last executing test programs: 6.1471714s ago: executing program 0 (id=2857): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) writev(0xffffffffffffffff, &(0x7f0000000b80)=[{&(0x7f0000000840)="a9", 0x1}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x2, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0) 5.955156509s ago: executing program 0 (id=2861): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000001040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf251200000008000300", @ANYRES32=r4, @ANYBLOB="0a000600080211000000000008001180040008"], 0x55}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6b, 0x65}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_vlan\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240000c0}, 0x5) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r6, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r7, &(0x7f00000000c0)={0x27, r6, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r5) 5.683559081s ago: executing program 0 (id=2866): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="30030000", @ANYRES16=r2, @ANYBLOB="02002cbd7000fbdbdf25210000000600f7000cab000004032a0037e50f079215fb04741af19836246ec32b176987a910e46c3226244fb480674e31af23c3da8f64f2d539870c3085a493a5c6f6a8b4e25b85d85f2dc70a8691d1e9303fc2bc7c18ce3eac7e9a13443d3ae28ad59f030a98f7ca0e4065b7d6e138031dec31818533a6c0ed9c5015a8730396a9c96df4cb5e67f884538e0497a1020b17341b7edf5220286c975002167ae3545a30641fefa7ba75a4dee9b14e723f97c011900215406b4afeb8588c629513aafb6c42607a8c5b226b44030da8bfee74ccdb892588f8c833c4011b7057b091b7782b3981bff63f81f9a17b778e930dac5309a1b1a651849cfd0a00080211000000ffff0000070040080211000000010001000802110000014100000802110000010400000003000008021100000080000000180000ffffffffffff0200000024004008021100000107000000080211000000190040080211000000f5cd00000802110000000f0000ffffffffffffff0000000b0000ffffffffffff060000001c0040080211000000bb0000000802110000014200750801000f0009001400ddfdfccbe3ab2da51d7aa394333e0b6a0d12955be1ac6511c4fd73c1eced0172b73404b7fa86a32316445a808370617193043d949c9a8bfdb686f6288abedf7daa9dbb496e83e98682c0e580e32b5a07bee13fd9e0969661522aac854f21a82acaf613cf002c4f1c81c3b21954e7a9134071429ade48b759bda41aeed7aa1b372f948c7cca23d72bf516101b173946ef360e63ecc378a986a1f4b3e495584c5819a9cc8d2033c32ded5d2a5b1f77dbec950e4eba119ac8dd457f75be88cac8a98462c56812a87521ba7dd9439aabd03cfb1bb9f304b9e8677e5b00b2f3d4ad70c4feaa3232065464e965d8a3f43f882f109b9e53997728cd6d5ce7da86ea1b7e15bd0002080211000001030000000a000000020000003e010000060101010101010406f96af6ff370282460409000800000008021100000101000000040000000900000004050802110000010400000001080211000000c400000005ffffffffffff8200000001080211000000010000000500f600070000000800dc00020000009e08cf96e64c9cf543745999f9c827a26518aad2229ea2e9612fb69d566bc8301f6b32ab0edcd8a7d72629236f9f51df03a9c799c01f717107c3ba6f007f2cb959b44a834a78c2c2d2cd54e7"], 0x330}, 0x1, 0x0, 0x0, 0x20004001}, 0x8041) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/169, 0xa9, 0x0, &(0x7f00000000c0)=""/7, 0x7}, &(0x7f0000000140)=0xffffffffffffff8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x821}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r6}]}}}]}, 0x38}}, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) close(r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r2, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2b}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x3c}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x2000080c) socket$netlink(0x10, 0x3, 0xf) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="30030000", @ANYRES16=r2, @ANYBLOB="02002cbd7000fbdbdf25210000000600f7000cab000004032a0037e50f079215fb04741af19836246ec32b176987a910e46c3226244fb480674e31af23c3da8f64f2d539870c3085a493a5c6f6a8b4e25b85d85f2dc70a8691d1e9303fc2bc7c18ce3eac7e9a13443d3ae28ad59f030a98f7ca0e4065b7d6e138031dec31818533a6c0ed9c5015a8730396a9c96df4cb5e67f884538e0497a1020b17341b7edf5220286c975002167ae3545a30641fefa7ba75a4dee9b14e723f97c011900215406b4afeb8588c629513aafb6c42607a8c5b226b44030da8bfee74ccdb892588f8c833c4011b7057b091b7782b3981bff63f81f9a17b778e930dac5309a1b1a651849cfd0a00080211000000ffff0000070040080211000000010001000802110000014100000802110000010400000003000008021100000080000000180000ffffffffffff0200000024004008021100000107000000080211000000190040080211000000f5cd00000802110000000f0000ffffffffffffff0000000b0000ffffffffffff060000001c0040080211000000bb0000000802110000014200750801000f0009001400ddfdfccbe3ab2da51d7aa394333e0b6a0d12955be1ac6511c4fd73c1eced0172b73404b7fa86a32316445a808370617193043d949c9a8bfdb686f6288abedf7daa9dbb496e83e98682c0e580e32b5a07bee13fd9e0969661522aac854f21a82acaf613cf002c4f1c81c3b21954e7a9134071429ade48b759bda41aeed7aa1b372f948c7cca23d72bf516101b173946ef360e63ecc378a986a1f4b3e495584c5819a9cc8d2033c32ded5d2a5b1f77dbec950e4eba119ac8dd457f75be88cac8a98462c56812a87521ba7dd9439aabd03cfb1bb9f304b9e8677e5b00b2f3d4ad70c4feaa3232065464e965d8a3f43f882f109b9e53997728cd6d5ce7da86ea1b7e15bd0002080211000001030000000a000000020000003e010000060101010101010406f96af6ff370282460409000800000008021100000101000000040000000900000004050802110000010400000001080211000000c400000005ffffffffffff8200000001080211000000010000000500f600070000000800dc00020000009e08cf96e64c9cf543745999f9c827a26518aad2229ea2e9612fb69d566bc8301f6b32ab0edcd8a7d72629236f9f51df03a9c799c01f717107c3ba6f007f2cb959b44a834a78c2c2d2cd54e7"], 0x330}, 0x1, 0x0, 0x0, 0x20004001}, 0x8041) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/169, 0xa9, 0x0, &(0x7f00000000c0)=""/7, 0x7}, &(0x7f0000000140)=0xffffffffffffff8b) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x821}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r6}]}}}]}, 0x38}}, 0x0) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) (async) close(r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r2, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2b}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x3c}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x2000080c) (async) 5.215191786s ago: executing program 0 (id=2873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000280)="2c0000001d005f80004000000000000005000000000000000000080008000100000000ff5b1844ad30c8ac46", 0x2c) (async, rerun: 64) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) (async, rerun: 64) setsockopt$rose(r1, 0x104, 0x1, &(0x7f0000000040)=0x6, 0x4) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x53, &(0x7f0000000000)=0x2, 0x4) (async, rerun: 32) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=ANY=[@ANYBLOB="380100001a0013070000000000000000fe8000000000000000000000000000aaffffffff0000008e3ee624bd46d3e05e089fa0b000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000000000000000000000330000002001000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000a0001000000000000000000480001007368613100"/240], 0x138}}, 0x0) (async, rerun: 64) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="000228bd7000ffdbdf250200000000080009000100000005000d0015000000080004007f00000114000b00fc0100000000000000000000000000000800090000000000080002000000000014000b00ff0200000000000000000000000000010c0003000400000000000000080008000200"/122], 0x80}, 0x1, 0x0, 0x0, 0x91}, 0x80) (rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 4.966492853s ago: executing program 0 (id=2877): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="87002dbd7000000000001e0000000a0004007770616e300000000800010007"], 0x28}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xffffffffffffff3d, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) 3.218680926s ago: executing program 0 (id=2882): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @multicast1}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x4c}}, 0x0) 2.388878424s ago: executing program 1 (id=2895): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x100) (async, rerun: 64) connect$packet(r0, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) (async, rerun: 64) shutdown(r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4084) 1.8084194s ago: executing program 2 (id=2902): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000ec001fb6330d70000008000100", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x2, 0x10, 0x1000000000000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r2], &(0x7f00000008c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x880) 1.486932059s ago: executing program 4 (id=2904): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x4, 0x300, 0x5}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000000), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="110a27bd7000fddbdf77940c3a0008000300", @ANYRES32=r3, @ANYBLOB="0c00238006000300d3000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xc8) 1.481928673s ago: executing program 2 (id=2905): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x7}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000005a00000008000300", @ANYRES32=r2], 0x3c}}, 0x10) 1.436264574s ago: executing program 3 (id=2906): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newnexthop={0x68, 0x68, 0x800, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x21}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@multicast2}, @NHA_FDB={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @local}}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @broadcast}}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF={0x10, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG_NAME={0xb, 0x2, '#-]]+!\x00'}}}, @NHA_BLACKHOLE={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) (async) syz_emit_ethernet(0x3f6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 1.408789798s ago: executing program 1 (id=2907): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x10, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008"], 0x50}}, 0x4000850) accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000002c0)=0x60) (async) r4 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000002c0)=0x60) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x110, r4, 0x7ce0d000) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000001200000000060000e808000100000000000c000d"], 0x28}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000001200000000060000e808000100000000000c000d"], 0x28}}, 0x0) 1.323113043s ago: executing program 4 (id=2908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x20, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x20}}, 0xc00) 1.280757036s ago: executing program 3 (id=2909): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x11, r1, 0x4000) setsockopt$sock_attach_bpf(r0, 0x1, 0x54, &(0x7f0000000080), 0x4) 1.19543753s ago: executing program 1 (id=2910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004004}, 0x40814) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a00010071756f74610000002400028008000240000000030c00044000000000000000000c0001400000000000000e4e140000001000010000000000000000000084000a88b563f1e189084e93b26424733d95cfe736138ba0ca77dcdefb1b8405bcaec7ab698d90c850601deb8b83d99c5aab4462e5fb2d47258ce27e6ebc282a83f3508a61d64c753e1f00260e7e04d104cf7c1001077dda32a1207cd3c3c6ef09b1bf56933c51bfeec18c9d435b85e9108a421488889c1bb7d525b00e2b5c317bbcc974b790d3804ac1bdc686f4ba8711b8b9687e0e05608d4126ac560e9aad"], 0xb8}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x1, 0x8, 0x301, 0x0, 0x0, {0xe, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000005) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="b44fd042fc", 0x5}], 0x1) splice(r0, &(0x7f0000000000)=0x6, r0, &(0x7f0000000080)=0x2, 0xf, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004004}, 0x40814) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x1, 0x8, 0x301, 0x0, 0x0, {0xe, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000005) (async) socket$kcm(0x29, 0x2, 0x0) (async) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="b44fd042fc", 0x5}], 0x1) (async) splice(r0, &(0x7f0000000000)=0x6, r0, &(0x7f0000000080)=0x2, 0xf, 0x2) (async) 1.138999284s ago: executing program 2 (id=2911): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766574680000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00f'], 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.103000698s ago: executing program 4 (id=2912): write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='+pids +'], 0x1b) r0 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2716, &(0x7f00000198c0)=""/102393, &(0x7f0000000240)=0x18ff9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="38ed87fe792dcdf62d0000003be9f8b1e3335ea5", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="842a0a65bd8c2b", 0x7) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1.078899175s ago: executing program 3 (id=2913): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)={0x28, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x10}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x18, r5, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x240280d0}, 0x2000c890) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @private1, 0xb}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8884}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ipvlan0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x40, r9, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$sock(r10, &(0x7f0000005a80)=[{{&(0x7f0000000940)=@hci={0x1f, 0x4}, 0x80, &(0x7f0000001e00)=[{&(0x7f00000009c0)="08c70534087ab26885d776c313b95a4a78cc5fd69840e13c9889bb2cc9914e45f3e93647bfb1ae3ebcc99d147f1a0eb089ade5e510989e15b11746bd56612ef157c48a734d56f53ac322890ebfa412a8658495e5dc9fa572ea6b1fb818a6f75ea85ddd19b0c56c", 0x67}, {&(0x7f0000000ac0)="a9451a6110e6509d9bbc70ba4138157b437b538e8cdb87eb0a", 0x19}], 0x2}}], 0x1, 0x4818) 799.214141ms ago: executing program 4 (id=2914): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2, 0x3}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 796.440736ms ago: executing program 2 (id=2915): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) close(r5) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r6, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r7 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000080), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}, {{@arp={@empty, @private=0xa010100, 0xffffff00, 0x0, 0x4, 0xd, {@empty, {[0x0, 0xff, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0x0, 0xff]}}, 0xfff, 0x1, 0xff, 0x4, 0x5, 0x6, 'rose0\x00', 'wg0\x00', {0xff}, {}, 0x0, 0x23}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @broadcast, 0x2, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0xffffffff, 0x62263d0da304292c, 0xa, 0x0, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x7, 0x9, 0x1000, 0x6, 0x4, 0x4, 'wlan1\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @multicast1, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) recvmmsg(r9, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x7}], 0x1, 0x60, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 786.445005ms ago: executing program 3 (id=2916): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x7ff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x14, 0x1, 0x3, 0x801}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @private2}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x43e}]}}}]}, 0x4c}}, 0x0) 645.344227ms ago: executing program 1 (id=2917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000ac14140a000000000000000000000000ac1414bb0000000000000000000000000000000000000000000080202f000000", @ANYRES32=0x0, @ANYRESDEC=r1], 0xf8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000088f7bbbbbbbbbbbbbbbbbbbb01bb88a84d008100660008004533005800640000102f"], 0x72) 538.883109ms ago: executing program 4 (id=2918): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newspdinfo={0x14, 0x24, 0x100, 0x2, 0x10, 0x2}, 0x14}}, 0x4009) 467.886342ms ago: executing program 3 (id=2919): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf37, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c0004800500030002"], 0x50}}, 0x0) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x100000000000000) write(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x9a}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 414.690999ms ago: executing program 4 (id=2920): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x804) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x54, r5, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}]}]}, 0x54}}, 0x44040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0x68, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffff966b}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SIZE_BYTES={0xffffffffffffffc8, 0x2, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x2048000) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c1a0000220000000000009400"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write(r3, &(0x7f0000000040)="05004000010000", 0x7) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x3, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0x1, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) 347.015677ms ago: executing program 2 (id=2921): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f00000003c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1a400, 0x0) close(r1) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x1ff, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r2, 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 121.718019ms ago: executing program 1 (id=2922): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x11, 0xffffffffffffffff, 0x4000) setsockopt$sock_attach_bpf(r0, 0x1, 0x54, &(0x7f0000000080), 0x4) 65.777446ms ago: executing program 3 (id=2923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd70ebffff9c960000000000009f1b33d8af12000200007f4ea812948fc0dc7597e90000000000000000000000008839a17178c68b9f7d21b8cb18d5cae1d1a70ef222349ea1a8e93db660f4193bfd582ae7ebd17c14f7b4c6e4c349802ceb8a0a60bfc59d285b93087c3e5106bcb1842a0e0aac2bf29a037841bebfbc1a21a41e7aae0ba89dbe27fe6874e9c826e4d27076508b27bab9a73437024c2d6b23aa40f375352cbfb1e8813d12aedc6482b87b153a32e2db532576e2c7241f8400"/208], 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) write$nbd(r5, &(0x7f0000000400)=ANY=[], 0xb4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r6}, [@IFA_FLAGS={0x8, 0x8, 0x411}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x28}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x114c, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_EEE_MODES_OURS={0x109c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x535}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+\xf9.