last executing test programs: 4.478057735s ago: executing program 1 (id=2576): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @generic={0xa7}, @initr0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0xf, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRES64=r3, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_generic(r1, 0x0, 0x0) readv(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r4}, 0x38) 3.458877024s ago: executing program 1 (id=2584): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x5}}}, 0x7) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@owner={{0x38}, {0xee01, 0x0, 0x0, 0x0, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r2}, 0x90) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x2000000000000353, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000800000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000002c40), 0xffffffffffffffff) 3.165053759s ago: executing program 1 (id=2588): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) socket$rds(0x15, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002f8ffffffffffffff0000950000000000000014667b663e69f42b92e68681356cc143e51baf20320f5df15abb7987c27685cbc46a08cf2f4cd2386e74598677e7f5f834af50e6e09c431c69e7dd22547fe0c4a2e0efebc910e48c93eba00ec565705ccb751e354535eda6afc7aa2320b292cb12919fa79cbb16fe3e825e240000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0xfffffffffffffffe, 0x0) connect$unix(r6, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 2.638215699s ago: executing program 4 (id=2594): r0 = socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000080)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000080)={0x2, 'vcan0\x00', {0x9}, 0x2}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20991, 0x11c05}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 2.360305416s ago: executing program 2 (id=2596): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}]}], {0x14}}, 0x70}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) (async) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000000)=0xfffffffe, 0x4) (async) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000a00000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (rerun: 64) close(0x3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r6, r5, 0x5}, 0x10) (async, rerun: 32) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r8 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x60, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (async, rerun: 64) syz_emit_ethernet(0x4d, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed04", 0x17, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0x0, "a78c000005"}]}}}}}}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500010700000000002f9078ac1e0001e0000001000086dd00f39078a102000034cb6dcdd2bc08508f3e2edd0d265b8bc0497d01ee697d19758303462c8c7aea2c"], 0x119) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYRESOCT=r3], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 2.246576557s ago: executing program 0 (id=2597): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x840000000002, 0x3, 0x9) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x98, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'pim6reg0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x28, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 2.157178283s ago: executing program 4 (id=2598): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e", 0x15}], 0x2}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1000"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) 2.073061345s ago: executing program 3 (id=2599): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYRESOCT=0x0, @ANYRES64, @ANYRESDEC], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900442f"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 2.030544796s ago: executing program 2 (id=2600): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x60, 0x2c, 0xf3f, 0x70fc2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1fff, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 1.790233286s ago: executing program 4 (id=2601): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x40, 0x3b, 0x8, 0x4, 0x8, 0x3, 0x4, 0x8000, r3}, &(0x7f0000000080)=0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000b957b18ff21cf5ac02fadbdf2501000000"], 0x14}}, 0xc004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x801, 0x70bd2d, 0x25dfdbff, {}, [@IFLA_GROUP={0x8}, @IFLA_VF_PORTS={0x4}]}, 0x2c}}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000000c0)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) sendmsg$nl_route(r0, 0x0, 0x8010) 1.72231251s ago: executing program 1 (id=2602): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="c45c573d395de5b2891a7d637a223920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x41}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x401, 0x8, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x840}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x5, 0x0, 0x7, 0x3ff}}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x4, 0xa, 0x8, 'syz0\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000005", 0x14, 0x6, 0x0, @private0, @mcast1={0xff, 0x10}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b70000000000000095000010000000004e62011c3034fdb117168bd07ba08af339d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d458e17f791f4798c8eb484de03312c69b3edff5be26765ba5f8f2879021c2ea53ac547a654bbd2db5356b971d83dd12742be9087a3e7b7c0efd3e38c794eb06b0b8c392904ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057826ef4e912f01a201e694e3049b8c8fe8b65d8d66bb766f7f3f918c86a702522368d9f81897133af94a5a4cff7f4d8b9d8eaf302f0b2e0c252b0000000000000000ee917bca4885bbf597a14ab6458e6272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36be115be3b325ecd201d2ffb0a7fa4f5d1106560cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b861299fcd9ed9d8679406419406bf0c5329bd5b4697336112b0b8756ce3574046bf611a108f8df4d1a88597840b702b6fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf39a43a66c5540b8762b42007c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4b19b53b60322af0aa66e8f448e1bd96822e6b70b62912c926dbe417cccd4f696d528fa8a3ea847f10e9b1106f3bb506f1d7fbdf801000000000000006c028eb5b5a073d0de5538ab42e171b3baae34c35987b0dda497ac3f5e97e60eaeea15c6d55badf9b86b1c000100006e60cd06c9ed24313ce607d403bb6030f800000000690db0221b1705c501f802ff59b4e683efa4b6e77e042072ec9eb8166f6e28b49a7705a1befc4d315878f88a8fb1dd679fb4c5557abae6849917dc51a89d47b728502f7e621fc0e3ba04020000c149ee6601728c750930519339b44197c22da865059b475afd96187d881e93b42a5fdfd686d8900c44c67133eeb0109dcb60dddad58037fda65885a15a42560ee3027a5ebf95254744f10fd607bc3100b94932b8d9447c42f6e21ee0e54f8be386bdc09decece910a481e648e0cb074536a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6ae00f0000000000006a8194479700a02b92bec8d05eae1f24fdd7b80d3dde04c22f689594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4acd7acf1dfe79d6771903b76e2ae47d972651390c22d641030e1ddac018dc3116e1803af10a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f00000000000000001000ba96edb95ede0e1957c2a2754258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548941d5d16297757310d9daebd5a3dabbced3b051129cd60a37d397643324e6f0aadf978d639650000000000000000570b0acbcaa196e6b46e213a34c1a550e7c2d8cee7a278cee591f360e345d37dc9f8991a16c08d72317e42d2ac9126acd76130ef1086016697e4d51c4b42b2efc8edab88d46bc3d5d6e5a634c912bc40513643bf44cb416b3149040220aa39035ae46d16d879fc815a5cb84b0d5c8ad970128adf8dec1171e860ca54ce5d6a5aa0327bca4f49a710bf8a8399071237fe5d764e2034873c94a4f21287f3bce3eeb69e94df2e14e4ab10cc7834b304bc879b80255991dd7aac2e92c9e7c411c019d229c1f1e563152f1c5ae9cda3e808000000a0c779d624c5a2b7491b8f73e767389ecd1dee951353bb22b7caf89468871520823715cfebd04189c6c6b34bd8a6541f6bc0630000000000f94e85f5111add3a3cb5bcace95f38465402c39df835754ef33056b0e1134187822c001a25304f3e00b44675d0a25a21dc4023c642cc6f5a75c45a29ab933600acf9a2d471b73a73178cdf309e5d53311996215b44295dfddc1dd6b81132e999366e460d15d366e84da02b8afc40c47e733f804460ed8300ec34eab2ed80097bd32ff1a6143ab1476037e474ca876187c85bed4391215cd77e6a1fd6399a498b96b9b0cca93255acb08c67e50004c5af6fd5b4ce7c1ebc9202bd7b329a4d2530486d5999dd7f90ebecca37f2869135438f0540801fd7481daf9ec94b799c12e714d573e2a6331f496254f254a60c52b2026ed6a72c82cd191490fabe7b151f92e5d700f21830d613fbe490f305b3845a78817e59bf7ed36471dbca01d39e50ae2535460e1d2f2614940647233a02d5000000000000000000f70e52f0d56f6a4dcf7e57c03d4b4add0500000000000000320304d0d2b308c5ed3956eae263035d703f862224e9818a3d7ac270793a7bf2af87585293960a80ac63c54e55063bf8d24639e561253ef0caf6c58118120d8acecc0528f0d81d291009fc46401baf9c22d1c452a5b61b7a1b9adfcc17f5ad99dcdf935923185db7b14a7fa7babc1f53df70618bb73aa810b756696f26653b84cf842ae433fda59fbe312be11bb7dfecdc38c1c1f688d2724568cc396fca7c74984b7f7bd000000000000003ff3e5857fc6598c933610be374909dc8622b0722259e922f40d7862f7ea72f1754f07711de7600000000000000000000000000c4cb643e73ad8a45f0c7164484540e66e29943aa72297d831ce6c978866a55ed53130c6747f569c9c9abe724b4fc647b17401d2201e8c201e7d6ffa1fa122677f7393ed4fe8a93306f048b6703b04544e42a9cd937ef8d98ee8d878a12a627791c5c2d9fc6de65356be92fd98fdbe819686c7bd3be5bd0ce627c8357675f752c73a502d25c31c831078f098c34295bfe90e882843003841f4c0c65dc1810a50000000000000015911cb03e743c482199757d35df5b59fe0a0c5240c85498d818578e2d65c4ff4acbee037498222b1f81f3726a244da1fd6b8c195f1303bedb744045f31e1547d7bc3c3eae68b8da059a59c8c37e3639c2c4eb3d8229ac24d2ce12bc0e5db4a8202d72e64d5c5eacd0d0c0cd7a879ed967f5a2bd39ae4cf7daf7c9fa1777d54fb5920c8434163f75062c62455bf6e23817a85d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x41}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x401, 0x8, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x840}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x5, 0x0, 0x7, 0x3ff}}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x4, 0xa, 0x8, 'syz0\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0) (async) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000005", 0x14, 0x6, 0x0, @private0, @mcast1={0xff, 0x10}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) (async) 1.668838817s ago: executing program 0 (id=2603): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=@newtaction={0x2144, 0x30, 0x7, 0x0, 0x0, {}, [{0x2130, 0x1, [@m_tunnel_key={0x10a8, 0xc, 0x0, 0x0, {{0xf}, {0x78, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x24627a58, 0x43, 0x2, 0xff6, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x10001}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x1084, 0x5, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x90, 0x0, 0x2, 0xb0}, 0x46}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x6, 0x7e92, 0xe7}, 0x50}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1d8, 0x0, 0x6, 0xe25a}, 0x23}}]}, {0x1004, 0x6, "f1651c53433adb1579d0fac1942ce981275f702a924c44d1ca20c14df20014a89ad90596986102522abaa198e2d9fbc6cd688c7388770a1eaf9b853a4c5edbdeab4a6396cbf807347038e97f5158cd169accff19eb817b2109b866bf5ae072f9baaffe9efff8e906fb0d471de3f9bcd4375e661cf2bb17eeb2fdba6f46e83ed43135628856b5062761d8639eca2b697b0386493aed4896b3d0d6ad4c901af24443a9e109d8e189b76e7b95ac7bd518258542099f59c5b958a29706604110048396ef65818030151e227b304d34f6ea471843eff61a00d9b4189b6f381c0fd09f83dfcd27325fc002a10ed65b3cd9360b132ca41a1ae47a0c681203768760ac905f301c7e9ff5b7ba3bf31862648698856beb7c969e64dff054bdcfe617ef28b2e93512b9acf3c814e7f66c18868232366ec3ec16d63723a3d126d31aa85b6a95b695a93fbadb5120b5dbc3ad76e7c62fdd4b3d98eed02e0de9944f3868b38fcbc79b9822d4ad307083f42b55557302f53f58ded36ad66095fcd26de29027f9bcf79aef9172e0f4ed2075a4e3ac8b0ccb9c65e35c643d738be5b9a842cf8013622e7d18cfbb88ad148755b2f9457b70a75aecf0e04b82cc38d0ba19d3c819510d770fe1927ebfa40b24356c1faa330d0c4c322a0c067002482a687c2255b71e4fa529ca3d3a69ec53451dc7303528a8c0beadf0bd1630983cc0488ea727c62cd7090998cdff7374f02c362a14bdb5d89329620ceeae2c70570894f15bb8c0993c227d65383e4512d19952ee637e2fd11dab92d8335bcde6b9c2dc38727752ee35fdc7c34ac24070fb67f0f5476d7833875714b2fd90cfe28f96ea4049adcbf8b795f99e80d3cae6a7dee456e3655235b72b37c62a6f197efb9045411e556a1c9dce44ef77356d288b509d6a50bb8beec624830d78087dfea388a5b0f042876ab81500fcae556c72e3c3cf38fa9b9c96ae2e2d96045037aab7cced140cdab8742a57598af0d83489c84618d7fccc84ee896cdd2bd34d96ad5709dfa5b307e9083f42afba80c20d9864208e07464dbe3222d5ef64b885d11dbc29f26a574a286cec6aa0b6c89f9fe706b855f4097d40ebb21a12a8f293b8cb178832966b25c1396e828ee38d1ec44b92d239e12652a207b17f1173803817fa2b6c088a0a724ece54fd79b90a931ccf87c79937744bad5e0161a2e2dd2f3c4dd90e6b667da71a0893b8739252f347891d82af4da5d0455163a311903de5b3ba3a64aeca6dd38e041fec3df0731d372d66f1fc5dc7a087a08a61bb5bc5ae5911f9b123b713ac2520a45bcec3c8535a9db47f4b5226d808b647045298eb7f83795c781308a1ae2b685d49c7506bb281a82eabf8426980ddadb483352df5c639c9859ab3fa6824c541e5245b6e9db44183cdcdadc2513e13b4a5a5250b1ebe35987d1dc9d1d6c76120619feebf204033e5a512dcecafd3bbd0c7d85a81014b6cd8b8c1d128bd23ce4e63c1fba427b138c4f04df451419f32cd85a0ac9beafd210c76fb4e5b37dd71f1addb4a4faeea256b3f483439bf321a0e8d02ee37cf3a2b5890cf56405f3a7885670bfa70e150a32d7910387f23327fad31f5c462407e639e92b2740b0565698274e1084acf82f784548c5311489ca4acb0b1c5714c4004f1ef422a6fd41a8ebc9e5224051d061f5579e9a76b258be0ad78b80dcb539736e9349fc09500f2d0bf4b41a3d26cb5662b5840cff76df3e3e3939510f2bf84317c3873ec1698d49c7a7bf872ad6262eec51a230504b5f3128b666931d4771ab2e50b727d9e04d8a8ccc9a5a1d4608a30195c4d56c36c735d0f4f8f36f30f57ebeab19327e8c66748e62720624b5a36d5341ed099cef5421158ba40edcff2bd5f90cecff2a7592aa8710f355a2d5df895852d040294a9f51093c79d3f02d57f08e29532b38c84e79f07792db8b6d66f223210e5c45fbd9f262ba07ab3ec039a1cbbb6aca7a4a4e56cee30c0d9518105caf671cb939a5da86d1a0186558983e77c23f05d175e83966af9a9296acf0468108cb988799ebb8278901e403502345a53f963e45024123f947365eb4a60be9b21536ce3ec6565454433635dd2e0b81f70a090060b3ccafcf802d0d0858310f7b2976e35d0b4b61f7427db3654385cbb74e8763eda19b0db14b6e7342dfa27d2b8666557c5a4760d8ff0d01c3e8c54e4048c926f56f77198dbbb5917dfa1a590ff1995a9d59168a314fc6a5d4e571193ff5acfd2ca01f3ba83f77c16af8b8334402c5d7c9243e66ddf4d16354079eb939013a3f7d5d95b0a167133b65c60430864adf4711e635f40b866dfd3aeba014348daf3e20e82828cee89ec9c1fda9d3c5f0c08aafee844d7b2f28edc5bc44fa21241f1bf27ca77ce991bf54cd50373a852bc6b2596d6909ea5f7fb97603a0a30c1a05c0fc8d8d93308e09b18b01653d888cd099b63745792ecc5682a4e8bde223ab405e0eff2cbcec8b8146ba7a162b0a3c42de31754d96fa8a8b39542d1c414e9a1d998a4a5ce45dc127a003c713e7b11edd21ea9ffa590898c6ef5ff80925dbbec0625ecc59646ccda3273eeaa41ba0f5dcd6167c4eb557c6e5069099f26d60d388c82bf6e65051d90f5dd0ab0ba00591a7dd5d780f40646e961aeea27a6361a4c9fdb1a971c8f39a9f3b809a1041caded61f9bb424db919660069a96cb82ef316401b59e4caa826df87421e08f0d67766ab8db003c494e4a9cada6c1298fccc2edcfa525813ec49c227e90ab8bce5283f45f454d0c0876261b9354eaa837b8ae7ee1fb11bbe30a51e25b44e36a92c63d186216f8678005ea85b4f04b4b170933e79b03f0859c3801c85427bcf90a918ab80997a4c9a38e9c93e6af52a88dfd3942144419bea436951d11d64473ad4a1a22a52375f2847d6fb53af0270cc927574d12242bb3e3903ee78b955be1cb3b128d0f38b520bda7a30380453a7cab25ba063d89e31c0e3574c3fd6ed1997d86d7c6e5d36768ed92df9c74a15666c2ee9d05858ee875c09bc2d1e8ea812f95e9d7fa4657f91a4ab7f09c532445e8509a93f5cb7f12ddb2875737ee00a4efdb84889bf16acc287dfa4903dd59a309cf0314739758ea3be488c61bf7a65f046d82929aa6e3e39c5f23a60f86763f64c4cf8cb371acdafdad7f99517159592b3e8287e590c82105b769685f2d36f507af10756b494a3f212668a4b457b2aa2f0117c9ce9779983e00cb50ff9e006cb72a2ea0a6aa764f21b3454de16136d68d2db9b3fb9b81bd23a903b65e931576e77fb75fdb2f22b11933027721403c65649545f7e0f3597994e2bff6c18c64434e15668b708bfe55720d3938f9cdfa5b6576d7689837b2c77a1688c0ae182a7b12e80794615120205bb6beca7f903bb54e27d1cbbee01579317e5952b231d0e3a6fb54ba3a5912b16d87186b27db4dd8618956676a1c47bdc825797c6dc878031240af1d50b7f8412c7a5709a6d48865531f50aaf1c10f683a90432ed10aaa10b266025c905c5055ac8ff9c2e1802086812f9395ac4f25d1a69f43ef9fec0814ec1a6fe699ab2f14db982561ec811dc6026f158b2e464986886f70f5526b18dc29ebc3f59973bcfac7029cfdcf80399c2b09be230febf77257a7d950d1465bef1e45cc38a5e6ad3da02dfaf601a3768019bdacdfb1f2179a412f2d983c119b777c6dc92d82f4f3df15dce4884af9496d5def902e851830c8090099dd1f991092e962b0298cec51617ba0bba5d2845c9e186cf22a3994c722a4c91663f56fc7487e657f1edde30bd96cc1bd30ee578dc2aee21dd1c9630e336f153a1beb6d05ba7387435ca4f3ff53cc0d9a3d79cc9a1170992865f3242f512ebf59e37e483aff2841ac563070b97528c6631507bb9bc9b6ac4e0ca2e8456aa06480961605d608e71bc389611b61f3843df67bcd9090e7f06092fbe7f4775792c5e1294f36242785058399228720856b01258cfcf8ba1d49bc8e6eac7d674959faa89c7445cf9e50fa866194bcb6f51fd7312ad22aaf771d90ddb1c97e07b2f519965a1348987e2f3a3318190c2138b0a9c3e1ffeebbba88943797b50c8d21dfd12dd4165b55f0978c9036d8fb57627b5e4e8b3e567f9dc09326abc50ea9750a8f670a38f80b441ddfbcdd596c55e065b74037a431c52bddc46d6012275ca0bc1cc88ecd529adbd8156d8e6dc7c87030a84e23d9d5b86b315affdb8467cb697a44ce48459437bd09883d89b723547b07dd89c983ba0d79170a0d5b3645f9eaf382292546e89f42c50b667855b5a9a2f1b8cfa86153de37923d833d95a8d92a18fdaa544445a3a3389f7df3b3d03593d1e9df880dc79b8736e5b0856a21ff5b25ae2ff68797197c835c191ebafcd313d953bd9a2c94dc40cdf49032b0ca8e6d8453b6c116da4f8b817d87675ce882d35b1a8b72eb310e9aed44c5616e6292b99821af264d08bae5a64c89c10b620754247ccefd645ff780fa45af9022c06dbf0a44af1fc19a358de38ccbcc82724c59a3057568bdbf881501caaf6ecf60f6971f935f7c594fa94199a6e1f0550606727da0a5037806cfe8bb7833e296ae9fd170da755dccea7891cde1747cb7e5c9471a25faa0dca2225019fbb2672e8e4609442e417f294b028bee9628db4e422f66bcb0b3077cd4ab4e24d2ed3feb63e908c82bc4ab05770e41ced58a3821850c9537b32b2410de67144c51056117d32164532bdd5dd038b6c3c8d34be10613a7282198c337a22360c028c158bc070067737859f9d39ff29db36c817df14e12be12ab8adf8461a7c23ffc24796f6bd44015a93c43cab90f5893a070ede7f88ee7fdbacdaeac1f0725f49224bb364e62bb614edd09434323ee587b80b7444cd9b58d863b7f714a7101531eb14e853a9a354163396f88a1463db75f44e2c87af099b740e3754f5b14fa21d5c14e96fce237d643ab74bb6ece0757754bbf0cedfe010b2fcf65b3b43c883934e48d398b616ad3c671303398d7f6402fc6d90bd3747ebbc08465f5b0ee76d0404c063b029ae2db83753f805a17a0835392615b07b3d429b1064f9e80cde23f9cceb11e9ffcee86e9f60b70b8589b609c79eacc947c4e3931dce55107edb1ddcdd63e7236f00eaaaa4ace1a10416625db9f49ae61a0b3593c37f26b277e2a3fe0efbf13aa274cd70055df13da055afadf7a182d3f9168120f88c4518244968f7960f64809e7ea1dabeac436432883b950ab437623117684b50c6725d81f64ac4d0bb3780ecb4749d13d0c865b99fc92d09628ab7dbd7d806bfebc4ac9bfe11afc14b6412b0daa31d8e009c24805faa07e6f924a0904366c431298e91b565ef1ad14dbd1cd4bad0b5fdedf274df9ca6bc5f0b11fabd7bb0de93bd9edf310fcf80acf35a86cda0b8e4f1ff0cf355a301087324c6b31090d507c2888a7871a006bfb978507f99785550426641c88f95fb021114b78f46933f8bce496d812eab8a56c5ee1095aea859267735c0eac1a799063f6b17cc45666cb5b5d523afebb9f9b08b8cf35025ab97b74f0e307d235bff9157b27e0a8b6cc748a3b79fff23129a74bd4eb3ff05105bb3ddcd6949a49186f62b551fc5bb1101ba67f226669a3f8ac8aa9574a768a94feeeaed0072875c2d13dcb0d019accdde2c4b0c17e3e1dd9f8c759f5847fbdd326bcafb9655a1243919be9fcaec0130b64ff879c18d97e0a8cc52995d0bcc46585395c65dc0cf9beda82646918bb82c92346cf5029a85f5cd92d0485eba9d1191e4758c48b3420d84c4ced87b09906814c61c45f5bd42"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x2144}}, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000540)={0x4cc, 0x15, 0x4, 0x70bd2a, 0x25dfdbfe, {0x5dee2916c3e5c75, 0x51}, [@INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "55c25a8c2458e822fc04251332e0a7bc1fbe84a74ef3cf20d33de07522c57aab691e395a78e8f5c8f78bd56de382a26366f29fac3d5b826396e9d16ca7c1900d41a11b65e365be256f508452c13ca6e2cd174e381d9a5f097cde86bef607f331421d6213e35beacbfe5d911745eff82ae3ba3196688c96bddcc2177a69e61af5555a83472cb167533d63459287584bc317209a1ebd4e4b6fc04e18b74cab0ab3979c63b643738149249997d40b42a6d04ed35c1b9ecf15014e"}, @INET_DIAG_REQ_BYTECODE={0xd4, 0x1, "454f6482ebb135416b231c19e11eb21172d7cec63b188ec4c7c2078da539aed2318df8eae0a00cc97ce0dae8fbc21bd40267b29bbd5f18dc76c14f9a0257eddac30e789857cfae3959cf57c75eb9920104c3ef878c4e70d153cf72dc014531761c9f502b79ae2894df0c8381d9c01e80cf4cb1df1f0f133137e92c60f700838d981c3a77c2cd15dacc47bb0b76aac426a80e73a5188053d21bbad958b385e7e788aba06bb3ee1ee3d925fd338f8acb2eaa610c7197bd3e2fec64ebf39bac194140837b253fc0f06b4baf3fa076764f76"}, @INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "46f2921f2ecddac58c5db4e4689b652ec84c7168373b2a2b5bad39a23dd9da61b83f6e5734ccacfb162b7b50a77e8621a9d00f7cedefb52796fdb1b77c088d773e40e70444730cf736fecda3b97a18d83f20e800d03371e84c98cb3e91e7af0bcce735a94638aff06917c671d6ff0ff16b1899716a4b45d5172a25bb2263a35ad244fc4e5ffee430a814ab725b496292d0e27fcec8d0bd4ed0da4fabdbbe831e7435a0038b8f2534bb6b8569db78f4fe0064b78c826364712f50ea6508c7084ce274834d2c84c43f227e7c6a6900c9706876cf1fdfec8b942ca407463048b9a7bd3eb717"}, @INET_DIAG_REQ_BYTECODE={0x7b, 0x1, "97c99a67ea80b20626783958d71d4e7da8322227639a4354013581ac4837075db7aae678f1b5a36b62e2a3808f176c6e2bcc32a1b8ff8dd2c84feef531311e8def560451bd354c833ecce94b129cf3410f36823de612b867acd29367589c428c530b3ac4353fdf927d4b49d7fa6442fa16ee3ed8386624"}, @INET_DIAG_REQ_BYTECODE={0x84, 0x1, "1df2002f67a2472a238c160cce411b44f196396699cef19dde076d678bd3bf1dc4a65c79893d0e15d99c3d681868401d96411bec7a399762f15697a4865c6d0a6b2002674896bc5e8fe7f1167beb86524108bdd2370498d80cda7626072685ba524bf25f63fd5f97b7853c44da158b3d574127416bf2f54e3941bc4641fce131"}, @INET_DIAG_REQ_BYTECODE={0x76, 0x1, "aaf6e13b9c4b3b98df3373d5d4c349a8ba77feb2eaf053d931595baae699e2aae5f578750f9bbd40f8560d5eaf6b2b4ffef94588be263b3b570577fef51acc37e58fd7e367f7c6827e7ffd60c9eefcc79c0efb6539e829c084f72bde34c48b5bc2fed77e0316eb730adea7134a5766198ba8"}, @INET_DIAG_REQ_BYTECODE={0x1c, 0x1, "239d87c2f7de7e89a30600b29517187142b2dcca2ba26d41"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "409bee165a1c128a0d18551347ae17e9547a89e7b4c15713f691cb8653198341ac8c743753940fbea6f45270a2113e9874bace565703ec40f92f46c72b771d9a5db39a77bb59cf2fa837138a442474e890526c5bd17c70ae82c7a0b969fc818aa3d9f9bbe66bed9a9db554881f1c"}, @INET_DIAG_REQ_BYTECODE={0x33, 0x1, "029759f42016f5c86b17dba0d7cabe13eede5a3d9ec29cb877626a7772b63ea388ab954ca2aab332d7edf85dc84105"}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x24000800}, 0x2008c000) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000300)={r4, &(0x7f0000000140)='#%^&\'\'\x00', 0x40403, &(0x7f00000001c0)={@_ha_fsid={[0x2, 0x2]}, {0x4, 0xf, 0x5, 0x1000}}, 0x8, &(0x7f0000000200), &(0x7f00000002c0)=0x1}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01c000000000000000000200000008000300", @ANYRES32=r6, @ANYRESDEC=r0], 0x40}}, 0x28040010) 1.337430701s ago: executing program 2 (id=2604): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000001c0)=0x80, 0x100800) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x3f7, 0x800, 0x70bd2b, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004010}, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0xff) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x2, 0xffff}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8805}, 0x10) 1.308534608s ago: executing program 3 (id=2605): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000e08004bba004000650000020690780a010102ac1414bb070b05e0000001ac1e0001440c0501ac1414aa00000000004e244e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5108fffd90780008"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001b40)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001a80)=[{&(0x7f00000000c0)="ae4d00750062f170fc3648d346a463885c08abc778f37d5af73609e689642bf10638662fdae6669cfc454ff6f93d98fb6bf62ebc0b06", 0x36}, {&(0x7f0000000240)="c9dc46dbc4a26f4b66f9b220922a5e5659d7b1d4c3445c70cb2532923d305542f0e370f6c64c230c67acef819c9a4233581e85596dba8ecf2af00550edfb457cfc7451fa946eb0b97f0f3b501415530df5f85e64fad54eadbb8f2bb503927e5ba2e3c5d8389a8d24f92802fab872955b6a6bc3d31b60feed344deb0d60308b1417a9888a09b23c15675aa8bff4daecf679385c1ef3be615cba76a16259a9f9bf5073ff29ab12b77c828fc0fce721c467ec4466fbefce28556d1c18eb769501fd4f1fe159e626", 0xc6}, {&(0x7f00000003c0)="2c64ec5b14828f2438c98b774942e02cc52723358a3614996fa4a102ce49dbca27d8c91fe120cc8f18adf687fc6c95249370c5f4447f4ef335c256f4f804ade4d4f2373180f3fd78780ffab28946cb7894bb637704b4ed094cd3e3755dc73922c17fa3fde516a564f27ce2f342b1614e6c460c38b9f71c9841631ec90d0b36774ff07b9c6615ada5fe726698ec04f757f49dbe088da828f8a2f022dccdbf314ba6ef8b077330fc3fe155b3e1fa4166651c2fcd6666c67e77278a5d4f1b5654ca4b0eec0e40bb67a7436cc2ba6b0c0ceeeb75bdc27a13fa69c2cd8e", 0xdb}, {&(0x7f00000004c0)="c4ec53a19082de982796023c1f9b36867360376c872efeaf621fd64990f1a5c20543df94db10af3c9b1430fef050b9dcb74d0cbfbd3e6ee5de0e59653702bceb4f4c66a6ea3001fd008d248bb6e19811f091d960857eba67647c09967d", 0x5d}, {&(0x7f0000000a40)="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", 0xff6}, {&(0x7f0000001a40)}], 0x6}}], 0x1, 0x4000180) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0) ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000a00)="4749c2368bbfdd2c7f17323cf53a") 1.306935719s ago: executing program 4 (id=2606): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x10, 0x1, 0x8}]}) close(r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) (async) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x10, 0x1, 0x8}]}) (async) close(r0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) 1.232942694s ago: executing program 0 (id=2607): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000540)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x1, @b={0x7f, 0x3, 0x6, 0x1, 0x2, 0x2, 0xf9, {}, 0x9, 0xf, 0x2, 0x86, 0xf3, "e7b3a1c36e52609caba08a51f2652c618f297f8bf5390fa61b7facb27e63965d3d40a5e23e49ef70f6a0c27755118a043c4509339d72069f82ee81ffb31c57ffb19366a106e89d64a6888d53942b3f711420819bd60c3d97d496320f4ed9d39873c7327b5d9a71ed2aff3f54957c44a6bf54b7d1d5025512486537178e09fe445db8bfd0dcd57e5e4f540453dc7fe465a001703f1255cd3b2ff9a23f69a1305ae84ed6aababf9b83800a06ffd5c8b7b4251e94191bd58f147ae478238ad216fe7ad42d2e7829b47733a9566787fff2bc8576976bb597874640db479ffc72582ab8a060c3c0fe193db2575d19905ff8e53ce6ba"}}, 0x103) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @remote}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000002c0)={r2, 0x7}, 0x8) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x700, 0x20, 0x3, 0x3, {{0x5, 0x4, 0x1, 0x7, 0x14, 0x67, 0x0, 0x0, 0x4, 0x0, @loopback, @empty}}}}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000080)={r2, @in={{0x2, 0x4e24, @local}}}, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.225643146s ago: executing program 1 (id=2608): sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}}, 0x40000) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x1) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x48000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000500)={'wpan4\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xfc, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0xb4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x5}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "33fca62128f008faaaa1f021fc76da7b"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000880}, 0x8000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x1b4, r7, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x946c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x255f9b48}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59cace9d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c2e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x410678bf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79106f79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c52}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xddb8}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1801}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78c117b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fcd0d61}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa304}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1382}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x25f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xf0, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a08}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda6a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x55de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6cf0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e24}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb49a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57d9811b}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6bd2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61c78f6e}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe58}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6797}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29792c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xeb6aa34}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x461b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59a41e76}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf1a9}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a2c29bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e39}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdcd5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x54fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1929}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d99f01f}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cf3dc29}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf71c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48681832}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa420}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) (async) r8 = socket$kcm(0x29, 0x5, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xf8, r7, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xcc, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56b098d6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14edb332}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26487c36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c9ec29f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x517eec10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77bab4fa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e1215f8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ac2e44d}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48d04d6a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cdb7ab2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x889154d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23cd383c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10716906}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x400c1}, 0x4000) (async) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, r3, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x20044005) (async) ioctl$XFS_IOC_BULKSTAT(r8, 0x8040587f, &(0x7f0000000d80)={{0x8000000000000000, 0x2, 0x1ff, 0xfffffff7, 0x5}, &(0x7f0000000cc0)=[{}]}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r8) sendmsg$NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, r10, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xc}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000001200)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000f80)={0x230, r3, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0xc0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "10b4a2246b5259653d07f1cb7a8f99e2"}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2bbccd7b7c33dae5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb9}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "99ea73c3690893b142878252e68a9659f6a958216f41a19f809642d4b7672bf3"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}]}, @NL802154_ATTR_SEC_KEY={0x12c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d995a04721598b6206870b45e8d251d2"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d6899e03a42c2cbf002a54f786957002"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a852d050aecf76babd1269371bef0b1097721378b03b423e87dcd0d69a5bf406"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1a08e4eec478fc54ed11fbfd0c46d6d17cc16f3477f64b1e79af4d0c9e5b8a11"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3c8b32074513e466b4c3368dc447d399"}, @NL802154_KEY_ATTR_ID={0x58, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c347f90efafe8511bf5cbc9fd35f3c3b"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x230}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r11, &(0x7f0000001300)={&(0x7f0000001240), 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x28, 0x3f7, 0x310, 0x70bd26, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040081}, 0x0) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r9, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x6c, r12, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffc00}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x74}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) (async) sendmsg$IPVS_CMD_DEL_DEST(r9, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x84) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001600), r9) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001640)={'erspan0\x00', 0x0, 0x7800, 0x7, 0x1, 0x8001, {{0x11, 0x4, 0x0, 0x1a, 0x44, 0x65, 0x0, 0x8, 0x29, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0x7, 0xda, [@local]}, @timestamp={0x44, 0x14, 0xe, 0x0, 0x7, [0x1000, 0x8, 0x6, 0x1]}, @lsrr={0x83, 0x13, 0x85, [@dev={0xac, 0x14, 0x14, 0x23}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000001ec0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001e80)={&(0x7f0000001b40)={0x340, r13, 0x18, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x30, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2c, 0x5, "36bcbce629dfc7e6fe5b6029787f73878c302e616ce1bcbf6835be4595d71ded3cf7092b05dd24d0"}]}, @ETHTOOL_A_FEATURES_WANTED={0x1a0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x198, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, ']x)-\\/(]{{+-{(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')\'@!.