last executing test programs: 5m45.109258768s ago: executing program 1 (id=778): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e23, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x3aec}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0xa8, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x1, 0x84) ppoll(&(0x7f00000001c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 5m44.148203702s ago: executing program 1 (id=782): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRESHEX=0x0, @ANYRESOCT=r0], 0x54}}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5m44.040958612s ago: executing program 1 (id=784): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000100004000000000000000000570000000a20000000000a05000000000000000000070000000900010073797a30000000003c000a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021480000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000001c0003801800008008000340000000020c0004400000000000001000140000001000010000000000000000000084000a8fbb54bc81203f3691ac3177b7b13b5a76da34e2ef3d12ace6a396ec5267b3b71e8cc42332a52294ffbe033f025b81b7c5897df57f544ccc80c5eea592e00cfd54e36e37fe066b0a0937b4000000"], 0xcc}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="290b0000000000001c00128009000100626f6e6400"], 0x50}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={@rand_addr=0x64010101, 0x0, 0x0, 0x10, 0x0, [{}]}}) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000) unshare(0x2c060000) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x1e8, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1b8, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_EMATCHES={0x104, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x7}, {0x7, 0x10001, 0x7, 0xfffffff7}}}, @TCF_EM_IPT={0x28, 0x3, 0x0, 0x0, {{0x359f, 0x9, 0x3ff}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x94, 0x3, 0x0, 0x0, {{0x2, 0x0, 0x3}, "e445ef8ddba2d24479a52789b4cb566a0ce5a32ddb92e89c66cf45c59a8b2422e80ecab561f72357741710446bf02abca4a6f51e129d3ff769246a03ea53ccae7aa51b758eb1eea382eabc55faa8101a1dfc84cf99e9555ed54f918ebb67d441ee3dfb1741c2e32f5d6d52d5a1ec45b4a4c5f7cebce0465ae68ee70f3dad8331dd8e39e52be1f9"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x2c}, {0x2, 0x2, 0x3}}}]}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xa4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x3}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x1e8}}, 0x2000c800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x5, 0x4) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m43.361442249s ago: executing program 3 (id=789): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) listen(r2, 0x372) (async, rerun: 32) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) (rerun: 32) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x81}]}}]}, 0x3c}}, 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x69, 0x81, 0x80000001, 0xf6fa, 0x9, 0x6}, {0x1, 0x51411fe8, 0x429b, 0x4, 0x6, 0x2}]}) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="8f0200a45e4a5a40fff65830035bb790425c89a0d053afd7c90e9b5a7fc1cfd973137750b682de540d54254b2a4592c7890807070aecb3be927ce532579306bf7977c06c4f1c82e1cefc6202f6609e4d5c5deece3e68cdd0b7744ea9b8344bb3b9489496be3673fe5b282cad6aff480b9d24bed11367d53ed867a44422aca87be530d62647272270dde0e0e7dd99320dd49eff53fc02063463", @ANYRES16=r5, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a30000000000900030073797a3100000000"], 0x43}}, 0x0) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x14, r5, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000, 0x0, 0x400088b}, 0x4000) 5m43.346899451s ago: executing program 1 (id=790): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x6c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x18}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xd}, @IFLA_GRE_TTL={0x5}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xb}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x140d, 0x400, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8001) 5m43.04537893s ago: executing program 1 (id=792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448f0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0xc101}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth0_to_bond\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x3, 0x1, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x8, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x81, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x429f, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0xd6f, 0x4007, 0x8c, 0x5, 0x2af, 0xf7, 0x5, 0x1, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x800000, 0x204, 0x1, 0x8, 0x8000, 0x0, 0x3, 0x0, 0x10001, 0x4e7b3717, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x1005, 0x5b, 0x81, 0x33b, 0x8, 0x20006, 0x5, 0x2, 0x6, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0xfffffffe, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r6}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) 5m43.043563835s ago: executing program 3 (id=793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000040a01040000000000000000020000020900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000091101f000000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001eb28bd7000fedbdf2507000000", @ANYRES32=r4, @ANYBLOB="80007e0a0a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/172, 0xac, 0x1, &(0x7f0000000600)=""/138, 0x8a}, &(0x7f0000000840)=0x40) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000001040101000000000000000004000003ba30aa3a0000040005000100020000000800044000000002080004400000000500"/64], 0x40}, 0x1, 0x0, 0x0, 0x4015}, 0x20040850) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x12b4}}, 0x810) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) 5m41.113489746s ago: executing program 3 (id=799): syz_open_procfs$namespace(0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan0\x00'}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8632d92864e3a12e}, 0x2400c084) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'wg0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="0201140001"], 0xdd12}], 0x1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 5m41.082692602s ago: executing program 1 (id=801): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000003500)=[{0x0}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a) 5m41.066351617s ago: executing program 3 (id=802): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x20000) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448c9, 0x0) (async) sendmmsg$inet(r7, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)='\x00', 0x1}, {&(0x7f0000000180)="5440caa287f3778894bb87ab40e30af2c3e6d4d14053d588f13464ba78f9136f50fc376cbaa57ca583288d768cee60fef7a96366e2e42fab59", 0x39}], 0x2}}], 0x1, 0x2400c042) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000078c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x9, 0xffff}, {0xc}}}, 0x24}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r9, @ANYRES16=r10, @ANYBLOB="010000000020000000001a0000001c0000800400010200000800060000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) 5m39.553166351s ago: executing program 3 (id=807): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="842a0a65bd8c2b", 0x7) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000cf4", 0x33fe0}], 0x1}, 0x0) 5m39.405312097s ago: executing program 3 (id=810): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) shutdown(0xffffffffffffffff, 0x1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xc4}}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000001240)=@add_del={0x2, &(0x7f0000001200)='syzkaller0\x00'}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) (async, rerun: 32) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async, rerun: 32) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f0000000300)="11659a431d82681d9b99675b9e580e21", 0x10}], 0x3, 0x0, 0xd8}}], 0x1, 0x8000) (async, rerun: 32) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f00000012c0)={0x2, 'tunl0\x00', 0x3}, 0x18) (rerun: 32) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) (async) recvmmsg(r4, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, 0x0) (async) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) (async) sendmmsg$sock(r6, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000980)="7a9cbfd59ed400dffc76ebc458b1c4e617e841d37368cf1269509d5498fd2da2d0354b6ac6cfe62c066a87dd1cb4368449", 0x31}, {&(0x7f00000009c0)="08352aec", 0x4}, {0x0}, {&(0x7f0000000b40)}, {&(0x7f0000000bc0)="a27a49c2980d0906da029a29f0e51df340a719d7d2247530cc3af11840e308427c3eb2efde4efb4bb9f5d7d5e064502c61ceb502f81d60c97546384d02cef0", 0x3f}, {&(0x7f0000000c80)}, {0x0}], 0x7}}, {{0x0, 0x0, &(0x7f0000001080)}}], 0x3, 0x90) 5m25.221337402s ago: executing program 32 (id=801): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000003500)=[{0x0}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a) 5m23.437238035s ago: executing program 33 (id=810): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) shutdown(0xffffffffffffffff, 0x1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xc4}}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000001240)=@add_del={0x2, &(0x7f0000001200)='syzkaller0\x00'}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) (async, rerun: 32) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async, rerun: 32) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f0000000300)="11659a431d82681d9b99675b9e580e21", 0x10}], 0x3, 0x0, 0xd8}}], 0x1, 0x8000) (async, rerun: 32) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f00000012c0)={0x2, 'tunl0\x00', 0x3}, 0x18) (rerun: 32) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) (async) recvmmsg(r4, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, 0x0) (async) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) (async) sendmmsg$sock(r6, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000980)="7a9cbfd59ed400dffc76ebc458b1c4e617e841d37368cf1269509d5498fd2da2d0354b6ac6cfe62c066a87dd1cb4368449", 0x31}, {&(0x7f00000009c0)="08352aec", 0x4}, {0x0}, {&(0x7f0000000b40)}, {&(0x7f0000000bc0)="a27a49c2980d0906da029a29f0e51df340a719d7d2247530cc3af11840e308427c3eb2efde4efb4bb9f5d7d5e064502c61ceb502f81d60c97546384d02cef0", 0x3f}, {&(0x7f0000000c80)}, {0x0}], 0x7}}, {{0x0, 0x0, &(0x7f0000001080)}}], 0x3, 0x90) 2.461289182s ago: executing program 2 (id=3214): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (rerun: 32) close(r1) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) (async) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, r7, 0x5, 0x70bd26, 0x0, {0x22}}, 0x14}}, 0xc094) (async) sendmsg$tipc(r5, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000a40)='3', 0x1}], 0x1, 0x0, 0x0, 0x20000851}, 0x800) (async, rerun: 32) bind$tipc(r5, &(0x7f0000000140)=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x10) (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0xc8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @empty, 0x1fe000000, 0xff000000, 'veth1_to_team\x00', 'bridge0\x00', {0xff}, {}, 0x2e, 0x0, 0x8}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0xff, 'bridge0\x00', 'netpci0\x00', {}, {0xff}, 0x5e, 0x0, 0x22}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 0x4, 0x1, [0x32, 0x22, 0xa, 0x1b, 0x2d, 0x2b, 0x1c, 0x38, 0x1c, 0x9, 0x23, 0x11, 0xd, 0x1e, 0x2, 0x30], 0x2, 0xfffffff8, 0x49cf}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) (async, rerun: 64) r8 = socket$inet6(0xa, 0x5, 0x1) (rerun: 64) setsockopt$inet_opts(r8, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) (async) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async) sendmmsg$inet6(r8, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000000100), 0x0, 0x12161, 0x0) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) (async) bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x0, 0x3}}, 0x10) (async) bind$tipc(r3, 0x0, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}, 0x1, 0x0, 0x0, 0x140}, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, r0, 0x0) (async) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x14, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r9}, 0x8) 2.2209893s ago: executing program 2 (id=3217): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000800)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x30, r0, 0x1ca62000) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20044080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$inet(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'lo\x00'}}, 0x1e) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffffb, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x55}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) r10 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r10, 0x6) setsockopt$inet_tcp_int(r10, 0x6, 0xa, &(0x7f0000000100), 0x4) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@private0, @in6=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) 1.872988396s ago: executing program 0 (id=3224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xa, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008085}, 0x10000800) r1 = epoll_create1(0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f00000001c0)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb0, r5, 0x436, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x30}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48010}, 0x24040810) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f00000003c0)={'filter\x00', 0x4}, 0x68) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000440)={0x0, 0x54e, 0x0, 0x9, 0x2}, &(0x7f0000000480)=0x18) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000004c0)={r7, 0x3}, &(0x7f0000000500)=0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000540)={0x3, [0x0, 0x0, 0x0]}) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000580)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000001580)={{r9, 0x6, 0x101, 0x6, 0x8000000000000000, 0x40, 0x80000001, 0x7, 0xfffff0b7, 0x80000000, 0x6, 0x5, 0xdb70, 0x9, 0x590}}) ioctl$BTRFS_IOC_DEFRAG(r6, 0x50009402, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000002580)={0x1, [0x0]}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000025c0)) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f0000002600)={r7, 