last executing test programs: 3.6162831s ago: executing program 1 (id=2490): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="14c306043f5e58150c"], 0x14}}, 0x0) 3.364231466s ago: executing program 1 (id=2493): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000200)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f80064c0a0000000d0085a178d0bf46d32345653600648d0a000500ebec0cff3959547f509058ba96c902000000004a32000400160009000a0000000000e000e218d1ddf66ed538f252325012f567fb276a4d98cde2ea79", 0x78, 0x20000804, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x11b) 2.071424358s ago: executing program 1 (id=2495): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x4, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}]}, 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x120404}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10, 0x46}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 1.820210138s ago: executing program 2 (id=2501): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x30, 0x18, 0x1, 0x70bd28, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x5}}}}]}, 0x30}}, 0x0) 1.713657055s ago: executing program 2 (id=2503): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) read(r1, 0x0, 0x0) read(r1, 0x0, 0x0) write$ppp(r1, &(0x7f0000000200)="bc72", 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbf7, {0x0, 0x0, 0x0, r3, {0xfff1}, {0x2, 0xd}, {0xe, 0x9}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket(0x1d, 0x2, 0x8) 1.664002194s ago: executing program 4 (id=2504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00'}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000002380)={0x0, 0x1, 0x6, @broadcast}, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r9, 0x25, 0x0, @void}, 0x10) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)}, 0x40840) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r12, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r13, 0x300, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0xc94}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x20000000) 1.410744748s ago: executing program 0 (id=2507): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af0bfcb00807f0223d93947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9b51f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e53adaa1069a9fbd4a97bd32fe9d876604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d9658003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c0500"/4296], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r5, 0x8b2c, &(0x7f0000000040)) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000012c0)={@cgroup=r3, 0xffffffffffffffff, 0x2f, 0x10, 0x4}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0x3}, {0xffff, 0xf}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "1f8271b57326d2cd06c77f7141082f8bc18164a8cde63d55c42552f43f2cb0126f46de26c849626f8f1e92ec1693d6580135c73acfe420c078830b68732dd35588582d1623a87e1c705a6260fccb8a9723b1299a305b1fe6d1858aad80f29d43bc45d44ee93b8a1cd5a2f7bd1c8d4711330bd8e17da2ca0f428712c1f913fd0526a82497ee4888b2695491dabe3af483ec6c939b9ab1893cada806b245f320eeb8005c6a6b520e65a4449408ae841b548e6e309f3b9ad5fbd764d7338052495f89a82be087b692eb11f5b9153d0a3f22b5586c2078662e25d9ab57d339904f6e824fc2b705ac50cde174f48bb04e934ea306e91be9343d09e05192691250e303"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f00000000c0)={r10, 0xff, 0x30}, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001240)={0x0, 0x6, 0x8000, 0xb, 0x4, 0x2f, 0xe3f, 0x4, r10}, &(0x7f0000001280)=0x20) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYBLOB="01980000000000002000128008000100736974001400028006000e", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRES32=r7], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)="5cd996c9ec9427b08ea9d80a9657d9d6f1765143615824d3357dde57bc5642ee288123d4d718ba354421eb4ce6029f87510b452b678f60e59d428c7906b1e7e6caa4b438fc6e1c86fd4c2ba92002412f0f25c0f84403e8096441a48fe24c88afe87455f6471f4fa65a3ce38c5f1c6d88291402006fb621131f5bd3c68fa1c67ea7150659ffbe8776be6f462f4f1f6fb76fac79776bf823603f99d4b8c8eed73934436d63f6fbf0fac2dceffa4651ad222fa81ea48952f179a9fd8817", &(0x7f00000000c0)="b0a490541b6ada198bb0decc1e8773a204b0ee9dca9dadc4617fb7394afddc01d4f05c0ed44cf38f73dded4117cae3f9f5bacc7d", 0x4af, r11}, 0x38) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r12, 0x0, 0x16, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x728a, r11}, 0x38) 1.320295505s ago: executing program 4 (id=2509): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000480)=@ethtool_gstrings={0x1b, 0x8}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) 1.299055966s ago: executing program 4 (id=2510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x440000, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x440000, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x2, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004044}, 0x20040041) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={0x14, r4, 0xcc071acbf25dbf8f}, 0x14}}, 0x20040880) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) r5 = socket(0x14, 0x2, 0x4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX(r5, 0x61d1, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)=0x28) (async) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)=0x28) 1.29737001s ago: executing program 0 (id=2511): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r5, &(0x7f0000000300)="9552f8", 0x3, 0x801, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r5, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1}, &(0x7f0000000040)=0x47) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x561b}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) getsockopt$inet6_buf(r0, 0x29, 0x1a, 0x0, &(0x7f00000001c0)) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = getgid() sendmsg$netlink(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001000)={0x1314, 0x3e, 0x10, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x1c, 0x48, 0x0, 0x1, [@nested={0x4, 0x4c}, @typed={0xb, 0x8b, 0x0, 0x0, @str='*,$.,\'\x00'}, @typed={0x8, 0xb0, 0x0, 0x0, @pid}]}, @nested={0x10c3, 0xa6, 0x0, 0x1, [@nested={0x4, 0x10}, @generic="22c5651fbbe2d7cf1a04916354724d6456a03749d1cb28f6b8f8a758241022b28671f1e8a15c98b32ef06ee8a6a386ca0fafb28f6a0a7aefd25fa3f051a3bf370b11effde29b7b28186d97a50458108d4b9f5f5b233fd4a9c2f6ab7a99e7fd38acc9a3de4065d3cdd670997071f6534310c8d63058f143e5c5b7248beba365a0339e85a5dd7e354a53a432fca2a0ae41107c829c8f63f3713f3b1eee04cd47f09a78147fc13800314be9a973cfeae099582c96d67ab5415a7aed94bead9e75124d307db73f97ee28a0f0ab00f1a91573fcf0683793abcf9c570a63bad12b05c49591c05567dcaa3eebeaee97718bd238efe73b910956de4179a6c4677c83dd3808e6c1292f3d67e944a319d42b0594aebd6998a01346a7df398a6a1f35d5b3cd20fe84e64e90a0cf19da2adcb0ae0a326ff9d7bc029862c1c0b6a7e015561fa07eb685d4cf9a9ca694a6c45459ce596000af2cdf11d5751e1ca2564ac9d8b2a2c494abd8203125456ff89fb7efefe88f8aca5a02efbd711ce760e2733b8e84e87367589f35327e5252b2004be568e9495b6f21d0353a911fb129a0b594d1fc5754be9ac17ec62228a737afa656f15ee1093250f8dc0fc73e9cde67ddb03751bea5258475ffe690ffd485a744433f056567b17a899b5bc130f101754ffc8336e1f7095ea21529b2afe1d489b55af511067dbc09dc4629eab43b45757dbe518cd54088ac3f7e98b33f43915126fb1e19eb99ba1ebfa0fc9f03fb2add65213fa2bbc1fdef7bcdd19f85cb7592f73604bf88805a33f44bac8f7fe35fdf0d76e9505b38dd94edc1aecd8c29c183b4ef23a94c2eff6121ce95537bec8557160fe87f7c2666cee8c1e8a59023ae06aabc163c0843fbde7da44927de3d1751c4c711a16e017cb2fb5f8771a00c55488916c158939825f6c2aaaf2151b1f6a352efa49ff55a4b6c046bb162a98c49cfa40da55e48f6b41abd00536fe41e53b1498e53290aabad10915db0dc9dae354ed8d3047b62867c55dc6643cb56b6f81092e7a9df3903ed565707d0a615d523fd18f0abc5465d79a6ed06099af2ebffc28e83a1e5ab7f913bca15475b359de5b944679eebe401d75f27f5bff22e2cd750fec57030661b16725e578f2440f4a62bce0f36b39fac2a3582279d6df6902f3064223bc8541940af9bd1f6eb7b69d1f7509848224042746f9d449ff04632ed280038cc5bb132ef28915e367e981e055a821ca3963ce6be07e12e69c8de1a8ece3c7f70e45c07c8e12d0d451841b867f30172d2441168d838b593c2493256b3355edf3662d64a1dfac65d4756b5f8754afd214805a0a4872a7dd9e1cf7f4ce293997dc04822dca28c3aee2698deddbe0aa03876e3b4d505af004fcfcdc3fe91a88a6658edeec9df1c8b0ee5951e09b744f6fbd1f33ba925bd8c9198ef573e76d992e9ed021a05f73b24b4293142299ba6187fe183efddcf8918dadd85f71405c2697cb95c9109864d5f0e85bec6b4d41c943ecad59818969f0dba18c0154269f628524518aaa90bcd4babd94c4fca1ae48a5934414610231df6c5bbaa26c0de4eb5a1251d62c9efb3ed35f7de33d88413231f51b7f46c51afc98dfe397ac2fc6b7bc2bf5f583ad53ad5b3ceef9354ad8504413ff964b73bbc2dda9dc4fba197756aebc32d7deefcc6f964604f72f4da682481898290d6ac3fc95bb1c2433b508c59e5a0c52b07726fec667f71f32e528d50afb9c98c1dbb1f31841604d6f62e82d2b2dae5e43088000f87c070d919471bbf4cbfec8514c0a2c73b30374714ac0a339b9bc74e871629293df4417ca10e1ae6384735f9ce1fb53c78230d5095dae4346ca9ec2e9cee61e7c8b67b342d63dd966ef71ce30d5f63b4a2d9dc75bfc466043e1d04d9866eeda7dd602e96393f82e6d4188c75234ff9d35546cc384e8da8672c3fdfc0d74cee323d20f1480c7923b6548d091f3a2916a9ac28260b0b2883d8944fb7d30bdeb00658b13f2e21eecb7ab1755e0b837057617221c57fc28411a83f099413a566d68e23c5182dcc98e70db20d0370f15d9a0a9954a6825f1ddaa0f1dc3ab480fe3d9effda49e14995d2a9fd7cddabea0e549e562e5d8c81fc8f0dc09416d054ffe82d769c58bc3de930f5a5f6eb4ebd693e93d2d0f3c78d4ea5fbf5af9636a30e86ff0e92e52fbd5fa92b7ca13b6bd5b293020a0d748d5f35a797a68069129b5b59a4621102eb0fa07b1dab505dc2344ceeb0b7967a79c6d6ee44ee5be5e6c32aeb729938f8e52c03bb62d53259adfe43fa7e3fccb86c0c12d26bd3d632916d5e74adfc8688f5d3f4a52849af2ebd906164c80fc218064dcee39f6fb11e13a68888242e6befdadf27bdc1a36ae8cf69abeb6a1f18c7819717171dc0c920071650bb033bbf70909aa70f6bdc814fa536c25c9c49cdecd90c1b4d8932d070cc5fa54acf0278887e077340f9f1a9d1a6052fc7cb9c39540cddb41094685cd5188025e3076c45c2b23a0600d04cb9f8ce0c112dc2cb3a97f954b2541bb8d374d94a8363a2f42143e7a1f573268477406ce3e2d7e1b1d0d5217f4ab88fcb41cd42de459efa827c00a2e0ec8557516f0d87cdbb8cddbb66e7f81a92722df791348d4a345b7671276f93c0e1953b04dbe0f9a665f126a2d0800c91373756fd9c80e0c3276c38738149597b26f90ab308d000b0239aecd10ad71ed0b72912d136decaacf1492d7e8af746692b6452978c952c73093c2bfe0ae1af9f462cfcdfa8446e3e5752c8cb4dae01c11afeeb354d3f44571023104a07f7bf1d420e3babbb4227f124f59abc3a16f85330d1a2173cf0abf6764ef7f8298493a78a4cd549a97ddc85b635207ddc6775fba92fc20ac6675888d887552832c584364cae40dae0cc9e34e39f5087e36864913cc00628bc436636e48efcf79aa3a2047b956403be2cc06b2180d7bcfbb21eb652f3b50ca9ecb75132e3f528df08819e70f945eb68406187b6e8037a132324e24a871824e2dff2f789c72d4764eefde266dc8bea9a1184072d6500b888003e6b3b62b3f739085592572a7746e70fa88e23bea08b1d1a6c5c0ac7fdfdd4f6e7bf4bd5d4622ef812179aa200c3f904bd1c587053ad7c7258575e7bd664f6f00db25aa9012e395542b239d5919583baba149485d2c168deada3cbbd2097d3fdcab4c36b58ebd979d28956ec055cd54163c637d04153354f96337e9a7d63e70364bb654cef403179e68770205438445eff8d12c6f08c2ace7ea844dbc21499c25f2c46b78ac12a850261917fe81e74bd757fdfc6f3d79989a20b81b491757f19aa164575870ed56532f032ec1d10100790d3c7e75b12e1c16cdc343a503aea9143889e4045fee4364c72b478b33d110c77d7366540eb99bb2a765a2cbc4f8a4c8ff3558c60022b06f566df0f16d18ea9808924ca2ef4c57ce69b3151acf34689f095147a100f98a5e827e8e88263e4cd10793279cc6597bc434772111327338cc49fb293742e8e7619be49841da7e5038145e9b1a69eae19196a1e714913dfdd35e10d9e39da91698fd13eb78f2b6ff1cd82ddd53c8ecaa425c4d2846b90541bab8f2b8967cde962c39f6faa99884497a2abe7612c9784a0b73dd939eca2e7451f198bfdfc3dcc6e258ecc5526ca0b58dfa23b82634603517727562c3c23346c10a55081dd30c8447f185a79acbafa13c135621bbe308bb1eae8265369f9788603390389f122793a4a45638a6382006fc88f36df1a26cb826b2f11040097a5769eb3983d8efc2efff20e04572357f32d510b89ba901f2eec7116e6b6cb1183ad60d37cdad6d7e07ccd197f267a8cfcc828608e5965794ffa2c9e10ec62968709b05a014a9eaf4589b3cc0fa0587816316e2a7b3d7e0e40127e4623493da5a7246fbca79da9dfa604ac719496b83122876c58a0ad2a56f5fec59a983bb5642156b11957b2386b86ddbbc066d2486494113703ff7e36e43f41b9211b450f9078524afd54e98f65edc652f1136bcf6f5ca25ab39f5dbf651c7a11f04cededf9c7d60ca30d936e3cc0d6dace135c8811649833477591d513805e77feb3d8dc94be5ecf2682525bf0aa72395b087b8bae57771415fff3151cf1f7e28f21269efc44609b0f47c1a044accee3fdaffa2375541bf57d798c152785d10b74c396cda3709e43978010c8658560dca40204c7dc19138027bad8ecb8994d590254cf61651e3f51c7a1d4584ab09c6ce017c32974a2fee1e7c04135376b6fff0ef8cbf0e2c5a624c4b7dc40a91435785d553a1bcb4f28ad9487d6916e5c8d9fddc34189ffbb121c80d2b1bdc3fcdd25ae821b9f9a3131d0e3932418d027ca242ed179fa7cf159b0ea9773adc55a58ff02a538edf493fa9733aefb883e7f073171635d7fae4d91846852d83851ceab4b4fa8db185cea9558e9794a2139e0e59bad527fecdd2c0f275ed0dd5fbe7543fee7a84d60212c6009b788aee9df9062b01395f51d73f47790a012fc30e28b1786afe447f1aa552403d691aa08a49623f53a29eb1e57e165c046ff57bcdd6b04ea66ed7051c7b731d3a5b33f415317704902f76cfd3f631c4c83b0acfb66f2e393bd8cb75261d5e7ce88a6bbfb23cc1bcc7ee5185bcfeb40b27a244e3d64375e7e04651c22e30f16b1ad7e48fc6f95864b5f14204b9f78affb296f5dad72eb29a71f043ece85c7e373abda382a0dbd287c359ae5b226a4e18cd12d31d45d59db9633cf29f210ad60842c281681edd7d89f234ce2de941803b73fd057db2e432b79c5071b8ea136baea24157c2f2e4f9445e48b5e3f3ab39caeb09cb1b5a8169ca6017f9be380ee641327dd07c19e002f641a2db7ddd973765d5ea11713d7a6e353c37f646479154e2a2ffed1614c5c9d08d29cd140b88061c7116a00e6c87b71f10996b2fd83f014ac36d7d46a3c3ce3029d3eca050f25875855f70e30ebc651cb527e831a55b677314c77c6c8ed5ed572b4e42bb497c270f615494700a7f2b0197b79088dafeae0be2c063a75c33643d2419a32bf928153ae32bd47ad82d0722b4e63dbfd65b3f9d6b6025b1546c0442bfbee65a3ecc419aa14803282daa92a0893f9c45a542585c94c1263693fcd59e98ffebf0cb7b7d1243b0868c096235036f45d67ae2ebdc5973e1562c537bce3083c07901a49b4533bbcd5d3402b0c7442c8002af8716b837f41d5b481dd723aca777b7917d5d99f4fab9a8acc1bf700320a531aac71d30aaa0c59295693dfd755b621fe13b20a9ab67d08372230f8a7edb1aeb52e2b4ed94b415b8c39c7ad161e4488838f2a9218727d143693e07f3bcbabeb9eeb31702f3ee004e1eec14e766460479bf60ecd47184449a7a85404e48456fbd5d509bcc54788bf51eb97cbe7eb436797606e14ab26bd84c217e1c820a9c0b2ebf977c455f96172ff9bc5f2197522bb611b6081007d8762fec2082a5302b8b341c778d393a150d07b564ff676a9edab54934595d800ed9a50c7a09d4b5d4fab20a31cce687fa38405d7561d6fb04a15a80626ddb9ef069cc2d4b06063020c7ad516e22c28ff15f500e0fd5388aaddaeb2519c53f855ac73a911dbb8096e9aa16d8ac4355ecb77c11c78a4f496237eed32afc4748b4a7b63345899be589d5cd1afa04a6df5beccfa376571c43e8b780fedefe2c7fc89e7f211354f6454189ddf6c037e8ea63f4f85d5d59310e455f863c8785ea7ce8ee0f817b994a4a13ae4c5ac140c5cf8771616abf404f10cb721283b8e566b84d7b288a6196709bdf181f6651a5082c1e1fe92eeff54c5cbbe", @generic="fb1ffe1dabf170a2eb6116be6bf3a5d5b7d1d8b34cf44d2beb20dd9c07e7e368d889e9caa9eb97d12348ff0ff222f639047d26540406281014fee3708df8816bb3256f7c9b3dea3287a7c848be1426120eb920b46ff262b20995f58c5ff0721ec2dbfbd73c7f4877da8a275c1ca3a1080676221c446710dce8df34a2996c5aae2441965a99d4df82b39bf52a8b80e69b606c8a0cc95fdd296c147cc795a4edecf9549da8b1949f3a6371e607068ba2075f5b66463e5e9b", @nested={0x4, 0x5d}]}, @typed={0xc, 0x11d, 0x0, 0x0, @u64=0x6}, @nested={0x67, 0xbf, 0x0, 0x1, [@generic="e2d95e1fa613757f4d39dbecacdfbe65d65767dc2fb6c5323ec16ec77e27027a05858fad69f53ff53525cf7f909076a98675e86b4f3dfdafd25e6339d77b1fb28e9ce48419f0f7969bf67fef0562f303bcb972944f3152693c8368", @nested={0x4, 0x75}, @typed={0x4, 0x19}]}, @generic="3e6a797541738fb99d3bd1f024ba33e8f84513323996966f9c280cfb9fc7d100d04ac8f8344e9c4e220adeb8d87d862b92f1458dfecaf2aa15fd1ed9b7d8d00aa575a029edc23d267a136621b2dacd787ed40f7a04ce267c9dbea7947f37b7fa90e4b53df3a4b253bbf3b108ad50a6b1f8c96d01a2bb773be95514f652f7e563b7c0dcdbc2d4aed7b3cc3e1c61e869f10956290b8223cb1465df6fb7b2aaa02a3757cd53c63a2ed9b99db7437311d21c96c5e1e608041e54a845c5cb0bb9df63", @generic="71fed49039dd1df6c78cf308db115fe45ea3a8417c90070e4190fa71fcbc831c3e4b0fdd1826e3db0f56eb71ac226c49bed4a72adb0a4ba477c894b7a7dc74baf7df9be19625594eb028e70e382c31104f2d134b43069189fddb4597cff0df287b0ac380601887c0de1fe8c6e1f2f34001fcb274f0532932efccd661f6b88a73b14123396f4652e850615ea118c9b99bb337a7e2f2956d76182b47d059d76f462e3cdfc9fdb91d061f6f0a5f13163486be446ac6ce9723038ef08c85494a65231b26e452d1d5bd3596aaeeec0fee38a7783b2f5fbba113aa67", @typed={0x8, 0xdc, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x7b, 0x0, 0x0, @u32}, @typed={0x4, 0x8f}]}, 0x1314}], 0x1, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r9]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r9, 0xffffffffffffffff, r6]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r8, r8, r1, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r10}}}], 0xa8, 0x80}, 0x40040054) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a0012e2440102800200121f", 0x2e}], 0x1}, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x6, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) getsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x1}, 0x6) r12 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r12, 0x114, 0x2, &(0x7f0000000480)={{&(0x7f0000000400)=""/52, 0x34}, &(0x7f0000000440), 0x40}, 0x20) ioctl$sock_bt_hci(r11, 0x400448ca, 0x0) 1.072083607s ago: executing program 0 (id=2513): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x20000850}, 0x40) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x8) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)="083b0000fdb29a09add7be2d19", 0xd}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=@gettaction={0x28, 0x30, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x28}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="e4000000170a0108000000000000000005000009bc00038008000140000000004000038014000100626f6e6613736c6176655f3000000000140001006873723000000000000000000000000014000100697036677265746170300000000000000800014000000000680003801400010076657468315f746f5f7465616d0000001400010076657468315f6d61637674617000000014000100763101bbd91d467691000000000000001400010070696d726567000000000000000000001400010076657468305f746f5f626f6e640000000c00054000000000000000040800074000000003"], 0xe4}, 0x1, 0x0, 0x0, 0x20040804}, 0x14) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000340)=0x4b) 1.070777899s ago: executing program 1 (id=2514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004804c0001800a000100696e6e65720000003c00028008000240000000840800034000000007080004400002000f0800014000000000180005800e0001007d6d6d656469617465000000040002800900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) r5 = socket(0x2a, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1ff}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9a, 0x7, 0x800, 0x1, 0x1, 0x4, 0x5}}, {0x4}}, {{0x1c, 0x1, {0xe, 0x8, 0xfffa, 0x7f, 0x2, 0xdaf, 0x6, 0x80000}}, {0x4}}]}]}, 0x7c}}, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000000c0)=0x80, 0x4) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r10}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000e}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x844) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4809}, 0x20000000) 1.061962242s ago: executing program 3 (id=2515): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x74, r0, 0x1, 0x0, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @loopback, 0x1002}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x74}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @random="be9689ce9f88", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2d, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @dest_unreach={0x3, 0x11, 0x0, 0x0, 0x4, 0xccce, {0x5, 0x4, 0x2, 0x1, 0xff, 0x67, 0x3, 0xe7, 0x33, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8024000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x158, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe, 