last executing test programs: 6.131334811s ago: executing program 1 (id=4729): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="700000001400010000000003fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000080000700000000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080003030000000000000c0015"], 0x70}}, 0x4004040) 6.025885586s ago: executing program 1 (id=4730): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r2, 0x0, 0x404884d) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffccf}, 0x40000060) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000e03ac71002000000ffffffff0000000200"/88, 0x58}], 0x1) socketpair(0x2c, 0x800, 0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$caif_stream(0x25, 0x1, 0x5) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800) sendmsg$kcm(r6, &(0x7f0000000580)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}}, 0x80, 0x0}, 0x20000804) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000001c0)={0x3, 0x5, 0x9, 0x2, r9}, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000000c0)={r9, 0x1, 0x4, 0xfffff6bd}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) accept4(r10, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c000000000001907800000000ffffffff110090780000000606ff67c26eb2c423c8e18a86b894a1bcdebcc7349d0714846805220fcfcd456d6e6c057608cabc7e1f7320ee27305dbae152db0782"], 0x0) r11 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r11, 0x6a, 0x3, 0x0, &(0x7f0000000440)) 5.808921383s ago: executing program 1 (id=4735): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf2505100000281001800d0001007564703a73797a320000000014000280080003008a0000000800010010000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) recvmmsg(r3, &(0x7f0000002f40)=[{{&(0x7f0000000480)=@sco={0x1f, @none}, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)=""/137}], 0x0, &(0x7f0000000780)=""/94}}, {{&(0x7f0000000800)=@xdp, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000880)=""/102}, {&(0x7f0000000900)=""/94}, {&(0x7f0000000a00)=""/244}, {&(0x7f0000000b00)=""/7}, {&(0x7f0000000b40)=""/203}, {&(0x7f0000000c40)=""/155}], 0x0, &(0x7f0000000d80)=""/234}, 0x800}, {{&(0x7f0000000e80)=@ax25={{0x3, @rose}, [@netrom, @netrom, @netrom, @bcast, @rose, @bcast, @remote, @netrom]}, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f00)=""/48}], 0x0, &(0x7f0000000f80)=""/20}, 0x1}, {{&(0x7f0000000fc0)=@nfc_llcp, 0x0, &(0x7f0000002480)=[{&(0x7f0000001040)=""/91}, {&(0x7f00000010c0)=""/4096}, {&(0x7f00000020c0)=""/48}, {&(0x7f0000002100)=""/166}, {&(0x7f00000021c0)=""/44}, {&(0x7f0000002200)=""/249}, {&(0x7f0000002300)=""/175}, {&(0x7f00000023c0)=""/149}], 0x0, &(0x7f0000002500)=""/118}, 0x9}, {{&(0x7f0000002580)=@in6={0xa, 0x0, 0x0, @private2}, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002600)=""/181}, {&(0x7f00000026c0)=""/159}, {&(0x7f0000002780)=""/48}], 0x0, &(0x7f0000002800)=""/132}, 0xfffffff9}, {{&(0x7f00000028c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002940)=""/223}, {&(0x7f0000002a40)=""/248}, {&(0x7f0000002b40)=""/195}], 0x0, &(0x7f0000002c80)=""/71}, 0x8}, {{&(0x7f0000002d00)=@ll, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002d80)=""/3}, {&(0x7f0000002dc0)=""/92}], 0x0, &(0x7f0000002e80)=""/172}, 0x8001}], 0x4000119, 0x12020, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x1d, 0x2, 0x6) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={0x38, r7, 0x10ada85e65c25349, 0x70bd2a, 0x0, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x27}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}]}]}]}, 0x38}}, 0x6048004) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x24, r7, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xb6, 0x0, &(0x7f0000000440)="cb43a9840b035d2433027564635edf1ade6d482f51cf674df882daae1747108ceaa9106000c31e9f33c284730df5b4806fd82512f908fc8af02cb78108000000004e2b92fc623c1604ca116c52a61a542b5d698444c59c0c1e90cd7b71f4f88f335c970ff46536cefb92dfc7a8a82bda327b69b67d787295a144c3e4ffbad99a1f58e7086c18a21bf55b12ada2a10423f44c995b94b1b40822eee193e7e26e48de65705584377e125135e3e9fa30e922e818d9b3015b", 0x0, 0x6e45b461, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x70, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x42}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xca3d7}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xf800}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xffffffff}]}}}]}, 0x70}, 0x1, 0xba01}, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r1], 0x28}}, 0x4000800) 5.509010624s ago: executing program 2 (id=4737): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448de, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="79006c91000014aa226ba1f02085ea000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r5, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r6, @ANYBLOB="c8002a001001930301ae010481036cc80105bc8301ecc82d1a00031300000000000000010700f900120000000800050000000882414206eb04000000ffffffffffff0d0000000802110000007f00000006000000030508021100000108000000040802110000000100000005ffffffffffff080000008c10be091a2eb22562b0d1e337f2e008673b04060402070002002d1a0100020600000000000000010005000c000000010012000000202d1a00081600000000000001000e0005000a000000080409000000fa0600f900b46000000600fb00ff0100007200fa00a124d8b635942e46386b1b9a8af7ae9d4eb6c86cf7879f655274fcbac702541e6710b0bf1b64e33b249377c42f2cacea636797af87baa281fc5be729c35fddab2a3b9e5bc851dde6290f6f67ba5b605918e2936b2b37d34ec99a6e9fea188bbb70d3f95aeeb8f3505be5ee8b3ebe00000600fb000f0000003300fa007e10cf471875082443becbfb9d3a1a2f7255f33a68c83d54b64e9e26cb5cb7cc14995f9be86b13e706009b50fbe59c000410fa004b37330c9a17589db604b727d5272db8cd11c8efc859f894108286f5678cb405b429e3d44cc050e4e7fd247faab487ba01fbf76aa7fe0ddfdb1db3dba5a53ea13718d10604374295ac2f254feac0917247805acc381696eec9c8b266fb52c1aefe3cf4b3b7ebe17daf6c3951ca18e1b04a9d8d3246fbb40e7f183ea40d4484b95573ccacb82f484744cbe6c404ecabab814ce2ac79faea4b2b2ac196f38518c636a77ed1017de63a9ea7911d30f1e15e8012309f5a503bbf9f86545e8384d1f3868213bdfa823bc1c3c6e573498661a48bcb054a5c866d9e4da3ba8d829c825b6f93ca8fe0d8f9aec39ccae61fb9860b4bff3035beb5d9cd415179bfb35c946f909ce17776ac5a63d9059bae84f83b0336f889d46700243252721e68c7ae46df89316b6e5808d98d4547d1e3321e17d5dbab52b8d0408c7149a79bda26597c11553acfcfaffb237ad65c89ac5b5036a942223acf85a53ff867843422407e00109af40615f377d33330983703d7624b1de409db7038d40c2dbf49beb0ebe457d821a57374392398b055d748aa93de2efcd4817ca3b4f1e4d1f8a38047f6bbfd62eaba56885b85fd56081c0f2f37185ecefccad5c5096c9880c495562f6be6b94e5508b296f2cf4cf686a2da72c59434900fea664ee28dfafff1f073cfd6b11e112b466e8646b86d9661ad8165b7be3add23c071b1b8f04760681ffd24fe024cf23683d27efe582379b75adc352f8655ef5e498f32d35b9be5a297222888332320ceacc809433e44621182f02e380ec7bce7ad75293953a614a875ba26d76d87df122f61a057f60ce92915bb3439c141e7243c40d06a00f60916b2b14612166182e0752fd5e6de43f6fc1eab0a496e37ce2162e4cf6eeb0be4b6b78e9e908b680047c7de273088b9f32be4c96965729e58d319101b72460274cd08b3ed50d1806514a58881daf78690001ef36b07872d44e244868f9ff274c71ebb830b82f8c65c0bf07e8cb0ebea47edfde721474d9704ebe33af892a6ddcc0ec446e7b74a4d8a03db971f7e2bd53fcbd7b478bc825c9f5d0df3e881310498c1234374eacf857084a291722e9f2ae507fa3c2d15df61cd0567222dcf3a18c3000cb85fb9007adc7271068ab50e1d5eac870b6caeead8afecd3f6258fb1dc9106cb0f73caba69364fb23d5601320269b0735bdadf5e78d3df42641f5630c34d3aa2d46e90ce31d18405b4b77cc463d00eb160363e4d19977a6a4a96d60b1095681a8772b98f4dc1008cd03cd74879512b879bc1bca76043ab9980af68bdfa029ac6beefc3e284f493a2e8c01696c0d9d156b50e3d867bc3884f740e261aefee14354033ea0898c839e95a79067225a55f55be5a6dcd16aa66e661b661bd18aa91acaed3059f25b9a95f57731c2b5632a3576fdac6e547220b807e4c1062fccde24c1fab33b9e44759b4964f6e7f880cb5d1537b8c489e813b5a689bdfc620ee7b5d29a814cf2eb7d5b7fd15fc1c309e66da7f7ef4ee9189c6d9c0e918af0d0e4f1f57e11ecdfc04f55b5a3dddfc483e3f8730c63205988df7c163f64648936a88ae975adc2c50ae56b1c163787aaa7ba716d804f5e6bd8f1b1338871318aa066730d9e96a626ee84343738ed51a6d22175948bf81804b346f75b509907d5c21c6e6ae722e438673720c3ad7a575a6231755fbf8b104c9a830d47353c00d9fd78b839cc8259e095b39b8255bec6910ec0dc0408aa121d7b92a1eb9c8651256db5ceef34ee6d6ce5d72450e923e1ab0438e5a161345a3f7f9d2ba7bcaba1f9f243b5744bfac464b5cc79401584497f3fdecd6b7263361fec78ce0433541e347a6c738dcd57453a5a971b9e71886c90e0dec627e71f6abd31a9a10b08fbbdae83f63acc237c9427895645df83e14edefd9e6039714637b6d5912e844dc6fe195096183fc1b96b7761d3089349295712e9a65c5dcad3a3efa551579df919e903daa87607692056fc23001219eed963076568e729d88d443115bbb3a680240b1ac74ed26cd137aebb79be7acccb73b92e70d9422c08dd0a61665b6d72c900869c2e0c6ecc48cc7e3d64daee58cf01824ddad88ecbadb163f3584c6834ffb66fdfe78069433fa1aeee3d746fa5b9111de638263f7afb0f5461979f7f2f4774f381c4b094d4ad9f5ca988b9cbb7b91607bf8707bf16682462709d4ab3ca22772338608332d09a12fcb2938b1e65949a76688a7fc86924aa38afe0b90d37048d69e73a0b99a3584101c647d79f284ccba120d8c96d287891d10648415e3aa09a110bbd22505afcace48c2c70ea837b25bf7ed4bdbb4fe89643438b17798241359b560aaf88f6ef07d68f5cf0c138edcadce2fa38506de6a8096f98909c10ab69da33fc676e554bb56d04706b6157745ff88f0ebfc1eedff191378af5c4aa21300cefd6fbb2c7c9dba20546d17773ba50ab2e56af79ef0b9728472f161e76c9f08c22a45de62d5243d842779c739122415d32016d24f54b47b6523524dfc04ec0f6d002a681169ddf47cba8b8631c999ecf65c34a00445fbdebf73c95f0f0e3b9f005283f418b98b214f83428cd1978f91832093c873b7abc3078554566aafbf5cfe42e595efd5792071e870519f65ae6286e101facfae7b2808153738f5bc3eeb5a3749e3db9133cf686c2c18173beea1950ea7a8dc2ce32ccd0f4ea751dd7895a39eb583b78972dc09deaa6b5fb1abdd67c24d0d7700649c51828fe0bda349b6960d9250483da7acf82b5ee701001fa48c7d25c90dfab836c32a59eefaf1e7279592516ff93a83b68f30a93991dc37842f69633498dab7dbb4756ae6f708d936485d6cca6d31f62935b4741300d402d07f19b8b87bebaa674ee0e2b4303c52d6c1480d3d9f63ce9f33010bfe19b3407ef67a944c299f3a830ae27063b3c1d103afd7222065900cdeb40d21aeebff275f7daddb70aef3cfca57d349c6dbcdfd8d90fc2727fb6ed19aa6dfcc4eb1fbc09dbf80a6dc44a0cac039ebe0634516b4e77fd2eb4e45a8a346c093b1f2b3871dbae3cbb23a4a5ed85ad93c1869bb3fae22279d41d4b17d5cae5605c035019b84df1e4a9a3c16022dfdda156f7ddba7874950077be843fc108001cffc8264895e5cc323a465d8d15ab8117c4141910ba2305f5ea22b79d8c800f98a380125ad4dde15e06d056d829eb8ef41a8425ea435ece5d962f2a289571fd084827e74d3b6a765ece373a9d7b18c22bebe361eb672a60f458f9e0c37417aae5496f82b763bdbc6ad442c2a9e7ce218e25e55a12cb40f7c6536c1c9c6595ad878fae79e58cc84e819cec1111e039151a66e081b8b07ea8ac38c3e45d23054f2d19b83d900e2d1ada6ce767bb0e937bdf82cc8539d0b2e9ee9e9b7462194477ac572112ddf03ab43b373f094418662b989f3c001ef261d0d67bfcaf4d57f28de1cc9e9004bd03142ba66b58b5d416334aa5c2be4c0f7822203df8a118f239ee64b660fe28a0a0e2b52024b96bf2419963807f13ea374b8930c077ff70ba1c3243d95587d7fac373e07067f575c04951048318ade9e42f07cca63258fe05fa79799ac07f309819daf32e6daf20725a9a160643f21be894cb5f83d2bb15184a9b881a5bf363d5bfe24350f9d98c56d04a4074391ea139dd16d171c3e66ae550b12c11cef32d8b1e379df9acf9b80a10dd0435ef1f0778e14e255e43bf207473846c6ba6edd1e5b8603427b0829ef3a7f34d585cbbf2cd6a41abbe46dda4a4f1c39c8f7467c931c01a83235125680a49f2aea2925d3ffe2b28266d4d880a11f3b6fda37debf284fa4cbe8d76dbec4a0d7fb27e3a4b7fed8602e69e262245df7e74200f90d26a55eb703c8df232adc4f5d8ac6afab2597718ae017a148f43905e4ac472aba785c5d5884464751ddcf667a003da751972ca1d3d480dbb8fdb30b5b9bd07d3226637d613a17067a28bcde3abd061787af7b53d2a52b1a2ad6038827789ee2c9c8801a4d70595d15fd0c099526fac236cbd86dba5dc661887561c6668fdd09683e37f1b2b1db1d8ac00466444cbb037a9468c596bcdcd13d58f29f719152c1d2c4a61ff401c5c88d13a3946af704fcd8254fc56bcb93e1883f6b6ae9d3cbcdb141fb079c515fe70e0c572c67ff971e987330a29966dff4ffd8afdb7d1724d2c77e9f84cbcc5027e5f6843371e2dee35369c712d96757271d40ef1892a896aabca599d08607fce05e120d94b5e06ec84cab31d3fca0ed7f2644be23c922fcd8dd8a2942b53d530736897b9cbe6da0082caa9f796abf43103c275df74497c927a79c685ee38e3b3567163e173f05f7fb62f31ee69f6419a117094b5bc5852315fa12b9897f25a876b0e9fa1c1e5f7f8f206c3d39ae5a77d954209ecf2ed3bc5240b67710acc26345b9e57af7d6afc067e80781286e7d1501ac6a20acfddef9c3f784150674c9a3b6c4447e9b41d1f692e3904ef3d4ec3ef17ade974d4dec9dc43216814ee9a0db30794dad700ff1165db7c4dfcc75b46e9d4ebd61633f291b87517125131b7801af8f7f79bdabc07515c23f0cb46620b08b19ed3ebc79379c4dc171c54d161ce25f510d7b6e4d672e626ae87b3eea41eb6abba8612ace7ed8b545dfc8337c2fd6ffd5a7e95d4db44c21abdc6ddcc41b122c88d7a9b60c99a57ec855f943455397b1cf00c735f36b7a6edea674c88c4d709d59c50d265940fe05220751d5ea67443dcbf359a8e58c35cf3b9183436a96c6f06aeaeedfc9658a3a087dca95bdf4a2c8b7248719cf6b7a0dea6c574be52c9d1c426cf1d592a62cf38e4b84e26385848f2969495a6904f6817372d7e8aca0e3cd8dc7cca514dfb3bf5b63ab9c632e4953ee86e82c7447afd38f0b843cabaf0263a5db1314ffecfa7f9cefb5917d50d2f85e5323a6b0fb2d951bba37bbd0f74a3e07821feb4efe8148da695e00b52ce93d9ebc81a9b47e34757311363019aafd6b9ebc7764421935dfa465f018904929fa7612d5c929659c70287681619a5c23d5d8858266747186149f4b6138a81542f7230c0b1b99eb7df8e88f67d2aa9c7ab5f2be195ade8a1636137876fad0892eceb0675ac206c8084ab154da4e76d7e76a81891723cbe164125a64d43981be9dfd7ae587ac4c696eb6e4a7f635550104deef141ccbb0999222a952cb3bd920620532808430db8aa28ee7ac3224477d269c9874c40ee08d19f0932cfc560d541694b788e4ea05936fd42b999c59f6db079e748d551600309aef89071c30fe0ff5bb4920d2eac3c054e2871e17240e92527f627eff2184a9be241a31c0ac8474ae0f82861e60bd449065d8285c33edf31d631c360ace955143678cf45f1fd1f5da77b94c2d87555976eda3833265cdfee777b7d87514f344edeee24d8a9dda9b0bb35552432d26ea874853acffc85958a05be561c8845236393e69aedd7eef8dfcccc26d2c66c20ced811f8eb6613cbbf3e97711912840de7d4e2a7987567d4cd7bd116be665d7170310efc740995493ea25d5239c9345f1e8360bdeea3c89edb2d3deb74a0f372b0770c81e1b57884abebbca40a6dd70d990c59538821c8c8bbaf18ff21caa9b155c5582177066ecd445817ea567ad508fce7751f62e594d99a4bec2fba725827a3d845ce152015c9c2c37283af56590efb4e22e0c017ba992227be8acd968257a2a3197f11a6d4c68423cd74e2c32407104ecc883c5c06136470cea05637e154425d27210310bcfd3598052cd602c7350d913dc5914b0b69ff645cbdb7e250f20da09a819095a9425d91335743d912ca832628e002a0083254006b108021100000039ffffff08021100000084000000fbffffffffffffffffff070000007606050418000200bd06080211000000824602a303ff030000ffffffffffff0e0b000001800000030000000405ffffffffffff09000000010802110000000500"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) socket$inet_sctp(0x2, 0x1, 0x84) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0xc201}) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0xe) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xe) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r8, 0x89e4) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000005c0)={0x6, 0x5, 0x40, 0x4, 0xf, 0xe, 0xf, 0x52, 0x3, 0x1, 0x81, 0x3, 0x1, 0x2}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@base={0x21, 0x81, 0x3, 0x3, 0x30116, 0xffffffffffffffff, 0xffffffff}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000fbffffff000000000000000085000000bc000000855deac53a714f19760000000f000000950000000000000029503b6797fb071c35ebb952dc00271bda314905db97b3044a3b13b67cc3c29efa0349d78c3f388919eb67d7759393e01db5e501bddd5033695ecf1d0ce7c8e3917c268bc58f7f7e42316e3d00"/137], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000019c0)=ANY=[@ANYBLOB="540000001d00000126bd7000fbdbdf2502000000", @ANYRES32=r1, @ANYBLOB="0400120a08000110040100000000080046fcea3a1642ca1581a5e18c3ff571cc121c85105696699b6809e68b229ff82e591b79dff3d224732b90d42d90243f691a9a770400db68e24e97d6b34c07daac37818f00ca12aac0c3f30c959f51fca24c917039c18c79dc6896fcd3dfa5050c81e34ed927908e677c9263830965f12dba1e31b8972972ebdc2ca120017556a6c34ba618c9f087ab71682bbcaf71908a6ab992c4643c990df2fda38f555a4dc6ac6521b2e6233e80d849454dc53661ecc76dcb066fd9120e5b91", @ANYRES32=0x0, @ANYBLOB="08000f0000000000080004007f000000060005000100000005000c000000000008000b00ba3f0000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.86600261s ago: executing program 1 (id=4741): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x2, 0x3, 0xff) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) sendmmsg$unix(r6, &(0x7f0000008b80)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="189772100048f5c56a6aeb00ffffffff0bd87cc6", 0x14}], 0x1, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, &(0x7f0000000140)=[{0x0, 0xb00}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, 0x0, 0x0, 0x1800}}], 0x2, 0x20000000) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48c95, 0x40103}, [@IFLA_MAP={0x24, 0xe, {0x76c0, 0x86e, 0x499, 0x69a4, 0x18, 0xf4}}, @IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'xfrm0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 4.747841134s ago: executing program 3 (id=4744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x965}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x4004000) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r3, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x44}}, 0x4000) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r4, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x3b75c8a40e1a4b79}, 0x48000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @broadcast}) 4.551105567s ago: executing program 4 (id=4746): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r1, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x1}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x800) sendto$rose(r6, &(0x7f0000000000)="929ce7bc21", 0xfffffffffffffc8f, 0x4000, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={r4, 0x4ab}, 0x8) 4.352277694s ago: executing program 3 (id=4747): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x2, 0x80805, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r2, 0x3328}, {r1, 0x4236}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x408}, 0x44060) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001400010000000000000000000000000000010000008000070200000080000000000000000000000400000000000000", @ANYRESHEX=r5, @ANYRES32=r5, @ANYBLOB="00000000000000000c00080003030000000000000c82cb1064ab240015"], 0x70}, 0x1, 0x0, 0x0, 0x15}, 0x4004040) 4.258173628s ago: executing program 2 (id=4748): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0c", 0xe) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) close(0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xbe}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a40)='GPL\x00', 0x6, 0x14, &(0x7f0000000a80)=""/20, 0x41100, 0x5, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x1, 0x0, 0x7fff, 0x400000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x32, 0x14}, 0x20) 2.671529662s ago: executing program 4 (id=4749): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x1bc, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0xf8, 0x1, [@m_bpf={0xf4, 0xe, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0xa6, 0x2, 0x8, 0x3ad}, {0x43f, 0x5, 0x33, 0x200}, {0x800, 0x4, 0xe, 0xd}, {0x8, 0xe2, 0xc0, 0x2}, {0xe, 0xe0, 0xa, 0x1ff}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x0, 0x3, 0x4, 0x1}}]}, {0x7d, 0x6, "5ebee8cb5ec798bed9e14471cd7fc80ada4a347f0a471b97541b3746862f593b574dd0b277a884f0ec7a65593a424488dee51eac7e3301dcd335734b379d1f821b27f9ace9c0ec57aa91fb75ea79531b85b941055b331912532963810dd2e455d7e1fce8f33fb311b8891e5737cded0da82817fe816da70d22"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0xb0, 0x1, [@m_nat={0x2c, 0x1d, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0x80, 0xd, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x20000000, 0xcf4e, 0x2e4f7af}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x15c3, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0x6, 0x6, 0x6}}]}, {0x15, 0x6, "f138b42c4edb552afebd27b44c8ea514f2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000008b703000002000000850000002600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.139969789s ago: executing program 3 (id=4750): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000004b00)={{0x2, 0x4e21, @rand_addr=0x64010101}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 'team0\x00'}) 1.139515311s ago: executing program 2 (id=4751): bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4008c50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000070000000000000000000000a249483609a04015d2af2f27fe4b10285569c7227473804a4c888a3fec0000f7ff445919d17dec3707636f2061823889c577806c5b8b14cddf4dc1398aaddd0d08cd106e58897ba5fdaf62ebb09f74608a609964a37e6855212896ea6df09207393be6222ff13950df1d0000000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000400000186600000c00000000000000010000004b06f4ff0000000018130000", @ANYRES32=0x1, @ANYBLOB="000000000000000095002f15835f0001000000000c4c2c7f96a57c34ece723e87058c549527a7f0829006801052fa7ba556ae92cff066631a688f746fc915cf0431563"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, 0x0, &(0x7f0000000c80)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000700)=""/216, 0x32, 0xd8, 0xa, 0x2}, 0x28) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) (async) r3 = socket(0x11, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01040000000000000000010000010900010073797a30000000002c000000000001010000000000000000010000000900010073797a30000000000900030073797a320000000060000000060a010400000000000000000100000908000b400000000038000480340001800b00010065787468647200002489028008000140000000080800034000000000050002009400000008000640000000020900010073797a3000000000140000001100010000000000000000000700000a"], 0xd4}}, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x8001) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x1, 0x1, 0x8000, 0x1, 0x6, 0x2, 0xfe, 0x10, 0x3, 0x4af, 0x200, 0x7e4, 0x1, 0x1, 0x45, [0x8, 0x3]}}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0xfffffdd4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='scalable', 0x5b) setsockopt$inet_tcp_int(r7, 0x6, 0x1b, &(0x7f0000000380)=0xffffffff, 0x4) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x6, &(0x7f0000000080)=0xe, 0x4) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) socket$caif_stream(0x25, 0x1, 0x1) (async) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.086499081s ago: executing program 4 (id=4752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c854}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x6, 0xb}, {0x9, 0xa}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24024890}, 0x44000) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r0}, 0xfffffffffffffffd, 0x25b, 0xffffffff}) 1.059795639s ago: executing program 0 (id=4753): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfdb5, 0x0, &(0x7f0000000180)="e02742e8680d85ff9782762f86dd", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 1.000141746s ago: executing program 2 (id=4754): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x7c, 0x30, 0x9, 0x70bd27, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) (rerun: 32) 999.902908ms ago: executing program 3 (id=4755): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090010000000e925000000000000030006000000000002000000000000000000000000000000020001000000000000fd000300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x9, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) 993.749665ms ago: executing program 1 (id=4756): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)=':\x00', 0x202, 0x0, 0x8, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0xa0, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x8}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xc}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x7}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xc132}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0xf, 0x24, [{0xd6, 0x1}, {0x36, 0x1}, {0x24}, {0x60, 0x1}, {0x36, 0x1}, {0x1b, 0x1}, {0x9, 0x1}, {0x15}, {0x4, 0x1}, {0x6}, {0x24}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8, 0x0, 0x1, 0x0, {0xfff, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x6, 0x101, 0x9}}, @NL80211_ATTR_BSS_BASIC_RATES={0xe, 0x24, [{0x36, 0x1}, {0x32}, {0x16, 0x1}, {0x1b, 0x1}, {0x60, 0x1}, {0x1}, {0x3b}, {0x2}, {0x24, 0x1}, {0x9, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r6, 0x6}, 0x8) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x2, 0x16, 0x5, 0x5, 0xa, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x7, 0xf9, 0x0, 0x6, 0x0, @in6=@remote, @in=@private=0xa010102}}]}, 0x50}}, 0x4c040) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x8000}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000e03ac71002000000ffffffff0000000200"/88, 0x58}], 0x1) 950.933652ms ago: executing program 2 (id=4757): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="0219000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) 926.316337ms ago: executing program 0 (id=4758): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000708c981e31e5a34250000009111780000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') (async) unshare(0x6a040000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000480)) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x7800, 0x8011, 0x0, 0x4, {{0x12, 0x4, 0x3, 0x3, 0x48, 0x65, 0x0, 0x2, 0x2f, 0x0, @local, @remote, {[@generic={0x82, 0xb, "d7f4a0dd4a9e52d817"}, @generic={0x89, 0xd, "5dba757ddbafde62535436"}, @timestamp_addr={0x44, 0x1c, 0x78, 0x1, 0xb, [{@multicast2, 0x3}, {@multicast1, 0x1}, {@loopback, 0x1}]}]}}}}}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000a40)) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x40804) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x8, 0x4, 0x3) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x8, &(0x7f00000002c0)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000000c0)=0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000700)={{}, 0x0, 0x1c, @unused=[0x1, 0x7, 0x4], @devid}) (async) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000bc0)={0x0, "224d9d72f888cdef7b35aa37eeeda778"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001bc0)={{r0}, r6, 0x4, @unused=[0x10, 0x401, 0x2, 0x8], @devid=r7}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x618e, &(0x7f0000000b40)={{r2, 0x0, 0x121041, 0x0, 0x4, 0x0, 0x0}, 0x0, 0x0}) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8}, 0x94) (async) socket$inet6_sctp(0xa, 0x1, 0x84) 839.353557ms ago: executing program 4 (id=4759): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x70428, 0x1810}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}, @IFLA_XDP={0x4}]}, 0x40}}, 0x0) 778.791647ms ago: executing program 2 (id=4760): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYRESHEX=r2], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00129309000100766c616e000000000c53c43d3cf8ec000280060001000100000008000500", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000844000030001200000000000000000105000c000100000008000a00"/47, @ANYRES32=r3, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r7, &(0x7f0000001c00)={0x2, 0x4e23, @private=0xa010100}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, 0x0, 0x0) connect$inet(r7, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="030328bd0800000000000a0008000e7004fc202cad49f9cedda21f1222ac6dd8192e7bcc4d8f96817dd3684ded0f6051e82a9e0e9119cf27160d6b4181331c2ae074bdcb80bea36ca04ddaafc47cb5d6680d491b413f0c7225af85720310032fda88ddbe432848f36f114e038e6d9f95"], 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 736.501972ms ago: executing program 0 (id=4761): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x30}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x40) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c) 712.792453ms ago: executing program 4 (id=4762): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f", 0x4}], 0x1}}], 0x3, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)={0x28, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0xe9, 0x0, 0x0, @fd}]}, @nested={0x4, 0x1}]}, 0x28}], 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r11, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) 587.813324ms ago: executing program 0 (id=4763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffa, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e0"], 0x64}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x148, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'dvmrp0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0xfd, 0x4}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x6a5f}}, @common=@frag={{0x30}, {[0x2d, 0x200], 0x0, 0x8, 0x2}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x2, 0x9c, 0x5, 'syz0\x00', 'syz1\x00', {0x159c}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 533.626534ms ago: executing program 3 (id=4764): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x73, @remote, 0x4e21, 0x1, 'lblcr\x00', 0x1, 0xfffffff8, 0x46}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 411.443318ms ago: executing program 3 (id=4765): sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[], 0x124}}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0xfb549c8ebccefb18, &(0x7f0000000080)=0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="300661ed0f8a351fcfa3548da9ae074d02739701ed25d2ee83b9c343ac5dcde8197a39ec77a792f18dad87688b0fd5dcb95884a0a60e2dc9401a9d16156538b2f5b145cd836a4e113785fbd0dd7e7cf7d57a704180b38003ab349d54f11dbdbb334da30b310b9b04cd4414c6b6370019621ec84ef87c77e1311b44e433d200ce86a7845ee5db6137b5836e5adbd72577070fdde726ed07039bf94cd837e27dfa75d550be2f70cc4eda4071809c79cfbcae075c26f0a8ad2c8e675a8cbdd98329079e25c3f892f7635523"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0xdf738705cd410ae7) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa1400390126b3d080d85196cf0400fe8000000000000000000000000000000c00028005000100000000000800074000000020751911cb28af14dd850cc2ef436ea391f4de5caafa2a3a50dfe7e320a6cf377145c95117684442a5c57821daafea54c38c9f33ac205135a938d7f9b525c39b10b93aa94012881fca4fc0c66b"], 0x94}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003010101"], 0x38}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) close(r2) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) 214.695077ms ago: executing program 0 (id=4766): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, 0x80000001, 0x6, 0x0, 0x100, 0x29, 0x110022}) r1 = socket$netlink(0x10, 0x3, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01002000"], 0x0, 0x3e, 0x0, 0xa}, 0x28) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@acquire={0x128, 0x17, 0x502, 0x70bd27, 0x25dfdbfd, {{@in=@empty, 0x4d2, 0xff}, @in=@multicast2, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x4e22, 0x0, 0x4e20, 0x7, 0xa, 0x80, 0x80, 0x3a}, {{@in=@broadcast, @in=@broadcast, 0x4e21, 0x8001, 0x4e23, 0x7, 0xa, 0x0, 0x80, 0x25}, {0x7961, 0x81, 0x5, 0x0, 0x6, 0x38000, 0xfffffffffffffffc, 0x1c}, {0x5474, 0x6, 0x822, 0x200}, 0x2, 0x6e6bbe, 0x2, 0x0, 0x1, 0x2}, 0x5, 0x457, 0x5, 0x70bd2d}}, 0x128}, 0x1, 0x0, 0x0, 0x40100}, 0x4004) r2 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r2, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}, 0x406}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x400000000000192, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) (async) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r10, 0x894b, &(0x7f0000000400)) (async) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'bond_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r12 = socket(0x400000000010, 0x3, 0x0) (async) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xb, 0xffe0}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0x6, 0x2}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) 96.978101ms ago: executing program 4 (id=4767): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x4, 0xfefff00c}, {0x6, 0x40, 0x7, 0x2002}]}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x31}, 0xfffffffe, 0x7}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0xfffffffffffffffc, 0x57d, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x18a0, 0x6}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xd8}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'pim6reg1\x00', {}, 0x7f}) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x4, 0xfefff00c}, {0x6, 0x40, 0x7, 0x2002}]}, 0x10) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x31}, 0xfffffffe, 0x7}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0xfffffffffffffffc, 0x57d, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x18a0, 0x6}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xd8}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'pim6reg1\x00', {}, 0x7f}) (async) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async) 57.747961ms ago: executing program 1 (id=4768): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000004200), 0x0, 0x2001, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131838aa59d46b92058a514317c14e7e78ac11b020b3582a1f68aa2b77d0567a54304d94ebf05f407af3011fa8c71fa4b65d45c749aba8b1bef54bc253d429a92e6c0b8672399a9b97ef3a80690e90bdd7bb522739ca3ae7bcc3d5624ca04cf56aec8b744c754e363ac307f579dd10d059350e45f9c7b1d4ec60daa59170b50c88c69141529917c8e953a8f4edce2"], 0x20}}, 0x4000084) 0s ago: executing program 0 (id=4769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x220a81, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@empty, @local, 0x0}, &(0x7f0000000200)=0xc) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {0x0, 0x27}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x2, 0xfffffffffffffffc, 0x8}]}, &(0x7f0000000240)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x11, '\x00', r4}, 0x94) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000002c0)) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="448b", 0x2}, {&(0x7f0000000580)="f244f837c3c9df25a38f615b9a", 0xd}], 0x3) kernel console output (not intermixed with test programs): devsim1: renamed from eth1 [ 414.902756][T18077] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.920657][T18077] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 415.130964][T18077] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 415.158722][T18077] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 415.198079][T18077] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.365349][T18300] netlink: 'syz.1.3176': attribute type 11 has an invalid length. [ 415.377166][ T29] audit: type=1107 audit(1777061209.845:8): pid=18297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 415.390127][T18300] netlink: 'syz.1.3176': attribute type 39 has an invalid length. [ 415.519163][T18077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.536751][T18277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3172'. [ 415.598508][T18077] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.617624][ T8792] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.625186][ T8792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.689651][ T8798] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.697662][ T8798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.757966][T18307] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 415.827202][T18077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 415.859857][T18309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.889339][T18309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.919950][T18311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3180'. [ 415.985500][ T5853] Bluetooth: hci0: command tx timeout [ 415.993805][T18309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.041303][T18321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.051115][T18317] netlink: 700 bytes leftover after parsing attributes in process `syz.0.3182'. [ 416.220920][T18335] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3186'. [ 416.226417][T18077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.236675][T18334] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3186'. [ 416.287197][T18332] syzkaller1: entered promiscuous mode [ 416.296313][T18332] syzkaller1: entered allmulticast mode [ 416.391197][T18343] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3188'. [ 416.392864][T18077] veth0_vlan: entered promiscuous mode [ 416.414798][T18077] veth1_vlan: entered promiscuous mode [ 416.442859][T18077] veth0_macvtap: entered promiscuous mode [ 416.474885][T18077] veth1_macvtap: entered promiscuous mode [ 416.500451][T18077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.513209][T18077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.551901][ T9856] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.574114][ T9856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.673367][ T9856] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.682142][ T9856] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.840498][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.866291][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.971380][ T8798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.990187][ T8798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.026409][T18361] 8021q: adding VLAN 0 to HW filter on device bond4 [ 417.052821][T18361] team0: Failed to send port change of device bond4 via netlink (err -105) [ 417.066319][T18361] team0: Failed to send options change via netlink (err -105) [ 417.073802][T18361] team0: Port device bond4 added [ 417.086110][T18361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3192'. [ 417.086431][ T8792] team0: Failed to send port change of device bond4 via netlink (err -105) [ 417.205807][T18372] FAULT_INJECTION: forcing a failure. [ 417.205807][T18372] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 417.262140][T18372] CPU: 1 UID: 0 PID: 18372 Comm: syz.3.3115 Not tainted syzkaller #0 PREEMPT(full) [ 417.262171][T18372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 417.262181][T18372] Call Trace: [ 417.262188][T18372] [ 417.262195][T18372] dump_stack_lvl+0xe8/0x150 [ 417.262227][T18372] should_fail_ex+0x412/0x560 [ 417.262259][T18372] prepare_alloc_pages+0x22a/0x650 [ 417.262290][T18372] __alloc_frozen_pages_noprof+0x12f/0x380 [ 417.262316][T18372] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 417.262343][T18372] ? __pfx_policy_nodemask+0x10/0x10 [ 417.262370][T18372] ? __lock_acquire+0x6b5/0x2cf0 [ 417.262399][T18372] alloc_pages_mpol+0x235/0x490 [ 417.262433][T18372] folio_alloc_mpol_noprof+0x39/0x160 [ 417.262459][T18372] vma_alloc_folio_noprof+0xe1/0x1e0 [ 417.262485][T18372] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 417.262508][T18372] ? __pte_offset_map+0x29/0x240 [ 417.262528][T18372] ? __pte_offset_map+0x29/0x240 [ 417.262549][T18372] do_pte_missing+0x159d/0x33f0 [ 417.262582][T18372] ? handle_mm_fault+0xee/0x3170 [ 417.262604][T18372] handle_mm_fault+0x1bd7/0x3170 [ 417.262637][T18372] ? handle_mm_fault+0xee/0x3170 [ 417.262661][T18372] ? __pfx_handle_mm_fault+0x10/0x10 [ 417.262680][T18372] ? follow_page_pte+0x6b5/0xe50 [ 417.262707][T18372] ? __pfx_follow_page_pte+0x10/0x10 [ 417.262736][T18372] __get_user_pages+0x1683/0x2720 [ 417.262793][T18372] __gup_longterm_locked+0xdcf/0x1630 [ 417.262822][T18372] ? sanity_check_pinned_pages+0x7af/0x870 [ 417.262856][T18372] gup_fast_fallback+0x1d84/0x20d0 [ 417.262906][T18372] ? __pfx_gup_fast_fallback+0x10/0x10 [ 417.262922][T18372] ? ____sys_recvmsg+0x1e6/0x4a0 [ 417.262940][T18372] ? __x64_sys_recvmsg+0x1ba/0x2a0 [ 417.262958][T18372] ? do_syscall_64+0x15f/0xf80 [ 417.262980][T18372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.263001][T18372] ? pin_user_pages_fast+0x4d/0xb0 [ 417.263021][T18372] iov_iter_extract_pages+0x37b/0x5f0 [ 417.263049][T18372] extract_iter_to_sg+0xefb/0x25d0 [ 417.263089][T18372] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 417.263114][T18372] ? rcu_is_watching+0x15/0xb0 [ 417.263132][T18372] ? trace_kmalloc+0x2a/0xf0 [ 417.263157][T18372] ? __kmalloc_noprof+0x1b8/0x760 [ 417.263182][T18372] ? __asan_memset+0x22/0x50 [ 417.263202][T18372] af_alg_get_rsgl+0x4b6/0x8e0 [ 417.263237][T18372] skcipher_recvmsg+0x392/0x1140 [ 417.263274][T18372] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 417.263292][T18372] ? __lock_acquire+0x6b5/0x2cf0 [ 417.263315][T18372] ? aa_sock_msg_perm+0xf1/0x1b0 [ 417.263335][T18372] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 417.263354][T18372] ? security_socket_recvmsg+0x7e/0x2c0 [ 