last executing test programs: 6.827115405s ago: executing program 4 (id=3820): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000640000006910770000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x10}, 0x94) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000040)={@local, @rand_addr=0x64010101}, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000440)=@report={0x188, 0x20, 0x600, 0x70bd2a, 0x25dfdbfd, {0x3c, {@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x7c5, 0x3, 0x4e23, 0xfe01, 0x2, 0xa0, 0xa0, 0x1d}}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @srcaddr={0x14, 0xd, @in=@broadcast}, @extra_flags={0x8, 0x18, 0x2}, @algo_crypt={0x7f, 0x2, {{'lrw-cast6-avx\x00'}, 0x1b8, "d9345fec284f8d3b27734f78e9a989fdc95a997e01925dbb9308c6c32f24325d701bfdf3409c431adec95b94d08e0771c75b27ec73a6f1"}}, @algo_auth={0x8b, 0x1, {{'ghash\x00'}, 0x218, "9a115313ebf3a419f4beb3ac3b9e1510156b561abecfa7be6742b19bebebb107bd594f5d913e50ab9ba5c7080b2502912de916d2684a9771833fcf3c73b6c07e5bb206"}}]}, 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac1e0101ac22141b000000000100f3ffac14141a"], 0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r9) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.559657561s ago: executing program 1 (id=3825): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00001a0600000004640e5c72a35ee8801e05f00000000000000e0400000000000000000000000000000300000000020000000400000000000000000000000000000300000000040000000400000002000000000000000009de"], 0x0, 0x6a, 0x0, 0x3}, 0x28) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x4, 0x18}, 0xc) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000500)={r2}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) ioctl$sock_bt_hci(r4, 0x800448d3, &(0x7f00000000c0)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x4000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000600)=0x1e, 0x4) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000200000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8ae7ff00000000bfa200000000000007020000f8e2eaffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1006, &(0x7f0000002500)=""/4102, 0x0, 0xc}, 0x94) r8 = epoll_create1(0x0) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r9, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r9, 0x1) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000040)={0x1}) write$rfkill(r5, &(0x7f00000000c0)={0x3ff, 0x8, 0x0, 0x1, 0x1}, 0x8) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e00000009000000fcffffff040000006484000096751ad4118fe34108be89761f433fad19d2bca6ad681be2e05cca66fba51abe11ba74d401a35abcf29b44adeed0b0536b823676b0b8991500c245a1ae8cd7207224d189cf85fa8e52b47bafd2f9c9e10c63db5ba9f7b78770b162c00ccab4380c41f3c7f9e8a9d0b3b5744d96808d09efc29c5dfaf854aa13fe48e5befdfa1d41cbb4f0212b81af03a51262292384195efa9a8e8f2f4db77b8e4b5a554a9bb206e8e2c43331fd8321c38d00b5440994bb0566d2d78ae222ea8cf274c0d9717fcb3726e9c93f9100a797535a5c06785b6fc61572bf8b44ffba5301f6102410b18b029829319e1b90c3b5bf50c4996c5a", @ANYRES32=r5, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000004000000030000000e00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=@newtclass={0x54, 0x28, 0x800, 0x70bd26, 0x25dfdc03, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xc}, {0xfff1, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @TCA_RATE={0x6, 0x5, {0x2, 0xfc}}, @TCA_RATE={0x6, 0x5, {0x40, 0xb}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x54}}, 0x4000800) 6.243944894s ago: executing program 4 (id=3830): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002480)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r7, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r7, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r8, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r10, 0x89e4) setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f00000005c0)={0x6, 0x5, 0x40, 0x4, 0xf, 0xe, 0xf, 0x52, 0x3, 0x1, 0x81, 0x3, 0x1, 0x2}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket(0x29, 0x0, 0x2) 5.597910844s ago: executing program 1 (id=3835): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty, 0x8}, 0x1c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) sendmsg$inet6(r0, 0x0, 0x4004000) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001040)}, 0x100) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x7}, &(0x7f0000000380)=0x8) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000001c00)=ANY=[], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, &(0x7f0000000240)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) 2.624034374s ago: executing program 4 (id=3837): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1ff73331", @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004e0a1) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100)=0xffff8000, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ff6332f901db8652576a8f25b5dbdf25070088ab740000080005007f0000011400030020010000000000000800"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x11) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654", 0x48}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7", 0x56}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464", 0xd}], 0x1}}], 0x4, 0x20000044) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0", 0x58, 0x840, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.528123688s ago: executing program 1 (id=3839): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000180)=0x9f7, 0x4) getsockopt$inet_opts(r1, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000340)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup=r0, r2, 0x2f, 0x18, 0x4}, 0x20) 2.512625171s ago: executing program 2 (id=3840): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="0f800000", @ANYRES16=r1, @ANYRESDEC=r2], 0x50}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000010c0)=@bridge_getlink={0x28, 0x12, 0x1, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x4201, 0x80}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb9088ed8949d42b8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r3, @ANYBLOB="000429bd7000ffdbdf251400000008000d0008ed000008001500190003000000018008000100", @ANYRES32=r5, @ANYBLOB="0800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000000800040006000000080004009f060000080010007bcd000005001800010000002400018008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="0800030000000000080003000300000008001600090000000500180000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000005}, 0x8000) sendmsg$IPVS_CMD_GET_SERVICE(r8, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x68, r1, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x18}}, 0x84) 2.476578602s ago: executing program 3 (id=3841): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f000000044000000008cd5509109372ba05b9427711faeede8fe122821bd89ba73ed71179851f4a58d2019789b219f6cbf5f60d0059e06eced2f8f8fbbf57e0aba847a2a7e8b1e99be734d2f4e6943b7e192de6af9f77f0fc9e0f70089d94d29a4a61669e9758dcfba5d8701f9c7c6c2dcb7913d1dac56dc9f04a66422aff26d323ad81625d40ad2fdf45d31e53d95b40c8114f92ea1dc0ea6574c0ce1a56c690409e5c29ee9107a60eee5d4470b3318d29cb786062e3448df283257f09cfa1c6a76ca80b3bba73544199d3088092c15b4a4c3adbe4c6a11c39059551977fe819259a90d5f78918ac6412331065ce0d1c8a6b9937300bf583d3f0c900000000000000000000a4155740bc65508cc85c3714db2d318ab83d0e23980d5c614e20daa9fccd5d08898bafab793108a4e29e7fecd8e9aec0e25d8d01b4e6434e6a957e05a881d57eb2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf250600000008000d00080000000800010030"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6}]}) write$ppp(r1, &(0x7f00000008c0)="00003be032c6a4", 0x7) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000640)=0xffff0001, 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x1d, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 2.378756385s ago: executing program 4 (id=3842): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="04040000160001000000000000000000ac141410000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe88000000000000000000000000210100000000320000007f00000100000000000000000000000000000000000000000000000000000000ec0100000000000000000000000000000000070000000000000010000000000000000000000000009948000000000000000000000000000000000000000000000000004000000000000000000000000000000000000100000000000000000003000000000a00000000000000000000000000000002"], 0x404}}, 0x0) 2.327223044s ago: executing program 0 (id=3843): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000140)) r5 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000009a5796570000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r6, 0x400454cd, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000500)=0x3, 0x4) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x4b, 0x18, "04a6aaed25476b145c4a935fa54f323c1829a00700e5cd05"}}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0xffffffffffffff8e, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x54, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000a000002c0012800b00010062726964676500001c0002800c00210003000000000000000c002000ff0f000000687072"], 0x4c}}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3cf5ffffff000305fcffffff0007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000400)={'veth1_to_bridge\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}) 2.32677891s ago: executing program 1 (id=3844): r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) close(0x3) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) accept$netrom(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) recvmmsg(r2, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) close(0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001507000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000003000000850000002d000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5}, 0xc) syz_genetlink_get_family_id$l2tp(&(0x7f0000005040), r0) 2.267938731s ago: executing program 2 (id=3845): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x9, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r1, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES16, @ANYBLOB="0000000060000000580012800800010067"], 0x78}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) (async) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) sendto$inet(r2, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 2.212120629s ago: executing program 3 (id=3846): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073717a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x400, 0x1, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1d}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8801) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r1, 0x101, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x2400c040) 2.115553101s ago: executing program 4 (id=3847): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e1d, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x4000000) 1.936850444s ago: executing program 3 (id=3848): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000100003040000"], 0x44}, 0x1, 0xba01}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) 1.928463419s ago: executing program 4 (id=3849): socket$alg(0x26, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') accept$netrom(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x28, r3, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x25}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x18, &(0x7f0000000100)=0xa, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, "99161d83"}, &(0x7f0000000080)=0x2c) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, 0x0, 0x800) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 1.725452746s ago: executing program 0 (id=3850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x76) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="500100001a0001000000000000000000020000000000000b002f000005001b001100000006001d004e21000008000200e0"], 0x150}}, 0x4) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x1, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0xffffffffffffffff, 0x800000, 0x0, 0x0, 0x80000, 0x0, 0x60a, 0xfffffffffffffff7}, {0x0, 0xfef2, 0xd, 0x8}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@empty, 0xfffffffe, 0x0, 0x0, 0x0, 0x101, 0x8, 0x35ced141}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x3, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x4}}, 0xe8) close(r1) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x64, r5, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x5}}}]}, 0x64}, 0x1, 0x2, 0x0, 0x40}, 0x8000) 1.724759685s ago: executing program 3 (id=3851): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x5931a207a26eb392) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'veth0_to_team\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008006c00b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.667803353s ago: executing program 2 (id=3852): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0016a256fb3a80eaec355a061b2ac8e2ed7eb0f5f266abc09815e42276d430c247fadf849194fb06bd2746c592c7b849a42f060efe9ad083f67c56214328235c26bff49506a596c9dfbd59985705b1e573"], 0x34}, 0x1, 0x0, 0x0, 0x404c0d1}, 0x20048080) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept$ax25(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @default}, [@rose, @remote, @null, @null, @rose, @default, @rose]}, &(0x7f0000000300)=0x48) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000340)={'vlan0\x00', 0xfff}) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000440)=0x10) r4 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)='\x00', 0x1}], 0x1}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_GETBMAPX(r5, 0xc0205838, &(0x7f0000000080)={0x10000, 0x7fffffff, 0x5, 0xd, 0x8, 0x20, 0x1}) close(r7) splice(r6, 0x0, r7, 0x0, 0x10500, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4090, 0xffa}], 0x1}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={0x0, 0x0, 0x4018}, 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x24044150) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.537331346s ago: executing program 0 (id=3853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$packet(0x11, 0x3, 0x300) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000200)={@val={0xa, 0x1b}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x18, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0xe}}}}}}}}, 0x52) 1.45132515s ago: executing program 3 (id=3854): mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000f00)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0xea}, 0x90) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) sendto$inet6(r3, &(0x7f0000000000)="f4", 0x1, 0x14, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @private0, 0x10000}, 0x1c) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0xa) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0xfffffffffffffd5f, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRESHEX=r4], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$isdn(0x22, 0x2, 0x24) close(r6) 1.368112798s ago: executing program 1 (id=3855): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x24, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x2, 0x93}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@cgroup, 0xffffffffffffffff, 0x29, 0x18}, 0x20) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0xff7b) syz_emit_ethernet(0x6e, &(0x7f0000000a40)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000383afffe880000000000000000000000000001ff020000000000000000000000000001010190780500000068db860300023a0000000000000000000000ffffe000000220010000000000"], 0x0) 1.287792965s ago: executing program 2 (id=3856): r0 = socket$kcm(0x10, 0xc, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000008000000", @ANYRES64=0x0, @ANYBLOB="f8c97d9b53"], 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0xfe41, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xb3b418, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d290006007c02e8fc55a10a0015000600142603600e120800140000000401a8000500fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 1.105108988s ago: executing program 2 (id=3857): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f", 0x4}], 0x1}}], 0x3, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r2) socket$kcm(0x29, 0x2, 0x0) sendfile(r2, r1, 0x0, 0xf03a0005) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r7, 0x1, 0x4, &(0x7f0000000280), &(0x7f0000000200)=0xb94142cc0708e485) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000540)={&(0x7f0000000300), 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x28, r5, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x81, 0x7d}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) 1.017927842s ago: executing program 0 (id=3858): r0 = socket$inet(0x2, 0x3, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000400002000000400004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a3000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000020000000020a01080000000000000000000000090c000440000000000000000214000000020a010400000000000000000200000a14000000110001000000000000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a00000003"], 0x20}}], 0x1, 0x24000004) (async) socket(0x10, 0x3, 0x0) (async) socket(0x1, 0x4, 0x9) unshare(0x24020400) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x3, 0x6, "e53d2d79723e2e614a791ba8e24e1e340dfa35b12c52ed4e1d3a7be902511feb177b3d2b4b5fd2d7f807eee09e02b0720f9c5c2a4eb765c4ec38ea9353f8ef37cf1fda11b5e36f1348c053b5d7f8879bcd302757e2740e74b724a53c87a743960f0d0f503ca445247d318285b25e3088b7321f3f850a6d203eeb0602a8f7083ca95ddea898aa09e692a56366e476fd3fd2a10a87b2f1dd16cc58d8d202b80d3ee800253b801d40dec7b04ac3e71489f9"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r4}, 0x14) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x7, '\x00', r4, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) (async) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r8 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r8, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$nfc_llcp(r8, 0x0, 0x0) (async) r9 = socket$packet(0x11, 0x2, 0x300) (async) r10 = socket(0x40000000015, 0x5, 0x0) bind$inet(r10, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) (async) sendto$inet(r10, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async) sendto$inet(r10, &(0x7f00000005c0)="48fcc048c8", 0x5, 0x0, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) (async) setsockopt$packet_fanout_data(r9, 0x107, 0x16, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x9000}, 0x2) 666.782354ms ago: executing program 0 (id=3859): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in=@local, 0x3, 0x8, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2000000, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0xffffffff, 0x2b}, 