\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0x56, 0x4, "3fafb3b440ab3ba5bd6e71debf8a962c1de9ac4dd279050f25ba7730a0a4a613f5978984e7b0bda90e6f39863084a4b95d8d031df1a81e8d67e18bafc0ca6f98f6664f016f2db5397b007117392ea1c82d4b"}]}]}, 0x114c}}, 0x4800) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000180)={0xa, 0x4e20, 0x17, @mcast1, 0x7}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r11 = socket(0x2d, 0x2, 0x0) connect$qrtr(r11, &(0x7f00000002c0)={0x2d, 0x0, 0x8000}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x58, 0x0, 0x3}]}}, 0x0, 0x26}, 0x20) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r13) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r13) recvmmsg(r13, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001e00)=""/45, 0x2d}, {&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f00000003c0)=""/115, 0x73}, {&(0x7f00000002c0)=""/32, 0x20}, {&(0x7f00000006c0)=""/4092, 0xffc}], 0x5}, 0x8b97ce07}], 0x1, 0x40000000, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r10, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 3.00595ms ago: executing program 2 (id=2924): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766574680000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00f'], 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 1 (id=2925): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@bridge_getvlan={0x18, 0x68, 0x1}, 0x18}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): er0>, priority 0 [ 124.144938][ T6976] syzkaller0: entered promiscuous mode [ 124.154149][ T6976] syzkaller0: entered allmulticast mode [ 124.187294][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 124.243075][ T6992] netlink: 'syz.4.295': attribute type 4 has an invalid length. [ 124.266985][ T6992] netlink: 17 bytes leftover after parsing attributes in process `syz.4.295'. [ 124.327573][ T6976] tipc: Resetting bearer [ 124.457275][ T6975] tipc: Resetting bearer [ 124.581542][ T6975] tipc: Disabling bearer [ 124.698193][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'. [ 124.710991][ T7015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.298'. [ 124.756083][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'. [ 124.899627][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.300'. [ 125.254421][ T7035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.304'. [ 125.386205][ T7044] netlink: 'syz.3.304': attribute type 2 has an invalid length. [ 125.574056][ T7051] netlink: 'syz.2.308': attribute type 4 has an invalid length. [ 125.833103][ T7055] Bluetooth: MGMT ver 1.23 [ 126.228708][ T7067] pim6reg1: entered promiscuous mode [ 126.249286][ T7069] netlink: 'syz.1.314': attribute type 11 has an invalid length. [ 126.259088][ T7067] pim6reg1: entered allmulticast mode [ 126.282904][ T7069] netlink: 'syz.1.314': attribute type 11 has an invalid length. [ 127.102416][ T7108] tipc: Enabled bearer , priority 0 [ 127.113885][ T7108] syzkaller0: entered promiscuous mode [ 127.122166][ T7108] syzkaller0: entered allmulticast mode [ 127.215222][ T7110] tipc: Enabling of bearer rejected, failed to enable media [ 127.245873][ T7112] tipc: Resetting bearer [ 127.284212][ T7107] tipc: Resetting bearer [ 127.337503][ T7107] tipc: Disabling bearer [ 127.540906][ T7119] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.328:7119 [ 127.867386][ T5161] Bluetooth: hci2: command 0x0401 tx timeout [ 127.867743][ T5858] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 128.072139][ T7129] syzkaller1: entered promiscuous mode [ 128.081995][ T7129] syzkaller1: entered allmulticast mode [ 128.438021][ T7151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.445797][ T7151] IPv6: NLM_F_CREATE should be set when creating new route [ 128.467352][ T7148] __nla_validate_parse: 9 callbacks suppressed [ 128.467373][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.338'. [ 128.503568][ T7148] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.338'. [ 128.684845][ T7156] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 129.164235][ T7163] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 129.508295][ T7197] netlink: 40 bytes leftover after parsing attributes in process `syz.3.350'. [ 129.688651][ T7207] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 129.933720][ T7222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.357'. [ 130.460084][ T7236] netlink: 'syz.4.359': attribute type 4 has an invalid length. [ 130.754260][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 131.611712][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 131.885555][ T7299] netlink: 'syz.1.373': attribute type 1 has an invalid length. [ 131.923590][ T7299] netlink: 'syz.1.373': attribute type 2 has an invalid length. [ 131.946056][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'. [ 132.012767][ T7305] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 132.099523][ T7305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.130490][ T7299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.373'. [ 132.216422][ T7299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.373'. [ 132.646773][ T7328] netlink: 'syz.3.384': attribute type 8 has an invalid length. [ 132.761288][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 132.927894][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.934787][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.016891][ T7358] tls_set_device_offload: netdev not found [ 133.134361][ T7358] gre0: entered allmulticast mode [ 133.706450][ T7381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.392'. [ 133.716164][ T7381] netlink: 172 bytes leftover after parsing attributes in process `syz.2.392'. [ 134.069570][ T7396] netlink: 'syz.1.398': attribute type 7 has an invalid length. [ 134.155027][ T7396] : entered promiscuous mode [ 134.930064][ T7434] veth0: entered promiscuous mode [ 134.954230][ T7433] veth0: left promiscuous mode [ 135.684584][ T7475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.417'. [ 135.803460][ T7482] team0: Device wireguard0 is of different type [ 136.683741][ T7508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.425'. [ 136.730857][ T7508] netlink: 120 bytes leftover after parsing attributes in process `syz.1.425'. [ 136.773085][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 136.789959][ T7515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.872835][ T7508] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 137.180399][ T7531] tipc: Enabled bearer , priority 0 [ 137.213783][ T7534] netlink: 104 bytes leftover after parsing attributes in process `syz.4.432'. [ 137.229051][ T7531] syzkaller0: entered promiscuous mode [ 137.234681][ T7531] syzkaller0: entered allmulticast mode [ 137.317930][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 137.351322][ T7522] tipc: Resetting bearer [ 137.410456][ T7522] tipc: Disabling bearer [ 137.625344][ T7549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.434'. [ 137.630815][ T7550] block nbd3: not configured, cannot reconfigure [ 137.743179][ T7553] netlink: 'syz.0.436': attribute type 6 has an invalid length. [ 137.790473][ T7553] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.436'. [ 138.160652][ T7574] nbd: illegal input index -8454144 [ 138.174193][ T7572] netlink: 'syz.2.441': attribute type 39 has an invalid length. [ 139.510168][ T7618] __nla_validate_parse: 80 callbacks suppressed [ 139.510191][ T7618] netlink: 68 bytes leftover after parsing attributes in process `syz.0.464'. [ 139.536258][ T7621] Bluetooth: MGMT ver 1.23 [ 139.562878][ T7621] netlink: 'syz.3.465': attribute type 4 has an invalid length. [ 139.574300][ T7621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.465'. [ 139.592292][ T7628] netlink: 'syz.2.467': attribute type 12 has an invalid length. [ 139.730375][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 139.847983][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'. [ 139.915655][ T7638] netlink: 'syz.4.472': attribute type 30 has an invalid length. [ 139.959805][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'. [ 139.969734][ T49] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.973222][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.995795][ T7641] netlink: 36 bytes leftover after parsing attributes in process `syz.0.474'. [ 140.025653][ T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.040763][ T7644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.050738][ T7638] netlink: 'syz.4.472': attribute type 30 has an invalid length. [ 140.051399][ T49] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.077603][ T7646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.151030][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'. [ 140.761700][ T7670] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 140.775433][ T7672] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 140.791644][ T7673] x_tables: ip_tables: udp match: only valid for protocol 17 [ 140.961201][ T7682] dvmrp1: entered allmulticast mode [ 141.871876][ T25] block nbd0: Possible stuck request ffff8880251ee000: control (read@0,1024B). Runtime 30 seconds [ 141.884086][ T25] block nbd0: Possible stuck request ffff8880251ee1c0: control (read@1024,1024B). Runtime 30 seconds [ 141.895245][ T25] block nbd0: Possible stuck request ffff8880251ee380: control (read@2048,1024B). Runtime 30 seconds [ 141.906984][ T25] block nbd0: Possible stuck request ffff8880251ee540: control (read@3072,1024B). Runtime 30 seconds [ 142.385389][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 142.404920][ T7739] netlink: 'syz.0.496': attribute type 10 has an invalid length. [ 142.430569][ T7739] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 142.525213][ T7725] netlink: 232 bytes leftover after parsing attributes in process `syz.0.496'. [ 142.754573][ T7745] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 142.983062][ T7764] IPVS: set_ctl: invalid protocol: 92 100.1.1.2:20000 [ 143.285402][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.512'. [ 143.801835][ T7793] tipc: Resetting bearer [ 144.191328][ T7793] vlan0: left promiscuous mode [ 144.491987][ T1333] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.503503][ T7818] tipc: Enabled bearer , priority 24 [ 144.521927][ T1333] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.555352][ T1333] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.586292][ T1333] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.749744][ T7825] netlink: 'syz.4.525': attribute type 21 has an invalid length. [ 144.773676][ T7825] __nla_validate_parse: 1 callbacks suppressed [ 144.773697][ T7825] netlink: 132 bytes leftover after parsing attributes in process `syz.4.525'. [ 144.990375][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 145.052724][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.531'. [ 145.204795][ T7847] tipc: Enabled bearer , priority 0 [ 145.382203][ T5915] IPVS: starting estimator thread 0... [ 145.388616][ T7856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.534'. [ 145.445771][ T7856] netlink: 10 bytes leftover after parsing attributes in process `syz.3.534'. [ 145.516641][ T7857] IPVS: using max 24 ests per chain, 57600 per kthread [ 145.627511][ T10] tipc: Node number set to 3758096386 [ 145.770885][ T7870] netlink: 40 bytes leftover after parsing attributes in process `syz.4.538'. [ 145.845132][ T7835] tipc: Disabling bearer [ 145.991462][ T7874] tipc: Enabled bearer , priority 0 [ 145.999158][ T7874] syzkaller0: entered promiscuous mode [ 146.004663][ T7874] syzkaller0: entered allmulticast mode [ 146.032536][ T7874] tipc: Resetting bearer [ 146.090268][ T7873] tipc: Resetting bearer [ 146.141140][ T7873] tipc: Disabling bearer [ 147.120943][ T7913] netlink: 32 bytes leftover after parsing attributes in process `syz.4.553'. [ 147.131737][ T7918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.554'. [ 147.525747][ T7935] netlink: 'syz.4.560': attribute type 1 has an invalid length. [ 147.586835][ T7935] netlink: 220 bytes leftover after parsing attributes in process `syz.4.560'. [ 147.644641][ T7937] netlink: 'syz.4.560': attribute type 1 has an invalid length. [ 147.716723][ T7937] netlink: 224 bytes leftover after parsing attributes in process `syz.4.560'. [ 148.310552][ T7971] netlink: 'syz.2.573': attribute type 4 has an invalid length. [ 148.383853][ T7974] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 148.471017][ T7976] openvswitch: netlink: IP tunnel dst address not specified [ 148.694598][ T7987] vlan2: entered allmulticast mode [ 148.716593][ T7987] bridge0: entered allmulticast mode [ 148.753392][ T7987] bridge3: port 1(vlan2) entered blocking state [ 148.792306][ T7987] bridge3: port 1(vlan2) entered disabled state [ 148.827021][ T7987] vlan2: entered promiscuous mode [ 148.844854][ T7987] bridge0: entered promiscuous mode [ 149.622373][ T8018] netlink: 'syz.3.588': attribute type 1 has an invalid length. [ 149.653475][ T8018] netlink: 'syz.3.588': attribute type 1 has an invalid length. [ 149.676008][ T8019] netlink: 'syz.3.588': attribute type 1 has an invalid length. [ 149.691286][ T8019] netlink: 'syz.3.588': attribute type 1 has an invalid length. [ 149.839817][ T8024] netlink: 'syz.4.590': attribute type 11 has an invalid length. [ 149.847755][ T8024] netlink: 'syz.4.590': attribute type 11 has an invalid length. [ 149.855525][ T8024] __nla_validate_parse: 7 callbacks suppressed [ 149.855544][ T8024] netlink: 224 bytes leftover after parsing attributes in process `syz.4.590'. [ 150.022070][ T8036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.594'. [ 150.025230][ T8033] pimreg: entered allmulticast mode [ 150.380026][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'. [ 150.497959][ T8048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.550968][ T8062] netlink: 7 bytes leftover after parsing attributes in process `syz.4.600'. [ 150.637683][ T8056] netlink: 20 bytes leftover after parsing attributes in process `syz.4.600'. [ 150.787500][ T8069] netlink: 'syz.0.603': attribute type 4 has an invalid length. [ 150.807952][ T8069] netlink: 'syz.0.603': attribute type 21 has an invalid length. [ 150.875213][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.604'. [ 150.959410][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.604'. [ 151.001857][ T8078] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.604'. [ 151.022038][ T8078] netlink: zone id is out of range [ 151.080538][ T8078] netlink: zone id is out of range [ 151.116919][ T8078] netlink: zone id is out of range [ 151.122100][ T8078] netlink: zone id is out of range [ 151.181793][ T8078] netlink: get zone limit has 8 unknown bytes [ 151.379731][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 151.412977][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 151.481658][ T8103] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 151.635906][ T8113] netlink: 'syz.0.616': attribute type 7 has an invalid length. [ 151.654802][ T8113] netlink: 'syz.0.616': attribute type 8 has an invalid length. [ 153.418071][ T8183] unknown channel width for channel at 909000KHz? [ 154.452138][ T8228] xfrm1: entered allmulticast mode [ 154.480980][ T8229] tipc: Enabled bearer , priority 0 [ 154.501357][ T8229] syzkaller0: entered promiscuous mode [ 154.519919][ T8229] syzkaller0: entered allmulticast mode [ 154.549716][ T8229] tipc: Resetting bearer [ 154.589117][ T8226] tipc: Resetting bearer [ 154.611413][ T8226] tipc: Disabling bearer [ 154.687762][ T8238] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 154.707706][ T8237] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 154.890337][ T8244] netlink: 'syz.3.660': attribute type 1 has an invalid length. [ 155.371997][ T8271] __nla_validate_parse: 15 callbacks suppressed [ 155.372017][ T8271] netlink: 84 bytes leftover after parsing attributes in process `syz.1.668'. [ 155.474067][ T8279] netlink: 'syz.4.671': attribute type 21 has an invalid length. [ 155.656331][ T8285] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 155.685771][ T8288] netlink: 'syz.3.673': attribute type 2 has an invalid length. [ 156.052915][ T8304] netlink: 'syz.2.679': attribute type 3 has an invalid length. [ 156.262594][ T8311] tipc: Enabling of bearer rejected, failed to enable media [ 156.361490][ T8317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.683'. [ 156.394320][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'. [ 156.939914][ T8347] team0: Cannot enslave team device to itself [ 157.000563][ T8347] netlink: 36 bytes leftover after parsing attributes in process `syz.0.689'. [ 157.176591][ T8354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.694'. [ 157.214525][ T8349] tap0: tun_chr_ioctl cmd 1074025676 [ 157.242450][ T8349] tap0: owner set to 0 [ 157.613272][ T8368] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 157.646833][ T8368] netlink: 224 bytes leftover after parsing attributes in process `syz.1.698'. [ 157.689616][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 157.799688][ T8363] veth0_virt_wifi: renamed from veth0_vlan [ 157.865403][ T8382] netlink: 'syz.1.701': attribute type 1 has an invalid length. [ 157.965760][ T8363] syz.4.696 (8363) used greatest stack depth: 19832 bytes left [ 158.002582][ T8382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.701'. [ 158.020259][ T1333] tipc: Resetting bearer [ 158.064755][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 158.137069][ T8393] netlink: 'syz.2.703': attribute type 1 has an invalid length. [ 158.164072][ T1333] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.256297][ T8393] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.264273][ T1333] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.350913][ T1333] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.473689][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 158.534791][ T8408] netlink: zone id is out of range [ 158.540300][ T8408] netlink: zone id is out of range [ 158.545452][ T8408] netlink: zone id is out of range [ 158.578903][ T8408] netlink: zone id is out of range [ 158.584353][ T8408] netlink: zone id is out of range [ 158.633482][ T8408] netlink: zone id is out of range [ 158.656594][ T8408] netlink: zone id is out of range [ 158.661767][ T8408] netlink: zone id is out of range [ 158.843828][ T1333] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.917737][ T8415] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 160.002865][ T5506] veth0_virt_wifi: left promiscuous mode [ 160.085420][ T5506] veth0_virt_wifi: entered promiscuous mode [ 160.110419][ T8471] net_ratelimit: 396 callbacks suppressed [ 160.110436][ T8471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.429626][ T8488] __nla_validate_parse: 6 callbacks suppressed [ 160.429649][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 160.546199][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 160.588982][ T8498] IPVS: length: 24 != 24600 [ 161.159216][ T8524] team0: Device wireguard0 is of different type [ 161.297073][ T8535] netlink: 'syz.2.738': attribute type 10 has an invalid length. [ 161.372297][ T8542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.737'. [ 161.395880][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.737'. [ 161.424848][ T8525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.453082][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.737'. [ 161.521417][ T8535] batman_adv: batadv0: Adding interface: team0 [ 161.550819][ T8535] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 161.583481][ T8535] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 161.642939][ T8531] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 161.652795][ T8531] netlink: 184 bytes leftover after parsing attributes in process `syz.0.737'. [ 162.045502][ T8561] nbd: must specify at least one socket [ 162.579741][ T8584] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20003 [ 162.608059][ T8584] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20003 [ 162.636804][ T8584] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20003 [ 162.652001][ T8584] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20003 [ 162.663616][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 162.884917][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.753'. [ 162.992776][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.754'. [ 163.008933][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.753'. [ 163.055251][ T8602] team0: Device gtp0 is of different type [ 163.435665][ T8607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 163.993623][ T8638] syzkaller0: entered promiscuous mode [ 164.003769][ T8638] syzkaller0: entered allmulticast mode [ 164.157151][ T8643] syzkaller0: entered promiscuous mode [ 164.162690][ T8643] syzkaller0: entered allmulticast mode [ 164.426419][ T8661] netlink: 'syz.4.771': attribute type 4 has an invalid length. [ 164.497990][ T8661] : renamed from bond0 (while UP) [ 165.070904][ T8694] netlink: 'syz.0.783': attribute type 1 has an invalid length. [ 165.257398][ T8709] netlink: 'syz.3.786': attribute type 4 has an invalid length. [ 165.486183][ T8721] block nbd2: not configured, cannot reconfigure [ 165.864530][ T8738] __nla_validate_parse: 4 callbacks suppressed [ 165.864551][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 166.232571][ T8745] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 166.328704][ T8748] syzkaller0: entered promiscuous mode [ 166.347302][ T8748] syzkaller0: entered allmulticast mode [ 166.616768][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.806'. [ 166.742098][ T8771] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 166.850858][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.808'. [ 166.866381][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.808'. [ 166.914089][ T8770] erspan0: entered promiscuous mode [ 166.925169][ T8770] gretap0: entered promiscuous mode [ 166.932484][ T8770] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 166.982345][ T8770] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 167.246983][ T8788] netlink: 60 bytes leftover after parsing attributes in process `syz.0.811'. [ 167.480285][ T8804] ieee802154 phy0 wpan0: encryption failed: -90 [ 167.558805][ T8805] netlink: 'syz.1.816': attribute type 4 has an invalid length. [ 167.894747][ T8823] netlink: 'syz.0.820': attribute type 10 has an invalid length. [ 167.924378][ T8823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.933194][ T8826] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 167.967371][ T8823] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 168.200026][ T8833] netlink: 'syz.3.824': attribute type 1 has an invalid length. [ 168.340720][ T5506] veth0_vlan: left promiscuous mode [ 168.351809][ T8841] netlink: 60 bytes leftover after parsing attributes in process `syz.2.827'. [ 168.389710][ T5506] veth0_vlan: entered promiscuous mode [ 168.697101][ T8857] ip6gre2: entered allmulticast mode [ 168.876785][ T8869] netlink: 16 bytes leftover after parsing attributes in process `syz.2.834'. [ 169.000537][ T8870] sctp: [Deprecated]: syz.0.833 (pid 8870) Use of int in max_burst socket option deprecated. [ 169.000537][ T8870] Use struct sctp_assoc_value instead [ 169.006686][ T8875] netlink: 44 bytes leftover after parsing attributes in process `syz.4.835'. [ 169.171069][ T8888] netlink: 72 bytes leftover after parsing attributes in process `syz.2.837'. [ 169.604365][ T8893] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.615319][ T8893] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.715733][ T8893] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.756205][ T8893] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.885182][ T8893] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.915165][ T8893] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.960487][ T8921] netlink: 205464 bytes leftover after parsing attributes in process `syz.2.845'. [ 170.009510][ T8893] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.074551][ T8893] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.264667][ T8928] netlink: 'syz.1.847': attribute type 10 has an invalid length. [ 170.288232][ T8928] tipc: Resetting bearer [ 170.304815][ T8928] batman_adv: batadv0: Adding interface: team0 [ 170.317382][ T8928] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.372113][ T8928] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 170.500357][ T1162] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.531629][ T1162] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.599298][ T1162] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.617859][ T1162] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.679255][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.701464][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.747835][ T8948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.813363][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.837831][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.152997][ T8969] FAULT_INJECTION: forcing a failure. [ 171.152997][ T8969] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 171.167778][ T8969] CPU: 1 UID: 0 PID: 8969 Comm: syz.4.856 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 171.167808][ T8969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.167820][ T8969] Call Trace: [ 171.167828][ T8969] [ 171.167842][ T8969] dump_stack_lvl+0x189/0x250 [ 171.167869][ T8969] ? __pfx____ratelimit+0x10/0x10 [ 171.167898][ T8969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.167918][ T8969] ? __pfx__printk+0x10/0x10 [ 171.167943][ T8969] ? __might_fault+0xb0/0x130 [ 171.167985][ T8969] should_fail_ex+0x414/0x560 [ 171.168021][ T8969] _copy_from_user+0x2d/0xb0 [ 171.168050][ T8969] ___sys_recvmsg+0x12e/0x510 [ 171.168081][ T8969] ? __pfx____sys_recvmsg+0x10/0x10 [ 171.168131][ T8969] ? __fget_files+0x3a0/0x420 [ 171.168165][ T8969] do_recvmmsg+0x307/0x770 [ 171.168198][ T8969] ? __pfx_do_recvmmsg+0x10/0x10 [ 171.168235][ T8969] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 171.168284][ T8969] __x64_sys_recvmmsg+0x190/0x240 [ 171.168309][ T8969] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 171.168328][ T8969] ? rcu_is_watching+0x15/0xb0 [ 171.168364][ T8969] ? do_syscall_64+0xbe/0x3b0 [ 171.168397][ T8969] do_syscall_64+0xfa/0x3b0 [ 171.168422][ T8969] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.168449][ T8969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.168468][ T8969] ? clear_bhb_loop+0x60/0xb0 [ 171.168493][ T8969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.168511][ T8969] RIP: 0033:0x7f34ebd8eb69 [ 171.168547][ T8969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.168563][ T8969] RSP: 002b:00007f34eccb2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 171.168586][ T8969] RAX: ffffffffffffffda RBX: 00007f34ebfb5fa0 RCX: 00007f34ebd8eb69 [ 171.168600][ T8969] RDX: 0000000000000004 RSI: 0000200000002c00 RDI: 0000000000000003 [ 171.168612][ T8969] RBP: 00007f34eccb2090 R08: 0000000000000000 R09: 0000000000000000 [ 171.168623][ T8969] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000001 [ 171.168635][ T8969] R13: 0000000000000000 R14: 00007f34ebfb5fa0 R15: 00007fff036b6598 [ 171.168668][ T8969] [ 171.581781][ T8977] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 171.948930][ T25] block nbd0: Possible stuck request ffff8880251ee000: control (read@0,1024B). Runtime 60 seconds [ 171.960129][ T25] block nbd0: Possible stuck request ffff8880251ee1c0: control (read@1024,1024B). Runtime 60 seconds [ 171.971739][ T25] block nbd0: Possible stuck request ffff8880251ee380: control (read@2048,1024B). Runtime 60 seconds [ 171.983748][ T25] block nbd0: Possible stuck request ffff8880251ee540: control (read@3072,1024B). Runtime 60 seconds [ 172.348552][ T9013] netlink: 'syz.1.871': attribute type 1 has an invalid length. [ 172.371307][ T9014] __nla_validate_parse: 1 callbacks suppressed [ 172.371328][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 172.414111][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 172.419653][ T9013] bond3: (slave gretap1): making interface the new active one [ 172.434772][ T9013] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 172.447324][ T9013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.871'. [ 172.478870][ T9014] netlink: 'syz.2.870': attribute type 14 has an invalid length. [ 172.487371][ T9014] netlink: 'syz.2.870': attribute type 13 has an invalid length. [ 172.564648][ T9020] tipc: Enabled bearer , priority 0 [ 172.582838][ T9020] syzkaller0: entered promiscuous mode [ 172.617763][ T9020] syzkaller0: entered allmulticast mode [ 172.642711][ T9023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.873'. [ 172.761606][ T9029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.876'. [ 172.762946][ T9020] tipc: Resetting bearer [ 172.825789][ T9019] tipc: Resetting bearer [ 172.869545][ T9019] tipc: Disabling bearer [ 173.139655][ T9045] netlink: 60 bytes leftover after parsing attributes in process `syz.1.880'. [ 173.377197][ T9054] netlink: 'syz.3.883': attribute type 8 has an invalid length. [ 173.756798][ T9077] netlink: 9 bytes leftover after parsing attributes in process `syz.4.890'. [ 173.818649][ T9083] netlink: 5 bytes leftover after parsing attributes in process `syz.4.890'. [ 173.921479][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.890'. [ 174.288410][ T9099] sctp: [Deprecated]: syz.1.893 (pid 9099) Use of int in maxseg socket option. [ 174.288410][ T9099] Use struct sctp_assoc_value instead [ 174.322508][ T9077] gretap0: entered promiscuous mode [ 174.336052][ T9083] 0{X功: renamed from gretap0 [ 174.470172][ T9083] 0{X功: left promiscuous mode [ 174.483103][ T9083] 0{X功: entered allmulticast mode [ 174.566140][ T9083] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 174.721412][ T9108] netlink: 60 bytes leftover after parsing attributes in process `syz.2.895'. [ 174.871404][ T9114] netlink: 'syz.1.896': attribute type 1 has an invalid length. [ 175.078053][ T9126] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 175.154021][ T9134] veth0: entered promiscuous mode [ 175.390623][ T9110] veth0: left promiscuous mode [ 175.505489][ T9153] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 175.904977][ T9167] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 176.141621][ T9171] netlink: 'syz.0.909': attribute type 1 has an invalid length. [ 176.157476][ T9176] netlink: 'syz.4.911': attribute type 30 has an invalid length. [ 176.217250][ T9181] netlink: 'syz.3.913': attribute type 1 has an invalid length. [ 176.225536][ T9176] netlink: 'syz.4.911': attribute type 30 has an invalid length. [ 177.094050][ T9219] tipc: Enabled bearer , priority 0 [ 177.098709][ T9222] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 177.268272][ T9215] tipc: Disabling bearer [ 177.412378][ T9232] team0: Device wireguard0 is of different type [ 177.528824][ T9231] __nla_validate_parse: 5 callbacks suppressed [ 177.528846][ T9231] netlink: 66 bytes leftover after parsing attributes in process `syz.1.926'. [ 178.097506][ T9268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 178.175078][ T9269] netlink: 60 bytes leftover after parsing attributes in process `syz.2.937'. [ 178.496758][ T9287] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 179.078009][ T9302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.945'. [ 179.117213][ T9302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.945'. [ 179.447375][ T9321] netlink: 60 bytes leftover after parsing attributes in process `syz.3.950'. [ 179.473922][ T9317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.949'. [ 179.637684][ T9326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.949'. [ 179.898667][ T9334] gtp0: entered promiscuous mode [ 179.936821][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 180.180256][ T9355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.960'. [ 180.625886][ T9375] netlink: 'syz.0.965': attribute type 1 has an invalid length. [ 180.750016][ T9384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.935381][ T9509] tc_dump_action: action bad kind [ 183.177414][ T9523] __nla_validate_parse: 1 callbacks suppressed [ 183.177435][ T9523] netlink: 16 bytes leftover after parsing attributes in process `syz.3.989'. [ 183.509785][ T9538] raw_sendmsg: syz.3.994 forgot to set AF_INET. Fix it! [ 183.895102][ T9552] netlink: 'syz.3.996': attribute type 4 has an invalid length. [ 183.937442][ T9552] tipc: Enabled bearer , priority 0 [ 183.973021][ T9552] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 183.985819][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 184.015191][ T9552] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 184.209790][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 184.829625][ T9574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1003'. [ 184.879877][ T9566] tipc: Resetting bearer [ 184.980033][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1002'. [ 185.180269][ T9581] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 185.901888][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1016'. [ 186.311645][ T9634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1020'. [ 186.368339][ T9634] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.1020'. [ 186.584069][ T9649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1024'. [ 186.844148][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1026'. [ 187.053195][ T9666] sock: sock_set_timeout: `syz.4.1028' (pid 9666) tries to set negative timeout [ 187.660707][ T9682] batadv1: entered allmulticast mode [ 188.686156][ T9735] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 188.687709][ T9738] __nla_validate_parse: 1 callbacks suppressed [ 188.687726][ T9738] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1046'. [ 188.708171][ T9734] netlink: 'syz.1.1045': attribute type 24 has an invalid length. [ 188.949420][ T9748] netlink: 'syz.3.1047': attribute type 12 has an invalid length. [ 189.527438][ T9770] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 189.536097][ T9770] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 189.909574][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 189.944818][ T9787] dummy0: entered promiscuous mode [ 189.974206][ T9787] dummy0: left promiscuous mode [ 190.109330][ T9798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1061'. [ 190.175194][ T9798] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 190.252554][ T9803] tap0: tun_chr_ioctl cmd 1074025672 [ 190.274768][ T9803] tap0: ignored: set checksum disabled [ 190.934120][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 191.225052][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1077'. [ 191.314838][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'. [ 191.330362][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'. [ 191.360582][ T9857] netlink: 'syz.4.1078': attribute type 1 has an invalid length. [ 191.372140][ T9857] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1078'. [ 191.501003][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'. [ 191.550297][ T9860] netlink: 'syz.4.1078': attribute type 1 has an invalid length. [ 191.577077][ T9860] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1078'. [ 191.898245][ T9882] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 192.503677][ T9917] netlink: 'syz.3.1098': attribute type 139 has an invalid length. [ 192.752797][ T9924] netlink: 'syz.1.1099': attribute type 7 has an invalid length. [ 192.789458][ T9924] netlink: 'syz.1.1099': attribute type 8 has an invalid length. [ 192.796344][ T9926] batman_adv: batadv0: Removing interface: team0 [ 193.038656][ T9926] team0: Port device vlan0 removed [ 193.042444][ T9938] netlink: 'syz.4.1102': attribute type 5 has an invalid length. [ 193.061182][ T9926] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 193.129266][ T9938] geneve3: entered promiscuous mode [ 193.155137][ T9938] geneve3: entered allmulticast mode [ 193.195628][ T9429] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 193.231152][ T9429] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 193.257680][ T9429] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 193.280641][ T9429] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 193.597272][ T9960] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 194.419691][T10010] IPVS: length: 228 != 24 [ 194.626970][T10018] __nla_validate_parse: 12 callbacks suppressed [ 194.626991][T10018] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1124'. [ 194.702574][T10023] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 194.729954][T10023] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 195.061722][T10039] netlink: 'syz.2.1131': attribute type 39 has an invalid length. [ 195.082430][T10040] netlink: 'syz.2.1131': attribute type 39 has an invalid length. [ 195.266018][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 195.375036][T10048] tipc: Enabled bearer , priority 0 [ 195.392876][T10052] nbd: must specify a device to reconfigure [ 195.403807][T10045] tipc: Resetting bearer [ 195.480757][T10044] tipc: Disabling bearer [ 195.632448][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1136'. [ 195.656856][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 195.939949][T10071] syzkaller1: entered promiscuous mode [ 195.945711][T10071] syzkaller1: entered allmulticast mode [ 196.166177][T10085] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1142'. [ 196.201725][T10087] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1142'. [ 196.507580][T10092] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1144'. [ 196.569714][T10096] tipc: Enabling of bearer rejected, already enabled [ 196.676348][T10108] netlink: 'syz.0.1147': attribute type 10 has an invalid length. [ 196.694727][T10108] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 196.815059][T10114] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1149'. [ 196.923517][T10116] netlink: 'syz.4.1150': attribute type 27 has an invalid length. [ 197.657970][T10134] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1155'. [ 197.783587][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 198.018171][T10142] syzkaller0: entered promiscuous mode [ 198.023711][T10142] syzkaller0: entered allmulticast mode [ 199.542091][T10145] C: renamed from lo [ 199.548611][T10145] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 200.058806][T10187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1173'. [ 200.139658][T10199] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1175'. [ 200.142205][T10194] sctp: [Deprecated]: syz.3.1174 (pid 10194) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.142205][T10194] Use struct sctp_sack_info instead [ 200.178792][T10201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.556113][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1177'. [ 200.566779][T10210] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1177'. [ 200.628757][T10210] geneve2: entered promiscuous mode [ 200.634039][T10210] geneve2: entered allmulticast mode [ 200.695505][T10216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1181'. [ 200.705411][ T1141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.748733][T10217] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1180'. [ 200.767278][ T1141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.782213][T10216] netlink: 'syz.4.1181': attribute type 15 has an invalid length. [ 200.808702][T10216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1181'. [ 200.818342][ T1141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.837726][T10216] netlink: 'syz.4.1181': attribute type 15 has an invalid length. [ 200.845596][ T1141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.926065][T10222] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 200.965746][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 201.064529][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'. [ 201.378260][T10240] syz.1.1190 uses old SIOCAX25GETINFO [ 201.472941][T10238] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1189'. [ 201.539643][T10245] erspan0: entered promiscuous mode [ 201.565499][T10245] erspan0: left promiscuous mode [ 201.818708][T10254] tipc: Enabling of bearer rejected, already enabled [ 202.028058][ T25] block nbd0: Possible stuck request ffff8880251ee000: control (read@0,1024B). Runtime 90 seconds [ 202.039518][ T25] block nbd0: Possible stuck request ffff8880251ee1c0: control (read@1024,1024B). Runtime 90 seconds [ 202.050918][ T25] block nbd0: Possible stuck request ffff8880251ee380: control (read@2048,1024B). Runtime 90 seconds [ 202.062141][ T25] block nbd0: Possible stuck request ffff8880251ee540: control (read@3072,1024B). Runtime 90 seconds [ 202.562792][T10286] hsr_slave_0 (unregistering): left promiscuous mode [ 202.668677][T10304] netlink: 'syz.2.1207': attribute type 7 has an invalid length. [ 203.496060][T10347] IPVS: Unknown mcast interface: vcan0 [ 203.550683][T10350] IPVS: Unknown mcast interface: vcan0 [ 203.724539][T10348] syzkaller0: entered promiscuous mode [ 203.731071][T10348] syzkaller0: entered allmulticast mode [ 205.371827][T10377] __nla_validate_parse: 13 callbacks suppressed [ 205.371849][T10377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1227'. [ 205.733834][T10402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.828228][T10405] IPVS: stopping master sync thread 10407 ... [ 205.846633][T10407] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 205.963957][T10410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1236'. [ 206.222141][T10423] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1240'. [ 206.255700][T10420] 8021q: adding VLAN 0 to HW filter on device bond7 [ 206.394222][T10430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1241'. [ 206.793258][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'. [ 206.802470][T10445] tipc: Enabled bearer , priority 0 [ 206.812676][T10445] syzkaller0: entered promiscuous mode [ 206.829748][T10445] syzkaller0: entered allmulticast mode [ 206.953984][T10447] netlink: 'syz.1.1244': attribute type 4 has an invalid length. [ 206.962462][T10452] openvswitch: netlink: IPv6 tunnel dst address is zero [ 207.018486][T10445] tipc: Resetting bearer [ 207.087968][T10441] tipc: Resetting bearer [ 207.221619][T10441] tipc: Disabling bearer [ 207.661590][ T30] audit: type=1107 audit(1754012369.299:2): pid=10480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='UEl滶3鶬寂炬<q隘o(紎#g[瑶筒."偙O煨 ~诬悔╢繭捍n7>X蘷,迍|po穥T' [ 207.701812][T10490] xt_socket: unknown flags 0xe4 [ 208.155064][T10507] macvlan0: entered promiscuous mode [ 208.160817][T10507] macvlan0: entered allmulticast mode [ 208.207650][T10513] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1264'. [ 208.222566][T10513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1264'. [ 208.253583][T10515] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 208.309417][T10515] netlink: 'syz.2.1265': attribute type 6 has an invalid length. [ 209.217745][T10558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1278'. [ 209.238894][T10554] tipc: Enabling of bearer rejected, failed to enable media [ 209.266125][T10560] netlink: 'syz.2.1280': attribute type 1 has an invalid length. [ 209.288122][T10561] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1278'. [ 209.311597][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'. [ 209.354350][T10556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.586111][T10556] bond4: (slave bridge1): making interface the new active one [ 209.607600][T10556] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 210.280143][T10598] macsec2: entered allmulticast mode [ 210.316362][T10598] team0: entered allmulticast mode [ 210.337920][T10598] team_slave_0: entered allmulticast mode [ 210.354995][T10598] team_slave_1: entered allmulticast mode [ 210.382745][T10598] bond1: entered allmulticast mode [ 210.442238][T10598] team0: left allmulticast mode [ 210.451909][T10598] team_slave_0: left allmulticast mode [ 210.472233][T10598] team_slave_1: left allmulticast mode [ 210.485090][T10598] bond1: left allmulticast mode [ 210.855229][T10617] tun0: tun_chr_ioctl cmd 1074025675 [ 210.861301][T10617] tun0: persist disabled [ 211.179949][T10628] __nla_validate_parse: 5 callbacks suppressed [ 211.179969][T10628] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1296'. [ 211.512303][T10642] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1301'. [ 211.599462][T10645] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1302'. [ 211.629378][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1302'. [ 211.665548][T10647] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1303'. [ 211.790248][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 211.797800][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 211.804787][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 211.812399][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 211.881260][T10666] netlink: 'syz.1.1309': attribute type 21 has an invalid length. [ 212.296373][T10666] netlink: 'syz.1.1309': attribute type 6 has an invalid length. [ 212.327183][T10666] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1309'. [ 212.424375][T10684] netlink: 'syz.3.1308': attribute type 10 has an invalid length. [ 212.897716][T10722] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1314'. [ 213.017332][T10721] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1314'. [ 213.069190][T10723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.218744][T10768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1326'. [ 214.308303][T10775] netlink: 'syz.1.1327': attribute type 1 has an invalid length. [ 214.507806][T10786] netlink: zone id is out of range [ 214.529456][T10786] netlink: zone id is out of range [ 214.550891][T10786] netlink: zone id is out of range [ 214.594039][T10786] netlink: zone id is out of range [ 214.658135][T10786] netlink: zone id is out of range [ 214.665182][T10786] netlink: zone id is out of range [ 214.727151][T10786] netlink: zone id is out of range [ 214.757068][T10786] netlink: zone id is out of range [ 214.762607][T10786] netlink: zone id is out of range [ 214.775470][T10798] netlink: 'syz.0.1335': attribute type 1 has an invalid length. [ 214.792209][T10798] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1335'. [ 214.819214][T10798] netlink: 'syz.0.1335': attribute type 1 has an invalid length. [ 215.008021][T10814] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 215.040423][T10814] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 215.057478][T10814] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 215.109568][T10817] bridge_slave_0: entered promiscuous mode [ 215.200383][T10819] nbd: socks must be embedded in a SOCK_ITEM attr [ 215.483378][T10833] C: renamed from lo (while UP) [ 216.484068][T10866] sctp: [Deprecated]: syz.2.1355 (pid 10866) Use of int in maxseg socket option. [ 216.484068][T10866] Use struct sctp_assoc_value instead [ 216.670242][T10871] __nla_validate_parse: 2 callbacks suppressed [ 216.670264][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'. [ 217.113387][T10892] netlink: 'syz.1.1362': attribute type 13 has an invalid length. [ 217.145107][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1362'. [ 217.191830][T10901] netlink: 'syz.1.1362': attribute type 7 has an invalid length. [ 217.863271][T10929] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1369'. [ 218.003111][T10938] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1372'. [ 218.557748][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1374'. [ 218.590104][T10947] net_ratelimit: 18 callbacks suppressed [ 218.590122][T10947] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 218.999103][T10969] netlink: 'syz.1.1381': attribute type 6 has an invalid length. [ 219.091686][T10973] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1383'. [ 219.225715][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1384'. [ 219.226729][T10978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.278087][T10980] netlink: 'syz.1.1386': attribute type 1 has an invalid length. [ 219.303325][T10976] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 219.552564][T10990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1390'. [ 220.045465][T11016] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1396'. [ 220.082933][T11018] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1396'. [ 220.379468][T11026] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 220.612370][T11040] bridge3: entered promiscuous mode [ 220.679572][T11040] bridge3: entered allmulticast mode [ 221.137819][T11063] tipc: Enabled bearer , priority 0 [ 221.172065][T11063] syzkaller0: entered promiscuous mode [ 221.211673][T11063] syzkaller0: entered allmulticast mode [ 221.261283][ T1162] syzkaller0: tun_net_xmit 70 [ 221.276559][ C1] syzkaller0: tun_net_xmit 90 [ 221.277833][T11070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.363622][T11076] tipc: Resetting bearer [ 221.383024][T11076] syzkaller0: tun_net_xmit 90 [ 221.517241][ C0] syzkaller0: tun_net_xmit 90 [ 221.657156][ C0] syzkaller0: tun_net_xmit 90 [ 221.797265][ C0] syzkaller0: tun_net_xmit 90 [ 221.838586][T11099] netlink: 'syz.3.1418': attribute type 3 has an invalid length. [ 221.855524][T11099] __nla_validate_parse: 4 callbacks suppressed [ 221.855553][T11099] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1418'. [ 221.882006][T11062] tipc: Resetting bearer [ 221.948540][T11062] tipc: Disabling bearer [ 222.078967][T11105] tipc: Enabled bearer , priority 0 [ 222.100181][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1420'. [ 222.110723][T11105] D: renamed from syzkaller0 [ 222.128896][T11105] tipc: Disabling bearer [ 222.165530][T11112] netlink: 'syz.4.1419': attribute type 28 has an invalid length. [ 222.198316][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1420'. [ 222.208874][T11112] netlink: 'syz.4.1419': attribute type 3 has an invalid length. [ 222.233552][T11112] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1419'. [ 223.170982][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'. [ 223.287266][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1436'. [ 223.605901][T11171] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1439'. [ 223.995509][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1446'. [ 224.022988][T11193] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1445'. [ 224.465413][T11206] team0: Device vti0 is of different type [ 224.621126][T11207] team0: Device vti0 is of different type [ 224.708710][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1454'. [ 224.779038][T11223] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 224.805209][T11221] tipc: Enabling of bearer rejected, failed to enable media [ 224.835820][T11221] gretap0: entered promiscuous mode [ 225.065096][T11233] netlink: 'syz.4.1457': attribute type 1 has an invalid length. [ 225.412822][T11255] tipc: Enabling of bearer rejected, failed to enable media [ 225.707036][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 225.895625][T11281] netlink: 'syz.1.1467': attribute type 9 has an invalid length. [ 226.011090][T11285] FAULT_INJECTION: forcing a failure. [ 226.011090][T11285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.052069][T11285] CPU: 1 UID: 0 PID: 11285 Comm: syz.2.1469 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 226.052099][T11285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.052116][T11285] Call Trace: [ 226.052124][T11285] [ 226.052133][T11285] dump_stack_lvl+0x189/0x250 [ 226.052160][T11285] ? __pfx____ratelimit+0x10/0x10 [ 226.052187][T11285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.052207][T11285] ? __pfx__printk+0x10/0x10 [ 226.052233][T11285] ? __might_fault+0xb0/0x130 [ 226.052274][T11285] should_fail_ex+0x414/0x560 [ 226.052310][T11285] _copy_from_user+0x2d/0xb0 [ 226.052338][T11285] ___sys_sendmsg+0x158/0x2a0 [ 226.052363][T11285] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.052425][T11285] ? __fget_files+0x2a/0x420 [ 226.052443][T11285] ? __fget_files+0x3a0/0x420 [ 226.052475][T11285] __x64_sys_sendmsg+0x19b/0x260 [ 226.052499][T11285] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.052530][T11285] ? __pfx_ksys_write+0x10/0x10 [ 226.052555][T11285] ? rcu_is_watching+0x15/0xb0 [ 226.052590][T11285] ? do_syscall_64+0xbe/0x3b0 [ 226.052623][T11285] do_syscall_64+0xfa/0x3b0 [ 226.052649][T11285] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.052686][T11285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.052706][T11285] ? clear_bhb_loop+0x60/0xb0 [ 226.052730][T11285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.052748][T11285] RIP: 0033:0x7f843838eb69 [ 226.052767][T11285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.052783][T11285] RSP: 002b:00007f84391ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.052805][T11285] RAX: ffffffffffffffda RBX: 00007f84385b5fa0 RCX: 00007f843838eb69 [ 226.052820][T11285] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 226.052832][T11285] RBP: 00007f84391ae090 R08: 0000000000000000 R09: 0000000000000000 [ 226.052843][T11285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.052855][T11285] R13: 0000000000000000 R14: 00007f84385b5fa0 R15: 00007ffd38a3b7f8 [ 226.052887][T11285] [ 226.606404][T11300] !: renamed from bond_slave_0 (while UP) [ 227.135239][T11308] netlink: 'syz.0.1475': attribute type 13 has an invalid length. [ 227.215848][T11330] __nla_validate_parse: 2 callbacks suppressed [ 227.215872][T11330] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1480'. [ 227.411795][T11308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.610014][T11392] sch_fq: defrate 0 ignored. [ 228.651866][T11393] netlink: 'syz.1.1498': attribute type 2 has an invalid length. [ 228.780469][T11397] netlink: 'syz.0.1500': attribute type 10 has an invalid length. [ 228.803237][T11397] veth0_macvtap: left promiscuous mode [ 228.951634][T11400] syzkaller0: entered promiscuous mode [ 229.021637][T11400] syzkaller0: entered allmulticast mode [ 229.078679][T11400] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1499'. [ 229.277734][T11418] gtp1: entered promiscuous mode [ 229.287023][T11418] gtp1: entered allmulticast mode [ 229.534440][T11434] bond0: (slave batadv0): Releasing backup interface [ 229.604459][T11435] tipc: Failed to remove unknown binding: 66,1,1/0:785838755/785838757 [ 229.615441][T11435] tipc: Failed to remove unknown binding: 66,1,1/0:785838755/785838757 [ 229.624861][T11435] tipc: Failed to remove unknown binding: 66,1,1/0:785838755/785838757 [ 229.641601][T11434] bond0: (slave netdevsim0): Releasing backup interface [ 231.917698][T11486] netlink: 'syz.3.1520': attribute type 39 has an invalid length. [ 231.927562][T11489] netlink: 'syz.1.1522': attribute type 33 has an invalid length. [ 232.119945][ T25] block nbd0: Possible stuck request ffff8880251ee000: control (read@0,1024B). Runtime 120 seconds [ 232.131325][ T25] block nbd0: Possible stuck request ffff8880251ee1c0: control (read@1024,1024B). Runtime 120 seconds [ 232.142873][ T25] block nbd0: Possible stuck request ffff8880251ee380: control (read@2048,1024B). Runtime 120 seconds [ 232.155219][ T25] block nbd0: Possible stuck request ffff8880251ee540: control (read@3072,1024B). Runtime 120 seconds [ 232.627884][T11499] veth5: entered allmulticast mode [ 232.964636][T11523] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1530'. [ 233.003884][T11523] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1530'. [ 233.017371][T11523] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1530'. [ 233.031215][T11523] netlink: 2336 bytes leftover after parsing attributes in process `syz.3.1530'. [ 233.524079][T11545] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 233.748494][T11547] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.794547][T11547] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.872947][T11559] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1541'. [ 234.014152][T11547] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.025104][T11547] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.270713][T11547] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.293102][T11547] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.499524][T11547] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.508580][T11590] openvswitch: netlink: Flow key attr not present in new flow. [ 234.527935][T11547] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.697745][T11599] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1550'. [ 234.763116][ T9425] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.779489][ T9425] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.809127][ T9425] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.825137][ T9425] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.847295][T11603] team0: Port device vlan0 removed [ 234.854000][T11603] vlan2: left promiscuous mode [ 234.862502][T11603] bridge0: left promiscuous mode [ 234.871117][T11604] netlink: 'syz.3.1552': attribute type 10 has an invalid length. [ 234.880220][T11603] bridge3: port 1(vlan2) entered disabled state [ 234.942529][T11610] netlink: 'syz.0.1553': attribute type 7 has an invalid length. [ 234.955919][T11610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1553'. [ 234.967374][T11604] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 234.984448][T11609] bond0: (slave wlan1): Releasing backup interface [ 235.005120][T11612] netlink: 'syz.4.1554': attribute type 15 has an invalid length. [ 235.017717][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1554'. [ 235.080315][ T9414] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.122707][ T9414] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.206026][T11608] pimreg: entered allmulticast mode [ 235.215159][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1554'. [ 235.229825][T11612] dvmrp1: left allmulticast mode [ 235.238548][T11612] pimreg: left allmulticast mode [ 235.356883][ T9425] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.386359][ T9425] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.927605][T11643] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1562'. [ 236.251750][T11652] tap0: tun_chr_ioctl cmd 1074025676 [ 236.267924][T11652] tap0: owner set to 0 [ 236.614755][T11666] IPv6: sit3: Disabled Multicast RS [ 236.659618][T11666] sit3: entered allmulticast mode [ 237.632008][T11721] netlink: 'syz.4.1578': attribute type 5 has an invalid length. [ 237.968860][T11730] __nla_validate_parse: 5 callbacks suppressed [ 237.968881][T11730] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1580'. [ 238.087064][T11734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1581'. [ 238.143318][T11739] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1581'. [ 238.214914][T11739] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 238.292442][T11750] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1583'. [ 238.343612][T11751] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1583'. [ 239.064494][T11776] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1591'. [ 239.142887][T11776] netlink: 'syz.0.1591': attribute type 10 has an invalid length. [ 239.230788][T11786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1594'. [ 239.231341][T11776] team0: Device hsr_slave_0 failed to register rx_handler [ 239.660185][T11802] syzkaller0 speed is unknown, defaulting to 1000 [ 239.683749][T11802] syzkaller0 speed is unknown, defaulting to 1000 [ 239.730647][T11802] syzkaller0 speed is unknown, defaulting to 1000 [ 239.755551][T11802] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 239.794837][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1601'. [ 239.919427][T11802] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 240.541206][T11802] syzkaller0 speed is unknown, defaulting to 1000 [ 240.561140][T11802] syzkaller0 speed is unknown, defaulting to 1000 [ 240.637587][T11802] syzkaller0 speed is unknown, defaulting to 1000 [ 240.702666][T11802] syzkaller0 speed is unknown, defaulting to 1000 [ 240.747789][T11802] syzkaller0 speed is unknown, defaulting to 1000 [ 241.060759][T11846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1608'. [ 241.075285][T11845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1611'. [ 241.723603][T11867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.835746][T11870] pim6reg1: entered promiscuous mode [ 241.849554][T11870] pim6reg1: entered allmulticast mode [ 242.961209][T11923] netlink: 'syz.2.1633': attribute type 10 has an invalid length. [ 242.980248][T11923] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.016837][T11923] bridge_slave_1: left allmulticast mode [ 243.041955][T11923] bridge_slave_1: left promiscuous mode [ 243.063496][T11923] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.125094][T11923] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 243.166367][T11928] tipc: Enabled bearer , priority 0 [ 243.201190][T11928] syzkaller0: entered promiscuous mode [ 243.208045][T11928] syzkaller0: entered allmulticast mode [ 243.257351][T11928] tipc: Resetting bearer [ 243.286630][T11927] tipc: Resetting bearer [ 243.359278][T11927] tipc: Disabling bearer [ 243.415619][T11941] __nla_validate_parse: 13 callbacks suppressed [ 243.415642][T11941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1639'. [ 243.455410][T11941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1639'. [ 246.240908][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1665'. [ 246.266915][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1666'. [ 246.276057][T12081] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1667'. [ 246.306150][T12075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1666'. [ 246.359508][T12076] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1665'. [ 246.413001][T12075] geneve2: entered promiscuous mode [ 246.423944][T12075] geneve2: entered allmulticast mode [ 246.463296][T12089] netlink: 'syz.3.1669': attribute type 10 has an invalid length. [ 246.505005][T12089] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 246.597504][T12089] team0: Port device vti0 added [ 246.795102][T12103] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1673'. [ 248.051762][T12168] team0: Device gtp0 is up. Set it down before adding it as a team port [ 248.623581][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1697'. [ 248.654952][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1697'. [ 248.710525][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1698'. [ 248.937146][T12215] netlink: 'syz.3.1703': attribute type 1 has an invalid length. [ 249.079837][T12215] 8021q: adding VLAN 0 to HW filter on device bond8 [ 249.367761][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1708'. [ 249.470231][T12240] netlink: 'syz.3.1709': attribute type 1 has an invalid length. [ 249.581487][T12240] bond9: entered promiscuous mode [ 249.594337][T12240] 8021q: adding VLAN 0 to HW filter on device bond9 [ 249.603298][T12242] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 249.605082][T12246] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 250.254314][T12275] sctp: [Deprecated]: syz.3.1718 (pid 12275) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.254314][T12275] Use struct sctp_sack_info instead [ 250.471247][T12279] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1720'. [ 250.517595][T12282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1721'. [ 250.540196][T12284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1721'. [ 251.073302][T12307] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1727'. [ 251.213288][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1728'. [ 251.363110][T12316] netlink: 'syz.4.1729': attribute type 10 has an invalid length. [ 251.510811][T12327] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1732'. [ 251.571655][T12330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.617072][T12334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.851271][T12345] netlink: 'syz.2.1738': attribute type 5 has an invalid length. [ 252.248801][T12366] netlink: 'syz.3.1741': attribute type 4 has an invalid length. [ 252.489932][T12359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.557298][T12359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.593833][T12359] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 252.632895][T12359] bond0 (unregistering): Released all slaves [ 252.712135][T12370] gretap0: left promiscuous mode [ 252.735734][T12370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.350428][T12398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.673937][T12412] __nla_validate_parse: 8 callbacks suppressed [ 253.673957][T12412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1760'. [ 253.691417][T12412] openvswitch: netlink: Flow key attr not present in new flow. [ 253.716041][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1760'. [ 253.854647][T12426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1759'. [ 253.863675][T12407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.990999][T12415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.032814][T12415] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 254.056349][T12430] netlink: 'syz.4.1762': attribute type 3 has an invalid length. [ 254.061270][T12415] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 254.142754][T12412] veth0_macvtap: left promiscuous mode [ 254.196145][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1763'. [ 254.213022][T12434] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 254.245096][T12434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.595085][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1766'. [ 254.677709][T12451] delete_channel: no stack [ 254.930569][T12466] openvswitch: netlink: Actions may not be safe on all matching packets [ 254.958921][T12466] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1774'. [ 254.970560][ T9425] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 255.239279][T12474] bond10: entered allmulticast mode [ 255.245414][T12474] 8021q: adding VLAN 0 to HW filter on device bond10 [ 255.258610][T12474] bridge0: port 1(bond10) entered blocking state [ 255.265360][T12474] bridge0: port 1(bond10) entered disabled state [ 255.267410][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1779'. [ 255.275846][T12474] bond10: entered promiscuous mode [ 255.464920][T12490] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1782'. [ 255.582315][T12494] veth5: entered allmulticast mode [ 255.913972][T12519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.971249][T12521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.017901][T12521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1790'. [ 256.411653][T12535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1794'. [ 256.532113][T12527] infiniband syz0: set down [ 256.538321][T12527] infiniband syz0: added ipvlan1 [ 256.603603][T12527] RDS/IB: syz0: added [ 256.608947][T12527] smc: adding ib device syz0 with port count 1 [ 256.615532][T12527] smc: ib device syz0 port 1 has pnetid [ 256.834031][T12544] syzkaller0 speed is unknown, defaulting to 1000 [ 257.231987][T12559] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 258.098118][T12584] gretap0: entered promiscuous mode [ 258.128284][T12584] 0{X功: renamed from gretap0 [ 258.167991][T12584] 0{X功: left promiscuous mode [ 258.173086][T12584] 0{X功: entered allmulticast mode [ 258.203592][T12584] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 258.288255][T12595] openvswitch: netlink: Message has 4 unknown bytes. [ 258.298482][T12595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.573047][T12597] tipc: Enabled bearer , priority 0 [ 258.700254][T12606] 8021q: adding VLAN 0 to HW filter on device bond6 [ 258.733997][T12595] tipc: Disabling bearer [ 258.868180][T12614] __nla_validate_parse: 4 callbacks suppressed [ 258.868202][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1814'. [ 258.897896][T12614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1814'. [ 258.908047][T12614] netlink: 'syz.4.1814': attribute type 6 has an invalid length. [ 258.987339][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 259.028067][T12621] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 259.800743][T12656] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1827'. [ 259.898778][T12656] netlink: 'syz.3.1827': attribute type 11 has an invalid length. [ 259.919896][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1827'. [ 259.975946][ T9416] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.985543][T12656] netlink: 'syz.3.1827': attribute type 11 has an invalid length. [ 259.994095][ T9416] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.003060][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1827'. [ 260.012425][ T9416] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.025444][ T9416] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.097255][T12665] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1829'. [ 260.342350][T12669] sctp: [Deprecated]: syz.2.1831 (pid 12669) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.342350][T12669] Use struct sctp_sack_info instead [ 260.484252][T12677] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1834'. [ 260.523749][T12680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.765954][T12684] macvlan2: entered