][T12834] gretap0: entered allmulticast mode [ 319.205698][T12872] netlink: 'syz.0.2088': attribute type 10 has an invalid length. [ 319.280705][T12872] team0: Device veth1_macvtap failed to register rx_handler [ 319.585927][T12892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.597010][T12890] openvswitch: netlink: Actions may not be safe on all matching packets [ 319.782375][T12900] bridge13: entered allmulticast mode [ 319.809511][T12900] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 319.981759][T12916] netlink: 'syz.0.2106': attribute type 1 has an invalid length. [ 320.372149][T12942] netlink: 'syz.0.2114': attribute type 21 has an invalid length. [ 320.530710][T12950] netlink: 'syz.3.2118': attribute type 26 has an invalid length. [ 320.858932][T12959] bond0 (unregistering): Released all slaves [ 320.864173][ T67] smc: removing ib device syz1 [ 320.955565][T12962] syzkaller1: entered promiscuous mode [ 320.971961][T12962] syzkaller1: entered allmulticast mode [ 321.277934][T12989] __nla_validate_parse: 11 callbacks suppressed [ 321.277954][T12989] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2129'. [ 321.386023][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2130'. [ 321.425100][T12991] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 321.463199][T12991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.517754][T12997] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2130'. [ 322.063490][T13016] netlink: 'syz.3.2136': attribute type 1 has an invalid length. [ 322.085639][T13016] netlink: 'syz.3.2136': attribute type 2 has an invalid length. [ 322.100741][T13016] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.2136'. [ 322.185433][T13018] bridge14: entered promiscuous mode [ 322.199915][T13018] bridge14: entered allmulticast mode [ 322.363328][T13022] netlink: 'syz.2.2139': attribute type 1 has an invalid length. [ 322.446763][T13028] netlink: 'syz.2.2139': attribute type 39 has an invalid length. [ 322.469722][T13022] bond5 (unregistering): Released all slaves [ 322.781342][T13041] netlink: 'syz.0.2143': attribute type 5 has an invalid length. [ 322.946160][T13050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2147'. [ 322.956067][T13050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2147'. [ 323.162390][T13059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2149'. [ 323.181588][T13059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2149'. [ 323.567503][T13050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2147'. [ 323.601608][T13050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2147'. [ 323.646844][T13063] bridge11: entered promiscuous mode [ 323.657218][T13063] bridge11: entered allmulticast mode [ 323.987373][T13080] netlink: 'syz.2.2154': attribute type 1 has an invalid length. [ 324.058628][T13080] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 324.342975][T13104] netlink: 'syz.4.2159': attribute type 1 has an invalid length. [ 324.395562][T13104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.437367][T13109] bond0: (slave geneve3): making interface the new active one [ 324.450574][T13109] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 324.665518][T13119] bridge15: entered promiscuous mode [ 324.687344][T13119] bridge15: entered allmulticast mode [ 325.245598][T13149] netlink: 'syz.1.2173': attribute type 1 has an invalid length. [ 325.279026][T13149] netlink: 'syz.1.2173': attribute type 2 has an invalid length. [ 325.308056][T13151] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 325.791829][T13185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.070775][T13201] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 326.196686][T13201] syzkaller0: entered promiscuous mode [ 326.221734][T13201] syzkaller0: entered allmulticast mode [ 326.882530][T13260] __nla_validate_parse: 8 callbacks suppressed [ 326.882553][T13260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2205'. [ 327.016312][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2206'. [ 327.394198][ T5970] IPVS: starting estimator thread 0... [ 327.491575][T13298] IPVS: using max 24 ests per chain, 57600 per kthread [ 327.530824][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2220'. [ 327.546427][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2220'. [ 327.557227][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2220'. [ 