0x3, "75e32f3928ae4a051cc7"}, @TIPC_NLA_NODE_ID={0xef, 0x3, "95f10158fc2d29c44b9d7708fe79ee06ac2aa428293cd20159732c9149f8f80bec78af715706a8a10320c20b32dafcd52aae50956cd6b2ffbd16c529c797474727b6c3edcfb7ed9825be8d7cf8c61392bf80a182c2eca716138eefd110be73147f773a6c1cc4299f6611bd212a7e414e285398ed09a4e712163d6d61bf34052db019b52f1ba8d2f188de2fbd0d55d97e9d3878d82b65e64211745346276de6c3e1bd2b4bff2161a31516e148aa6ffd6f5c98e79214c0c879997d59facbd73279536f6eedf113daa10a7bcf47efc0ce3f3c3d661b933905acfb19af0b4891a970357b6480a7a83548396526"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "7d7922c603277df4c52f87171acc5cb0ad1e98d17d"}}]}]}, 0x158}}, 0x20000820) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x74, r0, 0x1, 0x0, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @loopback, 0x1002}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x74}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @random="be9689ce9f88", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2d, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @dest_unreach={0x3, 0x11, 0x0, 0x0, 0x4, 0xccce, {0x5, 0x4, 0x2, 0x1, 0xff, 0x67, 0x3, 0xe7, 0x33, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}}}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) (async) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8024000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x158, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe, 0x3, "75e32f3928ae4a051cc7"}, @TIPC_NLA_NODE_ID={0xef, 0x3, "95f10158fc2d29c44b9d7708fe79ee06ac2aa428293cd20159732c9149f8f80bec78af715706a8a10320c20b32dafcd52aae50956cd6b2ffbd16c529c797474727b6c3edcfb7ed9825be8d7cf8c61392bf80a182c2eca716138eefd110be73147f773a6c1cc4299f6611bd212a7e414e285398ed09a4e712163d6d61bf34052db019b52f1ba8d2f188de2fbd0d55d97e9d3878d82b65e64211745346276de6c3e1bd2b4bff2161a31516e148aa6ffd6f5c98e79214c0c879997d59facbd73279536f6eedf113daa10a7bcf47efc0ce3f3c3d661b933905acfb19af0b4891a970357b6480a7a83548396526"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "7d7922c603277df4c52f87171acc5cb0ad1e98d17d"}}]}]}, 0x158}}, 0x20000820) (async) 1.032214552s ago: executing program 4 (id=2516): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x20000000, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="eb", 0x1}], 0x1}], 0x1, 0x40800) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x40, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}}, 0x20000000) 928.165395ms ago: executing program 3 (id=2517): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r2, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x44}, 0x1, 0x0, 0x0, 0x5000}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x8f, 0x6, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x7800, 0x8000, 0x1, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES64=r2, @ANYRESHEX=r2, @ANYRES8=r0, @ANYRESOCT=r2], &(0x7f0000000040)='GPL\x00', 0x70, 0x0, 0x0, 0x0, 0x2f, '\x00', r3, 0xb}, 0x94) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="050000000000000071116a00000000008510000002000000850000000000000095000000004000009500a50500000000a7664ace88f3284baf71dcbb2b4b93597f6140cc51c69be1716632ceda93db3759730d8e75e39d0f2a4a632779f37ed3533b810aaac5bc2342fdad4195d0b33262e612a44586bb43760f4c160300fd2f7b56aeccce810dd780f165418b21064d5fb25009b49ab193b379af3a629249cf112993c3938e0ef5a93fee6fe1a3cab7c320", @ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x6}, 0x94) 926.170064ms ago: executing program 1 (id=2518): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000004c0)={r5, 0x3, 0x3, "2a9a9e"}, 0xb) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x34, r3, 0x201, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x20040080) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0xef}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x2c}}, 0x0) sendto(r2, &(0x7f00000002c0)="71594df61b7e907d87641e296c81e23be54e01be382bbc532868f805db681e46d562611bb00a58ea08de09a2f9fd6fa6b08684327aaabc4b60634a8643a481b313dada43bd99dce0942591e836d8466c653e14dda7497536d108e3bfc89ef0f5b800f1514e3866fbd20683f1f7450a60006ea1db30fb4f0365a34bdb511038e4ffb2512bd1cd0078e2491a0b1dab3324f5ae1191e0331edebae5bc016ded2dd73272b6aac97f35baff884ed33aa14bfe2302cb20699719edd5decf", 0xbb, 0x58080, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast2}, 0x4, 0x0, 0x6, 0x4}}, 0x80) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x5, 0xffeb}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x6}, {0x3c, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x9c13}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x4, 0xff}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0xb3c8, 0x0, 0x8001}}]}}}]}, 0x1e}}, 0x0) 907.904306ms ago: executing program 3 (id=2519): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) r1 = socket(0x15, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@ipmr_delroute={0x24, 0x19, 0x1, 0x70bd2b, 0x25dfdbf8, {0x80, 0x80, 0x20, 0x5, 0xfe, 0x0, 0xff, 0x0, 0xd00}, [@RTA_PRIORITY={0x8, 0x6, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x2851}, 0x0) sendmsg$nl_route(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x6}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x8f}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x4c}}, 0x0) 790.723397ms ago: executing program 4 (id=2520): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x18367}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x35, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0xfffe, 0x0, 0x0, @local, @rand_addr=' \x01\x00', [], "fafb17c133"}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 663.848459ms ago: executing program 0 (id=2521): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r3, 0x29, 0x2, &(0x7f0000000000)={0x7f80, {{0xa, 0x4e24, 0xc52, @remote, 0x4}}, {{0xa, 0x4e24, 0x73, @mcast1, 0x8}}}, 0x108) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 662.764668ms ago: executing program 2 (id=2522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e73657400002800028008000940000000a7080004400000000008000340000000000900010073797a30000000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) getsockname(r0, &(0x7f0000000100)=@rc={0x1f, @fixed}, &(0x7f00000000c0)=0xd6) 607.898354ms ago: executing program 4 (id=2523): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000500000097000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00'}, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r5) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="b1e7c80000000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) pipe(&(0x7f0000000280)) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="110000000000000000dc3406", @ANYRES32=r6, @ANYRES64=0x0], 0x20) bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000004000000140001800d0001007564703a7379b390b3"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40004) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c00000000000024001280090001007866726d000000001400028008000100030000000800020001000000140003007866726d30"], 0x58}}, 0x0) 593.897192ms ago: executing program 1 (id=2524): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x48800}, 0x20000000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="100000001614016a61"], 0x10}}, 0x0) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r2, 0x0, 0xfffffffc, 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000008b000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendmsg$802154_raw(r6, &(0x7f00000004c0)={&(0x7f0000000240)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000480)={&(0x7f00000002c0)="6e88", 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000004740)=""/4080, 0xff0}, {&(0x7f0000003740)=""/4092, 0xffc}], 0x3}, 0x8}], 0x3, 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) 487.830088ms ago: executing program 3 (id=2525): r0 = socket$kcm(0x10, 0x2, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x4745}, 0x1c) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) socket(0x2d, 0x2, 0x0) (async) r3 = socket(0x2d, 0x2, 0x0) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0xfffffffffffffff9) (async) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0xfffffffffffffff9) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r5, &(0x7f0000000000)="dbc1d8f6f6c31022", 0x8, 0x20008001, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) (async) sendto$inet(r5, &(0x7f0000000000)="dbc1d8f6f6c31022", 0x8, 0x20008001, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/109, 0x6d}, {&(0x7f0000000200)=""/144, 0x90}], 0x4}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 486.057398ms ago: executing program 0 (id=2526): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0009006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000001080008001d000000", 0x24) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000080)={r7, 0x800, 0x6, "2184e34d4650"}, 0xe) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x2, @empty}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={r7, @in6={{0xa, 0x4e23, 0x9, @mcast1}}, 0x80000000, 0x7fff, 0x7fffffff, 0x96, 0xa, 0x8, 0x81}, &(0x7f0000000080)=0x9c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4803}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa1}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 478.076419ms ago: executing program 2 (id=2527): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xc4}]}}}]}, 0x38}}, 0x0) socket(0x2, 0x80805, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000380)={r2, 0x5, 0x2, 0xde92}, &(0x7f00000003c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000380)={r2, 0x5, 0x2, 0xde92}, &(0x7f00000003c0)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 308.669403ms ago: executing program 2 (id=2528): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "e8ffff0700", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0x2) (async) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000000)) 227.795162ms ago: executing program 3 (id=2529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x8, 0x0, r0}, 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0, 0x3f}, 0x28) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff070000140003002e000000000000d700000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a0d00", 0x44, 0x2f, 0xff, @private0, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x32}}}}}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r5, 0x400, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xf01}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r5, 0x408, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000010000000000010000000000000001410000001c001700000000000000006574683a7379a4bee846fe4814f3348345"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r9, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004094}, 0x800) 53.748312ms ago: executing program 0 (id=2530): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000001c00)="b702", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r2, 0x0) (async) socketpair(0x1, 0x7, 0x3, &(0x7f0000000240)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e24, @private=0xa010100}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e23, @private=0xa010102}], 0x40) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r4, 0x10e, 0x8, 0x0, &(0x7f0000000000)) (async) close(r1) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @random="9c38ee464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x11, 0x4, 0x0, @remote}}}}}, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000900000000000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x4ce712b6f95eb07a, 0x20}, 0x94) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x8, 0xd, 0x400, 0x7, 0x87}) 48.121808ms ago: executing program 3 (id=2531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000400000000000900020073797a32000000000c00078008000640000000000500050002000000050001000600000011000300686173683a6e65742c6e6574000000001d7e1bdb90e465168950a559f2627e5ef21ad794f784996739ddf17f296ef5f8acb0106ce5f3"], 0x58}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x881, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001a640)=@delchain={0x624, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x49c, 0x2, [@TCA_MATCHALL_ACT={0x498, 0x2, [@m_sample={0x11c, 0x5, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0xe5, 0x6, "38f25df555191be2c666d9a5f9fbf1c6674d930a6b49548795f779c04738d31476e7b46904303e774f670daac95204b3aa00967b9ec65d764b2e48bd715da197540ac2dbea2e115f4efd22ebb0c4531bf7fcd31b61547bd15f710737fab7ba50f6730bcf7c68fd6f6734dc220ebc37df3b8e187fddc4516e5f783c302bbc133134d2a06ab408a97de6505724f9be2eb62a565a1535810f54b758c56ab347d36db167b672425230830efb7606f51b3a894056ee7b74af7ad106d611b3d7c4a326bbd604993d9eba87f5d9d7c682cf9643bb5648bc70f946ebac22580878bb773b06"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x7}}}}, @m_ctinfo={0x90, 0x1b, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x72a0, 0x4, 0xffffffffeffffff1, 0x2, 0x9}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8001}]}, {0x39, 0x6, "89a75f1f9832982c0a59ad5c7b043805d7ff0d0a67a9df5adf2ac6dab7c5cfad8bbf15a9388f68544ed8dea9946ee57f3ffd502c80"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0x110, 0x1d, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xc7f, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xa96}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x160e, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x400, 0x9, 0x5, 0x3, 0x3bc}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x4, 0xe, 0x2800000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x92a, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xfd0, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x4, 0xfff, 0x4}}]}, {0x5d, 0x6, "015c581fa268e87cd777a21a4aca6176b1acd3c4573cb5b8a04e655698f2a2beb41a6dd4120f7117c00a0e5775ad33bb1e629bea904fa46de53a7a59512190f5b8772a6c1599cf0fd101865d09219c94c1fb32f139037d6237"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x9c, 0x3, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xb, 0x81, 0x2, 0xffffffff, 0x3}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}]}, {0x45, 0x6, "7c3b5bfcb83686732928afc192a22d90d27a9989759a481dd012b504df8599e1385efa6ed3eed4aa4eadeabe7be45721cade4f630ee42bca96886403cdc70c3430"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x13c, 0x16, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0xfffffff7, 0x3, 0xe}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4, 0x1, 0x8}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x0, 0x1, 0x5, 0x3}, 0x3}}]}, {0xaf, 0x6, "605524e3626aca9778df374bbcad3d51d25178b24ec88e3a92acc301747daa26bb3deb8b829e8a55fdb30b1765bad6b2ed28273083ed0a35559ef9dfc77b5bd2e05bd2ccccad0ad73d611653ce29c79832ce1a80c857bc92eb376b42ab09b1778f1bd4400cba36f0002420428ecf149c920e535bc21a81383ab87116a652e6a9f737b5a390799307a1b121ace65bfa0ec1c7d7e4ec7dd74bef4770681bb50c0ab70d8987118f03d1a5bc3e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x144, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x90, 0x1, [@m_mirred={0x5c, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0xd, 0x6, "d527360c37d81b077c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0xa0, 0x1, [@m_ctinfo={0x9c, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x6d, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x624}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="70020000", @ANYRES16=0x0, @ANYRESDEC=r7, @ANYRES32=r7, @ANYBLOB="9255f24ec88faf352b5c3a3845ad44305402028040002400010071758375655f6964000000e500000000000000000000000000a100000000000005000300", @ANYRES32=r5, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRESHEX=r1, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300600d6d0b2158395662726f6164636173740000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c000400baff0b0e06000000f80d002400000080010001b1000000000c00090480000000ffff080707000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r5, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYRES16=r6, @ANYRES32=r7, @ANYBLOB], 0x270}, 0x1, 0x0, 0x0, 0xc800}, 0x4000884) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r11, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000000514010027bd7000fddbdf2508000100000063000800030a0300000008000100020000000800030000000000080001000107000008000300030000000800ee00000000000800030004000000080001000200000008000300040000000800010002000000c174037404000000"], 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x20004001) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r10, 0xd1a}, 0x8) r12 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r12, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001500190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r13, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r14, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r13}, 0x20) 0s ago: executing program 2 (id=2532): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r1, &(0x7f0000000280)=[{&(0x7f0000002040)="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", 0xff1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x303}, "7ab2e06ecca220be", "5753675116c7c020c912e0999bc374c4", "94342dcb", "cd439dfad7c8e8cf"}, 0x28) readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'geneve1\x00'}) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x52}, 0x2) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f00000002c0)) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02590000020000000000000000000000b9e5a54fcb977d584b442c4e792de59d9e790e99bc90bd47f60453d0d7dfa27c9febe88b8aaaa8a50b30b6ccd40143e1265192a6c5705aad0772b293e5529bda38cd28258bbfef6c3b68d76f00"], 0x10}}, 0x44000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000200)={&(0x7f0000000100)=""/239, 0xef, 0xa5, 0x2}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000280)={0x7, 'macvtap0\x00', {0x7}, 0x9}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) kernel console output (not intermixed with test programs): n invalid length. [ 114.150804][ T7526] bond2: (slave erspan0): Device is not bonding slave [ 114.185141][ T7526] bond2: option active_slave: invalid value (erspan0) [ 114.223389][ T7526] bond2 (unregistering): Released all slaves [ 114.261654][ T7534] batadv0: entered promiscuous mode [ 114.269775][ T7534] batadv0: entered allmulticast mode [ 114.280499][ T7534] bridge0: port 4(batadv0) entered blocking state [ 114.288964][ T7534] bridge0: port 4(batadv0) entered disabled state [ 114.299790][ T7534] bridge0: port 4(batadv0) entered blocking state [ 114.306449][ T7534] bridge0: port 4(batadv0) entered forwarding state [ 114.372438][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 114.381941][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 114.663805][ T7542] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 115.148441][ T7584] tipc: Started in network mode [ 115.163844][ T7584] tipc: Node identity 66142fb144a6, cluster identity 4711 [ 115.177252][ T7584] tipc: Enabled bearer , priority 0 [ 115.186810][ T7579] syzkaller0: entered promiscuous mode [ 115.236302][ T7579] syzkaller0: entered allmulticast mode [ 115.301640][ T7583] 8021q: VLANs not supported on ip_vti0 [ 115.341462][ T7592] bridge_slave_0: left allmulticast mode [ 115.365986][ T7592] bridge_slave_0: left promiscuous mode [ 115.382922][ T7592] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.403367][ T7592] bridge_slave_1: left allmulticast mode [ 115.411579][ T7592] bridge_slave_1: left promiscuous mode [ 