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x32900875}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\'{]^\xa4\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20400000}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '%\'}#-+\':\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'NLBL_UNLBL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ']]}@/*\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '%\'#@(]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-$%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*.[(\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xce2d}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'NLBL_CIPSOv4\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) 1.085382202s ago: executing program 2 (id=2609): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0xffffffa1}, 0x0) 1.012812622s ago: executing program 3 (id=2610): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x40, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e80), r2) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8e054) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @remote}, @IFAL_ADDRESS={0x4, 0x1, @remote}]}, 0x44}}, 0x0) connect$x25(r1, &(0x7f0000000000)={0x2, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 903.880824ms ago: executing program 4 (id=2611): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e", 0x15}], 0x2, &(0x7f0000001480)}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1000"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) 833.349334ms ago: executing program 0 (id=2612): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x6}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeaa7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r2, @ANYRES32=r0], 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xd34dc79}, &(0x7f0000000100)=0x8) 765.031713ms ago: executing program 1 (id=2613): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) socket$rds(0x15, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002f8ffffffffffffff0000950000000000000014667b663e69f42b92e68681356cc143e51baf20320f5df15abb7987c27685cbc46a08cf2f4cd2386e74598677e7f5f834af50e6e09c431c69e7dd22547fe0c4a2e0efebc910e48c93eba00ec565705ccb751e354535eda6afc7aa2320b292cb12919fa79cbb16fe3e825e24000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0xfffffffffffffffe, 0x0) connect$unix(r6, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 733.816661ms ago: executing program 3 (id=2614): r0 = socket(0x10, 0x80002, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r2}, 0x20) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x53b, 0x70bd2d, 0x0, {0x9}, [{0x8c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_skbmod={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xa0}}, 0x0) 648.022532ms ago: executing program 4 (id=2615): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x21, 0x0, 0x25, 0x5}, @fwd={0xd}]}, {0x0, [0x10, 0x30, 0x0, 0x2e, 0x2e, 0x0]}}, &(0x7f0000000040)=""/109, 0x3c, 0x6d, 0x0, 0xf}, 0x28) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000100)) r1 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0xfe00}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x5}, &(0x7f0000000200)=0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000240)={0x0, @aes128, 0x0, @desc2}) r4 = socket$inet6(0xa, 0x80000, 0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000280)={r3, 0x4, 0x0, 0x216f404c, 0xe61d}, &(0x7f00000002c0)=0x18) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1110}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x120, r5, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xed03}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000800}, 0x4100) r6 = socket$unix(0x1, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000680)={'nat\x00', 0x0, 0x3, 0xff, [0x80, 0x7a22, 0x1, 0x8, 0x9, 0x61b15841], 0x4, &(0x7f0000000540)=[{}, {}, {}, {}], &(0x7f0000000580)=""/255}, &(0x7f0000000700)=0x78) ioctl$NILFS_IOCTL_GET_SUSTAT(r6, 0x80306e85, &(0x7f0000000740)) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000780)=0x9ed, 0x4) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f00000007c0)={'nat\x00', 0x0, [0x7, 0xfffffffa, 0x2, 0x1, 0x1]}, &(0x7f0000000840)=0x54) r7 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000900)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=@deltfilter={0x2c, 0x2d, 0x2, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xffe0, 0xe}, {0xf, 0x9}, {0xd, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x10048040) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000a00)) socketpair(0x5, 0x2, 0x80000000, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25GCALLUSERDATA(r10, 0x89e4, &(0x7f0000000a80)={0x78, "c38e05a0cbacfaffc579d1eb221002fccc49e15470f1eda228b316f6fac99e6a9d7be7addea42818fbce71c1e7575fe2d6e8e95729cec934786a9fbeabd6f7daca87720b5c070ad4726feb33ad3fcae396d58b0c33569a0f38edae722d4b791401bdff4ef86fc6012f53cb33839b5f3276886a05a8063b71b95f0adf3153399d"}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000b40)=@int=0x5, 0x4) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000b80)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x3, 0x401}, &(0x7f0000000c40)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r11, 0x84, 0x0, &(0x7f0000000c80)={r12, 0x3, 0x0, 0x1}, &(0x7f0000000cc0)=0x10) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x1, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000d40)={'hsr0\x00', 0x3c10}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f0000000d80)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f0000000dc0)={r13, 0x5}, &(0x7f0000000e00)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000e80)={r15, 0x1c, &(0x7f0000000e40)=[@in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x24}, 0x2}]}, &(0x7f0000000ec0)=0x10) 589.027127ms ago: executing program 0 (id=2616): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4004032, 0xffffffffffffffff, 0xb06cb000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x1, @mcast2, 0x6}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000f40)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x0, 0x0, 0x23d, 0x0, "2dfedf4fe729e6da2c283c04b074205e1eefc56dbc4e3bbeef85e81f0118fc0f64326f290de80584bce41936f14cb7a820ac8e630e660da57c076a7cb4155c7f0efdcea917bd84db674f344208d682a5"}, 0xd8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@var={0x3, 0x0, 0x0, 0xe, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x45, 0x0, 0x1}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 563.388111ms ago: executing program 2 (id=2617): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010004b0400f5ff00feffffff7a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002300fbffffffffffffff"], 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, 0x629867ce, 0x81, 0x6}, &(0x7f0000000080)=0x14) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x5}, 0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={r1, 0x6}, &(0x7f0000000180)=0x8) 405.09862ms ago: executing program 3 (id=2618): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x88}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x6}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xeaa7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@gettaction={0x60, 0x32, 0x9408f9ce2610ee65, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf6bc}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0x2e, 0x2, {0x0, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @private, @initdev}, &(0x7f0000000140)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x45, 0x6, 0x8, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x8000, 0x18743bfb7626b36c, 0x6c3}}) recvmmsg(r2, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/205, 0xcd}, {&(0x7f0000001980)=""/118, 0x76}, {&(0x7f0000001a00)=""/252, 0xfc}], 0x5, &(0x7f0000001b80)=""/57, 0x39}, 0x2}, {{&(0x7f0000001bc0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001c40)=""/190, 0xbe}, {&(0x7f0000001d00)=""/150, 0x96}], 0x2, &(0x7f0000001e00)=""/179, 0xb3}}, {{&(0x7f0000001ec0)=@isdn, 0x80, &(0x7f0000002400)=[{&(0x7f0000001f40)=""/117, 0x75}, {&(0x7f0000001fc0)=""/196, 0xc4}, {&(0x7f00000020c0)=""/68, 0x44}, {&(0x7f0000002140)=""/85, 0x55}, {&(0x7f00000021c0)=""/129, 0x81}, {&(0x7f0000002280)=""/110, 0x6e}, {&(0x7f0000002300)=""/188, 0xbc}, {&(0x7f00000023c0)=""/53, 0x35}], 0x8, &(0x7f0000002480)=""/187, 0xbb}, 0x7}, {{&(0x7f0000002540)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000003b00)=[{&(0x7f00000025c0)=""/171, 0xab}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/196, 0xc4}, {&(0x7f0000003780)=""/178, 0xb2}, {&(0x7f0000003840)=""/130, 0x82}, {&(0x7f0000003900)=""/37, 0x25}, {&(0x7f0000003940)=""/136, 0x88}, {&(0x7f0000003a00)=""/238, 0xee}], 0x8, &(0x7f0000003b80)=""/101, 0x65}, 0x2}, {{&(0x7f0000003c00)=@isdn, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003c80)=""/36, 0x24}, {&(0x7f0000003cc0)=""/27, 0x1b}, {&(0x7f0000003d00)=""/190, 0xbe}, {&(0x7f0000003dc0)=""/33, 0x21}, {&(0x7f0000003e00)=""/207, 0xcf}, {&(0x7f0000003f00)=""/20, 0x14}], 0x6, &(0x7f0000003fc0)=""/139, 0x8b}, 0x6e9}], 0x5, 0x42, &(0x7f00000041c0)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x80, 0x8, 0x8000, 0x7, {{0x47, 0x4, 0x1, 0x6, 0x11c, 0x68, 0x0, 0x40, 0x29, 0x0, @private=0xa010101, @remote, {[@cipso={0x86, 0x26, 0x3, [{0x2, 0xb, "7491c7316c7887afe7"}, {0x5, 0x11, "9537de110ad82a7ec465de9e0450be"}, {0x1, 0x4, "faa1"}]}, @timestamp_addr={0x44, 0x14, 0xef, 0x1, 0x8, [{@broadcast, 0x5}, {@multicast1, 0x1}]}, @lsrr={0x83, 0x17, 0xd, [@multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x41}]}, @lsrr={0x83, 0xf, 0xb5, [@local, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x12}]}, @lsrr={0x83, 0x2b, 0x51, [@dev={0xac, 0x14, 0x14, 0x43}, @local, @dev={0xac, 0x14, 0x14, 0x1c}, @local, @remote, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x42}, @broadcast, @dev={0xac, 0x14, 0x14, 0x35}]}, @rr={0x7, 0xf, 0xf6, [@dev={0xac, 0x14, 0x14, 0x1d}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x60, 0x2, [{0x7, 0x8, "cd821aa5e82d"}, {0x1, 0xc, "00c887e15a8b814ebbbd"}, {0x2, 0xf, "30851d0cdad9951a130ab392d8"}, {0x5, 0x11, "cb52807a9647afc898ce85a7a52391"}, {0x2, 0xd, "13d63f7bad07507fa15833"}, {0x1, 0x11, "30a968af29910b298c4aa32627375a"}, {0x6, 0x8, "d9fc6fccceb5"}]}, @timestamp={0x44, 0xc, 0x11, 0x0, 0x7, [0x9, 0x8000]}, @noop]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0x1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000840)={&(0x7f0000000000), 0xc, &(0x7f0000000800)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b303f46b", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf25070000000c00018008000100", @ANYRES32=r3, @ANYBLOB="1c000180080003000000000008000100", @ANYRES32=r4, @ANYBLOB="0800030003000000800001801400020076657468315f766c616e0000000000001400020076657468305f766972745f77696669001400020070696d3672656730000000000000000008000100", @ANYRES32=r5, @ANYBLOB="14000200626f6e645f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400020062617461647630000000000000000000780001801400020070696d3672656731000000000000000008000300010000001400020070696d367265673100000000000000001400020077673100000000000000000000000000140002006261746164765f736c6176655f3000001400020070696d3672656700000000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x134}, 0x1, 0x0, 0x0, 0x4040}, 0x5001) 268.347363ms ago: executing program 0 (id=2619): socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_emit_ethernet(0x7a, &(0x7f0000004540)=ANY=[@ANYBLOB="01010000000000000000000086dd609a83c900042f00fe880000000000000000000000000001fe8000000000000000000000000000aa042088be00000000000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000140)={'bond0\x00', 0x9}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x25d6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0x1d, r6}, 0x10, &(0x7f0000000000)={&(0x7f0000000480)=@can={{0x3, 0x1}, 0x8, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x2400c015}, 0x4000811) 173.937407ms ago: executing program 2 (id=2620): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) sendmsg$netlink(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000001c0)={0x10}, 0x10}, {&(0x7f0000000340)=ANY=[@ANYBLOB="10000000f20300000000000000000000478939b33e3d065f01f00cf4407a608f82a53e418608c61baa4b9288299e84a53a7f2213522ba3b74216ec572d40650a65df073be01362c0c237ce48df1bf8b82b"], 0x10}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000e0603000000000000000000f000000905000100"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c00028008000240000000020800014000000000080803400000002f0900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r9 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r9) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000004c0)={r2, &(0x7f00000003c0)='\x00', 0x4400, &(0x7f0000000400)={@align=0x3, {0x3, 0x8, 0x55e8c7b, 0xd}}, 0x7, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x1}) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000640)=@security={'security\x00', 0x64, 0x4, 0x2a0, 0x100000c, 0xc0, 0xc0, 0x0, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r11 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFNETMASK(r11, 0x891c, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e22, @rand_addr=0x64010100}}) r12 = accept$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x14) getsockname$packet(r12, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r4, 0x210, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4850}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00050000000000001c0012800e00010069703665727370616e000000680002800400120008000a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r1], 0x44}, 0x1, 0x0, 0x0, 0xc004}, 0x8000) 0s ago: executing program 3 (id=2621): syz_emit_ethernet(0x3b6, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x0) r0 = socket(0x10, 0x80002, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x7d, &(0x7f0000000080), 0x8) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x18, 0x48, 0x1}, 0x18}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x48, 0x30, 0x51b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r3, 0x42, 0x3}, &(0x7f0000000240)=0xc) (async, rerun: 64) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) (rerun: 64) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. [ 76.947742][ T5614] cgroup: Unknown subsys name 'net' [ 77.082735][ T5614] cgroup: Unknown subsys name 'cpuset' [ 77.092118][ T5614] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.817842][ T5614] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.034555][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.056288][ T4944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.065320][ T4944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.075461][ T4944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.083807][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.092693][ T5638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.101396][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.110123][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.118302][ T5642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.122853][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.127297][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.141464][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.144730][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.153006][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.157131][ T5645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.172753][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.174472][ T5648] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.180735][ T5645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.187435][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.190327][ T5648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.198224][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.225167][ T4944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.233930][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.235170][ T4944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.255102][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.194148][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.202316][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.209928][ T5626] bridge_slave_0: entered allmulticast mode [ 83.217699][ T5626] bridge_slave_0: entered promiscuous mode [ 83.270214][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.278101][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.281106][ T5636] Bluetooth: hci0: command tx timeout [ 83.292771][ T5626] bridge_slave_1: entered allmulticast mode [ 83.293034][ T5638] Bluetooth: hci1: command tx timeout [ 83.299039][ T4944] Bluetooth: hci4: command tx timeout [ 83.311568][ T5640] Bluetooth: hci3: command tx timeout [ 83.312408][ T5626] bridge_slave_1: entered promiscuous mode [ 83.354886][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.362477][ T5638] Bluetooth: hci2: command tx timeout [ 83.362630][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.376447][ T5631] bridge_slave_0: entered allmulticast mode [ 83.383960][ T5631] bridge_slave_0: entered promiscuous mode [ 83.392172][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.400664][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.408171][ T5631] bridge_slave_1: entered allmulticast mode [ 83.415967][ T5631] bridge_slave_1: entered promiscuous mode [ 83.481174][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.488846][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.496686][ T5629] bridge_slave_0: entered allmulticast mode [ 83.504405][ T5629] bridge_slave_0: entered promiscuous mode [ 83.537767][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.547778][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.556493][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.564077][ T5629] bridge_slave_1: entered allmulticast mode [ 83.571645][ T5629] bridge_slave_1: entered promiscuous mode [ 83.581570][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.610464][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.646624][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.717102][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.724595][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.732963][ T5628] bridge_slave_0: entered allmulticast mode [ 83.740540][ T5628] bridge_slave_0: entered promiscuous mode [ 83.754662][ T5631] team0: Port device team_slave_0 added [ 83.763939][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.777186][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.810862][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.818183][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.826279][ T5628] bridge_slave_1: entered allmulticast mode [ 83.833808][ T5628] bridge_slave_1: entered promiscuous mode [ 83.843093][ T5631] team0: Port device team_slave_1 added [ 83.861604][ T5626] team0: Port device team_slave_0 added [ 83.867948][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.876366][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.884099][ T5632] bridge_slave_0: entered allmulticast mode [ 83.891574][ T5632] bridge_slave_0: entered promiscuous mode [ 83.932971][ T5626] team0: Port device team_slave_1 added [ 83.952126][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.960318][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.969142][ T5632] bridge_slave_1: entered allmulticast mode [ 83.976873][ T5632] bridge_slave_1: entered promiscuous mode [ 84.011422][ T5629] team0: Port device team_slave_0 added [ 84.040372][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.051076][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.058443][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.091405][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.111366][ T5629] team0: Port device team_slave_1 added [ 84.117778][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.125350][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.154032][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.178530][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.200134][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.207701][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.235555][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.257665][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.266397][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.293943][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.308191][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.355116][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.367708][ T5628] team0: Port device team_slave_0 added [ 84.377544][ T5628] team0: Port device team_slave_1 added [ 84.384215][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.392029][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.420199][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.433539][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.440549][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.467778][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.545359][ T5632] team0: Port device team_slave_0 added [ 84.563938][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.571835][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.602155][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.616675][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.624213][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.654771][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.678504][ T5632] team0: Port device team_slave_1 added [ 84.711444][ T5631] hsr_slave_0: entered promiscuous mode [ 84.719937][ T5631] hsr_slave_1: entered promiscuous mode [ 84.753132][ T5626] hsr_slave_0: entered promiscuous mode [ 84.760589][ T5626] hsr_slave_1: entered promiscuous mode [ 84.768057][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 84.775187][ T5626] Cannot create hsr debugfs directory [ 84.811897][ T5629] hsr_slave_0: entered promiscuous mode [ 84.818568][ T5629] hsr_slave_1: entered promiscuous mode [ 84.825419][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 84.831465][ T5629] Cannot create hsr debugfs directory [ 84.864374][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.872049][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.898694][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.951585][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.959473][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.988231][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.053503][ T5628] hsr_slave_0: entered promiscuous mode [ 85.060388][ T5628] hsr_slave_1: entered promiscuous mode [ 85.067194][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 85.073298][ T5628] Cannot create hsr debugfs directory [ 85.245373][ T5632] hsr_slave_0: entered promiscuous mode [ 85.252665][ T5632] hsr_slave_1: entered promiscuous mode [ 85.260112][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 85.268790][ T5632] Cannot create hsr debugfs directory [ 85.359233][ T5640] Bluetooth: hci3: command tx timeout [ 85.359328][ T4944] Bluetooth: hci4: command tx timeout [ 85.365734][ T5638] Bluetooth: hci1: command tx timeout [ 85.378738][ T5636] Bluetooth: hci0: command tx timeout [ 85.439811][ T5636] Bluetooth: hci2: command tx timeout [ 85.701723][ T5626] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.717105][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.725923][ T5626] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.738173][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.750040][ T5626] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.762158][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.771987][ T5626] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.784331][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.875070][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.891111][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.902396][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.913603][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.928026][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.939631][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.961833][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.973946][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.069142][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.085396][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.094346][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.105148][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.113524][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.123751][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.134152][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.147534][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.256383][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.274737][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.289698][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.302814][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.313023][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.324575][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.352363][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.362761][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.416496][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.494362][ T5632] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.507340][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.526107][ T5632] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.536670][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.556564][ T5632] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.566972][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.576358][ T5632] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.586699][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.597315][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.618588][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.665599][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.673404][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.696919][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.706085][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.747384][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.787809][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.795549][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.822936][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.831161][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.874906][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.960937][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.012576][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.020747][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.047880][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.075912][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.084194][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.126530][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.190262][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.270284][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.317943][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.326268][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.379249][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.386732][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.420312][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.428343][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.439947][ T5636] Bluetooth: hci1: command tx timeout [ 87.445446][ T5636] Bluetooth: hci3: command tx timeout [ 87.452266][ T4944] Bluetooth: hci0: command tx timeout [ 87.452349][ T5638] Bluetooth: hci4: command tx timeout [ 87.481284][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.489010][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.529057][ T5638] Bluetooth: hci2: command tx timeout [ 88.350894][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.694070][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.957364][ T5629] veth0_vlan: entered promiscuous mode [ 89.026437][ T5629] veth1_vlan: entered promiscuous mode [ 89.193914][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.221964][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.244339][ T5629] veth0_macvtap: entered promiscuous mode [ 89.256365][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.284734][ T5629] veth1_macvtap: entered promiscuous mode [ 89.343656][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.391541][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.412452][ T5626] veth0_vlan: entered promiscuous mode [ 89.426617][ T5631] veth0_vlan: entered promiscuous mode [ 89.461087][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.470546][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.482528][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.500122][ T5626] veth1_vlan: entered promiscuous mode [ 89.511781][ T5628] veth0_vlan: entered promiscuous mode [ 89.519253][ T5638] Bluetooth: hci4: command tx timeout [ 89.519368][ T4944] Bluetooth: hci1: command tx timeout [ 89.524974][ T5638] Bluetooth: hci0: command tx timeout [ 89.531033][ T5636] Bluetooth: hci3: command tx timeout [ 89.545090][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.587861][ T5631] veth1_vlan: entered promiscuous mode [ 89.599817][ T4944] Bluetooth: hci2: command tx timeout [ 89.663584][ T5628] veth1_vlan: entered promiscuous mode [ 89.674611][ T5632] veth0_vlan: entered promiscuous mode [ 89.723514][ T5632] veth1_vlan: entered promiscuous mode [ 89.772181][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.786067][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.812997][ T5626] veth0_macvtap: entered promiscuous mode [ 89.831239][ T5631] veth0_macvtap: entered promiscuous mode [ 89.843112][ T5626] veth1_macvtap: entered promiscuous mode [ 89.865694][ T5631] veth1_macvtap: entered promiscuous mode [ 89.877340][ T5628] veth0_macvtap: entered promiscuous mode [ 89.903607][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.914265][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.925012][ T5628] veth1_macvtap: entered promiscuous mode [ 89.948616][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.969485][ T5632] veth0_macvtap: entered promiscuous mode [ 89.982238][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.010800][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.025257][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.042903][ T5632] veth1_macvtap: entered promiscuous mode [ 90.045577][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.104340][ T93] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.114389][ T93] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.157197][ T93] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.172554][ T93] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.188059][ T93] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.208473][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.222522][ T93] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.249881][ T93] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.277415][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.295524][ T93] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.327204][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.370578][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.457877][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.483174][ T93] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.510597][ T5834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7'. [ 90.511889][ T93] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.543717][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.544752][ T93] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.552283][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.562725][ T93] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.594692][ T93] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.605166][ T93] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.632379][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.708680][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.728354][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.754695][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.768667][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.860081][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.881235][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.923672][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.935993][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.006812][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.024848][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.106464][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.127049][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.178438][ T5837] vlan2: entered promiscuous mode [ 91.186560][ T5837] hsr0: entered promiscuous mode [ 91.194691][ T5837] vlan2: entered allmulticast mode [ 91.202832][ T5837] hsr0: entered allmulticast mode [ 91.208702][ T5837] hsr_slave_0: entered allmulticast mode [ 91.227118][ T5837] hsr_slave_1: entered allmulticast mode [ 91.250910][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.311646][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.824340][ T5851] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 91.862446][ T5854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 92.019727][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.029476][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.137687][ T5859] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11'. [ 92.273951][ T54] cfg80211: failed to load regulatory.db [ 92.294778][ T5851] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 92.329389][ T5843] Zero length message leads to an empty skb [ 92.368803][ T5863] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 92.378324][ T5843] netlink: 'syz.3.4': attribute type 16 has an invalid length. [ 92.398453][ T5843] netlink: 'syz.3.4': attribute type 17 has an invalid length. [ 92.623523][ T5843] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 92.695920][ T5870] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET) [ 92.805419][ T5867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13'. [ 93.039707][ C1] Illegal XDP return value 16128 on prog (id 2) dev bond0, expect packet loss! [ 93.231704][ T5882] syzkaller1: entered promiscuous mode [ 93.255860][ T5882] syzkaller1: entered allmulticast mode [ 93.455344][ T5890] bridge1: entered promiscuous mode [ 93.501656][ T5890] bridge1: entered allmulticast mode [ 93.573054][ T5890] team0: Port device bridge1 added [ 93.662528][ T5882] syzkaller0: entered promiscuous mode [ 93.692235][ T5882] syzkaller0: entered allmulticast mode [ 93.736351][ T5904] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 94.065686][ T5909] pim6reg1: entered promiscuous mode [ 94.077804][ T5909] pim6reg1: entered allmulticast mode [ 94.213434][ T5923] netlink: 'syz.2.26': attribute type 1 has an invalid length. [ 94.597160][ T5933] netlink: 'syz.1.29': attribute type 29 has an invalid length. [ 94.652220][ T5939] netlink: 'syz.1.29': attribute type 29 has an invalid length. [ 94.672493][ T5941] Unknown options in mask b7f2 [ 94.685523][ T5933] netlink: 'syz.1.29': attribute type 32 has an invalid length. [ 94.711109][ T809] IPVS: starting estimator thread 0... [ 94.716607][ T5933] netlink: 500 bytes leftover after parsing attributes in process `syz.1.29'. [ 94.820330][ T5942] IPVS: using max 33 ests per chain, 79200 per kthread [ 95.381041][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36'. [ 95.472447][ T5972] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 95.728619][ T29] audit: type=1800 audit(1778491413.083:2): pid=5986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.43" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=79 res=0 errno=0 [ 95.925915][ T5990] syzkaller1: entered promiscuous mode [ 95.957520][ T5990] syzkaller1: entered allmulticast mode [ 96.095419][ T6000] veth3: entered allmulticast mode [ 96.391894][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.54'. [ 96.580291][ T6014] netlink: 220 bytes leftover after parsing attributes in process `syz.1.54'. [ 97.066806][ T6035] warning: `syz.1.58' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.245948][ T6044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.60'. [ 97.272859][ T6044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.60'. [ 97.901289][ T6073] openvswitch: netlink: Missing key (keys=40, expected=100) [ 97.993883][ T6070] netlink: 'syz.0.69': attribute type 16 has an invalid length. [ 98.066165][ T6070] netlink: 'syz.0.69': attribute type 17 has an invalid length. [ 98.151721][ T6070] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 99.005376][ T6124] netlink: 'syz.4.84': attribute type 8 has an invalid length. [ 99.228661][ T6131] unsupported nlmsg_type 40 [ 99.256737][ T6129] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 99.319028][ T6133] netlink: 32 bytes leftover after parsing attributes in process `syz.4.88'. [ 100.014447][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.97'. [ 100.292567][ T6186] netlink: 256 bytes leftover after parsing attributes in process `syz.4.102'. [ 100.322614][ T6186] netlink: 256 bytes leftover after parsing attributes in process `syz.4.102'. [ 100.346526][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 100.517910][ T6192] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 100.574784][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'. [ 100.588653][ T5748] IPVS: starting estimator thread 0... [ 100.701402][ T6198] IPVS: using max 23 ests per chain, 55200 per kthread [ 101.677740][ T6239] netlink: 'syz.4.115': attribute type 1 has an invalid length. [ 102.254138][ T6270] netlink: 'syz.3.121': attribute type 11 has an invalid length. [ 102.297214][ T6270] netlink: 'syz.3.121': attribute type 5 has an invalid length. [ 102.331179][ T6275] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 102.339928][ T6270] __nla_validate_parse: 3 callbacks suppressed [ 102.339947][ T6270] netlink: 6548 bytes leftover after parsing attributes in process `syz.3.121'. [ 102.807891][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 102.908381][ T6291] macvlan2: entered allmulticast mode [ 102.929610][ T6291] dummy0: entered allmulticast mode [ 103.127685][ T6300] bond1: (slave bond_slave_1): Device is not our slave [ 103.135523][ T6300] bond1: option active_slave: invalid value (bond_slave_1) [ 103.145717][ T6300] bond1 (unregistering): Released all slaves [ 103.172489][ T6301] tipc: Started in network mode [ 103.178623][ T6301] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 103.191319][ T6301] tipc: Enabled bearer , priority 10 [ 103.506225][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 103.544007][ T6313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.135'. [ 103.562833][ T6313] openvswitch: netlink: Flow key attr not present in new flow. [ 104.311701][ T5734] tipc: Node number set to 4269801494 [ 104.413286][ T6354] netlink: 220 bytes leftover after parsing attributes in process `syz.4.145'. [ 105.032539][ T6384] openvswitch: netlink: Multiple metadata blocks provided [ 105.069629][ T6382] netem: change failed [ 105.174766][ T6388] netlink: 'syz.4.158': attribute type 2 has an invalid length. [ 105.214228][ T6388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.242737][ T6388] netlink: 36 bytes leftover after parsing attributes in process `syz.4.158'. [ 105.402950][ T6403] netlink: 16 bytes leftover after parsing attributes in process `syz.4.161'. [ 105.571473][ T6410] netlink: 36 bytes leftover after parsing attributes in process `syz.3.162'. [ 105.577929][ T6412] netlink: 72 bytes leftover after parsing attributes in process `syz.1.164'. [ 105.726533][ T6412] netlink: 72 bytes leftover after parsing attributes in process `syz.1.164'. [ 105.977939][ T6429] netlink: 'syz.1.166': attribute type 21 has an invalid length. [ 106.288512][ T6437] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 106.317874][ T6437] bond1 (unregistering): Released all slaves [ 106.821321][ T6467] netlink: 'syz.0.178': attribute type 75 has an invalid length. [ 106.952139][ T6472] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 106.981645][ T6470] netlink: 'syz.4.179': attribute type 3 has an invalid length. [ 107.479762][ T6486] netlink: 'syz.1.184': attribute type 4 has an invalid length. [ 107.502640][ T6486] __nla_validate_parse: 4 callbacks suppressed [ 107.502681][ T6486] netlink: 156 bytes leftover after parsing attributes in process `syz.1.184'. [ 107.564870][ T6497] netlink: 14 bytes leftover after parsing attributes in process `syz.0.188'. [ 107.666188][ T6486] bond_slave_1: mtu greater than device maximum [ 107.677894][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'. [ 107.712716][ T6497] dummy0 (unregistering): left allmulticast mode [ 107.974982][ T6513] netlink: 'syz.3.192': attribute type 21 has an invalid length. [ 107.996790][ T6513] netlink: 132 bytes leftover after parsing attributes in process `syz.3.192'. [ 108.050760][ T6516] Cannot find add_set index 0 as target [ 108.062787][ T6512] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 108.238121][ T6524] netlink: 64 bytes leftover after parsing attributes in process `syz.1.194'. [ 108.252891][ T6512] bond1: invalid ARP target 0.0.0.0 specified for addition [ 108.255157][ T6524] netlink: 48 bytes leftover after parsing attributes in process `syz.1.194'. [ 108.279649][ T6512] bond1: option arp_ip_target: invalid value (0) [ 108.316008][ T6512] bond1 (unregistering): Released all slaves [ 108.496818][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.198'. [ 108.646662][ T6544] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 108.687786][ T6544] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 108.777069][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 108.867175][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'. [ 108.874555][ T6548] syzkaller0: entered promiscuous mode [ 108.883571][ T6548] syzkaller0: entered allmulticast mode [ 108.891590][ T6553] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 108.925236][ T6553] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 109.079638][ T6562] Bluetooth: MGMT ver 1.23 [ 109.430915][ T6571] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 109.442656][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 109.736351][ T6589] batadv0: entered promiscuous mode [ 109.777634][ T6589] macsec1: entered promiscuous mode [ 109.800389][ T6589] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 109.821260][ T6599] netlink: 'syz.4.216': attribute type 16 has an invalid length. [ 109.843383][ T6589] batadv0: left promiscuous mode [ 109.852952][ T6599] netlink: 'syz.4.216': attribute type 17 has an invalid length. [ 110.207538][ T6599] vlan2: left promiscuous mode [ 110.219876][ T6599] hsr0: left promiscuous mode [ 110.225833][ T6599] vlan2: left allmulticast mode [ 110.234147][ T6599] hsr0: left allmulticast mode [ 110.244129][ T6599] hsr_slave_0: left allmulticast mode [ 110.250510][ T6599] hsr_slave_1: left allmulticast mode [ 110.274437][ T6602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.285528][ T6602] batadv_slave_0: entered promiscuous mode [ 110.314806][ T6611] netlink: 'syz.1.223': attribute type 2 has an invalid length. [ 110.478233][ T6613] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 110.495271][ T6613] bond1 (unregistering): Released all slaves [ 111.002210][ T6649] tipc: Enabled bearer , priority 4 [ 111.285427][ T6665] netlink: 'syz.3.240': attribute type 2 has an invalid length. [ 111.306657][ T6664] netlink: 'syz.4.238': attribute type 1 has an invalid length. [ 111.345365][ T6664] NCSI netlink: No device for ifindex 0 [ 111.609335][ T6670] Cannot find del_set index 1 as target [ 111.812511][ T6674] netlink: 'syz.3.244': attribute type 3 has an invalid length. [ 112.454753][ T6707] netlink: 'syz.3.253': attribute type 1 has an invalid length. [ 112.710117][ T6707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.727693][ T6712] bond0: (slave gre0): refused to change device type [ 112.795788][ T6718] veth5: entered allmulticast mode [ 112.806320][ T6718] bond1: (slave veth5): Enslaving as an active interface with a down link [ 112.845793][ T6722] bond1 (unregistering): (slave veth5): Releasing active interface [ 112.861343][ T6722] bond1 (unregistering): Released all slaves [ 112.907194][ T6723] sctp: [Deprecated]: syz.1.255 (pid 6723) Use of int in maxseg socket option. [ 112.907194][ T6723] Use struct sctp_assoc_value instead [ 113.086777][ T6735] __nla_validate_parse: 9 callbacks suppressed [ 113.086799][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 113.153331][ T6712] syzkaller0: entered promiscuous mode [ 113.162424][ T6712] syzkaller0: entered allmulticast mode [ 113.189208][ T6735] erspan0: entered promiscuous mode [ 113.613414][ T6740] netlink: 'syz.2.260': attribute type 16 has an invalid length. [ 113.621642][ T6740] netlink: 'syz.2.260': attribute type 17 has an invalid length. [ 115.390486][ T6740] veth3: left allmulticast mode [ 115.464826][ T6765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.264'. [ 115.520129][ T6766] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 115.661849][ T6766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.132816][ T6791] syz_tun: entered allmulticast mode [ 116.222103][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.272'. [ 116.238236][ T6799] netlink: 'syz.2.273': attribute type 1 has an invalid length. [ 116.278078][ T1179] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.307137][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.273'. [ 116.320268][ T6799] netlink: 658 bytes leftover after parsing attributes in process `syz.2.273'. [ 116.336106][ T1179] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.353089][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 116.358801][ T6799] netlink: 'syz.2.273': attribute type 1 has an invalid length. [ 116.495478][ T1179] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.524246][ T1179] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.539908][ T6789] syz_tun: left allmulticast mode [ 116.606629][ T93] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 116.626653][ T93] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 116.643558][ T5741] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 116.679964][ T809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 116.830566][ T6813] tipc: Started in network mode [ 116.851801][ T6813] tipc: Node identity , cluster identity 4711 [ 116.881062][ T6813] tipc: Failed to obtain node identity [ 116.897233][ T6813] tipc: Enabling of bearer rejected, failed to enable media [ 116.920611][ T6817] syzkaller0: entered promiscuous mode [ 116.934333][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'. [ 116.956746][ T6817] syzkaller0: entered allmulticast mode [ 116.987673][ T6829] netlink: 'syz.1.278': attribute type 25 has an invalid length. [ 117.043914][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 117.148211][ T35] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.181900][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 117.183352][ T35] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.220811][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.252589][ T35] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.286493][ T35] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.315078][ T6843] netlink: 'syz.1.282': attribute type 1 has an invalid length. [ 117.493910][ T6849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.284'. [ 117.520058][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.554335][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 118.083925][ T6871] netlink: 'syz.0.289': attribute type 1 has an invalid length. [ 118.112341][ T6873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.290'. [ 118.154977][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 118.180091][ T6871] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.197346][ T6872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.312165][ T6877] bond2: (slave geneve2): making interface the new active one [ 118.323119][ T6888] Cannot find add_set index 0 as target [ 118.364500][ T6888] netlink: 48 bytes leftover after parsing attributes in process `syz.4.292'. [ 118.374775][ T6889] netlink: 'syz.3.293': attribute type 28 has an invalid length. [ 118.374804][ T6889] netlink: 'syz.3.293': attribute type 3 has an invalid length. [ 118.374819][ T6889] netlink: 132 bytes leftover after parsing attributes in process `syz.3.293'. [ 118.377252][ T6889] netlink: 'syz.3.293': attribute type 4 has an invalid length. [ 118.422708][ T6877] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 118.484782][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.559305][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.591023][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 118.689756][ T6895] veth0_macvtap: left promiscuous mode [ 118.842102][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.300'. [ 119.028203][ T6911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.302'. [ 119.096510][ T6911] netlink: 'syz.4.302': attribute type 7 has an invalid length. [ 119.125496][ T6911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.302'. [ 119.427190][ T6939] netlink: 20 bytes leftover after parsing attributes in process `syz.4.310'. [ 119.454283][ T6940] netlink: 20 bytes leftover after parsing attributes in process `syz.4.310'. [ 119.601700][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.242583][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.399905][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 120.640076][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.984052][ T7007] validate_nla: 2 callbacks suppressed [ 120.984075][ T7007] netlink: 'syz.2.326': attribute type 1 has an invalid length. [ 121.376927][ T7013] bond1: Invalid ad_actor_system MAC address. [ 121.384593][ T7013] bond1: option ad_actor_system: invalid value (1) [ 121.395645][ T7013] bond1 (unregistering): Released all slaves [ 121.683543][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.693552][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.028458][ T7037] dvmrp0: entered allmulticast mode [ 122.320955][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.332978][ T7066] netlink: 'syz.3.344': attribute type 1 has an invalid length. [ 122.364437][ T7066] netlink: 'syz.3.344': attribute type 1 has an invalid length. [ 122.404050][ T7066] netlink: 'syz.3.344': attribute type 8 has an invalid length. [ 122.446853][ T7073] syzkaller0: entered promiscuous mode [ 122.461537][ T7073] syzkaller0: entered allmulticast mode [ 122.726416][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.176693][ T5774] IPVS: starting estimator thread 0... [ 123.177240][ T7101] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 123.194234][ T35] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 123.224112][ T7103] __nla_validate_parse: 52 callbacks suppressed [ 123.224132][ T7103] netlink: 52 bytes leftover after parsing attributes in process `syz.1.358'. [ 123.279296][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.299484][ T7105] IPVS: using max 27 ests per chain, 64800 per kthread [ 123.678420][ T1179] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.723584][ T1179] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.756827][ T1179] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.798309][ T1179] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.130329][ T7148] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 124.269375][ T7150] netlink: 'syz.0.371': attribute type 9 has an invalid length. [ 124.320070][ T7153] xt_nfacct: accounting object `syz1' does not exist [ 124.553992][ T7160] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:0 [ 124.695110][ T7173] tipc: Started in network mode [ 124.718011][ T7173] tipc: Node identity ac14140f, cluster identity 4711 [ 124.761757][ T7173] tipc: New replicast peer: 255.255.255.255 [ 124.803100][ T7173] tipc: Enabled bearer , priority 10 [ 124.874541][ T7173] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 124.874541][ T7173] Please contact the netfilter-devel mailing list or update your nftables rules. [ 125.021529][ T7188] tipc: New replicast peer: 255.255.255.255 [ 125.058013][ T7188] tipc: Enabled bearer , priority 10 [ 125.097619][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.382'. [ 125.152456][ T7193] openvswitch: netlink: EtherType 50a is less than min 600 [ 125.417541][ T7208] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 125.919177][ T809] tipc: Node number set to 2886997007 [ 126.486486][ T7257] veth0: entered promiscuous mode [ 126.504131][ T7257] veth0: left promiscuous mode [ 126.516695][ T7255] netlink: 248 bytes leftover after parsing attributes in process `syz.1.400'. [ 126.699671][ T7263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.403'. [ 126.739336][ T7263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.403'. [ 127.081286][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 127.284327][ T7284] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 127.287862][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 127.352151][ T7284] bond1 (unregistering): Released all slaves [ 127.420568][ T7304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.418'. [ 127.571012][ T7293] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 127.800707][ T7320] netlink: 'syz.4.423': attribute type 7 has an invalid length. [ 127.869032][ T7320] netlink: 'syz.4.423': attribute type 7 has an invalid length. [ 128.719600][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 128.765452][ T7350] netlink: 'syz.1.433': attribute type 11 has an invalid length. [ 128.803157][ T7350] netlink: 224 bytes leftover after parsing attributes in process `syz.1.433'. [ 129.123745][ T7365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.438'. [ 129.128429][ T7361] syzkaller0: entered promiscuous mode [ 129.158561][ T7361] syzkaller0: entered allmulticast mode [ 129.654144][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.444'. [ 129.664319][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.444'. [ 129.742504][ T7390] erspan0: entered promiscuous mode [ 129.752035][ T7390] gretap0: entered promiscuous mode [ 130.036269][ T7400] netlink: 'syz.4.450': attribute type 1 has an invalid length. [ 130.056870][ T7397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.448'. [ 130.074550][ T7397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.448'. [ 130.121803][ T7400] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 130.257459][ T7409] netlink: 5 bytes leftover after parsing attributes in process `syz.0.452'. [ 130.318329][ T7413] netlink: 'syz.3.454': attribute type 1 has an invalid length. [ 130.496759][ T7423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.458'. [ 130.521161][ T7427] netlink: 'syz.4.457': attribute type 64 has an invalid length. [ 130.546590][ T7423] netlink: 52 bytes leftover after parsing attributes in process `syz.1.458'. [ 130.565197][ T7427] netlink: 5 bytes leftover after parsing attributes in process `syz.4.457'. [ 