0x8a, "0d61b5c8bd1c09107e644d74585e697fceba52c975b3ead8fa10e1b894bd70b5952252c9bf22e9df695a9fd72d27a9d13da7fb07ba17bacc308d65c5819255be60d6361e69c42202e4be6ff0c8850ba3db6ca807db756b7f98d839fa41ee3bfa3e7b9ba6f7b4c9c6e9f209039206a022ca16a30d3739a41dd84cddcead0527a83bf93eb1e72747aa0f40"}, &(0x7f00000026c0)=0x92) getsockname$packet(r1, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002740)=0x14) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000002780)={{r2}, "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"}) ioctl$sock_ifreq(r8, 0x8920, &(0x7f0000003780)={'tunl0\x00', @ifru_ivalue=0x9}) ioctl$sock_inet_sctp_SIOCINQ(r10, 0x541b, &(0x7f00000037c0)) ioctl(r10, 0x3, &(0x7f0000003800)="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") listen(r6, 0x2) 1.73520419s ago: executing program 2 (id=3225): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0x18, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x5, 0x11, 0x0, 0x1, [@generic='/']}]}, 0x18}], 0x1}, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008a00000095"], &(0x7f0000000100)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 1.705708036s ago: executing program 0 (id=3226): socket$netlink(0x10, 0x3, 0xe) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) (async, rerun: 64) bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4) (rerun: 64) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f0000000000)) (async, rerun: 64) r5 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r5, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000f80)=ANY=[@ANYBLOB="02010909070000002bbd5000fdffffff050007002aa000000a004e230000005efe800000000000000000000000000041d40d00000000000085cb72acec7f8258598c001c6bf5c7aefbaee63219c9146dbe254a5613a0ca432db030db7ddf33918062814caa3d333490417abc648f934ae225d4b22c07acc9a84e84e36efd6fc9cc26a85cc12446e66a2711d2feb86fd74528f171c01a77d19fab97891dd9cca1d86ec827319cc290df9d5413934e42e8adcfd4348de7ba2df7e1a16083d6098a7073e141ee57fd000000001f6fa75e9387b9e7bf76cedb897942edb74c086c"], 0x38}}, 0x24000802) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=r7, @ANYRES8, @ANYRESDEC=r3, @ANYBLOB="b60000000000000051a3b4077241c47b"], 0x44}}, 0x20000840) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYRES16=r9, @ANYBLOB="1709000000000000000101000000080009000200100014001f00000000000000000000000000000000011400200000000000000000000000ffffac1414bb0500070000000000060002000100000008000a0004000000"], 0x5c}}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x25, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (async) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r11 = accept4(r10, 0x0, 0x0, 0x0) recvfrom$packet(r11, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001280)=ANY=[@ANYBLOB="640000001000030529bd8a67f518b812d18c000046c81254afd8a1b0a32f8aeb57ff4c12138a602e966ff946eeb70e6481cf7e4ac898155dd9a05408920690e72af5ede2b370ed0e04905580b1f1ea93257b057326cb0fb50ff9576813c66af5e2232661a409da66760838b1fa8edbbcaac35ba42c4e6a407059b5bffa318d4232d6694bc515cc41c0ebec49870bb9a24346bdec242699", @ANYRES64, @ANYBLOB="09840000000000003c0012800b00010062726964676500002c00023c7df8e30af9c66dd1dacb88cb80060027000300000006000500260000000000050025c7cefb0243d50a629fa3dd3d0b08c4f5a2870468d99b00"/98], 0x64}}, 0x51) 1.553506749s ago: executing program 4 (id=3228): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x0, 0x81e, 0x4, 0x0, 0x20, 0x80, 0x21}, {@in=@multicast1, 0x0, 0x33}, @in6=@empty, {0x401, 0x0, 0x8, 0x0, 0xffffffff, 0x3, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x80000001}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x1, 0x40}}, 0xf0}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e23, 0x1b, @mcast1}}, {{0xa, 0x0, 0x855f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}}}, 0x108) 1.552582371s ago: executing program 2 (id=3229): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001780)={'team_slave_0\x00', &(0x7f0000000740)=@ethtool_gstrings}) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 32) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc090}, 0x2000004) (rerun: 32) 1.500410998s ago: executing program 0 (id=3230): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) unshare(0x62040200) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x9) openat$tun(0xffffffffffffff9c, 0x0, 0x4ca80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x5, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x80) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000), 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x2}, 0x1c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) write(r4, &(0x7f0000000340)="0a0003000100", 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r2) pwritev(r6, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r5, 0x100000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) 1.480639865s ago: executing program 6 (id=3231): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x0, 0x81e, 0x4, 0x0, 0x20, 0x80, 0x21}, {@in=@multicast1, 0x0, 0x33}, @in=@loopback, {0x401, 0x0, 0x8, 0x0, 0xffffffff, 0x3, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x80000001}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x1, 0x40}}, 0xf0}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e23, 0x1b, @mcast1, 0xfc010000}}, {{0xa, 0x0, 0x855f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}}}, 0x108) 1.396995074s ago: executing program 4 (id=3232): unshare(0x6a040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r2, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002180)="f8d1c77d6dcbd92e9497d9ab1af5a50c00823b80a869df40c71b29ba", 0x1c}, {&(0x7f00000021c0)="28564cac5c4fd196b78495035d77cf067cfb87ad16e60bb969ff4930b0682e1f6b943c89e148f96543641d698430d4c66b705c5d6ffa8c041665f822468a31bd359abf8afad40bf978862619e145422848be54", 0x53}], 0x2}}, {{&(0x7f0000003580)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x3, 0x3, 0x2, {0xa, 0x4e23, 0x0, @remote, 0x8000}}}, 0x80, &(0x7f0000003780)=[{0x0}], 0x1}}], 0x2, 0x4000004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) 1.393590065s ago: executing program 6 (id=3233): r0 = socket(0x25, 0x5, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r2, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c37900000fff0000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) 1.290999886s ago: executing program 5 (id=3234): syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x1a, 0x9, 0x3, 0x0, [{@empty}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x4000}]}, @ssrr={0x89, 0x7, 0xce, [@multicast2]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) connect(r3, &(0x7f00000003c0)=@llc={0x1a, 0x312, 0x9, 0x27, 0x9, 0x9, @broadcast}, 0x80) (async) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6b}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8000}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x58844}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x800) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000500)="3a256ecb555a9a52ef5c3335495c", 0x0, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) (async, rerun: 32) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000001140)) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100005ff000000e1ed4242fa2f8b004a", @ANYRES32=0x0, @ANYBLOB="c3ff0000000000002400128009000100626f6e64000000001400028008000f00ff0000000500010006000000"], 0x44}}, 0x0) 1.272284955s ago: executing program 2 (id=3235): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x10000000, 0x0, 0x90}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001200)={0x0, 0x1c, &(0x7f0000001100)=[@in6={0xa, 0x4e24, 0xf7ff, @remote, 0x4}]}, &(0x7f0000001240)=0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000140)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x6, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}) 1.145179308s ago: executing program 6 (id=3236): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5204e2406a6cbfff, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x2, 0x6, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.02675409s ago: executing program 5 (id=3237): r0 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32) r1 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) (async, rerun: 32) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) (async, rerun: 64) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) (async, rerun: 64) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) (rerun: 64) 909.120014ms ago: executing program 5 (id=3238): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0xc101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000408000140000000140800024000000012040005800c00088008000100506f19360900010073797a30"], 0x110}}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000580)=0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x3, 0x1, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x8, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x81, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x429f, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0xd6f, 0x4007, 0x8c, 0x5, 0x2af, 0xf7, 0x5, 0x1, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x800000, 0x204, 0x1, 0x8, 0x8000, 0x0, 0x3, 0x0, 0x10001, 0x4e7b3717, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x5b, 0x81, 0x33b, 0x8, 0x20006, 0x5, 0x2, 0x6, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0xfffffffe, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r5, &(0x7f00000018c0)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="8ee0c216faf243e8499df8280fdb5baaf819d0d45f532ce91ad258cb709af6cb5f54410d6952f560b1a89a152ecc3d56d64f5c4462570f47", 0x38}, {&(0x7f0000000000)="075252e835f9a12e9cbb2f094798f5359ec352c8ffc7b0818a90656067e8731def3457471cf816a7", 0x28}, {&(0x7f0000000140)="412494db5a9edd5f1f6c146154435ed20aeb2945c5931e825de80a4b3199599034c64bfb2b81862e07e2957f5e2c", 0x2e}, {&(0x7f0000000040)="853a80e177d3f95d38491baca12bbc805dcdbe946d8c5cc70985a6b260ebd5108f84cba48fdcbd45eb3362d97b0277111c7d9ffe72339b62997cb36e424c07bd2f63e6872f97ff9a634ed83cfb6945703c68de86c9ca53af433b38613014a0b9400f2c28c8be1c94ae6b12cfd8f1507d139eb67c6f3897837786", 0x7a}, {&(0x7f0000000440)="ef53e8185fd4fab3da54d3863dd4d4768837c8465018d54f493c70465906433cf122bfab3791b26830260154d8310e9e6234102f53a96cedd55f235b6b3fbb3be800cb31d7d955bbae77540b15343b1e989331f85291a213448500e79f9b144cfcea67e4c42131cac55f947babd5193ef438cd517ae49878fde83ac34490408264c0f72fdf02220c9c7dd257f62c9ba3a734d2bc4e52d64c98854d93a705ecf26b68ca2a83", 0xa5}, {&(0x7f0000001940)="4139fea9d5e02bfc5fa8392be11d72f0da2e3107df98210ee3c5a6d327fa410478a6db2e5d69b6b92536a531240fdf1fa8deb375031e698ef3beec0238212521eee5326c57b53a0da1c9ecbf1551133f9a821254f3fdafbf90f651e8a8b22384f3e4f72afcc11ba8e914e670aee55b6f688cd5b7cca10af9213875edaaec8073615d14412aeaf582b27eaf6c789165c6feb35f73de7a257f76ed7faa1ef2886685587ed9ac60cf1fd78e2a02280861e82c6878ea626eb47581d5290d96fbadf37b3d19a490eaf5157e7a5308c07f5b3c7ac5edd22084bfcdafed82525b6ea52f2d6e7e0ef9c8bfed766185ce85e7971738cc546ff4e2d27c4a28", 0xfa}, {&(0x7f0000000380)="cdb21638a3d12396e4427a04d26eb4d89db96ae5d91b38d479a07f0e780bdb8be544fb6ec4efd99859229ab9cace00ab08e18735826fd67a690e4f331c47f28ab6713a5dce4231e75212c70925a179a6baed480581359a7f1e94e80adc37a060955bb0e82610aa745dc76e95c11e1410cab2a0a6978691300b51fc553958cedda8cb31a1af014aefdd4c8c75ad9d6603efdf9a5615d7f0796e852481b5b116", 0x9f}], 0x7, 0x0, 0x0, 0x8810}, {0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)="c50afe177fb11a9a094cfa2b5c2bc73cb52a58874da7cda0b1bd524bdd24886595e8347ba62bec0932139326b4f7584745f9884d35cee3dee082f705d1aad81af0ecf525ce25303a0251c1374573ced00f58811d86bad8509cde9c2ab06f003d60dbd17ed6f065eeee4e1829c21f4192419b8e40d176b1a0a0a45f814820f9064912855cf05466bc3c117540cea9daa20af66ab0c144e961c1b1cc35f935e8322cf929", 0xb2}, {&(0x7f0000001a40)="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", 0x1000}], 0x2, &(0x7f0000001640)=[@assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18}, @assoc={0x0, 0x117, 0x4, 0x1}, @iv={0x68, 0x117, 0x2, 0x51, "8dcc8ca593492379f4508cbe76e6525df51737e293fc79473346987c0c15952ff2ace3ff4cc2af3a904762486d6d879838691a6fd684dd99e4825bc183be0303215a78c8df4064c9db8fe798f223df947d"}, @assoc={0x18, 0x117, 0x4, 0x800}, @iv={0xa8, 0x117, 0x2, 0x8e, "65640af9306cb3a493cc18527fc6d4d597565079fd82e35c14a76518a1081d88b637af76fa9606b58da5b18abe85a22df901dbffe02c413158ff7a842fa20d8174c65cbd4de38f934b84b75a08997c5804a62074ce29ab132374bccd2d6af6b363532abf83adfc2565814639fefd7c199b2a9a1b5f8c5f01638854a88a670090636b2fc3d5028f8bcdbdf403c421"}, @iv={0x90, 0x117, 0x2, 0x77, "373a0b139f3ced40256bcc37b15df3fb302dabcd6c741131de5f7e58dc30d8ee8650d52ad0cc7a94939fa5d852e1c6d56f405701f752b055fbd95bee4aca68ca037eba961d38908b4376f85263c2c1959575ffbf07adb52409246d8eb8760548109a1c9fc6728f99cb49df60b5b9241cffe21b667714d6"}, @assoc={0xfffffffffffffdfd, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x260, 0x40}], 0x2, 0x0) 805.368647ms ago: executing program 6 (id=3239): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000002000000008d080000711209000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x180, 0x89}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff6, 0x4}, {0x3}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, 0x1c) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005600000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x60000090) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) accept4(r3, 0x0, 0x0, 0x80000) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b", 0x21}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='tlb_flush\x00', r5, 0x0, 0x9}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0005b38290f90e9ab40000100003006269746d61703a706f72740005000400000000000900020073797a30000000000500050003000000050001000600000014000780060004400004000006000540"], 0x5c}}, 0x0) r6 = socket(0x10, 0x7, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 803.405966ms ago: executing program 4 (id=3240): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1ff001}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000004e40)=""/4111, 0x100f}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x6, 