promiscuous mode [ 260.788343][T12684] macvlan2: entered allmulticast mode [ 260.802692][T12684] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1836'. [ 260.833913][T12687] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1836'. [ 261.338392][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1842'. [ 261.526762][T12720] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 262.064349][T12726] syzkaller0 speed is unknown, defaulting to 1000 [ 262.188870][ T25] block nbd0: Possible stuck request ffff8880251ee000: control (read@0,1024B). Runtime 150 seconds [ 262.200066][ T25] block nbd0: Possible stuck request ffff8880251ee1c0: control (read@1024,1024B). Runtime 150 seconds [ 262.211713][ T25] block nbd0: Possible stuck request ffff8880251ee380: control (read@2048,1024B). Runtime 150 seconds [ 262.223016][ T25] block nbd0: Possible stuck request ffff8880251ee540: control (read@3072,1024B). Runtime 150 seconds [ 262.439803][T12743] syzkaller0 speed is unknown, defaulting to 1000 [ 263.681395][T12799] tipc: Enabled bearer , priority 0 [ 263.715251][T12799] syzkaller0: entered promiscuous mode [ 263.749154][T12799] syzkaller0: entered allmulticast mode [ 263.884134][T12807] vlan0: entered promiscuous mode [ 263.901529][T12799] tipc: Resetting bearer [ 263.912359][T12799] __nla_validate_parse: 6 callbacks suppressed [ 263.912378][T12799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1868'. [ 264.071826][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 264.084524][T12798] tipc: Resetting bearer [ 264.091318][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 264.132906][T12798] tipc: Disabling bearer [ 264.350653][T12815] netlink: 'syz.0.1873': attribute type 11 has an invalid length. [ 264.575596][T12821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1876'. [ 264.632707][T12824] netlink: 147212 bytes leftover after parsing attributes in process `syz.1.1875'. [ 264.642963][T12824] netlink: zone id is out of range [ 264.656655][T12824] netlink: zone id is out of range [ 264.663176][T12824] netlink: zone id is out of range [ 264.670274][T12824] netlink: zone id is out of range [ 264.675779][T12824] netlink: zone id is out of range [ 264.686620][T12825] netlink: 'syz.4.1877': attribute type 1 has an invalid length. [ 264.702410][T12824] netlink: get zone limit has 8 unknown bytes [ 264.934178][T12835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.125957][T12846] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 265.266151][T12853] netlink: 'syz.0.1885': attribute type 10 has an invalid length. [ 265.290614][T12853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.308391][T12853] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 265.532182][T12866] netlink: 'syz.2.1890': attribute type 9 has an invalid length. [ 265.702229][T12871] syzkaller0 speed is unknown, defaulting to 1000 [ 265.943848][T12885] syzkaller1: entered promiscuous mode [ 265.959036][T12885] syzkaller1: entered allmulticast mode [ 266.365316][T12903] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1899'. [ 266.885725][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 267.306733][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 267.306754][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 267.319867][T12933] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1909'. [ 267.411791][T12934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1910'. [ 267.424397][T12934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1910'. [ 267.788191][T12951] bond0: entered allmulticast mode [ 267.840410][T12951] veth0: entered promiscuous mode [ 268.167176][T12965] syzkaller0: entered promiscuous mode [ 268.190223][T12965] syzkaller0: entered allmulticast mode [ 268.505393][T12990] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 269.001311][T13015] netlink: 'syz.4.1933': attribute type 1 has an invalid length. [ 269.026922][T13015] __nla_validate_parse: 3 callbacks suppressed [ 269.026943][T13015] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1933'. [ 269.396114][T13037] syzkaller1: entered promiscuous mode [ 269.428922][T13037] syzkaller1: entered allmulticast mode [ 269.746783][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'. [ 269.956630][T13061] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20003 [ 270.703008][T13098] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 270.731171][ T5922] IPVS: starting estimator thread 0... [ 270.852581][T13104] IPVS: using max 24 ests per chain, 57600 per kthread [ 270.892173][T13108] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1961'. [ 271.055101][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'. [ 271.117244][T13123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1967'. [ 271.204137][T13120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1966'. [ 271.316193][ T5850] hid-generic 0005:0458:0009.0001: item fetching failed at offset 0/1 [ 271.370732][ T5850] hid-generic 0005:0458:0009.0001: probe with driver hid-generic failed with error -22 [ 271.579893][T13143] netlink: 'syz.4.1973': attribute type 30 has an invalid length. [ 271.613261][T13145] netlink: 'syz.0.1974': attribute type 1 has an invalid length. [ 271.683834][T13142] netlink: 'syz.2.1970': attribute type 29 has an invalid length. [ 271.692378][T13145] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1974'. [ 271.715116][T13146] netlink: 'syz.2.1970': attribute type 29 has an invalid length. [ 271.733168][T13150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1975'. [ 271.759105][T13142] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1970'. [ 271.783237][T13145] veth0_to_bridge: entered promiscuous mode [ 271.843021][T13144] veth0_to_bridge: left promiscuous mode [ 271.868826][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1976'. [ 272.118036][T13160] netlink: 'syz.4.1977': attribute type 3 has an invalid length. [ 272.639956][T13184] batadv0: Device is already in use. [ 272.732197][T13192] netlink: 'syz.1.1987': attribute type 6 has an invalid length. [ 273.054959][T13208] 0{X功: left allmulticast mode [ 273.256340][T13208] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 276.976614][ T5211] udevd[5211]: worker [5848] /devices/virtual/block/nbd0 is taking a long time [ 283.306692][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 292.267637][ T25] block nbd0: Possible stuck request ffff8880251ee000: control (read@0,1024B). Runtime 180 seconds [ 292.278470][ T25] block nbd0: Possible stuck request ffff8880251ee1c0: control (read@1024,1024B). Runtime 180 seconds [ 292.289528][ T25] block nbd0: Possible stuck request ffff8880251ee380: control (read@2048,1024B). Runtime 180 seconds [ 292.300666][ T25] block nbd0: Possible stuck request ffff8880251ee540: control (read@3072,1024B). Runtime 180 seconds [ 293.851576][ T5211] udevd[5211]: worker [5848] /devices/virtual/block/nbd0 timeout; kill it [ 293.860342][ T5211] udevd[5211]: seq 11427 '/devices/virtual/block/nbd0' killed [ 315.306781][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 322.349594][ T25] block nbd0: Possible stuck request ffff8880251ee000: control (read@0,1024B). Runtime 210 seconds [ 322.360820][ T25] block nbd0: Possible stuck request ffff8880251ee1c0: control (read@1024,1024B). Runtime 210 seconds [ 322.372396][ T25] block nbd0: Possible stuck request ffff8880251ee380: control (read@2048,1024B). Runtime 210 seconds [ 322.383428][ T25] block nbd0: Possible stuck request ffff8880251ee540: control (read@3072,1024B). Runtime 210 seconds [ 331.903989][T13259] __nla_validate_parse: 4 callbacks suppressed [ 331.904013][T13259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2005'. [ 331.936743][T13260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2004'. [ 331.959847][T13256] syzkaller0 speed is unknown, defaulting to 1000 [ 332.292651][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2009'. [ 332.732847][T13296] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2016'. [ 332.813737][T13297] tipc: Enabled bearer , priority 0 [ 332.827704][T13297] syzkaller0: entered promiscuous mode [ 332.840151][T13297] syzkaller0: entered allmulticast mode [ 332.863329][T13301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2018'. [ 332.913735][T13299] can: request_module (can-proto-5) failed. [ 332.955315][T13297] tipc: Resetting bearer [ 333.008132][T13295] tipc: Resetting bearer [ 333.105592][T13295] tipc: Disabling bearer [ 333.194086][T13264] netlink: 'syz.2.2003': attribute type 6 has an invalid length. [ 334.511306][T13331] v: renamed from dummy0 (while UP) [ 334.877528][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2032'. [ 334.918506][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2032'. [ 335.077473][T13349] bridge0: port 3(vlan3) entered blocking state [ 335.084130][T13349] bridge0: port 3(vlan3) entered disabled state [ 335.094411][T13349] vlan3: entered allmulticast mode [ 335.682910][T13349] vlan3: left allmulticast mode [ 335.869049][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2040'. [ 335.884016][T13358] syzkaller1: entered promiscuous mode [ 335.900879][T13358] syzkaller1: entered allmulticast mode [ 335.906648][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2040'. [ 336.032516][T13392] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 337.380064][T13460] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2060'. [ 337.547560][T13467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2062'. [ 338.328932][T13506] Bluetooth: MGMT ver 1.23 [ 338.557290][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2077'. [ 338.606752][T13523] netlink: 'syz.0.2078': attribute type 58 has an invalid length. [ 338.633495][T13523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2078'. [ 338.657991][T13526] netlink: 'syz.3.2080': attribute type 11 has an invalid length. [ 338.674778][T13526] netlink: 'syz.3.2080': attribute type 11 has an invalid length. [ 338.693296][T13526] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2080'. [ 338.966949][T13542] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2085'. [ 339.000561][T13542] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2085'. [ 339.168628][T13559] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2087'. [ 339.178843][T13559] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 339.324187][T13570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2090'. [ 339.602204][T13580] netlink: 'syz.1.2092': attribute type 1 has an invalid length. [ 339.654212][T13580] 8021q: adding VLAN 0 to HW filter on device bond5 [ 339.663302][T13580] bond4: (slave bond5): making interface the new active one [ 339.671570][T13580] bond4: (slave bond5): Enslaving as an active interface with an up link [ 339.682475][T13580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2092'. [ 339.755106][ T3008] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.765407][ T3008] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.794167][ T5850] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.976748][ T5850] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 340.091173][T13588] bridge_slave_1: mtu greater than device maximum [ 340.119252][T13595] Unsupported ieee802154 address type: 0 [ 340.668296][ T5850] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 340.911306][T13637] netlink: 'syz.2.2108': attribute type 1 has an invalid length. [ 340.927769][T13637] netlink: 'syz.2.2108': attribute type 1 has an invalid length. [ 341.311086][T13664] IPVS: length: 124 != 8 [ 341.903065][T13680] netlink: 'syz.1.2119': attribute type 23 has an invalid length. [ 342.982633][T13670] syz_tun: entered promiscuous mode [ 342.988179][T13670] syz_tun: entered allmulticast mode [ 343.237974][T13687] IPv6: NLM_F_CREATE should be specified when creating new route [ 343.418018][T13705] __nla_validate_parse: 7 callbacks suppressed [ 343.418040][T13705] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2125'. [ 343.570577][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2126'. [ 343.614053][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2126'. [ 343.844300][T13724] netlink: 'syz.4.2131': attribute type 1 has an invalid length. [ 343.866627][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 343.906634][T13724] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2131'. [ 343.957371][T13732] netlink: 'syz.4.2131': attribute type 21 has an invalid length. [ 343.964930][T13724] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2131'. [ 343.965716][T13732] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2131'. [ 343.996918][T13729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2131'. [ 344.064809][T13736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2133'. [ 344.370815][T13761] lo: entered promiscuous mode [ 344.386152][T13761] netlink: 'syz.0.2138': attribute type 2 has an invalid length. [ 344.418495][T13761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.524675][T13767] pimreg: entered allmulticast mode [ 344.555111][T13764] syzkaller0 speed is unknown, defaulting to 1000 [ 344.627793][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2144'. [ 344.685957][T13778] netlink: 'syz.2.2144': attribute type 10 has an invalid length. [ 344.695343][T13778] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2144'. [ 344.878475][T13778] team0: Port device geneve0 added [ 344.937548][T13783] netlink: 'syz.1.2145': attribute type 1 has an invalid length. [ 345.391818][T13800] nbd: couldn't find a device at index -373156329 [ 346.007698][T13833] pim6reg: entered allmulticast mode [ 346.036839][T13835] pim6reg: left allmulticast mode [ 346.092717][T13838] netlink: 'syz.0.2161': attribute type 1 has an invalid length. [ 346.138740][T13838] netlink: 'syz.0.2161': attribute type 1 has an invalid length. [ 346.281882][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 348.123716][T13930] syzkaller1: entered promiscuous mode [ 348.156699][T13930] syzkaller1: entered allmulticast mode [ 348.259691][T13930] wg1: entered promiscuous mode [ 348.274263][T13936] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 348.836059][T13961] __nla_validate_parse: 8 callbacks suppressed [ 348.836079][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2191'. [ 348.883565][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2191'. [ 349.308223][T13993] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2199'. [ 349.337179][T13984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 349.375731][T13985] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2197'. [ 349.415932][T14000] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2199'. [ 349.452198][T13985] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2197'. [ 349.571837][T13990] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2198'. [ 350.165617][T14021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2204'. [ 350.692501][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2210'. [ 350.763532][T14048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2212'. [ 350.790216][T14048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.995380][T14057] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 352.048293][T14098] netlink: 'syz.3.2225': attribute type 1 has an invalid length. [ 352.065130][T14103] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 352.095279][T14097] netlink: 'syz.0.2224': attribute type 83 has an invalid length. [ 352.387250][T14122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.426687][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 352.434733][ T25] block nbd0: Possible stuck request ffff8880251ee000: control (read@0,1024B). Runtime 240 seconds [ 352.445805][ T25] block nbd0: Possible stuck request ffff8880251ee1c0: control (read@1024,1024B). Runtime 240 seconds [ 352.467062][ T25] block nbd0: Possible stuck request ffff8880251ee380: control (read@2048,1024B). Runtime 240 seconds [ 352.478541][ T25] block nbd0: Possible stuck request ffff8880251ee540: control (read@3072,1024B). Runtime 240 seconds [ 352.584123][ T5922] hid-generic 0005:046D:FFF9.0002: item fetching failed at offset 0/1 [ 352.617370][ T5922] hid-generic 0005:046D:FFF9.0002: probe with driver hid-generic failed with error -22 [ 352.692646][T14139] netlink: 'syz.4.2238': attribute type 23 has an invalid length. [ 352.805316][T14148] netlink: 'syz.2.2241': attribute type 2 has an invalid length. [ 352.828991][T14148] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 353.159189][T14173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.129176][T14211] netlink: 'syz.1.2255': attribute type 11 has an invalid length. [ 354.169059][T14211] __nla_validate_parse: 12 callbacks suppressed [ 354.169080][T14211] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2255'. [ 354.201981][T14220] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2257'. [ 354.599498][T14236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.818296][T14247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2267'. [ 354.898942][T14248] bridge7: entered promiscuous mode [ 354.912957][T14248] bridge7: entered allmulticast mode [ 354.979363][T14251] netlink: 'syz.2.2269': attribute type 2 has an invalid length. [ 355.050287][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2269'. [ 355.223127][T14263] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2273'. [ 355.446698][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2275'. [ 355.716799][T14287] tipc: Enabling of bearer rejected, already enabled [ 355.779883][T14291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2281'. [ 355.792771][T14287] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 