0x2, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b70200001a000000bfa3000000000000070300000080ffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000002b000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f659cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c61a137462c7f2539479f49d4eb2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc16e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c0977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6040099d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663dd472021d202eedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe3594d4a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed180d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35f267632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12a851810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f314001a62863f6e04b4506ac2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab79e609c57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2b4bb9905a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296e99d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55000048e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cf7800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc699d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7dc1a869fa5551b873e2c838e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0000000000000000000000a0616252abda1102c3eee13eddef0275f21752ee474e32d790ae1f3df77e303ae1968c2a4419d1ca13b97b2c3123ab5b8473b880644e6acfe1d346d1528262c6e91f38029ec24eeb4fe5c1b3726bcfd386ba153fed11692170e5a09432bd02fa9dba861ecad4dbf61a93733a21aeff5f541b8f78bccbf1ac0000000000000000000000145aaaa62ff74b216b2977e7b9261824f663cea60ec6e0fa03bd596cec6d12316c8ed147d4cdd140857444c27c1946b1afcd4ec260694cb71e421744cf1f860840b0decf9be35aeb02d1bf6137b3189edb2d21557e6804ed52305e7deace8b97cd2b423cb79c541762097e29c386634a4bcc3ee91266d808706aadbc4650183d71bf5341edfe4c815d3a87c05d75da20b260d39cdd8559292000cb06faf9972683d379565dcd932fbc6bfb13f938a693252fc3af8088fcf8e06a"], &(0x7f0000000340)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xa2}, 0x48) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) (async) socket$inet6(0xa, 0x3, 0x87) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in=@local, 0x3, 0x8, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x2000000, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0xffffffff, 0x2b}, 0x2, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xa2}, 0x48) (async) 288.538062ms ago: executing program 0 (id=3860): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xfffffffb, 0xd, 0xd, 0x64, 0xffffffffffffffff, 0x8001, '\x00', r1, r2, 0x2, 0x3, 0x4, 0x2}, 0x50) 87.536619ms ago: executing program 1 (id=3861): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x3, 0x7, 0x1, 0x0, 0x800}]}}}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010102}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000240)={0x2e, @multicast1, 0x4e23, 0x0, 'lc\x00', 0x3, 0x5, 0x9}, 0x2c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0) 60.068263ms ago: executing program 2 (id=3862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x1, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x20}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) socket(0x2, 0x80805, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0xfffffffffffffffc, 0x3, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x4, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x32}, 0xa, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24008010}, 0x4000) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000400)="606f3af9", 0x4}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="480000000000000029000000370000002b0500000000000007280000000308480400030000000000000008000000000000000104000000000000080000000000000004010300000014000000000000002900000043000000080000000000000050"], 0xb0}}], 0x1, 0x4000801) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x40, @loopback, 0xa7}]}, &(0x7f0000000500)=0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r8, &(0x7f0000001940)={0xa, 0x0, 0x1000006, @private0, 0x4005}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_opts(r8, 0x29, 0x37, 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r9, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8de00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000006c0)=@setlink={0x9c, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x35625, 0x40601}, [@IFLA_TXQLEN={0x8, 0xd, 0xa78}, @IFLA_WEIGHT={0x8}, @IFLA_LINK={0x8}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x84}, @IFLA_BROADCAST={0xa, 0x2, @random="0536340f4840"}, @IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5de77}, @IFLA_VFINFO_LIST={0x4}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x22}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x48000) shutdown(r6, 0x1) 0s ago: executing program 3 (id=3863): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe9, 0x8, 0x2}, 0x50) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "173e6335a79630de1125f32bfd49b77c2d01a8ac6334c2bd", "5c341f44cbb52d9d51c5ea017cd89c9cf84a0b6ec3606f3e97d850427a78e750"}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00m\x00g'], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x194, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x38dd53c4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x82200, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe9, 0x8, 0x2}, 0x50) (async) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "173e6335a79630de1125f32bfd49b77c2d01a8ac6334c2bd", "5c341f44cbb52d9d51c5ea017cd89c9cf84a0b6ec3606f3e97d850427a78e750"}}}}}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000080)) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00m\x00g'], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg1\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x194, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x38dd53c4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x82200, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) (async) kernel console output (not intermixed with test programs): : Enslaving as an active interface with a down link [ 441.065419][T16014] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 441.077518][T16014] bond6: (slave batadv2): making interface the new active one [ 441.087676][T16014] batadv2: entered promiscuous mode [ 441.101573][T16014] bond6: (slave batadv2): Enslaving as an active interface with an up link [ 441.115733][T16013] team0: Port device dummy0 added [ 441.242335][T16018] 8021q: adding VLAN 0 to HW filter on device bond10 [ 441.315319][T16025] m1Ie5nè‹Ò: entered promiscuous mode [ 441.375575][ T5504] 8021q: adding VLAN 0 to HW filter on device eth2 [ 441.409120][ T5856] Bluetooth: hci5: command tx timeout [ 441.565011][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2757'. [ 441.697367][T16052] bond0: entered promiscuous mode [ 441.709186][T16052] bond_slave_0: entered promiscuous mode [ 441.721436][T16052] bond_slave_1: entered promiscuous mode [ 441.739943][T16052] dummy0: entered promiscuous mode [ 441.750991][T16052] batadv_slave_0: entered promiscuous mode [ 441.758047][T16052] debugfs: 'hsr1' already exists in 'hsr' [ 441.764371][T16052] Cannot create hsr debugfs directory [ 441.899375][T16062] netlink: 'syz.3.2761': attribute type 5 has an invalid length. [ 442.076197][T16069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2762'. [ 442.116188][T16069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.307145][T15848] chnl_net:caif_netlink_parms(): no params data found [ 443.093161][T16085] syzkaller0: entered promiscuous mode [ 443.127562][T16085] syzkaller0: entered allmulticast mode [ 443.291541][T16115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2766'. [ 443.588082][T16129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.194936][ T5504] 8021q: adding VLAN 0 to HW filter on device eth3 [ 446.208340][ T36] batadv_slave_0: left promiscuous mode [ 446.636690][ T36] team_slave_1 (unregistering): left promiscuous mode [ 446.643875][ T36] team_slave_1 (unregistering): left allmulticast mode [ 446.652083][ T36] team0 (unregistering): Port device team_slave_1 removed [ 446.747573][T16151] netlink: 'syz.1.2774': attribute type 9 has an invalid length. [ 446.756763][T15848] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.799772][T15848] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.809074][T15848] bridge_slave_0: entered allmulticast mode [ 446.827444][T15848] bridge_slave_0: entered promiscuous mode [ 446.874906][T15848] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.913166][T15848] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.961257][T15848] bridge_slave_1: entered allmulticast mode [ 446.986685][T15848] bridge_slave_1: entered promiscuous mode [ 446.990429][T16168] netlink: 'syz.1.2778': attribute type 10 has an invalid length. [ 447.041994][T16170] netlink: 'syz.1.2778': attribute type 10 has an invalid length. [ 447.066953][T16168] bond0: (slave dummy0): Releasing backup interface [ 447.074954][T16168] dummy0: left promiscuous mode [ 447.084323][T16168] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 447.095303][T16168] team0: Failed to send options change via netlink (err -105) [ 447.103169][T16168] team0: Port device dummy0 added [ 447.123912][T16170] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 447.138360][T16170] team0: Failed to send options change via netlink (err -105) [ 447.146588][T16170] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 447.176803][T16170] team0: Port device dummy0 removed [ 447.197867][T16170] dummy0: entered promiscuous mode [ 447.204647][T16170] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 447.222278][T15848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.235739][T15848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.300029][T15848] team0: Port device team_slave_0 added [ 447.313669][T15848] team0: Port device team_slave_1 added [ 447.329662][T16176] syzkaller0: entered promiscuous mode [ 447.335439][T16176] syzkaller0: entered allmulticast mode [ 447.359385][T15848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.361382][ T36] IPVS: stop unused estimator thread 0... [ 447.366682][T15848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.399202][T15848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.415894][T15848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.423516][T15848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.449922][T15848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.500962][T15848] hsr_slave_0: entered promiscuous mode [ 447.507339][T15848] hsr_slave_1: entered promiscuous mode [ 447.893356][T16178] netlink: 780 bytes leftover after parsing attributes in process `syz.4.2781'. [ 449.350093][T16156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.390360][T15848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 449.500041][T15848] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.536969][T15848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 449.581575][T15848] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.611493][T15848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 449.663824][T15848] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.701254][T15848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 449.727718][T15848] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.012087][T16215] netlink: 'syz.1.2788': attribute type 13 has an invalid length. [ 450.034343][T16215] netlink: 'syz.1.2788': attribute type 17 has an invalid length. [ 450.294390][T16228] netlink: 780 bytes leftover after parsing attributes in process `syz.3.2791'. [ 450.500294][T16232] netlink: 'syz.3.2792': attribute type 10 has an invalid length. [ 450.549900][T16215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.557028][T16234] netlink: 'syz.3.2792': attribute type 10 has an invalid length. [ 450.571544][T16215] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.595665][T16215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.657906][T16234] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 450.669580][T16234] team0: Port device dummy0 removed [ 450.712465][T15848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.821057][T15848] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.884306][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.891559][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.973531][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.980793][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.349230][T16257] lo: entered allmulticast mode [ 451.367283][T16257] lo: left allmulticast mode [ 451.466169][T16260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2793'. [ 451.625616][T16263] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2799'. [ 451.651096][T16263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2799'. [ 451.684409][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2799'. [ 451.915732][T15848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.982215][T16284] netlink: 'syz.2.2803': attribute type 10 has an invalid length. [ 452.034654][T16287] netlink: 'syz.2.2803': attribute type 10 has an invalid length. [ 452.075551][T16287] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 452.105754][T16287] team0: Port device dummy0 removed [ 452.230184][ T12] batadv2: left promiscuous mode [ 452.366740][T15848] veth0_vlan: entered promiscuous mode [ 452.420388][T15848] veth1_vlan: entered promiscuous mode [ 452.547515][T15848] veth0_macvtap: entered promiscuous mode [ 452.608336][T15848] veth1_macvtap: entered promiscuous mode [ 452.703420][T15848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.777946][T15848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.876098][ T8287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.907551][ T8287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.926555][ T8287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.951150][T16313] lo speed is unknown, defaulting to 1000 [ 453.019054][ T8287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.518885][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.535501][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.558501][T16343] netlink: 'syz.2.2815': attribute type 10 has an invalid length. [ 453.592757][T16343] team0: Failed to send options change via netlink (err -105) [ 453.613662][T16343] team0: Port device dummy0 added [ 453.630796][T16345] netlink: 'syz.2.2815': attribute type 10 has an invalid length. [ 453.673061][T16345] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 453.706068][T16345] team0: Failed to send options change via netlink (err -105) [ 453.746634][T16345] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 453.793876][T16345] team0: Port device dummy0 removed [ 453.822028][T16349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2816'. [ 453.929282][ T8278] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.948845][ T8278] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.969252][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.972073][ T8278] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.997056][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.004857][ T8278] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.083179][T16313] gre0 speed is unknown, defaulting to 1000 [ 454.862298][T16383] netlink: 'syz.0.2826': attribute type 10 has an invalid length. [ 454.923010][T16383] team0: Failed to send options change via netlink (err -105) [ 454.954208][T16393] netlink: 'syz.0.2826': attribute type 10 has an invalid length. [ 454.988849][T16394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2828'. [ 454.997023][T16383] team0: Port device dummy0 added [ 455.046518][T16393] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 455.113814][T16393] team0: Failed to send options change via netlink (err -105) [ 455.141439][T16393] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 455.152101][T16393] team0: Port device dummy0 removed [ 455.177469][T16393] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 455.202995][T16403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2828'. [ 455.366474][T16405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2829'. [ 456.360191][T16434] syzkaller0: entered promiscuous mode [ 456.381171][T16434] syzkaller0: entered allmulticast mode [ 456.475178][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 456.488629][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 456.505933][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 456.525514][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 456.538259][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 456.784933][T16440] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 457.232782][T16438] lo speed is unknown, defaulting to 1000 [ 457.295884][T16454] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.2839'. [ 457.654124][T16462] netlink: 'syz.0.2842': attribute type 2 has an invalid length. [ 457.964903][T16477] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2845'. [ 458.331427][T16438] gre0 speed is unknown, defaulting to 1000 [ 458.609966][ T5851] Bluetooth: hci0: command tx timeout [ 458.656977][T16498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2850'. [ 459.730219][T16531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2859'. [ 459.759425][T16531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2859'. [ 459.837203][T16438] chnl_net:caif_netlink_parms(): no params data found [ 460.010511][T16540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2861'. [ 460.034996][T16540] openvswitch: netlink: Invalid VLAN frame [ 460.052702][T16540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2861'. [ 460.074045][T16536] pim6reg1: entered promiscuous mode [ 460.082469][T16536] pim6reg1: entered allmulticast mode [ 460.117032][T16540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2861'. [ 460.134403][T16438] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.148516][T16438] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.156538][T16438] bridge_slave_0: entered allmulticast mode [ 460.167942][T16438] bridge_slave_0: entered promiscuous mode [ 460.196574][T16539] syzkaller0: entered promiscuous mode [ 460.207318][T16539] syzkaller0: entered allmulticast mode [ 460.255841][T16438] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.269093][T16438] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.284656][T16438] bridge_slave_1: entered allmulticast mode [ 460.302863][T16438] bridge_slave_1: entered promiscuous mode [ 460.567433][T16438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.616842][T16438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.687316][T16569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2867'. [ 460.699808][T16569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2867'. [ 460.702318][ T5851] Bluetooth: hci0: command tx timeout [ 460.965047][T16569] virtio_net virtio1 eth0: entered promiscuous mode [ 460.995789][T16569] dummy0: entered promiscuous mode [ 461.011917][T16569] debugfs: 'hsr0' already exists in 'hsr' [ 461.024124][T16569] Cannot create hsr debugfs directory [ 461.155551][T16438] team0: Port device