115.418262][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.433591][ T7592] bond0: (slave bond_slave_0): Releasing backup interface [ 115.458867][ T7592] bond0: (slave bond_slave_1): Releasing backup interface [ 115.502429][ T7592] team0: Port device team_slave_0 removed [ 115.536803][ T7592] team0: Port device team_slave_1 removed [ 115.543557][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.558366][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.581122][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.592878][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.640240][ T7592] bond2: (slave geneve2): Releasing active interface [ 115.733653][ T7594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.777318][ T7579] tipc: Resetting bearer [ 115.783388][ T7576] syzkaller1: entered allmulticast mode [ 115.860713][ T7578] tipc: Resetting bearer [ 115.874863][ T7578] tipc: Disabling bearer [ 116.364171][ T7620] netlink: zone id is out of range [ 116.370195][ T7620] netlink: zone id is out of range [ 116.395007][ T7620] netlink: zone id is out of range [ 116.400808][ T7620] netlink: zone id is out of range [ 116.432985][ T7620] netlink: zone id is out of range [ 116.435466][ T7629] __nla_validate_parse: 8 callbacks suppressed [ 116.435857][ T7629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.457'. [ 116.455913][ T7627] tipc: Enabled bearer , priority 0 [ 116.463192][ T7624] netlink: 7 bytes leftover after parsing attributes in process `syz.0.453'. [ 116.472520][ T7620] netlink: zone id is out of range [ 116.488439][ T7620] netlink: zone id is out of range [ 116.519125][ T7626] tipc: Enabling of bearer rejected, already enabled [ 116.558933][ T7620] netlink: zone id is out of range [ 116.573466][ T7627] syzkaller0: entered promiscuous mode [ 116.591340][ T7627] syzkaller0: entered allmulticast mode [ 116.665420][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.458'. [ 116.736482][ T7627] tipc: Resetting bearer [ 116.817071][ T7645] netlink: 'syz.3.464': attribute type 58 has an invalid length. [ 116.842210][ T7627] tipc: Disabling bearer [ 116.848387][ T7645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.464'. [ 116.921400][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.465'. [ 117.011522][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'. [ 117.074629][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'. [ 117.184500][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'. [ 117.229031][ T7670] netlink: 14 bytes leftover after parsing attributes in process `syz.4.470'. [ 117.234468][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'. [ 117.239897][ T7671] netlink: 'syz.2.471': attribute type 10 has an invalid length. [ 117.362838][ T7684] netlink: 'syz.2.471': attribute type 1 has an invalid length. [ 117.384785][ T7685] netlink: 'syz.0.473': attribute type 5 has an invalid length. [ 117.501328][ T7670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.522660][ T7670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.541386][ T7670] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 117.552535][ T7670] bond0 (unregistering): Released all slaves [ 117.587044][ T7671] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 117.782733][ T7695] netlink: 'syz.0.476': attribute type 4 has an invalid length. [ 117.972197][ T7710] IPVS: Error joining to the multicast group [ 118.356758][ T7726] vxcan1: tx address claim with dlc 0 [ 118.565675][ T7733] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 119.160905][ T7763] netlink: 'syz.3.500': attribute type 1 has an invalid length. [ 119.304674][ T7763] bond1: entered promiscuous mode [ 119.310836][ T7763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.384596][ T7776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.408362][ T7776] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 119.435477][ T7776] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 119.523078][ T7776] bond1: (slave wireguard0): making interface the new active one [ 119.547120][ T7776] wireguard0: entered promiscuous mode [ 119.554806][ T7776] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 119.573054][ T7795] sctp: [Deprecated]: syz.0.503 (pid 7795) Use of int in maxseg socket option. [ 119.573054][ T7795] Use struct sctp_assoc_value instead [ 119.961682][ T7810] IPVS: Scheduler module ip_vs_sip not found [ 119.966717][ T7814] net_ratelimit: 7 callbacks suppressed [ 119.966737][ T7814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.991008][ T7810] netlink: 'syz.3.508': attribute type 7 has an invalid length. [ 120.009556][ T7810] : entered promiscuous mode [ 132.888898][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.895491][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 176.627582][ T7842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.715678][ T7838] team0: No ports can be present during mode change [ 177.028347][ T7865] netlink: 'syz.2.523': attribute type 16 has an invalid length. [ 177.093230][ T7865] netlink: 'syz.2.523': attribute type 17 has an invalid length. [ 177.099217][ T7869] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 177.121289][ T10] IPVS: starting estimator thread 0... [ 177.178081][ T7865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.226953][ T7873] IPVS: using max 28 ests per chain, 67200 per kthread [ 177.277919][ T7881] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 177.487309][ T7891] __nla_validate_parse: 69 callbacks suppressed [ 177.487328][ T7891] netlink: 40 bytes leftover after parsing attributes in process `syz.2.528'. [ 177.580182][ T7891] netlink: 'syz.2.528': attribute type 10 has an invalid length. [ 177.602587][ T7891] veth1_macvtap: left promiscuous mode [ 177.853898][ T7910] netlink: 'syz.2.536': attribute type 6 has an invalid length. [ 178.133762][ T7925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.539'. [ 178.318834][ T7933] netlink: 'syz.2.544': attribute type 11 has an invalid length. [ 178.334497][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'. [ 178.337541][ T7933] netlink: 224 bytes leftover after parsing attributes in process `syz.2.544'. [ 178.387789][ T7931] bond2: option xmit_hash_policy: invalid value (64) [ 178.414635][ T7931] bond2 (unregistering): Released all slaves [ 178.746859][ T7953] netlink: 9 bytes leftover after parsing attributes in process `syz.4.550'. [ 178.780978][ T7953] gretap0: entered promiscuous mode [ 178.798649][ T7961] netlink: 5 bytes leftover after parsing attributes in process `syz.4.550'. [ 178.837729][ T7960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.549'. [ 178.849658][ T7961] 0{X: renamed from gretap0 [ 178.881177][ T7961] 0{X: left promiscuous mode [ 178.920702][ T7961] 0{X: entered allmulticast mode [ 178.952343][ T7961] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 178.972643][ T7972] veth1_to_bond: entered allmulticast mode [ 179.000800][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'. [ 179.191112][ T7976] bond0: (slave bond_slave_1): Releasing backup interface [ 179.249629][ T7976] veth1_to_bond (unregistering): left allmulticast mode [ 179.312993][ T7992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.561'. [ 179.701188][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.569'. [ 179.703224][ T8011] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 179.810585][ T8011] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 181.337821][ T8111] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 181.465421][ T8119] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 181.932518][ T8142] bond0 (unregistering): Released all slaves [ 182.056322][ T8156] 8021q: VLANs not supported on gre0 [ 182.171609][ T8161] netlink: 'syz.4.616': attribute type 1 has an invalid length. [ 182.324464][ T8161] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.368655][ T8161] bond0: (slave bond2): making interface the new active one [ 182.376737][ T8161] bond0: (slave bond2): Enslaving as an active interface with an up link [ 182.442914][ T8168] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 182.498613][ T8168] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 182.595629][ T8186] __nla_validate_parse: 10 callbacks suppressed [ 182.595647][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'. [ 182.642664][ T8188] netem: change failed [ 182.813393][ T8195] sctp: [Deprecated]: syz.3.626 (pid 8195) Use of int in max_burst socket option. [ 182.813393][ T8195] Use struct sctp_assoc_value instead [ 183.010679][ T8204] netlink: 'syz.3.630': attribute type 21 has an invalid length. [ 183.040454][ T8204] netlink: 'syz.3.630': attribute type 1 has an invalid length. [ 183.077779][ T8204] netlink: 32 bytes leftover after parsing attributes in process `syz.3.630'. [ 183.094280][ T8206] pim6reg1: entered promiscuous mode [ 183.101626][ T8206] pim6reg1: entered allmulticast mode [ 183.403867][ T8223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.638'. [ 183.624732][ T8238] netlink: 'syz.0.641': attribute type 23 has an invalid length. [ 184.880352][ T8272] netlink: 32 bytes leftover after parsing attributes in process `syz.1.650'. [ 186.823915][ T8292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.658'. [ 186.837131][ T8288] netlink: 'syz.0.657': attribute type 10 has an invalid length. [ 186.869552][ T8288] team0: Port device dummy0 added [ 187.065617][ T8304] netlink: 56 bytes leftover after parsing attributes in process `syz.2.662'. [ 187.378216][ T8304] bond2: (slave erspan0): Device is not bonding slave [ 187.398494][ T8304] bond2: option active_slave: invalid value (erspan0) [ 187.463647][ T8304] bond2 (unregistering): Released all slaves [ 187.525755][ T8315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.666'. [ 187.543770][ T8315] dummy0: entered promiscuous mode [ 187.587693][ T8315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.666'. [ 187.788424][ T8325] netlink: 'syz.1.670': attribute type 29 has an invalid length. [ 187.804925][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'. [ 187.888968][ T8325] bridge2: entered promiscuous mode [ 187.894295][ T8325] bridge2: entered allmulticast mode [ 187.952809][ T8334] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 187.999226][ T8336] netlink: 104 bytes leftover after parsing attributes in process `syz.3.673'. [ 188.206628][ T8347] netlink: 48 bytes leftover after parsing attributes in process `syz.2.678'. [ 188.461387][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'. [ 188.616017][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.684'. [ 188.629197][ T8379] netlink: 'syz.1.685': attribute type 27 has an invalid length. [ 188.630293][ T8379] netlink: 'syz.1.685': attribute type 1 has an invalid length. [ 188.704621][ T8381] ip6tnl1: entered promiscuous mode [ 188.736188][ T8381] ip6tnl1: entered allmulticast mode [ 188.833799][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 188.840453][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 188.847074][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 188.853882][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 188.861923][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 188.869809][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 188.877793][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 188.885665][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 188.893604][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 188.901473][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 188.909447][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 188.917313][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 188.925254][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 188.933089][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 188.941064][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 188.948931][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 188.956904][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 188.964736][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 188.972702][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 188.980571][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 188.988561][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 188.996431][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.004361][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.012232][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.020182][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.028041][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.036011][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.043835][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.051793][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.059664][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.067615][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.075483][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.083411][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.091282][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.099257][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.107129][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.115055][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.122931][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.130887][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.138753][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.146712][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.154536][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.161975][ T8389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.688'. [ 189.162485][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.179109][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.187023][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.194823][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.203909][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.211804][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.219771][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.227632][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.235600][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.243424][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.251375][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.259229][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.267192][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.275065][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.282968][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.290810][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.298780][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.306628][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.314517][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.322361][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.330323][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.338183][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.346150][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.353973][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.361867][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.369709][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.377670][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.385570][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.393503][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 189.401372][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 189.520444][ T8396] FAULT_INJECTION: forcing a failure. [ 189.520444][ T8396] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 189.534985][ T8396] CPU: 1 UID: 0 PID: 8396 Comm: syz.1.689 Not tainted syzkaller #0 PREEMPT(full) [ 189.535012][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 189.535031][ T8396] Call Trace: [ 189.535039][ T8396] [ 189.535048][ T8396] dump_stack_lvl+0x189/0x250 [ 189.535083][ T8396] ? __pfx____ratelimit+0x10/0x10 [ 189.535105][ T8396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.535127][ T8396] ? __pfx__printk+0x10/0x10 [ 189.535155][ T8396] ? __might_fault+0xb0/0x130 [ 189.535195][ T8396] should_fail_ex+0x414/0x560 [ 189.535226][ T8396] _copy_from_user+0x2d/0xb0 [ 189.535252][ T8396] ___sys_sendmsg+0x158/0x2a0 [ 189.535289][ T8396] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.535348][ T8396] ? __fget_files+0x2a/0x420 [ 189.535365][ T8396] ? __fget_files+0x3a0/0x420 [ 189.535394][ T8396] __x64_sys_sendmsg+0x19b/0x260 [ 189.535419][ T8396] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.535451][ T8396] ? __pfx_ksys_write+0x10/0x10 [ 189.535474][ T8396] ? rcu_is_watching+0x15/0xb0 [ 189.535499][ T8396] ? do_syscall_64+0xbe/0x3b0 [ 189.535524][ T8396] do_syscall_64+0xfa/0x3b0 [ 189.535544][ T8396] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.535565][ T8396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.535582][ T8396] ? clear_bhb_loop+0x60/0xb0 [ 189.535604][ T8396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.535623][ T8396] RIP: 0033:0x7f3cbb98eec9 [ 189.535645][ T8396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.535661][ T8396] RSP: 002b:00007f3cbc78f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.535686][ T8396] RAX: ffffffffffffffda RBX: 00007f3cbbbe5fa0 RCX: 00007f3cbb98eec9 [ 189.535700][ T8396] RDX: 0000000000000800 RSI: 00002000000002c0 RDI: 0000000000000004 [ 189.535712][ T8396] RBP: 00007f3cbc78f090 R08: 0000000000000000 R09: 0000000000000000 [ 189.535722][ T8396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.535733][ T8396] R13: 00007f3cbbbe6038 R14: 00007f3cbbbe5fa0 R15: 00007ffc55fff148 [ 189.535764][ T8396] [ 189.941498][ T8400] tipc: Enabled bearer , priority 0 [ 189.949665][ T8400] syzkaller0: entered promiscuous mode [ 189.955690][ T8400] syzkaller0: entered allmulticast mode [ 190.021463][ T8400] tipc: Resetting bearer [ 190.067866][ T8415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.697'. [ 190.098055][ T8397] tipc: Resetting bearer [ 190.133022][ T8397] tipc: Disabling bearer [ 190.301390][ T8427] netlink: 'syz.4.702': attribute type 4 has an invalid length. [ 190.388432][ T8434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.701'. [ 190.561911][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 190.866078][ T8460] netlink: 'syz.1.714': attribute type 2 has an invalid length. [ 191.030682][ T8474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.064585][ T8481] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.719'. [ 191.082804][ T8474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.154648][ T8486] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 191.517761][ T8494] netlink: 'syz.2.723': attribute type 1 has an invalid length. [ 191.564038][ T8508] netlink: 'syz.0.727': attribute type 10 has an invalid length. [ 191.639570][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.652212][ T8508] bridge_slave_1: left allmulticast mode [ 191.665449][ T8508] bridge_slave_1: left promiscuous mode [ 191.671452][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.717816][ T8508] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 192.000985][ T8527] IPv6: NLM_F_CREATE should be specified when creating new route [ 192.353289][ T8545] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 192.596805][ T8556] syz_tun: entered allmulticast mode [ 192.619222][ T8556] netlink: 'syz.4.742': attribute type 2 has an invalid length. [ 192.633168][ T8555] syz_tun: left allmulticast mode [ 193.252417][ T8587] __nla_validate_parse: 4 callbacks suppressed [ 193.252437][ T8587] netlink: 80 bytes leftover after parsing attributes in process `syz.2.751'. [ 193.326992][ T8587] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 193.409700][ T8600] netlink: 20 bytes leftover after parsing attributes in process `syz.4.756'. [ 193.702192][ T8625] netlink: 'syz.4.761': attribute type 15 has an invalid length. [ 193.750772][ T8625] netlink: 'syz.4.761': attribute type 1 has an invalid length. [ 193.957923][ T8637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.766'. [ 193.996897][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 194.216567][ T8651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.771'. [ 194.262833][ T8654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.772'. [ 194.305430][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'. [ 194.332566][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.440726][ T8670] 8021q: VLANs not supported on ip6tnl0 [ 194.709975][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 195.306755][ T8707] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.374352][ T8717] veth0: entered promiscuous mode [ 195.657996][ T8731] netlink: 'syz.3.792': attribute type 4 has an invalid length. [ 195.729596][ T8734] netlink: 'syz.2.794': attribute type 1 has an invalid length. [ 195.757871][ T8734] netlink: 'syz.2.794': attribute type 3 has an invalid length. [ 195.784367][ T8734] netlink: 224 bytes leftover after parsing attributes in process `syz.2.794'. [ 195.789484][ T8735] netlink: 'syz.3.792': attribute type 4 has an invalid length. [ 195.967276][ T8744] netlink: 20 bytes leftover after parsing attributes in process `syz.2.796'. [ 195.998921][ T8743] netlink: 'syz.0.797': attribute type 39 has an invalid length. [ 196.081818][ T8706] veth0: left promiscuous mode [ 196.255794][ T8755] netlink: 'syz.2.801': attribute type 13 has an invalid length. [ 196.424056][ T8755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.480739][ T8768] netlink: 'syz.0.805': attribute type 1 has an invalid length. [ 196.607346][ T8768] bond1 (unregistering): Released all slaves [ 196.716556][ T8772] ip6tnl1: entered promiscuous mode [ 196.723942][ T8784] netlink: 'syz.3.811': attribute type 27 has an invalid length. [ 196.747654][ T8772] ip6tnl1: entered allmulticast mode [ 197.492471][ T8811] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 198.789678][ T8879] bond2: (slave geneve2): making interface the new active one [ 198.826042][ T8879] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 198.861525][ T3468] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 198.891369][ T3468] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 198.920877][ T3468] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 198.946057][ T49] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 199.549344][ T8921] __nla_validate_parse: 7 callbacks suppressed [ 199.549362][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 199.594979][ T8925] Unsupported ieee802154 address type: 0 [ 199.609926][ T8925] netlink: 48 bytes leftover after parsing attributes in process `syz.4.850'. [ 199.788489][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056fcb400: rx timeout, send abort [ 199.956562][ T8946] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 199.973369][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 199.986010][ T8946] bond4 (unregistering): Released all slaves [ 200.064489][ T8952] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 200.253818][ T8966] validate_nla: 3 callbacks suppressed [ 200.253837][ T8966] netlink: 'syz.4.858': attribute type 7 has an invalid length. [ 200.288611][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056fca000: rx timeout, send abort [ 200.297876][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056fcb400: abort rx timeout. Force session deactivation [ 200.330810][ T8971] netlink: 'syz.1.859': attribute type 1 has an invalid length. [ 200.391915][ T8971] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.553954][ T8988] netlink: 40 bytes leftover after parsing attributes in process `syz.4.865'. [ 200.614353][ T8976] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.630535][ T8976] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 200.696599][ T8976] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 200.719860][ T9000] netlink: 'syz.2.863': attribute type 11 has an invalid length. [ 200.753664][ T9000] netlink: 64 bytes leftover after parsing attributes in process `syz.2.863'. [ 200.796933][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056fca000: abort rx timeout. Force session deactivation [ 200.990746][ T9013] netlink: 'syz.0.869': attribute type 21 has an invalid length. [ 201.004035][ T9014] netlink: 'syz.4.868': attribute type 27 has an invalid length. [ 201.135707][ T9021] openvswitch: netlink: Tunnel attr 114 out of range max 16 [ 201.229930][ T9026] team0: No ports can be present during mode change [ 201.253589][ T9028] netlink: 96 bytes leftover after parsing attributes in process `syz.1.874'. [ 201.326734][ T9030] tipc: Enabling of bearer rejected, failed to enable media [ 201.389376][ T9033] netlink: 'syz.4.876': attribute type 10 has an invalid length. [ 201.398253][ T9035] netlink: 14 bytes leftover after parsing attributes in process `syz.0.878'. [ 201.541202][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'. [ 201.686801][ T9035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.710195][ T9035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.727790][ T9035] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 201.739658][ T9035] bond0 (unregistering): Released all slaves [ 201.939307][ T9065] netlink: 'syz.0.886': attribute type 2 has an invalid length. [ 201.954201][ T9059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.961903][ T9059] IPv6: NLM_F_CREATE should be set when creating new route [ 201.979579][ T9065] netlink: 'syz.0.886': attribute type 1 has an invalid length. [ 202.013309][ T9065] netlink: 'syz.0.886': attribute type 2 has an invalid length. [ 202.075317][ T9065] netlink: 'syz.0.886': attribute type 1 has an invalid length. [ 202.084573][ T9064] can: request_module (can-proto-0) failed. [ 202.331281][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'. [ 202.361415][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.889'. [ 203.154293][ T6039] IPVS: starting estimator thread 0... [ 203.167593][ T9101] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 203.185096][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 203.268045][ T9103] IPVS: using max 33 ests per chain, 79200 per kthread [ 204.079232][ T9168] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3677 [ 204.521005][ T9194] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 204.774951][ T9201] __nla_validate_parse: 9 callbacks suppressed [ 204.774969][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.921'. [ 204.816129][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.923'. [ 204.828015][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.921'. [ 204.859169][ T9205] bond0: entered promiscuous mode [ 204.873738][ T9205] bond_slave_0: entered promiscuous mode [ 204.886813][ T9205] bridge_slave_1: entered promiscuous mode [ 204.907564][ T9205] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 204.973749][ T9205] bond0: left promiscuous mode [ 204.983601][ T9205] bond_slave_0: left promiscuous mode [ 204.994037][ T9205] bridge_slave_1: left promiscuous mode [ 205.000052][ T9205] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 205.063335][ T9201] bridge0: port 2(vlan2) entered blocking state [ 205.083590][ T9201] bridge0: port 2(vlan2) entered disabled state [ 205.119816][ T9201] vlan2: entered allmulticast mode [ 205.129426][ T9201] bridge0: entered allmulticast mode [ 205.151374][ T9201] vlan2: left allmulticast mode [ 205.175353][ T9201] bridge0: left allmulticast mode [ 205.289864][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'. [ 205.361920][ T9221] bond0: entered promiscuous mode [ 205.399542][ T9221] bond_slave_0: entered promiscuous mode [ 205.455714][ T9221] bridge_slave_1: entered promiscuous mode [ 205.493335][ T9221] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 205.549414][ T9221] bond0: left promiscuous mode [ 205.554235][ T9221] bond_slave_0: left promiscuous mode [ 205.565812][ T9221] bridge_slave_1: left promiscuous mode [ 205.577065][ T9221] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 205.600708][ T9243] netlink: 56 bytes leftover after parsing attributes in process `syz.4.934'. [ 205.649623][ T9244] netlink: 56 bytes leftover after parsing attributes in process `syz.4.934'. [ 205.705426][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.935'. [ 205.943563][ T9257] syzkaller0: entered promiscuous mode [ 205.973041][ T9257] syzkaller0: entered allmulticast mode [ 206.094219][ T9276] netlink: 36 bytes leftover after parsing attributes in process `syz.3.940'. [ 207.241996][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.936'. [ 207.397830][ T9298] netlink: 165 bytes leftover after parsing attributes in process `syz.4.943'. [ 207.570710][ T9302] validate_nla: 4 callbacks suppressed [ 207.570728][ T9302] netlink: 'syz.0.946': attribute type 8 has an invalid length. [ 207.624396][ T9305] batman_adv: batadv0: Adding interface: netdevsim0 [ 207.640276][ T9305] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.681319][ T9305] batman_adv: batadv0: Interface activated: netdevsim0 [ 208.477024][ T9350] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 209.023036][ T9371] syzkaller0: entered promiscuous mode [ 209.042671][ T9371] syzkaller0: entered allmulticast mode [ 210.795771][ T9411] __nla_validate_parse: 3 callbacks suppressed [ 210.795789][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'. [ 210.837364][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.980'. [ 210.853636][ T9413] netlink: 'syz.2.981': attribute type 12 has an invalid length. [ 210.865362][ T9411] netlink: 'syz.1.980': attribute type 20 has an invalid length. [ 210.884978][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'. [ 210.910944][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.980'. [ 210.917859][ T9417] netlink: 'syz.4.982': attribute type 21 has an invalid length. [ 210.931251][ T9411] netlink: 'syz.1.980': attribute type 20 has an invalid length. [ 210.967959][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'. [ 211.039172][ T9417] netlink: 'syz.4.982': attribute type 21 has an invalid length. [ 211.049492][ T3468] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.065068][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'. [ 211.072663][ T3468] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.088051][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'. [ 211.127916][ T3468] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.171040][ T3468] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.272176][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'. [ 211.393460][ T9441] netlink: 'syz.1.988': attribute type 13 has an invalid length. [ 211.504281][ T9448] netlink: 'syz.3.990': attribute type 1 has an invalid length. [ 211.513269][ T9445] netlink: 92 bytes leftover after parsing attributes in process `syz.4.989'. [ 211.526406][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 211.868786][ T24] IPVS: starting estimator thread 0... [ 211.985306][ T9471] IPVS: using max 30 ests per chain, 72000 per kthread [ 212.671719][ T9513] veth3: entered promiscuous mode [ 212.985572][ T9538] erspan0: entered promiscuous mode [ 212.996541][ T9538] erspan0: entered allmulticast mode [ 213.228588][ T9552] netlink: 'syz.4.1022': attribute type 4 has an invalid length. [ 213.370791][ T9561] netlink: 'syz.3.1024': attribute type 29 has an invalid length. [ 213.399982][ T9561] netlink: 'syz.3.1024': attribute type 29 has an invalid length. [ 214.071789][ T9601] netlink: 'syz.4.1035': attribute type 8 has an invalid length. [ 214.715992][ T9639] netlink: 'syz.1.1048': attribute type 1 has an invalid length. [ 214.915702][ T9639] 8021q: adding VLAN 0 to HW filter on device bond4 [ 215.113077][ T9649] bond0: (slave bridge_slave_1): Releasing backup interface [ 215.179331][ T9649] bond0: (slave bond_slave_0): Releasing backup interface [ 215.210541][ T9649] team0: Port device team_slave_0 removed [ 215.230565][ T9649] team0: Port device team_slave_1 removed [ 215.239486][ T9649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.248109][ T9649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.259427][ T9649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.267047][ T9649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.284691][ T9649] bond0: (slave netdevsim0): Releasing backup interface [ 215.301114][ T9649] bond2: (slave geneve2): Releasing active interface [ 215.351874][ T59] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 215.380992][ T59] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 215.444026][ T59] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 215.466743][ T59] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 215.622495][ T9687] netlink: 'syz.4.1061': attribute type 29 has an invalid length. [ 215.639213][ T9688] netlink: 'syz.4.1061': attribute type 29 has an invalid length. [ 215.739112][ T9694] syzkaller1: entered promiscuous mode [ 215.744629][ T9694] syzkaller1: entered allmulticast mode [ 215.974327][ T9714] netlink: 'syz.2.1067': attribute type 10 has an invalid length. [ 216.014475][ T9714] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 216.169163][ T9714] bond3: Unable to set up delay as MII monitoring is disabled [ 216.218077][ T9714] bond3 (unregistering): Released all slaves [ 216.314368][ T9731] __nla_validate_parse: 164 callbacks suppressed [ 216.314383][ T9731] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1072'. [ 216.574165][ T9745] netlink: 'syz.0.1075': attribute type 1 has an invalid length. [ 216.576564][ T9731] bond0 (unregistering): Released all slaves [ 216.802512][ T9745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.840695][ T9751] netlink: 'syz.0.1075': attribute type 21 has an invalid length. [ 216.877398][ T9751] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1075'. [ 216.958498][ T9751] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1075'. [ 217.039805][ T9762] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1076'. [ 217.123722][ T9770] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1079'. [ 217.452090][ T9790] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 217.514923][ T9795] bond0: entered promiscuous mode [ 217.520195][ T9795] bond2: entered promiscuous mode [ 217.526027][ T9795] bond0: entered allmulticast mode [ 217.532151][ T9795] bond2: entered allmulticast mode [ 217.539862][ T9795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.002336][ T9817] IPVS: set_ctl: invalid protocol: 0 172.20.20.30:20001 [ 218.316461][ T9829] validate_nla: 1 callbacks suppressed [ 218.316480][ T9829] netlink: 'syz.4.1095': attribute type 1 has an invalid length. [ 218.349054][ T9824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1093'. [ 218.360610][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1095'. [ 218.382990][ T9824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1093'. [ 218.574993][ T9848] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1097'. [ 218.622789][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'. [ 218.843894][ T9862] tipc: Enabled bearer , priority 0 [ 218.993786][ T9860] tipc: Disabling bearer [ 219.042587][ T5931] IPVS: starting estimator thread 0... [ 219.135500][ T9877] IPVS: using max 29 ests per chain, 69600 per kthread [ 219.223123][ T9884] netlink: 'syz.3.1106': attribute type 1 has an invalid length. [ 219.276781][ T9888] netlink: 'syz.1.1102': attribute type 6 has an invalid length. [ 219.398410][ T9884] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.918471][ T9897] infiniband syz2: set down [ 219.943348][ T9897] infiniband syz2: added team_slave_1 [ 219.969644][ T9921] 8021q: VLANs not supported on ip6tnl0 [ 219.995737][ T9923] 8021q: VLANs not supported on ip6tnl0 [ 220.154462][ T9897] RDS/IB: syz2: added [ 220.162589][ T9897] smc: adding ib device syz2 with port count 1 [ 220.173865][ T9897] smc: ib device syz2 port 1 has pnetid [ 221.138678][ T9978] netlink: 'syz.1.1124': attribute type 21 has an invalid length. [ 221.360504][ T9987] netlink: 'syz.0.1125': attribute type 4 has an invalid length. [ 222.060876][T10023] netlink: 'syz.4.1133': attribute type 1 has an invalid length. [ 222.135494][T10023] __nla_validate_parse: 9 callbacks suppressed [ 222.135512][T10023] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1133'. [ 222.856216][T10062] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1144'. [ 222.902893][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'. [ 222.958856][T10067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1146'. [ 222.988911][T10066] netlink: 'syz.0.1145': attribute type 1 has an invalid length. [ 222.997131][T10067] netlink: 'syz.3.1146': attribute type 7 has an invalid length. [ 223.015519][T10066] netlink: 'syz.0.1145': attribute type 1 has an invalid length. [ 223.032727][T10067] netlink: 'syz.3.1146': attribute type 8 has an invalid length. [ 223.055474][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'. [ 223.253314][T10076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1149'. [ 223.751437][T10103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.799151][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1155'. [ 224.253880][T10118] netlink: 'syz.3.1157': attribute type 1 has an invalid length. [ 224.280431][T10118] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1157'. [ 224.306710][T10120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1157'. [ 224.331339][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1159'. [ 224.443748][T10124] netlink: 'syz.1.1159': attribute type 83 has an invalid length. [ 224.684150][T10144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.874498][T10154] netlink: 'syz.1.1166': attribute type 1 has an invalid length. [ 224.942458][T10154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.143423][T10163] veth5: entered promiscuous mode [ 225.169206][T10163] bond0: (slave veth5): Enslaving as an active interface with a down link [ 225.270006][T10154] bond0: entered allmulticast mode [ 225.509312][T10188] netlink: 'syz.2.1173': attribute type 3 has an invalid length. [ 225.555163][T10198] tipc: Enabled bearer , priority 0 [ 225.588220][T10191] syzkaller0: entered promiscuous mode [ 225.603965][T10191] syzkaller0: entered allmulticast mode [ 225.654664][T10191] tipc: Resetting bearer [ 226.093741][T10221] tipc: Started in network mode [ 226.109482][T10221] tipc: Node identity 1, cluster identity 4711 [ 226.123142][T10221] tipc: Node number set to 1 [ 226.139409][T10190] tipc: Resetting bearer [ 226.214172][T10190] tipc: Disabling bearer [ 227.432996][T10303] __nla_validate_parse: 10 callbacks suppressed [ 227.433015][T10303] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1204'. [ 227.689298][T10316] netlink: 'syz.3.1208': attribute type 10 has an invalid length. [ 227.734294][T10316] bridge0: port 4(batadv0) entered disabled state [ 