0x40012020, 0x0) socket$alg(0x26, 0x5, 0x0) 769.917087ms ago: executing program 6 (id=3241): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x43000000, @rand_addr=' \x01\x00', 0x5}}}, 0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) listen(r3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x1a0, 0x3f8, 0x2b8, 0x0, 0xd0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, [0xffffffff, 0xffffffff, 0x7f000101, 0xff000000], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], 'pimreg\x00', 'veth1_to_bridge\x00', {}, {}, 0xfd, 0xff, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x5, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@private=0xa010101, 0x21, 0x3b, 0x200}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x2, 0x17c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r4 = socket(0x2, 0xa, 0xf602) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) ppoll(&(0x7f0000000040)=[{r4, 0x100}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xe, &(0x7f00000000c0)={@local, @empty, @void, {@generic={0x892f}}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0xa, [@union={0x7, 0x4, 0x0, 0x5, 0x0, 0x5, [{0x1}, {0x8, 0x5, 0x2}, {0xe, 0x5, 0x200}, {0x10, 0x5, 0x5b}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xd, 0x4}, {0xc, 0x1}, {0xd, 0x4}, {0xc, 0x4}, {0x0, 0x4}, {0xb, 0x4}]}, @ptr={0x5, 0x0, 0x0, 0x2, 0x1}, @typedef={0x3, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x30]}}, &(0x7f00000007c0)=""/4096, 0xb2, 0x1000, 0x0, 0x1, 0x10000, @value=r0}, 0x28) syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0xdc, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000017c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000400)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}, @printk={@lli}], &(0x7f0000000000)='GPL\x00', 0xdff9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, r6, 0x8, &(0x7f0000000580)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x9, 0x80, 0x9}, 0x10, r7, 0x0, 0x9, &(0x7f0000000640)=[r2, r2], &(0x7f0000000680)=[{0x1, 0x3, 0x9, 0x5}, {0x3, 0x4, 0x10, 0x10}, {0x4, 0x3, 0x8, 0xb}, {0x3, 0x4, 0x4, 0x7}, {0x3, 0x5, 0x6, 0x3}, {0x0, 0x3, 0x1, 0x4}, {0x3, 0x1, 0xb, 0x2}, {0x3, 0x2, 0x2, 0x9}, {0x1, 0x2, 0x6, 0x8}], 0x10, 0xfffffd29}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r5}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bce5a6f087ae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e3861121", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f0000001880)='wbt_lat\x00', r9, 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r8, &(0x7f0000000380)="0099d885", &(0x7f0000000480)=@tcp6=r0, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 712.936213ms ago: executing program 4 (id=3242): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x2, 0x0, 0x2, 0x10, 0x0, 0x0, 0x40, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x80}, 0x1, 0x7}, 0x4000001) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x7, 0x1, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r2, 0xffffd000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r5 = socket(0x2a, 0x2, 0x4) (rerun: 64) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000180)={'veth0_virt_wifi\x00', 0x0}) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2404c0c0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}]}}}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r8}, 0x10) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r9 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r9, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@mcast2, @broadcast, 0xf, 0x20}}) (async) getsockopt$inet_tcp_int(r9, 0x6, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x2, 0x0) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000007000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 645.412354ms ago: executing program 6 (id=3243): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081184e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r1 = socket(0x10, 0x2, 0xfffffffc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000840)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@loopback, 0x0, r5}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES64=r5, @ANYRES32=r6], 0x7c}}, 0x805) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48010000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000a08000240000000000900010073797a30000000000900020073797a3200000000eb0007"], 0x170}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'sit0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000500000000000000000000090300000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000100000d03000000030000000300000000005f2e"], 0x0, 0x65}, 0x28) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r8, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8011) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80000) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r9, 0x0, 0x417}, 0x18) r10 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r10, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000240)="15", 0x1}], 0x1}, 0x4000080) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) r14 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r11, r13, 0x25, 0x0, @void}, 0x10) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r14, r15}, 0x5) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) 620.246239ms ago: executing program 5 (id=3244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x15, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8000080}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0xf8, 0x0, 0x3ff, 0x11, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x1, 0x4, 0xf2a}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@restrict={0x10, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x0]}}, &(0x7f0000000700)=""/207, 0x27, 0xcf, 0x0, 0x2}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1d, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x10}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @ldst={0x0, 0x0, 0x2, 0x1, 0x5, 0x18, 0x10}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x10, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000480)=[{0x3, 0x2, 0x8, 0x7}, {0x2, 0x5, 0x3, 0x3}, {0x1, 0x1, 0x1, 0x4}, {0x0, 0x1, 0x7, 0xb}, {0x0, 0x1, 0x2}], 0x10, 0xd7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 527.551832ms ago: executing program 0 (id=3245): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl1\x00', r1, 0x29, 0x3, 0x2, 0x0, 0x0, @empty, @mcast1, 0x8, 0x7800, 0x26efdd54, 0x7fff}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex=r3, 0x9, 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x23}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a62f81681ae4b7885a97ac52e7"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004800}, 0x40) 393.306656ms ago: executing program 4 (id=3246): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) (async) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0, 0x0, 0x4048800}, 0x20008801) (async) sendmsg$tipc(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0, 0x0, 0x4048800}, 0x20008801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendto(r0, &(0x7f0000000000)="1be3c40975a591a8b67563fb89194230512cbfefebad9ed48eac6ee2ed3e98461d67566f90c65e497941ee2db70a81157c78365bd16fa258572f0f974a7e311c1e494eea5bb2fe67b1e2f1b2361d1d4079f61bfaf3d7d8fd84bc1660a615f14b37e7355bfa6f6f9828b0dc6cd8cf1f140c5d6103d8c644cf82e5c062615d309be73a7514459a6b9bdbeae2fddfb8a70a1013799f5d4bc1b342186131c704aad53a3f237fe2d8dbe947a83be91b4c0bcbd7d77844dbb845f509794564c31731a444f0d2c4a6", 0xc5, 0x2004c090, &(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0x0, 0x6, 0xe, 0xfc, "fcd1ea57c698e8be31efff9763ac17441719e9973bcb953e5384228102704ddf15d7235797465892f1133ea65f530366ef48df8f0ecc423e6906ba8b4eb6cd", 0x10}, 0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x80, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x3}}, 0xe8) close(r0) 392.829134ms ago: executing program 5 (id=3247): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000004a00010029bd7000fbdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="090000001400010000000000000000c954"], 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x4010) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40048881}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd, 0x40000000}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x28514829}, @in6={0xa, 0x4e22, 0xfffffffe, @private1, 0x8}}, @sadb_key={0x1, 0x8}]}, 0x80}, 0x1, 0x7}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0xcf, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0xcf, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) 327.824858ms ago: executing program 0 (id=3248): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f00000000c0)=@ethtool_stats}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r3, 0x207}, 0x14}}, 0x8084) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r5, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000140)={@hci={0x1f, 0x4, 0x4}, {0x0}, 0x0, 0x41}, 0xa0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff000000000700000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = accept$inet(r4, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x6, 0x3, 0xd, 0x800, 0x200, 0x400, 0x6, {0x0, @in={{0x2, 0x4e24, @remote}}, 0xf24b, 0x3, 0x5, 0x8000, 0xe47}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000240)={r9, 0x7, 0xffff, 0x6, 0x98, 0xffffffff}, 0x14) 291.232316ms ago: executing program 5 (id=3249): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000300)=""/234, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x7, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') unshare(0x22020600) socket$rds(0x15, 0x5, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r3, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x24}}, 0x0) clock_gettime(0x0, &(0x7f00000039c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000003880)=[{{&(0x7f0000000000)=@in6, 0x80, &(0x7f0000000180)=[{&(0x7f0000000540)=""/138, 0x8a}, {&(0x7f0000000600)=""/231, 0xe7}, {&(0x7f0000000700)=""/240, 0xf0}, {&(0x7f00000000c0)}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/170, 0xaa}, {&(0x7f0000000100)=""/47, 0x2f}], 0x7, &(0x7f0000000240)=""/35, 0x23}, 0x9}, {{&(0x7f00000018c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001940)=""/198, 0xc6}, {&(0x7f0000001a40)=""/127, 0x7f}, {&(0x7f0000001ac0)=""/171, 0xab}, {&(0x7f0000001b80)=""/111, 0x6f}], 0x4, &(0x7f0000001c00)=""/4096, 0x1000}}, {{&(0x7f0000002c00)=@nfc, 0x80, &(0x7f0000003040)=[{&(0x7f0000000480)=""/53, 0x35}, {&(0x7f0000002c80)=""/57, 0x39}, {&(0x7f0000002cc0)=""/182, 0xb6}, {&(0x7f0000002d80)=""/12, 0xc}, {&(0x7f0000002dc0)=""/124, 0x7c}, {&(0x7f0000002e40)=""/172, 0xac}, {&(0x7f0000002f00)=""/231, 0xe7}, {&(0x7f0000003000)=""/16, 0x10}], 0x8, &(0x7f00000030c0)=""/113, 0x71}, 0x7}, {{&(0x7f0000003140)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000031c0), 0x0, &(0x7f0000003200)=""/166, 0xa6}, 0x3}, {{&(0x7f00000032c0)=@isdn, 0x80, &(0x7f0000003800)=[{&(0x7f0000003340)}, {&(0x7f0000003380)=""/68, 0x44}, {&(0x7f0000003400)=""/221, 0xdd}, {&(0x7f0000003500)=""/253, 0xfd}, {&(0x7f0000003600)=""/150, 0x96}, {&(0x7f00000036c0)=""/157, 0x9d}, {&(0x7f0000003780)=""/117, 0x75}], 0x7}, 0xd}], 0x5, 0x20, &(0x7f0000003a00)={r6, r7+10000000}) 197.166885ms ago: executing program 2 (id=3250): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000080}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0521000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) 52.843629ms ago: executing program 0 (id=3251): socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) unshare(0x22020400) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb11001800000000dfc082047d46"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000082aaaaaaaaaaaa88a800008100000086dd60"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000008c0)={r4, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000580)={r5, 0xb0, "f3663f226195d6a79015bb7b7734e7b5cd0fc5ae73f19549a5265d3f7c2a59f3fb838ee4d0db19a76405a931228efc4b93af18c6e336e5a45f297f041dd5ede1bdfe7bc61efad3ea56471ee3dad245d2d70ee8205fc9d7f6587693b9feac0f83e9d3fd5512fdb2fe2946983477dc88dcc14f570e427ecdf20f78715deb4abf1f0a99766f9cc11615a9eabcb77f2c56270cae48f1f9ab9b4bc26c1d1e1db331e246a97c555caf9d90a9d4c53d954970d3"}, &(0x7f0000000000)=0xb8) 0s ago: executing program 4 (id=3252): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x64}}, 0x84000) accept4$unix(r2, 0x0, &(0x7f0000000100), 0x0) kernel console output (not intermixed with test programs): 0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.770326][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.778325][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.786208][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.794234][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.802112][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.810090][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.817996][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.826017][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.834033][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.842041][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.849900][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.857912][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.865808][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.873916][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.881801][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.889780][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.897702][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.905718][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.913581][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.921585][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.929458][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.937623][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.945490][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.953495][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.961358][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.969358][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.977237][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 