team_slave_0 added [ 461.167882][T16571] lo speed is unknown, defaulting to 1000 [ 461.192636][T16438] team0: Port device team_slave_1 added [ 461.282836][T16438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.304287][T16438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.375972][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2871'. [ 461.386653][T16438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.423318][T16438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.433265][T16586] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 461.440186][T16438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.440806][T16588] netlink: 'syz.2.2872': attribute type 10 has an invalid length. [ 461.509017][T16438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.571376][T16589] netlink: 'syz.2.2872': attribute type 10 has an invalid length. [ 461.616728][T16591] netlink: 'syz.3.2873': attribute type 21 has an invalid length. [ 461.635518][T16591] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2873'. [ 461.636798][T16588] team0: Failed to send options change via netlink (err -105) [ 461.652714][T16588] team0: Port device dummy0 added [ 461.658573][T16591] netlink: 'syz.3.2873': attribute type 5 has an invalid length. [ 461.668636][T16592] x_tables: duplicate entry at hook 3 [ 461.680465][T16591] netlink: 'syz.3.2873': attribute type 6 has an invalid length. [ 461.702555][T16591] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2873'. [ 461.716677][T16589] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 461.737483][T16589] team0: Failed to send options change via netlink (err -105) [ 461.759318][T16589] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 461.791312][T16589] team0: Port device dummy0 removed [ 461.882007][T16571] gre0 speed is unknown, defaulting to 1000 [ 461.902414][T16438] hsr_slave_0: entered promiscuous mode [ 461.925721][T16438] hsr_slave_1: entered promiscuous mode [ 461.952206][T16438] debugfs: 'hsr0' already exists in 'hsr' [ 461.972546][T16438] Cannot create hsr debugfs directory [ 462.769454][ T5851] Bluetooth: hci0: command tx timeout [ 462.972660][T16438] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.161431][T16438] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.311170][T16438] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.478086][T16438] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.786517][T16644] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 464.556257][T16438] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 464.646803][T16438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.677020][T16438] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 464.731705][T16438] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.850620][ T5851] Bluetooth: hci0: command tx timeout [ 464.882076][T16665] syzkaller0: entered promiscuous mode [ 464.895669][T16665] syzkaller0: entered allmulticast mode [ 464.932892][T16438] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 464.982676][T16438] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 465.004282][T16438] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 465.030649][T16438] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.104719][T16728] __nla_validate_parse: 1 callbacks suppressed [ 468.104739][T16728] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2896'. [ 468.337551][T16438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.358457][T16745] tap0: tun_chr_ioctl cmd 1074025677 [ 468.379641][T16745] tap0: linktype set to 776 [ 468.432489][T16438] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.514669][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.521946][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.564953][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.572308][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.681014][T16758] syzkaller0: entered promiscuous mode [ 468.704350][T16758] syzkaller0: entered allmulticast mode [ 468.735707][T16758] syzkaller1: entered promiscuous mode [ 468.741610][T16758] syzkaller1: entered allmulticast mode [ 469.429267][T16791] batadv_slave_0: entered promiscuous mode [ 469.461992][T16791] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2907'. [ 469.484250][T16793] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2907'. [ 469.696631][T16806] xt_hashlimit: max too large, truncated to 1048576 [ 469.731521][T16806] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2910'. [ 469.757634][T16438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.024823][T16793] batadv_slave_0: left promiscuous mode [ 470.077709][T16815] sctp: [Deprecated]: syz.3.2912 (pid 16815) Use of int in max_burst socket option. [ 470.077709][T16815] Use struct sctp_assoc_value instead [ 470.250023][T16821] bond1: option lacp_active: invalid value (8) [ 470.265075][T16821] bond1 (unregistering): Released all slaves [ 470.457082][T16829] syzkaller0: entered promiscuous mode [ 470.497149][T16829] syzkaller0: entered allmulticast mode [ 470.528228][T16829] syzkaller1: entered promiscuous mode [ 470.548567][T16829] syzkaller1: entered allmulticast mode [ 470.850630][T16438] veth0_vlan: entered promiscuous mode [ 470.895423][T16438] veth1_vlan: entered promiscuous mode [ 470.911813][T16849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2920'. [ 471.005772][T16438] veth0_macvtap: entered promiscuous mode [ 471.055701][T16438] veth1_macvtap: entered promiscuous mode [ 471.123577][T16438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.141626][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2924'. [ 471.160821][T16438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.257518][ T8287] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.318220][ T8287] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.359081][ T8287] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.393045][ T8287] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.601073][T16875] netlink: 'syz.1.2929': attribute type 10 has an invalid length. [ 471.674850][ T8278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.704104][ T8278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.768315][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.782046][T16882] syzkaller0: entered promiscuous mode [ 471.792768][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.800880][T16882] syzkaller0: entered allmulticast mode [ 471.814308][T16882] syzkaller1: entered promiscuous mode [ 471.820385][T16882] syzkaller1: entered allmulticast mode [ 471.944430][ T30] audit: type=1800 audit(1777043383.465:6): pid=16886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2834" name=CB dev="tmpfs" ino=19 res=0 errno=0 [ 471.988247][T16888] netlink: 780 bytes leftover after parsing attributes in process `syz.1.2932'. [ 472.102484][T16890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2933'. [ 472.120946][T16890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2933'. [ 472.314271][T16899] netlink: 'syz.0.2937': attribute type 10 has an invalid length. [ 472.373553][T16901] netlink: 'syz.0.2937': attribute type 10 has an invalid length. [ 472.453586][T16899] bond0: (slave dummy0): Releasing backup interface [ 472.523803][T16899] team0: Port device dummy0 added [ 472.640656][T16901] team0: Port device dummy0 removed [ 472.666413][T16901] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 472.755837][T16913] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2940'. [ 473.175980][T16923] syzkaller0: entered promiscuous mode [ 473.208045][T16923] syzkaller0: entered allmulticast mode [ 474.337601][T16964] __nla_validate_parse: 1 callbacks suppressed [ 474.337620][T16964] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2955'. [ 474.903409][T16967] netlink: 'syz.4.2956': attribute type 1 has an invalid length. [ 474.913139][T16967] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2956'. [ 476.446933][T16939] lo speed is unknown, defaulting to 1000 [ 476.526652][T16981] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2960'. [ 476.772046][T16985] netlink: 'syz.4.2961': attribute type 21 has an invalid length. [ 476.836363][T16985] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2961'. [ 477.331679][T16939] gre0 speed is unknown, defaulting to 1000 [ 478.703657][T17054] lo speed is unknown, defaulting to 1000 [ 479.667456][T17054] gre0 speed is unknown, defaulting to 1000 [ 479.835071][T17090] x_tables: duplicate underflow at hook 2 [ 479.993249][T17086] syzkaller0: entered promiscuous mode [ 480.012137][T17086] syzkaller0: entered allmulticast mode [ 482.918302][T17111] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 483.039898][T17111] : renamed from veth0_to_bond (while UP) [ 483.067241][T17116] syzkaller1: entered promiscuous mode [ 483.109295][T17116] syzkaller1: entered allmulticast mode [ 483.369104][T17128] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 483.405621][T17120] 8021q: VLANs not supported on sit0 [ 483.416921][T17127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2993'. [ 483.542042][T17127] macvtap1: entered promiscuous mode [ 483.575136][T17127] dummy0: entered promiscuous mode [ 483.605005][T17127] macvtap1: entered allmulticast mode [ 483.650838][T17127] dummy0: entered allmulticast mode [ 484.229880][T17142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2996'. [ 485.415801][T17184] team0: Port device syz_tun added [ 486.065338][T17208] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3008'. [ 486.951384][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 486.967675][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 486.984615][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 486.997550][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 487.008532][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 487.193622][T17234] lo speed is unknown, defaulting to 1000 [ 487.687722][T17259] block nbd0: not configured, cannot reconfigure [ 487.905792][ T6025] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.128315][ T6025] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.214849][T17234] gre0 speed is unknown, defaulting to 1000 [ 488.220313][T17269] lo speed is unknown, defaulting to 1000 [ 488.245943][T17274] bridge2: entered promiscuous mode [ 488.265156][T17274] bridge2: entered allmulticast mode [ 488.328622][ T6025] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.423770][T17274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3026'. [ 488.506632][ T6025] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.790056][T17281] netlink: 'syz.3.3027': attribute type 1 has an invalid length. [ 489.029408][T17286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3027'. [ 489.089293][ T5856] Bluetooth: hci4: command tx timeout [ 489.163854][T17281] 8021q: adding VLAN 0 to HW filter on device bond6 [ 489.279743][T17286] bond6 (unregistering): Released all slaves [ 489.694608][ T6025] bridge_slave_1: left allmulticast mode [ 489.719033][ T6025] bridge_slave_1: left promiscuous mode [ 489.730589][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.740676][T17291] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 490.525793][ T6025] bond7 (unregistering): (slave gretap2): Releasing active interface [ 490.776030][ T6025] bond6 (unregistering): (slave geneve4): Releasing active interface [ 491.099971][ T8846] IPVS: starting estimator thread 0... [ 491.169970][ T5856] Bluetooth: hci4: command tx timeout [ 491.188885][T17335] IPVS: using max 29 ests per chain, 69600 per kthread [ 491.215383][T17337] IPVS: fo: FWM 3 0x00000003 - no destination available [ 491.244921][ T6025] bond0 (unregistering): left promiscuous mode [ 491.251354][ T6025] bond_slave_0: left promiscuous mode [ 491.256883][ T6025] bond_slave_1: left promiscuous mode [ 491.263550][ T6025] dummy0: left promiscuous mode [ 491.271780][ T6025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.282271][ T6025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.293926][ T6025] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 491.305658][ T6025] bond0 (unregistering): Released all slaves [ 491.317452][ T6025] bond1 (unregistering): Released all slaves [ 491.332821][ T6025] bond2 (unregistering): Released all slaves [ 491.347614][ T6025] team0: Port device bond3 removed [ 491.359542][ T6025] bond3 (unregistering): Released all slaves [ 491.374764][ T6025] bond4 (unregistering): Released all slaves [ 491.389920][ T6025] bond5 (unregistering): Released all slaves [ 491.404314][ T6025] bond6 (unregistering): Released all slaves [ 491.419255][ T6025] bond7 (unregistering): Released all slaves [ 491.442707][T17269] gre0 speed is unknown, defaulting to 1000 [ 491.494378][T17317] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.619936][T17336] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 491.658986][ T6025] 5nè: left promiscuous mode [ 491.811791][T17317] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.876765][T17294] lo speed is unknown, defaulting to 1000 [ 491.882783][ T6025] 5nè‹Ò: left promiscuous mode [ 492.005388][T17317] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.117560][ T6025] m1Ie5nè‹Ò: left promiscuous mode [ 492.206818][ T6025] tipc: Left network mode [ 492.291875][T17317] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.416060][T17294] gre0 speed is unknown, defaulting to 1000 [ 492.696114][T17234] chnl_net:caif_netlink_parms(): no params data found [ 492.852498][T17358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3039'. [ 492.890391][T17358] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3039'. [ 493.015090][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.248877][ T5856] Bluetooth: hci4: command tx timeout [ 493.391750][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.555029][ T5504] 8021q: adding VLAN 0 to HW filter on device eth1 [ 493.808158][ T966] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.819314][T17234] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.839042][T17234] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.846709][T17234] bridge_slave_0: entered allmulticast mode [ 493.862811][T17234] bridge_slave_0: entered promiscuous mode [ 493.952380][T17234] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.970048][T17234] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.987510][T17234] bridge_slave_1: entered allmulticast mode [ 494.013277][T17234] bridge_slave_1: entered promiscuous mode [ 494.152298][ T8278] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.456206][T17234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.490628][T17234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.922085][ T6025] batadv_slave_0: left promiscuous mode [ 494.963073][ T6025] hsr_slave_0: left promiscuous mode [ 494.985751][ T6025] hsr_slave_1: left promiscuous mode [ 495.195542][T17403] netlink: 780 bytes leftover after parsing attributes in process `syz.4.3045'. [ 495.329040][ T5856] Bluetooth: hci4: command tx timeout [ 495.408090][ T6025] team0 (unregistering): Port device team_slave_1 removed [ 495.441708][ T6025] team0 (unregistering): Port device team_slave_0 removed [ 495.744852][T17234] team0: Port device team_slave_0 added [ 495.813510][T17401] bridge1: entered promiscuous mode [ 495.841655][T17234] team0: Port device team_slave_1 added [ 495.857573][ T5504] 8021q: adding VLAN 0 to HW filter on device eth2 [ 496.026237][T17234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.049177][T17234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.129458][T17234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.187050][T17234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.226606][T17234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.275601][T17234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.417402][T17439] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 4, id = 0 [ 496.455884][T17440] vlan2: entered promiscuous mode [ 496.469012][T17440] bridge0: entered promiscuous mode [ 496.620713][T17446] syzkaller0: entered promiscuous mode [ 496.639845][T17446] syzkaller0: entered allmulticast mode [ 496.688084][T17234] hsr_slave_0: entered promiscuous mode [ 496.716784][T17234] hsr_slave_1: entered promiscuous mode [ 496.726421][T17234] debugfs: 'hsr0' already exists in 'hsr' [ 496.745363][T17234] Cannot create hsr debugfs directory [ 496.784505][ T6025] IPVS: stop unused estimator thread 0... [ 496.912052][T17459] netlink: 780 bytes leftover after parsing attributes in process `syz.2.3055'. [ 497.810094][ T5504] 8021q: adding VLAN 0 to HW filter on device eth3 [ 497.961693][T17495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3061'. [ 498.427100][T17501] lo speed is unknown, defaulting to 1000 [ 498.439682][T17515] netlink: 780 bytes leftover after parsing attributes in process `syz.0.3065'. [ 499.251901][T17542] syzkaller0: entered promiscuous mode [ 499.268389][T17542] syzkaller0: entered allmulticast mode [ 499.306408][T17501] gre0 speed is unknown, defaulting to 1000 [ 499.975947][T17570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3074'. [ 500.128123][T17234] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 500.144445][T17234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 500.166490][T17565] netlink: 'syz.0.3072': attribute type 3 has an invalid length. [ 500.329951][T17234] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 500.358523][T17589] netlink: 'syz.4.3075': attribute type 1 has an invalid length. [ 500.374716][T17234] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.383422][T17589] netlink: 'syz.4.3075': attribute type 6 has an invalid length. [ 500.419699][T17589] netlink: 'syz.4.3075': attribute type 3 has an invalid length. [ 500.448554][T17234] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 500.490118][T17234] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 500.536335][T17234] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 500.624495][T17234] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.246482][T17618] : entered promiscuous mode [ 501.329960][T17234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.552521][T17234] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.647830][ T966] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.655102][ T966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.734058][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.848234][ T6025] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.855529][ T6025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.349643][T17636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3085'. [ 502.394037][T17639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3084'. [ 502.941932][T17234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.098417][T17672] batadv_slave_1: entered promiscuous mode [ 503.137805][T17672] netlink: 'syz.4.3093': attribute type 1 has an invalid length. [ 503.246888][T17672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 503.298262][T17675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 