227.756086][T10320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1207'. [ 227.758590][T10316] batadv0: left allmulticast mode [ 227.773384][T10316] batadv0: left promiscuous mode [ 227.792100][T10316] bridge0: port 4(batadv0) entered disabled state [ 227.809183][T10316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.819304][T10316] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 227.838465][T10326] netlink: 'syz.3.1208': attribute type 1 has an invalid length. [ 227.838836][T10323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.884275][T10323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.917538][T10323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.926394][T10323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.018071][T10323] bond0: (slave batadv0): Releasing backup interface [ 228.122811][T10316] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 228.123419][T10345] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1213'. [ 228.135765][T10316] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 228.135789][T10316] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 228.204819][T10339] tipc: Enabled bearer , priority 0 [ 228.255866][T10339] tipc: Disabling bearer [ 228.431326][T10355] netlink: 'syz.1.1214': attribute type 2 has an invalid length. [ 228.442461][T10355] netlink: 'syz.1.1214': attribute type 2 has an invalid length. [ 229.251576][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'. [ 229.670520][T10403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1230'. [ 229.720713][T10407] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1229'. [ 229.752874][T10407] bond4: (slave ip_vti0): Device is not bonding slave [ 229.759997][T10407] bond4: option active_slave: invalid value (ip_vti0) [ 229.770251][T10407] bond4 (unregistering): Released all slaves [ 230.109613][T10424] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1237'. [ 230.116758][T10423] netlink: 'syz.0.1236': attribute type 58 has an invalid length. [ 230.138852][T10423] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1236'. [ 230.342073][T10430] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 230.351055][T10423] netlink: 'syz.0.1236': attribute type 58 has an invalid length. [ 230.372877][T10430] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 230.394749][T10423] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1236'. [ 230.408807][T10434] netlink: 'syz.2.1241': attribute type 5 has an invalid length. [ 230.431253][T10434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1241'. [ 230.530574][T10423] netlink: 'syz.0.1236': attribute type 58 has an invalid length. [ 230.629717][T10423] netlink: 'syz.0.1236': attribute type 58 has an invalid length. [ 230.790732][T10423] netlink: 'syz.0.1236': attribute type 58 has an invalid length. [ 230.888763][T10423] netlink: 'syz.0.1236': attribute type 58 has an invalid length. [ 231.431528][T10499] netlink: 'syz.2.1259': attribute type 4 has an invalid length. [ 231.592016][T10505] tipc: Enabled bearer , priority 0 [ 231.602950][T10505] syzkaller0: entered promiscuous mode [ 231.608879][T10505] syzkaller0: entered allmulticast mode [ 231.660823][T10505] tipc: Resetting bearer [ 231.678682][T10504] tipc: Resetting bearer [ 231.703296][T10504] tipc: Disabling bearer [ 233.108345][T10570] tipc: Enabling of bearer rejected, failed to enable media [ 233.495161][T10592] nbd: nbd0 already in use [ 233.509376][T10595] __nla_validate_parse: 7 callbacks suppressed [ 233.509394][T10595] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1289'. [ 233.622161][T10601] bond0: Error: Cannot enslave bond to itself. [ 233.679963][T10601] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1287'. [ 233.735374][T10601] 0{X: entered promiscuous mode [ 233.740717][T10601] 0{X: left allmulticast mode [ 233.879003][T10618] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1294'. [ 234.224241][T10638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1300'. [ 234.672097][T10667] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1307'. [ 234.697904][T10669] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 234.722223][T10666] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1307'. [ 234.740095][T10673] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1309'. [ 234.760294][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1309'. [ 234.847682][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1308'. [ 235.545086][T10714] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1320'. [ 235.805835][T10724] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 235.837996][T10729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.027317][ T30] audit: type=1800 audit(1759369297.310:2): pid=10743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1329" name="memory.events" dev="tmpfs" ino=1496 res=0 errno=0 [ 236.229102][T10753] validate_nla: 3 callbacks suppressed [ 236.229121][T10753] netlink: 'syz.4.1332': attribute type 1 has an invalid length. [ 236.360691][T10763] Unknown options in mask b7f2 [ 236.505125][T10769] netlink: 'syz.0.1336': attribute type 1 has an invalid length. [ 236.574756][T10769] : renamed from veth1_vlan (while UP) [ 236.619055][T10769] veth5: entered promiscuous mode [ 236.660611][T10777] tipc: Enabled bearer , priority 0 [ 236.764645][T10777] syzkaller0: entered promiscuous mode [ 236.770915][T10777] syzkaller0: entered allmulticast mode [ 236.777550][T10777] tipc: Resetting bearer [ 236.783546][T10780] batadv_slave_0: entered promiscuous mode [ 236.791061][T10779] batadv_slave_0: left promiscuous mode [ 236.803848][T10775] tipc: Resetting bearer [ 237.787835][ T5951] tipc: Node number set to 582102961 [ 238.000328][T10811] delete_channel: no stack [ 238.020239][T10813] openvswitch: netlink: Message has 5 unknown bytes. [ 239.479255][T10775] tipc: Disabling bearer [ 239.505498][T10810] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 239.819176][T10854] __nla_validate_parse: 6 callbacks suppressed [ 239.819197][T10854] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1361'. [ 239.953094][T10859] netlink: 'syz.1.1363': attribute type 1 has an invalid length. [ 240.124340][T10866] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 240.142272][T10866] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 240.200676][T10867] bond5: (slave bridge5): Enslaving as an active interface with a down link [ 240.243438][T10859] gretap1: entered promiscuous mode [ 240.248995][T10859] gretap1: entered allmulticast mode [ 240.268487][T10869] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 240.417142][T10880] netlink: 'syz.4.1366': attribute type 1 has an invalid length. [ 240.812091][T10895] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1374'. [ 240.824771][T10895] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1374'. [ 240.845818][T10905] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1375'. [ 240.918378][T10899] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 240.947772][T10899] bond2 (unregistering): Released all slaves [ 241.200332][T10926] netlink: 'syz.3.1380': attribute type 1 has an invalid length. [ 241.227653][T10926] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1380'. [ 241.270204][T10926] netlink: 'syz.3.1380': attribute type 1 has an invalid length. [ 241.309866][T10932] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1380'. [ 241.333920][T10936] sock: sock_timestamping_bind_phc: sock not bind to device [ 241.342905][T10926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1380'. [ 241.356099][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'. [ 241.365560][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1380'. [ 241.704460][T10943] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1384'. [ 241.813808][T10946] netlink: 'syz.3.1386': attribute type 1 has an invalid length. [ 242.472036][T10978] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 242.481319][T10979] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 242.629674][T10986] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 243.118964][T11015] syz.3.1405 (11015) used obsolete PPPIOCDETACH ioctl [ 243.251987][T11018] netlink: 'syz.0.1406': attribute type 4 has an invalid length. [ 243.612361][T11038] netlink: 'syz.3.1412': attribute type 1 has an invalid length. [ 243.946512][T11048] netlink: 'syz.2.1416': attribute type 1 has an invalid length. [ 243.954347][T11048] netlink: 'syz.2.1416': attribute type 2 has an invalid length. [ 243.972910][T11048] netlink: 'syz.2.1416': attribute type 1 has an invalid length. [ 244.017047][T11048] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 244.223974][T11076] macvtap1: entered promiscuous mode [ 244.238923][T11076] vlan0: entered promiscuous mode [ 244.246267][T11076] macvtap1: entered allmulticast mode [ 244.253878][T11076] vlan0: entered allmulticast mode [ 244.260067][T11076] veth0_vlan: entered allmulticast mode [ 244.266808][ T3468] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.285134][T11077] pimreg: entered allmulticast mode [ 244.302103][T11080] macvtap2: entered promiscuous mode [ 244.307940][T11080] macvtap2: entered allmulticast mode [ 244.321675][ T3468] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.332713][ T3468] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.343051][T11070] pimreg: left allmulticast mode [ 244.368659][T11079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.394096][ T3468] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.574611][T11092] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 245.095505][T11118] __nla_validate_parse: 7 callbacks suppressed [ 245.095558][T11118] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1438'. [ 245.198815][T11120] netlink: 'syz.2.1440': attribute type 1 has an invalid length. [ 245.895930][T11135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1443'. [ 245.905155][T11135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.912416][T11135] IPv6: NLM_F_CREATE should be set when creating new route [ 246.035173][T11142] IPVS: set_ctl: invalid protocol: 49 172.20.20.56:20000 [ 246.085335][ T5883] Bluetooth: hci0: command tx timeout [ 246.125493][T11148] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1447'. [ 246.164814][T11150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1448'. [ 246.271599][T11154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1449'. [ 246.281796][T11154] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1449'. [ 246.296375][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1449'. [ 246.473656][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'. [ 246.557495][T11163] netlink: 'syz.3.1451': attribute type 2 has an invalid length. [ 249.389541][T11178] netlink: 'syz.0.1456': attribute type 4 has an invalid length. [ 249.480441][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1456'. [ 249.509220][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1456'. [ 249.512559][T11190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.817035][T11206] netlink: 'syz.2.1464': attribute type 1 has an invalid length. [ 249.860722][T11208] netlink: 'syz.3.1465': attribute type 30 has an invalid length. [ 249.918581][T11210] IPVS: Error connecting to the multicast addr [ 249.940996][T11214] bond4: (slave bridge2): making interface the new active one [ 249.949719][T11214] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 250.040286][T11208] bond5: option arp_missed_max: invalid value (0) [ 250.093946][T11208] bond5: option arp_missed_max: allowed values 1 - 255 [ 250.111903][T11208] bond5 (unregistering): Released all slaves [ 250.810469][T11271] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 250.902104][T11274] netlink: 'syz.4.1483': attribute type 1 has an invalid length. [ 250.959632][T11279] __nla_validate_parse: 8 callbacks suppressed [ 250.959649][T11279] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1484'. [ 250.998797][T11271] dummy0: left promiscuous mode [ 251.444201][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1487'. [ 251.461584][T11271] bond0: left allmulticast mode [ 251.469253][T11271] veth5: left promiscuous mode [ 251.499872][T11293] FAULT_INJECTION: forcing a failure. [ 251.499872][T11293] name failslab, interval 1, probability 0, space 0, times 1 [ 251.522909][T11293] CPU: 0 UID: 0 PID: 11293 Comm: syz.2.1485 Not tainted syzkaller #0 PREEMPT(full) [ 251.522957][T11293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 251.522993][T11293] Call Trace: [ 251.523001][T11293] [ 251.523010][T11293] dump_stack_lvl+0x189/0x250 [ 251.523040][T11293] ? __pfx____ratelimit+0x10/0x10 [ 251.523062][T11293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.523086][T11293] ? __pfx__printk+0x10/0x10 [ 251.523119][T11293] ? __pfx___might_resched+0x10/0x10 [ 251.523138][T11293] ? fs_reclaim_acquire+0x7d/0x100 [ 251.523168][T11293] should_fail_ex+0x414/0x560 [ 251.523204][T11293] should_failslab+0xa8/0x100 [ 251.523232][T11293] __kmalloc_cache_noprof+0x70/0x3d0 [ 251.523258][T11293] ? tcf_block_get_ext+0x68d/0x17d0 [ 251.523284][T11293] tcf_block_get_ext+0x68d/0x17d0 [ 251.523310][T11293] ? hfsc_change_class+0x16f6/0x21f0 [ 251.523345][T11293] tcf_block_get+0x67/0xa0 [ 251.523364][T11293] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 251.523390][T11293] hfsc_change_class+0x174e/0x21f0 [ 251.523431][T11293] ? __pfx_hfsc_change_class+0x10/0x10 [ 251.523464][T11293] ? lockdep_rtnl_is_held+0x26/0x40 [ 251.523490][T11293] ? qdisc_lookup+0x179/0x6d0 [ 251.523519][T11293] tc_ctl_tclass+0xaa0/0x1500 [ 251.523565][T11293] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 251.523589][T11293] ? rcu_is_watching+0x15/0xb0 [ 251.523614][T11293] ? __mutex_lock+0xd3b/0x1350 [ 251.523635][T11293] ? __dev_queue_xmit+0x27b/0x3b50 [ 251.523665][T11293] ? __mutex_lock+0x5bb/0x1350 [ 251.523724][T11293] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 251.523751][T11293] rtnetlink_rcv_msg+0x77c/0xb70 [ 251.523777][T11293] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 251.523797][T11293] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 251.523816][T11293] ? ref_tracker_free+0x63a/0x7d0 [ 251.523834][T11293] ? __asan_memcpy+0x40/0x70 [ 251.523854][T11293] ? __pfx_ref_tracker_free+0x10/0x10 [ 251.523885][T11293] netlink_rcv_skb+0x208/0x470 [ 251.523908][T11293] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 251.523932][T11293] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.523967][T11293] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.523998][T11293] netlink_unicast+0x82c/0x9e0 [ 251.524038][T11293] ? __pfx_netlink_unicast+0x10/0x10 [ 251.524071][T11293] ? netlink_sendmsg+0x642/0xb30 [ 251.524090][T11293] ? skb_put+0x11b/0x210 [ 251.524117][T11293] netlink_sendmsg+0x805/0xb30 [ 251.524154][T11293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.524180][T11293] ? aa_sock_msg_perm+0xf1/0x1d0 [ 251.524202][T11293] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 251.524220][T11293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.524241][T11293] __sock_sendmsg+0x21c/0x270 [ 251.524269][T11293] ____sys_sendmsg+0x505/0x830 [ 251.524296][T11293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.524328][T11293] ? import_iovec+0x74/0xa0 [ 251.524352][T11293] ___sys_sendmsg+0x21f/0x2a0 [ 251.524379][T11293] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.524442][T11293] ? __fget_files+0x2a/0x420 [ 251.524459][T11293] ? __fget_files+0x3a0/0x420 [ 251.524487][T11293] __x64_sys_sendmsg+0x19b/0x260 [ 251.524515][T11293] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.524549][T11293] ? __pfx_ksys_write+0x10/0x10 [ 251.524572][T11293] ? rcu_is_watching+0x15/0xb0 [ 251.524596][T11293] ? do_syscall_64+0xbe/0x3b0 [ 251.524622][T11293] do_syscall_64+0xfa/0x3b0 [ 251.524642][T11293] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.524661][T11293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.524680][T11293] ? clear_bhb_loop+0x60/0xb0 [ 251.524703][T11293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.524721][T11293] RIP: 0033:0x7f75f2d8eec9 [ 251.524737][T11293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.524753][T11293] RSP: 002b:00007f75f3c95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.524773][T11293] RAX: ffffffffffffffda RBX: 00007f75f2fe6180 RCX: 00007f75f2d8eec9 [ 251.524787][T11293] RDX: 0000000004000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 251.524799][T11293] RBP: 00007f75f3c95090 R08: 0000000000000000 R09: 0000000000000000 [ 251.524811][T11293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.524822][T11293] R13: 00007f75f2fe6218 R14: 00007f75f2fe6180 R15: 00007ffec6aa8a28 [ 251.524853][T11293] [ 251.524944][ T3468] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.999416][ T3468] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.035090][ T3468] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.097609][ T3468] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.132934][ T3468] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.151328][ T3468] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.181862][ T3468] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.222256][ T3468] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.231499][T11324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1493'. [ 252.654929][T11347] tipc: Enabled bearer , priority 0 [ 252.702071][T11347] syzkaller0: entered promiscuous mode [ 252.715394][T11347] syzkaller0: entered allmulticast mode [ 252.752104][T11347] tipc: Resetting bearer [ 252.772098][T11345] tipc: Resetting bearer [ 252.802723][T11345] tipc: Disabling bearer [ 252.823705][T11357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.962767][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 252.984981][T11363] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 253.280704][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'. [ 253.302387][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'. [ 253.328367][T11377] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1510'. [ 253.369007][T11377] openvswitch: netlink: Flow key attr not present in new flow. [ 253.393918][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1511'. [ 253.408367][T11391] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1514'. [ 253.450241][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1511'. [ 253.485596][T11376] netlink: 'syz.2.1511': attribute type 12 has an invalid length. [ 253.512429][T11376] netlink: 'syz.2.1511': attribute type 11 has an invalid length. [ 253.908993][T11409] Can't find ip_set type [ 254.008478][T11421] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 254.312452][T11433] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.332584][T11440] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 254.350940][T11443] netlink: 'syz.1.1529': attribute type 29 has an invalid length. [ 254.378453][T11446] netlink: 'syz.1.1529': attribute type 29 has an invalid length. [ 254.502277][T11452] unsupported nla_type 58 [ 254.618986][T11456] tipc: Enabling of bearer rejected, failed to enable media [ 255.064835][T11480] netlink: 'syz.3.1541': attribute type 178 has an invalid length. [ 255.337491][T11493] netlink: 'syz.0.1547': attribute type 1 has an invalid length. [ 255.533761][T11503] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 256.190412][T11546] __nla_validate_parse: 20 callbacks suppressed [ 