260.985221][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 260.993080][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.001030][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.008895][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.016869][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.024894][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.032899][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.040748][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.048871][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.056756][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.064759][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.072618][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.080533][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.088486][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.096554][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 261.104445][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 261.425905][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1083'. [ 261.615596][T10170] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1087'. [ 261.624871][T10170] net_ratelimit: 21 callbacks suppressed [ 261.624888][T10170] openvswitch: netlink: Flow actions attr not present in new flow. [ 261.884796][T10185] IPVS: set_ctl: invalid protocol: 136 172.20.20.39:20000 [ 262.105706][T10197] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1095'. [ 262.115105][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1095'. [ 262.501140][T10216] validate_nla: 1 callbacks suppressed [ 262.501162][T10216] netlink: 'syz.0.1102': attribute type 1 has an invalid length. [ 262.521594][T10210] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1099'. [ 262.595979][T10221] netlink: 'syz.2.1104': attribute type 1 has an invalid length. [ 262.644904][T10221] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 262.865173][T10228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.030381][T10238] syz_tun: left promiscuous mode [ 263.060237][T10238] syz_tun: left allmulticast mode [ 263.107136][T10238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.187387][T10236] lo speed is unknown, defaulting to 1000 [ 263.314827][T10236] syzkaller0 speed is unknown, defaulting to 1000 [ 263.629950][T10251] lo speed is unknown, defaulting to 1000 [ 263.659850][T10251] syzkaller0 speed is unknown, defaulting to 1000 [ 263.843229][T10262] tipc: Enabling of bearer rejected, already enabled [ 263.854602][T10262] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 263.872316][T10262] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 263.882076][T10262] tipc: Resetting bearer [ 264.003883][ T9039] syzkaller0 speed is unknown, defaulting to 1000 [ 264.207773][T10262] tipc: Resetting bearer [ 264.232839][ T1164] tipc: Resetting bearer [ 264.250022][T10280] netlink: 'syz.0.1118': attribute type 29 has an invalid length. [ 264.261238][T10282] netlink: 'syz.4.1117': attribute type 2 has an invalid length. [ 264.262189][T10280] netlink: 'syz.0.1118': attribute type 29 has an invalid length. [ 264.270441][T10282] netlink: 'syz.4.1117': attribute type 2 has an invalid length. [ 264.286965][T10280] netlink: 'syz.0.1118': attribute type 29 has an invalid length. [ 264.350091][T10280] netlink: 'syz.0.1118': attribute type 29 has an invalid length. [ 264.370498][T10280] netlink: 'syz.0.1118': attribute type 29 has an invalid length. [ 264.409467][T10280] netlink: 'syz.0.1118': attribute type 29 has an invalid length. [ 264.527406][T10290] syzkaller0: entered promiscuous mode [ 264.538836][T10290] syzkaller0: entered allmulticast mode [ 264.558742][ T13] tipc: Subscription rejected, illegal request [ 264.684033][T10296] tipc: Started in network mode [ 264.689178][T10296] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711 [ 264.699426][T10296] tipc: Enabling of bearer rejected, failed to enable media [ 264.996991][T10312] pimreg: entered allmulticast mode [ 265.134915][T10319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.399179][T10332] __nla_validate_parse: 3 callbacks suppressed [ 265.399199][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1132'. [ 265.481611][T10325] lo speed is unknown, defaulting to 1000 [ 265.489518][T10325] syzkaller0 speed is unknown, defaulting to 1000 [ 266.365554][T10352] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1140'. [ 266.472641][T10354] gre1: entered allmulticast mode [ 266.800104][T10358] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 266.893117][T10314] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1128'. [ 266.922198][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'. [ 266.962734][T10354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1141'. [ 267.001682][T10354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1141'. [ 267.053424][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1144'. [ 267.135086][T10364] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 267.221478][T10364] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 267.282877][T10364] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 267.463103][T10371] vxcan1: entered allmulticast mode [ 267.727201][T10378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1150'. [ 267.741256][T10382] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1149'. [ 267.917921][T10388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1151'. [ 267.932447][T10388] openvswitch: netlink: Missing key (keys=40, expected=80) [ 268.434888][T10410] tipc: Enabling of bearer rejected, already enabled [ 268.792749][T10422] delete_channel: no stack [ 268.798405][T10422] delete_channel: no stack [ 269.594250][T10444] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 269.671011][T10444] team0: Device ipip0 is of different type [ 269.896532][T10459] 8021q: VLANs not supported on caif0 [ 270.254961][T10463] lo speed is unknown, defaulting to 1000 [ 270.338922][T10463] syzkaller0 speed is unknown, defaulting to 1000 [ 270.433986][T10483] validate_nla: 28 callbacks suppressed [ 270.434011][T10483] netlink: 'syz.0.1182': attribute type 29 has an invalid length. [ 270.584450][T10487] __nla_validate_parse: 9 callbacks suppressed [ 270.584470][T10487] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1182'. [ 270.647950][T10483] netlink: 'syz.0.1182': attribute type 29 has an invalid length. [ 270.659658][T10489] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1184'. [ 270.823585][T10491] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1185'. [ 271.031276][T10499] 8021q: VLANs not supported on ip6_vti0 [ 271.039844][T10499] netlink: 'syz.2.1187': attribute type 3 has an invalid length. [ 271.163230][T10501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1188'. [ 272.174149][T10511] netlink: 'syz.0.1193': attribute type 10 has an invalid length. [ 272.201664][T10511] netlink: 5852 bytes leftover after parsing attributes in process `syz.0.1193'. [ 272.257885][T10514] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1191'. [ 272.291753][T10514] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1191'. [ 272.370983][T10520] netlink: 'syz.5.1197': attribute type 1 has an invalid length. [ 272.595861][T10516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.703956][T10516] tipc: Resetting bearer [ 272.791471][T10529] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 272.803990][T10533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 272.811010][ T1164] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 272.838890][T10540] veth5: entered promiscuous mode [ 272.844518][ T37] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.855713][ T37] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.876272][T10536] bridge_slave_0: left allmulticast mode [ 272.882149][T10536] bridge_slave_0: left promiscuous mode [ 272.887896][T10536] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.898138][T10536] bridge_slave_1: left allmulticast mode [ 272.903973][T10536] bridge_slave_1: left promiscuous mode [ 272.909758][T10536] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.921191][T10536] bond0: (slave bond_slave_0): Releasing backup interface [ 272.936034][ T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 272.950958][T10536] bond0: (slave bond_slave_1): Releasing backup interface [ 272.979648][T10536] team0: Port device team_slave_0 removed [ 272.996735][T10536] team0: Port device team_slave_1 removed [ 273.004265][T10536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.013073][T10536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.022465][T10536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.030078][T10536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.040120][T10536] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 273.069048][ T37] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.080124][ T37] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.095002][ T37] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.104060][ T37] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.126799][T10532] lo speed is unknown, defaulting to 1000 [ 273.194822][ T37] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.224973][ T37] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.251914][T10532] syzkaller0 speed is unknown, defaulting to 1000 [ 273.258582][T10548] netlink: 'syz.5.1200': attribute type 12 has an invalid length. [ 273.874102][T10573] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1206'. [ 273.948858][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'. [ 273.958791][T10576] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1207'. [ 274.706801][T10609] macsec2: entered promiscuous mode [ 274.712440][T10609] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 274.719827][T10609] macsec2: entered allmulticast mode [ 274.725446][T10609] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 274.791803][T10606] lo speed is unknown, defaulting to 1000 [ 274.813382][T10606] syzkaller0 speed is unknown, defaulting to 1000 [ 275.268739][T10624] tipc: New replicast peer: 255.255.255.255 [ 275.285023][T10624] tipc: Enabled bearer , priority 10 [ 275.763117][T10633] __nla_validate_parse: 7 callbacks suppressed [ 275.763139][T10633] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1226'. [ 275.892220][T10635] sctp: [Deprecated]: syz.5.1227 (pid 10635) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.892220][T10635] Use struct sctp_sack_info instead [ 275.925284][T10635] sctp: [Deprecated]: syz.5.1227 (pid 10635) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.925284][T10635] Use struct sctp_sack_info instead [ 276.299361][T10637] netlink: 'syz.5.1228': attribute type 3 has an invalid length. [ 276.307291][T10637] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1228'. [ 276.542044][T10642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1230'. [ 276.666284][T10642] 8021q: adding VLAN 0 to HW filter on device bond5 [ 276.857825][T10653] FAULT_INJECTION: forcing a failure. [ 276.857825][T10653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.901708][T10653] CPU: 0 UID: 0 PID: 10653 Comm: syz.2.1232 Not tainted syzkaller #0 PREEMPT(full) [ 276.901737][T10653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 276.901762][T10653] Call Trace: [ 276.901770][T10653] [ 276.901779][T10653] dump_stack_lvl+0x189/0x250 [ 276.901811][T10653] ? __pfx____ratelimit+0x10/0x10 [ 276.901833][T10653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.901858][T10653] ? __pfx__printk+0x10/0x10 [ 276.901887][T10653] ? __might_fault+0xb0/0x130 [ 276.901928][T10653] should_fail_ex+0x414/0x560 [ 276.901965][T10653] _copy_from_user+0x2d/0xb0 [ 276.901989][T10653] ___sys_sendmsg+0x158/0x2a0 [ 276.902018][T10653] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.902087][T10653] ? __fget_files+0x2a/0x420 [ 276.902104][T10653] ? __fget_files+0x3a0/0x420 [ 276.902135][T10653] __x64_sys_sendmsg+0x19b/0x260 [ 276.902167][T10653] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 276.902205][T10653] ? __pfx_ksys_write+0x10/0x10 [ 276.902241][T10653] ? rcu_is_watching+0x15/0xb0 [ 276.902268][T10653] ? do_syscall_64+0xbe/0x3b0 [ 276.902296][T10653] do_syscall_64+0xfa/0x3b0 [ 276.902317][T10653] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.902339][T10653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.902359][T10653] ? clear_bhb_loop+0x60/0xb0 [ 276.902384][T10653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.902418][T10653] RIP: 0033:0x7f756958ec29 [ 276.902437][T10653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.902454][T10653] RSP: 002b:00007f756a446038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.902475][T10653] RAX: ffffffffffffffda RBX: 00007f75697d5fa0 RCX: 00007f756958ec29 [ 276.902489][T10653] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 276.902502][T10653] RBP: 00007f756a446090 R08: 0000000000000000 R09: 0000000000000000 [ 276.902515][T10653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.902526][T10653] R13: 00007f75697d6038 R14: 00007f75697d5fa0 R15: 00007fffd6856f48 [ 276.902559][T10653] [ 277.206041][T10658] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1234'. [ 277.270377][T10663] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1235'. [ 277.466119][T10669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1239'. [ 277.478872][T10672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1239'. [ 277.645865][T10675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1241'. [ 277.736880][T10676] ip6gre2: entered allmulticast mode [ 277.942747][T10670] netlink: 'syz.0.1240': attribute type 3 has an invalid length. [ 277.956690][T10670] netlink: 'syz.0.1240': attribute type 3 has an invalid length. [ 278.068595][T10686] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1244'. [ 278.438797][T10697] geneve2: entered promiscuous mode [ 278.457045][T10698] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1247'. [ 278.503049][T10698] netlink: 'syz.0.1247': attribute type 13 has an invalid length. [ 