417.263376][T18372] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 417.263395][T18372] sock_recvmsg+0x172/0x1b0 [ 417.263427][T18372] ____sys_recvmsg+0x1e6/0x4a0 [ 417.263455][T18372] ? __pfx_____sys_recvmsg+0x10/0x10 [ 417.263489][T18372] ? import_iovec+0x73/0xa0 [ 417.263511][T18372] ___sys_recvmsg+0x215/0x590 [ 417.263528][T18372] ? get_pid_task+0x20/0x1f0 [ 417.263552][T18372] ? __pfx____sys_recvmsg+0x10/0x10 [ 417.263575][T18372] ? __fget_files+0x2a/0x420 [ 417.263610][T18372] ? __fget_files+0x3a0/0x420 [ 417.263636][T18372] __x64_sys_recvmsg+0x1ba/0x2a0 [ 417.263656][T18372] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 417.263682][T18372] ? __pfx_ksys_write+0x10/0x10 [ 417.263709][T18372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.263734][T18372] do_syscall_64+0x15f/0xf80 [ 417.263755][T18372] ? trace_irq_disable+0x3b/0x140 [ 417.263777][T18372] ? clear_bhb_loop+0x40/0x90 [ 417.263798][T18372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.263815][T18372] RIP: 0033:0x7fc61399cdd9 [ 417.263831][T18372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.263847][T18372] RSP: 002b:00007fc61478f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 417.263865][T18372] RAX: ffffffffffffffda RBX: 00007fc613c15fa0 RCX: 00007fc61399cdd9 [ 417.263877][T18372] RDX: 0000000000000000 RSI: 000020000000b680 RDI: 0000000000000004 [ 417.263887][T18372] RBP: 00007fc61478f090 R08: 0000000000000000 R09: 0000000000000000 [ 417.263898][T18372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 417.263908][T18372] R13: 00007fc613c16038 R14: 00007fc613c15fa0 R15: 00007ffe3200a598 [ 417.263932][T18372] [ 417.793699][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 417.806486][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 417.814760][T18382] netlink: 'syz.1.3197': attribute type 10 has an invalid length. [ 417.816248][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 417.876087][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 417.883949][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 417.975900][T18382] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 418.070029][T18379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.104796][ T5839] Bluetooth: hci0: command tx timeout [ 418.179619][T18396] netlink: 'syz.0.3203': attribute type 4 has an invalid length. [ 418.203799][T18389] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.343525][T18380] lo speed is unknown, defaulting to 1000 [ 418.643564][T18418] FAULT_INJECTION: forcing a failure. [ 418.643564][T18418] name failslab, interval 1, probability 0, space 0, times 0 [ 418.683046][T18418] CPU: 1 UID: 0 PID: 18418 Comm: syz.0.3209 Not tainted syzkaller #0 PREEMPT(full) [ 418.683072][T18418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 418.683082][T18418] Call Trace: [ 418.683089][T18418] [ 418.683096][T18418] dump_stack_lvl+0xe8/0x150 [ 418.683128][T18418] should_fail_ex+0x412/0x560 [ 418.683158][T18418] should_failslab+0xa8/0x100 [ 418.683179][T18418] __kmalloc_noprof+0xe8/0x760 [ 418.683198][T18418] ? sock_kmalloc+0xd6/0x160 [ 418.683223][T18418] sock_kmalloc+0xd6/0x160 [ 418.683244][T18418] skcipher_recvmsg+0x517/0x1140 [ 418.683282][T18418] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 418.683298][T18418] ? __lock_acquire+0x6b5/0x2cf0 [ 418.683322][T18418] ? aa_sock_msg_perm+0xf1/0x1b0 [ 418.683341][T18418] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 418.683360][T18418] ? security_socket_recvmsg+0x7e/0x2c0 [ 418.683382][T18418] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 418.683400][T18418] sock_recvmsg+0x172/0x1b0 [ 418.683425][T18418] ____sys_recvmsg+0x1e6/0x4a0 [ 418.683453][T18418] ? __pfx_____sys_recvmsg+0x10/0x10 [ 418.683487][T18418] ? import_iovec+0x73/0xa0 [ 418.683509][T18418] ___sys_recvmsg+0x215/0x590 [ 418.683525][T18418] ? get_pid_task+0x20/0x1f0 [ 418.683549][T18418] ? __pfx____sys_recvmsg+0x10/0x10 [ 418.683571][T18418] ? __fget_files+0x2a/0x420 [ 418.683607][T18418] ? __fget_files+0x3a0/0x420 [ 418.683632][T18418] __x64_sys_recvmsg+0x1ba/0x2a0 [ 418.683654][T18418] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 418.683683][T18418] ? __pfx_ksys_write+0x10/0x10 [ 418.683711][T18418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.683729][T18418] do_syscall_64+0x15f/0xf80 [ 418.683751][T18418] ? trace_irq_disable+0x3b/0x140 [ 418.683773][T18418] ? clear_bhb_loop+0x40/0x90 [ 418.683794][T18418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.683810][T18418] RIP: 0033:0x7f88a2b9cdd9 [ 418.683827][T18418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.683841][T18418] RSP: 002b:00007f88a0df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 418.683860][T18418] RAX: ffffffffffffffda RBX: 00007f88a2e15fa0 RCX: 00007f88a2b9cdd9 [ 418.683872][T18418] RDX: 0000000000000000 RSI: 000020000000b680 RDI: 0000000000000004 [ 418.683883][T18418] RBP: 00007f88a0df6090 R08: 0000000000000000 R09: 0000000000000000 [ 418.683893][T18418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 418.683903][T18418] R13: 00007f88a2e16038 R14: 00007f88a2e15fa0 R15: 00007fff97ca6e78 [ 418.683929][T18418] [ 419.112804][T18415] netlink: 'syz.2.3208': attribute type 4 has an invalid length. [ 419.131230][T18380] chnl_net:caif_netlink_parms(): no params data found [ 419.147288][T18415] netlink: 'syz.2.3208': attribute type 4 has an invalid length. [ 419.291616][T18380] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.298950][T18380] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.306636][T18380] bridge_slave_0: entered allmulticast mode [ 419.314697][T18380] bridge_slave_0: entered promiscuous mode [ 419.322917][T18380] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.330112][T18380] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.337391][T18380] bridge_slave_1: entered allmulticast mode [ 419.345118][T18380] bridge_slave_1: entered promiscuous mode [ 419.445241][T18380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.458958][T18380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.508897][T18380] team0: Port device team_slave_0 added [ 419.517352][T18380] team0: Port device team_slave_1 added [ 419.536688][T18442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3214'. [ 419.547355][T18380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.548140][T18442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3214'. [ 419.554302][T18380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.554325][T18380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.556821][T18380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.620459][T18380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.646353][T18380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.756177][T18450] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.3216'. [ 419.782725][T18380] hsr_slave_0: entered promiscuous mode [ 419.789660][T18380] hsr_slave_1: entered promiscuous mode [ 419.797340][T18380] debugfs: 'hsr0' already exists in 'hsr' [ 419.803089][T18380] Cannot create hsr debugfs directory [ 419.929034][ T5839] Bluetooth: hci4: command tx timeout [ 419.946649][T18458] FAULT_INJECTION: forcing a failure. [ 419.946649][T18458] name failslab, interval 1, probability 0, space 0, times 0 [ 419.970685][T18458] CPU: 1 UID: 0 PID: 18458 Comm: syz.2.3219 Not tainted syzkaller #0 PREEMPT(full) [ 419.970709][T18458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 419.970720][T18458] Call Trace: [ 419.970726][T18458] [ 419.970734][T18458] dump_stack_lvl+0xe8/0x150 [ 419.970765][T18458] should_fail_ex+0x412/0x560 [ 419.970798][T18458] should_failslab+0xa8/0x100 [ 419.970823][T18458] __kmalloc_noprof+0xe8/0x760 [ 419.970844][T18458] ? skcipher_walk_virt+0x85/0x6a0 [ 419.970860][T18458] ? skcipher_next_slow+0xee/0x230 [ 419.970877][T18458] ? skcipher_walk_next+0x7b3/0xbe0 [ 419.970897][T18458] skcipher_next_slow+0xee/0x230 [ 419.970920][T18458] crypto_pcbc_encrypt+0x114/0x390 [ 419.970945][T18458] ? __pfx_crypto_pcbc_encrypt+0x10/0x10 [ 419.970967][T18458] ? rcu_is_watching+0x15/0xb0 [ 419.970996][T18458] ? __kmalloc_noprof+0x1b8/0x760 [ 419.971032][T18458] skcipher_recvmsg+0xaf7/0x1140 [ 419.971069][T18458] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 419.971087][T18458] ? __lock_acquire+0x6b5/0x2cf0 [ 419.971111][T18458] ? aa_sock_msg_perm+0xf1/0x1b0 [ 419.971130][T18458] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 419.971150][T18458] ? security_socket_recvmsg+0x7e/0x2c0 [ 419.971171][T18458] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 419.971191][T18458] sock_recvmsg+0x172/0x1b0 [ 419.971218][T18458] ____sys_recvmsg+0x1e6/0x4a0 [ 419.971246][T18458] ? __pfx_____sys_recvmsg+0x10/0x10 [ 419.971280][T18458] ? import_iovec+0x73/0xa0 [ 419.971304][T18458] ___sys_recvmsg+0x215/0x590 [ 419.971321][T18458] ? get_pid_task+0x20/0x1f0 [ 419.971345][T18458] ? __pfx____sys_recvmsg+0x10/0x10 [ 419.971369][T18458] ? __fget_files+0x2a/0x420 [ 419.971404][T18458] ? __fget_files+0x3a0/0x420 [ 419.971432][T18458] __x64_sys_recvmsg+0x1ba/0x2a0 [ 419.971454][T18458] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 419.971484][T18458] ? __pfx_ksys_write+0x10/0x10 [ 419.971514][T18458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.971533][T18458] do_syscall_64+0x15f/0xf80 [ 419.971555][T18458] ? trace_irq_disable+0x3b/0x140 [ 419.971577][T18458] ? clear_bhb_loop+0x40/0x90 [ 419.971599][T18458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.971616][T18458] RIP: 0033:0x7ffa17d9cdd9 [ 419.971633][T18458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.971648][T18458] RSP: 002b:00007ffa18c90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 419.971667][T18458] RAX: ffffffffffffffda RBX: 00007ffa18015fa0 RCX: 00007ffa17d9cdd9 [ 419.971680][T18458] RDX: 0000000000000000 RSI: 000020000000b680 RDI: 0000000000000004 [ 419.971690][T18458] RBP: 00007ffa18c90090 R08: 0000000000000000 R09: 0000000000000000 [ 419.971701][T18458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.971715][T18458] R13: 00007ffa18016038 R14: 00007ffa18015fa0 R15: 00007ffcd6a67758 [ 419.971744][T18458] [ 420.340672][T18460] syzkaller0: entered promiscuous mode [ 420.350972][T18460] syzkaller0: entered allmulticast mode [ 420.507451][T18466] syzkaller0: entered promiscuous mode [ 420.512958][T18466] syzkaller0: entered allmulticast mode [ 421.061063][T18487] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3231'. [ 421.078040][T18487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3231'. [ 421.217971][T18492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3231'. [ 421.234183][T18380] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 421.256434][T18380] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.289626][T18380] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 421.318247][T18380] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.326303][T18380] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 421.336564][T18380] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.368927][T18380] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 421.389441][T18380] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.524688][T18380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.548191][T18380] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.561951][ T8787] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.579802][ T8787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.603860][T18514] netlink: 'syz.1.3236': attribute type 1 has an invalid length. [ 421.613714][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.620808][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.647450][T18514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3236'. [ 421.905354][T18380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.951849][T18524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3238'. [ 421.968154][T18528] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3239'. [ 421.998611][T18529] openvswitch: netlink: IP tunnel dst address not specified [ 422.013573][ T5839] Bluetooth: hci4: command tx timeout [ 422.139392][T18531] erspan1: entered allmulticast mode [ 422.241895][T18380] veth0_vlan: entered promiscuous mode [ 422.256285][T18380] veth1_vlan: entered promiscuous mode [ 422.359679][T18380] veth0_macvtap: entered promiscuous mode [ 422.377597][T18540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3242'. [ 422.404723][T18540] vlan3: entered promiscuous mode [ 422.410969][T18540] bridge0: entered promiscuous mode [ 422.424005][T18380] veth1_macvtap: entered promiscuous mode [ 422.439230][T18542] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 422.445172][T18542] syzkaller1: linktype set to 769 [ 422.477426][T18380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.535356][T18380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.550613][ T391] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.601187][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.620261][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.638844][T18548] pim6reg1: entered allmulticast mode [ 422.646132][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.887513][ T8798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.912201][ T8798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.995348][ T8798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.009254][ T8798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.160841][T18389] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.226234][T18568] nbd: must specify at least one socket [ 423.534391][T18579] xt_connbytes: Forcing CT accounting to be enabled [ 423.725850][T18389] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.751910][T18591] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 423.790549][T18582] netlink: 'syz.2.3250': attribute type 13 has an invalid length. [ 423.825066][T18591] netlink: 'syz.0.3253': attribute type 1 has an invalid length. [ 423.867536][T18591] 8021q: adding VLAN 0 to HW filter on device bond3 [ 423.979973][T18603] netlink: 'syz.2.3257': attribute type 10 has an invalid length. [ 424.063826][ T5839] Bluetooth: hci4: command tx timeout [ 426.133581][ T5839] Bluetooth: hci4: command tx timeout [ 426.158472][T18389] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.276351][ T8787] vlan2: left allmulticast mode [ 426.288813][ T8787] geneve0: left allmulticast mode [ 426.302076][ T8787] bridge0: port 3(vlan2) entered disabled state [ 426.395644][ T8787] pimreg: left allmulticast mode [ 426.802173][ T8787] bond7 (unregistering): (slave erspan1): Releasing active interface [ 426.906994][ T8787] bond6 (unregistering): (slave gretap2): Releasing active interface [ 427.229399][ T8787] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 427.348119][ T8787] bond0 (unregistering): Released all slaves [ 427.360665][ T8787] bond1 (unregistering): Released all slaves [ 427.384211][ T8787] bond2 (unregistering): Released all slaves [ 427.404453][ T8787] bond3 (unregistering): (slave veth3): Releasing backup interface [ 427.416314][ T8787] bond3 (unregistering): Released all slaves [ 427.440608][ T8787] bond4 (unregistering): Released all slaves [ 427.459377][ T8787] bond5 (unregistering): Released all slaves [ 427.477413][ T8787] bond6 (unregistering): Released all slaves [ 427.494968][ T8787] bond7 (unregistering): Released all slaves [ 427.532252][ T8787] bond8 (unregistering): (slave veth9): Releasing backup interface [ 427.541945][ T8787] bond8 (unregistering): Released all slaves [ 427.559726][ T8787] bond9 (unregistering): Released all slaves [ 427.587890][ T8787] bond10 (unregistering): (slave lo): Releasing backup interface [ 427.596833][ T8787] bond10 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 427.618152][ T8787] bond10 (unregistering): Released all slaves [ 427.638559][ T8787] bond11 (unregistering): Released all slaves [ 427.657191][ T8787] bond12 (unregistering): Released all slaves [ 427.675910][ T8787] bond13 (unregistering): Released all slaves [ 427.809059][T18633] __nla_validate_parse: 6 callbacks suppressed [ 427.809077][T18633] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3262'. [ 427.854773][ T5921] lo speed is unknown, defaulting to 1000 [ 427.879953][ T5921] sqz0: Port: 1 Link DOWN [ 427.906978][ T5921] lo speed is unknown, defaulting to 1000 [ 427.945255][ T8787] tipc: Disabling bearer [ 427.997120][ T8787] tipc: Left network mode [ 428.366794][ T391] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.394801][T18655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3269'. [ 428.431872][T18657] netlink: 'syz.1.3268': attribute type 1 has an invalid length. [ 428.480163][ T391] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.598622][ T391] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.660557][T18670] Bluetooth: MGMT ver 1.23 [ 428.705971][T18671] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:19999 [ 428.759522][ T391] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.865268][T18676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.982128][T18685] netlink: 'syz.3.3278': attribute type 39 has an invalid length. [ 429.708871][ T8787] hsr_slave_0: left promiscuous mode [ 429.725255][ T8787] hsr_slave_1: left promiscuous mode [ 430.158131][ T8792] smc: removing ib device sqz0 [ 430.206151][T18717] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 430.295141][ T8792] smbdirect: ib_dev[sqz0] removed [ 430.828347][T18754] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3293'. [ 431.049591][T18770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3296'. [ 431.072312][T18771] xt_hashlimit: size too large, truncated to 1048576 [ 431.223573][T18781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3300'. [ 432.219536][T18828] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3312'. [ 432.259548][T18828] netlink: 'syz.4.3312': attribute type 1 has an invalid length. [ 432.272283][T18830] tipc: Started in network mode [ 432.287851][T18830] tipc: Node identity 62b6d864262f, cluster identity 4711 [ 432.307920][T18830] tipc: Enabled bearer , priority 0 [ 432.465432][T18837] syzkaller0: entered promiscuous mode [ 432.493794][T18837] syzkaller0: entered allmulticast mode [ 432.507321][T18837] tipc: Resetting bearer [ 432.802893][ T391] tipc: Resetting bearer [ 432.921702][T18829] tipc: Resetting bearer [ 433.683156][ T7750] IPVS: starting estimator thread 0... [ 433.774147][T18885] IPVS: using max 36 ests per chain, 86400 per kthread [ 435.852614][T18829] tipc: Disabling bearer [ 435.876839][ T7754] tipc: Node number set to 1150933092 [ 436.085983][T18893] netlink: 'syz.4.3324': attribute type 21 has an invalid length. [ 436.088780][T18889] syzkaller0: entered promiscuous mode [ 436.113008][T18889] syzkaller0: entered allmulticast mode [ 436.124409][T18893] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3324'. [ 436.324751][ T8787] IPVS: stop unused estimator thread 0... [ 436.386263][T18914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.506608][T18924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3328'. [ 436.568601][T18929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3328'. [ 436.657990][T18933] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3331'. [ 436.782685][T18940] nbd: must specify at least one socket [ 436.953635][T18945] netlink: 'syz.3.3336': attribute type 1 has an invalid length. [ 436.983538][T18945] netlink: 'syz.3.3336': attribute type 1 has an invalid length. [ 437.313674][T18972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3337'. [ 437.356083][T18971] netlink: 'syz.2.3341': attribute type 39 has an invalid length. [ 438.210781][T18997] : renamed from bond_slave_0 (while UP) [ 438.286858][T19001] x_tables: duplicate underflow at hook 3 [ 438.371020][T19003] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3350'. [ 438.408939][T19008] netlink: 'syz.3.3353': attribute type 10 has an invalid length. [ 438.492813][T19008] team0: Device vxcan1 is of different type [ 438.513299][T18979] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 438.513473][T19012] netlink: 404 bytes leftover after parsing attributes in process `syz.3.3353'. [ 438.529257][T19012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3353'. [ 438.540965][T19012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3353'. [ 438.563729][T19012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3353'. [ 438.947869][T19025] netlink: 'syz.2.3355': attribute type 4 has an invalid length. [ 439.322486][T19059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 439.329772][T19059] IPv6: NLM_F_CREATE should be set when creating new route [ 439.337085][T19059] IPv6: NLM_F_CREATE should be set when creating new route [ 439.406529][T19061] netlink: 'syz.2.3363': attribute type 2 has an invalid length. [ 439.828716][T19080] netlink: 'syz.3.3371': attribute type 1 has an invalid length. [ 440.302079][T19105] netlink: 'syz.0.3378': attribute type 3 has an invalid length. [ 440.444355][T19110] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 440.456430][T19110] syzkaller1: linktype set to 780 [ 440.547326][T19110] tipc: Started in network mode [ 440.569620][T19110] tipc: Node identity 2a37ac382cf, cluster identity 4711 [ 440.585787][T19110] tipc: Enabled bearer , priority 0 [ 440.690763][T19119] syzkaller0: entered promiscuous mode [ 440.699175][T19119] syzkaller0: entered allmulticast mode [ 440.705970][T19119] tipc: Resetting bearer [ 440.731862][T19123] geneve2: entered promiscuous mode [ 440.755753][ T8792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.782924][ T8792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.005816][T19109] tipc: Resetting bearer [ 442.970598][T19109] tipc: Disabling bearer [ 442.979853][ T8792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.988685][ T8792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.998697][T19137] __nla_validate_parse: 3 callbacks suppressed [ 442.998715][T19137] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3384'. [ 443.032950][T19137] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3384'. [ 443.046974][ T5921] tipc: Node number set to 113749048 [ 443.300451][T19158] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3394'. [ 443.653580][T19167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3399'. [ 443.956160][T19185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3404'. [ 444.209385][T19202] SET target dimension over the limit! [ 444.269269][T19207] sctp: [Deprecated]: syz.0.3413 (pid 19207) Use of int in max_burst socket option. [ 444.269269][T19207] Use struct sctp_assoc_value instead [ 444.296726][T19204] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 444.334443][T19204] bond5 (unregistering): Released all slaves [ 444.797774][T19229] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 444.832097][T19234] syzkaller1: entered promiscuous mode [ 444.844487][T19234] syzkaller1: entered allmulticast mode [ 444.994391][T19241] ipvlan2: entered promiscuous mode [ 445.016802][T19243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3422'. [ 445.027488][T19241] bridge0: port 3(ipvlan2) entered blocking state [ 445.034454][T19241] bridge0: port 3(ipvlan2) entered disabled state [ 445.044434][T19241] ipvlan2: entered allmulticast mode [ 445.085122][T19241] bridge0: entered allmulticast mode [ 445.119554][T19241] ipvlan2: left allmulticast mode [ 445.161171][T19241] bridge0: left allmulticast mode [ 445.334426][T19256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3425'. [ 445.672768][T19267] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.690840][T19271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3431'. [ 445.716759][T19271] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3431'. [ 445.822540][T19267] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.849778][T19279] tipc: Started in network mode [ 445.864621][T19279] tipc: Node identity ac14140f, cluster identity 4711 [ 445.879685][T19279] tipc: New replicast peer: 255.255.255.255 [ 445.906268][T19279] tipc: Enabled bearer , priority 10 [ 445.918082][T19283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3434'. [ 445.931427][T19267] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.035796][T19267] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.249077][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.408031][ T8792] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.431268][ T8792] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.443189][T19309] sctp: [Deprecated]: syz.2.3443 (pid 19309) Use of int in maxseg socket option. [ 446.443189][T19309] Use struct sctp_assoc_value instead [ 446.496604][ T8787] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.616479][T19320] Bluetooth: MGMT ver 1.23 [ 446.679727][T19325] IPv6: addrconf: prefix option has invalid lifetime [ 446.776817][T19331] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 447.166975][T19338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.189292][T19338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.266151][T19355] netlink: 'syz.3.3459': attribute type 10 has an invalid length. [ 447.318368][T19361] netlink: 'syz.3.3459': attribute type 10 has an invalid length. [ 447.370621][T19364] netlink: 'syz.3.3459': attribute type 1 has an invalid length. [ 447.385921][ T10] tipc: Node number set to 2886997007 [ 447.391697][ T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.401801][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.414036][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.438182][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.462099][T19355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.486661][T19355] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 447.501715][T19361] batadv0: entered promiscuous mode [ 447.514456][T19361] batadv0: entered allmulticast mode [ 447.527296][T19361] bond0: (slave batadv0): Releasing backup interface [ 447.555735][T19361] bridge0: port 3(batadv0) entered blocking state [ 447.564306][T19361] bridge0: port 3(batadv0) entered disabled state [ 447.594376][ T8787] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 447.604130][ T8787] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 447.639527][T19365] netlink: 'syz.4.3461': attribute type 1 has an invalid length. [ 447.661255][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.674734][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.688505][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.706076][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.302743][T19409] __nla_validate_parse: 11 callbacks suppressed [ 448.302761][T19409] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3475'. [ 448.320326][T19409] netlink: 560 bytes leftover after parsing attributes in process `syz.4.3475'. [ 448.397728][T19415] netlink: 'syz.4.3477': attribute type 1 has an invalid length. [ 448.488696][T19415] bond1: (slave bridge1): making interface the new active one [ 448.497544][T19415] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 448.510046][T19418] bpq0: entered promiscuous mode [ 448.519004][T19418] bpq0: entered allmulticast mode [ 448.560842][T19418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3478'. [ 448.599429][T19418] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3478'. [ 448.839225][T19431] sit1: entered promiscuous mode [ 448.891148][T19432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3480'. [ 448.932141][T19432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3480'. [ 449.096854][T19448] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3484'. [ 449.367195][T19465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3488'. [ 449.625602][T19479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3492'. [ 449.631546][T19477] syzkaller0: entered promiscuous mode [ 449.646151][T19479] netlink: 'syz.0.3492': attribute type 3 has an invalid length. [ 449.656179][T19477] syzkaller0: entered allmulticast mode [ 449.751663][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3491'. [ 450.267268][T19502] netlink: 'syz.4.3498': attribute type 1 has an invalid length. [ 450.413225][T19511] bond2: (slave geneve2): making interface the new active one [ 450.436852][T19511] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 450.506398][ T8798] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 450.529345][ T8798] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 450.577767][ T8798] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 450.655280][ T8798] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 450.959718][T19530] xt_ipcomp: unknown flags 1D [ 452.199406][T19598] netlink: 'syz.4.3528': attribute type 1 has an invalid length. [ 452.761167][T19629] openvswitch: netlink: Flow actions attr not present in new flow. [ 452.796144][ T7751] IPVS: starting estimator thread 0... [ 452.805917][T19632] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 452.833516][T19632] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 452.846040][T19632] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 452.866437][T19632] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 452.884735][T19632] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 452.914319][T19632] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 452.958579][T19635] IPVS: using max 31 ests per chain, 74400 per kthread [ 453.011544][T19645] netlink: 'syz.0.3541': attribute type 2 has an invalid length. [ 453.100729][ T7754] IPVS: starting estimator thread 0... [ 453.108456][T19643] IPVS: sh: FWM 3 0x00000003 - no destination available [ 453.141696][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 453.228701][T19648] IPVS: using max 33 ests per chain, 79200 per kthread [ 453.289417][T19650] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 453.566612][T19673] __nla_validate_parse: 13 callbacks suppressed [ 453.566631][T19673] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3549'. [ 453.812708][T19693] tipc: Trying to set illegal importance in message [ 453.912769][T19701] netlink: 'syz.2.3556': attribute type 1 has an invalid length. [ 453.932791][T19703] bpq0: left promiscuous mode [ 453.947402][T19703] bpq0: left allmulticast mode [ 453.962744][T19703] netlink: 'syz.3.3555': attribute type 3 has an invalid length. [ 453.963753][T19701] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 454.280160][T19722] ip6gre1: entered promiscuous mode [ 454.348296][T19723] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.427631][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3561'. [ 454.447866][T19723] bridge_slave_0 (unregistering): left allmulticast mode [ 454.479014][T19728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3561'. [ 454.493500][T19723] bridge_slave_0 (unregistering): left promiscuous mode [ 454.510857][T19723] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.522085][T19732] netlink: 'syz.0.3564': attribute type 8 has an invalid length. [ 454.599759][T19742] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3564'. [ 454.890216][T19762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3570'. [ 454.952444][T19755] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 455.118166][T19764] veth3: entered promiscuous mode [ 455.249591][T19770] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 455.311428][T19770] bond2: (slave lo): Enslaving as an active interface with an up link [ 455.357878][T19770] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 455.484986][ T12] bridge_slave_1: left promiscuous mode [ 455.510109][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.570393][ T12] bridge_slave_0: left allmulticast mode [ 455.577119][ T12] bridge_slave_0: left promiscuous mode [ 455.582933][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.670029][ T12] pimreg9: left allmulticast mode [ 456.132088][ T12] gretap0 (unregistering): left promiscuous mode [ 456.325764][ T12] bond2 (unregistering): (slave geneve2): Releasing active interface [ 456.966407][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.976294][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.987029][ T12] bond0 (unregistering): Released all slaves [ 456.997103][ T12] bond1 (unregistering): Released all slaves [ 457.017245][ T12] bond2 (unregistering): Released all slaves [ 457.030056][ T12] bond3 (unregistering): Released all slaves [ 457.043164][ T12] bond4 (unregistering): Released all slaves [ 457.057078][ T12] bond5 (unregistering): Released all slaves [ 457.073204][ T12] bond6 (unregistering): (slave veth5): Releasing active interface [ 457.082025][ T12] bond6 (unregistering): Released all slaves [ 457.107701][ T12] bond7 (unregistering): Released all slaves [ 457.120495][ T12] bond8 (unregistering): Released all slaves [ 457.136493][ T12] bond9 (unregistering): Released all slaves [ 457.156443][ T12] bond10 (unregistering): Released all slaves [ 457.169980][T19786] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 457.260499][T19803] bond4: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 457.292465][T19803] bond4 (unregistering): Released all slaves [ 457.385518][ T12] tipc: Left network mode [ 457.569288][T19826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.675420][T19834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3587'. [ 457.764548][T19843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3587'. [ 457.782975][T19843] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3587'. [ 457.806934][T19850] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 457.993882][T19857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3593'. [ 458.290685][T19870] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3597'. [ 458.646389][T19896] netlink: 'syz.4.3603': attribute type 1 has an invalid length. [ 459.176849][T19913] nr0: tun_chr_ioctl cmd 1074025677 [ 459.184738][T19913] nr0: linktype set to 774 [ 459.200091][T19915] __nla_validate_parse: 2 callbacks suppressed [ 459.200109][T19915] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3611'. [ 459.521252][ T12] veth1_to_team: left promiscuous mode [ 459.560081][ T12] hsr0: left allmulticast mode [ 459.566267][T19929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3617'. [ 460.003603][ T12] team0 (unregistering): Port device team_slave_1 removed [ 460.019886][ T12] team0 (unregistering): Port device team_slave_0 removed [ 460.298215][T19955] veth0_to_batadv: entered promiscuous mode [ 460.315188][T19955] veth0_to_batadv: entered allmulticast mode [ 460.682418][T19993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3630'. [ 460.753057][T19988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3631'. [ 460.957114][ T12] IPVS: stop unused estimator thread 0... [ 460.964121][T19988] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3631'. [ 461.480816][T20025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3637'. [ 461.513473][T20025] syzkaller1: entered allmulticast mode [ 461.722265][T20033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3639'. [ 462.337498][T20045] netlink: 'syz.0.3640': attribute type 1 has an invalid length. [ 462.369301][T20045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3640'. [ 462.809945][T20068] netlink: 'syz.1.3646': attribute type 1 has an invalid length. [ 462.984068][T20068] 8021q: adding VLAN 0 to HW filter on device bond3 [ 462.994232][T20077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3650'. [ 463.009461][T20076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3649'. [ 463.140998][T20069] bond3: (slave veth7): Enslaving as an active interface with a down link [ 463.240309][T20072] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.387127][T20072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.409737][T20072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.575868][T20068] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 463.588177][T20068] bond3: (slave batadv1): making interface the new active one [ 463.598064][T20068] batadv1: entered promiscuous mode [ 463.604390][T20068] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 463.619317][ T9856] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.640860][T20081] 8021q: VLANs not supported on caif0 [ 463.650493][ T9856] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.679546][ T9856] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.707992][ T9856] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.867206][T20103] batadv_slave_0: entered promiscuous mode [ 464.011887][T20102] batadv_slave_0: left promiscuous mode [ 464.049336][T20109] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 464.305918][T20123] __nla_validate_parse: 2 callbacks suppressed [ 464.305936][T20123] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3661'. [ 464.512595][T20128] Cannot find set identified by id 0 to match [ 464.535086][T20131] netlink: 'syz.4.3660': attribute type 13 has an invalid length. [ 464.812570][T20142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3663'. [ 465.326347][T20152] bond2: (slave lo): Releasing backup interface [ 465.371925][T20159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3667'. [ 465.384720][T20152] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 465.428196][T20152] bridge_slave_1: left allmulticast mode [ 465.457780][T20152] bridge_slave_1: left promiscuous mode [ 465.477099][T20152] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.489169][T20152] bond0: (slave bond_slave_0): Releasing backup interface [ 465.503941][T20152] bond0: (slave bond_slave_1): Releasing backup interface [ 465.515432][T20152] team0: Port device team_slave_0 removed [ 465.524832][T20152] team0: Port device team_slave_1 removed [ 465.531881][T20152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.544212][T20152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.552130][T20152] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 465.580213][T20170] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 465.616015][T20159] bond4: option primary_reselect: invalid value (48) [ 465.624716][T20159] bond4 (unregistering): Released all slaves [ 465.697506][T20152] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3667'. [ 465.876543][T20185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3676'. [ 465.900634][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3673'. [ 465.913838][T20186] syzkaller0: entered promiscuous mode [ 465.931400][T20186] syzkaller0: entered allmulticast mode [ 465.945077][T20185] tipc: Enabled bearer , priority 0 [ 465.951986][T20184] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.3675'. [ 466.018464][T20185] tipc: Resetting bearer [ 466.116056][T20185] tipc: Disabling bearer [ 466.277101][T20213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3682'. [ 466.295844][T20200] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3679'. [ 466.303394][T20213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3682'. [ 466.390393][ T391] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.414268][ T391] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.445446][ T391] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.465865][ T391] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.752623][T20237] openvswitch: netlink: Actions may not be safe on all matching packets [ 466.944221][T20251] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 466.971673][T20251] netlink: 'syz.4.3691': attribute type 1 has an invalid length. [ 467.144838][T20268] tc_dump_action: action bad kind [ 467.554450][T20290] netlink: 'syz.0.3700': attribute type 1 has an invalid length. [ 467.907469][T20317] tipc: Enabling of bearer rejected, failed to enable media [ 467.958936][T20317] gretap0: entered promiscuous mode [ 468.039877][T20324] 0{X: renamed from gretap0 [ 468.062710][T20324] 0{X: left promiscuous mode [ 468.068606][T20324] 0{X: entered allmulticast mode [ 468.077583][T20324] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 468.702508][T20362] netlink: 'syz.3.3720': attribute type 39 has an invalid length. [ 468.711211][T20367] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 468.810738][T20367] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 468.900352][T20375] bond4: Removing last ns target with arp_interval on [ 469.251465][T20395] ip6gre2: entered promiscuous mode [ 469.268789][T20395] ip6gre2: entered allmulticast mode [ 469.332126][T20407] tipc: Enabled bearer , priority 14 [ 469.356256][T20407] netlink: 'syz.0.3733': attribute type 142 has an invalid length. [ 469.568657][T20427] ip6gre1: entered promiscuous mode [ 469.575631][T20427] ip6gre1: entered allmulticast mode [ 469.592486][ T9856] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 469.619687][ T7750] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 469.629196][ T9856] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 469.644723][T20427] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 469.648256][T20429] xt_hl: Unknown TTL match mode: 237 [ 469.667292][T20427] netlink: 'syz.2.3739': attribute type 11 has an invalid length. [ 470.113911][ T7750] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.130550][T20447] __nla_validate_parse: 42 callbacks suppressed [ 470.130566][T20447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3745'. [ 470.183679][ T5936] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.258201][T20453] ..