256.190430][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'. [ 256.293159][T11551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1562'. [ 256.546991][T11566] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1569'. [ 256.752528][T11576] xt_socket: unknown flags 0x50 [ 256.913644][T11588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1573'. [ 257.039141][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'. [ 257.050725][T11599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1576'. [ 257.115765][T11602] bridge6: entered promiscuous mode [ 257.135761][T11602] bridge6: entered allmulticast mode [ 257.229939][T11602] syzkaller1: entered promiscuous mode [ 257.243970][T11602] syzkaller1: entered allmulticast mode [ 257.319321][T11614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1582'. [ 257.400201][T11617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1583'. [ 257.435730][T11617] xfrm2: entered promiscuous mode [ 257.441025][T11617] xfrm2: entered allmulticast mode [ 257.461193][T11619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1583'. [ 257.932447][T11631] netlink: 'syz.4.1588': attribute type 1 has an invalid length. [ 257.949843][T11633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1589'. [ 257.994970][T11631] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.031602][T11638] bond5: (slave gretap0): making interface the new active one [ 258.042593][T11638] bond5: (slave gretap0): Enslaving as an active interface with an up link [ 258.113083][T11645] sctp: [Deprecated]: syz.3.1592 (pid 11645) Use of int in max_burst socket option deprecated. [ 258.113083][T11645] Use struct sctp_assoc_value instead [ 258.312983][T11657] vlan2: entered allmulticast mode [ 258.320588][T11657] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 258.601248][T11669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.620032][T11674] vlan2: entered promiscuous mode [ 258.625699][T11674] bond0: entered promiscuous mode [ 258.630858][T11674] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 258.785664][T11681] tipc: Enabled bearer , priority 0 [ 259.032097][T11673] tipc: Disabling bearer [ 259.642402][T11727] netlink: 'syz.2.1618': attribute type 1 has an invalid length. [ 259.754919][T11725] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 259.768990][T11725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.334928][T11823] netlink: 'syz.2.1644': attribute type 26 has an invalid length. [ 261.835834][T11847] netlink: 'syz.2.1652': attribute type 7 has an invalid length. [ 261.861479][T11851] __nla_validate_parse: 3 callbacks suppressed [ 261.861501][T11851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1654'. [ 261.993394][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1654'. [ 262.101145][T11865] raw_sendmsg: syz.1.1657 forgot to set AF_INET. Fix it! [ 262.149282][T11867] netlink: 'syz.3.1656': attribute type 1 has an invalid length. [ 262.181258][T11867] netlink: 'syz.3.1656': attribute type 2 has an invalid length. [ 262.206557][T11867] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.1656'. [ 262.249253][T11870] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1658'. [ 262.267532][T11867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1656'. [ 262.381739][T11873] netlink: 'syz.1.1659': attribute type 4 has an invalid length. [ 262.709578][T11886] IPVS: ip_vs_add_dest(): server weight less than zero [ 262.818210][T11893] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 262.986589][T11896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1669'. [ 263.180132][T11908] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 263.216058][T11911] netlink: 'syz.2.1673': attribute type 30 has an invalid length. [ 263.252667][T11913] team0: Device ip6gre1 is of different type [ 263.630952][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'. [ 263.661548][T11934] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1681'. [ 264.153153][T11965] netlink: 'syz.4.1690': attribute type 8 has an invalid length. [ 264.241389][T11944] team0 (unregistering): Port device team_slave_0 removed [ 264.274967][T11944] team0 (unregistering): Port device team_slave_1 removed [ 264.296633][T11944] team0 (unregistering): Port device geneve0 removed [ 264.325112][T11944] team0 (unregistering): Port device dummy0 removed [ 264.403943][T11965] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1690'. [ 264.707824][T11987] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1695'. [ 265.429184][T12032] netlink: 'syz.1.1708': attribute type 58 has an invalid length. [ 266.082896][T12065] netlink: 'syz.2.1721': attribute type 2 has an invalid length. [ 266.102833][T12065] netlink: 'syz.2.1721': attribute type 2 has an invalid length. [ 267.113882][T12119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.257427][T12125] netlink: 'syz.0.1739': attribute type 1 has an invalid length. [ 267.282799][T12125] netlink: 'syz.0.1739': attribute type 4 has an invalid length. [ 267.304661][T12125] __nla_validate_parse: 17 callbacks suppressed [ 267.304681][T12125] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1739'. [ 267.326247][T12128] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 267.333751][T12128] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 267.683276][T12142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1745'. [ 267.784257][T12144] openvswitch: netlink: Multiple metadata blocks provided [ 268.140529][T12164] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1750'. [ 268.507957][T12178] IPv6: Can't replace route, no match found [ 268.564425][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1758'. [ 268.782986][T12198] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 268.789839][T12198] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 268.806753][T12199] ip6erspan0: entered promiscuous mode [ 268.822665][T12199] ip6erspan0: entered allmulticast mode [ 268.853518][T12195] sctp: [Deprecated]: syz.0.1761 (pid 12195) Use of int in max_burst socket option deprecated. [ 268.853518][T12195] Use struct sctp_assoc_value instead [ 268.936124][T12198] netem: change failed [ 268.972708][T12209] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 269.114194][T12213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1764'. [ 269.291033][T12228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1768'. [ 269.302217][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1768'. [ 269.316592][T12228] netlink: 'syz.2.1768': attribute type 1 has an invalid length. [ 269.330811][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1768'. [ 269.518225][T12239] netlink: 'syz.0.1771': attribute type 1 has an invalid length. [ 269.526384][T12240] netlink: 'syz.0.1771': attribute type 1 has an invalid length. [ 269.572718][T12239] 8021q: adding VLAN 0 to HW filter on device bond4 [ 269.619704][T12247] 8021q: adding VLAN 0 to HW filter on device bond4 [ 269.640710][T12247] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 269.653436][T12247] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 269.736813][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1775'. [ 269.748197][T12258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1775'. [ 269.773661][T12240] veth7: entered promiscuous mode [ 269.782739][T12240] bond4: (slave veth7): Enslaving as an active interface with a down link [ 269.870489][T12264] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 270.466294][T12290] netem: incorrect ge model size [ 270.489882][T12290] netem: change failed [ 270.632267][T12301] netlink: 'syz.0.1789': attribute type 12 has an invalid length. [ 270.728244][T12302] netlink: 'syz.0.1789': attribute type 12 has an invalid length. [ 270.989229][T12329] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 271.392299][T12355] netlink: 'syz.0.1805': attribute type 10 has an invalid length. [ 271.461469][T12355] veth1_macvtap: left promiscuous mode [ 271.507428][T12363] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 271.591820][T12353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.806022][T12371] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.818621][T12371] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.868961][T12380] tipc: Enabled bearer , priority 0 [ 271.877044][T12380] syzkaller0: entered promiscuous mode [ 271.882650][T12380] syzkaller0: entered allmulticast mode [ 271.940180][T12371] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.952443][T12385] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 271.961213][T12371] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.010084][T12386] tipc: Resetting bearer [ 272.034182][T12379] tipc: Resetting bearer [ 272.091304][T12379] tipc: Disabling bearer [ 272.133858][T12371] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.146129][T12371] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.294541][T12371] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.312760][T12371] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.345710][T12403] __nla_validate_parse: 5 callbacks suppressed [ 272.345728][T12403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1818'. [ 272.472770][T12406] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1822'. [ 272.548404][ T3468] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.582169][ T3468] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.830531][ T152] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.856357][ T152] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.899529][ T152] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.925633][ T152] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.985590][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.005272][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.051039][T12433] netlink: 360 bytes leftover after parsing attributes in process `syz.4.1828'. [ 273.081568][T12435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1829'. [ 273.129850][T12439] netlink: 'syz.3.1831': attribute type 1 has an invalid length. [ 273.279994][T12445] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20004 [ 273.557306][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1839'. [ 273.832339][T12481] veth0: entered promiscuous mode [ 273.854903][T12480] veth0: left promiscuous mode [ 273.992524][T12489] bond5: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 274.008184][T12489] bond5: entered promiscuous mode [ 274.013329][T12489] bond5: entered allmulticast mode [ 274.022945][T12489] 8021q: adding VLAN 0 to HW filter on device bond5 [ 274.162741][T12492] sctp: [Deprecated]: syz.3.1848 (pid 12492) Use of int in max_burst socket option deprecated. [ 274.162741][T12492] Use struct sctp_assoc_value instead [ 274.253683][T12509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1851'. [ 274.333444][T12516] netlink: 'syz.3.1854': attribute type 1 has an invalid length. [ 274.342762][T12516] netlink: 'syz.3.1854': attribute type 2 has an invalid length. [ 274.352047][T12516] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.1854'. [ 274.368020][T12518] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 274.415025][T12518] bond6: (slave vcan1): Error -95 calling set_mac_address [ 274.571210][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'. [ 274.595849][T12526] nbd1: detected capacity change from 0 to 127 [ 274.686702][T12528] nbd2: detected capacity change from 0 to 127 [ 274.742252][ T5875] block nbd2: Receive control failed (result -104) [ 274.742303][ T5883] block nbd1: Receive control failed (result -32) [ 274.801554][T12547] netlink: 'syz.3.1863': attribute type 10 has an invalid length. [ 274.810961][T12547] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1863'. [ 274.817375][T12544] tipc: Enabled bearer , priority 0 [ 274.845404][T12547] team0: Port device geneve0 added [ 274.846741][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1861'. [ 274.898127][T12544] tipc: Disabling bearer [ 274.932230][T12545] netlink: 'syz.2.1861': attribute type 14 has an invalid length. [ 274.948529][T12545] netlink: 'syz.2.1861': attribute type 13 has an invalid length. [ 275.194708][T12566] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 275.236138][T12572] syzkaller1: entered promiscuous mode [ 275.247759][T12572] syzkaller1: entered allmulticast mode [ 275.457750][T12584] netlink: 'syz.1.1870': attribute type 23 has an invalid length. [ 275.688387][T12595] sctp: [Deprecated]: syz.0.1874 (pid 12595) Use of int in max_burst socket option. [ 275.688387][T12595] Use struct sctp_assoc_value instead [ 275.961028][T12614] tipc: Enabling of bearer rejected, failed to enable media [ 276.626976][T12643] netlink: 'syz.0.1884': attribute type 11 has an invalid length. [ 276.719269][T12644] bond3: (slave veth11): Enslaving as an active interface with an up link [ 277.059728][T12667] netlink: 'syz.3.1891': attribute type 29 has an invalid length. [ 277.090105][T12667] netlink: 'syz.3.1891': attribute type 29 has an invalid length. [ 277.496648][T12690] __nla_validate_parse: 56 callbacks suppressed [ 277.496667][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'. [ 278.094660][T12733] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1911'. [ 278.484750][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1916'. [ 278.697505][T12759] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1920'. [ 278.812889][T12768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1921'. [ 279.690802][T12814] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20004 [ 280.327114][T12851] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1941'. [ 280.345407][T12851] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 280.351283][T12844] can: request_module (can-proto-0) failed. [ 280.435757][T12854] netlink: 'syz.1.1942': attribute type 1 has an invalid length. [ 280.465339][T12854] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1942'. [ 280.656195][T12868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.722470][T12873] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1949'. [ 280.734250][T12869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.763604][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1947'. [ 280.851374][T12879] nbd: couldn't find a device at index -373156329 [ 280.891587][T12879] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 280.924566][T12879] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 280.939454][T12879] gretap1: entered promiscuous mode [ 280.947274][T12879] gretap1: entered allmulticast mode [ 280.982677][T12881] geneve3: entered promiscuous mode [ 280.989796][T12881] geneve3: entered allmulticast mode [ 281.008334][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 281.029895][T12884] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1953'. [ 281.076775][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 281.111657][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 281.160982][T12893] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 281.169544][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 281.254525][T12905] tipc: Enabled bearer , priority 0 [ 281.376381][T12905] tipc: Resetting bearer [ 281.439714][T12915] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyڇv[Dwz [ 281.744302][T12934] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 281.783751][T12942] netlink: 'syz.2.1964': attribute type 1 has an invalid length. [ 281.810162][T12944] netlink: 'syz.0.1965': attribute type 1 has an invalid length. [ 282.082520][T12960] veth0_macvtap: entered promiscuous mode [ 282.092274][T12960] veth0_macvtap: entered allmulticast mode [ 282.100752][T12960] macvtap0: left allmulticast mode [ 282.108450][T12960] veth0_macvtap: left allmulticast mode [ 282.126445][T12962] netlink: 'syz.0.1968': attribute type 1 has an invalid length. [ 282.245623][ T43] tipc: Node number set to 996173325 [ 283.277448][T13028] __nla_validate_parse: 3 callbacks suppressed [ 283.277468][T13028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1985'. [ 283.401162][T13036] netlink: 'syz.2.1987': attribute type 1 has an invalid length. [ 283.415671][T13036] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1987'. [ 284.088971][T13075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1999'. [ 284.271251][T13088] netlink: 'syz.2.2003': attribute type 1 has an invalid length. [ 284.291793][T13088] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 284.346869][T13095] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2004'. [ 284.383070][T13101] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2006'. [ 284.397417][T13101] netlink: 'syz.3.2006': attribute type 1 has an invalid length. [ 284.940421][T13137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2015'. [ 285.005519][T13138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2015'. [ 285.192290][T13152] netlink: 'syz.2.2020': attribute type 4 has an invalid length. [ 285.214950][T13155] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2021'. [ 285.218031][T13152] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2020'. [ 285.240458][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2021'. [ 285.302336][T13159] macvtap1: entered promiscuous mode [ 285.315455][T13159] vlan0: entered promiscuous mode [ 285.320899][T13159] macvtap1: entered allmulticast mode [ 285.329957][T13159] vlan0: entered allmulticast mode [ 285.337478][T13159] veth0_vlan: entered allmulticast mode [ 285.375873][T13160] macvtap2: entered promiscuous mode [ 285.381412][T13160] macvtap2: entered allmulticast mode [ 285.591404][T13172] openvswitch: netlink: IPv6 tunnel dst address is zero [ 285.961062][T13194] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 285.969475][T13194] team0: Device macvtap3 is already an upper device of the team interface [ 286.206647][T13213] sctp: [Deprecated]: syz.1.2041 (pid 13213) Use of int in maxseg socket option. [ 286.206647][T13213] Use struct sctp_assoc_value instead [ 286.404814][T13219] netlink: 'syz.0.2042': attribute type 10 has an invalid length. [ 286.496198][T13225] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 286.631298][T13229] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 286.642544][T13229] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 286.740528][T13231] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 286.761653][T13231] syzkaller0: Linktype set failed because interface is up [ 286.861223][T13242] openvswitch: netlink: EtherType 0 is less than min 600 [ 286.874010][T13242] netlink: 'syz.4.2051': attribute type 1 has an invalid length. [ 288.449698][T13264] __nla_validate_parse: 11 callbacks suppressed [ 288.449718][T13264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'. [ 288.629283][T13277] tipc: Enabling of bearer rejected, media not registered [ 288.787858][T13282] bridge0: port 1(veth1_macvtap) entered blocking state [ 288.812245][T13282] bridge0: port 1(veth1_macvtap) entered disabled state [ 288.855599][T13282] veth1_macvtap: entered allmulticast mode [ 288.876302][T13282] veth1_macvtap: entered promiscuous mode [ 289.303491][T13310] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2070'. [ 289.424135][T13329] netlink: 'syz.0.2075': attribute type 1 has an invalid length. [ 289.432129][T13329] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2075'. [ 289.461051][T13329] nbd: illegal input index 1048576 [ 289.707426][T13342] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2079'. [ 