503.305592][T17675] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 503.323959][T17675] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 503.419884][T17671] batadv_slave_1: left promiscuous mode [ 503.592845][T17234] veth0_vlan: entered promiscuous mode [ 503.664894][T17234] veth1_vlan: entered promiscuous mode [ 503.815953][T17234] veth0_macvtap: entered promiscuous mode [ 503.841843][T17698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3098'. [ 503.852531][T17234] veth1_macvtap: entered promiscuous mode [ 503.898087][T17234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.941555][T17701] syzkaller0: entered promiscuous mode [ 503.976863][T17701] syzkaller0: entered allmulticast mode [ 504.032478][T17234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.165321][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.201698][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.243482][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.270792][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.661392][T17713] netlink: 'syz.3.3101': attribute type 3 has an invalid length. [ 504.687829][T17713] netlink: 'syz.3.3101': attribute type 1 has an invalid length. [ 504.707950][ T6025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.722111][T17713] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3101'. [ 504.735149][ T6025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.757412][T17713] NCSI netlink: No device for ifindex 808464432 [ 504.956763][ T8287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.989862][ T8287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.433886][T17748] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 506.382640][T17781] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3120'. [ 506.435848][T17781] smc: net device veth1_to_team applied user defined pnetid S [ 506.690059][T17789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 506.746698][T17789] team0: Failed to send port change of device bond2 via netlink (err -105) [ 506.817369][T17789] team0: Failed to send options change via netlink (err -105) [ 506.851812][T17789] team0: Port device bond2 added [ 506.872224][ T966] team0: Failed to send port change of device bond2 via netlink (err -105) [ 506.985550][T17809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.043276][T17803] lo speed is unknown, defaulting to 1000 [ 507.405405][T17819] netlink: 83 bytes leftover after parsing attributes in process `syz.4.3130'. [ 507.651094][T17803] gre0 speed is unknown, defaulting to 1000 [ 507.673734][T17825] IPv6: Can't replace route, no match found [ 507.866742][T17828] erspan0: entered promiscuous mode [ 507.903066][T17828] macsec1: entered promiscuous mode [ 507.944100][T17828] erspan0: left promiscuous mode [ 508.071206][T17829] erspan0: entered promiscuous mode [ 508.096908][T17829] macsec1: entered promiscuous mode [ 508.134523][T17829] erspan0: left promiscuous mode [ 508.232304][T17837] 5Ò: entered promiscuous mode [ 508.326171][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 508.339122][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 508.348075][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 508.363814][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 508.388051][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 508.397006][ T5849] team0: Port device syz_tun removed [ 508.558063][T17838] lo speed is unknown, defaulting to 1000 [ 509.434936][T17838] gre0 speed is unknown, defaulting to 1000 [ 510.167692][ T8846] IPVS: starting estimator thread 0... [ 510.182843][T17862] IPVS: sh: FWM 3 0x00000003 - no destination available [ 510.205007][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 510.217560][T17862] IPVS: sh: FWM 3 0x00000003 - no destination available [ 510.240615][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 510.258834][T17868] IPVS: using max 26 ests per chain, 62400 per kthread [ 510.348646][T17864] lo speed is unknown, defaulting to 1000 [ 510.449382][ T5856] Bluetooth: hci1: command tx timeout [ 511.134195][T17838] chnl_net:caif_netlink_parms(): no params data found [ 511.142860][T17886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3151'. [ 511.323464][T17886] vlan2: entered promiscuous mode [ 511.342531][T17886] bridge0: entered promiscuous mode [ 511.662675][T17838] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.703247][T17838] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.731098][T17838] bridge_slave_0: entered allmulticast mode [ 511.747872][T17838] bridge_slave_0: entered promiscuous mode [ 511.765412][T17864] gre0 speed is unknown, defaulting to 1000 [ 511.775405][T17838] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.784610][T17899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3154'. [ 511.793809][T17899] openvswitch: netlink: Flow actions attr not present in new flow. [ 511.796857][T17838] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.829109][T17838] bridge_slave_1: entered allmulticast mode [ 511.842690][T17838] bridge_slave_1: entered promiscuous mode [ 511.994705][T17838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.023904][T17838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.142878][T17838] team0: Port device team_slave_0 added [ 512.181526][T17838] team0: Port device team_slave_1 added [ 512.279541][T17906] dvmrp1: entered allmulticast mode [ 512.285810][T17838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.305015][T17838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.333864][T17838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.386054][T17906] dvmrp1: left allmulticast mode [ 512.405150][T17838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.413166][T17838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.440743][T17838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.530586][ T5856] Bluetooth: hci1: command tx timeout [ 512.861818][T17838] hsr_slave_0: entered promiscuous mode [ 512.893127][T17838] hsr_slave_1: entered promiscuous mode [ 512.955930][T17838] debugfs: 'hsr0' already exists in 'hsr' [ 512.986160][T17838] Cannot create hsr debugfs directory [ 513.078522][T17930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3162'. [ 513.235370][T17934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3162'. [ 513.320552][T17937] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3162'. [ 514.608921][ T5856] Bluetooth: hci1: command tx timeout [ 514.615894][T17941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3165'. [ 514.700924][T17948] syzkaller0: entered promiscuous mode [ 514.706607][T17948] syzkaller0: entered allmulticast mode [ 514.841976][T17964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3168'. [ 516.688933][ T5856] Bluetooth: hci1: command tx timeout [ 517.690161][T17984] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3173'. [ 517.874317][T17981] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.935043][T17998] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3173'. [ 518.004588][T17984] gretap0: entered promiscuous mode [ 518.076583][T17998] 0ªî{X¹¦: renamed from gretap0 [ 518.094846][T17998] 0ªî{X¹¦: left promiscuous mode [ 518.107101][T17998] 0ªî{X¹¦: entered allmulticast mode [ 518.122615][T17998] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 518.285513][T17981] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.447962][T17981] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.528045][T18014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3179'. [ 518.612405][T18016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3179'. [ 518.678160][T18017] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3179'. [ 518.705619][T18014] bond1 (unregistering): Released all slaves [ 518.778133][T17981] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.803656][T18019] netlink: 'syz.2.3180': attribute type 3 has an invalid length. [ 519.015257][ T30] audit: type=1107 audit(1777043430.525:7): pid=18023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 519.050849][T18029] Bluetooth: MGMT ver 1.23 [ 519.179634][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.190139][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.256643][T18032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3183'. [ 519.280910][T18031] syzkaller0: entered promiscuous mode [ 519.281576][T18032] x_tables: ip_tables: osf match: only valid for protocol 6 [ 519.294093][T18031] syzkaller0: entered allmulticast mode [ 519.393500][ T966] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.402408][ T966] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.538059][T18039] netlink: 'syz.4.3185': attribute type 10 has an invalid length. [ 519.632002][T18039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.641808][T18039] team0: Port device bond0 added [ 519.775328][T17838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 519.871896][T17838] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 519.909842][T17838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 519.971447][T17838] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 519.984824][T18057] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3189'. [ 520.101756][T17838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 520.261381][T17838] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 520.269884][T17838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 520.392493][T17838] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 520.411637][T18084] 8021q: VLANs not supported on ip_vti0 [ 520.490927][T18094] syzkaller0: entered promiscuous mode [ 520.504005][T18094] syzkaller0: entered allmulticast mode [ 520.892818][T18096] xt_recent: hitcount (4294967292) is larger than allowed maximum (65535) [ 521.028944][T17838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.104652][T17838] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.122064][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.129295][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.150639][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.157965][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.172570][T18100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3196'. [ 521.639796][T18120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.913916][T17838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.174434][T17838] veth0_vlan: entered promiscuous mode [ 522.233669][T17838] veth1_vlan: entered promiscuous mode [ 522.382976][T17838] veth0_macvtap: entered promiscuous mode [ 522.426008][T17838] veth1_macvtap: entered promiscuous mode [ 522.529606][T18150] syzkaller0: entered promiscuous mode [ 522.539513][T18150] syzkaller0: entered allmulticast mode [ 522.568215][T17838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.583391][T18165] vlan3: entered promiscuous mode [ 525.589585][T18165] bond0: entered promiscuous mode [ 525.594697][T18165] bond_slave_0: entered promiscuous mode [ 525.603733][T18165] bond_slave_1: entered promiscuous mode [ 525.698465][T17838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.757755][ T76] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.803753][ T76] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.836938][ T76] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.858174][ T76] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.105048][T18182] netlink: 488 bytes leftover after parsing attributes in process `syz.4.3216'. [ 526.120665][T18182] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.3216'. [ 526.122688][ T966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.161622][ T966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.244958][T18182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.273972][ T8278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.292877][ T8278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.296656][T18187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3217'. [ 526.311673][T18186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3218'. [ 526.421367][T18187] 8021q: adding VLAN 0 to HW filter on device bond1 [ 526.921577][T18211] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 526.939577][T18211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.456034][T18224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3225'. [ 527.537629][T18228] macvtap1: entered promiscuous mode [ 527.548559][T18228] macvtap1: entered allmulticast mode [ 527.593793][T15849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 527.605029][T15849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 527.621235][T15849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 527.631146][T15849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 527.638958][T15849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 527.699266][T18229] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 527.740126][T18240] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3230'. [ 527.984580][T18246] lo speed is unknown, defaulting to 1000 [ 528.666204][ T5850] team0: Port device syz_tun removed [ 528.709388][T18260] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3234'. [ 528.720091][T18260] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 528.776322][T18233] lo speed is unknown, defaulting to 1000 [ 528.782909][T18246] gre0 speed is unknown, defaulting to 1000 [ 528.856310][ T6025] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.951196][T18269] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 529.057204][ T6025] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.190067][T18288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3239'. [ 529.314877][ T6025] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.479357][ T6025] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.647879][T18298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3240'. [ 529.729239][ T5856] Bluetooth: hci2: command tx timeout [ 529.779497][T18233] gre0 speed is unknown, defaulting to 1000 [ 530.122230][T18308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3243'. [ 530.383554][ T6025] bridge_slave_1: left allmulticast mode [ 530.400288][ T6025] bridge_slave_1: left promiscuous mode [ 530.414698][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.466433][ T6025] ¾x9ÿ: left allmulticast mode [ 530.492541][ T6025] ¾x9ÿ: left promiscuous mode [ 530.503512][ T6025] bridge0: port 1(1¾x9ÿ) entered disabled state [ 530.518464][T18320] netlink: 'syz.3.3245': attribute type 1 has an invalid length. [ 530.584347][ T6025] pimreg: left allmulticast mode [ 530.596031][ T6025] dvmrp6: left allmulticast mode [ 531.337662][ T6025] batman_adv: batadv0: Removing interface: macvtap1 [ 531.607454][ T6025] bond3 (unregistering): (slave gretap1): Releasing active interface [ 531.811292][ T5856] Bluetooth: hci2: command tx timeout [ 531.946319][ T6025] bond0 (unregistering): (slave bridge4): Releasing active interface [ 532.152503][ T6025] bond1 (unregistering): Released all slaves [ 532.175503][ T6025] bond2 (unregistering): Released all slaves [ 532.214109][ T6025] bond3 (unregistering): Released all slaves [ 532.234539][ T6025] bond0 (unregistering): Released all slaves [ 532.264803][ T6025] bond4 (unregistering): (slave veth3): Releasing active interface [ 532.275294][ T6025] bond4 (unregistering): (slave batadv1): Releasing active interface [ 532.298606][ T6025] bond4 (unregistering): Released all slaves [ 532.321676][ T6025] bond5 (unregistering): Released all slaves [ 532.346385][ T6025] bond6 (unregistering): (slave veth5): Releasing active interface [ 532.362302][ T6025] batadv2: entered promiscuous mode [ 532.373248][ T6025] bond6 (unregistering): (slave batadv2): Releasing active interface [ 532.385991][ T6025] bond6 (unregistering): Released all slaves [ 532.406092][ T6025] bond7 (unregistering): Released all slaves [ 532.439123][T18318] tipc: Started in network mode [ 532.456604][T18318] tipc: Node identity ac14140f, cluster identity 4711 [ 532.474812][T18318] tipc: Enabling of bearer rejected, failed to enable media [ 532.625167][ T5504] 8021q: adding VLAN 0 to HW filter on device eth1 [ 532.698475][ T6025] tipc: Left network mode [ 532.803797][T18336] lo speed is unknown, defaulting to 1000 [ 533.060259][T18351] __nla_validate_parse: 1 callbacks suppressed [ 533.060280][T18351] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3249'. [ 533.702994][T18378] netlink: 'syz.3.3252': attribute type 1 has an invalid length. [ 533.889273][ T5856] Bluetooth: hci2: command tx timeout [ 533.920384][T18378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 534.114427][T18336] gre0 speed is unknown, defaulting to 1000 [ 534.291960][T18233] chnl_net:caif_netlink_parms(): no params data found [ 534.585451][ T5504] 8021q: adding VLAN 0 to HW filter on device eth2 [ 534.833773][T18233] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.848078][T18233] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.857798][T18233] bridge_slave_0: entered allmulticast mode [ 534.878159][T18233] bridge_slave_0: entered promiscuous mode [ 534.899931][T18233] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.917424][T18233] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.928191][T18233] bridge_slave_1: entered allmulticast mode [ 534.943873][T18233] bridge_slave_1: entered promiscuous mode [ 535.055113][T18422] netlink: 'syz.4.3258': attribute type 1 has an invalid length. [ 535.107610][T18233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.128194][T18423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3258'. [ 535.309187][T18422] 8021q: adding VLAN 0 to HW filter on device bond3 [ 535.442925][T18233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.636625][T18425] bond3: (slave veth3): Enslaving as an active interface with a down link [ 535.712253][T18436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3260'. [ 535.726104][ T6025] veth1_to_team: left promiscuous mode [ 535.744977][ T6025] veth1: left promiscuous mode [ 535.765377][ T6025] hsr_slave_0: left promiscuous mode [ 535.774579][ T6025] hsr_slave_1: left promiscuous mode [ 535.782446][ T6025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.938314][ T6025] team0 (unregistering): Port device 76žÿ removed [ 535.961978][ T6025] team0 (unregistering): Port device team_slave_0 removed [ 535.970760][ T5856] Bluetooth: hci2: command tx timeout [ 536.218066][T18233] team0: Port device team_slave_0 added [ 536.243065][T18233] team0: Port device team_slave_1 added [ 536.404333][T18233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.434988][T18233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.520701][T18448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3262'. [ 536.549634][T18233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.562520][T18448] netlink: 15 bytes leftover after parsing attributes in process `syz.3.3262'. [ 536.594287][T18445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3262'. [ 