278.510945][T10698] netlink: 'syz.0.1247': attribute type 17 has an invalid length. [ 278.629454][T10698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.778225][T10700] lo speed is unknown, defaulting to 1000 [ 278.831014][T10700] syzkaller0 speed is unknown, defaulting to 1000 [ 279.019767][T10707] lo speed is unknown, defaulting to 1000 [ 279.059481][T10703] lo speed is unknown, defaulting to 1000 [ 279.079999][T10707] syzkaller0 speed is unknown, defaulting to 1000 [ 279.099342][T10716] lo speed is unknown, defaulting to 1000 [ 279.163148][T10703] syzkaller0 speed is unknown, defaulting to 1000 [ 279.321219][T10716] syzkaller0 speed is unknown, defaulting to 1000 [ 279.360482][T10566] Set syz1 is full, maxelem 65536 reached [ 279.547419][T10726] tipc: Enabling of bearer rejected, already enabled [ 280.088869][T10738] lo speed is unknown, defaulting to 1000 [ 280.098494][T10738] syzkaller0 speed is unknown, defaulting to 1000 [ 280.504374][T10762] IPVS: Scheduler module ip_vs_ not found [ 281.126272][T10792] __nla_validate_parse: 7 callbacks suppressed [ 281.126293][T10792] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1271'. [ 281.501967][T10804] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1272'. [ 281.525218][T10803] batadv1: entered promiscuous mode [ 281.546001][T10803] batadv1: entered allmulticast mode [ 281.582340][T10806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.617567][T10812] netlink: 'syz.0.1275': attribute type 2 has an invalid length. [ 281.673142][T10812] : entered promiscuous mode [ 281.835859][T10816] netlink: 'syz.0.1276': attribute type 9 has an invalid length. [ 281.865904][T10816] netlink: 'syz.0.1276': attribute type 7 has an invalid length. [ 281.878783][T10816] netlink: 'syz.0.1276': attribute type 8 has an invalid length. [ 281.883673][T10818] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1277'. [ 281.942231][T10819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1276'. [ 281.985220][T10819] dvmrp0: entered allmulticast mode [ 281.994276][T10821] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1278'. [ 282.113906][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1279'. [ 282.146196][T10823] netlink: 'syz.5.1279': attribute type 2 has an invalid length. [ 282.370785][T10829] FAULT_INJECTION: forcing a failure. [ 282.370785][T10829] name failslab, interval 1, probability 0, space 0, times 0 [ 282.387863][T10829] CPU: 1 UID: 0 PID: 10829 Comm: syz.5.1281 Not tainted syzkaller #0 PREEMPT(full) [ 282.387892][T10829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.387905][T10829] Call Trace: [ 282.387914][T10829] [ 282.387923][T10829] dump_stack_lvl+0x189/0x250 [ 282.387954][T10829] ? __pfx____ratelimit+0x10/0x10 [ 282.387977][T10829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.388001][T10829] ? __pfx__printk+0x10/0x10 [ 282.388038][T10829] ? __pfx___might_resched+0x10/0x10 [ 282.388057][T10829] ? fs_reclaim_acquire+0x7d/0x100 [ 282.388082][T10829] should_fail_ex+0x414/0x560 [ 282.388123][T10829] ? __pfx_sock_alloc_inode+0x10/0x10 [ 282.388143][T10829] should_failslab+0xa8/0x100 [ 282.388176][T10829] ? __pfx_sock_alloc_inode+0x10/0x10 [ 282.388193][T10829] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 282.388222][T10829] ? sock_alloc_inode+0x28/0xc0 [ 282.388246][T10829] ? __pfx_sock_alloc_inode+0x10/0x10 [ 282.388265][T10829] sock_alloc_inode+0x28/0xc0 [ 282.388284][T10829] alloc_inode+0x6a/0x1b0 [ 282.388317][T10829] __sock_create+0x12d/0x9f0 [ 282.388351][T10829] udp_sock_create4+0xbe/0x4b0 [ 282.388379][T10829] ? __pfx_udp_sock_create4+0x10/0x10 [ 282.388416][T10829] rxrpc_lookup_local+0xcae/0x1410 [ 282.388461][T10829] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 282.388505][T10829] ? __local_bh_enable_ip+0x12d/0x1c0 [ 282.388531][T10829] ? __local_bh_enable_ip+0x12d/0x1c0 [ 282.388556][T10829] ? do_raw_spin_unlock+0x122/0x240 [ 282.388589][T10829] rxrpc_sendmsg+0x399/0x710 [ 282.388623][T10829] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 282.388652][T10829] __sock_sendmsg+0x21c/0x270 [ 282.388676][T10829] ____sys_sendmsg+0x505/0x830 [ 282.388711][T10829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.388770][T10829] ? import_iovec+0x74/0xa0 [ 282.388802][T10829] ___sys_sendmsg+0x21f/0x2a0 [ 282.388834][T10829] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.388905][T10829] ? __fget_files+0x2a/0x420 [ 282.388923][T10829] ? __fget_files+0x3a0/0x420 [ 282.388955][T10829] __x64_sys_sendmsg+0x19b/0x260 [ 282.388987][T10829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.389027][T10829] ? __pfx_ksys_write+0x10/0x10 [ 282.389052][T10829] ? rcu_is_watching+0x15/0xb0 [ 282.389079][T10829] ? do_syscall_64+0xbe/0x3b0 [ 282.389108][T10829] do_syscall_64+0xfa/0x3b0 [ 282.389130][T10829] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.389151][T10829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.389172][T10829] ? clear_bhb_loop+0x60/0xb0 [ 282.389197][T10829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.389217][T10829] RIP: 0033:0x7f86c358ec29 [ 282.389235][T10829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.389252][T10829] RSP: 002b:00007f86c43be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.389273][T10829] RAX: ffffffffffffffda RBX: 00007f86c37d5fa0 RCX: 00007f86c358ec29 [ 282.389288][T10829] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 282.389301][T10829] RBP: 00007f86c43be090 R08: 0000000000000000 R09: 0000000000000000 [ 282.389313][T10829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.389324][T10829] R13: 00007f86c37d6038 R14: 00007f86c37d5fa0 R15: 00007ffdf5911d68 [ 282.389358][T10829] [ 282.389736][T10829] socket: no more sockets [ 282.404107][T10830] netlink: 'syz.6.1280': attribute type 7 has an invalid length. [ 282.512385][T10833] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1280'. [ 282.821612][T10772] Set syz1 is full, maxelem 65536 reached [ 282.900012][T10837] tipc: Enabled bearer , priority 0 [ 282.917735][T10837] tipc: Resetting bearer [ 282.957381][T10837] tipc: Resetting bearer [ 283.148095][T10846] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1288'. [ 283.286055][T10848] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1286'. [ 283.311691][T10848] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1286'. [ 283.392432][T10842] syz.4.1286 (10842) used greatest stack depth: 17864 bytes left [ 283.481911][T10859] FAULT_INJECTION: forcing a failure. [ 283.481911][T10859] name failslab, interval 1, probability 0, space 0, times 0 [ 283.525983][T10859] CPU: 0 UID: 0 PID: 10859 Comm: syz.0.1292 Not tainted syzkaller #0 PREEMPT(full) [ 283.526012][T10859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 283.526025][T10859] Call Trace: [ 283.526033][T10859] [ 283.526042][T10859] dump_stack_lvl+0x189/0x250 [ 283.526074][T10859] ? __pfx____ratelimit+0x10/0x10 [ 283.526097][T10859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.526121][T10859] ? __pfx__printk+0x10/0x10 [ 283.526156][T10859] ? __pfx___might_resched+0x10/0x10 [ 283.526175][T10859] ? fs_reclaim_acquire+0x7d/0x100 [ 283.526200][T10859] should_fail_ex+0x414/0x560 [ 283.526237][T10859] should_failslab+0xa8/0x100 [ 283.526269][T10859] kmem_cache_alloc_noprof+0x73/0x3c0 [ 283.526296][T10859] ? security_inode_alloc+0x39/0x330 [ 283.526325][T10859] security_inode_alloc+0x39/0x330 [ 283.526350][T10859] inode_init_always_gfp+0x9ed/0xdc0 [ 283.526411][T10859] ? __pfx_sock_alloc_inode+0x10/0x10 [ 283.526444][T10859] alloc_inode+0x82/0x1b0 [ 283.526476][T10859] __sock_create+0x12d/0x9f0 [ 283.526510][T10859] udp_sock_create4+0xbe/0x4b0 [ 283.526536][T10859] ? __pfx_udp_sock_create4+0x10/0x10 [ 283.526575][T10859] rxrpc_lookup_local+0xcae/0x1410 [ 283.526618][T10859] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 283.526658][T10859] ? __local_bh_enable_ip+0x12d/0x1c0 [ 283.526682][T10859] ? __local_bh_enable_ip+0x12d/0x1c0 [ 283.526707][T10859] ? do_raw_spin_unlock+0x122/0x240 [ 283.526739][T10859] rxrpc_sendmsg+0x399/0x710 [ 283.526772][T10859] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 283.526804][T10859] __sock_sendmsg+0x21c/0x270 [ 283.526829][T10859] ____sys_sendmsg+0x505/0x830 [ 283.526864][T10859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.526903][T10859] ? import_iovec+0x74/0xa0 [ 283.526935][T10859] ___sys_sendmsg+0x21f/0x2a0 [ 283.526965][T10859] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.527037][T10859] ? __fget_files+0x2a/0x420 [ 283.527055][T10859] ? __fget_files+0x3a0/0x420 [ 283.527086][T10859] __x64_sys_sendmsg+0x19b/0x260 [ 283.527118][T10859] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 283.527157][T10859] ? __pfx_ksys_write+0x10/0x10 [ 283.527183][T10859] ? rcu_is_watching+0x15/0xb0 [ 283.527210][T10859] ? do_syscall_64+0xbe/0x3b0 [ 283.527238][T10859] do_syscall_64+0xfa/0x3b0 [ 283.527259][T10859] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.527281][T10859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.527301][T10859] ? clear_bhb_loop+0x60/0xb0 [ 283.527327][T10859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.527347][T10859] RIP: 0033:0x7fb9d358ec29 [ 283.527365][T10859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.527397][T10859] RSP: 002b:00007fb9d44c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.527419][T10859] RAX: ffffffffffffffda RBX: 00007fb9d37d5fa0 RCX: 00007fb9d358ec29 [ 283.527440][T10859] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 283.527453][T10859] RBP: 00007fb9d44c9090 R08: 0000000000000000 R09: 0000000000000000 [ 283.527465][T10859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.527477][T10859] R13: 00007fb9d37d6038 R14: 00007fb9d37d5fa0 R15: 00007ffc08fb1a78 [ 283.527512][T10859] [ 283.528214][T10859] socket: no more sockets [ 284.043786][T10875] syz.4.1296: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 284.123219][T10875] CPU: 0 UID: 0 PID: 10875 Comm: syz.4.1296 Not tainted syzkaller #0 PREEMPT(full) [ 284.123248][T10875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 284.123262][T10875] Call Trace: [ 284.123271][T10875] [ 284.123280][T10875] dump_stack_lvl+0x189/0x250 [ 284.123314][T10875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.123364][T10875] ? __pfx__printk+0x10/0x10 [ 284.123393][T10875] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 284.123418][T10875] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 284.123444][T10875] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 284.123471][T10875] warn_alloc+0x214/0x310 [ 284.123509][T10875] ? __pfx_warn_alloc+0x10/0x10 [ 284.123551][T10875] ? __get_vm_area_node+0x28f/0x300 [ 284.123581][T10875] ? packet_set_ring+0x6f3/0x2120 [ 284.123607][T10875] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 284.123672][T10875] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 284.123705][T10875] ? alloc_pages_mpol+0x3cd/0x4a0 [ 284.123736][T10875] ? packet_set_ring+0x6f3/0x2120 [ 284.123757][T10875] vzalloc_noprof+0xb2/0xf0 [ 284.123786][T10875] ? packet_set_ring+0x6f3/0x2120 [ 284.123809][T10875] packet_set_ring+0x6f3/0x2120 [ 284.123855][T10875] ? __pfx_packet_set_ring+0x10/0x10 [ 284.123899][T10875] ? _copy_from_user+0x94/0xb0 [ 284.123932][T10875] packet_setsockopt+0xc5a/0x12c0 [ 284.123956][T10875] ? __pfx_packet_setsockopt+0x10/0x10 [ 284.123985][T10875] ? __lock_acquire+0xab9/0xd20 [ 284.124021][T10875] ? aa_sk_perm+0x81e/0x950 [ 284.124058][T10875] ? __pfx_aa_sk_perm+0x10/0x10 [ 284.124091][T10875] ? __fget_files+0x2a/0x420 [ 284.124108][T10875] ? aa_sock_opt_perm+0xff/0x1b0 [ 284.124133][T10875] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 284.124155][T10875] ? __pfx_packet_setsockopt+0x10/0x10 [ 284.124179][T10875] do_sock_setsockopt+0x179/0x1b0 [ 284.124211][T10875] __x64_sys_setsockopt+0x13f/0x1b0 [ 284.124244][T10875] do_syscall_64+0xfa/0x3b0 [ 284.124266][T10875] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.124286][T10875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.124306][T10875] ? clear_bhb_loop+0x60/0xb0 [ 284.124330][T10875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.124356][T10875] RIP: 0033:0x7fba9458ec29 [ 284.124375][T10875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.124392][T10875] RSP: 002b:00007fba9539e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 284.124413][T10875] RAX: ffffffffffffffda RBX: 00007fba947d6090 RCX: 00007fba9458ec29 [ 284.124427][T10875] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000005 [ 284.124439][T10875] RBP: 00007fba94611e41 R08: 000000000000001c R09: 0000000000000000 [ 284.124451][T10875] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 284.124464][T10875] R13: 00007fba947d6128 R14: 00007fba947d6090 R15: 00007ffd5a67bf38 [ 284.124496][T10875] [ 284.124517][T10875] Mem-Info: [ 284.427489][T10875] active_anon:5144 inactive_anon:0 isolated_anon:0 [ 284.427489][T10875] active_file:3338 inactive_file:39945 isolated_file:0 [ 284.427489][T10875] unevictable:768 dirty:106 writeback:0 [ 284.427489][T10875] slab_reclaimable:11428 slab_unreclaimable:149561 [ 284.427489][T10875] mapped:29320 shmem:1362 pagetables:1167 [ 284.427489][T10875] sec_pagetables:0 bounce:0 [ 284.427489][T10875] kernel_misc_reclaimable:0 [ 284.427489][T10875] free:1278668 free_pcp:12317 free_cma:0 [ 284.475092][T10875] Node 0 active_anon:20476kB inactive_anon:0kB active_file:13352kB inactive_file:159580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117280kB dirty:424kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12356kB pagetables:4408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 284.512321][T10875] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 284.544112][T10875] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.600501][T10875] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 284.606778][T10875] Node 0 DMA32 free:1201992kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20432kB inactive_anon:0kB active_file:13352kB inactive_file:158008kB unevictable:1536kB writepending:424kB present:3129332kB managed:2557376kB mlocked:0kB bounce:0kB free_pcp:35328kB local_pcp:19208kB free_cma:0kB [ 284.646516][T10875] lowmem_reserve[]: 0 0 1 1 1 [ 284.652993][T10875] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 