327.572792][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2220'. [ 327.586881][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2220'. [ 327.613774][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2220'. [ 327.642189][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2220'. [ 327.654076][T13320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2217'. [ 328.212584][T13373] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 329.422899][T13497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.451537][T13497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.489047][T13497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.499600][T13497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.736368][T13505] bond10: Invalid ad_actor_system MAC address. [ 329.777525][T13505] bond10: option ad_actor_system: invalid value (1) [ 329.798751][T13505] bond10 (unregistering): Released all slaves [ 330.623507][T13546] netlink: 'syz.4.2258': attribute type 10 has an invalid length. [ 331.725836][T13614] netlink: 'syz.2.2278': attribute type 21 has an invalid length. [ 331.734008][T13614] netlink: 'syz.2.2278': attribute type 6 has an invalid length. [ 331.908259][T13619] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 331.932812][T13626] netlink: 'syz.3.2284': attribute type 1 has an invalid length. [ 331.944339][T13626] __nla_validate_parse: 44 callbacks suppressed [ 331.944357][T13626] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2284'. [ 331.961666][T13626] netlink: 'syz.3.2284': attribute type 1 has an invalid length. [ 331.969510][T13626] netlink: 'syz.3.2284': attribute type 2 has an invalid length. [ 331.972036][T13619] bond8 (unregistering): Released all slaves [ 331.978647][T13626] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2284'. [ 332.110574][T13633] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2286'. [ 332.161879][T13636] netlink: 'syz.3.2285': attribute type 11 has an invalid length. [ 332.171066][T13638] netlink: 'syz.4.2283': attribute type 1 has an invalid length. [ 332.180116][T13636] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2285'. [ 332.235524][T13644] netlink: 'syz.3.2285': attribute type 21 has an invalid length. [ 332.265202][T13648] netlink: 'syz.1.2288': attribute type 8 has an invalid length. [ 332.313767][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2286'. [ 332.908440][T13668] netlink: 'syz.3.2293': attribute type 30 has an invalid length. [ 332.969420][T13668] bond0: option arp_missed_max: invalid value (0) [ 333.001029][T13668] bond0: option arp_missed_max: allowed values 1 - 255 [ 333.054948][T13668] bond0 (unregistering): Released all slaves [ 333.367928][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2301'. [ 333.379377][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2301'. [ 333.505432][T13704] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2303'. [ 333.625877][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2303'. [ 333.655630][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2308'. [ 333.936743][T13732] unsupported nlmsg_type 40 [ 334.176096][T13747] tipc: Enabled bearer , priority 0 [ 334.320217][T13747] syzkaller0: entered promiscuous mode [ 334.327765][T13747] syzkaller0: entered allmulticast mode [ 334.368704][T13747] tipc: Resetting bearer [ 334.416292][T13743] tipc: Resetting bearer [ 334.647956][T13777] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 334.798732][ T8848] nci: nci_ntf_packet: unknown ntf opcode 0x1d [ 334.804411][T13781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.271799][ T5970] tipc: Node number set to 2600945801 [ 335.881135][T13743] tipc: Disabling bearer [ 336.254277][T13817] 8021q: adding VLAN 0 to HW filter on device bond6 [ 336.332425][T13817] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 336.770409][T13841] macsec2: entered promiscuous mode [ 336.775936][T13841] bridge0: entered promiscuous mode [ 336.785047][T13841] macsec2: entered allmulticast mode [ 336.791184][T13841] bridge0: entered allmulticast mode [ 336.797531][T13841] bridge0: port 2(macsec2) entered blocking state [ 336.804427][T13841] bridge0: port 2(macsec2) entered disabled state [ 336.818112][T13841] bridge0: left allmulticast mode [ 336.824170][T13841] bridge0: left promiscuous mode [ 337.175173][T13857] netlink: 