536.596472][T18233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.638823][T18233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.665993][T18233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.205028][T18233] hsr_slave_0: entered promiscuous mode [ 537.236118][T18233] hsr_slave_1: entered promiscuous mode [ 537.270947][T18233] debugfs: 'hsr0' already exists in 'hsr' [ 537.294786][T18233] Cannot create hsr debugfs directory [ 537.638479][T18489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.916288][T18500] netlink: 'syz.3.3272': attribute type 1 has an invalid length. [ 537.948434][ T5504] 8021q: adding VLAN 0 to HW filter on device eth3 [ 537.998451][T18506] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3272'. [ 538.049836][T18500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 538.084694][T18497] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3272'. [ 538.184678][T18495] syzkaller0: entered promiscuous mode [ 538.213463][T18495] syzkaller0: entered allmulticast mode [ 538.236799][T18510] can: request_module (can-proto-0) failed. [ 540.717444][T18520] netlink: 'syz.4.3276': attribute type 1 has an invalid length. [ 540.735874][T18520] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3276'. [ 540.900479][T18528] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 4, id = 0 [ 541.778226][T18570] netlink: 'syz.0.3287': attribute type 1 has an invalid length. [ 541.943507][T18570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 542.058596][T18579] netlink: 780 bytes leftover after parsing attributes in process `syz.4.3289'. [ 542.252829][T18585] veth0: entered promiscuous mode [ 542.276282][T18594] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3293'. [ 542.292464][T18587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 542.377565][T18603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3291'. [ 542.392098][T18602] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3293'. [ 542.404027][T18580] syzkaller0: entered promiscuous mode [ 542.415428][T18580] syzkaller0: entered allmulticast mode [ 542.450266][T18583] veth0: left promiscuous mode [ 545.545670][T18652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3301'. [ 545.669399][T18657] netlink: 780 bytes leftover after parsing attributes in process `syz.3.3302'. [ 545.956752][T18664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3303'. [ 545.979316][T18664] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3303'. [ 548.201576][T18233] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 548.225406][T18233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 548.249268][T18233] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 548.288599][T18233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 548.309774][T18233] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 548.350232][T18233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 548.396322][T18233] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 548.421253][T18233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 548.429572][T18668] lo speed is unknown, defaulting to 1000 [ 548.584100][T18682] tipc: Started in network mode [ 548.602011][T18682] tipc: Node identity 923385d15fdd, cluster identity 4711 [ 548.627287][T18682] tipc: Enabled bearer , priority 0 [ 548.652278][T18682] syzkaller0: entered promiscuous mode [ 548.669426][T18682] syzkaller0: entered allmulticast mode [ 551.397788][T18700] tipc: Resetting bearer [ 551.433826][T18668] gre0 speed is unknown, defaulting to 1000 [ 551.693051][T18678] tipc: Resetting bearer [ 551.738626][T18678] tipc: Disabling bearer [ 551.763874][ T992] tipc: Node number set to 3454961105 [ 551.905938][T18233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.981768][T18233] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.007841][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.015134][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.020352][T18751] FAULT_INJECTION: forcing a failure. [ 552.020352][T18751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.069572][T18751] CPU: 1 UID: 0 PID: 18751 Comm: syz.1.3309 Not tainted syzkaller #0 PREEMPT(full) [ 552.069603][T18751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 552.069615][T18751] Call Trace: [ 552.069623][T18751] [ 552.069632][T18751] dump_stack_lvl+0xe8/0x150 [ 552.069670][T18751] should_fail_ex+0x412/0x560 [ 552.069707][T18751] _copy_to_user+0x31/0xb0 [ 552.069733][T18751] simple_read_from_buffer+0xe1/0x170 [ 552.069757][T18751] proc_fail_nth_read+0x1bb/0x230 [ 552.069784][T18751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.069809][T18751] ? rw_verify_area+0x2a6/0x4d0 [ 552.069837][T18751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.069862][T18751] vfs_read+0x20c/0xa70 [ 552.069892][T18751] ? __pfx___mutex_lock+0x10/0x10 [ 552.069932][T18751] ? __pfx_vfs_read+0x10/0x10 [ 552.069959][T18751] ? __fget_files+0x2a/0x420 [ 552.069983][T18751] ? __fget_files+0x3a0/0x420 [ 552.070000][T18751] ? __fget_files+0x2a/0x420 [ 552.070029][T18751] ksys_read+0x150/0x270 [ 552.070056][T18751] ? __pfx_ksys_read+0x10/0x10 [ 552.070090][T18751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.070111][T18751] do_syscall_64+0x15f/0xf80 [ 552.070134][T18751] ? trace_irq_disable+0x3b/0x140 [ 552.070161][T18751] ? clear_bhb_loop+0x40/0x90 [ 552.070183][T18751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.070202][T18751] RIP: 0033:0x7f40cd75d60e [ 552.070220][T18751] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 552.070238][T18751] RSP: 002b:00007f40ce699fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 552.070260][T18751] RAX: ffffffffffffffda RBX: 00007f40ce69a6c0 RCX: 00007f40cd75d60e [ 552.070275][T18751] RDX: 000000000000000f RSI: 00007f40ce69a0a0 RDI: 0000000000000005 [ 552.070288][T18751] RBP: 00007f40ce69a090 R08: 0000000000000000 R09: 0000000000000000 [ 552.070299][T18751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.070311][T18751] R13: 00007f40cda16038 R14: 00007f40cda15fa0 R15: 00007ffd11b980d8 [ 552.070346][T18751] [ 552.291531][T18749] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3308'. [ 552.305829][T18752] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 552.486377][ T8278] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.493731][ T8278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.519242][T18756] syzkaller1: entered promiscuous mode [ 552.537503][T18756] syzkaller1: entered allmulticast mode [ 552.761057][T18762] netlink: 780 bytes leftover after parsing attributes in process `syz.4.3312'. [ 552.774480][T18759] lo speed is unknown, defaulting to 1000 [ 553.366916][T18233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.464218][T18782] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3315'. [ 553.631290][T18233] veth0_vlan: entered promiscuous mode [ 553.674415][T18233] veth1_vlan: entered promiscuous mode [ 553.701676][T18786] netlink: 'syz.4.3316': attribute type 9 has an invalid length. [ 553.773100][T18784] can: request_module (can-proto-5) failed. [ 553.795959][T18233] veth0_macvtap: entered promiscuous mode [ 553.836003][T18233] veth1_macvtap: entered promiscuous mode [ 553.903565][T18788] sctp: [Deprecated]: syz.0.3317 (pid 18788) Use of struct sctp_assoc_value in delayed_ack socket option. [ 553.903565][T18788] Use struct sctp_sack_info instead [ 553.978636][T18233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.055428][T18233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.117439][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.155018][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.234517][T18791] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3318'. [ 554.313031][T18794] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3318'. [ 554.351497][T18790] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.359669][T18790] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.522463][T18790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.538228][T18790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.611954][T18790] bridge1: left promiscuous mode [ 554.635569][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.650485][T18759] gre0 speed is unknown, defaulting to 1000 [ 554.663876][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.701840][ T8278] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.780429][ T8278] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.804315][ T8278] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.846265][ T8278] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.104546][T18814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3323'. [ 555.110206][ T6025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.159863][ T6025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.227272][ T8278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.255655][ T8278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.881811][T18838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 556.522761][T18859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3336'. [ 556.647188][T18861] netlink: 'syz.0.3337': attribute type 15 has an invalid length. [ 556.658876][T18859] sctp: [Deprecated]: syz.3.3336 (pid 18859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 556.658876][T18859] Use struct sctp_sack_info instead [ 556.742932][T18852] netlink: 'syz.3.3336': attribute type 1 has an invalid length. [ 556.789352][T18852] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3336'. [ 556.993240][T18869] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3339'. [ 557.729830][T18905] lo speed is unknown, defaulting to 1000 [ 557.954327][T18921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3352'. [ 558.061178][T18926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3353'. [ 558.075202][T18926] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3353'. [ 558.191231][ T8287] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.201973][T18921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3352'. [ 558.213514][ T8287] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.223649][ T8287] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.232735][ T8287] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.351608][T18905] gre0 speed is unknown, defaulting to 1000 [ 558.885327][T18945] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 558.937263][T18944] lo speed is unknown, defaulting to 1000 [ 559.148393][T18949] netlink: 'syz.1.3359': attribute type 32 has an invalid length. [ 559.160946][T18949] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3359'. [ 559.184059][T18949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3359'. [ 559.601038][T18953] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3360'. [ 559.648653][T18948] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 559.684308][T18951] lo speed is unknown, defaulting to 1000 [ 559.695941][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3360'. [ 559.715764][T18948] mac80211_hwsim hwsim45 wlan1: entered promiscuous mode [ 559.725688][T18948] macsec1: entered promiscuous mode [ 559.832929][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3361'. [ 560.007746][T18944] gre0 speed is unknown, defaulting to 1000 [ 560.402296][T18951] gre0 speed is unknown, defaulting to 1000 [ 560.701170][T18969] syzkaller0: entered promiscuous mode [ 560.711331][T18969] syzkaller0: entered allmulticast mode [ 561.091470][T18971] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 561.102314][T18971] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3365'. [ 561.835132][T18988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.026599][T18992] syzkaller0: entered promiscuous mode [ 562.039279][T18992] syzkaller0: entered allmulticast mode [ 563.178534][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.736368][T19007] netlink: 'syz.0.3374': attribute type 4 has an invalid length. [ 564.751731][T19007] netlink: 'syz.0.3374': attribute type 4 has an invalid length. [ 564.765893][T19007] netlink: 'syz.0.3374': attribute type 4 has an invalid length. [ 564.800561][T19009] __nla_validate_parse: 2 callbacks suppressed [ 564.800581][T19009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3375'. [ 565.192767][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3377'. [ 565.943237][T19054] syzkaller0: entered promiscuous mode [ 565.951259][T19054] syzkaller0: entered allmulticast mode [ 568.827887][T19100] vxcan3: entered promiscuous mode [ 568.836671][T19100] vxcan3: entered allmulticast mode [ 568.907896][T19103] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 569.257954][T19069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.651858][T19131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3407'. [ 569.929207][T19145] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3410'. [ 569.972063][T19145] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3410'. [ 570.137977][T19161] RDS: rds_bind could not find a transport for 0:0:900:0:9500::, load rds_tcp or rds_rdma? [ 570.214986][T19156] lo speed is unknown, defaulting to 1000 [ 570.257229][T19166] FAULT_INJECTION: forcing a failure. [ 570.257229][T19166] name failslab, interval 1, probability 0, space 0, times 0 [ 570.270961][T19167] netlink: 'syz.3.3415': attribute type 3 has an invalid length. [ 570.302441][T19166] CPU: 1 UID: 0 PID: 19166 Comm: syz.2.3414 Not tainted syzkaller #0 PREEMPT(full) [ 570.302473][T19166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 570.302485][T19166] Call Trace: [ 570.302493][T19166] [ 570.302503][T19166] dump_stack_lvl+0xe8/0x150 [ 570.302543][T19166] should_fail_ex+0x412/0x560 [ 570.302577][T19166] ? __d_alloc+0x37/0x6f0 [ 570.302602][T19166] should_failslab+0xa8/0x100 [ 570.302633][T19166] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 570.302670][T19166] __d_alloc+0x37/0x6f0 [ 570.302701][T19166] d_alloc+0x4b/0x190 [ 570.302721][T19166] ? lookup_one_qstr_excl+0xc4/0x360 [ 570.302750][T19166] lookup_one_qstr_excl+0xd8/0x360 [ 570.302774][T19166] ? lookup_noperm_common+0x245/0x430 [ 570.302801][T19166] start_dirop+0x5c/0x90 [ 570.302824][T19166] simple_start_creating+0xcc/0x110 [ 570.302848][T19166] ? __pfx_simple_start_creating+0x10/0x10 [ 570.302874][T19166] ? do_raw_spin_unlock+0xf5/0x210 [ 570.302900][T19166] ? mntput+0x65/0xc0 [ 570.302942][T19166] debugfs_start_creating+0xdb/0x1a0 [ 570.302973][T19166] __debugfs_create_file+0x6f/0x400 [ 570.303004][T19166] debugfs_create_file_full+0x3f/0x60 [ 570.303038][T19166] ref_tracker_dir_debugfs+0x197/0x360 [ 570.303062][T19166] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 570.303118][T19166] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 570.303145][T19166] ? alloc_netdev_mqs+0xa8/0x1210 [ 570.303174][T19166] ? __raw_spin_lock_init+0x45/0x100 [ 570.303204][T19166] alloc_netdev_mqs+0x274/0x1210 [ 570.303229][T19166] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 570.303262][T19166] rtnl_create_link+0x31f/0xd70 [ 570.303296][T19166] rtnl_newlink_create+0x277/0xb70 [ 570.303320][T19166] ? __pfx___nla_validate_parse+0x10/0x10 [ 570.303357][T19166] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 570.303390][T19166] ? __pfx___mutex_lock+0x10/0x10 [ 570.303432][T19166] ? ns_capable+0x89/0xe0 [ 570.303466][T19166] rtnl_newlink+0x166a/0x1bb0 [ 570.303506][T19166] ? __pfx_rtnl_newlink+0x10/0x10 [ 570.303523][T19166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.303589][T19166] ? kasan_quarantine_put+0xbb/0x1f0 [ 570.303613][T19166] ? lockdep_hardirqs_on+0x7a/0x110 [ 570.303645][T19166] ? nlmon_xmit+0xb0/0x100 [ 570.303674][T19166] ? kmem_cache_free+0x182/0x650 [ 570.303714][T19166] ? __lock_acquire+0x6b5/0x2cf0 [ 570.303750][T19166] ? __dev_queue_xmit+0x2b6/0x3950 [ 570.303779][T19166] ? __local_bh_enable_ip+0xd0/0x130 [ 570.303809][T19166] ? lockdep_hardirqs_on+0x7a/0x110 [ 570.303836][T19166] ? __dev_queue_xmit+0x2b6/0x3950 [ 570.303858][T19166] ? __local_bh_enable_ip+0xd0/0x130 [ 570.303884][T19166] ? __dev_queue_xmit+0x2b6/0x3950 [ 570.303925][T19166] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 570.303972][T19166] ? __pfx_rtnl_newlink+0x10/0x10 [ 570.303992][T19166] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 570.304027][T19166] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 570.304055][T19166] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 570.304083][T19166] ? ref_tracker_free+0x693/0x840 [ 570.304107][T19166] ? __pfx_ref_tracker_free+0x10/0x10 [ 570.304142][T19166] netlink_rcv_skb+0x232/0x4b0 [ 570.304163][T19166] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 570.304196][T19166] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 570.304214][T19166] ? lockdep_hardirqs_on+0x7a/0x110 [ 570.304269][T19166] netlink_unicast+0x75c/0x8e0 [ 570.304314][T19166] netlink_sendmsg+0x813/0xb40 [ 570.304347][T19166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.304373][T19166] ? aa_sock_msg_perm+0xf1/0x1b0 [ 570.304396][T19166] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 570.304422][T19166] ____sys_sendmsg+0x972/0x9f0 [ 570.304444][T19166] ? __might_fault+0xaf/0x130 [ 570.304475][T19166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 570.304509][T19166] ? import_iovec+0x73/0xa0 [ 570.304538][T19166] ___sys_sendmsg+0x2a5/0x360 [ 570.304559][T19166] ? __lock_acquire+0x6b5/0x2cf0 [ 570.304595][T19166] ? __pfx____sys_sendmsg+0x10/0x10 [ 570.304661][T19166] ? __fget_files+0x2a/0x420 [ 570.304681][T19166] ? __fget_files+0x3a0/0x420 [ 570.304714][T19166] __x64_sys_sendmsg+0x1bd/0x2a0 [ 570.304740][T19166] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 570.304776][T19166] ? __pfx_ksys_write+0x10/0x10 [ 570.304813][T19166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.304836][T19166] do_syscall_64+0x15f/0xf80 [ 570.304864][T19166] ? trace_irq_disable+0x3b/0x140 [ 570.304892][T19166] ? clear_bhb_loop+0x40/0x90 [ 570.304927][T19166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.304948][T19166] RIP: 0033:0x7f99b999cdd9 [ 570.304967][T19166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.304984][T19166] RSP: 002b:00007f99ba91d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.305006][T19166] RAX: ffffffffffffffda RBX: 00007f99b9c15fa0 RCX: 00007f99b999cdd9 [ 570.305021][T19166] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 570.305034][T19166] RBP: 00007f99ba91d090 R08: 0000000000000000 R09: 0000000000000000 [ 570.305046][T19166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.305058][T19166] R13: 00007f99b9c16038 R14: 00007f99b9c15fa0 R15: 00007fff80919628 [ 570.305095][T19166] [ 570.350815][T19171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3416'. [ 570.626956][T19169] sctp: [Deprecated]: syz.3.3415 (pid 19169) Use of int in max_burst socket option. [ 570.626956][T19169] Use struct sctp_assoc_value instead [ 570.882199][T19171] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 570.929778][T19156] gre0 speed is unknown, defaulting to 1000 [ 571.148741][T19196] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.228030][T19197] vlan2: entered allmulticast mode [ 571.247925][T19204] netlink: 'syz.0.3420': attribute