355.820477][T14287] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 356.229154][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2287'. [ 356.241932][T14312] macvlan0: left promiscuous mode [ 356.286877][T14312] macvlan0: left allmulticast mode [ 356.326891][T14312] netlink: 'syz.0.2287': attribute type 1 has an invalid length. [ 356.355261][T14312] netlink: 'syz.0.2287': attribute type 2 has an invalid length. [ 356.702497][T14334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2293'. [ 356.742374][ T5850] IPVS: starting estimator thread 0... [ 356.832761][T14343] bond6: (slave vcan2): The slave device specified does not support setting the MAC address [ 356.853689][T14343] bond6: (slave vcan2): Error -95 calling set_mac_address [ 356.870063][T14340] IPVS: using max 26 ests per chain, 62400 per kthread [ 356.991738][T14355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2297'. [ 357.248112][T14364] netlink: 'syz.0.2299': attribute type 10 has an invalid length. [ 357.672937][T14385] veth0_to_team: entered promiscuous mode [ 357.682222][T14385] veth0_to_team: entered allmulticast mode [ 358.084150][T14410] delete_channel: no stack [ 358.160838][T14413] team0: Device xfrm1 is up. Set it down before adding it as a team port [ 358.412852][T14424] tc_dump_action: action bad kind [ 358.606118][T14434] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 359.173142][T14472] netlink: 'syz.4.2331': attribute type 83 has an invalid length. [ 359.427676][T14482] __nla_validate_parse: 5 callbacks suppressed [ 359.427698][T14482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2334'. [ 359.725711][T14504] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2340'. [ 359.765608][T14505] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 360.805496][T14536] netlink: 'syz.0.2346': attribute type 13 has an invalid length. [ 360.956200][T14558] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2354'. [ 360.994426][T14558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2354'. [ 361.059947][T14536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.073104][T14561] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2354'. [ 361.091403][T14536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.243021][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2357'. [ 361.573538][T14585] netlink: 'syz.2.2363': attribute type 7 has an invalid length. [ 361.594876][T14586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2360'. [ 361.613301][T14585] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2363'. [ 362.211226][T14613] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 362.225973][T14613] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 362.239775][T14613] gretap1: entered promiscuous mode [ 362.245450][T14613] gretap1: entered allmulticast mode [ 362.309323][T14620] syzkaller0: entered allmulticast mode [ 362.495072][T14623] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2376'. [ 362.524305][T14623] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2376'. [ 362.602859][T14632] netlink: 'syz.3.2379': attribute type 18 has an invalid length. [ 363.161473][T14664] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 363.194887][T14664] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 363.223598][T14664] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 363.262860][T14667] netlink: 'syz.3.2389': attribute type 1 has an invalid length. [ 363.272692][T14664] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 363.297954][T14664] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 363.330474][T14664] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 363.344234][T14664] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 363.507426][T14675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 363.514966][T14675] IPv6: NLM_F_CREATE should be set when creating new route [ 363.522334][T14675] IPv6: NLM_F_CREATE should be set when creating new route [ 363.567888][T14667] bond12: entered promiscuous mode [ 363.573592][T14667] 8021q: adding VLAN 0 to HW filter on device bond12 [ 363.600300][T14675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 363.681054][T14670] 8021q: adding VLAN 0 to HW filter on device bond12 [ 363.703580][T14670] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address [ 363.723234][T14670] bond12: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 363.766289][T14670] bond12: (slave wireguard0): making interface the new active one [ 363.774991][T14670] wireguard0: entered promiscuous mode [ 363.782155][T14670] bond12: (slave wireguard0): Enslaving as an active interface with an up link [ 363.929676][T14693] netlink: 'syz.2.2397': attribute type 29 has an invalid length. [ 363.959972][T14693] netlink: 'syz.2.2397': attribute type 29 has an invalid length. [ 364.200391][T14702] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20002 [ 364.367192][T14707] syzkaller0 speed is unknown, defaulting to 1000 [ 364.389645][T14708] syzkaller0 speed is unknown, defaulting to 1000 [ 364.462371][T14719] net_ratelimit: 58 callbacks suppressed [ 364.462395][T14719] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 364.506553][ T5161] Bluetooth: hci0: command 0x0406 tx timeout [ 364.513827][ T5851] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 364.950796][T14736] __nla_validate_parse: 4 callbacks suppressed [ 364.950897][T14736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2409'. [ 365.143535][T14739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2411'. [ 365.156851][ T5846] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 365.163408][ T5846] Bluetooth: hci2: command 0x0401 tx timeout [ 365.517570][T14756] sctp: [Deprecated]: syz.0.2417 (pid 14756) Use of int in maxseg socket option. [ 365.517570][T14756] Use struct sctp_assoc_value instead [ 365.874847][T14765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2419'. [ 365.940342][T14765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2419'. [ 366.050335][T14765] netlink: 'syz.3.2419': attribute type 1 has an invalid length. [ 366.182845][T14773] netlink: 'syz.0.2420': attribute type 2 has an invalid length. [ 366.222210][T14773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.711904][ T10] IPVS: starting estimator thread 0... [ 366.769600][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2425'. [ 366.783289][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2425'. [ 366.795643][T14797] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 366.819139][T14795] IPVS: using max 26 ests per chain, 62400 per kthread [ 367.356185][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2431'. [ 367.396140][T14819] netlink: 'syz.1.2431': attribute type 3 has an invalid length. [ 367.415621][T14819] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2431'. [ 367.482657][T14824] netlink: 'syz.0.2435': attribute type 2 has an invalid length. [ 367.521695][T14824] netlink: 'syz.0.2435': attribute type 2 has an invalid length. [ 367.771897][T14833] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2437'. [ 368.073377][T14846] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2441'. [ 368.313024][T14859] syzkaller0: entered promiscuous mode [ 368.323073][T14859] syzkaller0: entered allmulticast mode [ 368.331837][T14852] tipc: Enabled bearer , priority 0 [ 368.356094][T14857] macvlan2: entered promiscuous mode [ 368.367186][T14857] macvlan2: entered allmulticast mode [ 368.471229][T14858] tipc: Resetting bearer [ 368.498675][T14868] netlink: 'syz.2.2447': attribute type 6 has an invalid length. [ 368.532112][T14858] tipc: Disabling bearer [ 368.551741][T14869] netlink: 'syz.2.2447': attribute type 6 has an invalid length. [ 369.265518][T14893] 8021q: adding VLAN 0 to HW filter on device bond7 [ 369.277761][T14905] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 369.706693][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 369.722734][T14916] geneve4: entered promiscuous mode [ 369.735723][T14916] geneve4: entered allmulticast mode [ 370.357657][T14945] __nla_validate_parse: 6 callbacks suppressed [ 370.357681][T14945] netlink: 2394 bytes leftover after parsing attributes in process `syz.4.2470'. [ 370.458281][T14938] netlink: 'syz.4.2470': attribute type 2 has an invalid length. [ 370.466081][T14938] netlink: 'syz.4.2470': attribute type 2 has an invalid length. [ 370.522611][T14938] netlink: 'syz.4.2470': attribute type 2 has an invalid length. [ 370.573891][T14938] netlink: 'syz.4.2470': attribute type 2 has an invalid length. [ 370.597176][T14938] netlink: 'syz.4.2470': attribute type 1 has an invalid length. [ 370.625669][T14938] netlink: 'syz.4.2470': attribute type 1 has an invalid length. [ 370.672312][T14938] netlink: 'syz.4.2470': attribute type 2 has an invalid length. [ 370.696696][T14938] netlink: 'syz.4.2470': attribute type 1 has an invalid length. [ 370.929607][T14975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2478'. [ 371.757707][T15012] netdevsim netdevsim3 : renamed from netdevsim0 [ 371.954138][T15023] tunl0: entered promiscuous mode [ 372.002374][T15026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2492'. [ 372.031633][T15023] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2492'. [ 372.845788][T15071] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2509'. [ 372.895645][T15074] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2511'. [ 372.915717][T15074] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2511'. [ 372.926292][T15077] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2511'. [ 372.940220][T15077] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2511'. [ 373.079862][T15084] syz_tun: entered allmulticast mode [ 373.184278][T15086] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2514'. [ 373.223500][T15088] delete_channel: no stack [ 373.236108][T15087] delete_channel: no stack [ 373.822628][T15119] tipc: Enabling of bearer rejected, failed to enable media [ 373.883832][T15119] openvswitch: netlink: Key type 10512 is out of range max 32 [ 375.718094][T15196] __nla_validate_parse: 5 callbacks suppressed [ 375.718116][T15196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2545'. [ 375.823988][T15196] vlan2: entered promiscuous mode [ 375.857533][T15196] bridge0: entered promiscuous mode [ 375.867419][T15208] validate_nla: 2 callbacks suppressed [ 375.867438][T15208] netlink: 'syz.1.2545': attribute type 1 has an invalid length. [ 375.922101][T15208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2545'. [ 376.712031][T15250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2558'. [ 377.021475][T15262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2564'. [ 377.047815][T15262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2564'. [ 377.130403][T15269] netlink: 'syz.3.2562': attribute type 10 has an invalid length. [ 377.194260][T15259] netlink: set zone limit has 4 unknown bytes [ 377.244567][T15269] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2562'. [ 377.393390][T15283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2566'. [ 377.483166][T15286] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2566'. [ 377.573589][T15268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2563'. [ 377.611706][T15281] lo: entered allmulticast mode [ 377.630535][T15281] lo: left allmulticast mode [ 377.646678][T15283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2566'. [ 377.666230][T15286] hsr_slave_1: left promiscuous mode [ 378.164200][T15312] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 378.603430][T15335] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 378.684894][T15331] can: request_module (can-proto-3) failed. [ 378.704625][T15341] netlink: 'syz.2.2583': attribute type 3 has an invalid length. [ 378.939866][T15348] netlink: 'syz.1.2586': attribute type 10 has an invalid length. [ 378.963420][T15348] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 379.105762][T15358] veth1_vlan: mtu less than device minimum [ 379.172135][T15366] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 379.179488][T15366] IPv6: NLM_F_CREATE should be set when creating new route [ 379.290225][T15368] dvmrp1: entered allmulticast mode [ 379.534881][T15383] netlink: 'syz.4.2597': attribute type 10 has an invalid length. [ 379.791796][T15397] IPVS: Unknown mcast interface: pim6reg0 [ 380.370139][T15405] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 381.213299][T15454] __nla_validate_parse: 9 callbacks suppressed [ 381.213318][T15454] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2613'. [ 381.411251][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2616'. [ 381.420641][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2616'. [ 381.432979][T15463] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 381.442037][T15463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.713760][T15476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2622'. [ 382.170278][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2627'. [ 382.193257][T15499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2627'. [ 382.293963][T15507] netlink: 'syz.3.2628': attribute type 1 has an invalid length. [ 382.513927][ T25] block nbd0: Possible stuck request ffff8880251ee000: control (read@0,1024B). Runtime 270 seconds [ 382.525362][ T25] block nbd0: Possible stuck request ffff8880251ee1c0: control (read@1024,1024B). Runtime 270 seconds [ 382.542795][ T25] block nbd0: Possible stuck request ffff8880251ee380: control (read@2048,1024B). Runtime 270 seconds [ 382.554295][ T25] block nbd0: Possible stuck request ffff8880251ee540: control (read@3072,1024B). Runtime 270 seconds [ 382.733845][T15524] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.329882][T15542] sctp: [Deprecated]: syz.4.2634 (pid 15542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.329882][T15542] Use struct sctp_sack_info instead [ 383.744810][T15566] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2642'. [ 383.773083][T15569] netlink: 'syz.2.2641': attribute type 1 has an invalid length. [ 383.773885][T15566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2642'. [ 383.787313][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 383.830284][T15569] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2641'. [ 383.856244][T15570] netlink: 'syz.2.2641': attribute type 4 has an invalid length. [ 383.867207][T15569] netlink: 'syz.2.2641': attribute type 1 has an invalid length. [ 383.972520][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2643'. [ 384.045876][T15578] netlink: 'syz.2.2646': attribute type 33 has an invalid length. [ 384.058660][T15580] ip6gretap0: entered promiscuous mode [ 384.241358][T15592] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 384.269278][ T9414] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 384.504810][T15605] netlink: 'syz.2.2655': attribute type 21 has an invalid length. [ 385.622386][T15665] netlink: 'syz.3.2667': attribute type 1 has an invalid length. [ 385.647885][T15665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.806309][T15674] team0: No ports can be present during mode change [ 385.873506][T15676] netlink: 'syz.0.2672': attribute type 49 has an invalid length. [ 386.051886][T15681] 8021q: adding VLAN 0 to HW filter on device bond8 [ 386.178668][T15681] macvlan4: entered promiscuous mode [ 386.191220][T15681] macvlan4: entered allmulticast mode [ 386.209554][T15681] bond8: entered promiscuous mode [ 386.222507][T15681] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 386.268198][T15681] bond8: left promiscuous mode [ 386.497319][T15708] __nla_validate_parse: 9 callbacks suppressed [ 386.497338][T15708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2682'. [ 386.625471][T15710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2682'. [ 386.945636][T15724] netlink: 'syz.2.2685': attribute type 1 has an invalid length. [ 386.953546][T15724] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2685'. [ 386.969723][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2685'. [ 387.314658][T15746] tipc: Enabled bearer , priority 24 [ 387.741264][T15764] lo: entered promiscuous mode [ 387.747224][T15764] tunl0: entered promiscuous mode [ 387.752902][T15764] gre0: entered promiscuous mode [ 387.765132][T15764] ip_vti0: entered promiscuous mode [ 387.816689][T15767] bond0: option ad_select: unable to set because the bond device is up [ 388.216357][T15785] netlink: 'syz.3.2701': attribute type 3 has an invalid length. [ 388.232750][T15785] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2701'. [ 388.353953][T15788] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 388.436614][ T10] tipc: Node number set to 2118469564 [ 388.506858][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 389.116609][T15824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2713'. [ 389.363201][T15833] netlink: 'syz.1.2715': attribute type 11 has an invalid length. [ 389.371855][T15833] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.2715'. [ 389.420257][T15836] syzkaller0: entered promiscuous mode [ 389.426019][T15836] syzkaller0: entered allmulticast mode [ 389.442169][T15835] tipc: Enabled bearer , priority 0 [ 389.494604][T15835] tipc: Resetting bearer [ 389.537290][T15835] tipc: Disabling bearer [ 389.655853][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2719'. [ 389.812138][T15854] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 390.337363][T15870] syzkaller0: entered allmulticast mode [ 390.812856][T15897] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2732'. [ 390.889473][T15897] netlink: 212380 bytes leftover after parsing attributes in process `syz.4.2732'. [ 390.902966][T15897] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 390.981485][T15904] batadv_slave_1: entered promiscuous mode [ 391.091910][T15904] batadv_slave_1: left promiscuous mode [ 391.372579][T15926] netlink: 'syz.1.2743': attribute type 5 has an invalid length. [ 391.524938][T15936] netlink: 'syz.3.2745': attribute type 10 has an invalid length. [ 391.671327][T15944] __nla_validate_parse: 1 callbacks suppressed [ 391.671348][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2748'. [ 391.727811][T15949] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2749'. [ 392.276250][T15979] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2754'. [ 392.354076][T15986] netlink: 'syz.1.2757': attribute type 2 has an invalid length. [ 392.581173][T15992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2761'. [ 392.653658][T15998] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2759'. [ 392.658749][T15999] wg1: entered promiscuous mode [ 392.672762][T15999] wg1: entered allmulticast mode [ 393.153073][T16022] netlink: 'syz.0.2768': attribute type 4 has an invalid length. [ 393.898598][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2780'. [ 394.010643][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2781'. [ 394.081229][T16060] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2781'. [ 394.919811][T16083] netlink: 'syz.2.2790': attribute type 8 has an invalid length. [ 395.154549][T16100] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 395.593762][T16118] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2797'. [ 395.609117][T16118] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2797'. [ 395.673000][T16119] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 396.355826][T16152] sctp: [Deprecated]: syz.4.2810 (pid 16152) Use of int in max_burst socket option. [ 396.355826][T16152] Use struct sctp_assoc_value instead [ 396.895939][T16168] netlink: 'syz.4.2815': attribute type 1 has an invalid length. [ 396.924566][T16168] __nla_validate_parse: 3 callbacks suppressed [ 396.924586][T16168] netlink: 15 bytes leftover after parsing attributes in process `syz.4.2815'. [ 397.020434][T16176] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2815'. [ 397.226672][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 397.522630][T16196] netlink: 'syz.1.2824': attribute type 21 has an invalid length. [ 397.543118][T16196] netlink: 'syz.1.2824': attribute type 6 has an invalid length. [ 397.552441][T16196] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2824'. [ 397.586620][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'. [ 397.868519][T16216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2829'. [ 397.907052][T16216] netlink: 'syz.3.2829': attribute type 15 has an invalid length. [ 397.925188][T16220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2827'. [ 397.974503][T16219] netlink: 'syz.0.2831': attribute type 4 has an invalid length. [ 398.009479][T16219] netlink: 'syz.0.2831': attribute type 83 has an invalid length. [ 398.044154][T16224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2832'. [ 398.044154][T16227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2832'. [ 398.044185][T16224] openvswitch: netlink: Flow key attr not present in new flow. [ 398.090142][T16227] openvswitch: netlink: Flow key attr not present in new flow. [ 398.116892][T16226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2833'. [ 398.181283][T16224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2832'. [ 398.346137][T16240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 398.513579][T16227] hsr_slave_1 (unregistering): left promiscuous mode [ 398.831335][T16264] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.838857][T16264] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.860411][T16263] sctp: [Deprecated]: syz.1.2842 (pid 16263) Use of struct sctp_assoc_value in delayed_ack socket option. [ 398.860411][T16263] Use struct sctp_sack_info instead [ 398.882149][T16267] netlink: 'syz.2.2843': attribute type 1 has an invalid length. [ 399.035700][T16266] bond5: (slave gretap1): making interface the new active one [ 399.062061][T16266] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 399.433891][T16284] bond6: entered promiscuous mode [ 399.441171][T16284] bond6: entered allmulticast mode [ 399.475695][T16284] 8021q: adding VLAN 0 to HW filter on device bond6 [ 399.904777][T16284] bond6 (unregistering): Released all slaves [ 399.924873][T16294] netlink: 'syz.4.2852': attribute type 2 has an invalid length. [ 400.375295][T16336] tipc: Enabled bearer , priority 0 [ 400.403432][T16347] netlink: 'syz.1.2864': attribute type 3 has an invalid length. [ 400.436597][T16347] netlink: 'syz.1.2864': attribute type 3 has an invalid length. [ 400.480473][T16336] syzkaller0: entered promiscuous mode [ 400.486091][T16336] syzkaller0: entered allmulticast mode [ 400.505291][T16343] macvlan0: entered promiscuous mode [ 400.524447][T16343] macvlan0: entered allmulticast mode [ 400.576960][T16336] tipc: Resetting bearer [ 400.612540][T16334] tipc: Resetting bearer [ 400.655027][T16334] tipc: Disabling bearer [ 400.697462][T16355] netlink: 'syz.0.2866': attribute type 4 has an invalid length. [ 400.822607][T16352] syzkaller0: entered promiscuous mode [ 400.828382][T16352] syzkaller0: entered allmulticast mode [ 401.292174][T16392] netlink: 'syz.0.2877': attribute type 4 has an invalid length. [ 403.062323][T16411] __nla_validate_parse: 11 callbacks suppressed [ 403.062345][T16411] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2881'. [ 403.160994][T16417] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2885'. [ 403.535236][T16431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2890'. [ 403.565464][T16437] netlink: 'syz.3.2891': attribute type 33 has an invalid length. [ 403.609984][T16437] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2891'. [ 404.277014][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.437398][ T5841] syz_tun (unregistering): left allmulticast mode [ 404.478057][T16472] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2901'. [ 404.490264][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 404.502449][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 404.520014][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 404.532794][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 404.541288][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 404.635277][ T9425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.647340][ T9425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.787152][T16487] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2905'. [ 404.888496][ T9425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.906319][ T9425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.938849][T16495] netlink: 'syz.4.2908': attribute type 1 has an invalid length. [ 404.966155][T16478] syzkaller0 speed is unknown, defaulting to 1000 [ 405.204910][ T9425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.219612][T16506] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2912'. [ 405.235382][ T9425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.411648][ T9425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.429387][ T9425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.468706][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2915'. [ 405.510537][T16511] netlink: 'syz.2.2915': attribute type 1 has an invalid length. [ 405.531410][T16511] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2915'. [ 405.593468][T16516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.654463][T16516] bond0: (slave rose0): Enslaving as an active interface with an up link [ 405.677460][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2917'. [ 405.947190][ T5161] Bluetooth: hci4: command 0x0405 tx timeout [ 406.290348][ T9425] ------------[ cut here ]------------ [ 406.296129][ T9425] WARNING: CPU: 0 PID: 9425 at net/ipv6/route.c:4857 rt6_multipath_rebalance+0x455/0x8b0 [ 406.306044][ T9425] Modules linked in: [ 406.310302][ T9425] CPU: 0 UID: 0 PID: 9425 Comm: kworker/u8:17 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 406.322388][ T9425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.332782][ T9425] Workqueue: netns cleanup_net [ 406.337923][ T9425] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 406.344308][ T9425] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 9d c3 fb f7 e9 78 fe ff ff e8 33 a1 98 f7 eb 05 e8 2c a1 98 f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 85 9d 4b 01 [ 406.364198][ T9425] RSP: 0018:ffffc9001b5fefc0 EFLAGS: 00010293 [ 406.370349][ T9425] RAX: ffffffff8a270f7d RBX: ffff8880585d0c00 RCX: ffff888063fa0000 [ 406.378383][ T9425] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 406.386421][ T9425] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 406.394519][ T9425] R10: dffffc0000000000 R11: fffff520036bfdf0 R12: ffff8880585d0cde [ 406.402603][ T9425] R13: ffff8880585d0c90 R14: 0000000000000000 R15: 1ffff1100b0ba192 [ 406.410675][ T9425] FS: 0000000000000000(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 406.419995][ T9425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.426657][ T9425] CR2: 000000110c38a934 CR3: 0000000063086000 CR4: 00000000003526f0 [ 406.434693][ T9425] Call Trace: [ 406.438060][ T9425] [ 406.441028][ T9425] fib6_ifdown+0x401/0x4c0 [ 406.445498][ T9425] ? __pfx_fib6_ifdown+0x10/0x10 [ 406.450530][ T9425] fib6_clean_node+0x24d/0x590 [ 406.455422][ T9425] ? __pfx_fib6_clean_node+0x10/0x10 [ 406.460801][ T9425] ? __lock_acquire+0xab9/0xd20 [ 406.465791][ T9425] ? __local_bh_enable_ip+0x12d/0x1c0 [ 406.471461][ T9425] fib6_walk_continue+0x678/0x910 [ 406.476628][ T9425] fib6_walk+0x149/0x290 [ 406.480929][ T9425] __fib6_clean_all+0x234/0x380 [ 406.486080][ T9425] ? __fib6_clean_all+0x9b/0x380 [ 406.491131][ T9425] ? __pfx_fib6_ifdown+0x10/0x10 [ 406.496129][ T9425] ? __pfx___fib6_clean_all+0x10/0x10 [ 406.501592][ T9425] ? __pfx_fib6_clean_node+0x10/0x10 [ 406.506956][ T9425] ? __pfx_fib6_ifdown+0x10/0x10 [ 406.511996][ T9425] ? __mutex_trylock_common+0x153/0x260 [ 406.517640][ T9425] rt6_disable_ip+0x120/0x720 [ 406.522385][ T9425] ? rcu_is_watching+0x15/0xb0 [ 406.527560][ T9425] ? trace_contention_end+0x39/0x120 [ 406.532877][ T9425] ? __pfx_rt6_disable_ip+0x10/0x10 [ 406.538259][ T9425] addrconf_ifdown+0x15d/0x1880 [ 406.543265][ T9425] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 406.549007][ T9425] ? tls_dev_event+0x717/0xec0 [ 406.553828][ T9425] ? __pfx_addrconf_ifdown+0x10/0x10 [ 406.559221][ T9425] addrconf_notify+0x1bc/0x1010 [ 406.564312][ T9425] notifier_call_chain+0x1b3/0x3e0 [ 406.569519][ T9425] netif_close_many+0x29c/0x410 [ 406.574419][ T9425] ? __pfx_netif_close_many+0x10/0x10 [ 406.579897][ T9425] unregister_netdevice_many_notify+0x7b9/0x1ff0 [ 406.586429][ T9425] ? unregister_netdevice_queue+0x1b3/0x380 [ 406.592375][ T9425] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 406.599335][ T9425] ? __pfx_call_rcu+0x10/0x10 [ 406.604052][ T9425] ? net_generic+0x1e/0x240 [ 406.608680][ T9425] ? remove_nexthop+0xdf/0x180 [ 406.613484][ T9425] ops_undo_list+0x3dc/0x990 [ 406.618173][ T9425] ? __pfx_ops_undo_list+0x10/0x10 [ 406.623335][ T9425] ? do_raw_spin_unlock+0x122/0x240 [ 406.628617][ T9425] cleanup_net+0x4c5/0x800 [ 406.633156][ T9425] ? __pfx_cleanup_net+0x10/0x10 [ 406.638180][ T9425] ? _raw_spin_unlock_irq+0x23/0x50 [ 406.643409][ T9425] ? process_scheduled_works+0x9ef/0x17b0 [ 406.649213][ T9425] ? process_scheduled_works+0x9ef/0x17b0 [ 406.654982][ T9425] process_scheduled_works+0xae1/0x17b0 [ 406.660671][ T9425] ? __pfx_process_scheduled_works+0x10/0x10 [ 406.666749][ T9425] worker_thread+0x8a0/0xda0 [ 406.671416][ T9425] kthread+0x70e/0x8a0 [ 406.675519][ T9425] ? __pfx_worker_thread+0x10/0x10 [ 406.680726][ T9425] ? __pfx_kthread+0x10/0x10 [ 406.685352][ T9425] ? _raw_spin_unlock_irq+0x23/0x50 [ 406.690645][ T9425] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.695969][ T9425] ? __pfx_kthread+0x10/0x10 [ 406.700667][ T9425] ret_from_fork+0x3fc/0x770 [ 406.705339][ T9425] ? __pfx_ret_from_fork+0x10/0x10 [ 406.710665][ T9425] ? __switch_to_asm+0x39/0x70 [ 406.715471][ T9425] ? __switch_to_asm+0x33/0x70 [ 406.720433][ T9425] ? __pfx_kthread+0x10/0x10 [ 406.725066][ T9425] ret_from_fork_asm+0x1a/0x30 [ 406.730024][ T9425] [ 406.733074][ T9425] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 406.740385][ T9425] CPU: 0 UID: 0 PID: 9425 Comm: kworker/u8:17 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 406.752310][ T9425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.762493][ T9425] Workqueue: netns cleanup_net [ 406.767310][ T9425] Call Trace: [ 406.770619][ T9425] [ 406.773582][ T9425] dump_stack_lvl+0x99/0x250 [ 406.778208][ T9425] ? __asan_memcpy+0x40/0x70 [ 406.782838][ T9425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.788080][ T9425] ? __pfx__printk+0x10/0x10 [ 406.792728][ T9425] panic+0x2db/0x790 [ 406.796669][ T9425] ? __pfx_panic+0x10/0x10 [ 406.801381][ T9425] ? show_trace_log_lvl+0x4fb/0x550 [ 406.806642][ T9425] ? ret_from_fork_asm+0x1a/0x30 [ 406.811716][ T9425] __warn+0x31b/0x4b0 [ 406.815751][ T9425] ? rt6_multipath_rebalance+0x455/0x8b0 [ 406.821424][ T9425] ? rt6_multipath_rebalance+0x455/0x8b0 [ 406.827093][ T9425] report_bug+0x2be/0x4f0 [ 406.831549][ T9425] ? rt6_multipath_rebalance+0x455/0x8b0 [ 406.837555][ T9425] ? rt6_multipath_rebalance+0x455/0x8b0 [ 406.843201][ T9425] ? rt6_multipath_rebalance+0x457/0x8b0 [ 406.849218][ T9425] handle_bug+0x84/0x160 [ 406.853503][ T9425] exc_invalid_op+0x1a/0x50 [ 406.858039][ T9425] asm_exc_invalid_op+0x1a/0x20 [ 406.862913][ T9425] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 406.869172][ T9425] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 9d c3 fb f7 e9 78 fe ff ff e8 33 a1 98 f7 eb 05 e8 2c a1 98 f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 85 9d 4b 01 [ 406.888797][ T9425] RSP: 0018:ffffc9001b5fefc0 EFLAGS: 00010293 [ 406.894930][ T9425] RAX: ffffffff8a270f7d RBX: ffff8880585d0c00 RCX: ffff888063fa0000 [ 406.902907][ T9425] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 406.910883][ T9425] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 406.918866][ T9425] R10: dffffc0000000000 R11: fffff520036bfdf0 R12: ffff8880585d0cde [ 406.926939][ T9425] R13: ffff8880585d0c90 R14: 0000000000000000 R15: 1ffff1100b0ba192 [ 406.934938][ T9425] ? rt6_multipath_rebalance+0x44d/0x8b0 [ 406.940615][ T9425] fib6_ifdown+0x401/0x4c0 [ 406.945049][ T9425] ? __pfx_fib6_ifdown+0x10/0x10 [ 406.949995][ T9425] fib6_clean_node+0x24d/0x590 [ 406.954768][ T9425] ? __pfx_fib6_clean_node+0x10/0x10 [ 406.960057][ T9425] ? __lock_acquire+0xab9/0xd20 [ 406.964923][ T9425] ? __local_bh_enable_ip+0x12d/0x1c0 [ 406.970423][ T9425] fib6_walk_continue+0x678/0x910 [ 406.975499][ T9425] fib6_walk+0x149/0x290 [ 406.979774][ T9425] __fib6_clean_all+0x234/0x380 [ 406.984637][ T9425] ? __fib6_clean_all+0x9b/0x380 [ 406.989590][ T9425] ? __pfx_fib6_ifdown+0x10/0x10 [ 406.994712][ T9425] ? __pfx___fib6_clean_all+0x10/0x10 [ 407.000103][ T9425] ? __pfx_fib6_clean_node+0x10/0x10 [ 407.005395][ T9425] ? __pfx_fib6_ifdown+0x10/0x10 [ 407.010348][ T9425] ? __mutex_trylock_common+0x153/0x260 [ 407.015912][ T9425] rt6_disable_ip+0x120/0x720 [ 407.020605][ T9425] ? rcu_is_watching+0x15/0xb0 [ 407.025392][ T9425] ? trace_contention_end+0x39/0x120 [ 407.030684][ T9425] ? __pfx_rt6_disable_ip+0x10/0x10 [ 407.036000][ T9425] addrconf_ifdown+0x15d/0x1880 [ 407.040856][ T9425] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 407.046533][ T9425] ? tls_dev_event+0x717/0xec0 [ 407.051347][ T9425] ? __pfx_addrconf_ifdown+0x10/0x10 [ 407.056935][ T9425] addrconf_notify+0x1bc/0x1010 [ 407.061826][ T9425] notifier_call_chain+0x1b3/0x3e0 [ 407.066959][ T9425] netif_close_many+0x29c/0x410 [ 407.071830][ T9425] ? __pfx_netif_close_many+0x10/0x10 [ 407.077313][ T9425] unregister_netdevice_many_notify+0x7b9/0x1ff0 [ 407.083748][ T9425] ? unregister_netdevice_queue+0x1b3/0x380 [ 407.089653][ T9425] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 407.096431][ T9425] ? __pfx_call_rcu+0x10/0x10 [ 407.101121][ T9425] ? net_generic+0x1e/0x240 [ 407.105636][ T9425] ? remove_nexthop+0xdf/0x180 [ 407.110525][ T9425] ops_undo_list+0x3dc/0x990 [ 407.115259][ T9425] ? __pfx_ops_undo_list+0x10/0x10 [ 407.120403][ T9425] ? do_raw_spin_unlock+0x122/0x240 [ 407.125629][ T9425] cleanup_net+0x4c5/0x800 [ 407.130154][ T9425] ? __pfx_cleanup_net+0x10/0x10 [ 407.135118][ T9425] ? _raw_spin_unlock_irq+0x23/0x50 [ 407.140329][ T9425] ? process_scheduled_works+0x9ef/0x17b0 [ 407.146145][ T9425] ? process_scheduled_works+0x9ef/0x17b0 [ 407.151876][ T9425] process_scheduled_works+0xae1/0x17b0 [ 407.157468][ T9425] ? __pfx_process_scheduled_works+0x10/0x10 [ 407.163474][ T9425] worker_thread+0x8a0/0xda0 [ 407.168620][ T9425] kthread+0x70e/0x8a0 [ 407.172707][ T9425] ? __pfx_worker_thread+0x10/0x10 [ 407.177837][ T9425] ? __pfx_kthread+0x10/0x10 [ 407.182441][ T9425] ? _raw_spin_unlock_irq+0x23/0x50 [ 407.187655][ T9425] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.193133][ T9425] ? __pfx_kthread+0x10/0x10 [ 407.197737][ T9425] ret_from_fork+0x3fc/0x770 [ 407.202346][ T9425] ? __pfx_ret_from_fork+0x10/0x10 [ 407.207565][ T9425] ? __switch_to_asm+0x39/0x70 [ 407.212339][ T9425] ? __switch_to_asm+0x33/0x70 [ 407.217104][ T9425] ? __pfx_kthread+0x10/0x10 [ 407.221702][ T9425] ret_from_fork_asm+0x1a/0x30 [ 407.226491][ T9425] [ 407.230044][ T9425] Kernel Offset: disabled [ 407.234401][ T9425] Rebooting in 86400 seconds..