'syz.4.2343': attribute type 83 has an invalid length. [ 337.619896][T13876] lo: entered allmulticast mode [ 337.638865][T13874] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 337.659663][T13875] lo: left allmulticast mode [ 337.791377][T13884] __nla_validate_parse: 15 callbacks suppressed [ 337.798274][T13884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2354'. [ 337.811471][T13884] openvswitch: netlink: Flow actions attr not present in new flow. [ 338.071191][T13898] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2356'. [ 338.104173][T13898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2356'. [ 338.168846][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2356'. [ 338.209393][T13904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2356'. [ 338.371064][T13894] team0 (unregistering): Port device team_slave_0 removed [ 338.392569][T13894] team0 (unregistering): Port device team_slave_1 removed [ 338.485789][T13910] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2359'. [ 338.587709][T13920] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2360'. [ 338.692513][T13925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2362'. [ 339.105078][T13947] openvswitch: netlink: Flow key attribute not present in set flow. [ 339.356028][T13961] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2371'. [ 339.401835][T13963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2372'. [ 340.093732][T14007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.109138][T14004] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 340.315714][T14015] netlink: 'syz.2.2388': attribute type 1 has an invalid length. [ 342.066429][T14129] dvmrp1: entered allmulticast mode [ 342.800050][T14151] openvswitch: netlink: Actions may not be safe on all matching packets [ 343.025015][T14160] __nla_validate_parse: 21 callbacks suppressed [ 343.025037][T14160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2432'. [ 343.120470][T14160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2432'. [ 343.157631][T14163] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 343.418261][T14169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2435'. [ 343.722332][T14182] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2441'. [ 343.924255][T14194] netlink: 'syz.3.2444': attribute type 1 has an invalid length. [ 344.014121][T14201] netlink: 'syz.0.2446': attribute type 14 has an invalid length. [ 344.178233][T14211] netlink: 'syz.4.2449': attribute type 39 has an invalid length. [ 344.197134][T14209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.424626][T14232] tipc: Enabling of bearer rejected, failed to enable media [ 344.472166][T14219] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 344.479692][T14219] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 344.730302][T14252] netlink: 'syz.0.2459': attribute type 1 has an invalid length. [ 344.784080][T14257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2459'. [ 344.904464][T14252] bond13: entered promiscuous mode [ 344.915518][T14252] 8021q: adding VLAN 0 to HW filter on device bond13 [ 344.984936][T14271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2463'. [ 345.161247][T14279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2466'. [ 345.176592][T14280] netlink: 'syz.2.2467': attribute type 1 has an invalid length. [ 345.209553][T14279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2466'. [ 345.239497][T14280] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 345.269242][T14279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.424524][T14291] bridge15: entered promiscuous mode [ 345.434891][T14291] bridge15: entered allmulticast mode [ 345.767394][T14307] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.799602][T14307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.850685][T14327] FAULT_INJECTION: forcing a failure. [ 345.850685][T14327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.879757][T14327] CPU: 1 UID: 0 PID: 14327 Comm: syz.4.2479 Not tainted syzkaller #0 PREEMPT(full) [ 345.879790][T14327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 345.879804][T14327] Call Trace: [ 345.879813][T14327] [ 345.879823][T14327] dump_stack_lvl+0x189/0x250 [ 345.879854][T14327] ? __pfx____ratelimit+0x10/0x10 [ 