130.566122][ T7428] netlink: 'syz.4.457': attribute type 64 has an invalid length. [ 130.619659][ T7430] netlink: 'syz.3.459': attribute type 39 has an invalid length. [ 130.732237][ T7433] netlink: 'syz.0.460': attribute type 4 has an invalid length. [ 130.754165][ T7434] netlink: 'syz.0.460': attribute type 4 has an invalid length. [ 130.823281][ T7445] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 130.885316][ T7427] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 131.193821][ T7460] netlink: 'syz.2.468': attribute type 1 has an invalid length. [ 131.443404][ T7460] bond1: entered promiscuous mode [ 131.456545][ T7460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.494100][ T7469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.502214][ T7469] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 131.519385][ T7469] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 131.553159][ T7469] bond1: (slave vti0): making interface the new active one [ 131.567253][ T7469] vti0: entered promiscuous mode [ 131.575669][ T7469] bond1: (slave vti0): Enslaving as an active interface with an up link [ 131.703533][ T7489] bridge0: port 3(batadv1) entered blocking state [ 131.712900][ T7489] bridge0: port 3(batadv1) entered disabled state [ 131.721503][ T7489] batadv1: entered allmulticast mode [ 131.730331][ T7489] batadv1: entered promiscuous mode [ 131.882612][ T7501] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 131.892622][ T7501] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 132.209307][ T48] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 132.221022][ T48] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 133.202533][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.212273][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.392515][ T7482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 134.615985][ T7517] validate_nla: 5 callbacks suppressed [ 134.616005][ T7517] netlink: 'syz.2.481': attribute type 9 has an invalid length. [ 134.701951][ T7518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.723152][ T7523] __nla_validate_parse: 10 callbacks suppressed [ 134.723172][ T7523] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.484'. [ 135.086968][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'. [ 135.197227][ T7548] IPv6: sit1: Disabled Multicast RS [ 135.213852][ T7548] sit1: entered allmulticast mode [ 135.449786][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 135.513904][ T7560] bridge0: port 3(batadv1) entered blocking state [ 135.540307][ T7560] bridge0: port 3(batadv1) entered disabled state [ 135.574899][ T7560] batadv1: entered allmulticast mode [ 135.597632][ T7560] batadv1: entered promiscuous mode [ 135.723225][ T7576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.771328][ T7576] netlink: 40 bytes leftover after parsing attributes in process `syz.0.495'. [ 135.901535][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 135.915554][ T7579] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 135.994117][ T1153] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 136.005388][ T1153] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 136.154188][ T7594] netlink: 68 bytes leftover after parsing attributes in process `syz.4.499'. [ 136.202742][ T7593] netdevsim netdevsim4 : renamed from netdevsim0 [ 136.288594][ T7600] netlink: zone id is out of range [ 136.313430][ T7600] netlink: zone id is out of range [ 136.325072][ T7600] netlink: zone id is out of range [ 136.342102][ T7600] netlink: zone id is out of range [ 136.358442][ T7600] netlink: zone id is out of range [ 136.388156][ T7600] netlink: zone id is out of range [ 136.410809][ T7600] netlink: zone id is out of range [ 136.433653][ T7600] netlink: zone id is out of range [ 136.506315][ T7609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.505'. [ 136.520351][ T7611] netlink: 'syz.0.504': attribute type 3 has an invalid length. [ 136.538009][ T7609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.505'. [ 136.553876][ T7611] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 136.598162][ T7611] netlink: 204 bytes leftover after parsing attributes in process `syz.0.504'. [ 136.706931][ T7618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'. [ 137.599524][ T5636] Bluetooth: hci1: command 0x0405 tx timeout [ 137.746011][ T7664] xt_TPROXY: Can be used only with -p tcp or -p udp [ 138.321013][ T5636] Bluetooth: hci3: command tx timeout [ 138.686290][ T7706] FAULT_INJECTION: forcing a failure. [ 138.686290][ T7706] name failslab, interval 1, probability 0, space 0, times 1 [ 138.745235][ T7705] bridge_slave_0: left allmulticast mode [ 138.775433][ T7706] CPU: 1 UID: 0 PID: 7706 Comm: syz.2.534 Not tainted syzkaller #0 PREEMPT(full) [ 138.775463][ T7706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.775476][ T7706] Call Trace: [ 138.775484][ T7706] [ 138.775493][ T7706] dump_stack_lvl+0xe8/0x150 [ 138.775524][ T7706] should_fail_ex+0x412/0x560 [ 138.775558][ T7706] should_failslab+0xa8/0x100 [ 138.775592][ T7706] __kmalloc_noprof+0xe8/0x760 [ 138.775621][ T7706] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 138.775652][ T7706] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 138.775685][ T7706] genl_family_rcv_msg_doit+0xd9/0x330 [ 138.775714][ T7706] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 138.775746][ T7706] ? apparmor_capable+0x126/0x170 [ 138.775769][ T7706] ? bpf_lsm_capable+0x9/0x20 [ 138.775790][ T7706] ? security_capable+0x7e/0x2c0 [ 138.775823][ T7706] genl_rcv_msg+0x61c/0x7a0 [ 138.775851][ T7706] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.775871][ T7706] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 138.775896][ T7706] ? __pfx_nl80211_stop_nan+0x10/0x10 [ 138.775916][ T7706] ? __pfx_nl80211_post_doit+0x10/0x10 [ 138.775942][ T7706] ? __pfx_ref_tracker_free+0x10/0x10 [ 138.775967][ T7706] ? __asan_memcpy+0x40/0x70 [ 138.775990][ T7706] ? __skb_clone+0x63/0x7a0 [ 138.776028][ T7706] netlink_rcv_skb+0x232/0x4b0 [ 138.776057][ T7706] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.776080][ T7706] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.776125][ T7706] ? down_read+0x270/0x2e0 [ 138.776143][ T7706] ? genl_rcv+0xd/0x40 [ 138.776165][ T7706] genl_rcv+0x28/0x40 [ 138.776183][ T7706] netlink_unicast+0x75c/0x8e0 [ 138.776219][ T7706] netlink_sendmsg+0x813/0xb40 [ 138.776257][ T7706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.776288][ T7706] ? aa_sock_msg_perm+0xf1/0x1b0 [ 138.776317][ T7706] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 138.776349][ T7706] ____sys_sendmsg+0x972/0x9f0 [ 138.776386][ T7706] ? __might_fault+0xaf/0x130 [ 138.776420][ T7706] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.776465][ T7706] ? import_iovec+0x73/0xa0 [ 138.776499][ T7706] ___sys_sendmsg+0x2a5/0x360 [ 138.776526][ T7706] ? __lock_acquire+0x6b5/0x2cf0 [ 138.776554][ T7706] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.776621][ T7706] ? __fget_files+0x2a/0x420 [ 138.776644][ T7706] ? __fget_files+0x3a0/0x420 [ 138.776677][ T7706] __x64_sys_sendmsg+0x1bd/0x2a0 [ 138.776708][ T7706] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.776748][ T7706] ? __pfx_ksys_write+0x10/0x10 [ 138.776788][ T7706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.776811][ T7706] do_syscall_64+0x15f/0xf80 [ 138.776838][ T7706] ? trace_irq_disable+0x3b/0x140 [ 138.776868][ T7706] ? clear_bhb_loop+0x40/0x90 [ 138.776893][ T7706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.776913][ T7706] RIP: 0033:0x7f55bfd9cdd9 [ 138.776933][ T7706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.776951][ T7706] RSP: 002b:00007f55c0d10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.776974][ T7706] RAX: ffffffffffffffda RBX: 00007f55c0015fa0 RCX: 00007f55bfd9cdd9 [ 138.776989][ T7706] RDX: 0000000020004084 RSI: 0000200000007ac0 RDI: 0000000000000003 [ 138.777003][ T7706] RBP: 00007f55c0d10090 R08: 0000000000000000 R09: 0000000000000000 [ 138.777016][ T7706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.777027][ T7706] R13: 00007f55c0016038 R14: 00007f55c0015fa0 R15: 00007ffdc60688d8 [ 138.777063][ T7706] [ 138.780083][ T7705] bridge_slave_0: left promiscuous mode [ 138.842488][ T7710] netlink: 'syz.0.535': attribute type 1 has an invalid length. [ 138.995663][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.298448][ T7705] bridge_slave_1: left allmulticast mode [ 139.322015][ T7705] bridge_slave_1: left promiscuous mode [ 139.355981][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.406289][ T7705] bond0: (slave bond_slave_0): Releasing backup interface [ 139.458817][ T7705] bond0: (slave bond_slave_1): Releasing backup interface [ 139.485174][ T7705] team0: Port device team_slave_0 removed [ 139.508426][ T7705] team0: Port device team_slave_1 removed [ 139.516919][ T7705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.531117][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.545699][ T7705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.556926][ T7705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.877509][ T7741] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 139.912299][ T7743] __nla_validate_parse: 3 callbacks suppressed [ 139.912323][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'. [ 140.006534][ T7734] netlink: 'syz.4.540': attribute type 16 has an invalid length. [ 140.029118][ T7734] netlink: 'syz.4.540': attribute type 17 has an invalid length. [ 140.118619][ T7734] net_ratelimit: 138 callbacks suppressed [ 140.144788][ T7734] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 140.265796][ T7761] gre0: entered promiscuous mode [ 140.298582][ T7761] gre0: entered allmulticast mode [ 140.476728][ T7770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.549'. [ 140.542230][ T7765] rdma_op ffff888021fc21f0 conn xmit_rdma 0000000000000000 [ 140.717262][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.551'. [ 140.759739][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.551'. [ 140.807448][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.551'. [ 140.917895][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.553'. [ 141.094529][ T7793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.555'. [ 141.288467][ T7798] team0: entered promiscuous mode [ 141.305860][ T7798] team0: entered allmulticast mode [ 141.535933][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.560'. [ 141.538176][ T7808] syzkaller0: entered promiscuous mode [ 141.580644][ T7808] syzkaller0: entered allmulticast mode [ 141.920677][ T7829] netlink: 32 bytes leftover after parsing attributes in process `syz.4.565'. [ 142.057109][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'. [ 142.336038][ T7847] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 142.407087][ T7847] netlink: 'syz.1.570': attribute type 2 has an invalid length. [ 142.410146][ T7850] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 143.003924][ T7866] team0 (unregistering): Port device team_slave_0 removed [ 143.088576][ T7866] team0 (unregistering): Port device team_slave_1 removed [ 144.079090][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 144.374547][ T7914] bridge0: port 4(batadv2) entered blocking state [ 144.414241][ T7914] bridge0: port 4(batadv2) entered disabled state [ 144.437325][ T7914] batadv2: entered allmulticast mode [ 144.492961][ T7914] batadv2: entered promiscuous mode [ 144.621148][ T7928] ip6gre1: entered allmulticast mode [ 144.870943][ T1179] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 144.881512][ T1179] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 145.107826][ T7942] netlink: 'syz.2.592': attribute type 29 has an invalid length. [ 145.153277][ T7942] netlink: 'syz.2.592': attribute type 29 has an invalid length. [ 145.181787][ T7942] netlink: 'syz.2.592': attribute type 32 has an invalid length. [ 145.212766][ T7942] __nla_validate_parse: 10 callbacks suppressed [ 145.212788][ T7942] netlink: 500 bytes leftover after parsing attributes in process `syz.2.592'. [ 145.502634][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.596'. [ 145.502947][ T7955] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 145.747891][ T7953] bond1: option lp_interval: invalid value (0) [ 145.766127][ T7968] x_tables: ip_tables: cgroup.0 match: invalid size 8 (kernel) != (user) 24 [ 145.783486][ T7953] bond1: option lp_interval: allowed values 1 - 2147483647 [ 145.825321][ T7953] bond1 (unregistering): Released all slaves [ 146.262379][ T7986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.602'. [ 146.288574][ T7984] IPVS: length: 136 != 8 [ 146.386618][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 146.447849][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.604'. [ 146.766143][ T8010] netlink: 'syz.0.609': attribute type 10 has an invalid length. [ 146.812271][ T8010] veth1_virt_wifi: entered promiscuous mode [ 146.836498][ T8011] Bluetooth: MGMT ver 1.23 [ 146.859425][ T8012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.609'. [ 146.916085][ T8010] netlink: 32 bytes leftover after parsing attributes in process `syz.0.609'. [ 147.017815][ T8014] netlink: 'syz.2.610': attribute type 4 has an invalid length. [ 147.133180][ T8020] netlink: 'syz.4.611': attribute type 16 has an invalid length. [ 147.172688][ T8020] netlink: 'syz.4.611': attribute type 17 has an invalid length. [ 147.384047][ T8031] netlink: 64 bytes leftover after parsing attributes in process `syz.3.615'. [ 147.407044][ T8020] netdevsim netdevsim4 : left promiscuous mode [ 147.426388][ T8020] 8021q: adding VLAN 0 to HW filter on device  [ 147.455892][ T8037] openvswitch: netlink: EtherType 50a is less than min 600 [ 147.476360][ T8037] netlink: 'syz.2.614': attribute type 2 has an invalid length. [ 147.490055][ T8037] netlink: 'syz.2.614': attribute type 2 has an invalid length. [ 147.502014][ T8020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.528400][ T8040] netlink: 548 bytes leftover after parsing attributes in process `syz.0.613'. [ 147.939942][ T8052] netlink: 36 bytes leftover after parsing attributes in process `syz.4.618'. [ 148.249580][ T1106] wlan1: Trigger new scan to find an IBSS to join [ 148.492733][ T8069] netlink: 'syz.4.624': attribute type 1 has an invalid length. [ 149.024835][ T8091] hsr_slave_0: left promiscuous mode [ 149.057650][ T8091] hsr_slave_1: left promiscuous mode [ 149.579153][ T8114] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 150.032801][ T8128] xt_bpf: check failed: parse error [ 150.044678][ T8128] xt_bpf: check failed: parse error [ 150.577400][ T8152] IPVS: Unknown mcast interface: pimreg1 [ 150.624666][ T8160] validate_nla: 1 callbacks suppressed [ 150.624689][ T8160] netlink: 'syz.4.649': attribute type 83 has an invalid length. [ 151.219970][ T8192] __nla_validate_parse: 9 callbacks suppressed [ 151.219994][ T8192] netlink: 548 bytes leftover after parsing attributes in process `syz.0.658'. [ 151.281175][ T1153] wlan1: Trigger new scan to find an IBSS to join [ 151.613006][ T8207] trusted_key: syz.2.663 sent an empty control message without MSG_MORE. [ 151.886269][ T8219] netlink: 'syz.2.668': attribute type 1 has an invalid length. [ 152.025241][ T8221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.394688][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 152.435139][ T8248] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.445488][ T8248] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.655175][ T8257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.677'. [ 153.705850][ T8296] netlink: 'syz.3.687': attribute type 10 has an invalid length. [ 154.243608][ T1179] wlan1: Trigger new scan to find an IBSS to join [ 154.278338][ T8331] netlink: 80 bytes leftover after parsing attributes in process `syz.1.692'. [ 155.136009][ T8370] netlink: 'syz.3.702': attribute type 4 has an invalid length. [ 155.224470][ T1106] wlan1: Creating new IBSS network, BSSID 8e:ce:89:01:77:81 [ 155.335947][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'. [ 155.702010][ T8399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.709'. [ 156.274446][ T8433] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.718'. [ 156.326408][ T35] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x3e [ 156.652707][ T8444] netlink: 288 bytes leftover after parsing attributes in process `syz.4.722'. [ 156.715095][ T8444] xt_bpf: check failed: parse error [ 156.751402][ T8454] ip6t_srh: unknown srh match flags 4000 [ 156.751745][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 157.222606][ T8477] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 157.293825][ T8477] xt_hashlimit: size too large, truncated to 1048576 [ 157.419846][ T8484] netlink: 64 bytes leftover after parsing attributes in process `syz.3.734'. [ 157.863454][ T8510] netlink: 'syz.4.742': attribute type 39 has an invalid length. [ 159.691460][ T8452] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.891911][ T8540] netlink: 'syz.1.748': attribute type 11 has an invalid length. [ 159.919582][ T8540] netlink: 'syz.1.748': attribute type 5 has an invalid length. [ 159.971189][ T8540] netlink: 6548 bytes leftover after parsing attributes in process `syz.1.748'. [ 160.301606][ T8559] sctp: [Deprecated]: syz.1.754 (pid 8559) Use of int in maxseg socket option. [ 160.301606][ T8559] Use struct sctp_assoc_value instead [ 160.593692][ T8577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.758'. [ 160.705337][ T8577] sock: sock_timestamping_bind_phc: sock not bind to device [ 160.819356][ T8582] netlink: 'syz.3.760': attribute type 13 has an invalid length. [ 160.857712][ T8582] veth1_macvtap: left promiscuous mode [ 160.876203][ T8582] macsec0: entered allmulticast mode [ 160.892661][ T8584] netlink: 'syz.4.761': attribute type 12 has an invalid length. [ 160.918617][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 160.929859][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.759'. [ 161.385219][ T8607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.025349][ T8625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.775'. [ 162.407598][ T8613] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 162.450620][ T8641] netlink: 'syz.1.780': attribute type 4 has an invalid length. [ 162.599477][ T8654] netlink: 'syz.4.783': attribute type 49 has an invalid length. [ 162.850443][ T8654] ip6gretap0: entered promiscuous mode [ 162.885338][ T8654] ip6gretap0: entered allmulticast mode [ 163.679245][ T5636] Bluetooth: hci2: command 0x0401 tx timeout [ 165.020198][ T8692] netlink: 'syz.0.793': attribute type 11 has an invalid length. [ 165.030885][ T8692] netlink: 'syz.0.793': attribute type 11 has an invalid length. [ 165.055144][ T8692] netlink: 224 bytes leftover after parsing attributes in process `syz.0.793'. [ 165.087548][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 165.137640][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 165.348729][ T8694] vlan2: entered allmulticast mode [ 165.355273][ T8694] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 165.358600][ T8700] netlink: 'syz.1.795': attribute type 1 has an invalid length. [ 165.566915][ T8700] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 165.996912][ T8730] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 166.283963][ T8739] pim6reg: entered allmulticast mode [ 166.313212][ T8737] pim6reg: left allmulticast mode [ 166.448479][ T8737] netlink: 'syz.2.806': attribute type 1 has an invalid length. [ 166.490952][ T8737] netlink: 'syz.2.806': attribute type 11 has an invalid length. [ 166.529247][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'. [ 166.545319][ T8737] netlink: 224 bytes leftover after parsing attributes in process `syz.2.806'. [ 166.804991][ T8758] netlink: 'syz.2.811': attribute type 21 has an invalid length. [ 166.825922][ T8758] netlink: 156 bytes leftover after parsing attributes in process `syz.2.811'. [ 167.146278][ T8768] netlink: 'syz.3.814': attribute type 27 has an invalid length. [ 167.207056][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.816'. [ 167.295011][ T8771] netlink: 'syz.4.816': attribute type 1 has an invalid length. [ 167.333205][ T8771] netlink: 272 bytes leftover after parsing attributes in process `syz.4.816'. [ 167.450526][ T8780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.818'. [ 167.639924][ T8790] veth1_macvtap: entered allmulticast mode [ 167.669781][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.822'. [ 167.875735][ T8790] veth1_macvtap (unregistering): left allmulticast mode [ 168.168258][ T29] audit: type=1107 audit(1778491485.523:3): pid=8811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ýä™l…t¿Ý•¯Öÿ Ž6òŠ¨Šç›' [ 168.475178][ T8819] veth0: entered promiscuous mode [ 168.594454][ T8819] veth0: left promiscuous mode [ 168.929356][ T8843] netlink: 68 bytes leftover after parsing attributes in process `syz.0.831'. [ 168.969307][ T8843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.831'. [ 169.311119][ T8849] netlink: 40 bytes leftover after parsing attributes in process `syz.1.833'. [ 169.626229][ T8857] syzkaller0: entered promiscuous mode [ 169.654983][ T8857] syzkaller0: entered allmulticast mode [ 169.786506][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'. [ 170.116792][ T8887] netlink: 'syz.2.839': attribute type 1 has an invalid length. [ 170.125848][ T8885] netlink: 'syz.1.840': attribute type 2 has an invalid length. [ 170.336927][ T8900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.839'. [ 170.443043][ T8893] netlink: 108 bytes leftover after parsing attributes in process `syz.2.839'. [ 170.453336][ T8900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.855903][ T8911] bond2: Invalid ad_actor_system MAC address. [ 170.877318][ T8911] bond2: option ad_actor_system: invalid value (1) [ 170.904699][ T8911] bond2 (unregistering): Released all slaves [ 171.418014][ T8944] Unknown options in mask b7f2 [ 171.433395][ T8939] IPv6: sit1: Disabled Multicast RS [ 171.477032][ T8946] Unknown options in mask b7f2 [ 171.617962][ T8950] netlink: 'syz.3.852': attribute type 5 has an invalid length. [ 172.076406][ T8973] netlink: 'syz.4.858': attribute type 1 has an invalid length. [ 172.266414][ T8982] netlink: 'syz.2.860': attribute type 1 has an invalid length. [ 172.406441][ T8990] __nla_validate_parse: 4 callbacks suppressed [ 172.406462][ T8990] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.862'. [ 172.733455][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 173.194921][ T9029] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.872'. [ 173.537191][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.876'. [ 173.775028][ T9045] bond2: entered promiscuous mode [ 173.781300][ T9045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.812073][ T9045] netlink: 'syz.4.876': attribute type 21 has an invalid length. [ 173.861198][ T9045] netlink: 128 bytes leftover after parsing attributes in process `syz.4.876'. [ 173.920616][ T9048] bridge3: entered promiscuous mode [ 173.936017][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.876'. [ 173.941194][ T9048] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 173.992695][ T9045] netlink: 3 bytes leftover after parsing attributes in process `syz.4.876'. [ 174.335772][ T9091] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 174.344170][ T9091] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 174.352743][ T9091] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 174.361090][ T9091] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 174.369294][ T9091] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 174.377517][ T9091] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 174.385928][ T9091] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 174.394403][ T9091] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 174.402746][ T9091] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 174.412029][ T9091] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 174.623436][ T9096] netlink: 76 bytes leftover after parsing attributes in process `syz.4.889'. [ 174.815957][ T9102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.892'. [ 174.855846][ T9102] netlink: 256 bytes leftover after parsing attributes in process `syz.3.892'. [ 174.962995][ T9112] netlink: 'syz.1.895': attribute type 1 has an invalid length. [ 175.092145][ T9093] netlink: 'syz.0.888': attribute type 16 has an invalid length. [ 175.113515][ T9093] netlink: 'syz.0.888': attribute type 17 has an invalid length. [ 175.147689][ T9124] netlink: 'syz.2.897': attribute type 21 has an invalid length. [ 175.159600][ T9112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.415822][ T9093] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.423601][ T9093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.449816][ T9093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.467797][ T9093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.539353][ T9093] veth1_virt_wifi: left promiscuous mode [ 175.636433][ T9093] bond0: entered promiscuous mode [ 175.643710][ T9093] bond_slave_0: entered promiscuous mode [ 175.652181][ T9093] bond_slave_1: entered promiscuous mode [ 175.666932][ T9093] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.708813][ T9093] bridge0: port 3(batadv1) entered blocking state [ 175.716163][ T9093] bridge0: port 3(batadv1) entered forwarding state [ 175.728597][ T9093] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 175.743590][ T9093] vlan2: left allmulticast mode [ 175.750455][ T9093] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 175.761588][ T9122] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 175.793753][ T9122] 0ªX¹¦Dö»: entered allmulticast mode [ 175.836913][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.845195][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.051501][ T809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 176.079168][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 176.228451][ T9150] bond2: option mode: invalid value (133) [ 176.271225][ T9150] bond2 (unregistering): Released all slaves [ 176.699203][ T809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 176.884765][ T9184] netlink: 'syz.2.911': attribute type 29 has an invalid length. [ 176.932665][ T9189] netlink: 'syz.2.911': attribute type 29 has an invalid length. [ 177.161508][ T29] audit: type=1804 audit(1778491494.513:4): pid=9204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.916" name="/newroot/186/cgroup.controllers" dev="tmpfs" ino=966 res=1 errno=0 [ 177.234782][ T29] audit: type=1800 audit(1778491494.523:5): pid=9204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.916" name="cgroup.controllers" dev="tmpfs" ino=966 res=0 errno=0 [ 177.600881][ T9215] bond2 (unregistering): Released all slaves [ 177.720056][ T9224] __nla_validate_parse: 8 callbacks suppressed [ 177.720080][ T9224] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.922'. [ 178.184246][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.927'. [ 178.208739][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.927'. [ 178.806480][ T9264] netlink: 'syz.2.933': attribute type 29 has an invalid length. [ 178.847063][ T9264] netlink: 'syz.2.933': attribute type 29 has an invalid length. [ 178.891753][ T9264] netlink: 'syz.2.933': attribute type 32 has an invalid length. [ 178.941114][ T9264] netlink: 500 bytes leftover after parsing attributes in process `syz.2.933'. [ 179.213345][ T9273] netlink: 'syz.4.935': attribute type 4 has an invalid length. [ 179.215259][ T9272] netlink: 'syz.4.935': attribute type 4 has an invalid length. [ 179.893039][ T9288] veth0: entered promiscuous mode [ 180.038809][ T9286] veth0: left promiscuous mode [ 180.232237][ T9301] netlink: 'syz.1.941': attribute type 1 has an invalid length. [ 180.530180][ T9304] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 180.577096][ T9304] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 180.736742][ T9308] bond2: (slave bridge4): Enslaving as an active interface with a down link [ 180.877005][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.946'. [ 181.023577][ T9320] syz.2.945 (9320) used greatest stack depth: 17864 bytes left [ 181.084770][ T9337] netlink: 'syz.0.947': attribute type 29 has an invalid length. [ 181.123538][ T9337] netlink: 'syz.0.947': attribute type 29 has an invalid length. [ 181.160238][ T9337] netlink: 500 bytes leftover after parsing attributes in process `syz.0.947'. [ 181.197450][ T9339] netlink: 168 bytes leftover after parsing attributes in process `syz.4.948'. [ 181.293632][ T9339] netlink: 44 bytes leftover after parsing attributes in process `syz.4.948'. [ 181.495319][ T9348] netlink: 248 bytes leftover after parsing attributes in process `syz.4.952'. [ 181.518523][ T9347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.951'. [ 182.738282][ T9400] validate_nla: 1 callbacks suppressed [ 182.738304][ T9400] netlink: 'syz.2.966': attribute type 29 has an invalid length. [ 182.776763][ T9400] netlink: 'syz.2.966': attribute type 29 has an invalid length. [ 182.800684][ T9400] netlink: 'syz.2.966': attribute type 32 has an invalid length. [ 182.832074][ T9400] __nla_validate_parse: 1 callbacks suppressed [ 182.832096][ T9400] netlink: 500 bytes leftover after parsing attributes in process `syz.2.966'. [ 183.097177][ T9404] syzkaller0: entered promiscuous mode [ 183.110821][ T9404] syzkaller0: entered allmulticast mode [ 183.535663][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.972'. [ 183.560633][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.972'. [ 185.224252][ T1153] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 185.930510][ T9454] netlink: 548 bytes