289.879672][T13356] tipc: Enabled bearer , priority 0 [ 289.918558][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'. [ 290.011008][T13365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2086'. [ 290.085515][T13365] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2086'. [ 290.122344][T13365] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2086'. [ 290.249171][T13383] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2089'. [ 290.323043][T13387] netlink: 'syz.3.2090': attribute type 10 has an invalid length. [ 290.337091][T13382] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2088'. [ 290.416890][T13387] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.445575][T13387] bridge_slave_1: left allmulticast mode [ 290.461576][T13387] bridge_slave_1: left promiscuous mode [ 290.482064][T13387] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.534537][T13387] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 290.675968][T13397] netlink: 'syz.2.2092': attribute type 6 has an invalid length. [ 290.859689][T13400] team0 (unregistering): Port device team_slave_0 removed [ 290.908984][T13400] team0 (unregistering): Port device team_slave_1 removed [ 290.951322][T13424] batadv1: left allmulticast mode [ 290.960287][T13424] batadv1: left promiscuous mode [ 290.967743][T13424] bridge0: port 3(batadv1) entered disabled state [ 290.990416][T13424] bridge_slave_0: left allmulticast mode [ 291.008605][T13424] bridge_slave_0: left promiscuous mode [ 291.014671][T13424] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.265844][T13438] netlink: 'syz.4.2104': attribute type 1 has an invalid length. [ 291.455607][T13440] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 291.496991][T13444] siw: device registration error -23 [ 291.812746][T13465] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003 [ 292.012183][T13480] sock: sock_timestamping_bind_phc: sock not bind to device [ 292.151242][T13487] netlink: 'syz.4.2123': attribute type 1 has an invalid length. [ 292.173703][T13490] netlink: 'syz.3.2121': attribute type 1 has an invalid length. [ 292.310694][T13498] openvswitch: netlink: Flow actions attr not present in new flow. [ 292.336664][T13499] openvswitch: netlink: Flow actions attr not present in new flow. [ 292.407241][T13498] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 292.427441][T13498] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 292.435447][T13498] gretap1: entered promiscuous mode [ 292.440791][T13498] gretap1: entered allmulticast mode [ 292.481375][T13505] veth12: entered allmulticast mode [ 292.523077][T13505] veth13: entered promiscuous mode [ 292.525125][T13509] netlink: zone id is out of range [ 292.530407][T13505] veth13: entered allmulticast mode [ 292.533565][T13509] netlink: zone id is out of range [ 292.544532][T13509] netlink: zone id is out of range [ 292.550817][T13509] netlink: del zone limit has 4 unknown bytes [ 292.828965][T13478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.269877][T13547] netlink: 'syz.3.2145': attribute type 10 has an invalid length. [ 293.299293][T13547] team0: Port device dummy0 added [ 293.312425][T13553] netlink: 'syz.1.2146': attribute type 1 has an invalid length. [ 293.521899][T13564] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 293.537717][T13564] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 293.550225][T13564] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 293.668806][T13572] __nla_validate_parse: 17 callbacks suppressed [ 293.668824][T13572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2153'. [ 293.787098][T13580] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 293.810214][T13580] netlink: 'syz.0.2155': attribute type 3 has an invalid length. [ 294.253416][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2162'. [ 294.298427][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2163'. [ 294.782330][T13636] netlink: 'syz.1.2171': attribute type 39 has an invalid length. [ 294.988813][T13646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2173'. [ 295.270459][T13654] netlink: 'syz.3.2177': attribute type 16 has an invalid length. [ 295.278497][T13654] netlink: 'syz.3.2177': attribute type 3 has an invalid length. [ 295.289056][T13654] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2177'. [ 295.303103][T13659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2181'. [ 295.409535][T13665] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2182'. [ 295.452851][T13666] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2182'. [ 296.130539][T13714] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2198'. [ 296.178934][T13714] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2198'. [ 296.560682][T13736] openvswitch: netlink: Key type 284 is out of range max 32 [ 297.026155][T13761] bridge0: port 2(syz_tun) entered blocking state [ 297.054325][T13761] bridge0: port 2(syz_tun) entered disabled state [ 297.071073][T13761] syz_tun: entered allmulticast mode [ 297.102701][T13767] netlink: 'syz.4.2215': attribute type 10 has an invalid length. [ 297.135756][T13761] syz_tun: entered promiscuous mode [ 297.199968][T13771] openvswitch: netlink: Message has 5 unknown bytes. [ 297.405466][T13784] openvswitch: netlink: Flow key attr not present in new flow. [ 297.594552][T13797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.757283][T13804] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 297.766394][T13804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.884568][T13813] netlink: 'syz.2.2231': attribute type 1 has an invalid length. [ 298.246704][T13830] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 298.268339][ T59] tipc: Subscription rejected, illegal request [ 298.305722][T13830] tap0: tun_chr_ioctl cmd 1074025677 [ 298.311271][T13830] tap0: linktype set to 65534 [ 298.355971][T13838] netlink: 'syz.2.2239': attribute type 1 has an invalid length. [ 298.363746][T13838] netlink: 'syz.2.2239': attribute type 4 has an invalid length. [ 298.449729][T13849] netlink: 'syz.0.2242': attribute type 1 has an invalid length. [ 298.772001][T13875] __nla_validate_parse: 11 callbacks suppressed [ 298.772021][T13875] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2248'. [ 298.792543][T13869] tipc: Enabled bearer , priority 0 [ 298.818556][T13869] syzkaller0: entered promiscuous mode [ 298.831233][T13869] syzkaller0: entered allmulticast mode [ 298.917597][T13869] tipc: Resetting bearer [ 298.936564][T13883] tipc: Failed to remove unknown binding: 66,1,1/996173325:4101195427/4101195429 [ 298.949554][T13882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2250'. [ 298.958862][T13883] tipc: Failed to remove unknown binding: 66,1,1/996173325:4101195427/4101195429 [ 298.973696][T13868] tipc: Resetting bearer [ 299.020413][T13868] tipc: Disabling bearer [ 299.172340][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2251'. [ 299.290691][T13902] netlink: 'syz.0.2253': attribute type 1 has an invalid length. [ 299.496907][T13903] 8021q: adding VLAN 0 to HW filter on device bond7 [ 299.505818][T13903] bond6: (slave bond7): making interface the new active one [ 299.513924][T13903] bond6: (slave bond7): Enslaving as an active interface with an up link [ 299.541978][T13902] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 299.545560][T13921] netlink: 'syz.4.2259': attribute type 2 has an invalid length. [ 299.751075][T13928] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2262'. [ 299.760965][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2263'. [ 299.768408][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2260'. [ 299.782293][T13932] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2265'. [ 299.867449][T13932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2265'. [ 299.908176][T13932] xt_l2tp: missing protocol rule (udp|l2tpip) [ 299.961017][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2268'. [ 300.201838][T13952] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2273'. [ 300.359602][T13961] FAULT_INJECTION: forcing a failure. [ 300.359602][T13961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.407906][T13961] CPU: 1 UID: 0 PID: 13961 Comm: syz.2.2276 Not tainted syzkaller #0 PREEMPT(full) [ 300.407948][T13961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 300.407961][T13961] Call Trace: [ 300.407970][T13961] [ 300.407979][T13961] dump_stack_lvl+0x189/0x250 [ 300.408008][T13961] ? __pfx____ratelimit+0x10/0x10 [ 300.408031][T13961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.408055][T13961] ? __pfx__printk+0x10/0x10 [ 300.408082][T13961] ? __might_fault+0xb0/0x130 [ 300.408123][T13961] should_fail_ex+0x414/0x560 [ 300.408158][T13961] _copy_from_iter+0x1de/0x1790 [ 300.408179][T13961] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 300.408211][T13961] ? rcu_is_watching+0x15/0xb0 [ 300.408232][T13961] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 300.408261][T13961] ? __pfx__copy_from_iter+0x10/0x10 [ 300.408286][T13961] ? __build_skb_around+0x257/0x3e0 [ 300.408312][T13961] ? netlink_sendmsg+0x642/0xb30 [ 300.408332][T13961] ? skb_put+0x11b/0x210 [ 300.408359][T13961] netlink_sendmsg+0x6b2/0xb30 [ 300.408390][T13961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.408415][T13961] ? aa_sock_msg_perm+0xf1/0x1d0 [ 300.408437][T13961] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.408459][T13961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.408482][T13961] __sock_sendmsg+0x21c/0x270 [ 300.408514][T13961] ____sys_sendmsg+0x505/0x830 [ 300.408543][T13961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.408574][T13961] ? import_iovec+0x74/0xa0 [ 300.408601][T13961] ___sys_sendmsg+0x21f/0x2a0 [ 300.408627][T13961] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.408688][T13961] ? __fget_files+0x2a/0x420 [ 300.408704][T13961] ? __fget_files+0x3a0/0x420 [ 300.408729][T13961] __x64_sys_sendmsg+0x19b/0x260 [ 300.408754][T13961] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.408786][T13961] ? __pfx_ksys_write+0x10/0x10 [ 300.408809][T13961] ? rcu_is_watching+0x15/0xb0 [ 300.408833][T13961] ? do_syscall_64+0xbe/0x3b0 [ 300.408859][T13961] do_syscall_64+0xfa/0x3b0 [ 300.408880][T13961] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.408899][T13961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.408919][T13961] ? clear_bhb_loop+0x60/0xb0 [ 300.408948][T13961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.408966][T13961] RIP: 0033:0x7f75f2d8eec9 [ 300.408983][T13961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.408998][T13961] RSP: 002b:00007f75f3cd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.409023][T13961] RAX: ffffffffffffffda RBX: 00007f75f2fe5fa0 RCX: 00007f75f2d8eec9 [ 300.409038][T13961] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000003 [ 300.409049][T13961] RBP: 00007f75f3cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 300.409062][T13961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.409074][T13961] R13: 00007f75f2fe6038 R14: 00007f75f2fe5fa0 R15: 00007ffec6aa8a28 [ 300.409102][T13961] [ 300.723122][T13967] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 300.849092][T13971] tipc: Enabled bearer , priority 0 [ 300.886769][T13971] syzkaller0: entered promiscuous mode [ 300.892295][T13971] syzkaller0: entered allmulticast mode [ 301.028329][T13971] tipc: Resetting bearer [ 301.068895][T13968] tipc: Resetting bearer [ 301.087456][T13968] tipc: Disabling bearer [ 301.293706][T13999] veth1_to_bond: entered allmulticast mode [ 301.352095][T14006] FAULT_INJECTION: forcing a failure. [ 301.352095][T14006] name failslab, interval 1, probability 0, space 0, times 0 [ 301.381177][T14006] CPU: 1 UID: 0 PID: 14006 Comm: syz.2.2293 Not tainted syzkaller #0 PREEMPT(full) [ 301.381206][T14006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 301.381218][T14006] Call Trace: [ 301.381226][T14006] [ 301.381235][T14006] dump_stack_lvl+0x189/0x250 [ 301.381265][T14006] ? __pfx____ratelimit+0x10/0x10 [ 301.381286][T14006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.381310][T14006] ? __pfx__printk+0x10/0x10 [ 301.381339][T14006] ? __lock_acquire+0xab9/0xd20 [ 301.381378][T14006] should_fail_ex+0x414/0x560 [ 301.381413][T14006] should_failslab+0xa8/0x100 [ 301.381445][T14006] kmem_cache_alloc_noprof+0x73/0x3c0 [ 301.381470][T14006] ? skb_clone+0x212/0x3a0 [ 301.381502][T14006] skb_clone+0x212/0x3a0 [ 301.381533][T14006] __netlink_deliver_tap+0x404/0x850 [ 301.381569][T14006] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.381593][T14006] netlink_deliver_tap+0x19c/0x1b0 [ 301.381616][T14006] netlink_unicast+0x7fa/0x9e0 [ 301.381657][T14006] ? __pfx_netlink_unicast+0x10/0x10 [ 301.381691][T14006] ? netlink_sendmsg+0x642/0xb30 [ 301.381710][T14006] ? skb_put+0x11b/0x210 [ 301.381737][T14006] netlink_sendmsg+0x805/0xb30 [ 301.381771][T14006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.381797][T14006] ? aa_sock_msg_perm+0xf1/0x1d0 [ 301.381820][T14006] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 301.381841][T14006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.381865][T14006] __sock_sendmsg+0x21c/0x270 [ 301.381900][T14006] ____sys_sendmsg+0x505/0x830 [ 301.381932][T14006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.381969][T14006] ? import_iovec+0x74/0xa0 [ 301.382000][T14006] ___sys_sendmsg+0x21f/0x2a0 [ 301.382028][T14006] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.382101][T14006] ? __fget_files+0x2a/0x420 [ 301.382118][T14006] ? __fget_files+0x3a0/0x420 [ 301.382148][T14006] __x64_sys_sendmsg+0x19b/0x260 [ 301.382180][T14006] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 301.382217][T14006] ? __pfx_ksys_write+0x10/0x10 [ 301.382241][T14006] ? rcu_is_watching+0x15/0xb0 [ 301.382268][T14006] ? do_syscall_64+0xbe/0x3b0 [ 301.382295][T14006] do_syscall_64+0xfa/0x3b0 [ 301.382316][T14006] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.382337][T14006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.382357][T14006] ? clear_bhb_loop+0x60/0xb0 [ 301.382381][T14006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.382401][T14006] RIP: 0033:0x7f75f2d8eec9 [ 301.382419][T14006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.382437][T14006] RSP: 002b:00007f75f3cd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.382459][T14006] RAX: ffffffffffffffda RBX: 00007f75f2fe5fa0 RCX: 00007f75f2d8eec9 [ 301.382474][T14006] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000003 [ 301.382487][T14006] RBP: 00007f75f3cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 301.382500][T14006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.382513][T14006] R13: 00007f75f2fe6038 R14: 00007f75f2fe5fa0 R15: 00007ffec6aa8a28 [ 301.382547][T14006] [ 301.774638][T14007] bond7 (unregistering): Released all slaves [ 301.806884][T13999] veth1_to_bond: left allmulticast mode [ 301.869415][ T3521] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.878363][ T3521] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.887353][ T3521] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.896921][ T3521] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.008765][T14018] tipc: Enabled bearer , priority 0 [ 302.016812][T14018] syzkaller0: entered promiscuous mode [ 302.022467][T14018] syzkaller0: entered allmulticast mode [ 302.033460][T14018] tipc: Resetting bearer [ 302.213952][T14017] tipc: Resetting bearer [ 302.249049][T14017] tipc: Disabling bearer [ 302.356919][T14038] netlink: 'syz.0.2303': attribute type 11 has an invalid length. [ 302.452752][T14045] tipc: Enabling of bearer rejected, failed to enable media [ 302.744215][T14059] netlink: 'syz.1.2314': attribute type 4 has an invalid length. [ 302.865421][T14069] netlink: 'syz.3.2316': attribute type 1 has an invalid length. [ 302.902874][T14069] nbd: couldn't find device at index 1048576 [ 303.141740][T14082] netlink: 'syz.1.2321': attribute type 30 has an invalid length. [ 303.141740][T14083] netlink: 'syz.1.2321': attribute type 30 has an invalid length. [ 303.249720][T14083] IPVS: length: 24 != 12312 [ 303.254471][T14082] IPVS: length: 24 != 12312 [ 303.315495][T14095] tipc: Enabled bearer , priority 10 [ 303.482018][T14107] netlink: 'syz.3.2327': attribute type 1 has an invalid length. [ 303.630626][T14119] netlink: 'syz.0.2330': attribute type 10 has an invalid length. [ 303.929274][T14133] __nla_validate_parse: 19 callbacks suppressed [ 303.929293][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2336'. [ 303.961870][T14131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2333'. [ 303.989833][T14131] netlink: 'syz.0.2333': attribute type 1 has an invalid length. [ 304.027942][T14133] netlink: 'syz.2.2336': attribute type 6 has an invalid length. [ 304.059052][T14128] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2333'. [ 304.169858][T14151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.203664][T14156] netlink: 'syz.3.2341': attribute type 10 has an invalid length. [ 304.289794][T14156] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 304.447340][T14168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2346'. [ 304.511283][T14170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2347'. [ 304.535535][T14170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2347'. [ 304.869814][T14174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.879165][T14200] batadv_slave_1: entered promiscuous mode [ 304.892247][T14196] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2355'. [ 304.903997][T14198] batadv_slave_1: left promiscuous mode [ 304.917676][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2355'. [ 305.061756][ T11] block nbd1: Possible stuck request ffff888025c27000: control (read@0,1024B). Runtime 30 seconds [ 305.073930][ T11] block nbd1: Possible stuck request ffff888025c271c0: control (read@1024,1024B). Runtime 30 seconds [ 305.086590][ T128] block nbd2: Possible stuck request ffff888025c57000: control (read@0,1024B). Runtime 30 seconds [ 305.097963][ T11] block nbd1: Possible stuck request ffff888025c27380: control (read@2048,1024B). Runtime 30 seconds [ 305.108974][ T128] block nbd2: Possible stuck request ffff888025c571c0: control (read@1024,1024B). Runtime 30 seconds [ 305.123200][ T11] block nbd1: Possible stuck request ffff888025c27540: control (read@3072,1024B). Runtime 30 seconds [ 305.140566][ T128] block nbd2: Possible stuck request ffff888025c57380: control (read@2048,1024B). Runtime 30 seconds [ 305.151779][ T128] block nbd2: Possible stuck request ffff888025c57540: control (read@3072,1024B). Runtime 30 seconds [ 305.291174][T14213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2362'. [ 305.311159][T14213] tipc: Invalid UDP bearer configuration [ 305.311221][T14213] tipc: Enabling of bearer rejected, failed to enable media [ 306.240382][T14295] netlink: 'syz.2.2369': attribute type 5 has an invalid length. [ 306.448692][T14298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2370'. [ 306.581299][T14309] x_tables: ip_tables: udp match: only valid for protocol 17 [ 306.723702][T14312] bond5: option lp_interval: invalid value (0) [ 306.734423][T14312] bond5: option lp_interval: allowed values 1 - 2147483647 [ 306.784506][T14312] bond5 (unregistering): Released all slaves [ 307.419649][T14359] IPVS: Scheduler module ip_vs_sip not found [ 307.426559][T14355] IPVS: Scheduler module ip_vs_sip