345.879878][T14327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.879904][T14327] ? __pfx__printk+0x10/0x10 [ 345.879936][T14327] ? __might_fault+0xb0/0x130 [ 345.879979][T14327] should_fail_ex+0x414/0x560 [ 345.880017][T14327] _copy_from_user+0x2d/0xb0 [ 345.880047][T14327] ___sys_sendmsg+0x158/0x2a0 [ 345.880080][T14327] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.880148][T14327] ? __fget_files+0x2a/0x420 [ 345.880167][T14327] ? __fget_files+0x3a0/0x420 [ 345.880198][T14327] __x64_sys_sendmsg+0x19b/0x260 [ 345.880239][T14327] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.880277][T14327] ? __pfx_ksys_write+0x10/0x10 [ 345.880305][T14327] ? rcu_is_watching+0x15/0xb0 [ 345.880332][T14327] ? do_syscall_64+0xbe/0x3b0 [ 345.880362][T14327] do_syscall_64+0xfa/0x3b0 [ 345.880385][T14327] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.880408][T14327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.880429][T14327] ? clear_bhb_loop+0x60/0xb0 [ 345.880455][T14327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.880477][T14327] RIP: 0033:0x7f697698eec9 [ 345.880495][T14327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.880515][T14327] RSP: 002b:00007f697775d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.880538][T14327] RAX: ffffffffffffffda RBX: 00007f6976be5fa0 RCX: 00007f697698eec9 [ 345.880555][T14327] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000003 [ 345.880569][T14327] RBP: 00007f697775d090 R08: 0000000000000000 R09: 0000000000000000 [ 345.880582][T14327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.880595][T14327] R13: 00007f6976be6038 R14: 00007f6976be5fa0 R15: 00007ffdd5eff7c8 [ 345.880631][T14327] [ 346.324832][T14341] tipc: Started in network mode [ 346.329848][T14341] tipc: Node identity 062707ff44fd, cluster identity 4711 [ 346.368033][T14341] tipc: Enabled bearer , priority 0 [ 346.389013][T14329] syzkaller0: entered promiscuous mode [ 346.394791][T14329] syzkaller0: entered allmulticast mode [ 346.446281][T14349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 346.495207][T14329] tipc: Resetting bearer [ 346.535287][T14328] tipc: Resetting bearer [ 346.581265][T14355] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2486'. [ 346.593560][T14328] tipc: Disabling bearer [ 346.671484][T14360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2487'. [ 346.704756][T14363] netlink: 'syz.3.2488': attribute type 10 has an invalid length. [ 347.045125][T14389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.326173][T14407] sock: sock_timestamping_bind_phc: sock not bind to device [ 347.698510][T14429] syzkaller0: entered promiscuous mode [ 347.713213][T14429] syzkaller0: entered allmulticast mode [ 348.390476][T14464] __nla_validate_parse: 7 callbacks suppressed [ 348.390496][T14464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2521'. [ 348.437524][T14464] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2521'. [ 348.447068][T14464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2521'. [ 348.457769][T14464] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2521'. [ 348.471249][T14464] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2521'. [ 348.571726][T14477] netlink: 'syz.3.2525': attribute type 1 has an invalid length. [ 348.586122][T14478] netlink: 'syz.0.2526': attribute type 2 has an invalid length. [ 348.804279][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2531'. [ 348.895062][T14495] netlink: 'syz.3.2533': attribute type 1 has an invalid length. [ 348.909879][T14495] netlink: 'syz.3.2533': attribute type 2 has an invalid length. [ 349.001111][T14497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2534'. [ 349.068868][T14506] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2535'. [ 349.412272][T14532] FAULT_INJECTION: forcing a failure. [ 349.412272][T14532] name failslab, interval 1, probability 0, space 0, times 0 [ 349.428421][T14532] CPU: 1 UID: 0 PID: 14532 Comm: syz.2.2544 Not tainted syzkaller #0 PREEMPT(full) [ 349.428450][T14532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 349.428464][T14532] Call Trace: [ 349.428473][T14532] [ 349.428482][T14532] dump_stack_lvl+0x189/0x250 [ 349.428512][T14532] ? __pfx____ratelimit+0x10/0x10 [ 349.428537][T14532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.428562][T14532] ? __pfx__printk+0x10/0x10 [ 349.428588][T14532] ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0 [ 349.428644][T14532] should_fail_ex+0x414/0x560 [ 349.428680][T14532] should_failslab+0xa8/0x100 [ 349.428714][T14532] kmem_cache_alloc_noprof+0x73/0x3c0 [ 349.428743][T14532] ? skb_clone+0x212/0x3a0 [ 349.428775][T14532] skb_clone+0x212/0x3a0 [ 349.428808][T14532] __netlink_deliver_tap+0x404/0x850 [ 349.428846][T14532] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.428869][T14532] netlink_deliver_tap+0x19c/0x1b0 [ 349.428892][T14532] netlink_unicast+0x7fa/0x9e0 [ 349.428936][T14532] ? __pfx_netlink_unicast+0x10/0x10 [ 349.428971][T14532] ? netlink_sendmsg+0x642/0xb30 [ 349.428992][T14532] ? skb_put+0x11b/0x210 [ 349.429020][T14532] netlink_sendmsg+0x805/0xb30 [ 349.429054][T14532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.429080][T14532] ? aa_sock_msg_perm+0xf1/0x1d0 [ 349.429105][T14532] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 349.429137][T14532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.429161][T14532] __sock_sendmsg+0x21c/0x270 [ 349.429197][T14532] ____sys_sendmsg+0x505/0x830 [ 349.429231][T14532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.429270][T14532] ? import_iovec+0x74/0xa0 [ 349.429302][T14532] ___sys_sendmsg+0x21f/0x2a0 [ 349.429333][T14532] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.429406][T14532] ? __fget_files+0x2a/0x420 [ 349.429425][T14532] ? __fget_files+0x3a0/0x420 [ 349.429456][T14532] __x64_sys_sendmsg+0x19b/0x260 [ 349.429487][T14532] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.429525][T14532] ? __pfx_ksys_write+0x10/0x10 [ 349.429552][T14532] ? rcu_is_watching+0x15/0xb0 [ 349.429579][T14532] ? do_syscall_64+0xbe/0x3b0 [ 349.429609][T14532] do_syscall_64+0xfa/0x3b0 [ 349.429632][T14532] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.429655][T14532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.429676][T14532] ? clear_bhb_loop+0x60/0xb0 [ 349.429703][T14532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.429724][T14532] RIP: 0033:0x7f98f238eec9 [ 349.429743][T14532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.429761][T14532] RSP: 002b:00007f98f3144038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.429784][T14532] RAX: ffffffffffffffda RBX: 00007f98f25e5fa0 RCX: 00007f98f238eec9 [ 349.429800][T14532] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000003 [ 349.429814][T14532] RBP: 00007f98f3144090 R08: 0000000000000000 R09: 0000000000000000 [ 349.429828][T14532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.429841][T14532] R13: 00007f98f25e6038 R14: 00007f98f25e5fa0 R15: 00007fffbd2a9cd8 [ 349.429875][T14532] [ 349.834190][T14545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2547'. [ 350.002330][T14552] netlink: 'syz.2.2549': attribute type 1 has an invalid length. [ 350.085120][T14553] netlink: 'syz.2.2549': attribute type 18 has an invalid length. [ 350.239778][T14559] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2551'. [ 350.302392][T14558] netlink: 'syz.4.2553': attribute type 11 has an invalid length. [ 350.321994][T14568] openvswitch: netlink: Flow key attr not present in new flow. [ 350.335974][T14570] openvswitch: netlink: Flow key attr not present in new flow. [ 350.377054][T14570] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 350.412565][T14574] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 350.618517][T14586] netlink: 'syz.1.2559': attribute type 1 has an invalid length. [ 350.677125][T14586] 8021q: adding VLAN 0 to HW filter on device bond9 [ 350.719917][T14586] bond9: (slave geneve2): making interface the new active one [ 350.753340][T14586] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 350.787063][ T8848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.802384][ T8848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.835716][ T8848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.865185][ T3546] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.284964][T14617] netlink: 'syz.3.2569': attribute type 1 has an invalid length. [ 351.327011][T14617] netlink: 'syz.3.2569': attribute type 1 has an invalid length. [ 352.220490][T14669] unknown channel width for channel at 909000KHz? [ 352.231928][T14669] unknown channel width for channel at 909000KHz? [ 352.238537][T14669] unknown channel width for channel at 909000KHz? [ 352.803168][T14697] netlink: 'syz.3.2596': attribute