@: renamed from veth0_to_hsr [ 470.543424][ T5936] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.878831][T20483] syzkaller0: entered promiscuous mode [ 470.884869][T20483] syzkaller0: entered allmulticast mode [ 470.957222][T20498] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.3762'. [ 470.966945][T20498] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.3762'. [ 473.026086][T20527] x_tables: duplicate underflow at hook 2 [ 473.164192][T20544] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3772'. [ 473.197063][T20544] .70: renamed from hsr0 (while UP) [ 473.225228][T20544] .70: entered allmulticast mode [ 473.241475][T20544] hsr_slave_0: entered allmulticast mode [ 473.249072][T20544] hsr_slave_1: entered allmulticast mode [ 473.255082][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 473.296900][T20544] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 473.331756][T20554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3777'. [ 473.367251][T20560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3775'. [ 473.500112][T20554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.576000][T20561] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 473.888623][T20604] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 473.972446][T20609] netlink: 'syz.4.3787': attribute type 13 has an invalid length. [ 473.988128][T20609] netlink: 'syz.4.3787': attribute type 17 has an invalid length. [ 474.154459][T20619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3787'. [ 474.224227][T20607] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.231662][T20607] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.499387][T20607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.533766][T20607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.918670][T20609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.926990][T20609] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.944158][T20609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 474.945197][T20621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 474.960190][T20611] netlink: 'syz.0.3786': attribute type 29 has an invalid length. [ 474.983146][T20611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3786'. [ 475.051716][ T8798] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.098052][ T8798] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 475.129743][ T8798] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.148781][ T8798] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 475.167834][ T8798] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.187962][ T8798] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 475.199866][T20634] netlink: 'syz.0.3796': attribute type 1 has an invalid length. [ 475.267896][T20639] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3795'. [ 475.308821][T20654] xt_hashlimit: size too large, truncated to 1048576 [ 475.348928][T20656] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3794'. [ 475.427769][T20656] xt_hashlimit: size too large, truncated to 1048576 [ 475.482161][ T8787] nci: nci_ntf_packet: unknown ntf opcode 0x26 [ 475.662024][T20640] ipvlan2: entered promiscuous mode [ 475.668120][T20640] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 475.841052][T20641] ipvlan3: entered promiscuous mode [ 475.847014][T20641] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 475.864348][ T8798] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.874586][ T8798] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 475.915956][T20634] 8021q: adding VLAN 0 to HW filter on device bond5 [ 475.962102][T20642] bond5: (slave veth7): Enslaving as an active interface with a down link [ 476.005851][T20655] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 476.010026][T20669] netlink: 'syz.2.3799': attribute type 1 has an invalid length. [ 476.015526][T20655] bond5: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 476.102311][T20648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 476.150579][T20674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3801'. [ 476.220178][T20674] team0: Port device team_slave_0 removed [ 476.527933][T20685] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 476.597972][T20699] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3811'. [ 476.684833][T20704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3811'. [ 476.756660][T20694] syzkaller1: entered promiscuous mode [ 476.762299][T20694] syzkaller1: entered allmulticast mode [ 476.919677][T20711] netlink: 'syz.4.3813': attribute type 1 has an invalid length. [ 477.253743][T20728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3819'. [ 477.276237][T20728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3819'. [ 477.289128][T20727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.325859][T20730] macsec1: entered promiscuous mode [ 477.331729][T20730] virt_wifi0: entered promiscuous mode [ 477.676357][T20743] syzkaller0: entered promiscuous mode [ 477.707189][T20743] syzkaller0: entered allmulticast mode [ 477.849932][T20753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3828'. [ 477.946590][T20753] nbd: socks must be embedded in a SOCK_ITEM attr [ 477.972494][T20759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3828'. [ 478.007062][T20759] nbd: socks must be embedded in a SOCK_ITEM attr [ 478.071172][T20630] block nbd64: NBD_DISCONNECT [ 478.288096][T20787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3838'. [ 478.329681][T20630] udevd[20630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 479.177522][T20820] ip6gre3: entered promiscuous mode [ 479.221330][T20820] ip6gre3: entered allmulticast mode [ 479.292542][ T12] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 479.335280][ T12] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 479.346163][ T7730] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 479.390271][T20838] netlink: 'syz.2.3847': attribute type 1 has an invalid length. [ 479.561854][T20840] syzkaller0: entered promiscuous mode [ 479.570065][T20840] syzkaller0: entered allmulticast mode [ 479.678857][T20838] veth3: entered allmulticast mode [ 479.741759][T20855] reject_tg6_check: 55 callbacks suppressed [ 479.741774][T20855] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 479.756648][T20838] bond5: (slave veth3): Enslaving as a backup interface with a down link [ 479.933583][ T7730] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 480.014327][T20858] bond6: entered promiscuous mode [ 480.019502][T20858] bond6: entered allmulticast mode [ 480.026076][T20858] 8021q: adding VLAN 0 to HW filter on device bond6 [ 480.319603][ T7730] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 480.434689][T20877] IPVS: rr: FWM 3 0x00000003 - no destination available [ 480.441495][T20876] __nla_validate_parse: 1 callbacks suppressed [ 480.441511][T20876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3857'. [ 480.478707][T20876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3857'. [ 480.490282][T20877] IPVS: rr: FWM 3 0x00000003 - no destination available [ 480.501597][T20876] netlink: 'syz.3.3857': attribute type 5 has an invalid length. [ 480.523575][T20877] IPVS: rr: FWM 3 0x00000003 - no destination available [ 480.538127][T20877] IPVS: rr: FWM 3 0x00000003 - no destination available [ 480.560497][T20877] IPVS: rr: FWM 3 0x00000003 - no destination available [ 480.578565][T20877] IPVS: rr: FWM 3 0x00000003 - no destination available [ 480.624066][T20876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3857'. [ 480.648024][T20890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3860'. [ 480.659120][T20877] IPVS: rr: FWM 3 0x00000003 - no destination available [ 480.674943][T20877] IPVS: rr: FWM 3 0x00000003 - no destination available [ 480.686058][T20876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3857'. [ 480.699785][T20877] IPVS: rr: FWM 3 0x00000003 - no destination available [ 480.708139][T20876] netlink: 'syz.3.3857': attribute type 5 has an invalid length. [ 480.708552][ T8798] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.730779][T20877] IPVS: rr: FWM 3 0x00000003 - no destination available [ 480.770154][ T8798] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.827479][ T8798] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.885122][ T8798] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.013112][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 481.216709][T20916] xfrm1: entered allmulticast mode [ 481.407042][T20933] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3871'. [ 481.437019][T20933] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3871'. [ 481.521055][T20933] tipc: Disabling bearer [ 481.751630][T20948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3874'. [ 481.769514][T20941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3874'. [ 481.886168][T20953] netlink: 'syz.2.3876': attribute type 4 has an invalid length. [ 481.951847][T20956] netlink: 'syz.2.3876': attribute type 1 has an invalid length. [ 481.983155][T20958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3877'. [ 482.001699][T20962] netlink: 'syz.3.3873': attribute type 1 has an invalid length. [ 482.839306][T20989] bond7: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 482.860692][T20989] bond7: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 482.997882][T21010] netlink: 'syz.1.3889': attribute type 1 has an invalid length. [ 483.082527][T21021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.095984][ T5853] Bluetooth: hci5: command 0x0406 tx timeout [ 483.110493][T21010] bond4: entered promiscuous mode [ 483.138214][T21010] 8021q: adding VLAN 0 to HW filter on device bond4 [ 483.206460][T21011] bond4: (slave veth9): making interface the new active one [ 483.224616][T21011] veth9: entered promiscuous mode [ 483.241065][T21011] bond4: (slave veth9): Enslaving as an active interface with an up link [ 483.399208][T21029] IPVS: Scheduler module ip_vs_sip not found [ 483.558309][T21042] netlink: 'syz.4.3898': attribute type 3 has an invalid length. [ 483.653023][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 483.810261][T21063] netlink: 'syz.4.3902': attribute type 13 has an invalid length. [ 483.838156][T21063] netlink: 'syz.4.3902': attribute type 17 has an invalid length. [ 484.107521][T21060] virt_wifi0: left promiscuous mode [ 484.167174][T21063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.176231][T21063] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.350813][T21079] netlink: 'syz.0.3907': attribute type 2 has an invalid length. [ 485.039033][T21124] IPVS: Error connecting to the multicast addr [ 485.194920][T21143] xt_hashlimit: max too large, truncated to 1048576 [ 485.557031][T21167] __nla_validate_parse: 9 callbacks suppressed [ 485.557049][T21167] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3930'. [ 485.573987][T21167] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3930'. [ 485.737525][T21179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3933'. [ 485.759036][T21183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3934'. [ 485.765768][T21179] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3933'. [ 485.781336][T21183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3934'. [ 485.921606][T21197] netlink: 'syz.1.3938': attribute type 6 has an invalid length. [ 485.931149][T21197] netlink: 'syz.1.3938': attribute type 7 has an invalid length. [ 485.940734][T21197] netlink: 'syz.1.3938': attribute type 8 has an invalid length. [ 485.950332][T21197] netlink: 'syz.1.3938': attribute type 15 has an invalid length. [ 485.958680][T21198] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3939'. [ 485.970050][T21197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3938'. [ 485.997962][T21198] netlink: 'syz.0.3939': attribute type 1 has an invalid length. [ 486.211298][T21210] netlink: 'syz.0.3942': attribute type 29 has an invalid length. [ 486.422785][T21224] gre0: entered promiscuous mode [ 486.436982][T21224] gre0: entered allmulticast mode [ 486.513992][T21235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3945'. [ 486.595477][T21237] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3948'. [ 486.641144][T21237] tipc: Enabling of bearer rejected, failed to enable media [ 486.971679][T21265] netlink: 'syz.1.3954': attribute type 3 has an invalid length. [ 487.184214][T21272] hsr_slave_1 (unregistering): left promiscuous mode [ 487.515056][T21287] vxcan2: entered allmulticast mode [ 488.249501][T21304] netlink: 'syz.4.3969': attribute type 13 has an invalid length. [ 488.255325][T21305] netlink: 'syz.4.3969': attribute type 13 has an invalid length. [ 488.257945][T21304] netlink: 'syz.4.3969': attribute type 17 has an invalid length. [ 488.276036][T21305] net_ratelimit: 56 callbacks suppressed [ 488.276042][T21305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.301531][T21304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.792357][T21252] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.081593][T21333] IPv6: sit1: Disabled Multicast RS [ 490.174052][T21337] x_tables: duplicate underflow at hook 1 [ 490.828063][T21346] __nla_validate_parse: 6 callbacks suppressed [ 490.828081][T21346] netlink: 292 bytes leftover after parsing attributes in process `syz.0.3980'. [ 490.895968][T21349] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3981'. [ 490.988612][T21359] netlink: 780 bytes leftover after parsing attributes in process `syz.4.3984'. [ 491.030634][T21349] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3981'. [ 491.203438][T21364] block nbd5: server does not support multiple connections per device. [ 491.268837][T21364] block nbd5: shutting down sockets [ 491.988919][T21414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3998'. [ 492.006361][T21415] sctp: [Deprecated]: syz.1.3996 (pid 21415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 492.006361][T21415] Use struct sctp_sack_info instead [ 492.123610][T21421] validate_nla: 3 callbacks suppressed [ 492.123627][T21421] netlink: 'syz.4.4001': attribute type 1 has an invalid length. [ 492.189535][T21421] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 492.543088][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 492.561917][T21454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4009'. [ 492.720757][T21462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4011'. [ 492.753975][T21465] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4010'. [ 493.217673][T21496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4022'. [ 493.232994][T21496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4022'. [ 493.490921][T21512] bridge_slave_0 (unregistering): left allmulticast mode [ 493.502441][T21512] bridge_slave_0 (unregistering): left promiscuous mode [ 493.512276][T21512] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.969626][T21546] openvswitch: netlink: Key type 29 is not supported [ 494.076751][T21555] xt_hashlimit: size too large, truncated to 1048576 [ 495.080709][T21589] : renamed from veth0_to_bond [ 495.093651][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 496.088191][T21629] __nla_validate_parse: 11 callbacks suppressed [ 496.088210][T21629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4059'. [ 496.107502][T21629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4059'. [ 496.122171][T21629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4059'. [ 496.586132][T21647] netlink: 'syz.2.4064': attribute type 178 has an invalid length. [ 496.798847][T21658] netlink: 'syz.0.4065': attribute type 1 has an invalid length. [ 497.019901][T21658] bond8: entered promiscuous mode [ 497.026211][T21658] bond8: entered allmulticast mode [ 497.044054][T21658] 8021q: adding VLAN 0 to HW filter on device bond8 [ 497.187282][T21661] macvlan0: entered promiscuous mode [ 497.222017][T21661] macvlan0: entered allmulticast mode [ 497.243523][T21661] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 498.059588][T21698] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 498.098645][T21698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4075'. [ 498.122992][T21698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4075'. [ 498.866575][T21720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4082'. [ 498.877933][T21711] veth9: entered allmulticast mode [ 498.878693][T21721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4082'. [ 499.210894][T21720] vlan0: entered promiscuous mode [ 499.538397][T21753] netlink: 'syz.4.4088': attribute type 2 has an invalid length. [ 499.560929][T21753] tipc: Started in network mode [ 499.573786][T21753] tipc: Node identity 1340008, cluster identity 4711 [ 499.586968][T21756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4089'. [ 499.590816][T21753] tipc: Node number set to 20185096 [ 499.660184][T21759] x_tables: duplicate underflow at hook 1 [ 499.870224][T21770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4092'. [ 499.914934][T21764] netlink: 'syz.4.4092': attribute type 28 has an invalid length. [ 500.169219][T21782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4094'. [ 500.230848][ T8787] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.246559][ T8787] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.268343][ T8787] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.292576][ T8787] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.631435][T21768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.798768][T21793] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20000 [ 501.301302][T21822] __nla_validate_parse: 4 callbacks suppressed [ 501.301316][T21822] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4107'. [ 501.349051][T21822] veth1_to_team: entered promiscuous mode [ 501.359012][T21822] gretap0: entered promiscuous mode [ 501.366290][T21822] debugfs: 'hsr0' already exists in 'hsr' [ 501.372289][T21822] Cannot create hsr debugfs directory [ 501.392505][T21822] hsr0: entered promiscuous mode [ 501.447955][T21825] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 501.460017][T21825] bond5 (unregistering): Released all slaves [ 501.742504][T21849] netlink: 'syz.0.4112': attribute type 25 has an invalid length. [ 501.770569][T21849] netlink: 'syz.0.4112': attribute type 3 has an invalid length. [ 501.799690][T21852] xt_hashlimit: size too large, truncated to 1048576 [ 