not found [ 307.571519][T14370] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 307.612507][T14370] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 307.621173][T14370] gretap2: entered promiscuous mode [ 307.627718][T14370] gretap2: entered allmulticast mode [ 308.318960][T14418] tipc: Failed to remove unknown binding: 66,1,1/1:1843327953/1843327955 [ 308.350248][T14418] tipc: Failed to remove unknown binding: 66,1,1/1:1843327953/1843327955 [ 308.427888][T14427] validate_nla: 3 callbacks suppressed [ 308.427907][T14427] netlink: 'syz.0.2410': attribute type 1 has an invalid length. [ 308.495031][T14427] netlink: 'syz.0.2410': attribute type 1 has an invalid length. [ 308.540164][T14427] netlink: 'syz.0.2410': attribute type 2 has an invalid length. [ 308.761198][T14451] tipc: Enabling of bearer rejected, already enabled [ 308.913736][T14452] tipc: Resetting bearer [ 309.083610][T14470] sctp: [Deprecated]: syz.1.2421 (pid 14470) Use of int in maxseg socket option. [ 309.083610][T14470] Use struct sctp_assoc_value instead [ 309.148273][T14474] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 309.193806][T14474] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 309.210764][T14481] netlink: 'syz.3.2423': attribute type 1 has an invalid length. [ 309.387178][T14489] __nla_validate_parse: 8 callbacks suppressed [ 309.387197][T14489] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2424'. [ 309.422384][T14487] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 309.459811][T14487] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 309.568396][T14481] bond5: (slave bridge5): Enslaving as an active interface with a down link [ 309.588614][T14501] netlink: 'syz.2.2425': attribute type 4 has an invalid length. [ 309.616432][T14495] gretap3: entered promiscuous mode [ 309.621839][T14495] gretap3: entered allmulticast mode [ 309.631317][T14495] bond5: (slave gretap3): making interface the new active one [ 309.647484][T14495] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 309.711034][T14505] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2427'. [ 309.813451][T14507] FAULT_INJECTION: forcing a failure. [ 309.813451][T14507] name failslab, interval 1, probability 0, space 0, times 0 [ 309.851752][T14507] CPU: 1 UID: 0 PID: 14507 Comm: syz.0.2429 Not tainted syzkaller #0 PREEMPT(full) [ 309.851779][T14507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 309.851792][T14507] Call Trace: [ 309.851800][T14507] [ 309.851809][T14507] dump_stack_lvl+0x189/0x250 [ 309.851838][T14507] ? __pfx____ratelimit+0x10/0x10 [ 309.851860][T14507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.851884][T14507] ? __pfx__printk+0x10/0x10 [ 309.851908][T14507] ? netlink_unicast+0x82c/0x9e0 [ 309.851939][T14507] ? ___sys_sendmsg+0x21f/0x2a0 [ 309.851962][T14507] ? do_syscall_64+0xfa/0x3b0 [ 309.851997][T14507] should_fail_ex+0x414/0x560 [ 309.852032][T14507] should_failslab+0xa8/0x100 [ 309.852063][T14507] kmem_cache_alloc_noprof+0x73/0x3c0 [ 309.852089][T14507] ? skb_clone+0x212/0x3a0 [ 309.852121][T14507] skb_clone+0x212/0x3a0 [ 309.852150][T14507] __netlink_deliver_tap+0x404/0x850 [ 309.852186][T14507] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.852210][T14507] netlink_deliver_tap+0x19c/0x1b0 [ 309.852233][T14507] netlink_sendskb+0x68/0x140 [ 309.852265][T14507] netlink_unicast+0x397/0x9e0 [ 309.852293][T14507] ? __asan_memcpy+0x40/0x70 [ 309.852325][T14507] ? __pfx_netlink_unicast+0x10/0x10 [ 309.852367][T14507] netlink_rcv_skb+0x28c/0x470 [ 309.852390][T14507] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 309.852414][T14507] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 309.852448][T14507] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.852479][T14507] netlink_unicast+0x82c/0x9e0 [ 309.852525][T14507] ? __pfx_netlink_unicast+0x10/0x10 [ 309.852559][T14507] ? netlink_sendmsg+0x642/0xb30 [ 309.852579][T14507] ? skb_put+0x11b/0x210 [ 309.852605][T14507] netlink_sendmsg+0x805/0xb30 [ 309.852638][T14507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.852665][T14507] ? aa_sock_msg_perm+0xf1/0x1d0 [ 309.852688][T14507] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 309.852710][T14507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.852733][T14507] __sock_sendmsg+0x21c/0x270 [ 309.852771][T14507] ____sys_sendmsg+0x505/0x830 [ 309.852803][T14507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.852839][T14507] ? import_iovec+0x74/0xa0 [ 309.852869][T14507] ___sys_sendmsg+0x21f/0x2a0 [ 309.852898][T14507] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.852964][T14507] ? __fget_files+0x2a/0x420 [ 309.852981][T14507] ? __fget_files+0x3a0/0x420 [ 309.853012][T14507] __x64_sys_sendmsg+0x19b/0x260 [ 309.853041][T14507] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 309.853078][T14507] ? __pfx_ksys_write+0x10/0x10 [ 309.853101][T14507] ? rcu_is_watching+0x15/0xb0 [ 309.853128][T14507] ? do_syscall_64+0xbe/0x3b0 [ 309.853155][T14507] do_syscall_64+0xfa/0x3b0 [ 309.853176][T14507] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.853197][T14507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.853217][T14507] ? clear_bhb_loop+0x60/0xb0 [ 309.853242][T14507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.853261][T14507] RIP: 0033:0x7f3545f8eec9 [ 309.853279][T14507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.853297][T14507] RSP: 002b:00007f3546e62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.853318][T14507] RAX: ffffffffffffffda RBX: 00007f35461e5fa0 RCX: 00007f3545f8eec9 [ 309.853333][T14507] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000003 [ 309.853347][T14507] RBP: 00007f3546e62090 R08: 0000000000000000 R09: 0000000000000000 [ 309.853360][T14507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 309.853372][T14507] R13: 00007f35461e6038 R14: 00007f35461e5fa0 R15: 00007ffda9ab6728 [ 309.853405][T14507] [ 310.441346][T14527] tipc: Enabled bearer , priority 10 [ 310.485125][T14527] netlink: zone id is out of range [ 310.486581][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2435'. [ 310.503504][T14527] netlink: zone id is out of range [ 310.513978][T14527] netlink: zone id is out of range [ 310.519846][T14527] netlink: zone id is out of range [ 310.525254][T14527] netlink: zone id is out of range [ 310.531169][T14527] netlink: del zone limit has 4 unknown bytes [ 310.885995][T14553] FAULT_INJECTION: forcing a failure. [ 310.885995][T14553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.923789][T14553] CPU: 1 UID: 0 PID: 14553 Comm: syz.3.2444 Not tainted syzkaller #0 PREEMPT(full) [ 310.923816][T14553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 310.923828][T14553] Call Trace: [ 310.923836][T14553] [ 310.923844][T14553] dump_stack_lvl+0x189/0x250 [ 310.923871][T14553] ? __pfx____ratelimit+0x10/0x10 [ 310.923893][T14553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.923916][T14553] ? __pfx__printk+0x10/0x10 [ 310.923954][T14553] should_fail_ex+0x414/0x560 [ 310.923987][T14553] _copy_to_user+0x31/0xb0 [ 310.924016][T14553] simple_read_from_buffer+0xe1/0x170 [ 310.924049][T14553] proc_fail_nth_read+0x1b3/0x220 [ 310.924074][T14553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.924099][T14553] ? rw_verify_area+0x2a6/0x4d0 [ 310.924123][T14553] ? __lock_acquire+0xab9/0xd20 [ 310.924148][T14553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.924172][T14553] vfs_read+0x1fd/0xa30 [ 310.924197][T14553] ? fdget_pos+0x247/0x320 [ 310.924218][T14553] ? __pfx___mutex_lock+0x10/0x10 [ 310.924241][T14553] ? __pfx_vfs_read+0x10/0x10 [ 310.924266][T14553] ? __fget_files+0x2a/0x420 [ 310.924290][T14553] ? __fget_files+0x3a0/0x420 [ 310.924306][T14553] ? __fget_files+0x2a/0x420 [ 310.924333][T14553] ksys_read+0x145/0x250 [ 310.924362][T14553] ? __pfx_ksys_read+0x10/0x10 [ 310.924385][T14553] ? rcu_is_watching+0x15/0xb0 [ 310.924412][T14553] ? do_syscall_64+0xbe/0x3b0 [ 310.924437][T14553] do_syscall_64+0xfa/0x3b0 [ 310.924458][T14553] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.924478][T14553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.924507][T14553] ? clear_bhb_loop+0x60/0xb0 [ 310.924532][T14553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.924551][T14553] RIP: 0033:0x7f4f0d58d8dc [ 310.924570][T14553] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 310.924588][T14553] RSP: 002b:00007f4f0e3f4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 310.924609][T14553] RAX: ffffffffffffffda RBX: 00007f4f0d7e5fa0 RCX: 00007f4f0d58d8dc [ 310.924623][T14553] RDX: 000000000000000f RSI: 00007f4f0e3f40a0 RDI: 0000000000000008 [ 310.924636][T14553] RBP: 00007f4f0e3f4090 R08: 0000000000000000 R09: 0000000000000000 [ 310.924648][T14553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.924661][T14553] R13: 00007f4f0d7e6038 R14: 00007f4f0d7e5fa0 R15: 00007fffbba82498 [ 310.924694][T14553] [ 311.466881][ T5867] tipc: Node number set to 2826598977 [ 311.517034][T14582] netlink: 212264 bytes leftover after parsing attributes in process `syz.2.2450'. [ 311.776577][T14601] GUP no longer grows the stack in syz.2.2460 (14601): 200000006000-200000008000 (200000005000) [ 311.791152][T14604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2461'. [ 311.804125][T14601] CPU: 1 UID: 0 PID: 14601 Comm: syz.2.2460 Not tainted syzkaller #0 PREEMPT(full) [ 311.804155][T14601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 311.804168][T14601] Call Trace: [ 311.804177][T14601] [ 311.804186][T14601] dump_stack_lvl+0x189/0x250 [ 311.804222][T14601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.804249][T14601] ? __pfx__printk+0x10/0x10 [ 311.804274][T14601] ? find_vma+0xe7/0x160 [ 311.804317][T14601] __get_user_pages+0x24d0/0x2ce0 [ 311.804339][T14601] ? __lock_acquire+0xab9/0xd20 [ 311.804405][T14601] ? __gup_longterm_locked+0xc68/0x1660 [ 311.804441][T14601] __gup_longterm_locked+0xde9/0x1660 [ 311.804483][T14601] ? sanity_check_pinned_pages+0x123a/0x1300 [ 311.804520][T14601] gup_fast_fallback+0x1e6a/0x2010 [ 311.804585][T14601] ? __pfx_gup_fast_fallback+0x10/0x10 [ 311.804617][T14601] ? __lock_acquire+0xab9/0xd20 [ 311.804655][T14601] ? pin_user_pages_fast+0x4d/0xb0 [ 311.804685][T14601] iov_iter_extract_pages+0x35a/0x5e0 [ 311.804724][T14601] extract_iter_to_sg+0xe46/0x24e0 [ 311.804766][T14601] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 311.804790][T14601] ? __local_bh_enable_ip+0x12d/0x1c0 [ 311.804812][T14601] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.804836][T14601] ? __local_bh_enable_ip+0x12d/0x1c0 [ 311.804856][T14601] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 311.804884][T14601] ? __asan_memset+0x22/0x50 [ 311.804911][T14601] hash_sendmsg+0x4f4/0x11d0 [ 311.804977][T14601] ? __pfx_hash_sendmsg+0x10/0x10 [ 311.805012][T14601] __sock_sendmsg+0x21c/0x270 [ 311.805048][T14601] ____sys_sendmsg+0x52d/0x830 [ 311.805081][T14601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.805119][T14601] ? import_iovec+0x74/0xa0 [ 311.805149][T14601] ___sys_sendmsg+0x21f/0x2a0 [ 311.805178][T14601] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.805236][T14601] ? __fget_files+0x2a/0x420 [ 311.805253][T14601] ? __fget_files+0x3a0/0x420 [ 311.805279][T14601] __sys_sendmmsg+0x227/0x430 [ 311.805309][T14601] ? __pfx___sys_sendmmsg+0x10/0x10 [ 311.805330][T14601] ? do_futex+0x395/0x420 [ 311.805362][T14601] ? fd_install+0x97/0x540 [ 311.805417][T14601] ? rcu_is_watching+0x15/0xb0 [ 311.805442][T14601] __x64_sys_sendmmsg+0xa0/0xc0 [ 311.805468][T14601] do_syscall_64+0xfa/0x3b0 [ 311.805487][T14601] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.805506][T14601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.805527][T14601] ? clear_bhb_loop+0x60/0xb0 [ 311.805552][T14601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.805571][T14601] RIP: 0033:0x7f75f2d8eec9 [ 311.805592][T14601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.805610][T14601] RSP: 002b:00007f75f3cd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 311.805633][T14601] RAX: ffffffffffffffda RBX: 00007f75f2fe5fa0 RCX: 00007f75f2d8eec9 [ 311.805650][T14601] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000007 [ 311.805663][T14601] RBP: 00007f75f2e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 311.805676][T14601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.805689][T14601] R13: 00007f75f2fe6038 R14: 00007f75f2fe5fa0 R15: 00007ffec6aa8a28 [ 311.805724][T14601] [ 312.146618][T14604] macvtap1: entered promiscuous mode [ 312.151953][T14604] vlan0: entered promiscuous mode [ 312.157509][T14604] macvtap1: entered allmulticast mode [ 312.162911][T14604] vlan0: entered allmulticast mode [ 312.168222][T14604] veth0_vlan: entered allmulticast mode [ 312.689257][T14638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2471'. [ 312.745799][T14638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2471'. [ 312.820344][T14638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2471'. [ 312.860221][T14638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2471'. [ 312.910176][T14638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2471'. [ 312.945743][T14650] macvtap1: entered promiscuous mode [ 312.955886][T14650] macvtap1: entered allmulticast mode [ 312.976834][T14650] bond0: entered allmulticast mode [ 313.009300][T14650] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 313.042355][T14650] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 313.050958][T14650] team0: Device macvtap1 failed to register rx_handler [ 313.079195][T14650] bond0: left allmulticast mode [ 313.094682][T14650] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 313.139343][T14667] netlink: zone id is out of range [ 313.151357][T14667] netlink: zone id is out of range [ 313.164313][T14667] netlink: zone id is out of range [ 313.172876][T14667] netlink: zone id is out of range [ 313.429657][T14677] tipc: Enabled bearer , priority 0 [ 313.613551][T14677] syzkaller0: entered promiscuous mode [ 313.619715][T14677] syzkaller0: entered allmulticast mode [ 313.626448][T14677] tipc: Resetting bearer [ 313.668567][T14689] unknown channel width for channel at 909000KHz? [ 313.679370][T14689] unknown channel width for channel at 909000KHz? [ 313.687198][T14689] unknown channel width for channel at 909000KHz? [ 313.694026][T14676] tipc: Resetting bearer [ 315.152517][T14676] tipc: Disabling bearer [ 315.246932][T14707] __nla_validate_parse: 65 callbacks suppressed [ 315.246953][T14707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2495'. [ 315.466359][T14722] x_tables: ip_tables: udp match: only valid for protocol 17 [ 315.563496][T14732] tipc: New replicast peer: 255.255.255.255 [ 315.590948][T14732] tipc: Enabled bearer , priority 10 [ 315.633051][T14735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2496'. [ 315.897939][T14753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2507'. [ 316.012474][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2510'. [ 316.024172][T14764] netlink: 'syz.4.2510': attribute type 4 has an invalid length. [ 316.027712][T14761] netlink: 'syz.0.2511': attribute type 10 has an invalid length. [ 316.290035][T14782] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2516'. [ 316.319728][T14777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2513'. [ 316.543337][T14797] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 316.570340][T14797] bond6 (unregistering): Released all slaves [ 316.575800][T14801] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2520'. [ 316.846406][T14818] netlink: 'syz.0.2526': attribute type 1 has an invalid length. [ 316.936460][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2526'. [ 317.358224][T14253] [ 317.360605][T14253] ============================================ [ 317.366788][T14253] WARNING: possible recursive locking detected [ 317.372968][T14253] syzkaller #0 Not tainted [ 317.377399][T14253] -------------------------------------------- [ 317.383548][T14253] kworker/u8:14/14253 is trying to acquire lock: [ 317.389974][T14253] ffffe8ffffd908a8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80 [ 317.399235][T14253] [ 317.399235][T14253] but task is already holding lock: [ 317.406602][T14253] ffffe8ffffc908f8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 317.415840][T14253] [ 317.415840][T14253] other info that might help us debug this: [ 317.423887][T14253] Possible unsafe locking scenario: [ 317.423887][T14253] [ 317.431365][T14253] CPU0 [ 317.434647][T14253] ---- [ 317.437915][T14253] lock(&pd_list->lock); [ 317.442240][T14253] lock(&pd_list->lock); [ 317.446557][T14253] [ 317.446557][T14253] *** DEADLOCK *** [ 317.446557][T14253] [ 317.454684][T14253] May be due to missing lock nesting notation [ 317.454684][T14253] [ 317.463003][T14253] 3 locks held by kworker/u8:14/14253: [ 317.468456][T14253] #0: ffff88801ebd2148 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 317.480375][T14253] #1: ffffc9001a20fbc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 317.492203][T14253] #2: ffffe8ffffc908f8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 317.502562][T14253] [ 317.502562][T14253] stack backtrace: [ 317.508482][T14253] CPU: 0 UID: 0 PID: 14253 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 317.508503][T14253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 317.508516][T14253] Workqueue: pencrypt_parallel padata_parallel_worker [ 317.508541][T14253] Call Trace: [ 317.508550][T14253] [ 317.508558][T14253] dump_stack_lvl+0x189/0x250 [ 317.508580][T14253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.508598][T14253] ? __pfx__printk+0x10/0x10 [ 317.508622][T14253] ? print_lock_name+0xde/0x100 [ 317.508643][T14253] print_deadlock_bug+0x28b/0x2a0 [ 317.508662][T14253] validate_chain+0x1a3f/0x2140 [ 317.508680][T14253] ? irqentry_exit+0x74/0x90 [ 317.508697][T14253] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.508713][T14253] ? look_up_lock_class+0x74/0x170 [ 317.508729][T14253] ? register_lock_class+0x51/0x320 [ 317.508754][T14253] __lock_acquire+0xab9/0xd20 [ 317.508779][T14253] ? padata_do_serial+0x73e/0xb80 [ 317.508798][T14253] lock_acquire+0x120/0x360 [ 317.508820][T14253] ? padata_do_serial+0x73e/0xb80 [ 317.508841][T14253] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 317.508863][T14253] _raw_spin_lock+0x2e/0x40 [ 317.508886][T14253] ? padata_do_serial+0x73e/0xb80 [ 317.508906][T14253] padata_do_serial+0x73e/0xb80 [ 317.508931][T14253] ? padata_parallel_worker+0x44/0x1d0 [ 317.508951][T14253] padata_parallel_worker+0x75/0x1d0 [ 317.508971][T14253] ? process_scheduled_works+0x9ef/0x17b0 [ 317.508987][T14253] process_scheduled_works+0xae1/0x17b0 [ 317.509013][T14253] ? __pfx_process_scheduled_works+0x10/0x10 [ 317.509034][T14253] worker_thread+0x8a0/0xda0 [ 317.509059][T14253] kthread+0x70e/0x8a0 [ 317.509079][T14253] ? __pfx_worker_thread+0x10/0x10 [ 317.509095][T14253] ? __pfx_kthread+0x10/0x10 [ 317.509119][T14253] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.509134][T14253] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.509149][T14253] ? __pfx_kthread+0x10/0x10 [ 317.509168][T14253] ret_from_fork+0x439/0x7d0 [ 317.509185][T14253] ? __pfx_ret_from_fork+0x10/0x10 [ 317.509203][T14253] ? __switch_to_asm+0x39/0x70 [ 317.509222][T14253] ? __switch_to_asm+0x33/0x70 [ 317.509241][T14253] ? __pfx_kthread+0x10/0x10 [ 317.509260][T14253] ret_from_fork_asm+0x1a/0x30 [ 317.509287][T14253]