type 1 has an invalid length. [ 571.399877][T19213] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 571.476024][T19204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 571.556154][T19190] vlan0: entered allmulticast mode [ 571.570568][T19190] bond2: entered allmulticast mode [ 571.596948][T19198] lo speed is unknown, defaulting to 1000 [ 571.598906][T19212] batadv_slave_0: entered promiscuous mode [ 571.650010][T19218] Cannot find set identified by id 0 to match [ 571.659371][T19215] batadv_slave_0: left promiscuous mode [ 571.779865][T19221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3427'. [ 572.147724][T19229] IPVS: length: 24 != 805307352 [ 572.528424][T19198] gre0 speed is unknown, defaulting to 1000 [ 572.528502][T19206] lo speed is unknown, defaulting to 1000 [ 573.287401][T19206] gre0 speed is unknown, defaulting to 1000 [ 573.377415][T19251] syzkaller0: entered promiscuous mode [ 573.392181][T19251] syzkaller0: entered allmulticast mode [ 573.874431][T19261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3437'. [ 573.885840][T19261] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3437'. [ 574.689381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 576.567859][T19267] netlink: 'syz.1.3439': attribute type 3 has an invalid length. [ 576.849552][T19273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3440'. [ 577.054708][T19278] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3441'. [ 577.088675][T19278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3441'. [ 577.334262][T19278] openvswitch: netlink: Duplicate or invalid key (type 0). [ 577.354011][T19278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.389084][T19278] syzkaller0: entered promiscuous mode [ 577.395337][T19278] syzkaller0: entered allmulticast mode [ 577.397044][T19285] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3443'. [ 577.643245][T19285] dvmrp6: entered allmulticast mode [ 577.873435][T19291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3446'. [ 577.967261][T19291] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3446'. [ 578.075650][T19291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3446'. [ 578.354854][T19298] lo speed is unknown, defaulting to 1000 [ 578.443280][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3450'. [ 578.978533][T19318] syzkaller0: entered promiscuous mode [ 579.008628][T19323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3454'. [ 579.011123][T19318] syzkaller0: entered allmulticast mode [ 579.504584][T19298] gre0 speed is unknown, defaulting to 1000 [ 579.668401][T19325] syzkaller0: entered promiscuous mode [ 579.695818][T19325] syzkaller0: entered allmulticast mode [ 579.830303][T19340] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3458'. [ 580.611560][T15849] Bluetooth: hci5: command 0x0406 tx timeout [ 582.363836][T19338] lo speed is unknown, defaulting to 1000 [ 582.754399][T19363] __nla_validate_parse: 1 callbacks suppressed [ 582.754420][T19363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3464'. [ 582.772113][T19363] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3464'. [ 583.073738][T19376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3467'. [ 583.126175][T19371] team0 (unregistering): Port device team_slave_0 removed [ 583.186344][T19371] team0 (unregistering): Port device team_slave_1 removed [ 583.356185][T19338] gre0 speed is unknown, defaulting to 1000 [ 583.426514][T19384] netlink: 'syz.1.3469': attribute type 3 has an invalid length. [ 583.563781][T19387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.621980][T19386] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3471'. [ 583.646357][T19387] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3471'. [ 583.898522][T19399] erspan0: entered promiscuous mode [ 583.910335][T19399] macsec2: entered promiscuous mode [ 583.938384][T19399] erspan0: left promiscuous mode [ 584.041474][T19358] lo speed is unknown, defaulting to 1000 [ 584.517030][T19419] xt_hashlimit: size too large, truncated to 1048576 [ 584.600345][T19358] gre0 speed is unknown, defaulting to 1000 [ 585.182373][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3481'. [ 585.663178][T19456] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 585.859405][T19460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 587.061606][T19485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3496'. [ 587.309166][T19489] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3499'. [ 587.355303][T19492] syz_tun: entered allmulticast mode [ 587.465622][T19492] syz_tun: left allmulticast mode [ 587.664024][T19504] tipc: Started in network mode [ 587.673245][T19504] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 587.704866][T19504] tipc: Enabled bearer , priority 14 [ 588.298588][T19516] lo speed is unknown, defaulting to 1000 [ 588.872431][T19543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3516'. [ 588.876663][T19529] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.021886][ T10] tipc: Node number set to 10463914 [ 589.225052][T19529] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.705831][T19529] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.740429][T19516] gre0 speed is unknown, defaulting to 1000 [ 589.884042][T19529] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.132211][ T13] wlan1: Trigger new scan to find an IBSS to join [ 590.172650][T19582] syzkaller1: entered promiscuous mode [ 590.178417][T19582] syzkaller1: entered allmulticast mode [ 590.403124][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.484199][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.536652][T19595] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3529'. [ 590.572271][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.622341][T19592] lo speed is unknown, defaulting to 1000 [ 590.622373][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.737424][T19601] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3531'. [ 591.525624][T19627] syzkaller1: entered promiscuous mode [ 591.540898][T19627] syzkaller1: entered allmulticast mode [ 591.566891][T19592] gre0 speed is unknown, defaulting to 1000 [ 591.723048][T19640] smc: net device wlan0 applied user defined pnetid SYZ0 [ 591.755163][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3544'. [ 591.955224][T19646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3545'. [ 592.032373][T19654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3547'. [ 592.174710][T19644] lo speed is unknown, defaulting to 1000 [ 592.582248][T19672] netlink: 'syz.2.3553': attribute type 1 has an invalid length. [ 592.671915][T19672] netlink: 'syz.2.3553': attribute type 3 has an invalid length. [ 592.692047][T19672] netlink: 'syz.2.3553': attribute type 1 has an invalid length. [ 593.112032][T19683] veth3: entered allmulticast mode [ 593.171164][ T13] wlan1: Trigger new scan to find an IBSS to join [ 593.331513][T19688] syzkaller1: entered promiscuous mode [ 593.350207][T19688] syzkaller1: entered allmulticast mode [ 593.362480][T19693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3558'. [ 593.413682][T19695] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3559'. [ 593.732699][T19704] netlink: 'syz.3.3562': attribute type 1 has an invalid length. [ 593.743110][T19644] gre0 speed is unknown, defaulting to 1000 [ 593.744089][T19704] netlink: 'syz.3.3562': attribute type 1 has an invalid length. [ 593.794985][T19704] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.3562'. [ 593.917598][T19708] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3563'. [ 594.367139][T19716] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3566'. [ 594.401408][T19704] lo speed is unknown, defaulting to 1000 [ 594.412606][T19716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3566'. [ 594.777391][T19725] can: request_module (can-proto-5) failed. [ 594.885175][T19727] vlan0: entered allmulticast mode [ 594.904136][T19727] veth0_vlan: entered allmulticast mode [ 595.425564][T19726] lo speed is unknown, defaulting to 1000 [ 595.432934][T19704] gre0 speed is unknown, defaulting to 1000 [ 595.544180][T19741] syzkaller1: entered promiscuous mode [ 595.566935][T19741] syzkaller1: entered allmulticast mode [ 595.853180][T19747] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3575'. [ 596.016645][T19751] veth1_to_bond: entered allmulticast mode [ 596.024049][T19752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3577'. [ 596.025277][ T29] hsr0: entered promiscuous mode [ 596.065920][T19749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3576'. [ 596.085681][T19752] veth1_to_bond (unregistering): left allmulticast mode [ 596.121782][T19752] bond0: (slave bond_slave_1): Releasing backup interface [ 596.142908][ T8278] wlan1: Trigger new scan to find an IBSS to join [ 596.155991][T19753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3576'. [ 596.296858][T19755] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3576'. [ 596.324791][T19754] vlan2: entered allmulticast mode [ 596.354504][T19754] bond0: entered allmulticast mode [ 596.379883][T19754] bond_slave_0: entered allmulticast mode [ 596.390759][T19754] bond_slave_1: entered allmulticast mode [ 596.448394][T19755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.469517][T19755] bond_slave_0: left allmulticast mode [ 596.486441][T19755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.503015][T19755] bond_slave_1: left allmulticast mode [ 596.524399][T19755] bond0 (unregistering): Released all slaves [ 596.545124][T19726] gre0 speed is unknown, defaulting to 1000 [ 597.050661][ T13] wlan1: Creating new IBSS network, BSSID f2:1a:56:b1:89:ee [ 598.552988][T19776] syzkaller1: entered promiscuous mode [ 598.595192][T19776] syzkaller1: entered allmulticast mode [ 598.793755][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3583'. [ 598.847756][T19782] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3583'. [ 598.905733][T19781] lo speed is unknown, defaulting to 1000 [ 600.020691][T19794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3585'. [ 602.683759][T19781] gre0 speed is unknown, defaulting to 1000 [ 602.690201][T19794] bond0: entered promiscuous mode [ 602.690227][T19794] bond_slave_0: entered promiscuous mode [ 602.693546][T19794] bond0: left promiscuous mode [ 602.706370][T19794] bond_slave_0: left promiscuous mode [ 603.031389][T19820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.117180][T19820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.235967][T19824] ip_vti0: entered promiscuous mode [ 603.262706][T19824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3588'. [ 603.445885][T19836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3592'. [ 603.471262][T19837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3592'. [ 603.760853][T19840] lo speed is unknown, defaulting to 1000 [ 604.178492][T19869] netlink: 39 bytes leftover after parsing attributes in process `syz.3.3599'. [ 604.204922][T19869] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3599'. [ 604.341909][T19840] gre0 speed is unknown, defaulting to 1000 [ 604.453611][T19879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3602'. [ 604.623539][T19887] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3604'. [ 604.750939][T19889] FAULT_INJECTION: forcing a failure. [ 604.750939][T19889] name failslab, interval 1, probability 0, space 0, times 0 [ 604.765275][T19889] CPU: 0 UID: 0 PID: 19889 Comm: syz.0.3605 Not tainted syzkaller #0 PREEMPT(full) [ 604.765305][T19889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 604.765317][T19889] Call Trace: [ 604.765326][T19889] [ 604.765334][T19889] dump_stack_lvl+0xe8/0x150 [ 604.765373][T19889] should_fail_ex+0x412/0x560 [ 604.765407][T19889] ? alloc_inode+0x6a/0x1b0 [ 604.765437][T19889] should_failslab+0xa8/0x100 [ 604.765467][T19889] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 604.765491][T19889] ? simple_start_creating+0xcc/0x110 [ 604.765522][T19889] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 604.765551][T19889] alloc_inode+0x6a/0x1b0 [ 604.765582][T19889] new_inode+0x22/0x170 [ 604.765609][T19889] __debugfs_create_file+0xb8/0x400 [ 604.765642][T19889] debugfs_create_file_full+0x3f/0x60 [ 604.765675][T19889] ref_tracker_dir_debugfs+0x197/0x360 [ 604.765699][T19889] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 604.765752][T19889] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 604.765780][T19889] ? alloc_netdev_mqs+0xa8/0x1210 [ 604.765809][T19889] ? __raw_spin_lock_init+0x45/0x100 [ 604.765845][T19889] alloc_netdev_mqs+0x274/0x1210 [ 604.765869][T19889] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 604.765902][T19889] rtnl_create_link+0x31f/0xd70 [ 604.765937][T19889] rtnl_newlink_create+0x277/0xb70 [ 604.765961][T19889] ? __pfx___nla_validate_parse+0x10/0x10 [ 604.766007][T19889] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 604.766034][T19889] ? __pfx___mutex_lock+0x10/0x10 [ 604.766077][T19889] ? ns_capable+0x89/0xe0 [ 604.766112][T19889] rtnl_newlink+0x166a/0x1bb0 [ 604.766150][T19889] ? __pfx_rtnl_newlink+0x10/0x10 [ 604.766178][T19889] ? __lock_acquire+0x6b5/0x2cf0 [ 604.766211][T19889] ? __lock_acquire+0x6b5/0x2cf0 [ 604.766252][T19889] ? unwind_next_frame+0xa6/0x2550 [ 604.766283][T19889] ? unwind_next_frame+0xa6/0x2550 [ 604.766308][T19889] ? is_bpf_text_address+0x26/0x2b0 [ 604.766352][T19889] ? is_bpf_text_address+0x26/0x2b0 [ 604.766388][T19889] ? __lock_acquire+0x6b5/0x2cf0 [ 604.766422][T19889] ? kernel_text_address+0xa5/0xe0 [ 604.766449][T19889] ? __kernel_text_address+0xd/0x30 [ 604.766473][T19889] ? unwind_get_return_address+0x4d/0x90 [ 604.766495][T19889] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 604.766523][T19889] ? arch_stack_walk+0xfb/0x150 [ 604.766560][T19889] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 604.766610][T19889] ? __pfx_rtnl_newlink+0x10/0x10 [ 604.766630][T19889] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 604.766658][T19889] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 604.766682][T19889] ? netlink_sendmsg+0x5d4/0xb40 [ 604.766706][T19889] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 604.766736][T19889] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 604.766768][T19889] ? __lock_acquire+0x6b5/0x2cf0 [ 604.766814][T19889] netlink_rcv_skb+0x232/0x4b0 [ 604.766837][T19889] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 604.766870][T19889] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 604.766908][T19889] ? netlink_deliver_tap+0x2e/0x1b0 [ 604.766929][T19889] ? netlink_deliver_tap+0x2e/0x1b0 [ 604.766957][T19889] netlink_unicast+0x75c/0x8e0 [ 604.767009][T19889] netlink_sendmsg+0x813/0xb40 [ 604.767043][T19889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.767070][T19889] ? aa_sock_msg_perm+0xf1/0x1b0 [ 604.767093][T19889] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 604.767122][T19889] ____sys_sendmsg+0x972/0x9f0 [ 604.767144][T19889] ? __might_fault+0xaf/0x130 [ 604.767176][T19889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 604.767210][T19889] ? import_iovec+0x73/0xa0 [ 604.767239][T19889] ___sys_sendmsg+0x2a5/0x360 [ 604.767260][T19889] ? __lock_acquire+0x6b5/0x2cf0 [ 604.767294][T19889] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.767357][T19889] ? __fget_files+0x2a/0x420 [ 604.767379][T19889] ? __fget_files+0x3a0/0x420 [ 604.767414][T19889] __x64_sys_sendmsg+0x1bd/0x2a0 [ 604.767440][T19889] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 604.767474][T19889] ? __pfx_ksys_write+0x10/0x10 [ 604.767512][T19889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.767534][T19889] do_syscall_64+0x15f/0xf80 [ 604.767561][T19889] ? trace_irq_disable+0x3b/0x140 [ 604.767588][T19889] ? clear_bhb_loop+0x40/0x90 [ 604.767615][T19889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.767635][T19889] RIP: 0033:0x7f4165f9cdd9 [ 604.767656][T19889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.767674][T19889] RSP: 002b:00007f4166d7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 604.767697][T19889] RAX: ffffffffffffffda RBX: 00007f4166215fa0 RCX: 00007f4165f9cdd9 [ 604.767712][T19889] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 604.767725][T19889] RBP: 00007f4166d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 604.767737][T19889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.767748][T19889] R13: 00007f4166216038 R14: 00007f4166215fa0 R15: 00007ffe8a37e938 [ 604.767785][T19889] [ 604.767994][T19889] debugfs: out of free dentries, can not create file 'netdev@ffff8880368ca660' [ 605.906572][T19909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3612'. [ 606.323839][T19920] netlink: 'syz.0.3616': attribute type 1 has an invalid length. [ 606.451542][T19920] 8021q: adding VLAN 0 to HW filter on device bond3 [ 606.500284][T19924] bond3: (slave veth3): Enslaving as an active interface with a down link [ 606.510466][T19923] FAULT_INJECTION: forcing a failure. [ 606.510466][T19923] name failslab, interval 1, probability 0, space 0, times 0 [ 606.526942][T19923] CPU: 1 UID: 0 PID: 19923 Comm: syz.3.3617 Not tainted syzkaller #0 PREEMPT(full) [ 606.526969][T19923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 606.526982][T19923] Call Trace: [ 606.526999][T19923] [ 606.527008][T19923] dump_stack_lvl+0xe8/0x150 [ 606.527045][T19923] should_fail_ex+0x412/0x560 [ 606.527085][T19923] should_failslab+0xa8/0x100 [ 606.527114][T19923] ? security_inode_alloc+0x39/0x310 [ 606.527138][T19923] kmem_cache_alloc_noprof+0x87/0x650 [ 606.527171][T19923] security_inode_alloc+0x39/0x310 [ 606.527195][T19923] inode_init_always_gfp+0x9c8/0xda0 [ 606.527233][T19923] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 606.527262][T19923] alloc_inode+0x82/0x1b0 [ 606.527294][T19923] new_inode+0x22/0x170 [ 606.527321][T19923] __debugfs_create_file+0xb8/0x400 [ 606.527354][T19923] debugfs_create_file_full+0x3f/0x60 [ 606.527387][T19923] ref_tracker_dir_debugfs+0x197/0x360 [ 606.527411][T19923] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 606.527465][T19923] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 606.527493][T19923] ? alloc_netdev_mqs+0xa8/0x1210 [ 606.527522][T19923] ? __raw_spin_lock_init+0x45/0x100 [ 606.527552][T19923] alloc_netdev_mqs+0x274/0x1210 [ 606.527577][T19923] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 606.527609][T19923] rtnl_create_link+0x31f/0xd70 [ 606.527644][T19923] rtnl_newlink_create+0x277/0xb70 [ 606.527667][T19923] ? __pfx___nla_validate_parse+0x10/0x10 [ 606.527698][T19923] ? __mutex_lock+0x606/0x1550 [ 606.527731][T19923] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 606.527756][T19923] ? __pfx___mutex_lock+0x10/0x10 [ 606.527798][T19923] ? ns_capable+0x89/0xe0 [ 606.527832][T19923] rtnl_newlink+0x166a/0x1bb0 [ 606.527872][T19923] ? __pfx_rtnl_newlink+0x10/0x10 [ 606.527890][T19923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.527956][T19923] ? kasan_quarantine_put+0xbb/0x1f0 [ 606.527980][T19923] ? lockdep_hardirqs_on+0x7a/0x110 [ 