501.806089][T21849] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4112'. [ 502.104745][T21869] syzkaller0: entered promiscuous mode [ 502.110318][T21869] syzkaller0: entered allmulticast mode [ 502.343342][T21877] macsec1: entered promiscuous mode [ 502.351475][T21877] team0: entered promiscuous mode [ 502.388558][T21877] team_slave_1: entered promiscuous mode [ 502.424008][T21877] macsec1: entered allmulticast mode [ 502.441086][T21877] team0: entered allmulticast mode [ 502.471069][T21877] team_slave_1: entered allmulticast mode [ 502.493870][T21877] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 502.573114][T21893] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4123'. [ 502.598457][T21896] ip6tnl1: entered promiscuous mode [ 502.968459][T21923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4131'. [ 503.438441][T21942] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 503.573385][ T5853] Bluetooth: hci3: command 0x0405 tx timeout [ 503.766171][T21958] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4139'. [ 503.864044][T21958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4139'. [ 503.874712][T21967] sctp: [Deprecated]: syz.3.4143 (pid 21967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 503.874712][T21967] Use struct sctp_sack_info instead [ 503.980228][T21969] sctp: [Deprecated]: syz.3.4143 (pid 21969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 503.980228][T21969] Use struct sctp_sack_info instead [ 504.167864][T21985] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4146'. [ 504.229365][T21974] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 504.249345][T21992] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 504.538117][T21975] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 504.574520][T22000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4149'. [ 505.808621][T22061] dvmrp1: entered allmulticast mode [ 505.879141][T22061] x_tables: duplicate underflow at hook 2 [ 505.964568][T22084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4166'. [ 506.136500][T22074] dvmrp1: left allmulticast mode [ 506.696796][T22107] syzkaller0: entered promiscuous mode [ 506.704244][T22107] syzkaller0: entered allmulticast mode [ 507.456049][T22129] netlink: 268 bytes leftover after parsing attributes in process `syz.1.4171'. [ 509.692788][T22149] batadv_slave_1: entered promiscuous mode [ 509.705828][T22149] batadv_slave_1: entered allmulticast mode [ 509.940908][T22176] netlink: 'syz.4.4182': attribute type 4 has an invalid length. [ 510.018139][T22185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4184'. [ 510.281490][T22194] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4186'. [ 510.293057][T22197] netlink: 'syz.1.4189': attribute type 7 has an invalid length. [ 510.305650][T22193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4188'. [ 510.321893][T22194] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4186'. [ 510.421212][T22204] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4192'. [ 510.461779][T22202] veth3: entered promiscuous mode [ 510.557588][T22211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4193'. [ 510.571386][T22202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4191'. [ 510.889828][T22227] netlink: 'syz.1.4200': attribute type 1 has an invalid length. [ 510.902998][T22225] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4199'. [ 510.938535][T22227] bond5: entered promiscuous mode [ 510.945529][T22227] bond5: entered allmulticast mode [ 510.951214][T22227] 8021q: adding VLAN 0 to HW filter on device bond5 [ 510.960788][T22225] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4199'. [ 511.027441][T22242] netlink: 'syz.0.4205': attribute type 6 has an invalid length. [ 511.027441][T22235] erspan2: entered allmulticast mode [ 511.027464][T22242] netlink: 'syz.0.4205': attribute type 23 has an invalid length. [ 511.051644][T22242] IPv6: NLM_F_CREATE should be specified when creating new route [ 511.093694][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 511.106559][T22235] bond5: (slave erspan2): making interface the new active one [ 511.168850][T22235] erspan2: entered promiscuous mode [ 511.187663][T22235] bond5: (slave erspan2): Enslaving as an active interface with an up link [ 511.213735][T22256] wg1: Caught tx_queue_len zero misconfig [ 511.313846][T22261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 511.891987][T22282] syzkaller1: entered promiscuous mode [ 511.907757][T22282] syzkaller1: entered allmulticast mode [ 512.077405][T22282] vlan0: left promiscuous mode [ 512.095069][T22282] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 512.138288][T22282] vlan3: left promiscuous mode [ 512.145568][T22282] bridge0: left promiscuous mode [ 512.155463][T22282] geneve2: left promiscuous mode [ 512.162755][T22282] sit1: left promiscuous mode [ 512.165892][T22295] netlink: 'syz.0.4217': attribute type 3 has an invalid length. [ 512.192944][T22295] netlink: 'syz.0.4217': attribute type 2 has an invalid length. [ 512.213262][T22295] netlink: 'syz.0.4217': attribute type 2 has an invalid length. [ 512.216059][T22282] ip6gre1: left promiscuous mode [ 512.227897][T22282] ip6gre1: left allmulticast mode [ 512.240626][T22282] ipvlan2: left promiscuous mode [ 512.252451][T22282] ipvlan3: left promiscuous mode [ 512.289019][T22282] veth3: left allmulticast mode [ 512.326291][T22282] ip6tnl1: left promiscuous mode [ 512.337320][T22282] syzkaller1: left promiscuous mode [ 512.342689][T22282] syzkaller1: left allmulticast mode [ 512.405247][T22305] netlink: 'syz.0.4218': attribute type 8 has an invalid length. [ 512.421247][ T1146] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.443938][ T1146] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.453910][ T1146] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.464232][ T1146] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.537024][ T1146] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.547568][ T1146] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.565295][ T1146] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.580701][ T1146] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.666515][T22313] syzkaller0: entered promiscuous mode [ 512.672151][T22313] syzkaller0: entered allmulticast mode [ 512.699002][T22319] xt_NFQUEUE: number of queues (45768) out of range (got 94214) [ 512.741954][T22319] __nla_validate_parse: 5 callbacks suppressed [ 512.741974][T22319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4222'. [ 512.759259][T22319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4222'. [ 514.172480][T22371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4234'. [ 514.370204][T22380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4238'. [ 514.767483][T22409] netlink: 'syz.0.4246': attribute type 3 has an invalid length. [ 514.806501][T22413] ip6gre4: entered promiscuous mode [ 514.811814][T22413] ip6gre4: entered allmulticast mode [ 514.818936][T22405] syzkaller0: entered promiscuous mode [ 514.825105][T22405] syzkaller0: entered allmulticast mode [ 515.292790][T22430] vlan4: entered allmulticast mode [ 515.326916][T22430] bond0: entered allmulticast mode [ 515.344283][T22430] bond_slave_0: entered allmulticast mode [ 515.359812][T22430] bond_slave_1: entered allmulticast mode [ 515.385601][T22436] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4255'. [ 515.415248][T22436] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 515.499930][T22447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.567431][T22448] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4255'. [ 515.582054][T22448] openvswitch: netlink: Flow key attr not present in new flow. [ 515.646441][T22453] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4259'. [ 515.708256][T22451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4258'. [ 515.730228][T22451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4258'. [ 515.921892][T22459] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4262'. [ 516.176832][T22477] netlink: 'syz.1.4267': attribute type 13 has an invalid length. [ 516.277908][T22482] netlink: 'syz.0.4269': attribute type 3 has an invalid length. [ 516.615185][T22503] netlink: 'syz.0.4276': attribute type 18 has an invalid length. [ 516.656544][T22501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.789563][T22511] netlink: 'syz.1.4279': attribute type 13 has an invalid length. [ 516.809158][T22511] netlink: 'syz.1.4279': attribute type 17 has an invalid length. [ 516.847398][T22511] 0{X: left allmulticast mode [ 516.966126][T22511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.975821][T22511] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.988530][T22511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.104522][T22532] netlink: 'syz.1.4286': attribute type 13 has an invalid length. [ 517.258426][T22538] bond6: option ad_select: invalid value (34) [ 517.269890][T22538] bond6 (unregistering): Released all slaves [ 517.606604][T22561] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 517.821630][T22572] __nla_validate_parse: 8 callbacks suppressed [ 517.821648][T22572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4298'. [ 517.867651][T22572] netlink: 'syz.1.4298': attribute type 10 has an invalid length. [ 517.900593][T22574] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4299'. [ 518.411957][T22602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4309'. [ 518.661289][T22620] bridge4: entered promiscuous mode [ 518.678341][T22625] netlink: 'syz.2.4316': attribute type 3 has an invalid length. [ 518.693268][T22620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4313'. [ 518.705173][T22625] netlink: 'syz.2.4316': attribute type 3 has an invalid length. [ 518.728873][T22625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4316'. [ 518.757121][T22629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4313'. [ 518.982198][T22650] team0: entered promiscuous mode [ 518.990648][T22650] team_slave_0: entered promiscuous mode [ 519.006509][T22650] team_slave_1: entered promiscuous mode [ 519.020751][T22650] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 519.067438][T22649] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4322'. [ 519.078468][T22649] xt_hashlimit: invalid rate [ 519.114325][T22658] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4325'. [ 519.242665][T22672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4326'. [ 519.281818][T22672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4326'. [ 519.376466][T22683] openvswitch: netlink: Message has 8 unknown bytes. [ 520.808595][T22727] netlink: 'syz.3.4342': attribute type 10 has an invalid length. [ 520.821562][T22727] dummy0: entered promiscuous mode [ 520.827951][T22727] dummy0: entered allmulticast mode [ 520.834347][T22727] team0: Port device dummy0 added [ 522.130101][T22660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.312553][T22732] netlink: 'syz.0.4345': attribute type 16 has an invalid length. [ 522.322042][T22736] netlink: 'syz.3.4344': attribute type 15 has an invalid length. [ 522.453585][T22745] netlink: 'syz.1.4349': attribute type 1 has an invalid length. [ 522.526476][T22745] bond6: entered promiscuous mode [ 522.538399][T22745] 8021q: adding VLAN 0 to HW filter on device bond6 [ 522.900794][T22778] __nla_validate_parse: 7 callbacks suppressed [ 522.900814][T22778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4355'. [ 522.908461][T22777] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4359'. [ 522.930054][T22773] sctp: [Deprecated]: syz.2.4357 (pid 22773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 522.930054][T22773] Use struct sctp_sack_info instead [ 522.961103][T22778] netlink: 'syz.1.4355': attribute type 15 has an invalid length. [ 522.970707][T22772] sctp: [Deprecated]: syz.2.4357 (pid 22772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 522.970707][T22772] Use struct sctp_sack_info instead [ 522.995574][T22778] netlink: 'syz.1.4355': attribute type 25 has an invalid length. [ 523.013609][T22778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4355'. [ 523.027203][T22773] sctp: [Deprecated]: syz.2.4357 (pid 22773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 523.027203][T22773] Use struct sctp_sack_info instead [ 523.054272][T22781] sctp: [Deprecated]: syz.2.4357 (pid 22781) Use of struct sctp_assoc_value in delayed_ack socket option. [ 523.054272][T22781] Use struct sctp_sack_info instead [ 523.101181][T22772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.141547][T22772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.178265][T22787] syzkaller1: entered promiscuous mode [ 523.184957][T22787] syzkaller1: entered allmulticast mode [ 523.207963][T22782] "syz.3.4360" (22782) uses obsolete ecb(arc4) skcipher [ 523.307959][T22799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4363'. [ 523.341814][T22799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4363'. [ 523.451152][T22806] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4367'. [ 523.571470][T22814] pim6reg: entered allmulticast mode [ 523.599776][T22814] pim6reg: left allmulticast mode [ 523.642559][T22819] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4371'. [ 523.688596][T22825] netlink: 468 bytes leftover after parsing attributes in process `syz.3.4372'. [ 523.845277][T22830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4373'. [ 523.908826][T22826] block nbd5: server does not support multiple connections per device. [ 523.958659][T22826] block nbd5: shutting down sockets [ 524.058236][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 524.170469][T22840] netlink: 'syz.0.4373': attribute type 4 has an invalid length. [ 524.363999][T22846] syzkaller0: entered promiscuous mode [ 524.380559][T22846] syzkaller0: entered allmulticast mode [ 524.403638][T22854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4377'. [ 526.819643][T22904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.840187][T22906] xt_hashlimit: size too large, truncated to 1048576 [ 526.929894][T22908] bond0: (slave wlan1): Releasing backup interface [ 527.629059][T22948] bond4: entered promiscuous mode [ 527.657525][T22948] 8021q: adding VLAN 0 to HW filter on device bond4 [ 528.159849][T22971] veth9: entered allmulticast mode [ 528.219371][T22971] bond3: (slave veth9): Enslaving as an active interface with an up link [ 528.228499][T22978] gre0: left promiscuous mode [ 528.233711][T22978] gre0: left allmulticast mode [ 528.245340][T22978] gtp0: left promiscuous mode [ 528.250040][T22978] gtp0: left allmulticast mode [ 528.257444][T22978] erspan1: left allmulticast mode [ 528.269729][T22978] bond6: left promiscuous mode [ 528.274670][T22978] bond6: left allmulticast mode [ 528.280536][T22978] bond8: left promiscuous mode [ 528.285496][T22978] bond8: left allmulticast mode [ 528.344022][T22984] bond3 (unregistering): (slave veth9): Releasing backup interface [ 528.358061][T22984] bond3 (unregistering): Released all slaves [ 528.422310][T22990] bond7: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 528.445759][T22990] bond7 (unregistering): Released all slaves [ 528.491107][ T9843] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.519765][ T9843] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.532040][T23002] netlink: 'syz.0.4414': attribute type 1 has an invalid length. [ 528.549697][ T9843] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.591334][ T9843] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.707339][T23016] xt_connbytes: Forcing CT accounting to be enabled [ 528.920984][T23033] xt_NFQUEUE: number of total queues is 0 [ 528.941158][T23033] __nla_validate_parse: 23 callbacks suppressed [ 528.941178][T23033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4423'. [ 528.982237][T23033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4423'. [ 529.015286][T23038] openvswitch: netlink: Actions may not be safe on all matching packets [ 529.024747][T23033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4423'. [ 529.043856][T23033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4423'. [ 529.122462][T23042] netlink: 'syz.2.4427': attribute type 17 has an invalid length. [ 529.153732][T23042] netlink: 'syz.2.4427': attribute type 49 has an invalid length. [ 529.168112][T23046] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4428'. [ 529.530019][T23069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4436'. [ 529.557503][T23069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4436'. [ 529.588227][ T9843] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.588348][T23069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4436'. [ 529.602172][ T9843] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.611114][T23069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4436'. [ 529.631336][ T9843] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.667589][T23072] 8021q: adding VLAN 0 to HW filter on device bond6 [ 529.675057][ T9843] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.997336][T23098] syzkaller0: entered promiscuous mode [ 530.011018][T23098] syzkaller0: entered allmulticast mode [ 530.423404][T23109] netlink: 'syz.1.4448': attribute type 6 has an invalid length. [ 530.752566][T23117] SET target dimension over the limit! [ 530.779800][T23117] netlink: 'syz.3.4450': attribute type 21 has an invalid length. [ 530.795167][T23117] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4450'. [ 531.008128][T23126] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20000 [ 531.289886][T23154] netlink: 'syz.4.4457': attribute type 1 has an invalid length. [ 531.462188][T23160] syzkaller1: entered promiscuous mode [ 531.471543][T23160] syzkaller1: entered allmulticast mode [ 531.822068][T23180] netlink: 'syz.0.4464': attribute type 39 has an invalid length. [ 531.872358][T23180] syz_tun (unregistering): left allmulticast mode [ 532.007055][T23195] netlink: 'syz.3.4470': attribute type 9 has an invalid length. [ 532.672599][T23236] bond9: entered promiscuous mode [ 532.679730][T23236] 8021q: adding VLAN 0 to HW filter on device bond9 [ 532.726420][T23241] 0: reclassify loop, rule prio 0, protocol 700 [ 532.800093][T23241] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 533.279368][T23279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 533.519614][T23292] syzkaller0: entered promiscuous mode [ 533.547491][T23292] syzkaller0: entered allmulticast mode [ 533.571242][T23292] simple: basic_2 [ 533.576033][T23292] simple: basic_4 [ 533.579719][T23292] simple: basic_6 [ 533.583421][T23292] simple: basic_8 [ 533.587061][T23292] simple: basic_10 [ 533.590787][T23292] simple: basic_12 [ 533.594558][T23292] simple: basic_14 [ 533.598282][T23292] simple: basic_16 [ 533.602008][T23292] simple: basic_18 [ 533.605785][T23292] simple: basic_20 [ 533.609511][T23292] simple: basic_22 [ 533.613288][T23292] simple: basic_24 [ 533.617013][T23292] simple: basic_26 [ 533.620736][T23292] simple: basic_28 [ 533.624524][T23292] simple: basic_30 [ 533.628252][T23292] simple: basic_32 [ 533.631974][T23292] simple: basic_34 [ 533.635746][T23292] 0: reclassify loop, rule prio 0, protocol 800 [ 533.652574][T23299] netlink: 'syz.4.4503': attribute type 1 has an invalid length. [ 533.673433][T23292] netlink: zone id is out of range [ 533.707579][T23292] netlink: zone id is out of range [ 533.719459][T23292] netlink: zone id is out of range [ 533.738207][T23292] netlink: zone id is out of range [ 533.750745][T23292] netlink: zone id is out of range [ 533.757952][T23292] netlink: zone id is out of range [ 533.781308][T23292] netlink: zone id is out of range [ 534.176460][T23330] __nla_validate_parse: 11 callbacks suppressed [ 534.176479][T23330] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4512'. [ 534.211715][T23330] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4512'. [ 534.692965][ T5853] Bluetooth: hci3: command 0x0405 tx timeout [ 534.913615][T23360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4518'. [ 534.988089][T23360] bond10: entered promiscuous mode [ 535.012551][T23360] 8021q: adding VLAN 0 to HW filter on device bond10 [ 535.059443][T23361] syzkaller0: entered promiscuous mode [ 535.067542][T23361] syzkaller0: entered allmulticast mode [ 535.122552][T23366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4518'. [ 535.145443][T23367] netlink: 'syz.2.4519': attribute type 2 has an invalid length. [ 535.260609][T23379] netlink: 'syz.1.4523': attribute type 83 has an invalid length. [ 535.400370][T23383] syzkaller0: entered promiscuous mode [ 535.421183][T23383] syzkaller0: entered allmulticast mode [ 535.474787][T23393] netlink: 296 bytes leftover after parsing attributes in process `syz.1.4526'. [ 535.513099][T23392] netlink: 296 bytes leftover after parsing attributes in process `syz.1.4526'. [ 536.064872][T23416] hsr0: entered promiscuous mode [ 536.175641][T23430] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 3, id = 0 [ 536.193860][T23416] hsr0: left promiscuous mode [ 536.338444][T23439] netlink: 'syz.3.4535': attribute type 13 has an invalid length. [ 536.411381][T23443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4537'. [ 536.469728][T23437] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4537'. [ 536.633622][ T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 536.663106][ T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 536.790483][T23453] netlink: 'syz.0.4540': attribute type 2 has an invalid length. [ 537.275525][T23473] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4546'. [ 537.415709][T23482] x9: renamed from bridge_slave_0 (while UP) [ 537.438418][T23480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4548'. [ 537.499461][T23488] lo: entered allmulticast mode [ 537.519322][T23488] lo: left allmulticast mode [ 537.863508][T23504] netlink: 'syz.1.4556': attribute type 1 has an invalid length. [ 538.041171][T23511] C: renamed from team_slave_0 [ 538.061906][T23511] netlink: 'syz.1.4558': attribute type 8 has an invalid length. [ 538.075588][T23511] net_ratelimit: 3 callbacks suppressed [ 538.075605][T23511] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 538.507986][T23525] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 538.530544][T23525] bond7 (unregistering): Released all slaves [ 538.916627][T23541] netlink: 'syz.3.4570': attribute type 21 has an invalid length. [ 538.942798][T23541] netlink: 'syz.3.4570': attribute type 5 has an invalid length. [ 538.966628][T23541] netlink: 'syz.3.4570': attribute type 6 has an invalid length. [ 539.156860][T23558] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 539.226813][T23559] lo: Caught tx_queue_len zero misconfig [ 539.331387][T23562] netlink: 'syz.4.4576': attribute type 1 has an invalid length. [ 539.481702][T23572] __nla_validate_parse: 7 callbacks suppressed [ 539.481722][T23572] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4579'. [ 539.551903][T23566] netlink: 'syz.3.4578': attribute type 1 has an invalid length. [ 539.586533][T23566] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4578'. [ 539.646411][T23579] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4581'. [ 539.677212][T23579] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4581'. [ 539.879505][T23585] team0: left promiscuous mode [ 539.895899][T23585] team_slave_0: left promiscuous mode [ 539.915356][T23585] team_slave_1: left promiscuous mode [ 539.947671][T23585] veth0_to_batadv: left promiscuous mode [ 539.962975][T23585] veth0_to_batadv: left allmulticast mode [ 539.981769][T23585] .70: left allmulticast mode [ 539.993196][T23585] hsr_slave_0: left allmulticast mode [ 540.010924][T23585] macsec1: left promiscuous mode [ 540.038218][T23597] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4586'. [ 540.043549][T23585] hsr0: left promiscuous mode [ 540.061427][T23585] veth3: left promiscuous mode [ 540.076016][T23585] bond4: left promiscuous mode [ 540.111968][ T8797] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.146406][ T8797] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.187703][ T8797] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.213486][ T8797] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.362191][ T7754] IPVS: starting estimator thread 0... [ 540.413214][T23609] xt_time: unknown flags 0xf4 [ 540.453093][T23607] IPVS: using max 31 ests per chain, 74400 per kthread [ 540.872694][T23615] veth5: entered promiscuous mode [ 540.963838][T23620] syzkaller1: entered promiscuous mode [ 540.976688][T23620] syzkaller1: entered allmulticast mode [ 540.980061][T23635] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4595'. [ 541.158351][T23617] syzkaller1: left promiscuous mode [ 541.164364][T23617] syzkaller1: left allmulticast mode [ 541.207827][T23617] block nbd0: reconnected socket [ 541.213375][T23617] nbd: socks must be embedded in a SOCK_ITEM attr [ 541.236527][T23617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4592'. [ 541.238816][T23643] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4597'. [ 541.290498][T23648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4599'. [ 541.303704][T23646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4600'. [ 541.404342][T23655] netlink: 'syz.1.4603': attribute type 2 has an invalid length. [ 541.412243][ T5853] block nbd0: Receive control failed (result -32) [ 541.474297][ T8797] pimreg: left allmulticast mode [ 541.548088][T23661] netlink: 'syz.4.4605': attribute type 1 has an invalid length. [ 541.615778][T23664] xt_limit: Overflow, try lower: 324382443/0 [ 541.968317][ T8797] bond1 (unregistering): (slave bridge4): Releasing backup interface [ 541.978604][ T8797] bridge4 (unregistering): left promiscuous mode [ 542.298651][ T8797] bond0 (unregistering): (slave c5): Releasing backup interface [ 542.309138][ T8797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.318665][ T8797] bond0 (unregistering): Released all slaves [ 542.334411][ T8797] bond1 (unregistering): Released all slaves [ 542.352702][ T8797] bond2 (unregistering): Released all slaves [ 542.368793][ T8797] bond3 (unregistering): Released all slaves [ 542.389615][ T8797] bond4 (unregistering): (slave wireguard1): Releasing backup interface [ 542.398315][ T8797] wireguard1: left promiscuous mode [ 542.404611][ T8797] bond4 (unregistering): Released all slaves [ 542.421534][ T8797] bond5 (unregistering): Released all slaves [ 542.439311][ T8797] bond6 (unregistering): Released all slaves [ 542.452718][ T8797] bond7 (unregistering): Released all slaves [ 542.472364][ T8797] bond8 (unregistering): Released all slaves [ 542.495426][ T8797] bond9 (unregistering): Released all slaves [ 542.508717][ T8797] bond10 (unregistering): Released all slaves [ 542.522696][ T8797] bond11 (unregistering): (slave veth0_to_bond): Releasing active interface [ 542.532550][ T8797] bond11 (unregistering): Released all slaves [ 542.554394][ T8797] bond12 (unregistering): Released all slaves [ 542.568767][ T8797] bond13 (unregistering): (slave veth7): Releasing active interface [ 542.577956][ T8797] bond13 (unregistering): Released all slaves [ 542.591602][ T8797] bond14 (unregistering): Released all slaves [ 542.613091][ T8797] bond15 (unregistering): Released all slaves [ 542.626692][ T8797] bond16 (unregistering): Released all slaves [ 542.886872][ T9843] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.930148][ T9843] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.950724][ T8797] tipc: Left network mode [ 542.950757][ T9843] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.008823][ T9843] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.150683][T23693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.196243][T23693] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.279202][T23693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 544.401367][T23768] FAULT_INJECTION: forcing a failure. [ 544.401367][T23768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.447084][T23768] CPU: 1 UID: 0 PID: 23768 Comm: syz.2.4639 Not tainted syzkaller #0 PREEMPT(full) [ 544.447110][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 544.447121][T23768] Call Trace: [ 544.447129][T23768] [ 544.447136][T23768] dump_stack_lvl+0xe8/0x150 [ 544.447167][T23768] should_fail_ex+0x412/0x560 [ 544.447200][T23768] _copy_from_iter+0x1d3/0x1670 [ 544.447221][T23768] ? rcu_is_watching+0x15/0xb0 [ 544.447245][T23768] ? __pfx__copy_from_iter+0x10/0x10 [ 544.447270][T23768] ? netlink_sendmsg+0x650/0xb40 [ 544.447287][T23768] ? skb_put+0x11b/0x210 [ 544.447307][T23768] netlink_sendmsg+0x6c0/0xb40 [ 544.447331][T23768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.447352][T23768] ? aa_sock_msg_perm+0xf1/0x1b0 [ 544.447372][T23768] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 544.447395][T23768] ____sys_sendmsg+0x972/0x9f0 [ 544.447414][T23768] ? __might_fault+0xaf/0x130 [ 544.447439][T23768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 544.447465][T23768] ? import_iovec+0x73/0xa0 [ 544.447488][T23768] ___sys_sendmsg+0x2a5/0x360 [ 544.447506][T23768] ? __lock_acquire+0x6b5/0x2cf0 [ 544.447534][T23768] ? __pfx____sys_sendmsg+0x10/0x10 [ 544.447581][T23768] ? __fget_files+0x2a/0x420 [ 544.447598][T23768] ? __fget_files+0x3a0/0x420 [ 544.447623][T23768] __x64_sys_sendmsg+0x1bd/0x2a0 [ 544.447644][T23768] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 544.447673][T23768] ? __pfx_ksys_write+0x10/0x10 [ 544.447701][T23768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.447720][T23768] do_syscall_64+0x15f/0xf80 [ 544.447742][T23768] ? trace_irq_disable+0x3b/0x140 [ 544.447764][T23768] ? clear_bhb_loop+0x40/0x90 [ 544.447785][T23768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.447802][T23768] RIP: 0033:0x7ffa17d9cdd9 [ 544.447819][T23768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.447834][T23768] RSP: 002b:00007ffa18c90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.447854][T23768] RAX: ffffffffffffffda RBX: 00007ffa18015fa0 RCX: 00007ffa17d9cdd9 [ 544.447868][T23768] RDX: 0000000004004040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 544.447880][T23768] RBP: 00007ffa18c90090 R08: 0000000000000000 R09: 0000000000000000 [ 544.447891][T23768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.447902][T23768] R13: 00007ffa18016038 R14: 00007ffa18015fa0 R15: 00007ffcd6a67758 [ 544.447931][T23768] [ 544.750911][T23773] __nla_validate_parse: 27 callbacks suppressed [ 544.750931][T23773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4642'. [ 544.803045][ T8797] veth1_to_team: left promiscuous mode [ 544.821382][T23774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4641'. [ 544.833762][ T8797] veth1: left promiscuous mode [ 544.859488][ T8797] hsr_slave_0: left promiscuous mode [ 544.869949][ T8797] hsr_slave_1: left promiscuous mode [ 544.889158][ T8797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.916638][ T8797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.044478][T23787] netlink: 'syz.0.4642': attribute type 2 has an invalid length. [ 545.065647][T23787] netlink: 'syz.0.4642': attribute type 2 has an invalid length. [ 545.126227][T23787] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4642'. [ 545.164601][T23795] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4647'. [ 545.561250][T23806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4650'. [ 545.606059][ T5853] block nbd5: Receive control failed (result -1) [ 545.643824][T23784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4642'. [ 545.656480][T23784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4642'. [ 545.666899][T23806] nbd5: detected capacity change from 0 to 137438953472 [ 545.679962][T22243] block nbd5: Dead connection, failed to find a fallback [ 545.691462][T22243] block nbd5: shutting down sockets [ 545.701142][T22243] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.713723][T22243] Buffer I/O error on dev nbd5, logical block 0, async page read [ 545.722783][T22243] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.736052][T22243] Buffer I/O error on dev nbd5, logical block 0, async page read [ 545.744278][T22243] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.753459][T22243] Buffer I/O error on dev nbd5, logical block 0, async page read [ 545.761407][T22243] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.770979][T22243] Buffer I/O error on dev nbd5, logical block 0, async page read [ 545.797471][T22243] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.829918][T22243] Buffer I/O error on dev nbd5, logical block 0, async page read [ 545.857642][T22243] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.901036][T22243] Buffer I/O error on dev nbd5, logical block 0, async page read [ 545.929113][T22243] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.953505][T22243] Buffer I/O error on dev nbd5, logical block 0, async page read [ 545.993995][T22243] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.037958][T22243] Buffer I/O error on dev nbd5, logical block 0, async page read [ 546.079188][T22243] ldm_validate_partition_table(): Disk read failed. [ 546.116058][T22243] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.133940][T23819] FAULT_INJECTION: forcing a failure. [ 546.133940][T23819] name failslab, interval 1, probability 0, space 0, times 0 [ 546.163540][T22243] Buffer I/O error on dev nbd5, logical block 0, async page read [ 546.183626][T22243] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.192751][T23819] CPU: 1 UID: 0 PID: 23819 Comm: syz.1.4654 Not tainted syzkaller #0 PREEMPT(full) [ 546.192776][T23819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 546.192786][T23819] Call Trace: [ 546.192794][T23819] [ 546.192801][T23819] dump_stack_lvl+0xe8/0x150 [ 546.192837][T23819] should_fail_ex+0x412/0x560 [ 546.192868][T23819] should_failslab+0xa8/0x100 [ 546.192891][T23819] ? skb_clone+0x212/0x3a0 [ 546.192912][T23819] kmem_cache_alloc_noprof+0x87/0x650 [ 546.192934][T23819] ? __netlink_lookup+0xc6/0x8b0 [ 546.192970][T23819] skb_clone+0x212/0x3a0 [ 546.192994][T23819] __netlink_deliver_tap+0x404/0x850 [ 546.193024][T23819] ? netlink_deliver_tap+0x2e/0x1b0 [ 546.193045][T23819] netlink_deliver_tap+0x19c/0x1b0 [ 546.193065][T23819] netlink_unicast+0x730/0x8e0 [ 546.193101][T23819] netlink_sendmsg+0x813/0xb40 [ 546.193129][T23819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.193151][T23819] ? aa_sock_msg_perm+0xf1/0x1b0 [ 546.193172][T23819] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 546.193196][T23819] ____sys_sendmsg+0x972/0x9f0 [ 546.193222][T23819] ? __might_fault+0xaf/0x130 [ 546.193248][T23819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.193278][T23819] ? import_iovec+0x73/0xa0 [ 546.193301][T23819] ___sys_sendmsg+0x2a5/0x360 [ 546.193320][T23819] ? __lock_acquire+0x6b5/0x2cf0 [ 546.193350][T23819] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.193405][T23819] ? __fget_files+0x2a/0x420 [ 546.193422][T23819] ? __fget_files+0x3a0/0x420 [ 546.193450][T23819] __x64_sys_sendmsg+0x1bd/0x2a0 [ 546.193473][T23819] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 546.193503][T23819] ? __pfx_ksys_write+0x10/0x10 [ 546.193533][T23819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.193553][T23819] do_syscall_64+0x15f/0xf80 [ 546.193577][T23819] ? trace_irq_disable+0x3b/0x140 [ 546.193600][T23819] ? clear_bhb_loop+0x40/0x90 [ 546.193623][T23819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.193640][T23819] RIP: 0033:0x7fa1d739cdd9 [ 546.193657][T23819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.193673][T23819] RSP: 002b:00007fa1d8181028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.193692][T23819] RAX: ffffffffffffffda RBX: 00007fa1d7615fa0 RCX: 00007fa1d739cdd9 [ 546.193705][T23819] RDX: 0000000004004040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 546.193717][T23819] RBP: 00007fa1d8181090 R08: 0000000000000000 R09: 0000000000000000 [ 546.193728][T23819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.193739][T23819] R13: 00007fa1d7616038 R14: 00007fa1d7615fa0 R15: 00007ffe6ff893b8 [ 546.193766][T23819] [ 546.479740][T23819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4654'. [ 546.495520][T22243] Buffer I/O error on dev nbd5, logical block 0, async page read [ 546.504497][T22243] Dev nbd5: unable to read RDB block 0 [ 546.512006][T22243] nbd5: unable to read partition table [ 546.535309][T22243] ldm_validate_partition_table(): Disk read failed. [ 546.542545][T22243] Dev nbd5: unable to read RDB block 0 [ 546.549540][T22243] nbd5: unable to read partition table [ 546.692103][T23827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4657'. [ 546.706376][T23827] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4657'. [ 546.777057][T23829] netlink: 'syz.3.4658': attribute type 13 has an invalid length. [ 546.809646][T23832] netlink: 'syz.4.4659': attribute type 1 has an invalid length. [ 546.875090][ T8797] IPVS: stop unused estimator thread 0... [ 546.897676][T17130] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 546.929580][T23836] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 546.946246][ T9857] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 546.965132][T23832] 8021q: adding VLAN 0 to HW filter on device bond6 [ 547.153145][ T9845] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 547.400588][T23862] FAULT_INJECTION: forcing a failure. [ 547.400588][T23862] name failslab, interval 1, probability 0, space 0, times 0 [ 547.425966][T23862] CPU: 0 UID: 0 PID: 23862 Comm: syz.1.4667 Not tainted syzkaller #0 PREEMPT(full) [ 547.425992][T23862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 547.426003][T23862] Call Trace: [ 547.426010][T23862] [ 547.426018][T23862] dump_stack_lvl+0xe8/0x150 [ 547.426051][T23862] should_fail_ex+0x412/0x560 [ 547.426083][T23862] should_failslab+0xa8/0x100 [ 547.426106][T23862] ? skb_clone+0x212/0x3a0 [ 547.426126][T23862] kmem_cache_alloc_noprof+0x87/0x650 [ 547.426148][T23862] ? __netlink_lookup+0xc6/0x8b0 [ 547.426172][T23862] skb_clone+0x212/0x3a0 [ 547.426194][T23862] __netlink_deliver_tap+0x404/0x850 [ 547.426222][T23862] ? netlink_deliver_tap+0x2e/0x1b0 [ 547.426242][T23862] netlink_deliver_tap+0x19c/0x1b0 [ 547.426261][T23862] netlink_unicast+0x730/0x8e0 [ 547.426296][T23862] netlink_sendmsg+0x813/0xb40 [ 547.426323][T23862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.426345][T23862] ? aa_sock_msg_perm+0xf1/0x1b0 [ 547.426365][T23862] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 547.426390][T23862] ____sys_sendmsg+0x972/0x9f0 [ 547.426409][T23862] ? __might_fault+0xaf/0x130 [ 547.426434][T23862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 547.426462][T23862] ? import_iovec+0x73/0xa0 [ 547.426486][T23862] ___sys_sendmsg+0x2a5/0x360 [ 547.426504][T23862] ? __lock_acquire+0x6b5/0x2cf0 [ 547.426533][T23862] ? __pfx____sys_sendmsg+0x10/0x10 [ 547.426586][T23862] ? __fget_files+0x2a/0x420 [ 547.426604][T23862] ? __fget_files+0x3a0/0x420 [ 547.426631][T23862] __x64_sys_sendmsg+0x1bd/0x2a0 [ 547.426653][T23862] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 547.426681][T23862] ? __pfx_ksys_write+0x10/0x10 [ 547.426711][T23862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.426731][T23862] do_syscall_64+0x15f/0xf80 [ 547.426753][T23862] ? trace_irq_disable+0x3b/0x140 [ 547.426777][T23862] ? clear_bhb_loop+0x40/0x90 [ 547.426798][T23862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.426816][T23862] RIP: 0033:0x7fa1d739cdd9 [ 547.426833][T23862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.426847][T23862] RSP: 002b:00007fa1d8181028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.426866][T23862] RAX: ffffffffffffffda RBX: 00007fa1d7615fa0 RCX: 00007fa1d739cdd9 [ 547.426878][T23862] RDX: 