leftover after parsing attributes in process `syz.0.979'. [ 185.960135][ T9449] netlink: 'syz.0.979': attribute type 29 has an invalid length. [ 186.049580][ T9451] netlink: 'syz.0.979': attribute type 29 has an invalid length. [ 186.147000][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 187.003048][ T9499] net_ratelimit: 44 callbacks suppressed [ 187.003070][ T9499] openvswitch: netlink: IP tunnel dst address not specified [ 187.192189][ T9507] netlink: 'syz.2.994': attribute type 29 has an invalid length. [ 187.213970][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.992'. [ 187.238164][ T9507] netlink: 'syz.2.994': attribute type 29 has an invalid length. [ 187.273506][ T9508] netlink: 'syz.4.992': attribute type 1 has an invalid length. [ 187.284832][ T9507] netlink: 'syz.2.994': attribute type 32 has an invalid length. [ 187.295501][ T9508] netlink: 'syz.4.992': attribute type 2 has an invalid length. [ 187.316050][ T9507] netlink: 500 bytes leftover after parsing attributes in process `syz.2.994'. [ 187.412340][ T9521] netlink: 44 bytes leftover after parsing attributes in process `syz.1.996'. [ 187.493160][ T9521] netlink: 40 bytes leftover after parsing attributes in process `syz.1.996'. [ 187.585151][ T5762] IPVS: starting estimator thread 0... [ 187.606730][ T9521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.996'. [ 187.709075][ T9528] IPVS: using max 25 ests per chain, 60000 per kthread [ 187.752432][ T1153] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.775598][ T1153] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.802636][ T1153] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.838451][ T1153] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.979645][ T9546] __nla_validate_parse: 6 callbacks suppressed [ 187.979666][ T9546] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1004'. [ 188.023094][ T9551] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 188.044457][ T9548] syzkaller0: entered promiscuous mode [ 188.066733][ T9548] syzkaller0: entered allmulticast mode [ 188.272489][ T9546] nbd0: detected capacity change from 0 to 63 [ 188.286244][ T4944] block nbd0: Receive control failed (result -32) [ 188.293324][ T5636] block nbd0: Receive control failed (result -32) [ 188.311605][ T5836] block nbd0: Dead connection, failed to find a fallback [ 188.331375][ T5836] block nbd0: shutting down sockets [ 188.352873][ T5836] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.363609][ T5836] Buffer I/O error on dev nbd0, logical block 0, async page read [ 188.373221][ T5836] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.383082][ T5836] Buffer I/O error on dev nbd0, logical block 1, async page read [ 188.392020][ T5836] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.404286][ T5836] Buffer I/O error on dev nbd0, logical block 2, async page read [ 188.413160][ T5836] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.423038][ T5836] Buffer I/O error on dev nbd0, logical block 3, async page read [ 188.432331][ T5836] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.446714][ T5836] Buffer I/O error on dev nbd0, logical block 0, async page read [ 188.457308][ T5836] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.469725][ T5836] Buffer I/O error on dev nbd0, logical block 1, async page read [ 188.488685][ T5836] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.501838][ T9569] netlink: 'syz.0.1009': attribute type 29 has an invalid length. [ 188.510838][ T5836] Buffer I/O error on dev nbd0, logical block 2, async page read [ 188.520212][ T9569] netlink: 'syz.0.1009': attribute type 29 has an invalid length. [ 188.528667][ T5836] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.539795][ T9569] netlink: 'syz.0.1009': attribute type 32 has an invalid length. [ 188.550844][ T5836] Buffer I/O error on dev nbd0, logical block 3, async page read [ 188.560104][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.560785][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.561323][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.561803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.562275][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.562757][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.563223][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.595674][ T9569] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1009'. [ 188.620323][ T5836] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.650739][ T5836] Buffer I/O error on dev nbd0, logical block 0, async page read [ 188.660748][ T5836] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.701293][ T5836] Buffer I/O error on dev nbd0, logical block 1, async page read [ 188.813526][ T5836] ldm_validate_partition_table(): Disk read failed. [ 188.852516][ T5836] Dev nbd0: unable to read RDB block 0 [ 188.897724][ T5836] nbd0: unable to read partition table [ 188.984342][ T5836] ldm_validate_partition_table(): Disk read failed. [ 189.021904][ T5836] Dev nbd0: unable to read RDB block 0 [ 189.082344][ T5836] nbd0: unable to read partition table [ 189.583014][ T9616] netlink: 'syz.3.1023': attribute type 29 has an invalid length. [ 189.603560][ T9602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.643910][ T9616] netlink: 'syz.3.1023': attribute type 29 has an invalid length. [ 189.680794][ T9616] netlink: 'syz.3.1023': attribute type 32 has an invalid length. [ 189.735611][ T9616] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1023'. [ 189.872653][ T9583] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1013'. [ 189.905505][ T9631] netlink: 'syz.1.1025': attribute type 1 has an invalid length. [ 189.941710][ T9583] netlink: 'syz.0.1013': attribute type 2 has an invalid length. [ 189.972474][ T9587] openvswitch: netlink: Message has 1 unknown bytes. [ 190.025433][ T9587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.175074][ T9631] bond3: entered promiscuous mode [ 190.202351][ T9631] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.856559][ T9666] gretap0: entered promiscuous mode [ 190.882854][ T9666] vlan2: entered promiscuous mode [ 190.933046][ T9673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1034'. [ 191.309821][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1033'. [ 191.515747][ T9693] netlink: 'syz.4.1037': attribute type 29 has an invalid length. [ 191.551022][ T9693] netlink: 'syz.4.1037': attribute type 29 has an invalid length. [ 191.808128][ T9702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1040'. [ 191.825890][ T9705] veth0: entered promiscuous mode [ 192.059774][ T9705] IPVS: Scheduler module ip_vs_sip not found [ 192.081738][ T9714] vlan3: entered promiscuous mode [ 192.109812][ T9714] bridge0: entered promiscuous mode [ 192.344284][ T9704] veth0: left promiscuous mode [ 192.378302][ T9738] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1052'. [ 192.585869][ T9744] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1054'. [ 192.599376][ T9744] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1054'. [ 193.020909][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1063'. [ 193.062405][ T9767] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1063'. [ 193.251322][ T9768] team0: Port device dummy0 added [ 193.381854][ T9782] syzkaller1: entered promiscuous mode [ 193.418531][ T9782] syzkaller1: entered allmulticast mode [ 193.535832][ T9793] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1070'. [ 193.978310][ T9812] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1075'. [ 194.219832][ T9820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1078'. [ 194.247095][ T9823] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1079'. [ 194.253789][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1078'. [ 194.364422][ T9830] atomic_op ffff88806a0aa198 conn xmit_atomic 0000000000000000 [ 194.387955][ T1153] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.421786][ T1153] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.463174][ T1153] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.503816][ T1153] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.548064][ T9838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1084'. [ 194.646260][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.658066][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.670243][ T9842] validate_nla: 9 callbacks suppressed [ 194.670303][ T9842] netlink: 'syz.0.1086': attribute type 39 has an invalid length. [ 194.832211][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 194.842927][ T9846] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1086'. [ 194.875059][ T9842] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 195.119371][ C1] net_ratelimit: 3 callbacks suppressed [ 195.119392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.135939][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.145143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.186478][ T9854] netlink: 'syz.3.1089': attribute type 1 has an invalid length. [ 195.211935][ T9854] netlink: 'syz.3.1089': attribute type 7 has an invalid length. [ 195.233396][ T9854] netlink: 'syz.3.1089': attribute type 8 has an invalid length. [ 195.249232][ T9854] NCSI netlink: No device for ifindex 65584 [ 195.788492][ T9881] netlink: 'syz.4.1098': attribute type 29 has an invalid length. [ 195.799291][ T9882] netlink: 'syz.4.1098': attribute type 29 has an invalid length. [ 196.707223][ T9919] syzkaller0: entered promiscuous mode [ 196.732411][ T9919] syzkaller0: entered allmulticast mode [ 196.813612][ T9932] xt_hashlimit: size too large, truncated to 1048576 [ 196.936748][ T9940] netlink: 'syz.3.1116': attribute type 7 has an invalid length. [ 196.977587][ T9940] netlink: 'syz.3.1116': attribute type 8 has an invalid length. [ 197.350925][ T9958] netlink: 'syz.3.1119': attribute type 1 has an invalid length. [ 199.596067][ T9958] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 199.747150][ T9977] netlink: 'syz.0.1124': attribute type 12 has an invalid length. [ 199.804304][ T9977] netlink: 'syz.0.1124': attribute type 29 has an invalid length. [ 199.870576][ T9977] __nla_validate_parse: 11 callbacks suppressed [ 199.870597][ T9977] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1124'. [ 199.935504][ T9977] netlink: 'syz.0.1124': attribute type 1 has an invalid length. [ 199.973125][ T9977] netlink: 'syz.0.1124': attribute type 2 has an invalid length. [ 200.417452][T10010] openvswitch: netlink: IP tunnel dst address not specified [ 201.293287][T10053] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.333552][T10062] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1148'. [ 201.390647][T10055] bond3: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 201.403372][T10069] sctp: [Deprecated]: syz.0.1150 (pid 10069) Use of int in max_burst socket option. [ 201.403372][T10069] Use struct sctp_assoc_value instead [ 201.406432][ T93] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 201.620524][T10075] openvswitch: netlink: Flow key attr not present in new flow. [ 201.657159][ T1179] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 201.702489][T10081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1154'. [ 201.727226][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1154'. [ 202.097949][T10100] syzkaller0: entered promiscuous mode [ 202.115288][T10100] syzkaller0: entered allmulticast mode [ 202.334734][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1164'. [ 202.387591][T10115] syzkaller1: entered promiscuous mode [ 202.408241][T10115] syzkaller1: entered allmulticast mode [ 202.531934][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1165'. [ 202.557707][T10121] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 202.571719][T10121] bond3 (unregistering): Released all slaves [ 202.844778][T10136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1169'. [ 202.933731][T10144] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.1170'. [ 203.097489][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'. [ 203.436084][T10164] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1175'. [ 203.462883][T10170] FAULT_INJECTION: forcing a failure. [ 203.462883][T10170] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 203.495894][T10170] CPU: 1 UID: 0 PID: 10170 Comm: syz.0.1178 Not tainted syzkaller #0 PREEMPT(full) [ 203.495926][T10170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.495938][T10170] Call Trace: [ 203.495946][T10170] [ 203.495956][T10170] dump_stack_lvl+0xe8/0x150 [ 203.495986][T10170] should_fail_ex+0x412/0x560 [ 203.496019][T10170] _copy_from_user+0x2d/0xb0 [ 203.496050][T10170] ___sys_sendmsg+0x1c6/0x360 [ 203.496078][T10170] ? __lock_acquire+0x6b5/0x2cf0 [ 203.496106][T10170] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.496182][T10170] ? __fget_files+0x2a/0x420 [ 203.496205][T10170] ? __fget_files+0x3a0/0x420 [ 203.496236][T10170] __x64_sys_sendmsg+0x1bd/0x2a0 [ 203.496267][T10170] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.496302][T10170] ? __pfx_ksys_write+0x10/0x10 [ 203.496339][T10170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.496360][T10170] do_syscall_64+0x15f/0xf80 [ 203.496386][T10170] ? trace_irq_disable+0x3b/0x140 [ 203.496413][T10170] ? clear_bhb_loop+0x40/0x90 [ 203.496438][T10170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.496458][T10170] RIP: 0033:0x7fa04679cdd9 [ 203.496478][T10170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.496494][T10170] RSP: 002b:00007fa0449ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.496517][T10170] RAX: ffffffffffffffda RBX: 00007fa046a15fa0 RCX: 00007fa04679cdd9 [ 203.496531][T10170] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 203.496544][T10170] RBP: 00007fa0449ee090 R08: 0000000000000000 R09: 0000000000000000 [ 203.496557][T10170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.496568][T10170] R13: 00007fa046a16038 R14: 00007fa046a15fa0 R15: 00007ffe089d48d8 [ 203.496601][T10170] [ 204.134171][T10191] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 204.165305][T10194] team0: entered promiscuous mode [ 204.180352][T10194] team_slave_0: entered promiscuous mode [ 204.193679][T10194] team_slave_1: entered promiscuous mode [ 204.205502][T10194] dummy0: entered promiscuous mode [ 204.417077][T10207] netlink: 'syz.4.1191': attribute type 24 has an invalid length. [ 204.435912][T10208] veth1_to_bridge: entered allmulticast mode [ 204.923749][T10226] __nla_validate_parse: 7 callbacks suppressed [ 204.923768][T10226] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1197'. [ 204.982674][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'. [ 204.996147][T10233] netlink: 'syz.3.1198': attribute type 1 has an invalid length. [ 205.008130][T10228] netlink: 'syz.1.1196': attribute type 2 has an invalid length. [ 205.031791][T10232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.198424][ T1179] bond0: (slave bond_slave_0): interface is now down [ 205.256328][ T1179] bond0: (slave bond_slave_1): interface is now down [ 205.423801][T10248] netlink: 'syz.0.1203': attribute type 1 has an invalid length. [ 205.700610][T10257] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1206'. [ 205.892779][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1209'. [ 205.984898][T10265] h: entered promiscuous mode [ 206.018099][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'. [ 206.052171][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'. [ 206.270426][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 206.337532][T10286] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 206.345675][T10286] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 206.384379][T10301] netlink: 'syz.4.1216': attribute type 1 has an invalid length. [ 206.424541][T10297] netlink: 'syz.3.1217': attribute type 1 has an invalid length. [ 206.443002][T10300] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1218'. [ 206.527597][T10297] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 206.582163][T10310] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1216'. [ 206.625830][T10301] bond3: (slave gretap2): making interface the new active one [ 206.662571][T10301] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 206.672920][T10321] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 206.779913][T10293] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.801447][T10293] bond3: (slave bond4): Enslaving as a backup interface with an up link [ 206.835494][T10310] 8021q: adding VLAN 0 to HW filter on device bond3 [ 206.962289][ T4944] Bluetooth: hci4: command 0x0406 tx timeout [ 206.963460][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 206.972915][ T4944] Bluetooth: hci2: command 0x0401 tx timeout [ 207.285403][T10331] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.310823][T10331] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.330730][T10354] openvswitch: netlink: IP tunnel TTL not specified. [ 207.483863][T10356] netlink: 1024 bytes leftover after parsing attributes in process `syz.2.1229'. [ 207.624759][T10331] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.656153][T10331] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.751472][T10370] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 207.841362][ T139] bond0: (slave bond_slave_0): interface is now down [ 207.843375][T10331] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.858388][ T139] bond0: (slave bond_slave_1): interface is now down [ 207.879132][T10331] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.182424][T10331] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.197470][T10331] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.447259][ T58] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.485312][ T58] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.610055][ T1153] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.647200][ T1153] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.763641][T10405] syzkaller0: entered promiscuous mode [ 208.777607][T10405] syzkaller0: entered allmulticast mode [ 208.807175][T10411] netlink: 'syz.4.1244': attribute type 1 has an invalid length. [ 208.821434][T10411] netlink: 'syz.4.1244': attribute type 2 has an invalid length. [ 208.829757][T10411] netlink: 'syz.4.1244': attribute type 1 has an invalid length. [ 208.855096][ T139] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.875747][ T139] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.010700][ T58] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.023220][ T58] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.866218][T10462] netlink: 'syz.2.1258': attribute type 39 has an invalid length. [ 209.893749][T10465] netlink: 'syz.2.1258': attribute type 39 has an invalid length. [ 210.075906][T10480] __nla_validate_parse: 6 callbacks suppressed [ 210.075930][T10480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1262'. [ 210.361776][T10487] netlink: 'syz.3.1262': attribute type 1 has an invalid length. [ 210.479629][ T139] bond0: (slave bond_slave_0): interface is now down [ 210.508245][ T139] bond0: (slave bond_slave_1): interface is now down [ 210.652719][T10487] bond1: entered promiscuous mode [ 210.659787][T10487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.946737][T10508] netlink: 'syz.1.1267': attribute type 61 has an invalid length. [ 210.963493][T10507] netlink: 'syz.4.1268': attribute type 1 has an invalid length. [ 210.981364][T10510] FAULT_INJECTION: forcing a failure. [ 210.981364][T10510] name failslab, interval 1, probability 0, space 0, times 0 [ 211.008232][T10510] CPU: 1 UID: 0 PID: 10510 Comm: syz.2.1269 Not tainted syzkaller #0 PREEMPT(full) [ 211.008262][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 211.008274][T10510] Call Trace: [ 211.008283][T10510] [ 211.008292][T10510] dump_stack_lvl+0xe8/0x150 [ 211.008322][T10510] should_fail_ex+0x412/0x560 [ 211.008355][T10510] should_failslab+0xa8/0x100 [ 211.008399][T10510] __kmalloc_cache_noprof+0x88/0x660 [ 211.008434][T10510] ? rtm_new_nexthop+0x28b4/0x8490 [ 211.008467][T10510] rtm_new_nexthop+0x28b4/0x8490 [ 211.008493][T10510] ? kasan_save_track+0x3e/0x80 [ 211.008517][T10510] ? kasan_save_free_info+0x46/0x50 [ 211.008538][T10510] ? __kasan_slab_free+0x5c/0x80 [ 211.008567][T10510] ? netlink_deliver_tap+0x19c/0x1b0 [ 211.008591][T10510] ? netlink_unicast+0x730/0x8e0 [ 211.008611][T10510] ? netlink_sendmsg+0x813/0xb40 [ 211.008637][T10510] ? ___sys_sendmsg+0x2a5/0x360 [ 211.008664][T10510] ? do_syscall_64+0x15f/0xf80 [ 211.008688][T10510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.008719][T10510] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 211.008768][T10510] ? kasan_quarantine_put+0xbb/0x1f0 [ 211.008794][T10510] ? lockdep_hardirqs_on+0x7a/0x110 [ 211.008825][T10510] ? nlmon_xmit+0xb0/0x100 [ 211.008847][T10510] ? kmem_cache_free+0x182/0x650 [ 211.008888][T10510] ? __lock_acquire+0x6b5/0x2cf0 [ 211.008923][T10510] ? lockdep_hardirqs_on+0x7a/0x110 [ 211.008948][T10510] ? __dev_queue_xmit+0x2b6/0x3950 [ 211.008975][T10510] ? __local_bh_enable_ip+0xd0/0x130 [ 211.008995][T10510] ? __dev_queue_xmit+0x2b6/0x3950 [ 211.009051][T10510] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 211.009077][T10510] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 211.009108][T10510] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 211.009132][T10510] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 211.009154][T10510] ? ref_tracker_free+0x693/0x840 [ 211.009186][T10510] ? __pfx_ref_tracker_free+0x10/0x10 [ 211.009223][T10510] netlink_rcv_skb+0x232/0x4b0 [ 211.009250][T10510] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 211.009277][T10510] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.009315][T10510] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.009341][T10510] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.009373][T10510] netlink_unicast+0x75c/0x8e0 [ 211.009420][T10510] netlink_sendmsg+0x813/0xb40 [ 211.009459][T10510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.009490][T10510] ? aa_sock_msg_perm+0xf1/0x1b0 [ 211.009519][T10510] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.009550][T10510] ____sys_sendmsg+0x972/0x9f0 [ 211.009578][T10510] ? __might_fault+0xaf/0x130 [ 211.009611][T10510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.009649][T10510] ? import_iovec+0x73/0xa0 [ 211.009682][T10510] ___sys_sendmsg+0x2a5/0x360 [ 211.009710][T10510] ? __lock_acquire+0x6b5/0x2cf0 [ 211.009737][T10510] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.009806][T10510] ? __fget_files+0x2a/0x420 [ 211.009830][T10510] ? __fget_files+0x3a0/0x420 [ 211.009866][T10510] __x64_sys_sendmsg+0x1bd/0x2a0 [ 211.009898][T10510] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.009937][T10510] ? __pfx_ksys_write+0x10/0x10 [ 211.009977][T10510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.010000][T10510] do_syscall_64+0x15f/0xf80 [ 211.010027][T10510] ? trace_irq_disable+0x3b/0x140 [ 211.010058][T10510] ? clear_bhb_loop+0x40/0x90 [ 211.010083][T10510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.010104][T10510] RIP: 0033:0x7f55bfd9cdd9 [ 211.010124][T10510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.010141][T10510] RSP: 002b:00007f55c0d10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.010164][T10510] RAX: ffffffffffffffda RBX: 00007f55c0015fa0 RCX: 00007f55bfd9cdd9 [ 211.010179][T10510] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 211.010192][T10510] RBP: 00007f55c0d10090 R08: 0000000000000000 R09: 0000000000000000 [ 211.010205][T10510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.010217][T10510] R13: 00007f55c0016038 R14: 00007f55c0015fa0 R15: 00007ffdc60688d8 [ 211.010252][T10510] [ 211.596934][T10526] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1271'. [ 211.655237][T10515] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 211.667016][T10515] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 211.677467][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1271'. [ 211.688481][T10514] netlink: 'syz.0.1270': attribute type 1 has an invalid length. [ 211.697132][T10514] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1270'. [ 211.715446][T10514] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1270'. [ 211.731637][T10514] netlink: 'syz.0.1270': attribute type 1 has an invalid length. [ 211.740057][T10514] netlink: 634 bytes leftover after parsing attributes in process `syz.0.1270'. [ 211.904831][T10513] syzkaller0: entered promiscuous mode [ 211.913985][T10513] syzkaller0: entered allmulticast mode [ 212.005067][T10507] bond6: (slave bridge6): Enslaving as an active interface with a down link [ 212.025250][T10540] xt_hashlimit: size too large, truncated to 1048576 [ 212.036999][T10538] netlink: 'syz.3.1278': attribute type 29 has an invalid length. [ 212.054104][T10515] macvlan2: entered promiscuous mode [ 212.061316][T10515] macvlan2: entered allmulticast mode [ 212.068062][T10515] bond6: entered promiscuous mode [ 212.075050][T10515] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 212.098312][T10515] bond6: left promiscuous mode [ 213.043920][ T93] bond0: (slave bond_slave_0): interface is now down [ 213.051739][ T93] bond0: (slave bond_slave_1): interface is now down [ 214.706425][T10567] netlink: 'syz.0.1283': attribute type 12 has an invalid length. [ 214.731601][T10567] netlink: 'syz.0.1283': attribute type 29 has an invalid length. [ 214.766791][T10567] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1283'. [ 214.779899][T10567] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1283'. [ 214.914473][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1286'. [ 214.988228][T10588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1290'. [ 215.042149][T10578] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 215.292273][T10602] 8021q: VLANs not supported on ip6_vti0 [ 215.353701][T10606] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.613457][ T1153] bond0: (slave bond_slave_0): interface is now down [ 215.620777][ T1153] bond0: (slave bond_slave_1): interface is now down [ 215.635061][ T1153] bond0: now running without any active interface! [ 217.725174][T10574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.952326][T10617] netlink: 'syz.1.1296': attribute type 1 has an invalid length. [ 217.973861][T10621] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1299'. [ 217.979256][T10617] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1296'. [ 218.019699][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'. [ 218.066760][T10624] tipc: Enabling of bearer rejected, failed to enable media [ 218.097515][T10626] netlink: 'syz.2.1299': attribute type 1 has an invalid length. [ 218.167517][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1299'. [ 218.213688][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1299'. [ 218.304994][T10621] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 218.320195][T10631] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 218.349676][T10633] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1303'. [ 218.364161][ T5634] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 218.426430][T10643] netlink: 'syz.4.1305': attribute type 1 has an invalid length. [ 218.488446][T10646] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1306'. [ 218.528054][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1305'. [ 218.564616][T10649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1306'. [ 218.626255][T10651] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1308'. [ 218.664598][T10643] bond7: entered promiscuous mode [ 218.670432][T10643] 8021q: adding VLAN 0 to HW filter on device bond7 [ 218.699987][T10647] bond7: (slave bridge7): making interface the new active one [ 218.708661][T10647] bridge7: entered promiscuous mode [ 218.717048][T10647] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 218.822255][T10654] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.836182][T10659] dummy0: left promiscuous mode [ 218.845623][T10659] team0: Port device dummy0 removed [ 218.857161][T10659] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 218.880701][T10661] bond2: (slave dummy0): Releasing backup interface [ 219.209481][T10675] gre2: entered promiscuous mode [ 219.229853][T10685] netlink: 'syz.1.1317': attribute type 11 has an invalid length. [ 219.400394][T10685] netlink: 'syz.1.1317': attribute type 11 has an invalid length. [ 219.539573][T10694] ipvlan2: entered allmulticast mode [ 219.545295][T10694] batadv_slave_1: entered allmulticast mode [ 219.971207][T10715] netlink: 'syz.4.1327': attribute type 10 has an invalid length. [ 220.005477][T10715] team0: Port device vlan0 added [ 220.108594][T10720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.068243][T10770] team0: Port device team_slave_1 removed [ 221.280455][T10783] netlink: 'syz.3.1349': attribute type 9 has an invalid length. [ 222.296553][T10817] openvswitch: netlink: Missing valid actions attribute. [ 222.335194][T10817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.480436][T10825] vlan1: entered promiscuous mode [ 222.494304][T10825] geneve1: entered promiscuous mode [ 222.511764][T10829] netlink: 'syz.2.1363': attribute type 1 has an invalid length. [ 222.513303][T10825] vlan1: entered allmulticast mode [ 222.548746][T10827] netlink: 'syz.3.1362': attribute type 7 has an invalid length. [ 222.556966][T10829] netlink: 'syz.2.1363': attribute type 2 has an invalid length. [ 222.568135][T10825] geneve1: entered allmulticast mode [ 222.888569][T10845] syzkaller1: entered promiscuous mode [ 222.898791][T10845] syzkaller1: entered allmulticast mode [ 222.992226][T10851] __nla_validate_parse: 13 callbacks