606.528027][T19923] ? nlmon_xmit+0xb0/0x100 [ 606.528054][T19923] ? kmem_cache_free+0x182/0x650 [ 606.528095][T19923] ? __lock_acquire+0x6b5/0x2cf0 [ 606.528130][T19923] ? __dev_queue_xmit+0x2b6/0x3950 [ 606.528160][T19923] ? __local_bh_enable_ip+0xd0/0x130 [ 606.528190][T19923] ? lockdep_hardirqs_on+0x7a/0x110 [ 606.528216][T19923] ? __dev_queue_xmit+0x2b6/0x3950 [ 606.528239][T19923] ? __local_bh_enable_ip+0xd0/0x130 [ 606.528264][T19923] ? __dev_queue_xmit+0x2b6/0x3950 [ 606.528296][T19923] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 606.528343][T19923] ? __pfx_rtnl_newlink+0x10/0x10 [ 606.528362][T19923] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 606.528398][T19923] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 606.528427][T19923] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 606.528456][T19923] ? ref_tracker_free+0x693/0x840 [ 606.528482][T19923] ? __pfx_ref_tracker_free+0x10/0x10 [ 606.528517][T19923] netlink_rcv_skb+0x232/0x4b0 [ 606.528540][T19923] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 606.528573][T19923] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 606.528612][T19923] ? netlink_deliver_tap+0x2e/0x1b0 [ 606.528633][T19923] ? netlink_deliver_tap+0x2e/0x1b0 [ 606.528662][T19923] netlink_unicast+0x75c/0x8e0 [ 606.528702][T19923] netlink_sendmsg+0x813/0xb40 [ 606.528735][T19923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.528761][T19923] ? aa_sock_msg_perm+0xf1/0x1b0 [ 606.528784][T19923] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 606.528812][T19923] ____sys_sendmsg+0x972/0x9f0 [ 606.528834][T19923] ? __might_fault+0xaf/0x130 [ 606.528864][T19923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 606.528897][T19923] ? import_iovec+0x73/0xa0 [ 606.528927][T19923] ___sys_sendmsg+0x2a5/0x360 [ 606.528948][T19923] ? __lock_acquire+0x6b5/0x2cf0 [ 606.528981][T19923] ? __pfx____sys_sendmsg+0x10/0x10 [ 606.529053][T19923] ? __fget_files+0x2a/0x420 [ 606.529073][T19923] ? __fget_files+0x3a0/0x420 [ 606.529104][T19923] __x64_sys_sendmsg+0x1bd/0x2a0 [ 606.529129][T19923] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 606.529162][T19923] ? __pfx_ksys_write+0x10/0x10 [ 606.529196][T19923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.529218][T19923] do_syscall_64+0x15f/0xf80 [ 606.529244][T19923] ? trace_irq_disable+0x3b/0x140 [ 606.529270][T19923] ? clear_bhb_loop+0x40/0x90 [ 606.529296][T19923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.529314][T19923] RIP: 0033:0x7f2125d9cdd9 [ 606.529335][T19923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.529353][T19923] RSP: 002b:00007f2126c0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.529375][T19923] RAX: ffffffffffffffda RBX: 00007f2126015fa0 RCX: 00007f2125d9cdd9 [ 606.529390][T19923] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 606.529403][T19923] RBP: 00007f2126c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 606.529416][T19923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.529428][T19923] R13: 00007f2126016038 R14: 00007f2126015fa0 R15: 00007fff6a0fa538 [ 606.529463][T19923] [ 607.073320][T19923] debugfs: out of free dentries, can not create file 'netdev@ffff888078412660' [ 607.100003][T19925] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 607.101992][T19927] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3618'. [ 607.116253][T19925] bond3: (slave batadv2): making interface the new active one [ 607.117685][T19925] batadv2: entered promiscuous mode [ 607.118158][T19925] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 607.320291][T19932] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3619'. [ 607.425678][T19935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 607.566368][T19950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3625'. [ 607.757819][ T76] nci: nci_rsp_packet: unknown rsp opcode 0x606 [ 607.905571][T19966] FAULT_INJECTION: forcing a failure. [ 607.905571][T19966] name failslab, interval 1, probability 0, space 0, times 0 [ 607.928556][T19966] CPU: 1 UID: 0 PID: 19966 Comm: syz.4.3629 Not tainted syzkaller #0 PREEMPT(full) [ 607.928588][T19966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 607.928601][T19966] Call Trace: [ 607.928609][T19966] [ 607.928618][T19966] dump_stack_lvl+0xe8/0x150 [ 607.928657][T19966] should_fail_ex+0x412/0x560 [ 607.928702][T19966] should_failslab+0xa8/0x100 [ 607.928730][T19966] ? security_inode_alloc+0x39/0x310 [ 607.928753][T19966] kmem_cache_alloc_noprof+0x87/0x650 [ 607.928797][T19966] security_inode_alloc+0x39/0x310 [ 607.928822][T19966] inode_init_always_gfp+0x9c8/0xda0 [ 607.928862][T19966] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 607.928890][T19966] alloc_inode+0x82/0x1b0 [ 607.928922][T19966] new_inode+0x22/0x170 [ 607.928948][T19966] __debugfs_create_file+0xb8/0x400 [ 607.928982][T19966] debugfs_create_file_full+0x3f/0x60 [ 607.929014][T19966] ref_tracker_dir_debugfs+0x197/0x360 [ 607.929037][T19966] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 607.929092][T19966] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 607.929119][T19966] ? alloc_netdev_mqs+0xa8/0x1210 [ 607.929148][T19966] ? __raw_spin_lock_init+0x45/0x100 [ 607.929178][T19966] alloc_netdev_mqs+0x274/0x1210 [ 607.929202][T19966] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 607.929235][T19966] rtnl_create_link+0x31f/0xd70 [ 607.929270][T19966] rtnl_newlink_create+0x277/0xb70 [ 607.929293][T19966] ? __pfx___nla_validate_parse+0x10/0x10 [ 607.929325][T19966] ? __mutex_lock+0x606/0x1550 [ 607.929358][T19966] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 607.929385][T19966] ? __pfx___mutex_lock+0x10/0x10 [ 607.929427][T19966] ? ns_capable+0x89/0xe0 [ 607.929461][T19966] rtnl_newlink+0x166a/0x1bb0 [ 607.929501][T19966] ? __pfx_rtnl_newlink+0x10/0x10 [ 607.929519][T19966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.929586][T19966] ? kasan_quarantine_put+0xbb/0x1f0 [ 607.929610][T19966] ? lockdep_hardirqs_on+0x7a/0x110 [ 607.929641][T19966] ? nlmon_xmit+0xb0/0x100 [ 607.929669][T19966] ? kmem_cache_free+0x182/0x650 [ 607.929707][T19966] ? __lock_acquire+0x6b5/0x2cf0 [ 607.929742][T19966] ? __dev_queue_xmit+0x2b6/0x3950 [ 607.929779][T19966] ? __local_bh_enable_ip+0xd0/0x130 [ 607.929810][T19966] ? lockdep_hardirqs_on+0x7a/0x110 [ 607.929835][T19966] ? __dev_queue_xmit+0x2b6/0x3950 [ 607.929857][T19966] ? __local_bh_enable_ip+0xd0/0x130 [ 607.929883][T19966] ? __dev_queue_xmit+0x2b6/0x3950 [ 607.929913][T19966] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 607.929963][T19966] ? __pfx_rtnl_newlink+0x10/0x10 [ 607.929981][T19966] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 607.930015][T19966] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 607.930043][T19966] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 607.930071][T19966] ? ref_tracker_free+0x693/0x840 [ 607.930095][T19966] ? __pfx_ref_tracker_free+0x10/0x10 [ 607.930130][T19966] netlink_rcv_skb+0x232/0x4b0 [ 607.930153][T19966] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 607.930186][T19966] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 607.930224][T19966] ? netlink_deliver_tap+0x2e/0x1b0 [ 607.930243][T19966] ? netlink_deliver_tap+0x2e/0x1b0 [ 607.930270][T19966] netlink_unicast+0x75c/0x8e0 [ 607.930313][T19966] netlink_sendmsg+0x813/0xb40 [ 607.930347][T19966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.930373][T19966] ? aa_sock_msg_perm+0xf1/0x1b0 [ 607.930397][T19966] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 607.930426][T19966] ____sys_sendmsg+0x972/0x9f0 [ 607.930450][T19966] ? __might_fault+0xaf/0x130 [ 607.930481][T19966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 607.930515][T19966] ? import_iovec+0x73/0xa0 [ 607.930543][T19966] ___sys_sendmsg+0x2a5/0x360 [ 607.930564][T19966] ? __lock_acquire+0x6b5/0x2cf0 [ 607.930598][T19966] ? __pfx____sys_sendmsg+0x10/0x10 [ 607.930663][T19966] ? __fget_files+0x2a/0x420 [ 607.930684][T19966] ? __fget_files+0x3a0/0x420 [ 607.930718][T19966] __x64_sys_sendmsg+0x1bd/0x2a0 [ 607.930746][T19966] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 607.930790][T19966] ? __pfx_ksys_write+0x10/0x10 [ 607.930826][T19966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.930848][T19966] do_syscall_64+0x15f/0xf80 [ 607.930874][T19966] ? trace_irq_disable+0x3b/0x140 [ 607.930901][T19966] ? clear_bhb_loop+0x40/0x90 [ 607.930926][T19966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.930946][T19966] RIP: 0033:0x7f941999cdd9 [ 607.930967][T19966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.930984][T19966] RSP: 002b:00007f941a7d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.931008][T19966] RAX: ffffffffffffffda RBX: 00007f9419c15fa0 RCX: 00007f941999cdd9 [ 607.931022][T19966] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 607.931033][T19966] RBP: 00007f941a7d1090 R08: 0000000000000000 R09: 0000000000000000 [ 607.931045][T19966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 607.931056][T19966] R13: 00007f9419c16038 R14: 00007f9419c15fa0 R15: 00007ffc42a52238 [ 607.931092][T19966] [ 608.431946][T19957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 608.440538][T19966] debugfs: out of free dentries, can not create file 'netdev@ffff888067e86660' [ 608.516918][T19973] netlink: 'syz.0.3630': attribute type 1 has an invalid length. [ 608.662807][T19976] bond4: entered promiscuous mode [ 608.684038][T19976] bond4: entered allmulticast mode [ 608.705035][T19976] 8021q: adding VLAN 0 to HW filter on device bond4 [ 608.803941][T19983] netlink: 'syz.4.3633': attribute type 13 has an invalid length. [ 608.855494][T19983] netlink: 'syz.4.3633': attribute type 17 has an invalid length. [ 608.865626][T19979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3633'. [ 608.970362][T19995] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 608.973514][T19983] ip_vti0: left promiscuous mode [ 609.272361][T20008] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3634'. [ 609.282570][T20008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3634'. [ 609.313597][T20008] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3634'. [ 609.325683][T20008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3634'. [ 609.339027][T19983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 610.044021][T20022] tipc: Resetting bearer [ 610.110637][T20026] tipc: Started in network mode [ 610.121991][T20026] tipc: Node identity 4246, cluster identity 4711 [ 610.130879][T20026] tipc: Node number set to 16966 [ 610.163168][T20024] lo speed is unknown, defaulting to 1000 [ 610.413561][T20034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.739925][T20024] gre0 speed is unknown, defaulting to 1000 [ 610.748600][T20039] lo speed is unknown, defaulting to 1000 [ 610.838029][T20042] ipvlan2: entered allmulticast mode [ 610.851200][T20042] syz_tun: entered allmulticast mode [ 611.125246][T20049] __nla_validate_parse: 4 callbacks suppressed [ 611.125266][T20049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3653'. [ 611.219675][T20051] xt_recent: hitcount (4294967292) is larger than allowed maximum (65535) [ 611.253820][ T30] audit: type=1804 audit(1777043522.775:8): pid=20051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3654" name="/newroot/196/cgroup.controllers" dev="tmpfs" ino=1020 res=1 errno=0 [ 611.320793][ T30] audit: type=1800 audit(1777043522.775:9): pid=20051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3654" name="cgroup.controllers" dev="tmpfs" ino=1020 res=0 errno=0 [ 611.350107][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 611.381450][ T30] audit: type=1800 audit(1777043522.805:10): pid=20051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3654" name="cgroup.controllers" dev="tmpfs" ino=1020 res=0 errno=0 [ 611.504541][T20045] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.595152][T20049] ipvlan2: entered allmulticast mode [ 611.646622][T20039] gre0 speed is unknown, defaulting to 1000 [ 611.812692][T20045] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.957027][T20070] netlink: 'syz.2.3658': attribute type 21 has an invalid length. [ 611.972614][T20070] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3658'. [ 612.056196][T20045] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.222103][T20045] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.779390][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.833542][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.937287][T20084] netlink: 'syz.2.3663': attribute type 1 has an invalid length. [ 613.035010][T20085] x_tables: duplicate underflow at hook 3 [ 613.081606][T20045] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.206663][T20045] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.537869][T20093] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3666'. [ 613.882426][T20109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3672'. [ 613.895405][T20109] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 614.216491][T20126] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 614.295431][T20131] syzkaller1: entered promiscuous mode [ 614.301672][T20131] syzkaller1: entered allmulticast mode [ 614.476367][T20135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3681'. [ 615.154530][T20154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3687'. [ 615.169143][T20156] SET target dimension over the limit! [ 615.379482][T20160] netlink: 'syz.2.3689': attribute type 4 has an invalid length. [ 615.405036][T20160] netlink: 'syz.2.3689': attribute type 8 has an invalid length. [ 615.427368][T20160] netlink: 'syz.2.3689': attribute type 1 has an invalid length. [ 615.440702][T20160] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3689'. [ 615.450395][T20160] NCSI netlink: No device for ifindex 0 [ 615.467843][T20170] netlink: 'syz.1.3691': attribute type 7 has an invalid length. [ 615.467987][T20171] netlink: 'syz.1.3691': attribute type 7 has an invalid length. [ 616.336061][T20201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3699'. [ 616.346984][T20200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3699'. [ 616.385687][T20200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3699'. [ 616.789482][T20216] pim6reg: entered allmulticast mode [ 616.810664][T20219] pim6reg: left allmulticast mode [ 617.484873][T20239] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3712'. [ 617.512427][T20239] .70·: renamed from hsr0 [ 617.545102][T20239] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 617.591750][T20239] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.619565][T20239] .70·: entered allmulticast mode [ 617.627271][T20239] hsr_slave_0: entered allmulticast mode [ 617.641206][T20239] hsr_slave_1: entered allmulticast mode [ 617.662641][T20239] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 617.980224][T20250] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3716'. [ 618.166264][T20254] netlink: 'syz.0.3717': attribute type 1 has an invalid length. [ 618.223390][T20254] netlink: 'syz.0.3717': attribute type 2 has an invalid length. [ 618.271776][T20249] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.279657][T20249] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.570975][T20266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3719'. [ 619.273644][T20249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.339840][T20249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.736095][T20249] vlan2: left promiscuous mode [ 619.748920][T20249] bridge0: left promiscuous mode [ 619.857635][T20268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 619.865792][T20274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3721'. [ 619.887650][ T76] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.919102][ T76] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.048578][ T76] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.064936][ T76] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.075863][ T76] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.085541][ T76] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.138221][T20281] netlink: 'syz.3.3723': attribute type 12 has an invalid length. [ 620.147739][T20281] netlink: 'syz.3.3723': attribute type 29 has an invalid length. [ 620.157579][T20281] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3723'. [ 620.167265][T20281] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3723'. [ 620.183715][ T76] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.200288][ T76] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.290480][ T966] batadv2: left promiscuous mode [ 620.416630][T20295] syzkaller1: entered promiscuous mode [ 620.439904][T20295] syzkaller1: entered allmulticast mode [ 620.666745][T20307] macsec1: entered promiscuous mode [ 620.740104][T20303] No such timeout policy "syz0" [ 620.874522][T20310] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3733'. [ 621.449522][T20326] lo speed is unknown, defaulting to 1000 [ 621.737035][T20340] bond2: invalid ARP target 0.0.0.0 specified for addition [ 621.761427][T20340] bond2: option arp_ip_target: invalid value (0) [ 621.782125][T20340] bond2 (unregistering): Released all slaves [ 621.862886][T20347] __nla_validate_parse: 1 callbacks suppressed [ 621.862907][T20347] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3744'. [ 622.116627][T20326] gre0 speed is unknown, defaulting to 1000 [ 622.156682][T20357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3749'. [ 622.235691][T20357] tun0: tun_chr_ioctl cmd 1074812118 [ 622.248231][T20357] tun0: tun_chr_ioctl cmd 1074033169 [ 622.395226][T20363] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3750'. [ 622.807875][T20379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3756'. [ 623.724142][T20413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3763'. [ 623.815834][T20416] openvswitch: netlink: Message has 8 unknown bytes. [ 623.973827][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880a9faa000: rx timeout, send abort [ 624.483411][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069ce1800: rx timeout, send abort [ 624.491772][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880a9faa000: abort rx timeout. Force session deactivation [ 624.622945][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.994546][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069ce1800: abort rx timeout. Force session deactivation [ 627.227922][T20454] syzkaller0: entered promiscuous mode [ 627.233579][T20454] syzkaller0: entered allmulticast mode [ 627.615328][T20475] vlan3: entered promiscuous mode [ 627.625716][T20475] geneve1: entered promiscuous mode [ 627.638950][T20475] vlan3: entered allmulticast mode [ 627.644184][T20475] geneve1: entered allmulticast mode [ 627.981648][T20481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3781'. [ 629.730647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.010754][T20505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3785'. [ 631.035657][T20505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3785'. [ 