284.731618][T10875] lowmem_reserve[]: 0 0 0 0 0 [ 284.742047][T10875] Node 1 Normal free:3897308kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15080kB local_pcp:4992kB free_cma:0kB [ 284.813216][T10875] lowmem_reserve[]: 0 0 0 0 0 [ 284.829176][T10875] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 284.906701][T10875] Node 0 DMA32: 1337*4kB (UME) 1184*8kB (UM) 648*16kB (UME) 433*32kB (UME) 202*64kB (UME) 193*128kB (UM) 90*256kB (UME) 41*512kB (UM) 18*1024kB (UME) 3*2048kB (UM) 258*4096kB (UM) = 1202052kB [ 284.931059][T10907] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 284.938246][ C1] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 284.945160][ C1] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 284.970662][T10875] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 284.983750][T10875] Node 1 Normal: 128*4kB (UME) 52*8kB (UME) 42*16kB (UME) 143*32kB (UME) 39*64kB (UME) 8*128kB (UME) 5*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3897056kB [ 285.002485][T10875] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.024329][T10875] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 285.034708][T10875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.069392][T10875] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 285.097002][T10875] 44978 total pagecache pages [ 285.104265][T10875] 0 pages in swap cache [ 285.123184][T10875] Free swap = 124996kB [ 285.128655][T10875] Total swap = 124996kB [ 285.136186][T10875] 2097051 pages RAM [ 285.140124][T10875] 0 pages HighMem/MovableOnly [ 285.146369][T10875] 425681 pages reserved [ 285.150909][T10875] 0 pages cma reserved [ 285.301999][T10922] FAULT_INJECTION: forcing a failure. [ 285.301999][T10922] name failslab, interval 1, probability 0, space 0, times 0 [ 285.318765][T10922] CPU: 1 UID: 0 PID: 10922 Comm: syz.2.1309 Not tainted syzkaller #0 PREEMPT(full) [ 285.318795][T10922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 285.318808][T10922] Call Trace: [ 285.318817][T10922] [ 285.318826][T10922] dump_stack_lvl+0x189/0x250 [ 285.318855][T10922] ? __pfx____ratelimit+0x10/0x10 [ 285.318879][T10922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.318905][T10922] ? __pfx__printk+0x10/0x10 [ 285.318941][T10922] ? __pfx___might_resched+0x10/0x10 [ 285.318967][T10922] should_fail_ex+0x414/0x560 [ 285.319005][T10922] should_failslab+0xa8/0x100 [ 285.319039][T10922] kmem_cache_alloc_noprof+0x73/0x3c0 [ 285.319067][T10922] ? sk_prot_alloc+0x57/0x220 [ 285.319100][T10922] sk_prot_alloc+0x57/0x220 [ 285.319124][T10922] ? sk_alloc+0x24/0x370 [ 285.319153][T10922] sk_alloc+0x3a/0x370 [ 285.319183][T10922] inet_create+0x7a0/0x1000 [ 285.319204][T10922] ? inet_create+0x9c/0x1000 [ 285.319230][T10922] __sock_create+0x4b0/0x9f0 [ 285.319263][T10922] udp_sock_create4+0xbe/0x4b0 [ 285.319290][T10922] ? __pfx_udp_sock_create4+0x10/0x10 [ 285.319329][T10922] rxrpc_lookup_local+0xcae/0x1410 [ 285.319374][T10922] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 285.319413][T10922] ? __local_bh_enable_ip+0x12d/0x1c0 [ 285.319440][T10922] ? __local_bh_enable_ip+0x12d/0x1c0 [ 285.319466][T10922] ? do_raw_spin_unlock+0x122/0x240 [ 285.319498][T10922] rxrpc_sendmsg+0x399/0x710 [ 285.319543][T10922] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 285.319571][T10922] __sock_sendmsg+0x21c/0x270 [ 285.319597][T10922] ____sys_sendmsg+0x505/0x830 [ 285.319632][T10922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.319672][T10922] ? import_iovec+0x74/0xa0 [ 285.319705][T10922] ___sys_sendmsg+0x21f/0x2a0 [ 285.319736][T10922] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.319820][T10922] ? __fget_files+0x2a/0x420 [ 285.319838][T10922] ? __fget_files+0x3a0/0x420 [ 285.319868][T10922] __x64_sys_sendmsg+0x19b/0x260 [ 285.319899][T10922] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.319938][T10922] ? __pfx_ksys_write+0x10/0x10 [ 285.319963][T10922] ? rcu_is_watching+0x15/0xb0 [ 285.319989][T10922] ? do_syscall_64+0xbe/0x3b0 [ 285.320017][T10922] do_syscall_64+0xfa/0x3b0 [ 285.320038][T10922] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.320059][T10922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.320079][T10922] ? clear_bhb_loop+0x60/0xb0 [ 285.320104][T10922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.320124][T10922] RIP: 0033:0x7f756958ec29 [ 285.320142][T10922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.320159][T10922] RSP: 002b:00007f756a446038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.320180][T10922] RAX: ffffffffffffffda RBX: 00007f75697d5fa0 RCX: 00007f756958ec29 [ 285.320195][T10922] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 285.320208][T10922] RBP: 00007f756a446090 R08: 0000000000000000 R09: 0000000000000000 [ 285.320220][T10922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.320232][T10922] R13: 00007f75697d6038 R14: 00007f75697d5fa0 R15: 00007fffd6856f48 [ 285.320264][T10922] [ 285.946348][T10934] tipc: Enabling of bearer rejected, already enabled [ 285.974377][T10942] tipc: Started in network mode [ 285.979330][T10942] tipc: Node identity eeb3c6c33e1, cluster identity 4711 [ 285.987997][T10942] tipc: Enabled bearer , priority 0 [ 286.004035][T10934] tipc: Resetting bearer [ 286.092280][T10940] tipc: Resetting bearer [ 286.148715][T10938] tipc: Disabling bearer [ 286.203575][T10958] IPVS: Unknown mcast interface: veth0_virt_wifi [ 286.233920][T10947] lo speed is unknown, defaulting to 1000 [ 286.276522][T10947] syzkaller0 speed is unknown, defaulting to 1000 [ 286.291734][T10962] __nla_validate_parse: 3 callbacks suppressed [ 286.291755][T10962] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1321'. [ 286.370204][T10966] FAULT_INJECTION: forcing a failure. [ 286.370204][T10966] name failslab, interval 1, probability 0, space 0, times 0 [ 286.418849][T10966] CPU: 0 UID: 0 PID: 10966 Comm: syz.6.1322 Not tainted syzkaller #0 PREEMPT(full) [ 286.418878][T10966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.418891][T10966] Call Trace: [ 286.418900][T10966] [ 286.418910][T10966] dump_stack_lvl+0x189/0x250 [ 286.418940][T10966] ? __pfx____ratelimit+0x10/0x10 [ 286.418963][T10966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.418987][T10966] ? __pfx__printk+0x10/0x10 [ 286.419024][T10966] ? __pfx___might_resched+0x10/0x10 [ 286.419042][T10966] ? fs_reclaim_acquire+0x7d/0x100 [ 286.419067][T10966] should_fail_ex+0x414/0x560 [ 286.419104][T10966] should_failslab+0xa8/0x100 [ 286.419135][T10966] __kmalloc_noprof+0xcb/0x4f0 [ 286.419162][T10966] ? security_sk_alloc+0x52/0x390 [ 286.419193][T10966] security_sk_alloc+0x52/0x390 [ 286.419230][T10966] sk_prot_alloc+0x101/0x220 [ 286.419262][T10966] sk_alloc+0x3a/0x370 [ 286.419294][T10966] inet_create+0x7a0/0x1000 [ 286.419318][T10966] ? inet_create+0x9c/0x1000 [ 286.419347][T10966] __sock_create+0x4b0/0x9f0 [ 286.419381][T10966] udp_sock_create4+0xbe/0x4b0 [ 286.419407][T10966] ? __pfx_udp_sock_create4+0x10/0x10 [ 286.419446][T10966] rxrpc_lookup_local+0xcae/0x1410 [ 286.419489][T10966] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 286.419529][T10966] ? __local_bh_enable_ip+0x12d/0x1c0 [ 286.419554][T10966] ? __local_bh_enable_ip+0x12d/0x1c0 [ 286.419580][T10966] ? do_raw_spin_unlock+0x122/0x240 [ 286.419612][T10966] rxrpc_sendmsg+0x399/0x710 [ 286.419645][T10966] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 286.419673][T10966] __sock_sendmsg+0x21c/0x270 [ 286.419697][T10966] ____sys_sendmsg+0x505/0x830 [ 286.419732][T10966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.419772][T10966] ? import_iovec+0x74/0xa0 [ 286.419804][T10966] ___sys_sendmsg+0x21f/0x2a0 [ 286.419834][T10966] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.419906][T10966] ? __fget_files+0x2a/0x420 [ 286.419923][T10966] ? __fget_files+0x3a0/0x420 [ 286.419955][T10966] __x64_sys_sendmsg+0x19b/0x260 [ 286.419987][T10966] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.420026][T10966] ? __pfx_ksys_write+0x10/0x10 [ 286.420052][T10966] ? rcu_is_watching+0x15/0xb0 [ 286.420079][T10966] ? do_syscall_64+0xbe/0x3b0 [ 286.420107][T10966] do_syscall_64+0xfa/0x3b0 [ 286.420128][T10966] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.420149][T10966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.420170][T10966] ? clear_bhb_loop+0x60/0xb0 [ 286.420195][T10966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.420220][T10966] RIP: 0033:0x7fa890b8ec29 [ 286.420238][T10966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.420254][T10966] RSP: 002b:00007fa891ad0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.420276][T10966] RAX: ffffffffffffffda RBX: 00007fa890dd5fa0 RCX: 00007fa890b8ec29 [ 286.420291][T10966] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 286.420304][T10966] RBP: 00007fa891ad0090 R08: 0000000000000000 R09: 0000000000000000 [ 286.420317][T10966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.420328][T10966] R13: 00007fa890dd6038 R14: 00007fa890dd5fa0 R15: 00007ffd3fe3e8e8 [ 286.420362][T10966] [ 286.763598][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1325'. [ 286.773561][T10973] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 286.781172][T10973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.822485][T10970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1324'. [ 286.875297][T10977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.973280][T10980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 287.052009][T10975] lo speed is unknown, defaulting to 1000 [ 287.086036][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1328'. [ 287.097705][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 287.129640][T10975] syzkaller0 speed is unknown, defaulting to 1000 [ 287.255352][T10987] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1330'. [ 287.275868][T10989] netlink: 'syz.5.1331': attribute type 9 has an invalid length. [ 287.284065][T10989] netlink: 'syz.5.1331': attribute type 7 has an invalid length. [ 287.303900][T10989] netlink: 'syz.5.1331': attribute type 8 has an invalid length. [ 287.406763][T10992] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1331'. [ 287.437654][T10994] netlink: 'syz.2.1334': attribute type 21 has an invalid length. [ 287.503393][T10994] netlink: 'syz.2.1334': attribute type 6 has an invalid length. [ 287.516726][T10994] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1334'. [ 287.570595][T10998] dvmrp0: entered allmulticast mode [ 287.820820][T11005] lo speed is unknown, defaulting to 1000 [ 287.829089][T11005] syzkaller0 speed is unknown, defaulting to 1000 [ 287.839193][T11016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1338'. [ 287.885066][T11016] netlink: 'syz.0.1338': attribute type 2 has an invalid length. [ 288.487333][T11062] netlink: 'syz.2.1343': attribute type 3 has an invalid length. [ 288.533229][T11062] netlink: 'syz.2.1343': attribute type 1 has an invalid length. [ 288.590790][T11062] netlink: 'syz.2.1343': attribute type 39 has an invalid length. [ 288.699569][T11058] netlink: 'syz.5.1347': attribute type 10 has an invalid length. [ 288.727276][T11048] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 288.798149][T11058] syz_tun: entered promiscuous mode [ 288.850263][T11058] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 288.891909][T11070] lo speed is unknown, defaulting to 1000 [ 288.899476][T11076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.923836][T11076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.932973][T11076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.940478][T11076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.006603][T11070] syzkaller0 speed is unknown, defaulting to 1000 [ 289.013720][T11063] tipc: Resetting bearer [ 289.189796][T11063] tipc: Resetting bearer [ 289.258397][T11085] lo speed is unknown, defaulting to 1000 [ 289.267770][T11085] syzkaller0 speed is unknown, defaulting to 1000 [ 289.594839][T11102] tipc: Enabling of bearer rejected, already enabled [ 289.971815][T11125] team0: Device gtp0 is of different type [ 290.111583][T11128] wg1 speed is unknown, defaulting to 1000 [ 290.136119][T11128] wg1 speed is unknown, defaulting to 1000 [ 290.182761][T11128] wg1 speed is unknown, defaulting to 1000 [ 290.236252][T11135] tipc: Bearer : already 2 bearers with priority 10 [ 290.253060][T11128] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 290.255195][T11135] tipc: Bearer : trying with adjusted priority [ 290.280460][T11135] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 290.330973][T11128] wg1 speed is unknown, defaulting to 1000 [ 290.353683][T11128] wg1 speed is unknown, defaulting to 1000 [ 290.371894][T11128] wg1 speed is unknown, defaulting to 1000 [ 290.379698][T11128] wg1 speed is unknown, defaulting to 1000 [ 290.413716][T11128] wg1 speed is unknown, defaulting to 1000 [ 290.518258][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.731539][T11159] FAULT_INJECTION: forcing a failure. [ 290.731539][T11159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.791820][T11159] CPU: 0 UID: 0 PID: 11159 Comm: syz.5.1376 Not tainted syzkaller #0 PREEMPT(full) [ 290.791849][T11159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 290.791862][T11159] Call Trace: [ 290.791871][T11159] [ 290.791879][T11159] dump_stack_lvl+0x189/0x250 [ 290.791909][T11159] ? __pfx____ratelimit+0x10/0x10 [ 290.791931][T11159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.791956][T11159] ? __pfx__printk+0x10/0x10 [ 290.791997][T11159] should_fail_ex+0x414/0x560 [ 290.792032][T11159] _copy_to_user+0x31/0xb0 [ 290.792062][T11159] simple_read_from_buffer+0xe1/0x170 [ 290.792097][T11159] proc_fail_nth_read+0x1b3/0x220 [ 290.792124][T11159] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.792151][T11159] ? rw_verify_area+0x2a6/0x4d0 [ 290.792192][T11159] ? __lock_acquire+0xab9/0xd20 [ 290.792220][T11159] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.792245][T11159] vfs_read+0x1fd/0xa30 [ 290.792284][T11159] ? fdget_pos+0x247/0x320 [ 290.792306][T11159] ? __pfx___mutex_lock+0x10/0x10 [ 290.792328][T11159] ? __pfx_vfs_read+0x10/0x10 [ 290.792355][T11159] ? __fget_files+0x2a/0x420 [ 290.792378][T11159] ? __fget_files+0x3a0/0x420 [ 290.792393][T11159] ? __fget_files+0x2a/0x420 [ 290.792421][T11159] ksys_read+0x145/0x250 [ 290.792450][T11159] ? __pfx_ksys_read+0x10/0x10 [ 290.792473][T11159] ? rcu_is_watching+0x15/0xb0 [ 290.792499][T11159] ? do_syscall_64+0xbe/0x3b0 [ 290.792527][T11159] do_syscall_64+0xfa/0x3b0 [ 290.792548][T11159] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.792568][T11159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.792588][T11159] ? clear_bhb_loop+0x60/0xb0 [ 290.792612][T11159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.792632][T11159] RIP: 0033:0x7f86c358d63c [ 290.792650][T11159] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 290.792667][T11159] RSP: 002b:00007f86c43be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.792687][T11159] RAX: ffffffffffffffda RBX: 00007f86c37d5fa0 RCX: 00007f86c358d63c [ 290.792702][T11159] RDX: 000000000000000f RSI: 00007f86c43be0a0 RDI: 0000000000000004 [ 290.792724][T11159] RBP: 00007f86c43be090 R08: 0000000000000000 R09: 0000000000000000 [ 290.792736][T11159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 290.792747][T11159] R13: 00007f86c37d6038 R14: 00007f86c37d5fa0 R15: 00007ffdf5911d68 [ 290.792781][T11159] [ 290.885210][T11170] lo speed is unknown, defaulting to 1000 [ 290.924502][T11172] tipc: Enabling of bearer rejected, already enabled [ 291.084854][T11170] syzkaller0 speed is unknown, defaulting to 1000 [ 291.114125][T11170] wg1 speed is unknown, defaulting to 1000 [ 291.413678][T11188] __nla_validate_parse: 20 callbacks suppressed [ 291.413802][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1383'. [ 291.472061][T11190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1382'. [ 291.736638][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1387'. [ 291.790283][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1387'. [ 291.794498][T11209] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1386'. [ 291.942770][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'. [ 291.954231][T11202] openvswitch: netlink: Unknown nsh attribute 0 [ 291.960541][T11202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.003551][T11202] lo speed is unknown, defaulting to 1000 [ 292.011817][T11202] syzkaller0 speed is unknown, defaulting to 1000 [ 292.020165][T11202] wg1 speed is unknown, defaulting to 1000 [ 292.447388][T11223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1392'. [ 292.618321][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1392'. [ 292.799795][T11234] lo speed is unknown, defaulting to 1000 [ 292.844802][T11234] syzkaller0 speed is unknown, defaulting to 1000 [ 292.882928][T11234] wg1 speed is unknown, defaulting to 1000 [ 293.018376][T11237] syzkaller1: entered promiscuous mode [ 293.024973][T11237] syzkaller1: entered allmulticast mode [ 293.281048][T11239] wg1: entered promiscuous mode [ 293.291493][T11239] wg1: entered allmulticast mode [ 293.317596][T11245] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1397'. [ 293.422282][ T9052] wg1 speed is unknown, defaulting to 1000 [ 293.428405][ T9052] syz0: Port: 1 Link ACTIVE [ 293.428653][T11247] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1398'. [ 293.946028][T11267] validate_nla: 5 callbacks suppressed [ 293.946048][T11267] netlink: 'syz.2.1403': attribute type 1 has an invalid length. [ 294.064668][T11270] lo speed is unknown, defaulting to 1000 [ 294.084903][T11270] syzkaller0 speed is unknown, defaulting to 1000 [ 294.115293][T11270] wg1 speed is unknown, defaulting to 1000 [ 294.133729][T11276] team0: Device gtp0 is of different type [ 294.277667][T11283] siw: device registration error -23 [ 294.499065][T11288] veth8: entered promiscuous mode [ 294.505147][T11288] veth8: entered allmulticast mode [ 294.795989][T11302] netlink: 'syz.2.1412': attribute type 1 has an invalid length. [ 295.176956][T11328] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 295.955654][ T30] audit: type=1800 audit(1758401323.921:2): pid=11331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1419" name="memory.events" dev="tmpfs" ino=1337 res=0 errno=0 [ 296.349873][T11366] netlink: 'syz.2.1429': attribute type 42 has an invalid length. [ 296.567182][T11376] __nla_validate_parse: 8 callbacks suppressed [ 296.567204][T11376] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1431'. [ 296.786205][T11381] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1433'. [ 297.157105][T11396] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1437'. [ 297.195732][T11396] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 297.212945][T11398] batadv0: entered promiscuous mode [ 297.220026][T11398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.339003][T11401] pimreg: entered allmulticast mode [ 297.548700][T11414] netlink: 'syz.4.1442': attribute type 2 has an invalid length. [ 297.577742][T11414] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1442'. [ 297.727517][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1444'. [ 297.783833][T11420] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.805995][ T9038] IPVS: starting estimator thread 0... [ 297.831668][T11417] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.901605][T11428] IPVS: using max 26 ests per chain, 62400 per kthread [ 297.985766][T11432] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1448'. [ 297.986706][T11430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1447'. [ 298.053665][T11432] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1448'. [ 298.285969][T11445] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1452'. [ 298.436306][T11447] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1453'. [ 298.679333][T11457] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 298.761351][T11199] Set syz1 is full, maxelem 65536 reached [ 298.889379][T11463] netlink: 'syz.4.1458': attribute type 4 has an invalid length. [ 299.056736][ T9038] IPVS: starting estimator thread 0... [ 299.062645][T11471] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.173253][T11475] IPVS: using max 27 ests per chain, 64800 per kthread [ 299.234966][T11481] siw: device registration error -23 [ 299.242267][T11481] Bluetooth: MGMT ver 1.23 [ 299.246509][T11456] macvtap0: entered promiscuous mode [ 299.253065][T11456] macvtap0: entered allmulticast mode [ 299.258561][T11456] veth0_macvtap: entered allmulticast mode [ 299.280322][T11479] tipc: Enabled bearer , priority 0 [ 299.287955][T11479] syzkaller0: entered promiscuous mode [ 299.293670][T11479] syzkaller0: entered allmulticast mode [ 299.313316][T11478] tipc: Resetting bearer [ 299.342926][T11478] tipc: Disabling bearer [ 299.947040][T11506] tipc: Enabling of bearer rejected, already enabled [ 300.207586][T11514] lo speed is unknown, defaulting to 1000 [ 300.237369][T11514] syzkaller0 speed is unknown, defaulting to 1000 [ 300.269009][T11514] wg1 speed is unknown, defaulting to 1000 [ 300.434108][T11532] lo speed is unknown, defaulting to 1000 [ 300.453387][T11532] syzkaller0 speed is unknown, defaulting to 1000 [ 300.475351][T11532] wg1 speed is unknown, defaulting to 1000 [ 300.745609][T11547] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 301.162542][T11564] macvtap0: entered allmulticast mode [ 301.168038][T11564] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 301.385346][T11584] netlink: 'syz.4.1493': attribute type 1 has an invalid length. [ 301.554166][T11584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 301.620858][T11597] __nla_validate_parse: 10 callbacks suppressed [ 301.620878][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1491'. [ 301.660069][T11584] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 301.702073][T11590] lo speed is unknown, defaulting to 1000 [ 301.760341][T11590] syzkaller0 speed is unknown, defaulting to 1000 [ 301.772264][T11590] wg1 speed is unknown, defaulting to 1000 [ 301.984372][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1495'. [ 302.038270][T11605] vxcan1 (unregistering): left allmulticast mode [ 302.071518][ T5865] Bluetooth: hci6: command 0x0405 tx timeout [ 302.415958][T11624] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1500'. [ 302.554084][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1502'. [ 302.566020][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1502'. [ 302.598302][T11629] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1502'. [ 302.760299][T11631] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1503'. [ 302.819788][T11631] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1503'. [ 302.839442][T11632] dvmrp0: left allmulticast mode [ 302.876341][T11631] rdma_rxe: rxe_newlink: failed to add lo [ 302.922272][T11647] netlink: zone id is out of range [ 302.928405][T11647] netlink: zone id is out of range [ 302.935450][T11647] netlink: zone id is out of range [ 302.942550][T11647] netlink: zone id is out of range [ 302.948146][T11647] netlink: zone id is out of range [ 302.955827][T11647] netlink: zone id is out of range [ 302.962953][T11647] netlink: zone id is out of range [ 302.977306][T11647] netlink: zone id is out of range [ 302.985457][T11647] netlink: zone id is out of range [ 302.990751][T11647] netlink: zone id is out of range [ 303.376895][ T24] IPVS: starting estimator thread 0... [ 303.379186][T11657] lo speed is unknown, defaulting to 1000 [ 303.416708][T11657] syzkaller0 speed is unknown, defaulting to 1000 [ 303.432332][T11675] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1514'. [ 303.464914][T11657] wg1 speed is unknown, defaulting to 1000 [ 303.501705][T11672] IPVS: using max 26 ests per chain, 62400 per kthread [ 303.687428][T11688] raw_sendmsg: syz.6.1518 forgot to set AF_INET. Fix it! [ 303.734180][T11682] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1516'. [ 304.172787][ T5871] block nbd1: Receive control failed (result -32) [ 304.265816][T11710] lo speed is unknown, defaulting to 1000 [ 304.274194][T11710] syzkaller0 speed is unknown, defaulting to 1000 [ 304.292101][T11710] wg1 speed is unknown, defaulting to 1000 [ 304.893477][T11726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.900674][ T6310] bond0: (slave bond_slave_0): interface is now down [ 304.912785][T11726] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.943578][ T1164] bond0: (slave bond_slave_0): interface is now down [ 305.012885][ T1164] bond0: (slave bond_slave_0): interface is now down [ 305.026858][ T1164] bond0: now running without any active interface! [ 305.533717][T11761] netlink: 'syz.4.1539': attribute type 29 has an invalid length. [ 305.566604][T11761] netlink: 'syz.4.1539': attribute type 29 has an invalid length. [ 305.586093][T11761] netlink: 'syz.4.1539': attribute type 29 has an invalid length. [ 305.604158][T11761] netlink: 'syz.4.1539': attribute type 29 has an invalid length. [ 305.612794][T11761] netlink: 'syz.4.1539': attribute type 29 has an invalid length. [ 305.629446][T11761] netlink: 'syz.4.1539': attribute type 29 has an invalid length. [ 305.638286][T11761] netlink: 'syz.4.1539': attribute type 29 has an invalid length. [ 305.654921][T11761] netlink: 'syz.4.1539': attribute type 29 has an invalid length. [ 305.663747][T11761] netlink: 'syz.4.1539': attribute type 29 has an invalid length. [ 305.942985][T11735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.322865][T11800] lo speed is unknown, defaulting to 1000 [ 306.330801][T11800] syzkaller0 speed is unknown, defaulting to 1000 [ 306.340116][T11800] wg1 speed is unknown, defaulting to 1000 [ 306.496010][T11806] lo speed is unknown, defaulting to 1000 [ 306.523266][T11806] syzkaller0 speed is unknown, defaulting to 1000 [ 306.615825][T11811] 8021q: adding VLAN 0 to HW filter on device bond3 [ 306.632929][T11811] bridge0: port 1(bond3) entered blocking state [ 306.639612][T11811] bridge0: port 1(bond3) entered disabled state [ 306.646553][T11811] bond3: entered allmulticast mode [ 306.670379][T11811] bridge0: port 1(bond3) entered blocking state [ 306.676892][T11811] bridge0: port 1(bond3) entered forwarding state [ 306.724891][T11806] wg1 speed is unknown, defaulting to 1000 [ 306.785346][ T1149] bridge0: port 1(bond3) entered disabled state [ 307.221637][T11832] lo speed is unknown, defaulting to 1000 [ 307.232521][T11832] syzkaller0 speed is unknown, defaulting to 1000 [ 307.241050][T11832] wg1 speed is unknown, defaulting to 1000 [ 307.289963][T11835] __nla_validate_parse: 2 callbacks suppressed [ 307.289984][T11835] netlink: 884 bytes leftover after parsing attributes in process `syz.5.1554'. [ 307.497141][T11847] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1556'. [ 307.585368][T11839] lo speed is unknown, defaulting to 1000 [ 307.826002][T11839] syzkaller0 speed is unknown, defaulting to 1000 [ 307.859506][T11853] validate_nla: 22 callbacks suppressed [ 307.859527][T11853] netlink: 'syz.6.1557': attribute type 1 has an invalid length. [ 307.881715][T11853] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1557'. [ 307.894842][T11839] wg1 speed is unknown, defaulting to 1000 [ 309.580812][T11903] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1568'. [ 309.594342][T11903] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1568'. [ 309.901631][T11918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1570'. [ 309.910889][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1570'. [ 309.958188][T11918] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1570'. [ 310.510785][T11943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1573'. [ 310.684072][T11934] syz_tun: left promiscuous mode [ 310.828347][T11965] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1579'. [ 310.872375][T11965] netlink: 'syz.0.1579': attribute type 6 has an invalid length. [ 311.077025][T11934] veth0_to_bond: left allmulticast mode [ 311.593145][T11934] veth0_macvtap: left allmulticast mode [ 311.599074][T11934] macvtap1: left allmulticast mode [ 311.607358][T11934] bond1: left promiscuous mode [ 311.614073][T11934] bond1: left allmulticast mode [ 311.636404][T11934] veth5: left promiscuous mode [ 311.642013][T11934] mac80211_hwsim hwsim23 wlan0: left allmulticast mode [ 311.649059][T11934] mac80211_hwsim hwsim23 wlan0: left