0000000004004040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 547.426890][T23862] RBP: 00007fa1d8181090 R08: 0000000000000000 R09: 0000000000000000 [ 547.426901][T23862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.426911][T23862] R13: 00007fa1d7616038 R14: 00007fa1d7615fa0 R15: 00007ffe6ff893b8 [ 547.426947][T23862] [ 547.724366][T23866] netlink: 'syz.2.4669': attribute type 6 has an invalid length. [ 547.747514][T17130] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 548.198876][T23895] syzkaller0: entered promiscuous mode [ 548.207842][T23895] syzkaller0: entered allmulticast mode [ 548.596674][ T5853] block nbd6: Receive control failed (result -1) [ 548.787407][T23925] openvswitch: netlink: IPv4 tun info is not correct [ 548.949198][T23935] openvswitch: netlink: Missing key (keys=40, expected=100) [ 549.092787][T23935] bond12 (unregistering): Released all slaves [ 549.240527][T23945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.258210][T23945] netlink: 'syz.2.4689': attribute type 1 has an invalid length. [ 549.328931][T23945] bond7: entered promiscuous mode [ 549.347520][T23945] bond7: entered allmulticast mode [ 549.362165][T23945] 8021q: adding VLAN 0 to HW filter on device bond7 [ 549.391821][T23947] erspan1: entered allmulticast mode [ 549.411082][T23947] bond7: (slave erspan1): making interface the new active one [ 549.424488][T23947] erspan1: entered promiscuous mode [ 549.445047][T23947] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 549.493668][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 549.557458][T23954] syzkaller0: entered promiscuous mode [ 549.563157][T23954] syzkaller0: entered allmulticast mode [ 549.781260][T23972] __nla_validate_parse: 15 callbacks suppressed [ 549.781279][T23972] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4697'. [ 549.828369][T23974] mac80211_hwsim hwsim59 wlan1: entered promiscuous mode [ 549.906369][T23979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4701'. [ 550.249652][T24000] netlink: 'syz.4.4709': attribute type 10 has an invalid length. [ 550.261945][T24000] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4709'. [ 551.107966][T24000] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 551.128826][T24000] .70: entered promiscuous mode [ 551.141712][T24000] bridge0: port 3(.70) entered blocking state [ 551.151346][T24000] bridge0: port 3(.70) entered disabled state [ 551.158599][T24000] .70: entered allmulticast mode [ 551.164667][T24000] hsr_slave_0: entered allmulticast mode [ 551.166408][T24023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4713'. [ 551.187661][T24020] netlink: 'syz.0.4712': attribute type 1 has an invalid length. [ 551.225395][T24025] netlink: 'syz.3.4714': attribute type 11 has an invalid length. [ 561.157237][T24048] netlink: 'syz.4.4720': attribute type 7 has an invalid length. [ 561.230496][T24056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4717'. [ 561.253951][T24056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4717'. [ 561.376549][T24056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4717'. [ 561.425639][T24056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4717'. [ 561.473000][ T8787] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.477128][T24070] tipc: Failed to remove unknown binding: 66,0,0/20185096:391618232/391618234 [ 561.491277][T24070] tipc: Failed to remove unknown binding: 66,0,0/20185096:391618232/391618233 [ 561.508813][T24070] tipc: Failed to remove unknown binding: 66,0,0/20185096:391618232/391618234 [ 561.512360][ T8787] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.527169][T24070] tipc: Failed to remove unknown binding: 66,0,0/20185096:391618232/391618233 [ 561.600490][ T8787] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.623420][T24044] tipc: Can't bind to reserved service type 0 [ 561.624673][ T8787] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.841830][T24079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4728'. [ 561.852751][T24079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4728'. [ 561.930178][T24082] tipc: New replicast peer: 255.255.255.255 [ 561.955398][T24082] tipc: Enabled bearer , priority 10 [ 561.977099][T24084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4729'. [ 561.998947][T24082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4728'. [ 562.299398][T24104] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4735'. [ 562.315062][T24097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4733'. [ 562.331810][T24097] netlink: 'syz.4.4733': attribute type 10 has an invalid length. [ 562.388238][T24110] lo: entered promiscuous mode [ 562.413842][T24110] tunl0: entered promiscuous mode [ 562.426683][T24110] gre0: entered promiscuous mode [ 562.464297][T24110] gretap0: entered promiscuous mode [ 562.480821][T24110] erspan0: entered promiscuous mode [ 562.500355][T24110] ip_vti0: entered promiscuous mode [ 562.507610][T24110] ip6_vti0: entered promiscuous mode [ 562.514876][T24110] sit0: entered promiscuous mode [ 562.520809][T24110] ip6tnl0: entered promiscuous mode [ 562.528089][T24110] ip6gre0: entered promiscuous mode [ 562.536173][T24110] ip6gretap0: entered promiscuous mode [ 562.564992][T24110] bridge0: entered promiscuous mode [ 562.581790][T24110] vcan0: entered promiscuous mode [ 562.599720][T24110] bond0: entered promiscuous mode [ 562.617296][T24110] bond_slave_0: entered promiscuous mode [ 562.634369][T24110] bond_slave_1: entered promiscuous mode [ 562.653675][T24110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.663503][T24110] dummy0: entered promiscuous mode [ 562.677273][T24110] nlmon0: entered promiscuous mode [ 563.011611][T24091] delete_channel: no stack [ 563.132197][T24110] caif0: entered promiscuous mode [ 563.140589][T24110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 563.226086][T24124] 8021q: adding VLAN 0 to HW filter on device bond8 [ 563.361932][T24139] nbd: socks must be embedded in a SOCK_ITEM attr [ 563.372582][T24139] block nbd7: shutting down sockets [ 563.664338][T24144] vlan0: entered promiscuous mode [ 563.669757][T24144] vlan0: entered allmulticast mode [ 563.676660][T24144] veth0_vlan: entered allmulticast mode [ 563.717521][T24151] ip6gre2: entered promiscuous mode [ 563.734517][T24151] ip6gre2: entered allmulticast mode [ 563.740221][T24121] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 563.756474][T24155] netlink: 'syz.0.4745': attribute type 6 has an invalid length. [ 567.046422][T24179] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 567.166098][T24188] netlink: 'syz.3.4755': attribute type 9 has an invalid length. [ 567.465500][T24207] __nla_validate_parse: 6 callbacks suppressed [ 567.465520][T24207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4760'. [ 567.495514][T24219] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4763'. [ 567.511222][T24207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4760'. [ 567.512898][T24219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4763'. [ 567.540047][T24207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4760'. [ 567.552740][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4763'. [ 567.565727][T24219] xt_nfacct: accounting object `syz0' does not exist [ 567.569735][T24207] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4760'. [ 567.582334][T24214] syzkaller0: entered promiscuous mode [ 567.582355][T24214] syzkaller0: entered allmulticast mode [ 567.598736][T24221] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20001 [ 567.599594][T24222] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 567.702067][T24225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4765'. [ 567.714662][T24225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4765'. [ 567.747478][T24225] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4765'. [ 568.053252][ C1] ------------[ cut here ]------------ [ 568.060522][ C1] ODEBUG: free active (active state 0) object: ffff88803222f090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 568.073515][ C1] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#1: syz.1.4768/24238 [ 568.082086][T24245] tipc: Enabling of bearer rejected, failed to enable media [ 568.085708][ C1] Modules linked in: [ 568.097253][ C1] CPU: 1 UID: 0 PID: 24238 Comm: syz.1.4768 Not tainted syzkaller #0 PREEMPT(full) [ 568.106675][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 568.116788][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 568.123162][ C1] Code: 89 44 24 20 e8 f7 bf 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 a5 28 8c 48 c7 c2 20 ab 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 568.142828][ C1] RSP: 0018:ffffc90000a08b48 EFLAGS: 00010246 [ 568.148907][ C1] RAX: ffffffff8a9f6db0 RBX: ffffffff9a79e9b8 RCX: 0000000000000000 [ 568.156941][ C1] RDX: ffffffff8c28ab20 RSI: ffffffff8c28a5a0 RDI: ffffffff903e6a40 [ 568.164954][ C1] RBP: ffffffff8bcf39a0 R08: ffff88803222f090 R09: ffffffff8bcf4d00 [ 568.172974][ C1] R10: dffffc0000000000 R11: ffffffff81b236d0 R12: ffff88803222f200 [ 568.180963][ C1] R13: ffffffff903e6a40 R14: ffff88803222f000 R15: ffff88803222f090 [ 568.188991][ C1] FS: 0000555586054500(0000) GS:ffff888125313000(0000) knlGS:0000000000000000 [ 568.197967][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 568.204590][ C1] CR2: 00007f5348f4da08 CR3: 000000003ed32000 CR4: 00000000003526f0 [ 568.212592][ C1] Call Trace: [ 568.215915][ C1] [ 568.218767][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 568.224473][ C1] kfree+0x13e/0x640 [ 568.228386][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 568.233552][ C1] rose_timer_expiry+0x4cb/0x600 [ 568.238509][ C1] ? call_timer_fn+0x178/0x5e0 [ 568.243325][ C1] call_timer_fn+0x192/0x5e0 [ 568.245407][T24248] netlink: 'syz.4.4767': attribute type 3 has an invalid length. [ 568.247916][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 568.247944][ C1] ? call_timer_fn+0xd4/0x5e0 [ 568.247967][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 568.270945][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 568.276200][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 568.281681][ C1] __run_timer_base+0x652/0x8b0 [ 568.286594][ C1] ? ktime_get+0x45/0x220 [ 568.290959][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 568.296407][ C1] run_timer_softirq+0xb7/0x170 [ 568.301288][ C1] handle_softirqs+0x22a/0x840 [ 568.306111][ C1] ? __irq_exit_rcu+0xca/0x220 [ 568.310929][ C1] __irq_exit_rcu+0xca/0x220 [ 568.315583][ C1] irq_exit_rcu+0x9/0x30 [ 568.319851][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 568.325144][T24248] netlink: 'syz.4.4767': attribute type 3 has an invalid length. [ 568.325531][ C1] [ 568.336176][ C1] [ 568.339118][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 568.345146][ C1] RIP: 0010:mas_find+0x855/0xd30 [ 568.350108][ C1] Code: 0f b6 04 37 84 c0 0f 85 59 04 00 00 44 8b 23 bf 01 00 00 00 44 89 e6 e8 79 57 14 f6 41 83 fc 01 0f 85 0e 01 00 00 4c 89 3c 24 <4d> 89 f7 49 89 de e8 20 53 14 f6 49 8d 5d 08 49 89 dd 49 c1 ed 03 [ 568.369779][ C1] RSP: 0018:ffffc900050c7b60 EFLAGS: 00000246 [ 568.375896][ C1] RAX: ffffffff8bb17db7 RBX: ffffc900050c7ca8 RCX: 0000000000000000 [ 568.383914][ C1] RDX: ffff888056848000 RSI: 0000000000000001 RDI: 0000000000000001 [ 568.391896][ C1] RBP: ffffffffffffffff R08: ffff888056848000 R09: 0000000000000006 [ 568.399919][ C1] R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000001 [ 568.407955][ C1] R13: ffffc900050c7c60 R14: dffffc0000000000 R15: 1ffff92000a18f95 [ 568.415978][ C1] ? mas_find+0x847/0xd30 [ 568.420341][ C1] ? down_read+0x270/0x2e0 [ 568.424837][ C1] ? acct_collect+0x189/0x7c0 [ 568.429535][ C1] acct_collect+0x1b8/0x7c0 [ 568.434115][ C1] ? sched_mm_cid_exit+0x82/0x4f0 [ 568.439162][ C1] ? __pfx_acct_collect+0x10/0x10 [ 568.444257][ C1] ? acct_update_integrals+0x342/0x410 [ 568.449741][ C1] ? acct_update_integrals+0x38a/0x410 [ 568.455273][ C1] ? hrtimer_try_to_cancel+0x313/0x670 [ 568.460759][ C1] do_exit+0x615/0x22c0 [ 568.464983][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 568.470810][ C1] ? __pfx_do_exit+0x10/0x10 [ 568.475466][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 568.480945][ C1] ? preempt_schedule_common+0x82/0xd0 [ 568.486476][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 568.491871][ C1] do_group_exit+0x21b/0x2d0 [ 568.496530][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.502622][ C1] __x64_sys_exit_group+0x3f/0x40 [ 568.507715][ C1] x64_sys_call+0x221a/0x2240 [ 568.512405][ C1] do_syscall_64+0x15f/0xf80 [ 568.517071][ C1] ? trace_irq_disable+0x3b/0x140 [ 568.522118][ C1] ? clear_bhb_loop+0x40/0x90 [ 568.526866][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.532771][ C1] RIP: 0033:0x7fa1d739cdd9 [ 568.537236][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.556915][ C1] RSP: 002b:00007ffe6ff896f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 568.565374][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa1d739cdd9 [ 568.573399][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 568.581380][ C1] RBP: 00007ffe6ff8975c R08: 0000000000000000 R09: 00000000000927c0 [ 568.589387][ C1] R10: 00007fa1d7616128 R11: 0000000000000246 R12: 0000000000000136 [ 568.597393][ C1] R13: 00000000000927c0 R14: 000000000008aa75 R15: 00007ffe6ff897b0 [ 568.605410][ C1] [ 568.608441][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 568.615707][ C1] CPU: 1 UID: 0 PID: 24238 Comm: syz.1.4768 Not tainted syzkaller #0 PREEMPT(full) [ 568.625063][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 568.635104][ C1] Call Trace: [ 568.638371][ C1] [ 568.641233][ C1] vpanic+0x56c/0xa60 [ 568.645222][ C1] ? __pfx__printk+0x10/0x10 [ 568.649802][ C1] ? __pfx_vpanic+0x10/0x10 [ 568.654285][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 568.659560][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 568.664755][ C1] panic+0xc5/0xd0 [ 568.668489][ C1] ? __pfx_panic+0x10/0x10 [ 568.672899][ C1] __warn+0x315/0x4c0 [ 568.676860][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 568.682566][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 568.688273][ C1] __report_bug+0x29a/0x540 [ 568.692764][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 568.698560][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 568.704264][ C1] ? __pfx___report_bug+0x10/0x10 [ 568.709281][ C1] ? kfree+0x1c5/0x640 [ 568.713340][ C1] ? rose_timer_expiry+0x4c3/0x600 [ 568.718455][ C1] ? call_timer_fn+0x192/0x5e0 [ 568.723202][ C1] ? __run_timer_base+0x652/0x8b0 [ 568.728214][ C1] ? run_timer_softirq+0xb7/0x170 [ 568.733225][ C1] ? handle_softirqs+0x22a/0x840 [ 568.738151][ C1] ? __irq_exit_rcu+0xca/0x220 [ 568.742904][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 568.748698][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 568.754839][ C1] ? mas_find+0x855/0xd30 [ 568.759156][ C1] ? acct_collect+0x1b8/0x7c0 [ 568.763818][ C1] ? do_exit+0x615/0x22c0 [ 568.768139][ C1] report_bug_entry+0x19a/0x290 [ 568.772984][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 568.778687][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 568.784393][ C1] handle_bug+0xce/0x200 [ 568.788630][ C1] exc_invalid_op+0x1a/0x50 [ 568.793116][ C1] asm_exc_invalid_op+0x1a/0x20 [ 568.797950][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 568.804265][ C1] Code: 89 44 24 20 e8 f7 bf 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 a5 28 8c 48 c7 c2 20 ab 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 568.823879][ C1] RSP: 0018:ffffc90000a08b48 EFLAGS: 00010246 [ 568.829933][ C1] RAX: ffffffff8a9f6db0 RBX: ffffffff9a79e9b8 RCX: 0000000000000000 [ 568.837896][ C1] RDX: ffffffff8c28ab20 RSI: ffffffff8c28a5a0 RDI: ffffffff903e6a40 [ 568.845854][ C1] RBP: ffffffff8bcf39a0 R08: ffff88803222f090 R09: ffffffff8bcf4d00 [ 568.853810][ C1] R10: dffffc0000000000 R11: ffffffff81b236d0 R12: ffff88803222f200 [ 568.861767][ C1] R13: ffffffff903e6a40 R14: ffff88803222f000 R15: ffff88803222f090 [ 568.869737][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 568.875101][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 568.880727][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 568.886353][ C1] kfree+0x13e/0x640 [ 568.890237][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 568.895333][ C1] rose_timer_expiry+0x4cb/0x600 [ 568.900256][ C1] ? call_timer_fn+0x178/0x5e0 [ 568.905003][ C1] call_timer_fn+0x192/0x5e0 [ 568.909578][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 568.915024][ C1] ? call_timer_fn+0xd4/0x5e0 [ 568.919686][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 568.924784][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 568.929974][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 568.935424][ C1] __run_timer_base+0x652/0x8b0 [ 568.940269][ C1] ? ktime_get+0x45/0x220 [ 568.944591][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 568.949977][ C1] run_timer_softirq+0xb7/0x170 [ 568.954820][ C1] handle_softirqs+0x22a/0x840 [ 568.959580][ C1] ? __irq_exit_rcu+0xca/0x220 [ 568.964357][ C1] __irq_exit_rcu+0xca/0x220 [ 568.968942][ C1] irq_exit_rcu+0x9/0x30 [ 568.973190][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 568.978809][ C1] [ 568.981722][ C1] [ 568.984639][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 568.990601][ C1] RIP: 0010:mas_find+0x855/0xd30 [ 568.995526][ C1] Code: 0f b6 04 37 84 c0 0f 85 59 04 00 00 44 8b 23 bf 01 00 00 00 44 89 e6 e8 79 57 14 f6 41 83 fc 01 0f 85 0e 01 00 00 4c 89 3c 24 <4d> 89 f7 49 89 de e8 20 53 14 f6 49 8d 5d 08 49 89 dd 49 c1 ed 03 [ 569.015121][ C1] RSP: 0018:ffffc900050c7b60 EFLAGS: 00000246 [ 569.021172][ C1] RAX: ffffffff8bb17db7 RBX: ffffc900050c7ca8 RCX: 0000000000000000 [ 569.029126][ C1] RDX: ffff888056848000 RSI: 0000000000000001 RDI: 0000000000000001 [ 569.037079][ C1] RBP: ffffffffffffffff R08: ffff888056848000 R09: 0000000000000006 [ 569.045035][ C1] R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000001 [ 569.052988][ C1] R13: ffffc900050c7c60 R14: dffffc0000000000 R15: 1ffff92000a18f95 [ 569.060947][ C1] ? mas_find+0x847/0xd30 [ 569.065272][ C1] ? down_read+0x270/0x2e0 [ 569.069675][ C1] ? acct_collect+0x189/0x7c0 [ 569.074340][ C1] acct_collect+0x1b8/0x7c0 [ 569.078831][ C1] ? sched_mm_cid_exit+0x82/0x4f0 [ 569.083863][ C1] ? __pfx_acct_collect+0x10/0x10 [ 569.088870][ C1] ? acct_update_integrals+0x342/0x410 [ 569.094315][ C1] ? acct_update_integrals+0x38a/0x410 [ 569.099759][ C1] ? hrtimer_try_to_cancel+0x313/0x670 [ 569.105208][ C1] do_exit+0x615/0x22c0 [ 569.109349][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 569.115146][ C1] ? __pfx_do_exit+0x10/0x10 [ 569.119722][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 569.125083][ C1] ? preempt_schedule_common+0x82/0xd0 [ 569.130532][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 569.135894][ C1] do_group_exit+0x21b/0x2d0 [ 569.140471][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.146544][ C1] __x64_sys_exit_group+0x3f/0x40 [ 569.151553][ C1] x64_sys_call+0x221a/0x2240 [ 569.156215][ C1] do_syscall_64+0x15f/0xf80 [ 569.160831][ C1] ? trace_irq_disable+0x3b/0x140 [ 569.165868][ C1] ? clear_bhb_loop+0x40/0x90 [ 569.170536][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.176408][ C1] RIP: 0033:0x7fa1d739cdd9 [ 569.180806][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.200397][ C1] RSP: 002b:00007ffe6ff896f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 569.208792][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa1d739cdd9 [ 569.216756][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 569.224739][ C1] RBP: 00007ffe6ff8975c R08: 0000000000000000 R09: 00000000000927c0 [ 569.232718][ C1] R10: 00007fa1d7616128 R11: 0000000000000246 R12: 0000000000000136 [ 569.240675][ C1] R13: 00000000000927c0 R14: 000000000008aa75 R15: 00007ffe6ff897b0 [ 569.248646][ C1] [ 569.251925][ C1] Kernel Offset: disabled [ 569.256238][ C1] Rebooting in 86400 seconds..