suppressed [ 222.992252][T10851] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1368'. [ 223.025888][T10855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1369'. [ 223.080591][T10855] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1369'. [ 223.183462][T10855] gretap1: entered promiscuous mode [ 223.206338][T10855] gretap1: entered allmulticast mode [ 223.469565][T10872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1376'. [ 223.525129][T10872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1376'. [ 223.713640][T10881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1378'. [ 223.787294][T10885] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1380'. [ 223.862320][T10889] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1381'. [ 224.031439][T10892] validate_nla: 1 callbacks suppressed [ 224.031462][T10892] netlink: 'syz.4.1382': attribute type 1 has an invalid length. [ 224.088439][T10892] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1382'. [ 224.103049][T10892] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1382'. [ 224.346628][T10910] xt_hashlimit: size too large, truncated to 1048576 [ 224.922602][T10940] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 227.076750][T10897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.628044][T10964] pimreg: entered allmulticast mode [ 228.000126][T10989] x_tables: duplicate entry at hook 2 [ 228.024510][T10989] __nla_validate_parse: 3 callbacks suppressed [ 228.024530][T10989] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1409'. [ 228.052985][T10993] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 4, id = 0 [ 228.358706][T11010] netlink: 'syz.0.1413': attribute type 1 has an invalid length. [ 228.674935][T11022] bond3: (slave geneve3): making interface the new active one [ 228.686365][T11022] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 228.763252][ T93] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 228.833710][ T93] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 228.932188][ T93] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 228.974504][ T93] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 228.997877][T11042] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1420'. [ 229.390802][T11062] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1426'. [ 229.506912][T11062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1426'. [ 229.845989][T11080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1432'. [ 229.887073][T11080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1432'. [ 230.048194][T11084] netlink: 'syz.0.1434': attribute type 1 has an invalid length. [ 230.082616][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1434'. [ 230.110886][T11084] xt_bpf: check failed: parse error [ 230.155989][T11084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1434'. [ 230.197752][T11084] bridge_slave_0: default FDB implementation only supports local addresses [ 230.263063][ T93] nci: nci_rsp_packet: unknown rsp opcode 0xb05 [ 233.100774][T11088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.340123][T11128] FAULT_INJECTION: forcing a failure. [ 233.340123][T11128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.384699][T11128] CPU: 0 UID: 0 PID: 11128 Comm: syz.1.1444 Not tainted syzkaller #0 PREEMPT(full) [ 233.384729][T11128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.384741][T11128] Call Trace: [ 233.384749][T11128] [ 233.384758][T11128] dump_stack_lvl+0xe8/0x150 [ 233.384789][T11128] should_fail_ex+0x412/0x560 [ 233.384821][T11128] _copy_from_user+0x2d/0xb0 [ 233.384851][T11128] ___sys_sendmsg+0x1c6/0x360 [ 233.384879][T11128] ? __lock_acquire+0x6b5/0x2cf0 [ 233.384906][T11128] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.384969][T11128] ? __fget_files+0x2a/0x420 [ 233.384994][T11128] ? __fget_files+0x3a0/0x420 [ 233.385029][T11128] __x64_sys_sendmsg+0x1bd/0x2a0 [ 233.385059][T11128] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 233.385108][T11128] ? __pfx_ksys_write+0x10/0x10 [ 233.385147][T11128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.385168][T11128] do_syscall_64+0x15f/0xf80 [ 233.385198][T11128] ? clear_bhb_loop+0x40/0x90 [ 233.385222][T11128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.385241][T11128] RIP: 0033:0x7fb1d159cdd9 [ 233.385260][T11128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.385276][T11128] RSP: 002b:00007fb1d2469028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.385297][T11128] RAX: ffffffffffffffda RBX: 00007fb1d1815fa0 RCX: 00007fb1d159cdd9 [ 233.385311][T11128] RDX: 0000000000004880 RSI: 00002000000001c0 RDI: 0000000000000006 [ 233.385324][T11128] RBP: 00007fb1d2469090 R08: 0000000000000000 R09: 0000000000000000 [ 233.385337][T11128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.385349][T11128] R13: 00007fb1d1816038 R14: 00007fb1d1815fa0 R15: 00007ffd0eda8a78 [ 233.385383][T11128] [ 233.655999][T11140] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 234.426366][T11174] tipc: Started in network mode [ 234.472371][T11174] tipc: Node identity e2f1bbb841bd, cluster identity 4711 [ 234.520264][T11174] tipc: Enabled bearer , priority 0 [ 234.559684][T11174] tipc: Resetting bearer [ 234.582466][T11174] IPVS: length: 4096 != 24 [ 234.683433][T11173] tipc: Disabling bearer [ 234.711596][T11188] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1459'. [ 234.975830][T11197] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1462'. [ 235.151074][T11203] netlink: 'syz.0.1464': attribute type 39 has an invalid length. [ 236.243246][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 236.557342][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1485'. [ 236.753140][T11280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1489'. [ 236.782557][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1489'. [ 236.803318][T11275] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 237.282254][T11298] : entered promiscuous mode [ 237.285995][T11303] netlink: 'syz.3.1496': attribute type 1 has an invalid length. [ 237.328029][T11309] FAULT_INJECTION: forcing a failure. [ 237.328029][T11309] name failslab, interval 1, probability 0, space 0, times 0 [ 237.409107][T11309] CPU: 0 UID: 0 PID: 11309 Comm: syz.1.1498 Not tainted syzkaller #0 PREEMPT(full) [ 237.409139][T11309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.409151][T11309] Call Trace: [ 237.409159][T11309] [ 237.409168][T11309] dump_stack_lvl+0xe8/0x150 [ 237.409200][T11309] should_fail_ex+0x412/0x560 [ 237.409234][T11309] should_failslab+0xa8/0x100 [ 237.409264][T11309] ? skb_clone+0x212/0x3a0 [ 237.409293][T11309] kmem_cache_alloc_noprof+0x87/0x650 [ 237.409321][T11309] ? __netlink_lookup+0xc6/0x8b0 [ 237.409355][T11309] skb_clone+0x212/0x3a0 [ 237.409388][T11309] __netlink_deliver_tap+0x404/0x850 [ 237.409428][T11309] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.409457][T11309] netlink_deliver_tap+0x19c/0x1b0 [ 237.409485][T11309] netlink_unicast+0x730/0x8e0 [ 237.409522][T11309] netlink_sendmsg+0x813/0xb40 [ 237.409558][T11309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.409589][T11309] ? aa_sock_msg_perm+0xf1/0x1b0 [ 237.409619][T11309] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.409649][T11309] ____sys_sendmsg+0x972/0x9f0 [ 237.409676][T11309] ? __might_fault+0xaf/0x130 [ 237.409706][T11309] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.409745][T11309] ? import_iovec+0x73/0xa0 [ 237.409778][T11309] ___sys_sendmsg+0x2a5/0x360 [ 237.409805][T11309] ? __lock_acquire+0x6b5/0x2cf0 [ 237.409832][T11309] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.409901][T11309] ? __fget_files+0x2a/0x420 [ 237.409926][T11309] ? __fget_files+0x3a0/0x420 [ 237.409962][T11309] __x64_sys_sendmsg+0x1bd/0x2a0 [ 237.409994][T11309] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.410033][T11309] ? __pfx_ksys_write+0x10/0x10 [ 237.410079][T11309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.410111][T11309] do_syscall_64+0x15f/0xf80 [ 237.410139][T11309] ? trace_irq_disable+0x3b/0x140 [ 237.410169][T11309] ? clear_bhb_loop+0x40/0x90 [ 237.410195][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.410214][T11309] RIP: 0033:0x7fb1d159cdd9 [ 237.410233][T11309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.410248][T11309] RSP: 002b:00007fb1d2469028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.410269][T11309] RAX: ffffffffffffffda RBX: 00007fb1d1815fa0 RCX: 00007fb1d159cdd9 [ 237.410282][T11309] RDX: 0000000000004880 RSI: 00002000000001c0 RDI: 0000000000000006 [ 237.410292][T11309] RBP: 00007fb1d2469090 R08: 0000000000000000 R09: 0000000000000000 [ 237.410302][T11309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.410312][T11309] R13: 00007fb1d1816038 R14: 00007fb1d1815fa0 R15: 00007ffd0eda8a78 [ 237.410342][T11309] [ 237.794981][T11303] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.227980][T11344] netlink: 'syz.3.1507': attribute type 39 has an invalid length. [ 238.391870][T11350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.659049][T11360] netlink: 'syz.3.1513': attribute type 3 has an invalid length. [ 238.679008][T11360] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1513'. [ 238.798730][T11366] vlan3: entered promiscuous mode [ 238.858495][T11366] bridge0: entered promiscuous mode [ 239.008400][T11379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'. [ 239.081622][T11381] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 239.175607][T11390] netlink: 'syz.3.1521': attribute type 8 has an invalid length. [ 239.344532][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'. [ 239.361830][T11398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1523'. [ 239.372394][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1524'. [ 239.841048][ T5640] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 240.222967][T11443] __nla_validate_parse: 1 callbacks suppressed [ 240.222991][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1533'. [ 240.729348][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 240.760168][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'. [ 240.867246][T11484] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1538'. [ 240.900577][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1538'. [ 241.047545][T11469] syzkaller0: entered promiscuous mode [ 241.069024][T11469] syzkaller0: entered allmulticast mode [ 241.214283][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1545'. [ 244.437511][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1547'. [ 244.582388][T11520] netlink: 'syz.0.1552': attribute type 1 has an invalid length. [ 244.686681][T11520] bond4: entered promiscuous mode [ 244.713981][T11520] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.941835][T11542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.973993][T11544] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.015602][T11549] openvswitch: netlink: Multiple metadata blocks provided [ 245.164471][T11549] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1560'. [ 245.186985][T11549] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1560'. [ 245.275846][T11551] syzkaller1: entered promiscuous mode [ 245.309201][T11551] syzkaller1: entered allmulticast mode [ 245.457323][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1566'. [ 245.567189][T11580] netlink: 'syz.2.1568': attribute type 6 has an invalid length. [ 245.694229][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1569'. [ 245.874618][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'. [ 248.034848][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1569'. [ 248.264195][T11607] netlink: 'syz.2.1575': attribute type 29 has an invalid length. [ 248.297380][T11607] netlink: 'syz.2.1575': attribute type 29 has an invalid length. [ 248.330060][T11607] netlink: 'syz.2.1575': attribute type 32 has an invalid length. [ 248.337967][T11607] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1575'. [ 248.757179][T11631] bond5: entered promiscuous mode [ 248.780225][T11631] bond5: entered allmulticast mode [ 248.804123][T11631] 8021q: adding VLAN 0 to HW filter on device bond5 [ 248.804352][T11643] netlink: 'syz.4.1584': attribute type 1 has an invalid length. [ 248.874971][T11650] xt_hashlimit: size too large, truncated to 1048576 [ 248.884806][T11642] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 248.932573][T11642] bond4 (unregistering): Released all slaves [ 248.993891][T11643] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 249.182213][T11665] pim6reg: entered allmulticast mode [ 249.211724][T11665] pim6reg: left allmulticast mode [ 249.225474][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1588'. [ 249.294178][T11669] netlink: 'syz.4.1591': attribute type 29 has an invalid length. [ 249.306741][T11669] netlink: 'syz.4.1591': attribute type 29 has an invalid length. [ 249.320033][T11669] netlink: 'syz.4.1591': attribute type 32 has an invalid length. [ 249.480434][T11675] netlink: 'syz.4.1594': attribute type 1 has an invalid length. [ 249.496806][T11673] syzkaller0: entered promiscuous mode [ 249.516943][T11673] syzkaller0: entered allmulticast mode [ 249.572469][T11675] 8021q: adding VLAN 0 to HW filter on device bond8 [ 249.646872][T11681] bond4: option fail_over_mac: invalid value (16) [ 249.657548][T11681] bond4 (unregistering): Released all slaves [ 249.692549][T11673] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 249.798327][T11690] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1597'. [ 250.055853][T11704] pim6reg527: entered allmulticast mode [ 250.077246][T11704] netlink: 'syz.2.1599': attribute type 15 has an invalid length. [ 250.394538][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1605'. [ 250.714511][T11735] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20002 [ 250.763793][T11741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1613'. [ 250.811479][T11742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1614'. [ 251.117380][T11760] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1619'. [ 251.157773][T11763] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1620'. [ 251.173576][T11760] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1619'. [ 251.246615][T11767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1621'. [ 251.287999][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806aae1400: rx timeout, send abort [ 251.305330][T11767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1621'. [ 251.305680][T11773] netlink: 'syz.1.1621': attribute type 1 has an invalid length. [ 251.411028][T11767] bridge0: entered promiscuous mode [ 251.436417][T11773] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1621'. [ 251.437747][T11767] ip6gretap0: entered promiscuous mode [ 251.486390][T11767] debugfs: 'hsr1' already exists in 'hsr' [ 251.524691][T11767] Cannot create hsr debugfs directory [ 251.535211][T11767] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 251.788230][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806aae1800: rx timeout, send abort [ 251.798384][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806aae1400: abort rx timeout. Force session deactivation [ 252.266879][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807925c000: rx timeout, send abort [ 252.276554][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807925c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 252.302508][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806aae1800: abort rx timeout. Force session deactivation [ 252.362408][T11818] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1637'. [ 252.375362][T11819] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1636'. [ 252.408555][T11819] IPv6: NLM_F_CREATE should be specified when creating new route [ 252.672572][T11834] IPVS: length: 239 != 24 [ 252.915128][T11851] netlink: 'syz.2.1649': attribute type 29 has an invalid length. [ 252.943663][T11851] netlink: 'syz.2.1649': attribute type 29 has an invalid length. [ 252.969961][T11851] netlink: 'syz.2.1649': attribute type 32 has an invalid length. [ 253.063021][T11853] xt_hashlimit: size too large, truncated to 1048576 [ 253.545729][T11881] netlink: 'syz.4.1656': attribute type 1 has an invalid length. [ 254.317513][T11898] netlink: 'syz.4.1661': attribute type 1 has an invalid length. [ 254.548357][T11900] 8021q: adding VLAN 0 to HW filter on device bond10 [ 254.558483][T11900] bond9: (slave bond10): making interface the new active one [ 254.585173][T11900] bond9: (slave bond10): Enslaving as an active interface with an up link [ 254.594844][T11905] netlink: 'syz.0.1663': attribute type 29 has an invalid length. [ 254.608546][T11911] netlink: 'syz.0.1663': attribute type 29 has an invalid length. [ 254.633500][T11920] 8021q: adding VLAN 0 to HW filter on device bond9 [ 254.776962][T11927] x_tables: unsorted underflow at hook 4 [ 254.797661][T11922] syzkaller0: entered promiscuous mode [ 254.821210][T11922] syzkaller0: entered allmulticast mode [ 255.097079][T11944] netlink: 'syz.3.1671': attribute type 1 has an invalid length. [ 255.387901][T11944] bond6: entered promiscuous mode [ 255.394089][T11944] 8021q: adding VLAN 0 to HW filter on device bond6 [ 255.563705][T11975] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 255.771830][T11982] __nla_validate_parse: 17 callbacks suppressed [ 255.771856][T11982] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1677'. [ 255.864743][T11987] syzkaller0: entered promiscuous mode [ 255.870384][T11987] syzkaller0: entered allmulticast mode [ 255.879850][T11988] netlink: 'syz.3.1679': attribute type 29 has an invalid length. [ 255.903218][T11988] netlink: 'syz.3.1679': attribute type 29 has an invalid length. [ 255.927946][T11988] netlink: 'syz.3.1679': attribute type 32 has an invalid length. [ 255.946701][T11988] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1679'. [ 256.083279][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.090811][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.644165][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 257.878693][T11938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 258.126990][T12017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.347672][T12032] netlink: 'syz.1.1691': attribute type 29 has an invalid length. [ 258.381615][T12032] netlink: 'syz.1.1691': attribute type 29 has an invalid length. [ 258.421869][T12032] netlink: 'syz.1.1691': attribute type 32 has an invalid length. [ 258.446425][T12032] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1691'. [ 258.470853][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1692'. [ 258.605173][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1694'. [ 258.717628][T12048] netlink: 'syz.0.1696': attribute type 83 has an invalid length. [ 258.732200][T12047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1695'. [ 259.197892][T12069] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1702'. [ 259.252970][T12073] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1703'. [ 259.332226][T12077] netlink: 'syz.2.1705': attribute type 29 has an invalid length. [ 259.389342][T12079] netlink: 'syz.2.1705': attribute type 29 has an invalid length. [ 259.417766][T12077] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1705'. [ 259.536986][T12083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 259.934651][T12102] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 260.275794][T12122] validate_nla: 2 callbacks suppressed [ 260.275815][T12122] netlink: 'syz.0.1719': attribute type 29 has an invalid length. [ 260.293442][T12124] netlink: 'syz.0.1719': attribute type 29 has an invalid length. [ 260.305484][T12122] netlink: 'syz.0.1719': attribute type 32 has an invalid length. [ 260.597022][T12135] SET target dimension over the limit! [ 260.656108][T12098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 260.698442][T12138] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 260.828430][T12143] __nla_validate_parse: 7 callbacks suppressed [ 260.828461][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'. [ 260.892890][T12143] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1725'. [ 260.937226][T12143] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1725'. [ 260.948751][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1726'. [ 260.997101][T12152] tipc: Enabling of bearer rejected, media not registered [ 261.160050][T12156] netlink: 'syz.4.1730': attribute type 29 has an invalid length. [ 261.174901][T12154] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1729'. [ 261.204840][T12156] netlink: 'syz.4.1730': attribute type 29 has an invalid length. [ 261.226821][T12156] netlink: 'syz.4.1730': attribute type 32 has an invalid length. [ 261.239702][T12154] vlan2: entered allmulticast mode [ 261.248669][T12154] ip6gretap0: entered allmulticast mode [ 261.254536][T12166] netlink: 'syz.3.1733': attribute type 1 has an invalid length. [ 261.301322][T12158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1731'. [ 261.324284][T12166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1733'. [ 261.540223][T12174] netlink: 'syz.0.1735': attribute type 1 has an invalid length. [ 261.586986][T12174] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1735'. [ 261.605563][T12184] IPv6: NLM_F_REPLACE set, but no existing node found! [ 261.657230][T12174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1735'. [ 261.697017][T12174] netlink: 211792 bytes leftover after parsing attributes in process `syz.0.1735'. [ 261.710686][T12189] netlink: 'syz.4.1740': attribute type 1 has an invalid length. [ 261.849599][T12189] 8021q: adding VLAN 0 to HW filter on device bond11 [ 262.007611][T12198] pim6reg1: entered promiscuous mode [ 262.017831][T12198] pim6reg1: entered allmulticast mode [ 262.080430][T12205] netlink: 'syz.4.1744': attribute type 29 has an invalid length. [ 262.259976][T12209] xt_hashlimit: size too large, truncated to 1048576 [ 263.104094][T12248] IPv6: sit2: Disabled Multicast RS [ 263.259929][T12253] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.272548][T12256] bond5: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 263.313640][T12256] bond5: entered allmulticast mode [ 263.434532][T12253] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 263.904529][T12290] IPv6: NLM_F_CREATE should be specified when creating new route [ 264.090325][T12297] bridge0: port 3(batadv1) entered blocking state [ 264.109495][T12297] bridge0: port 3(batadv1) entered disabled state [ 264.127494][T12297] batadv1: entered allmulticast mode [ 264.142007][T12297] batadv1: entered promiscuous mode [ 264.549493][ T35] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 264.559267][ T35] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 264.656492][T12325] netem: change failed [ 265.206695][T12353] bridge0: port 5(batadv3) entered blocking state [ 265.225430][T12353] bridge0: port 5(batadv3) entered disabled state [ 265.259607][T12353] batadv3: entered allmulticast mode [ 265.285013][T12353] batadv3: entered promiscuous mode [ 265.389557][T12358] x_tables: duplicate underflow at hook 1 [ 265.679549][T11476] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 265.690089][T11476] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 265.927948][T12383] syzkaller1: entered promiscuous mode [ 265.948952][T12383] syzkaller1: entered allmulticast mode [ 265.983003][T12381] __nla_validate_parse: 15 callbacks suppressed [ 265.983026][T12381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1799'. [ 266.011412][T11476] tipc: Subscription rejected, illegal request [ 266.073025][T12388] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 266.127034][ T5762] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 266.131010][T12395] validate_nla: 4 callbacks suppressed [ 266.131038][T12395] netlink: 'syz.2.1804': attribute type 1 has an invalid length. [ 266.180762][T12395] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1804'. [ 266.458164][T12409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1808'. [ 266.553522][T12414] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1809'. [ 266.721978][T12424] netlink: 'syz.3.1814': attribute type 24 has an invalid length. [ 266.750362][T12424] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1814'. [ 266.768683][T12427] netlink: 'syz.2.1813': attribute type 21 has an invalid length. [ 266.833434][T12427] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1813'. [ 266.871423][T12427] netlink: 'syz.2.1813': attribute type 5 has an invalid length. [ 266.920949][T12427] netlink: 'syz.2.1813': attribute type 6 has an invalid length. [ 266.972046][T12427] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1813'. [ 267.036770][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1818'. [ 267.601088][T11476] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 267.714765][T12458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1823'. [ 267.725270][T12458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1823'. [ 268.057212][T12476] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 269.741165][T12481] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 269.954657][T12435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 270.087790][T12487] FAULT_INJECTION: forcing a failure. [ 270.087790][T12487] name failslab, interval 1, probability 0, space 0, times 0 [ 270.107056][T12487] CPU: 1 UID: 0 PID: 12487 Comm: syz.3.1830 Not tainted syzkaller #0 PREEMPT(full) [ 270.107089][T12487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 270.107102][T12487] Call Trace: [ 270.107111][T12487] [ 270.107120][T12487] dump_stack_lvl+0xe8/0x150 [ 270.107152][T12487] should_fail_ex+0x412/0x560 [ 270.107186][T12487] should_failslab+0xa8/0x100 [ 270.107221][T12487] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 270.107251][T12487] ? __alloc_skb+0x1d0/0x7d0 [ 270.107275][T12487] ? __local_bh_enable_ip+0xd0/0x130 [ 270.107300][T12487] __alloc_skb+0x1d0/0x7d0 [ 270.107321][T12487] ? netlink_ack_tlv_len+0x6c/0x210 [ 270.107350][T12487] netlink_ack+0x146/0xa50 [ 270.107374][T12487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.107394][T12487] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 270.107419][T12487] ? __pfx_nl80211_post_doit+0x10/0x10 [ 270.107444][T12487] ? __pfx_ref_tracker_free+0x10/0x10 [ 270.107483][T12487] netlink_rcv_skb+0x2b6/0x4b0 [ 270.107512][T12487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.107536][T12487] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.107582][T12487] ? down_read+0x270/0x2e0 [ 270.107601][T12487] ? genl_rcv+0xd/0x40 [ 270.107624][T12487] genl_rcv+0x28/0x40 [ 270.107643][T12487] netlink_unicast+0x75c/0x8e0 [ 270.107682][T12487] netlink_sendmsg+0x813/0xb40 [ 270.107735][T12487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.107768][T12487] ? aa_sock_msg_perm+0xf1/0x1b0 [ 270.107798][T12487] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 270.107831][T12487] ____sys_sendmsg+0x972/0x9f0 [ 270.107860][T12487] ? __might_fault+0xaf/0x130 [ 270.107893][T12487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.107933][T12487] ? import_iovec+0x73/0xa0 [ 270.107968][T12487] ___sys_sendmsg+0x2a5/0x360 [ 270.107995][T12487] ? __lock_acquire+0x6b5/0x2cf0 [ 270.108032][T12487] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.108103][T12487] ? __fget_files+0x2a/0x420 [ 270.108127][T12487] ? __fget_files+0x3a0/0x420 [ 270.108164][T12487] __x64_sys_sendmsg+0x1bd/0x2a0 [ 270.108195][T12487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.108235][T12487] ? __pfx_ksys_write+0x10/0x10 [ 270.108275][T12487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.108298][T12487] do_syscall_64+0x15f/0xf80 [ 270.108326][T12487] ? trace_irq_disable+0x3b/0x140 [ 270.108356][T12487] ? clear_bhb_loop+0x40/0x90 [ 270.108383][T12487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.108403][T12487] RIP: 0033:0x7fd0c579cdd9 [ 270.108423][T12487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.108442][T12487] RSP: 002b:00007fd0c65f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.108465][T12487] RAX: ffffffffffffffda RBX: 00007fd0c5a15fa0 RCX: 00007fd0c579cdd9 [ 270.108481][T12487] RDX: 000000000000c000 RSI: 0000200000000200 RDI: 0000000000000003 [ 270.108495][T12487] RBP: 00007fd0c65f2090 R08: 0000000000000000 R09: 0000000000000000 [ 270.108508][T12487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.108522][T12487] R13: 00007fd0c5a16038 R14: 00007fd0c5a15fa0 R15: 00007ffc3952c338 [ 270.108555][T12487] [ 270.535922][T12495] IPVS: stopping master sync thread 7445 ... [ 270.698454][T12507] netlink: 'syz.0.1831': attribute type 1 has an invalid length. [ 270.752209][T12507] bond6: entered promiscuous mode [ 270.757951][T12507] 8021q: adding VLAN 0 to HW filter on device bond6 [ 270.816503][T12507] 8021q: adding VLAN 0 to HW filter on device bond6 [ 270.832156][T12507] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 270.873394][T12507] bond6: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 270.960265][T12507] bond6: (slave vcan1): making interface the new active one [ 270.995219][T12507] vcan1: entered promiscuous mode [ 271.014920][T12507] bond6: (slave vcan1): Enslaving as an active interface with an up link [ 271.039548][ T5640] Bluetooth: hci2: command 0x0401 tx timeout [ 271.245629][T12530] netlink: 'syz.1.1843': attribute type 1 has an invalid length. [ 271.254480][T12532] netlink: 'syz.1.1843': attribute type 1 has an invalid length. [ 271.321034][T12531] __nla_validate_parse: 3 callbacks suppressed [ 271.321057][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1842'. [ 271.367051][T12530] 8021q: adding VLAN 0 to HW filter on device bond4 [ 271.425992][T12537] bond4: (slave