type 64 has an invalid length. [ 352.887116][T14706] netlink: 'syz.3.2596': attribute type 30 has an invalid length. [ 352.960196][T14714] netlink: 'syz.1.2599': attribute type 1 has an invalid length. [ 352.969057][T14714] netlink: 'syz.1.2599': attribute type 2 has an invalid length. [ 353.028305][T14696] delete_channel: no stack [ 353.065005][T14716] netlink: 'syz.1.2600': attribute type 1 has an invalid length. [ 353.431553][T14735] __nla_validate_parse: 19 callbacks suppressed [ 353.431574][T14735] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2608'. [ 353.508817][T14741] [ 353.511183][T14741] ====================================================== [ 353.518208][T14741] WARNING: possible circular locking dependency detected [ 353.525232][T14741] syzkaller #0 Not tainted [ 353.529667][T14741] ------------------------------------------------------ [ 353.536680][T14741] syz.2.2609/14741 is trying to acquire lock: [ 353.544647][T14741] ffffffff8f68f918 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 353.553979][T14741] [ 353.553979][T14741] but task is already holding lock: [ 353.561333][T14741] ffff888054aca670 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 353.570657][T14741] [ 353.570657][T14741] which lock already depends on the new lock. [ 353.570657][T14741] [ 353.581045][T14741] [ 353.581045][T14741] the existing dependency chain (in reverse order) is: [ 353.590047][T14741] [ 353.590047][T14741] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 353.598057][T14741] lock_acquire+0x120/0x360 [ 353.603174][T14741] _raw_spin_lock_bh+0x36/0x50 [ 353.608452][T14741] nr_rt_device_down+0x12a/0x720 [ 353.613927][T14741] nr_device_event+0x137/0x150 [ 353.619211][T14741] notifier_call_chain+0x1b3/0x3e0 [ 353.624841][T14741] netif_close_many+0x29c/0x410 [ 353.630211][T14741] netif_close+0x158/0x210 [ 353.635144][T14741] dev_close+0x10a/0x220 [ 353.639911][T14741] bpq_device_event+0x377/0x6a0 [ 353.645276][T14741] notifier_call_chain+0x1b3/0x3e0 [ 353.650907][T14741] netif_close_many+0x29c/0x410 [ 353.656282][T14741] netif_close+0x158/0x210 [ 353.661227][T14741] dev_close+0x10a/0x220 [ 353.665993][T14741] bond_setup_by_slave+0x5f/0x3f0 [ 353.671544][T14741] bond_enslave+0x7a0/0x3a70 [ 353.676663][T14741] bond_do_ioctl+0x635/0x9b0 [ 353.681773][T14741] bond_siocdevprivate+0x17e/0x350 [ 353.687413][T14741] dev_ifsioc+0xb57/0xf00 [ 353.692267][T14741] dev_ioctl+0x84c/0x1150 [ 353.697120][T14741] sock_ioctl+0x719/0x790 [ 353.701985][T14741] __se_sys_ioctl+0xf9/0x170 [ 353.707103][T14741] do_syscall_64+0xfa/0x3b0 [ 353.712130][T14741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.718543][T14741] [ 353.718543][T14741] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 353.726373][T14741] lock_acquire+0x120/0x360 [ 353.731419][T14741] _raw_spin_lock_bh+0x36/0x50 [ 353.736707][T14741] nr_rt_device_down+0xa9/0x720 [ 353.742174][T14741] nr_device_event+0x137/0x150 [ 353.747464][T14741] notifier_call_chain+0x1b3/0x3e0 [ 353.753099][T14741] netif_close_many+0x29c/0x410 [ 353.758473][T14741] netif_close+0x158/0x210 [ 353.763423][T14741] dev_close+0x10a/0x220 [ 353.768197][T14741] bpq_device_event+0x377/0x6a0 [ 353.773573][T14741] notifier_call_chain+0x1b3/0x3e0 [ 353.779219][T14741] netif_close_many+0x29c/0x410 [ 353.784598][T14741] netif_close+0x158/0x210 [ 353.789536][T14741] dev_close+0x10a/0x220 [ 353.794301][T14741] bond_setup_by_slave+0x5f/0x3f0 [ 353.799859][T14741] bond_enslave+0x7a0/0x3a70 [ 353.804997][T14741] bond_do_ioctl+0x635/0x9b0 [ 353.810113][T14741] bond_siocdevprivate+0x17e/0x350 [ 353.815751][T14741] dev_ifsioc+0xb57/0xf00 [ 353.820601][T14741] dev_ioctl+0x84c/0x1150 [ 353.825454][T14741] sock_ioctl+0x719/0x790 [ 353.830317][T14741] __se_sys_ioctl+0xf9/0x170 [ 353.835431][T14741] do_syscall_64+0xfa/0x3b0 [ 353.840461][T14741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.846898][T14741] [ 353.846898][T14741] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 353.854826][T14741] validate_chain+0xb9b/0x2140 [ 353.860116][T14741] __lock_acquire+0xab9/0xd20 [ 353.865332][T14741] lock_acquire+0x120/0x360 [ 353.870366][T14741] _raw_spin_lock_bh+0x36/0x50 [ 353.875650][T14741] nr_remove_neigh+0x25/0xe0 [ 353.880761][T14741] nr_add_node+0x1d9f/0x2570 [ 353.885881][T14741] nr_rt_ioctl+0xc12/0xd50 [ 353.890827][T14741] sock_do_ioctl+0xdc/0x300 [ 353.895856][T14741] sock_ioctl+0x576/0x790 [ 353.900710][T14741] __se_sys_ioctl+0xf9/0x170 [ 353.905821][T14741] do_syscall_64+0xfa/0x3b0 [ 353.910848][T14741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.917263][T14741] [ 353.917263][T14741] other info that might help us debug this: [ 353.917263][T14741] [ 353.927489][T14741] Chain exists of: [ 353.927489][T14741] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 353.927489][T14741] [ 353.941316][T14741] Possible unsafe locking scenario: [ 353.941316][T14741] [ 353.948760][T14741] CPU0 CPU1 [ 353.954121][T14741] ---- ---- [ 353.959482][T14741] lock(&nr_node->node_lock); [ 353.964248][T14741] lock(nr_node_list_lock); [ 353.971363][T14741] lock(&nr_node->node_lock); [ 353.978658][T14741] lock(nr_neigh_list_lock); [ 353.983341][T14741] [ 353.983341][T14741] *** DEADLOCK *** [ 353.983341][T14741] [ 353.991512][T14741] 1 lock held by syz.2.2609/14741: [ 353.996619][T14741] #0: ffff888054aca670 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 354.006384][T14741] [ 354.006384][T14741] stack backtrace: [ 354.012297][T14741] CPU: 1 UID: 0 PID: 14741 Comm: syz.2.2609 Not tainted syzkaller #0 PREEMPT(full) [ 354.012318][T14741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 354.012329][T14741] Call Trace: [ 354.012335][T14741] [ 354.012342][T14741] dump_stack_lvl+0x189/0x250 [ 354.012366][T14741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.012391][T14741] ? __pfx__printk+0x10/0x10 [ 354.012413][T14741] ? stack_trace_save+0x9c/0xe0 [ 354.012439][T14741] print_circular_bug+0x2ee/0x310 [ 354.012459][T14741] check_noncircular+0x134/0x160 [ 354.012481][T14741] validate_chain+0xb9b/0x2140 [ 354.012508][T14741] __lock_acquire+0xab9/0xd20 [ 354.012535][T14741] ? nr_remove_neigh+0x25/0xe0 [ 354.012549][T14741] lock_acquire+0x120/0x360 [ 354.012573][T14741] ? nr_remove_neigh+0x25/0xe0 [ 354.012591][T14741] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 354.012611][T14741] ? nr_remove_neigh+0x25/0xe0 [ 354.012627][T14741] _raw_spin_lock_bh+0x36/0x50 [ 354.012642][T14741] ? nr_remove_neigh+0x25/0xe0 [ 354.012656][T14741] nr_remove_neigh+0x25/0xe0 [ 354.012672][T14741] nr_add_node+0x1d9f/0x2570 [ 354.012698][T14741] ? __asan_memcpy+0x40/0x70 [ 354.012718][T14741] ? nr_call_to_digi+0x126/0x1b0 [ 354.012743][T14741] nr_rt_ioctl+0xc12/0xd50 [ 354.012771][T14741] ? kasan_quarantine_put+0xdd/0x220 [ 354.012803][T14741] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 354.012830][T14741] ? apparmor_capable+0x137/0x1b0 [ 354.012854][T14741] ? capable+0x89/0xe0 [ 354.012868][T14741] ? nr_ioctl+0x1b1/0x3b0 [ 354.012888][T14741] sock_do_ioctl+0xdc/0x300 [ 354.012914][T14741] ? __pfx_sock_do_ioctl+0x10/0x10 [ 354.012935][T14741] ? __lock_acquire+0xab9/0xd20 [ 354.012964][T14741] sock_ioctl+0x576/0x790 [ 354.012986][T14741] ? __pfx_sock_ioctl+0x10/0x10 [ 354.013008][T14741] ? __fget_files+0x2a/0x420 [ 354.013021][T14741] ? __fget_files+0x3a0/0x420 [ 354.013034][T14741] ? __fget_files+0x2a/0x420 [ 354.013047][T14741] ? bpf_lsm_file_ioctl+0x9/0x20 [ 354.013067][T14741] ? __pfx_sock_ioctl+0x10/0x10 [ 354.013089][T14741] __se_sys_ioctl+0xf9/0x170 [ 354.013108][T14741] do_syscall_64+0xfa/0x3b0 [ 354.013126][T14741] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.013141][T14741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.013156][T14741] ? clear_bhb_loop+0x60/0xb0 [ 354.013173][T14741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.013188][T14741] RIP: 0033:0x7f98f238eec9 [ 354.013202][T14741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.013216][T14741] RSP: 002b:00007f98f3144038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.013232][T14741] RAX: ffffffffffffffda RBX: 00007f98f25e5fa0 RCX: 00007f98f238eec9 [ 354.013244][T14741] RDX: 0000200000000440 RSI: 000000000000890b RDI: 000000000000000a [ 354.013254][T14741] RBP: 00007f98f2411f91 R08: 0000000000000000 R09: 0000000000000000 [ 354.013263][T14741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.013272][T14741] R13: 00007f98f25e6038 R14: 00007f98f25e5fa0 R15: 00007fffbd2a9cd8 [ 354.013291][T14741] [ 354.353590][T14748] bond14: option arp_all_targets: invalid value (18446744073709551613) [ 354.368175][T14748] bond14 (unregistering): Released all slaves [ 354.385785][T14735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.