631.047338][T20505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3785'. [ 631.184202][T20514] tipc: Started in network mode [ 631.192676][T20514] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711 [ 631.202418][T20514] tipc: Enabling of bearer rejected, failed to enable media [ 631.213640][T20518] netlink: 'syz.0.3794': attribute type 4 has an invalid length. [ 631.241496][T20518] netlink: 'syz.0.3794': attribute type 4 has an invalid length. [ 631.657119][T20532] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3799'. [ 631.809558][ T5856] Bluetooth: hci1: command 0x0405 tx timeout [ 632.233932][T20560] netlink: 780 bytes leftover after parsing attributes in process `syz.4.3808'. [ 632.366712][T20569] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3810'. [ 632.394393][T20569] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3810'. [ 632.406191][T20569] netlink: 'syz.2.3810': attribute type 5 has an invalid length. [ 632.416761][T20569] netlink: 'syz.2.3810': attribute type 6 has an invalid length. [ 632.426736][T20569] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3810'. [ 632.442711][T20572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3811'. [ 632.959262][T20594] netlink: 'syz.0.3817': attribute type 4 has an invalid length. [ 632.980093][T20593] netlink: 'syz.0.3817': attribute type 4 has an invalid length. [ 633.057413][T20596] syzkaller0: entered promiscuous mode [ 633.070878][T20596] syzkaller0: entered allmulticast mode [ 633.089450][T20596] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.3819'. [ 633.161450][T20599] tipc: Enabled bearer , priority 0 [ 633.172253][T20599] syzkaller0: entered promiscuous mode [ 633.184677][T20599] syzkaller0: entered allmulticast mode [ 633.199695][T20596] netlink: 'syz.3.3819': attribute type 1 has an invalid length. [ 633.226107][T20596] netlink: 352 bytes leftover after parsing attributes in process `syz.3.3819'. [ 633.266213][T20599] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 633.341244][T20612] SET target dimension over the limit! [ 633.428095][T20598] tipc: Resetting bearer [ 633.437489][T20622] netlink: 'syz.0.3826': attribute type 4 has an invalid length. [ 633.487959][T20598] tipc: Disabling bearer [ 633.594090][T20633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3829'. [ 633.671204][T20633] veth3: entered allmulticast mode [ 633.705759][T20638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3830'. [ 633.755188][T20638] 8021q: adding VLAN 0 to HW filter on device bond4 [ 633.856466][T20644] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3831'. [ 634.076897][T20645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3832'. [ 634.098382][T20645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3832'. [ 634.109786][T20645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3832'. [ 634.122547][T20645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3832'. [ 634.133383][T20645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3832'. [ 634.157171][T20645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.167617][T20645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 634.261379][T20649] tipc: Resetting bearer [ 637.608399][T20679] netlink: 'syz.0.3843': attribute type 1 has an invalid length. [ 637.703847][T20679] bond6: entered promiscuous mode [ 637.725866][T20679] 8021q: adding VLAN 0 to HW filter on device bond6 [ 637.811166][T20692] rdma_rxe: rxe_newlink: failed to add lo [ 637.906925][T20679] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 638.225485][T20707] lo speed is unknown, defaulting to 1000 [ 638.235755][T20712] __nla_validate_parse: 16 callbacks suppressed [ 638.235778][T20712] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3850'. [ 638.302640][T20716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.880114][T20739] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3854'. [ 638.924242][T20739] delete_channel: no stack [ 638.940383][T20734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 638.986885][T20707] gre0 speed is unknown, defaulting to 1000 [ 639.009692][T20741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3858'. [ 639.042976][T20741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3858'. [ 639.071497][T20741] netlink: 'syz.0.3858': attribute type 4 has an invalid length. [ 639.837732][T20768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3860'. [ 639.933752][T20774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3861'. [ 639.963286][T20777] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3863'. [ 639.972673][ C0] ------------[ cut here ]------------ [ 639.973824][ C0] ODEBUG: free active (active state 0) object: ffff88804ce37490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 639.973877][ C0] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#0: modprobe/20779 [ 639.973910][ C0] Modules linked in: [ 639.973961][ C0] CPU: 0 UID: 0 PID: 20779 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 639.973984][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 639.973997][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 639.974023][ C0] Code: 89 44 24 20 e8 f7 bf 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 a5 28 8c 48 c7 c2 20 ab 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 640.054163][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00010246 [ 640.060348][ C0] RAX: ffffffff8a9f6db0 RBX: ffffffff9a6d7338 RCX: 0000000000000000 [ 640.068382][ C0] RDX: ffffffff8c28ab20 RSI: ffffffff8c28a5a0 RDI: ffffffff903e6a40 [ 640.076442][ C0] RBP: ffffffff8bcf39a0 R08: ffff88804ce37490 R09: ffffffff8bcf4d00 [ 640.084490][ C0] R10: dffffc0000000000 R11: ffffffff81b236d0 R12: ffff88804ce37600 [ 640.092555][ C0] R13: ffffffff903e6a40 R14: ffff88804ce37000 R15: ffff88804ce37490 [ 640.100611][ C0] FS: 0000000000000000(0000) GS:ffff888125213000(0000) knlGS:0000000000000000 [ 640.109634][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 640.116260][ C0] CR2: 00007f72bf330440 CR3: 000000007a324000 CR4: 00000000003526f0 [ 640.124327][ C0] Call Trace: [ 640.127647][ C0] [ 640.130586][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 640.136285][ C0] kfree+0x13e/0x640 [ 640.140261][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 640.145424][ C0] rose_timer_expiry+0x4cb/0x600 [ 640.150453][ C0] call_timer_fn+0x192/0x5e0 [ 640.155084][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 640.160630][ C0] ? call_timer_fn+0xd4/0x5e0 [ 640.165358][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 640.170568][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 640.175830][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 640.181408][ C0] __run_timer_base+0x652/0x8b0 [ 640.186322][ C0] ? ktime_get+0x45/0x220 [ 640.190782][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 640.196230][ C0] run_timer_softirq+0xb7/0x170 [ 640.201314][ C0] handle_softirqs+0x22a/0x840 [ 640.206216][ C0] ? __irq_exit_rcu+0xca/0x220 [ 640.211097][ C0] __irq_exit_rcu+0xca/0x220 [ 640.215741][ C0] irq_exit_rcu+0x9/0x30 [ 640.220090][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 640.225988][ C0] [ 640.228994][ C0] [ 640.231954][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 640.237978][ C0] RIP: 0010:deref_stack_reg+0x13/0x230 [ 640.243545][ C0] Code: fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 20 48 89 54 24 18 <49> 89 f0 49 89 ff 48 be 00 00 00 00 00 fc ff df 48 8d 5f 08 49 89 [ 640.263251][ C0] RSP: 0018:ffffc900047a73a0 EFLAGS: 00000286 [ 640.269425][ C0] RAX: fffffffffffffff0 RBX: ffffffff90cd529e RCX: 0000000000000000 [ 640.277444][ C0] RDX: ffffc900047a7508 RSI: ffffc900047a75f0 RDI: ffffc900047a74c8 [ 640.285526][ C0] RBP: dffffc0000000000 R08: ffffc900047a7527 R09: 0000000000000000 [ 640.293598][ C0] R10: ffffc900047a7518 R11: fffff520008f4ea5 R12: ffffc900047a75f0 [ 640.301682][ C0] R13: 1ffff920008f4e9b R14: ffffc900047a74c8 R15: 1ffffffff219aa54 [ 640.309764][ C0] unwind_next_frame+0x19d5/0x2550 [ 640.314944][ C0] ? unwind_next_frame+0xa6/0x2550 [ 640.320163][ C0] ? stack_trace_save+0xa9/0x100 [ 640.325235][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 640.331483][ C0] arch_stack_walk+0x11b/0x150 [ 640.336298][ C0] ? kasan_save_track+0x3e/0x80 [ 640.341237][ C0] ? security_file_alloc+0x34/0x310 [ 640.346481][ C0] stack_trace_save+0xa9/0x100 [ 640.351362][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 640.356777][ C0] ? alloc_empty_file+0x5b/0x1d0 [ 640.361887][ C0] ? stack_trace_save+0xa9/0x100 [ 640.366954][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 640.372511][ C0] kasan_save_track+0x3e/0x80 [ 640.377291][ C0] __kasan_slab_alloc+0x6c/0x80 [ 640.382249][ C0] kmem_cache_alloc_noprof+0x2bc/0x650 [ 640.387742][ C0] ? security_file_alloc+0x34/0x310 [ 640.393123][ C0] ? rcu_is_watching+0x15/0xb0 [ 640.397919][ C0] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 640.403649][ C0] security_file_alloc+0x34/0x310 [ 640.408763][ C0] init_file+0x90/0x2b0 [ 640.412958][ C0] alloc_empty_file+0x74/0x1d0 [ 640.417766][ C0] path_openat+0x10f/0x3860 [ 640.422363][ C0] ? arch_stack_walk+0xfb/0x150 [ 640.427265][ C0] ? do_getname+0x2e/0x250 [ 640.431786][ C0] ? stack_trace_save+0xa9/0x100 [ 640.436760][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 640.442237][ C0] ? do_getname+0x2e/0x250 [ 640.446783][ C0] ? stack_depot_save_flags+0x33/0x810 [ 640.452338][ C0] ? do_getname+0x2e/0x250 [ 640.456804][ C0] ? kasan_save_track+0x4f/0x80 [ 640.461790][ C0] ? kasan_save_track+0x3e/0x80 [ 640.466680][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 640.471806][ C0] ? __pfx_path_openat+0x10/0x10 [ 640.476786][ C0] ? __x64_sys_openat+0x138/0x170 [ 640.481909][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 640.486905][ C0] do_file_open+0x23e/0x4a0 [ 640.491632][ C0] ? __pfx_do_file_open+0x10/0x10 [ 640.496729][ C0] ? _raw_spin_unlock+0x28/0x50 [ 640.501685][ C0] ? alloc_fd+0x64b/0x6c0 [ 640.506090][ C0] do_sys_openat2+0x113/0x200 [ 640.510853][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 640.516086][ C0] ? fput_close_sync+0x1f8/0x240 [ 640.521111][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 640.526456][ C0] __x64_sys_openat+0x138/0x170 [ 640.531404][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.537504][ C0] do_syscall_64+0x15f/0xf80 [ 640.542181][ C0] ? trace_irq_disable+0x3b/0x140 [ 640.547246][ C0] ? clear_bhb_loop+0x40/0x90 [ 640.552130][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.558066][ C0] RIP: 0033:0x7f72bf6120ba [ 640.562583][ C0] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 640.582266][ C0] RSP: 002b:00007ffd307606d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 640.590778][ C0] RAX: ffffffffffffffda RBX: 00007ffd30760750 RCX: 00007f72bf6120ba [ 640.598823][ C0] RDX: 0000000000080000 RSI: 00007ffd30760750 RDI: 00000000ffffff9c [ 640.606829][ C0] RBP: 00007ffd30760740 R08: 00007ffd30760947 R09: 0000000000000000 [ 640.614902][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000016 [ 640.622954][ C0] R13: 00007f72bf5e6000 R14: 00007ffd30760960 R15: 0000000000000000 [ 640.631036][ C0] [ 640.634094][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 640.641411][ C0] CPU: 0 UID: 0 PID: 20779 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 640.650637][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 640.660733][ C0] Call Trace: [ 640.664037][ C0] [ 640.666943][ C0] vpanic+0x56c/0xa60 [ 640.670962][ C0] ? __pfx__printk+0x10/0x10 [ 640.675583][ C0] ? __pfx_vpanic+0x10/0x10 [ 640.680115][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 640.685440][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 640.690693][ C0] panic+0xc5/0xd0 [ 640.694445][ C0] ? __pfx_panic+0x10/0x10 [ 640.698913][ C0] __warn+0x315/0x4c0 [ 640.702919][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 640.708679][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 640.714426][ C0] __report_bug+0x29a/0x540 [ 640.718976][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 640.724395][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 640.730235][ C0] ? __pfx___report_bug+0x10/0x10 [ 640.735301][ C0] ? kfree+0x1c5/0x640 [ 640.739398][ C0] ? rose_timer_expiry+0x4c3/0x600 [ 640.744539][ C0] ? call_timer_fn+0x192/0x5e0 [ 640.749334][ C0] ? __run_timer_base+0x652/0x8b0 [ 640.754400][ C0] ? run_timer_softirq+0xb7/0x170 [ 640.759486][ C0] ? handle_softirqs+0x22a/0x840 [ 640.764470][ C0] ? __irq_exit_rcu+0xca/0x220 [ 640.769284][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 640.775128][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 640.781320][ C0] ? deref_stack_reg+0x13/0x230 [ 640.786199][ C0] ? unwind_next_frame+0x19d5/0x2550 [ 640.791494][ C0] ? arch_stack_walk+0x11b/0x150 [ 640.796454][ C0] report_bug_entry+0x19a/0x290 [ 640.801410][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 640.807146][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 640.812925][ C0] handle_bug+0xce/0x200 [ 640.817197][ C0] exc_invalid_op+0x1a/0x50 [ 640.821711][ C0] asm_exc_invalid_op+0x1a/0x20 [ 640.826660][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 640.833080][ C0] Code: 89 44 24 20 e8 f7 bf 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 a5 28 8c 48 c7 c2 20 ab 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 640.852779][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00010246 [ 640.858855][ C0] RAX: ffffffff8a9f6db0 RBX: ffffffff9a6d7338 RCX: 0000000000000000 [ 640.866833][ C0] RDX: ffffffff8c28ab20 RSI: ffffffff8c28a5a0 RDI: ffffffff903e6a40 [ 640.874808][ C0] RBP: ffffffff8bcf39a0 R08: ffff88804ce37490 R09: ffffffff8bcf4d00 [ 640.882782][ C0] R10: dffffc0000000000 R11: ffffffff81b236d0 R12: ffff88804ce37600 [ 640.890758][ C0] R13: ffffffff903e6a40 R14: ffff88804ce37000 R15: ffff88804ce37490 [ 640.898836][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 640.904303][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 640.909953][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 640.915603][ C0] kfree+0x13e/0x640 [ 640.919508][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 640.924627][ C0] rose_timer_expiry+0x4cb/0x600 [ 640.929574][ C0] call_timer_fn+0x192/0x5e0 [ 640.934192][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 640.939666][ C0] ? call_timer_fn+0xd4/0x5e0 [ 640.944351][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 640.949476][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 640.954686][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 640.960240][ C0] __run_timer_base+0x652/0x8b0 [ 640.965100][ C0] ? ktime_get+0x45/0x220 [ 640.969454][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 640.974849][ C0] run_timer_softirq+0xb7/0x170 [ 640.979710][ C0] handle_softirqs+0x22a/0x840 [ 640.984487][ C0] ? __irq_exit_rcu+0xca/0x220 [ 640.989274][ C0] __irq_exit_rcu+0xca/0x220 [ 640.993888][ C0] irq_exit_rcu+0x9/0x30 [ 640.998139][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 641.003785][ C0] [ 641.006718][ C0] [ 641.009660][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.015647][ C0] RIP: 0010:deref_stack_reg+0x13/0x230 [ 641.021118][ C0] Code: fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 20 48 89 54 24 18 <49> 89 f0 49 89 ff 48 be 00 00 00 00 00 fc ff df 48 8d 5f 08 49 89 [ 641.041350][ C0] RSP: 0018:ffffc900047a73a0 EFLAGS: 00000286 [ 641.047444][ C0] RAX: fffffffffffffff0 RBX: ffffffff90cd529e RCX: 0000000000000000 [ 641.055602][ C0] RDX: ffffc900047a7508 RSI: ffffc900047a75f0 RDI: ffffc900047a74c8 [ 641.063612][ C0] RBP: dffffc0000000000 R08: ffffc900047a7527 R09: 0000000000000000 [ 641.071692][ C0] R10: ffffc900047a7518 R11: fffff520008f4ea5 R12: ffffc900047a75f0 [ 641.079673][ C0] R13: 1ffff920008f4e9b R14: ffffc900047a74c8 R15: 1ffffffff219aa54 [ 641.087774][ C0] unwind_next_frame+0x19d5/0x2550 [ 641.093086][ C0] ? unwind_next_frame+0xa6/0x2550 [ 641.098218][ C0] ? stack_trace_save+0xa9/0x100 [ 641.103202][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 641.109377][ C0] arch_stack_walk+0x11b/0x150 [ 641.114153][ C0] ? kasan_save_track+0x3e/0x80 [ 641.119016][ C0] ? security_file_alloc+0x34/0x310 [ 641.124280][ C0] stack_trace_save+0xa9/0x100 [ 641.129076][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 641.134475][ C0] ? alloc_empty_file+0x5b/0x1d0 [ 641.139423][ C0] ? stack_trace_save+0xa9/0x100 [ 641.144369][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 641.149750][ C0] kasan_save_track+0x3e/0x80 [ 641.154479][ C0] __kasan_slab_alloc+0x6c/0x80 [ 641.159337][ C0] kmem_cache_alloc_noprof+0x2bc/0x650 [ 641.164803][ C0] ? security_file_alloc+0x34/0x310 [ 641.170007][ C0] ? rcu_is_watching+0x15/0xb0 [ 641.174948][ C0] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 641.180594][ C0] security_file_alloc+0x34/0x310 [ 641.185642][ C0] init_file+0x90/0x2b0 [ 641.189807][ C0] alloc_empty_file+0x74/0x1d0 [ 641.194580][ C0] path_openat+0x10f/0x3860 [ 641.199099][ C0] ? arch_stack_walk+0xfb/0x150 [ 641.204049][ C0] ? do_getname+0x2e/0x250 [ 641.208477][ C0] ? stack_trace_save+0xa9/0x100 [ 641.213426][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 641.218810][ C0] ? do_getname+0x2e/0x250 [ 641.223245][ C0] ? stack_depot_save_flags+0x33/0x810 [ 641.228713][ C0] ? do_getname+0x2e/0x250 [ 641.233139][ C0] ? kasan_save_track+0x4f/0x80 [ 641.237993][ C0] ? kasan_save_track+0x3e/0x80 [ 641.242852][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 641.247894][ C0] ? __pfx_path_openat+0x10/0x10 [ 641.252848][ C0] ? __x64_sys_openat+0x138/0x170 [ 641.257882][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 641.262839][ C0] do_file_open+0x23e/0x4a0 [ 641.267358][ C0] ? __pfx_do_file_open+0x10/0x10 [ 641.272408][ C0] ? _raw_spin_unlock+0x28/0x50 [ 641.277265][ C0] ? alloc_fd+0x64b/0x6c0 [ 641.281609][ C0] do_sys_openat2+0x113/0x200 [ 641.286296][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 641.291501][ C0] ? fput_close_sync+0x1f8/0x240 [ 641.296442][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 641.301737][ C0] __x64_sys_openat+0x138/0x170 [ 641.306600][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.312771][ C0] do_syscall_64+0x15f/0xf80 [ 641.317374][ C0] ? trace_irq_disable+0x3b/0x140 [ 641.322409][ C0] ? clear_bhb_loop+0x40/0x90 [ 641.327093][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.332989][ C0] RIP: 0033:0x7f72bf6120ba [ 641.337415][ C0] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 641.357114][ C0] RSP: 002b:00007ffd307606d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 641.365562][ C0] RAX: ffffffffffffffda RBX: 00007ffd30760750 RCX: 00007f72bf6120ba [ 641.373634][ C0] RDX: 0000000000080000 RSI: 00007ffd30760750 RDI: 00000000ffffff9c [ 641.381617][ C0] RBP: 00007ffd30760740 R08: 00007ffd30760947 R09: 0000000000000000 [ 641.389601][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000016 [ 641.397583][ C0] R13: 00007f72bf5e6000 R14: 00007ffd30760960 R15: 0000000000000000 [ 641.405573][ C0] [ 641.409255][ C0] Kernel Offset: disabled [ 641.413603][ C0] Rebooting in 86400 seconds..