gretap1): making interface the new active one [ 271.437864][T12537] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 271.605989][T12546] openvswitch: netlink: IP tunnel dst address not specified [ 271.633497][T12546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.739489][T12550] netlink: 'syz.1.1847': attribute type 29 has an invalid length. [ 271.749779][T12550] netlink: 'syz.1.1847': attribute type 29 has an invalid length. [ 271.759999][T12550] netlink: 'syz.1.1847': attribute type 32 has an invalid length. [ 271.769569][T12550] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1847'. [ 271.779767][T12551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1846'. [ 271.812848][T12551] bridge0: port 4(batadv2) entered blocking state [ 271.829104][T12551] bridge0: port 4(batadv2) entered disabled state [ 271.839971][T12551] batadv2: entered allmulticast mode [ 271.855901][T12551] batadv2: entered promiscuous mode [ 272.074040][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1850'. [ 272.131240][T12566] syzkaller0: entered promiscuous mode [ 272.152293][T12566] syzkaller0: entered allmulticast mode [ 272.299673][T11475] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 272.309588][T11475] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 272.865199][T12590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1857'. [ 272.963557][T12594] netlink: 'syz.2.1858': attribute type 29 has an invalid length. [ 272.974395][T12594] netlink: 'syz.2.1858': attribute type 29 has an invalid length. [ 272.984227][T12594] netlink: 'syz.2.1858': attribute type 32 has an invalid length. [ 272.992697][T12594] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1858'. [ 273.048007][T12596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1859'. [ 273.065586][T12596] bridge0: port 4(batadv2) entered blocking state [ 273.072910][T12596] bridge0: port 4(batadv2) entered disabled state [ 273.079846][T12596] batadv2: entered allmulticast mode [ 273.087009][T12596] batadv2: entered promiscuous mode [ 273.199055][ T5640] Bluetooth: hci1: command 0x0405 tx timeout [ 273.569445][T11475] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 273.579197][T11475] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 274.236965][T12539] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.588264][T12615] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1866'. [ 274.860449][T12629] netlink: 'syz.4.1869': attribute type 29 has an invalid length. [ 274.882192][T12629] netlink: 'syz.4.1869': attribute type 29 has an invalid length. [ 275.153752][T12650] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 275.537399][T12672] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1882'. [ 275.556479][T12672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1882'. [ 275.800389][T12683] bridge0: port 1(batadv1) entered blocking state [ 275.810987][T12683] bridge0: port 1(batadv1) entered disabled state [ 275.827533][T12683] batadv1: entered allmulticast mode [ 275.840588][T12683] batadv1: entered promiscuous mode [ 276.270805][T11476] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 276.280582][T11476] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 276.423084][T12714] gre0: entered promiscuous mode [ 276.436949][T12714] gre0: entered allmulticast mode [ 276.455194][T12714] x_tables: duplicate underflow at hook 2 [ 276.846517][T12735] validate_nla: 11 callbacks suppressed [ 276.846539][T12735] netlink: 'syz.2.1902': attribute type 10 has an invalid length. [ 277.247015][T12752] netlink: 'syz.4.1906': attribute type 1 has an invalid length. [ 277.263542][T12753] netlink: 'syz.1.1907': attribute type 29 has an invalid length. [ 277.296808][T12753] netlink: 'syz.1.1907': attribute type 29 has an invalid length. [ 277.332515][T12753] netlink: 'syz.1.1907': attribute type 32 has an invalid length. [ 277.355907][T12753] __nla_validate_parse: 8 callbacks suppressed [ 277.355928][T12753] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1907'. [ 278.323386][T12799] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1920'. [ 278.335517][T12799] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1920'. [ 278.396822][ T5762] hid-generic 0005:16C0:1012.0001: item fetching failed at offset 0/1 [ 278.412299][ T5762] hid-generic 0005:16C0:1012.0001: probe with driver hid-generic failed with error -22 [ 278.488132][T12801] netlink: 'syz.2.1921': attribute type 29 has an invalid length. [ 278.523715][T12799] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1920'. [ 278.547261][T12801] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1921'. [ 278.599650][T12804] netlink: 'syz.2.1921': attribute type 29 has an invalid length. [ 278.765198][T12817] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 278.831311][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'. [ 278.936187][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1924'. [ 279.740129][T12853] IPVS: set_ctl: invalid protocol: 50 172.30.1.4:20003 [ 279.911694][T12864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1937'. [ 280.280671][T12881] bridge0: port 1(bridge_slave_0) entered listening state [ 280.298468][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1941'. [ 280.473636][T12884] syzkaller0: entered allmulticast mode [ 280.582892][T12896] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1945'. [ 280.758161][T12901] can: request_module (can-proto-0) failed. [ 283.194013][T12909] __nla_validate_parse: 21 callbacks suppressed [ 283.194038][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1949'. [ 283.230074][T12912] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.323965][T12912] bridge_slave_0 (unregistering): left allmulticast mode [ 283.346339][T12912] bridge_slave_0 (unregistering): left promiscuous mode [ 283.356237][T12922] xt_HMARK: proto mask must be zero with L3 mode [ 283.374901][T12912] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.803032][T12948] sctp: [Deprecated]: syz.4.1957 (pid 12948) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.803032][T12948] Use struct sctp_sack_info instead [ 283.893184][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1961'. [ 283.894558][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1963'. [ 283.980745][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'. [ 284.277750][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1966'. [ 284.326735][T12973] sctp: [Deprecated]: syz.4.1965 (pid 12973) Use of int in max_burst socket option deprecated. [ 284.326735][T12973] Use struct sctp_assoc_value instead [ 284.356675][T12974] nft_compat: unsupported protocol 0 [ 284.578407][T12986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1970'. [ 284.627443][T12983] netlink: 'syz.1.1970': attribute type 10 has an invalid length. [ 284.783706][T13000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.837066][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1975'. [ 284.914435][T13007] xt_hashlimit: size too large, truncated to 1048576 [ 284.944411][T13009] xt_hashlimit: size too large, truncated to 1048576 [ 285.020421][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1975'. [ 285.447336][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1984'. [ 285.492505][T13033] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1983'. [ 285.773945][T13051] netlink: 'syz.4.1991': attribute type 26 has an invalid length. [ 286.052663][T13061] netlink: 'syz.0.1996': attribute type 14 has an invalid length. [ 286.079379][T13061] netlink: 'syz.0.1996': attribute type 13 has an invalid length. [ 286.243470][T13068] xt_hashlimit: size too large, truncated to 1048576 [ 286.256449][T13066] lo speed is unknown, defaulting to 1000 [ 286.313314][T13070] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 286.347390][T13066] lo speed is unknown, defaulting to 1000 [ 286.424939][T13083] netlink: 'syz.1.2001': attribute type 4 has an invalid length. [ 286.448694][T13040] netlink: 'syz.3.1988': attribute type 16 has an invalid length. [ 286.490327][T13040] netlink: 'syz.3.1988': attribute type 17 has an invalid length. [ 286.508308][T13066] lo speed is unknown, defaulting to 1000 [ 286.582984][T13040] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 287.099802][T13098] syzkaller0: entered promiscuous mode [ 287.122785][T13098] syzkaller0: entered allmulticast mode [ 287.630530][T13125] x_tables: duplicate underflow at hook 1 [ 287.693775][T13129] x_tables: duplicate underflow at hook 1 [ 287.937119][ T5774] lo speed is unknown, defaulting to 1000 [ 287.947718][T13066] infiniband syz0: set down [ 287.960047][T13066] infiniband syz0: added lo [ 287.968458][T13135] netlink: 'syz.0.2012': attribute type 1 has an invalid length. [ 287.994035][T13135] netlink: 'syz.0.2012': attribute type 1 has an invalid length. [ 288.000847][T13066] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 288.013318][T13135] netlink: 'syz.0.2012': attribute type 8 has an invalid length. [ 288.020532][T13066] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 288.045737][T13066] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 288.123689][T13066] RDS/IB: syz0: added [ 288.131030][T13066] smc: adding ib device syz0 with port count 1 [ 288.138735][T13066] smc: ib device syz0 port 1 has no pnetid [ 288.190691][T13149] : entered promiscuous mode [ 288.222697][ T5774] lo speed is unknown, defaulting to 1000 [ 288.245799][T13066] lo speed is unknown, defaulting to 1000 [ 288.385529][T13157] SET target dimension over the limit! [ 288.414976][T13157] veth: renamed from veth0_vlan (while UP) [ 288.773524][T13168] __nla_validate_parse: 12 callbacks suppressed [ 288.773550][T13168] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2021'. [ 288.783256][T13165] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2020'. [ 288.969349][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2024'. [ 289.093176][T13066] lo speed is unknown, defaulting to 1000 [ 289.472538][T13066] lo speed is unknown, defaulting to 1000 [ 289.492688][T13193] tipc: Enabled bearer , priority 14 [ 289.782431][T13066] lo speed is unknown, defaulting to 1000 [ 290.261495][T13066] lo speed is unknown, defaulting to 1000 [ 290.288262][T13219] syzkaller0: entered promiscuous mode [ 290.295527][T13219] syzkaller0: entered allmulticast mode [ 290.304602][T13219] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 290.452263][T13223] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 290.467835][T13223] bond7 (unregistering): Released all slaves [ 290.611406][ T5634] tipc: Node number set to 2739715000 [ 290.671661][T13177] rdma_rxe: rxe_newlink: failed to add lo [ 291.026085][T13248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2046'. [ 291.065820][T13248] ip6erspan1: entered promiscuous mode [ 291.083592][T13248] erspan0: entered promiscuous mode [ 291.095805][T13248] erspan0: entered allmulticast mode [ 291.125866][T13248] xt_hashlimit: size too large, truncated to 1048576 [ 291.238337][T13253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2050'. [ 291.348207][T13266] netlink: 'syz.4.2053': attribute type 11 has an invalid length. [ 291.366808][T13266] netlink: 'syz.4.2053': attribute type 11 has an invalid length. [ 291.395014][T13266] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2053'. [ 291.396190][T13267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.411927][T13266] validate_nla: 3 callbacks suppressed [ 291.411948][T13266] netlink: 'syz.4.2053': attribute type 1 has an invalid length. [ 291.441015][T13266] netlink: 'syz.4.2053': attribute type 2 has an invalid length. [ 291.472089][T13270] dvmrp0: left allmulticast mode [ 291.543630][T13272] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2055'. [ 291.836207][T13293] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.2061'. [ 291.860651][T13290] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2060'. [ 291.875348][T13292] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.2061'. [ 291.993934][T13292] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 292.053451][T13292] 0ªX¹¦Dö»: entered allmulticast mode [ 292.076890][T13293] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 292.077159][T13302] xt_TPROXY: Can be used only with -p tcp or -p udp [ 292.136430][T13286] lo speed is unknown, defaulting to 1000 [ 292.448634][T13327] netlink: 'syz.2.2072': attribute type 29 has an invalid length. [ 292.598511][T13334] netlink: 'syz.4.2073': attribute type 10 has an invalid length. [ 292.628531][T13334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.652717][T13334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.673220][T13334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.690724][T13334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.759931][T13328] lo speed is unknown, defaulting to 1000 [ 293.186162][T13344] raw_sendmsg: syz.2.2079 forgot to set AF_INET. Fix it! [ 293.243841][T13344] C: renamed from lo [ 293.271207][T13344] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 294.004600][T13373] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3702943612/3702943613 [ 294.063294][T13373] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3702943612/3702943613 [ 294.198761][T13378] sctp: [Deprecated]: syz.2.2085 (pid 13378) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.198761][T13378] Use struct sctp_sack_info instead [ 294.272992][T13379] __nla_validate_parse: 5 callbacks suppressed [ 294.273015][T13379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2085'. [ 294.351800][T13379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2085'. [ 294.383028][T13383] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2086'. [ 294.637530][T13393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2089'. [ 295.055053][T13404] tipc: Enabled bearer , priority 0 [ 295.237154][T13404] syzkaller0: entered promiscuous mode [ 295.249765][T13404] syzkaller0: entered allmulticast mode [ 295.265541][T13404] tipc: Resetting bearer [ 295.308191][T13403] tipc: Resetting bearer [ 295.373832][T13423] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2098'. [ 295.397123][T13423] netlink: 'syz.2.2098': attribute type 21 has an invalid length. [ 298.399623][T13403] tipc: Disabling bearer [ 298.412470][T13423] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2098'. [ 298.515933][T13486] openvswitch: netlink: Flow key attr not present in new flow. [ 298.720342][T13495] netlink: 'syz.0.2113': attribute type 1 has an invalid length. [ 298.752713][T13496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2115'. [ 299.173806][T13513] netlink: 'syz.2.2123': attribute type 16 has an invalid length. [ 299.211740][T13513] netlink: 'syz.2.2123': attribute type 17 has an invalid length. [ 299.268043][T13513] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 299.337385][T13526] netlink: 'syz.1.2125': attribute type 1 has an invalid length. [ 299.554970][T13531] bond5: (slave bridge5): Enslaving as a backup interface with an up link [ 299.587835][T13538] netlink: 'syz.0.2126': attribute type 61 has an invalid length. [ 299.628199][T13526] macvlan0: entered promiscuous mode [ 299.647326][T13526] macvlan0: entered allmulticast mode [ 299.664709][T13526] bond5: entered promiscuous mode [ 299.678252][T13526] bridge5: entered promiscuous mode [ 299.711770][T13526] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 299.748383][T13526] bond5: left promiscuous mode [ 299.768916][T13526] bridge5: left promiscuous mode [ 300.216793][T13558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2131'. [ 300.390522][T13572] netlink: 'syz.1.2135': attribute type 21 has an invalid length. [ 300.546367][T13572] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 300.585365][T13572] bond6 (unregistering): Released all slaves [ 300.883705][T13597] netlink: 'syz.1.2140': attribute type 1 has an invalid length. [ 300.895646][T13597] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2140'. [ 300.906612][T13596] netlink: 'syz.1.2140': attribute type 1 has an invalid length. [ 300.918342][T13598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2139'. [ 300.929785][T13596] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2140'. [ 301.269303][T13597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2140'. [ 301.745722][T13620] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.2147'. [ 301.837455][T13622] --map-set only usable from mangle table [ 302.148301][T13622] gre0: left allmulticast mode [ 302.190994][T13622] 1ªX¹¦Dö»: left allmulticast mode [ 303.020139][T13660] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2156'. [ 303.061789][T13658] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2156'. [ 305.116215][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2174'. [ 305.497842][T13739] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.2179'. [ 305.544073][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2178'. [ 305.684467][T13749] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2182'. [ 305.747818][T13750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2182'. [ 305.830704][T13749] xt_policy: neither incoming nor outgoing policy selected [ 306.061879][T13764] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2184'. [ 306.593547][T13792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2192'. [ 306.665970][T13792] veth0: entered promiscuous mode [ 306.708155][T13792] veth0: left promiscuous mode [ 307.341859][T13785] netlink: 'syz.3.2191': attribute type 16 has an invalid length. [ 307.361488][T13785] netlink: 'syz.3.2191': attribute type 17 has an invalid length. [ 307.410604][T13785] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 307.690868][T13832] FAULT_INJECTION: forcing a failure. [ 307.690868][T13832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.746528][T13832] CPU: 1 UID: 0 PID: 13832 Comm: syz.4.2201 Not tainted syzkaller #0 PREEMPT(full) [ 307.746560][T13832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.746571][T13832] Call Trace: [ 307.746579][T13832] [ 307.746589][T13832] dump_stack_lvl+0xe8/0x150 [ 307.746620][T13832] should_fail_ex+0x412/0x560 [ 307.746654][T13832] _copy_from_user+0x2d/0xb0 [ 307.746685][T13832] __sys_sendto+0x2b0/0x710 [ 307.746714][T13832] ? __pfx___sys_sendto+0x10/0x10 [ 307.746738][T13832] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 307.746781][T13832] ? __fget_files+0x3a0/0x420 [ 307.746816][T13832] ? ksys_write+0x242/0x270 [ 307.746847][T13832] ? __pfx_ksys_write+0x10/0x10 [ 307.746882][T13832] __x64_sys_sendto+0xde/0x100 [ 307.746909][T13832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.746931][T13832] do_syscall_64+0x15f/0xf80 [ 307.746959][T13832] ? trace_irq_disable+0x3b/0x140 [ 307.746988][T13832] ? clear_bhb_loop+0x40/0x90 [ 307.747014][T13832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.747035][T13832] RIP: 0033:0x7ff1d4b9cdd9 [ 307.747055][T13832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.747075][T13832] RSP: 002b:00007ff1d2df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 307.747099][T13832] RAX: ffffffffffffffda RBX: 00007ff1d4e15fa0 RCX: 00007ff1d4b9cdd9 [ 307.747114][T13832] RDX: ffffffffffffff25 RSI: 0000000000000000 RDI: 0000000000000003 [ 307.747128][T13832] RBP: 00007ff1d2df6090 R08: 00002000000004c0 R09: 0000000000000080 [ 307.747142][T13832] R10: 00000000000068ec R11: 0000000000000246 R12: 0000000000000001 [ 307.747155][T13832] R13: 00007ff1d4e16038 R14: 00007ff1d4e15fa0 R15: 00007ffdcf700318 [ 307.747233][T13832] [ 308.090907][T13838] tipc: Enabling of bearer rejected, failed to enable media [ 308.148357][T13842] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2204'. [ 308.438310][T13850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2206'. [ 308.456918][T13853] netlink: 'syz.4.2208': attribute type 1 has an invalid length. [ 308.570650][T13850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2206'. [ 308.751910][T13856] macvlan2: entered promiscuous mode [ 308.770040][T13856] macvlan2: entered allmulticast mode [ 308.782251][T13856] bond12: entered promiscuous mode [ 308.801529][T13856] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 308.832073][T13856] bond12: left promiscuous mode [ 309.216760][T13878] FAULT_INJECTION: forcing a failure. [ 309.216760][T13878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.251365][T13876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2213'. [ 309.270930][T13878] CPU: 1 UID: 0 PID: 13878 Comm: syz.4.2214 Not tainted syzkaller #0 PREEMPT(full) [ 309.270975][T13878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 309.270988][T13878] Call Trace: [ 309.270998][T13878] [ 309.271007][T13878] dump_stack_lvl+0xe8/0x150 [ 309.271045][T13878] should_fail_ex+0x412/0x560 [ 309.271079][T13878] _copy_to_user+0x31/0xb0 [ 309.271112][T13878] simple_read_from_buffer+0xe1/0x170 [ 309.271144][T13878] proc_fail_nth_read+0x1bb/0x230 [ 309.271175][T13878] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.271207][T13878] ? rw_verify_area+0x2a6/0x4d0 [ 309.271243][T13878] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.271271][T13878] vfs_read+0x20c/0xa70 [ 309.271307][T13878] ? __pfx___mutex_lock+0x10/0x10 [ 309.271339][T13878] ? __pfx_vfs_read+0x10/0x10 [ 309.271370][T13878] ? __fget_files+0x2a/0x420 [ 309.271401][T13878] ? __fget_files+0x3a0/0x420 [ 309.271425][T13878] ? __fget_files+0x2a/0x420 [ 309.271460][T13878] ksys_read+0x150/0x270 [ 309.271491][T13878] ? __pfx_ksys_read+0x10/0x10 [ 309.271531][T13878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.271554][T13878] do_syscall_64+0x15f/0xf80 [ 309.271582][T13878] ? trace_irq_disable+0x3b/0x140 [ 309.271613][T13878] ? clear_bhb_loop+0x40/0x90 [ 309.271639][T13878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.271660][T13878] RIP: 0033:0x7ff1d4b5d60e [ 309.271681][T13878] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 309.271699][T13878] RSP: 002b:00007ff1d2df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 309.271725][T13878] RAX: ffffffffffffffda RBX: 00007ff1d2df66c0 RCX: 00007ff1d4b5d60e [ 309.271741][T13878] RDX: 000000000000000f RSI: 00007ff1d2df60a0 RDI: 0000000000000004 [ 309.271755][T13878] RBP: 00007ff1d2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 309.271768][T13878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.271781][T13878] R13: 00007ff1d4e16038 R14: 00007ff1d4e15fa0 R15: 00007ffdcf700318 [ 309.271816][T13878] [ 309.917649][T13899] netlink: 'syz.0.2221': attribute type 9 has an invalid length. [ 309.977232][T13902] netlink: 'syz.1.2222': attribute type 4 has an invalid length. [ 310.023531][T13902] .`: renamed from bond0 (while UP) [ 310.420810][T13923] syzkaller1: entered allmulticast mode [ 310.747374][T13947] __nla_validate_parse: 8 callbacks suppressed [ 310.747396][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2235'. [ 310.875630][T13952] netlink: 'syz.0.2237': attribute type 19 has an invalid length. [ 311.223875][T13972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.488067][T13988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2246'. [ 311.500080][T13991] netlink: 'syz.4.2247': attribute type 29 has an invalid length. [ 311.513596][T13991] netlink: 'syz.4.2247': attribute type 29 has an invalid length. [ 311.527213][T13993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2248'. [ 311.535889][T13991] netlink: 'syz.4.2247': attribute type 32 has an invalid length. [ 311.662134][T13997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2249'. [ 312.160585][T14025] x_tables: duplicate underflow at hook 1 [ 312.162165][T14027] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2259'. [ 312.253220][T14031] netlink: 29350 bytes leftover after parsing attributes in process `syz.4.2258'. [ 312.282317][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2258'. [ 312.326847][T14027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2259'. [ 312.665594][T14050] IPVS: set_ctl: invalid protocol: 62 0.0.0.0:0 [ 312.719594][ T5636] Bluetooth: hci1: command 0x0405 tx timeout [ 312.925011][T14063] netlink: 'syz.1.2268': attribute type 3 has an invalid length. [ 312.927008][T14064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2269'. [ 312.983495][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2269'. [ 313.397717][T14085] sock: sock_set_timeout: `syz.4.2275' (pid 14085) tries to set negative timeout [ 313.408285][T14085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.483209][ T5640] block nbd2: Receive control failed (result -32) [ 313.716776][T14098] netlink: 'syz.0.2278': attribute type 29 has an invalid length. [ 313.750449][T14098] netlink: 'syz.0.2278': attribute type 29 has an invalid length. [ 313.862047][T14098] bond7: invalid ARP target 0.0.0.0 specified for addition [ 313.881411][T14098] bond7: option arp_ip_target: invalid value (0) [ 313.905882][T14098] bond7 (unregistering): Released all slaves [ 314.002480][T14105] IPv6: sit4: Disabled Multicast RS [ 314.071032][T14118] netlink: 'syz.2.2283': attribute type 6 has an invalid length. [ 315.233349][T14178] scsi_nl_rcv_msg: discarding partial skb [ 315.633662][T14194] netlink: 'syz.2.2305': attribute type 1 has an invalid length. [ 315.757018][T14194] 8021q: adding VLAN 0 to HW filter on device bond4 [ 315.811183][T14165] __nla_validate_parse: 10 callbacks suppressed [ 315.811208][T14165] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2297'. [ 315.974437][T14206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2306'. [ 315.993623][T14178] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2300'. [ 316.043346][T14178] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 316.324093][T14213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2309'. [ 316.384120][T14213] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 316.406588][T14213] gretap4: entered promiscuous mode [ 316.415316][T14213] gretap4: entered allmulticast mode [ 316.474487][T14216] netlink: 'syz.1.2310': attribute type 1 has an invalid length. [ 316.485788][T14219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2311'. [ 316.593750][T14218] 8021q: adding VLAN 0 to HW filter on device bond6 [ 316.648917][T14218] bond0: (slave bond6): making interface the new active one [ 316.705422][T14218] bond0: (slave bond6): Enslaving as an active interface with an up link [ 316.716649][T14221] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 317.055090][T14238] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2316'. [ 317.357613][T14228] netlink: 'syz.4.2313': attribute type 16 has an invalid length. [ 317.366645][T14228] netlink: 'syz.4.2313': attribute type 17 has an invalid length. [ 317.377952][T14228] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 317.521182][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.530776][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.657524][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2322'. [ 317.721703][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2322'. [ 317.860069][T14266] netlink: 'syz.4.2324': attribute type 29 has an invalid length. [ 317.874909][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2324'. [ 317.987669][T14272] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2323'. [ 318.255925][T14289] netlink: 'syz.1.2330': attribute type 27 has an invalid length. [ 318.285675][T14293] netlink: 'syz.1.2330': attribute type 27 has an invalid length. [ 318.300304][T14293] netlink: 'syz.1.2330': attribute type 4 has an invalid length. [ 318.311341][T14289] netlink: 'syz.1.2330': attribute type 4 has an invalid length. [ 318.336825][T14294] bridge_slave_0: left allmulticast mode [ 318.347949][T14294] bridge_slave_0: left promiscuous mode [ 318.355688][T14299] FAULT_INJECTION: forcing a failure. [ 318.355688][T14299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.358688][T14294] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.373527][T14299] CPU: 1 UID: 0 PID: 14299 Comm: syz.0.2333 Not tainted syzkaller #0 PREEMPT(full) [ 318.373557][T14299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 318.373569][T14299] Call Trace: [ 318.373577][T14299] [ 318.373584][T14299] dump_stack_lvl+0xe8/0x150 [ 318.373613][T14299] should_fail_ex+0x412/0x560 [ 318.373643][T14299] _copy_from_user+0x2d/0xb0 [ 318.373671][T14299] generic_map_update_batch+0x648/0x990 [ 318.373704][T14299] ? __pfx_generic_map_update_batch+0x10/0x10 [ 318.373728][T14299] ? __fget_files+0x2a/0x420 [ 318.373758][T14299] ? __pfx_generic_map_update_batch+0x10/0x10 [ 318.373780][T14299] bpf_map_do_batch+0x39b/0x630 [ 318.373805][T14299] __sys_bpf+0x7c1/0x950 [ 318.373835][T14299] ? __pfx___sys_bpf+0x10/0x10 [ 318.373878][T14299] ? ksys_write+0x242/0x270 [ 318.373906][T14299] ? __pfx_ksys_write+0x10/0x10 [ 318.373937][T14299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.373957][T14299] __x64_sys_bpf+0x7c/0x90 [ 318.373984][T14299] do_syscall_64+0x15f/0xf80 [ 318.374010][T14299] ? trace_irq_disable+0x3b/0x140 [ 318.374037][T14299] ? clear_bhb_loop+0x40/0x90 [ 318.374061][T14299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.374079][T14299] RIP: 0033:0x7fa04679cdd9 [ 318.374097][T14299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.374113][T14299] RSP: 002b:00007fa0449ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 318.374135][T14299] RAX: ffffffffffffffda RBX: 00007fa046a15fa0 RCX: 00007fa04679cdd9 [ 318.374149][T14299] RDX: 0000000000000038 RSI: 0000200000000400 RDI: 000000000000001a [ 318.374162][T14299] RBP: 00007fa0449ee090 R08: 0000000000000000 R09: 0000000000000000 [ 318.374182][T14299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.374193][T14299] R13: 00007fa046a16038 R14: 00007fa046a15fa0 R15: 00007ffe089d48d8 [ 318.374224][T14299] [ 318.593357][T14294] bridge_slave_1: left allmulticast mode [ 318.600826][T14294] bridge_slave_1: left promiscuous mode [ 318.606995][T14294] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.625919][T14294] bond0: (slave bond_slave_0): Releasing backup interface [ 318.637445][T14294] bond0: (slave bond_slave_1): Releasing backup interface [ 318.656264][T14294] team0: Port device team_slave_0 removed [ 318.667220][T14294] team0: Port device team_slave_1 removed [ 318.675505][T14294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.684173][T14294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.693890][T14294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.703620][T14294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.724294][T14294] bond1: (slave vti0): Releasing backup interface [ 318.731341][T14294] vti0: left promiscuous mode [ 318.749915][T14294] bond3: (slave ip6gretap0): Removing an active aggregator [ 318.762535][T14294] bond3: (slave ip6gretap0): Releasing backup interface [ 318.770693][ T5762] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 318.787341][T14294] batadv1: left allmulticast mode [ 318.792819][T14294] batadv1: left promiscuous mode [ 318.798752][T14294] bridge0: port 3(batadv1) entered disabled state [ 318.813022][T14294] batadv2: left allmulticast mode [ 318.818266][T14294] batadv2: left promiscuous mode [ 318.824192][T14294] bridge0: port 4(batadv2) entered disabled state [ 318.837953][T14297] FAULT_INJECTION: forcing a failure. [ 318.837953][T14297] name failslab, interval 1, probability 0, space 0, times 0 [ 318.852427][T14297] CPU: 0 UID: 0 PID: 14297 Comm: syz.3.2332 Not tainted syzkaller #0 PREEMPT(full) [ 318.852455][T14297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 318.852466][T14297] Call Trace: [ 318.852473][T14297] [ 318.852481][T14297] dump_stack_lvl+0xe8/0x150 [ 318.852508][T14297] should_fail_ex+0x412/0x560 [ 318.852537][T14297] should_failslab+0xa8/0x100 [ 318.852566][T14297] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 318.852592][T14297] ? __alloc_skb+0x1d0/0x7d0 [ 318.852618][T14297] ? __local_bh_enable_ip+0xd0/0x130 [ 318.852643][T14297] __alloc_skb+0x1d0/0x7d0 [ 318.852664][T14297] ? netlink_ack_tlv_len+0x6c/0x210 [ 318.852690][T14297] netlink_ack+0x146/0xa50 [ 318.852711][T14297] ? __pfx_genl_rcv_msg+0x10/0x10 [ 318.852727][T14297] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 318.852748][T14297] ? __pfx_nl80211_post_doit+0x10/0x10 [ 318.852770][T14297] ? __pfx_ref_tracker_free+0x10/0x10 [ 318.852805][T14297] netlink_rcv_skb+0x2b6/0x4b0 [ 318.852830][T14297] ? __pfx_genl_rcv_msg+0x10/0x10 [ 318.852850][T14297] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.852890][T14297] ? down_read+0x270/0x2e0 [ 318.852905][T14297] ? genl_rcv+0xd/0x40 [ 318.852934][T14297] genl_rcv+0x28/0x40 [ 318.852950][T14297] netlink_unicast+0x75c/0x8e0 [ 318.852983][T14297] netlink_sendmsg+0x813/0xb40 [ 318.853017][T14297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.853045][T14297] ? aa_sock_msg_perm+0xf1/0x1b0 [ 318.853072][T14297] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 318.853099][T14297] ____sys_sendmsg+0x972/0x9f0 [ 318.853125][T14297] ? __might_fault+0xaf/0x130 [ 318.853167][T14297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.853211][T14297] ? import_iovec+0x73/0xa0 [ 318.853241][T14297] ___sys_sendmsg+0x2a5/0x360 [ 318.853276][T14297] ? __lock_acquire+0x6b5/0x2cf0 [ 318.853300][T14297] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.853362][T14297] ? __fget_files+0x2a/0x420 [ 318.853383][T14297] ? __fget_files+0x3a0/0x420 [ 318.853415][T14297] __x64_sys_sendmsg+0x1bd/0x2a0 [ 318.853444][T14297] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.853480][T14297] ? __pfx_ksys_write+0x10/0x10 [ 318.853516][T14297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.853538][T14297] do_syscall_64+0x15f/0xf80 [ 318.853569][T14297] ? clear_bhb_loop+0x40/0x90 [ 318.853594][T14297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.853614][T14297] RIP: 0033:0x7fd0c579cdd9 [ 318.853635][T14297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.853662][T14297] RSP: 002b:00007fd0c65f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.853686][T14297] RAX: ffffffffffffffda RBX: 00007fd0c5a15fa0 RCX: 00007fd0c579cdd9 [ 318.853701][T14297] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 318.853715][T14297] RBP: 00007fd0c65f2090 R08: 0000000000000000 R09: 0000000000000000 [ 318.853728][T14297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.853740][T14297] R13: 00007fd0c5a16038 R14: 00007fd0c5a15fa0 R15: 00007ffc3952c338 [ 318.853777][T14297] [ 319.386729][T14312] netlink: 'syz.1.2336': attribute type 9 has an invalid length. [ 319.496457][T14318] netlink: 'syz.4.2340': attribute type 10 has an invalid length. [ 319.514072][T13639] IPVS: starting estimator thread 0... [ 319.519778][ T5755] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 319.549515][T14319] netlink: 'syz.4.2340': attribute type 10 has an invalid length. [ 319.619509][T14321] IPVS: using max 29 ests per chain, 69600 per kthread [ 319.758555][T14333] netlink: 'syz.1.2345': attribute type 13 has an invalid length. [ 319.968014][T14342] netlink: 'syz.2.2348': attribute type 10 has an invalid length. [ 320.010962][T14342] team0: Device veth1_virt_wifi failed to register rx_handler [ 320.183461][T14353] netlink: 'syz.1.2352': attribute type 6 has an invalid length. [ 320.266485][T14353] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 320.299855][T14357] sctp: [Deprecated]: syz.3.2351 (pid 14357) Use of int in max_burst socket option deprecated. [ 320.299855][T14357] Use struct sctp_assoc_value instead [ 320.317826][T14347] bond13: option mode: invalid value (133) [ 320.342728][T14347] bond13 (unregistering): Released all slaves [ 320.484292][T14364] 8021q: adding VLAN 0 to HW filter on device bond7 [ 320.547965][T14359] macvlan3: entered promiscuous mode [ 320.572565][T14359] macvlan3: entered allmulticast mode [ 320.592194][T14359] bond7: entered promiscuous mode [ 320.598556][T14359] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 320.655361][T14359] bond7: left promiscuous mode [ 320.747162][T14374] bond5: option min_links: invalid value (18446744073709551614) [ 320.780162][T14374] bond5: option min_links: allowed values 0 - 2147483647 [ 320.803226][T14374] bond5 (unregistering): Released all slaves [ 320.901920][T14392] __nla_validate_parse: 11 callbacks suppressed [ 320.901942][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2361'. [ 321.221268][ T29] audit: type=1804 audit(1778491638.573:6): pid=14407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2365" name="/newroot/464/cgroup.controllers" dev="tmpfs" ino=2378 res=1 errno=0 [ 321.274310][T14412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2366'. [ 321.287633][T14404] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.303674][ T29] audit: type=1800 audit(1778491638.613:7): pid=14407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2365" name="cgroup.controllers" dev="tmpfs" ino=2378 res=0 errno=0 [ 321.395386][ T29] audit: type=1804 audit(1778491638.613:8): pid=14407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2365" name="/newroot/464/cgroup.controllers" dev="tmpfs" ino=2378 res=1 errno=0 [ 322.199793][T14459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2379'. [ 322.312207][T14466] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 323.041481][T14505] bond13: entered promiscuous mode [ 323.047290][T14505] 8021q: adding VLAN 0 to HW filter on device bond13 [ 323.091095][T14505] 8021q: adding VLAN 0 to HW filter on device bond13 [ 323.099436][T14505] bond13: (slave vti0): The slave device specified does not support setting the MAC address [ 323.111549][T14505] bond13: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 323.150040][T14505] bond13: (slave vti0): making interface the new active one [ 323.182081][T14505] vti0: entered promiscuous mode [ 323.187884][T14510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2393'. [ 323.200823][T14505] bond13: (slave vti0): Enslaving as an active interface with an up link [ 323.660319][T14526] validate_nla: 2 callbacks suppressed [ 323.660340][T14526] netlink: 'syz.0.2395': attribute type 16 has an invalid length. [ 323.707388][T14526] netlink: 'syz.0.2395': attribute type 17 has an invalid length. [ 323.771368][T14526] gre0: left promiscuous mode [ 323.808723][T14526] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.830428][T14526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 323.842301][T14526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.859653][T14526] veth: left promiscuous mode [ 323.865877][T14526] veth: entered promiscuous mode [ 323.890576][T14526] bridge0: port 3(batadv1) entered disabled state [ 323.901850][T14526] vlan3: left promiscuous mode [ 323.902342][T14547] netlink: 548 bytes leftover after parsing attributes in process `syz.2.2400'. [ 323.906861][T14526] bridge0: left promiscuous mode [ 323.932978][T14526] 8021q: adding VLAN 0 to HW filter on device eth0 [ 323.942685][T14526] 8021q: adding VLAN 0 to HW filter on device eth1 [ 323.954739][T14526] 8021q: adding VLAN 0 to HW filter on device eth2 [ 323.966253][T14526] 8021q: adding VLAN 0 to HW filter on device eth3 [ 323.979527][T14526] gretap1: left promiscuous mode [ 323.984617][T14526] gretap1: left allmulticast mode [ 323.994038][T14526] 8021q: adding VLAN 0 to HW filter on device bond3 [ 324.003521][T14526] bond4: left promiscuous mode [ 324.013134][T14526] bond5: left allmulticast mode [ 324.018347][T14526] 8021q: adding VLAN 0 to HW filter on device bond5 [ 324.033126][T14526] bond6: left promiscuous mode [ 324.038148][T14526] vcan1: left promiscuous mode [ 324.047204][T14526] bridge0: port 4(batadv2) entered blocking state [ 324.054216][T14526] bridge0: port 4(batadv2) entered forwarding state [ 324.061649][T14526] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 324.070020][T14526] bridge0: port 4(batadv2) entered disabled state [ 324.092037][T14538] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2395'. [ 324.103549][T14538] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2395'. [ 324.116811][T14542] netlink: 'syz.2.2400': attribute type 29 has an invalid length. [ 324.187648][T14545] netlink: 'syz.2.2400': attribute type 29 has an invalid length. [ 324.249832][ T139] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 324.404652][T14556] netlink: 'syz.2.2403': attribute type 11 has an invalid length. [ 324.408611][ T139] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 324.430692][T14556] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2403'. [ 324.432307][ T139] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 324.467753][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2404'. [ 324.590770][ T48] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 324.632821][ T48] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 324.652235][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2407'. [ 324.678201][T14567] openvswitch: netlink: Flow key attr not present in new flow. [ 324.769549][ T48] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 324.787953][ T48] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 324.875344][T14578] netlink: 'syz.2.2410': attribute type 33 has an invalid length. [ 324.931547][T11464] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 324.951452][T14578] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 324.968297][T14578] bond5 (unregistering): Released all slaves [ 325.099219][T14596] netlink: 'syz.4.2412': attribute type 10 has an invalid length. [ 325.122183][T14595] netlink: 'syz.3.2413': attribute type 29 has an invalid length. [ 325.189923][T14600] netlink: 'syz.3.2413': attribute type 29 has an invalid length. [ 325.204716][T11475] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 325.214950][T14595] netlink: 'syz.3.2413': attribute type 32 has an invalid length. [ 325.668392][T14626] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 325.893576][T14620] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 325.950764][T14620] syzkaller0: entered promiscuous mode [ 325.966654][T14620] syzkaller0: entered allmulticast mode [ 326.034679][T14652] __nla_validate_parse: 3 callbacks suppressed [ 326.034700][T14652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'. [ 326.093056][T14636] bond14: entered promiscuous mode [ 326.098001][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2425'. [ 326.109310][T14636] 8021q: adding VLAN 0 to HW filter on device bond14 [ 326.181609][T14636] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2421'. [ 326.227090][T14636] bond14: entered allmulticast mode [ 326.306800][T14636] bond14: (slave bridge9): making interface the new active one [ 326.315027][T14636] bridge9: entered promiscuous mode [ 326.321588][T14636] bridge9: entered allmulticast mode [ 326.327965][T14636] bond14: (slave bridge9): Enslaving as an active interface with an up link [ 326.356082][T14659] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2426'. [ 326.382509][T14663] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2428'. [ 326.422876][T14661] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2427'. [ 326.844824][T14687] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2434'. [ 327.112694][T14705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2436'. [ 327.154715][T14711] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2435'. [ 327.306794][T14716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2436'. [ 327.320800][ T48] net_ratelimit: 71 callbacks suppressed [ 327.320823][ T48] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 327.361837][T11474] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 327.376797][T11474] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 327.525944][T14723] bond_slave_1: mtu greater than device maximum [ 327.533811][ T139] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 327.565437][ T139] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 327.612003][T14700] nbd3: detected capacity change from 0 to 63 [ 327.685248][ T5636] block nbd3: Receive control failed (result -104) [ 327.686220][ T5640] block nbd3: Receive control failed (result -32) [ 327.701397][ T139] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 327.726210][T11475] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 327.808472][T11475] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 327.970203][ T139] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 328.455617][T14756] bridge0: port 3(batadv0) entered blocking state [ 328.474587][T14756] bridge0: port 3(batadv0) entered disabled state [ 328.496060][T14756] batadv0: entered allmulticast mode [ 328.520213][T14756] batadv0: entered promiscuous mode [ 328.768137][T14774] validate_nla: 9 callbacks suppressed [ 328.768160][T14774] netlink: 'syz.3.2452': attribute type 29 has an invalid length. [ 328.862332][T14774] netlink: 'syz.3.2452': attribute type 32 has an invalid length. [ 328.942307][ T58] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 328.952251][ T58] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 328.982334][T14778] netlink: 'syz.3.2452': attribute type 29 has an invalid length. Stopping sshd: stopped /usr/sbin/sshd (pid 5380) OK Stopping crond: [ 330.187374][T14833] netlink: 'syz.0.2468': attribute type 29 has an invalid length. stopped /usr/sbin/crond (pid 5366) [ 330.234606][T14833] netlink: 'syz.0.2468': attribute type 29 has an invalid length. OK [ 330.272613][T14833] netlink: 'syz.0.2468': attribute type 32 has an invalid length. [ 330.529189][T14853] netlink: 'syz.4.2473': attribute type 1 has an invalid length. Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5288) [ 331.487058][T14892] __nla_validate_parse: 38 callbacks suppressed [ 331.487084][T14892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2477'. Stopping network: [ 331.740924][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2484'. [ 331.931223][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2486'. [ 331.952368][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2486'. [ 331.975437][T14919] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2486'. [ 332.003964][T14920] Bluetooth: MGMT ver 1.23 [ 332.047127][T14919] netlink: 'syz.1.2486': attribute type 1 has an invalid length. [ 332.072516][T14919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2486'. [ 332.114890][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2486'. [ 332.160977][T14919] netlink: 'syz.1.2486': attribute type 2 has an invalid length. [ 332.196435][T14919] netlink: 'syz.1.2486': attribute type 2 has an invalid length. [ 332.285945][T14928] syzkaller1: entered promiscuous mode [ 332.312738][T14928] syzkaller1: entered allmulticast mode [ 332.340424][ T1171] net_ratelimit: 124 callbacks suppressed [ 332.340449][ T1171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 332.383172][T14938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2490'. [ 332.397103][ T1171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 332.551116][ T1171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 332.609337][T11476] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 332.649175][T11476] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 332.790376][T11464] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 332.821298][T11464] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 332.959787][T11475] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 332.998989][T11475] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 333.044705][T11475] bond5: (slave ip6gretap1): failed to get link speed/duplex OK [ 333.717593][T14979] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) Stopping iptables: OK [ 334.163855][T15008] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2507'. Stopping system message bus: [ 334.579516][T15011] "syz.4.2508" (15011) uses obsolete ecb(arc4) skcipher [ 334.604390][T15018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2509'. [ 334.655839][T15027] validate_nla: 1 callbacks suppressed [ 334.655894][T15027] netlink: 'syz.0.2511': attribute type 39 has an invalid length. [ 335.020401][ T29] audit: type=1800 audit(1778491652.373:9): pid=15035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2513" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2493 res=0 errno=0 [ 335.229698][T15038] netlink: 'syz.0.2514': attribute type 39 has an invalid length. [ 335.232973][T15002] netlink: 'syz.3.2506': attribute type 16 has an invalid length. [ 335.272510][T15002] netlink: 'syz.3.2506': attribute type 17 has an invalid length. [ 335.290477][T15038] hsr_slave_0: left promiscuous mode [ 335.322235][T15038] hsr_slave_1: left promiscuous mode [ 335.517019][T15055] tc_dump_action: action bad kind done [ 336.037746][T15078] digital: digital_start_poll: Unknown protocol [ 337.095529][T15129] syzkaller0: entered promiscuous mode [ 337.116075][T15129] syzkaller0: entered allmulticast mode [ 337.350141][ T139] net_ratelimit: 102 callbacks suppressed [ 337.350162][ T139] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 337.418965][ T139] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 337.459644][T11464] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 337.481263][T11464] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 337.566739][T15118] netlink: 'syz.1.2536': attribute type 16 has an invalid length. [ 337.591822][T15118] netlink: 'syz.1.2536': attribute type 17 has an invalid length. [ 337.630127][T15147] __nla_validate_parse: 3 callbacks suppressed [ 337.630149][T15147] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2544'. [ 337.645825][T11476] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 337.666510][T15118] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 337.698962][T11476] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 337.729230][ T139] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 337.759713][ T58] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms Stopping klogd: [ 337.800083][ T139] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms OK Stopping acpid: [ 338.595864][T15191] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2554'. [ 339.265902][T15220] netlink: 'syz.2.2563': attribute type 16 has an invalid length. [ 339.281014][T15220] netlink: 'syz.2.2563': attribute type 17 has an invalid length. [ 339.508606][T15232] netlink: 'syz.4.2567': attribute type 1 has an invalid length. [ 339.661312][T15238] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2568'. [ 339.716728][T15238] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2568'. [ 339.772702][T15238] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2568'. [ 339.819668][T15238] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2568'. [ 339.856510][T15238] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2568'. [ 339.901242][T15238] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2568'. OK [ 339.916091][T15238] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2568'. [ 339.978211][T15238] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2568'. Stopping syslogd: stopped /sbin/syslogd (pid 4976) OK [ 340.422529][T15273] IPVS: Unknown mcast interface: pim6reg [ 340.705876][T15276] netlink: 'syz.3.2580': attribute type 11 has an invalid length. [ 340.714659][T15276] netlink: 'syz.3.2580': attribute type 11 has an invalid length. umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 341.187151][T15297] netlink: 'syz.3.2585': attribute type 11 has an invalid length. [ 341.232203][T15296] netlink: 'syz.3.2585': attribute type 11 has an invalid length. [ 341.780716][T15317] netlink: 'syz.3.2591': attribute type 21 has an invalid length. [ 341.806689][T15317] netlink: 'syz.3.2591': attribute type 4 has an invalid length. [ 341.846339][T15317] netlink: 'syz.3.2591': attribute type 5 has an invalid length. [ 342.200788][T15331] bridge0: port 6(batadv4) entered blocking state [ 342.216678][T15331] bridge0: port 6(batadv4) entered disabled state [ 342.227030][T15331] batadv4: entered allmulticast mode [ 342.254867][T15331] batadv4: entered promiscuous mode [ 342.276222][T15306] netlink: 'syz.1.2588': attribute type 16 has an invalid length. [ 342.312097][T15306] netlink: 'syz.1.2588': attribute type 17 has an invalid length. [ 342.400035][ T58] net_ratelimit: 103 callbacks suppressed [ 342.400061][ T58] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 342.441904][ T58] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 342.524173][T15347] netlink: 'syz.4.2598': attribute type 29 has an invalid length. [ 342.569000][T15347] netlink: 'syz.4.2598': attribute type 29 has an invalid length. [ 342.599834][ T35] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 342.625082][T15352] netlink: 'syz.4.2598': attribute type 32 has an invalid length. [ 342.662898][ T35] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 342.693150][ T48] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 342.703083][ T48] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 342.718611][ T35] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 342.864391][ T48] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 342.899351][ T48] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 342.929807][ T48] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 342.964006][ T35] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 342.979558][T15363] __nla_validate_parse: 31 callbacks suppressed [ 342.979578][T15363] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2603'. [ 342.999201][ T35] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 343.037152][T15365] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 343.476137][ T1179] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 343.569611][T15388] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2610'. [ 343.632972][T15391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2609'. [ 343.705556][T15391] bridge0: port 1(batadv3) entered blocking state [ 343.735456][T15391] bridge0: port 1(batadv3) entered disabled state [ 343.782602][T15391] batadv3: entered allmulticast mode [ 343.808954][T15391] batadv3: entered promiscuous mode [ 344.055574][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2616'. [ 344.127950][T15411] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 344.200109][ T1179] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 344.210373][ T1179] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 344.316858][T15418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2618'. [ 344.363007][T15418] tc_dump_action: action bad kind umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 344.568307][ T4994] udevd[4994]: could not touch /run/udev/queue: Read-only file system Sent SIGTERM to all processes Connection to 10.128.1.171 closed by remote host. [ 345.975400][ T35] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.987846][ T35] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.998601][ T35] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 346.098405][ T35] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.108497][ T35] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.121481][ T35] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 346.203510][ T35] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.213400][ T35] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.224475][ T35] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 346.291696][ T35] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.301828][ T35] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.311787][ T35] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 346.424634][ T35] batadv2: left allmulticast mode [ 346.430341][ T35] batadv2: left promiscuous mode [ 346.440012][ T35] bridge0: port 4(batadv2) entered disabled state [ 346.451497][ T35] batadv1: left allmulticast mode [ 346.456994][ T35] batadv1: left promiscuous mode [ 346.463093][ T35] bridge0: port 3(batadv1) entered disabled state [ 346.472789][ T35] bridge_slave_1: left allmulticast mode [ 346.478571][ T35] bridge_slave_1: left promiscuous mode [ 346.484679][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.508168][ T35] pimreg: left allmulticast mode [ 346.644164][ T35] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 346.792951][ T35] bond3 (unregistering): (slave geneve3): Releasing active interface [ 346.806066][ T35] bond2 (unregistering): (slave geneve2): Releasing active interface [ 347.102988][ T35] bond0 (unregistering): left promiscuous mode [ 347.109316][ T35] bond_slave_0: left promiscuous mode [ 347.115048][ T35] bond_slave_1: left promiscuous mode [ 347.127723][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.140536][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.152038][ T35] bond0 (unregistering): Released all slaves [ 347.163863][ T35] bond1 (unregistering): Released all slaves [ 347.179224][ T35] bond2 (unregistering): Released all slaves [ 347.195180][ T35] bond3 (unregistering): Released all slaves [ 347.215099][ T35] bond4 (unregistering): Released all slaves [ 347.234463][ T35] bond5 (unregistering): Released all slaves [ 347.250355][ T35] bond6 (unregistering): (slave vcan1): Releasing backup interface [ 347.260681][ T35] bond6 (unregistering): Released all slaves [ 347.275035][ T35] bond7 (unregistering): Released all slaves [ 347.300219][ T35] bond8 (unregistering): Released all slaves [ 348.106163][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.113761][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.121898][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.137086][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.147735][ T35] veth1_macvtap: left promiscuous mode [ 348.155035][ T35] veth0_macvtap: left promiscuous mode [ 348.161050][ T35] veth1_vlan: left promiscuous mode [ 348.166314][ T35] veth: left promiscuous mode [ 348.969172][ T35] IPVS: stop unused estimator thread 0... [ 349.103649][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.117769][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.197065][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.207988][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.296734][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.309603][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.385360][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.396283][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.514358][ T35] batadv1: left allmulticast mode [ 349.520931][ T35] batadv1: left promiscuous mode [ 349.527292][ T35] bridge0: port 1(batadv1) entered disabled state [ 349.636971][ T35] ip6gretap0 (unregistering): left promiscuous mode [ 349.763458][ T35] bond4 (unregistering): (slave gretap1): Releasing active interface [ 349.799580][ T35] bridge0 (unregistering): left promiscuous mode [ 349.954040][ T35] bond2 (unregistering): (slave bridge4): Releasing active interface [ 349.996309][ T35] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 350.063758][ T35] .` (unregistering): Released all slaves [ 350.078473][ T35] bond1 (unregistering): Released all slaves [ 350.097187][ T35] bond2 (unregistering): Released all slaves [ 350.112535][ T35] bond3 (unregistering): Released all slaves [ 350.127340][ T35] bond4 (unregistering): Released all slaves [ 350.150647][ T35] bond5 (unregistering): Released all slaves [ 350.167488][ T35] bond0 (unregistering): (slave bond6): Releasing backup interface [ 350.182212][ T35] bond0 (unregistering): Released all slaves [ 350.197437][ T35] bond6 (unregistering): Released all slaves [ 350.337974][ T35] : left promiscuous mode [ 350.904934][ T35] hsr_slave_0: left promiscuous mode [ 350.933893][ T35] hsr_slave_1: left promiscuous mode [ 351.376457][ T35] IPVS: stop unused estimator thread 0...