promiscuous mode [ 311.657334][T11934] macsec2: left promiscuous mode [ 311.662465][T11934] macsec2: left allmulticast mode [ 311.685352][T11943] hsr_slave_0: left promiscuous mode [ 311.693122][T11943] hsr_slave_1: left promiscuous mode [ 311.718383][T11957] tipc: Enabling of bearer rejected, already enabled [ 311.793129][ T36] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.825819][ T36] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.861562][ T36] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.890895][ T36] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.915560][T11979] netlink: 'syz.6.1582': attribute type 3 has an invalid length. [ 312.209473][T11991] netlink: 'syz.6.1587': attribute type 11 has an invalid length. [ 312.222131][T11991] netlink: 'syz.6.1587': attribute type 4 has an invalid length. [ 312.325011][T11991] netlink: 'syz.6.1587': attribute type 1 has an invalid length. [ 312.362274][T11991] netlink: 'syz.6.1587': attribute type 4 has an invalid length. [ 312.405362][T12012] __nla_validate_parse: 8 callbacks suppressed [ 312.405383][T12012] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1591'. [ 312.538486][T12023] netlink: 'syz.2.1592': attribute type 4 has an invalid length. [ 312.557715][T12023] netlink: 'syz.2.1592': attribute type 4 has an invalid length. [ 312.612337][T12028] lo speed is unknown, defaulting to 1000 [ 312.619603][T12028] syzkaller0 speed is unknown, defaulting to 1000 [ 312.629194][T12028] wg1 speed is unknown, defaulting to 1000 [ 313.338589][T12058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1604'. [ 313.668228][T12072] lo speed is unknown, defaulting to 1000 [ 313.699686][T12072] syzkaller0 speed is unknown, defaulting to 1000 [ 313.724387][T12072] wg1 speed is unknown, defaulting to 1000 [ 314.128450][T12095] net_ratelimit: 6 callbacks suppressed [ 314.128473][T12095] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 314.287037][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1618'. [ 314.430695][T12107] lo speed is unknown, defaulting to 1000 [ 314.433002][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1620'. [ 314.454853][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1620'. [ 314.478590][T12107] syzkaller0 speed is unknown, defaulting to 1000 [ 314.498654][T12107] wg1 speed is unknown, defaulting to 1000 [ 314.555310][T12108] lo speed is unknown, defaulting to 1000 [ 314.599857][T12108] syzkaller0 speed is unknown, defaulting to 1000 [ 314.640073][T12108] wg1 speed is unknown, defaulting to 1000 [ 314.686061][T12124] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1625'. [ 315.067384][T12133] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1629'. [ 315.085598][T12133] batadv1: entered promiscuous mode [ 315.091147][T12133] batadv1: entered allmulticast mode [ 315.200729][T12137] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 315.213966][T12136] IPVS: stopping backup sync thread 12137 ... [ 315.504963][T12159] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1636'. [ 315.915415][T12181] IPv6: NLM_F_REPLACE set, but no existing node found! [ 316.060624][T12190] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1645'. [ 316.090698][T12190] bond0: entered promiscuous mode [ 316.099143][T12190] syz_tun: entered promiscuous mode [ 316.107491][T12190] bond0: left promiscuous mode [ 316.131491][T12190] syz_tun: left promiscuous mode [ 316.714493][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1649'. [ 316.925117][T12221] netlink: 'syz.0.1651': attribute type 1 has an invalid length. [ 317.032492][T12216] bond0: entered promiscuous mode [ 317.071274][T12216] bond_slave_0: entered promiscuous mode [ 317.113623][T12216] bond_slave_1: entered promiscuous mode [ 317.151588][T12216] bond0: left promiscuous mode [ 317.163685][T12216] bond_slave_0: left promiscuous mode [ 317.182060][T12216] bond_slave_1: left promiscuous mode [ 317.207352][T12217] lo speed is unknown, defaulting to 1000 [ 317.216110][T12217] syzkaller0 speed is unknown, defaulting to 1000 [ 317.226512][T12217] wg1 speed is unknown, defaulting to 1000 [ 317.528421][T12234] __nla_validate_parse: 2 callbacks suppressed [ 317.528442][T12234] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1656'. [ 317.666493][T12240] netlink: zone id is out of range [ 317.690265][T12240] netlink: zone id is out of range [ 317.706504][T12240] netlink: zone id is out of range [ 317.713672][T12240] netlink: zone id is out of range [ 317.718933][T12240] netlink: zone id is out of range [ 317.730046][T12240] netlink: zone id is out of range [ 317.769859][T12240] netlink: zone id is out of range [ 317.781608][T12240] netlink: zone id is out of range [ 317.786788][T12240] netlink: zone id is out of range [ 317.812532][T12242] : entered promiscuous mode [ 318.267220][T12258] lo speed is unknown, defaulting to 1000 [ 318.388171][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1664'. [ 318.397765][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1664'. [ 318.417680][T12258] syzkaller0 speed is unknown, defaulting to 1000 [ 318.443264][ T59] netdevsim netdevsim6 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 318.452539][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1664'. [ 318.472565][ T59] netdevsim netdevsim6 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 318.502497][T12258] wg1 speed is unknown, defaulting to 1000 [ 318.502505][ T59] netdevsim netdevsim6 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 318.517363][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1664'. [ 318.551787][ T59] netdevsim netdevsim6 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 318.629066][T12268] tipc: Enabling of bearer rejected, already enabled [ 318.696323][T12271] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1667'. [ 318.771897][T12268] sch_fq: defrate 257 ignored. [ 318.946696][T12282] tipc: Enabled bearer , priority 10 [ 319.094796][T12291] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 319.109908][T12291] bridge4: entered allmulticast mode [ 319.254608][T12295] netlink: 'syz.4.1674': attribute type 1 has an invalid length. [ 319.262901][T12295] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1674'. [ 319.518605][T12311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1679'. [ 319.535086][T12315] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1681'. [ 319.538849][T12311] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1679'. [ 319.565971][T12311] netlink: 'syz.4.1679': attribute type 6 has an invalid length. [ 319.623331][T12313] netlink: 'syz.4.1679': attribute type 6 has an invalid length. [ 319.958788][ T5951] tipc: Node number set to 3500394179 [ 320.541310][T12320] lo speed is unknown, defaulting to 1000 [ 320.666449][T12327] ip6tnl1: entered promiscuous mode [ 320.808151][T12320] syzkaller0 speed is unknown, defaulting to 1000 [ 320.879502][T12320] wg1 speed is unknown, defaulting to 1000 [ 322.978704][T12355] net_ratelimit: 2 callbacks suppressed [ 322.978727][T12355] openvswitch: netlink: Missing key (keys=40, expected=80) [ 324.410162][T12354] netlink: 'syz.5.1690': attribute type 4 has an invalid length. [ 324.722802][T12389] __nla_validate_parse: 6 callbacks suppressed [ 324.722825][T12389] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1699'. [ 324.746646][T12392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.840803][T12399] netlink: 'syz.5.1701': attribute type 1 has an invalid length. [ 324.916716][T12398] lo speed is unknown, defaulting to 1000 [ 324.972568][T12399] bond3: entered promiscuous mode [ 325.000610][T12399] 8021q: adding VLAN 0 to HW filter on device bond3 [ 325.011103][T12403] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 325.014475][T12398] syzkaller0 speed is unknown, defaulting to 1000 [ 325.020274][T12404] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 325.172534][T12398] wg1 speed is unknown, defaulting to 1000 [ 325.179528][T12409] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1704'. [ 326.081346][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1711'. [ 326.243697][T12433] lo speed is unknown, defaulting to 1000 [ 326.333107][T12433] syzkaller0 speed is unknown, defaulting to 1000 [ 326.413787][T12448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.457087][T12433] wg1 speed is unknown, defaulting to 1000 [ 326.676004][T12453] netlink: 'syz.4.1716': attribute type 1 has an invalid length. [ 327.148725][T12460] IPVS: stopping backup sync thread 12464 ... [ 327.151719][T12464] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 327.373875][T12472] syzkaller1: entered promiscuous mode [ 327.398291][T12472] syzkaller1: entered allmulticast mode [ 327.515794][T12483] netlink: 'syz.6.1726': attribute type 10 has an invalid length. [ 327.525800][T12483] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1726'. [ 327.534934][T12487] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1723'. [ 327.589660][T12491] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1723'. [ 327.649896][T12483] dummy0: entered promiscuous mode [ 327.668155][T12483] bridge0: port 4(dummy0) entered blocking state [ 327.717441][T12483] bridge0: port 4(dummy0) entered disabled state [ 327.754422][T12483] dummy0: entered allmulticast mode [ 327.791055][T12483] bridge0: port 4(dummy0) entered blocking state [ 327.797621][T12483] bridge0: port 4(dummy0) entered forwarding state [ 327.822841][T12472] lo speed is unknown, defaulting to 1000 [ 327.831411][T12472] syzkaller0 speed is unknown, defaulting to 1000 [ 327.853677][T12472] wg1 speed is unknown, defaulting to 1000 [ 327.959638][T12495] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 328.527321][T12532] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 328.703861][T12530] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1733'. [ 328.715990][T12541] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1737'. [ 328.738029][T12530] IPv6: sit2: Disabled Multicast RS [ 328.982630][T12549] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1739'. [ 329.198761][T12560] tipc: Enabling of bearer rejected, already enabled [ 329.305784][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1743'. [ 329.538800][T12579] lo speed is unknown, defaulting to 1000 [ 329.547306][T12579] syzkaller0 speed is unknown, defaulting to 1000 [ 329.561054][T12579] wg1 speed is unknown, defaulting to 1000 [ 329.927663][T12588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1746'. [ 329.995271][T12589] tipc: Enabling of bearer rejected, already enabled [ 330.307332][T12597] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1751'. [ 330.414254][T12603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.509582][T12603] bond0: (slave rose0): Enslaving as an active interface with an up link [ 330.558361][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1755'. [ 330.669202][T12613] bridge5: port 1(veth5) entered blocking state [ 330.699543][T12613] bridge5: port 1(veth5) entered disabled state [ 330.706375][T12613] veth5: entered allmulticast mode [ 330.723388][T12613] veth5: entered promiscuous mode [ 330.797383][T12611] bridge5: port 2(veth0_to_bond) entered blocking state [ 330.821761][T12611] bridge5: port 2(veth0_to_bond) entered disabled state [ 330.836899][T12621] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1756'. [ 330.844350][T12611] veth0_to_bond: entered allmulticast mode [ 330.869695][T12611] veth0_to_bond: entered promiscuous mode [ 330.915407][T12613] vlan5: entered allmulticast mode [ 330.936188][T12613] veth1: entered allmulticast mode [ 330.972674][T12613] bridge5: port 3(vlan5) entered blocking state [ 330.989641][T12613] bridge5: port 3(vlan5) entered disabled state [ 331.011750][T12613] vlan5: entered promiscuous mode [ 331.016937][T12613] veth1: entered promiscuous mode [ 331.168985][T12625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1758'. [ 331.585091][T12643] vlan0: entered promiscuous mode [ 331.781852][T12643] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1762'. [ 331.909296][T12657] lo speed is unknown, defaulting to 1000 [ 331.933011][T12657] syzkaller0 speed is unknown, defaulting to 1000 [ 331.948558][T12657] wg1 speed is unknown, defaulting to 1000 [ 331.997650][T12663] lo speed is unknown, defaulting to 1000 [ 332.057239][T12673] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1770'. [ 332.144611][T12663] syzkaller0 speed is unknown, defaulting to 1000 [ 332.211060][T12663] wg1 speed is unknown, defaulting to 1000 [ 332.233195][T12674] lo speed is unknown, defaulting to 1000 [ 332.259995][T12674] syzkaller0 speed is unknown, defaulting to 1000 [ 332.306345][T12674] wg1 speed is unknown, defaulting to 1000 [ 332.519299][T12678] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1773'. [ 332.743318][T12691] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 332.760086][T12692] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 332.939790][T12691] smc: net device bond0 applied user defined pnetid SYZ0 [ 332.950918][T12692] smc: net device bond0 erased user defined pnetid SYZ0 [ 333.149630][T12710] netlink: 'syz.5.1777': attribute type 21 has an invalid length. [ 333.203074][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1778'. [ 333.263490][T12705] lo speed is unknown, defaulting to 1000 [ 333.296915][T12705] syzkaller0 speed is unknown, defaulting to 1000 [ 333.305945][T12705] wg1 speed is unknown, defaulting to 1000 [ 333.590267][T12727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1781'. [ 333.626296][T12725] pimreg: left allmulticast mode [ 333.808628][T12735] lo speed is unknown, defaulting to 1000 [ 333.839822][T12735] syzkaller0 speed is unknown, defaulting to 1000 [ 333.888870][T12735] wg1 speed is unknown, defaulting to 1000 [ 334.012805][T12758] netlink: 'syz.2.1792': attribute type 5 has an invalid length. [ 334.516965][T12768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.713490][ T9643] udevd[9643]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 334.833802][T12788] netlink: 'syz.4.1801': attribute type 8 has an invalid length. [ 334.867703][T12785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.013195][T12797] bond_slave_0: left promiscuous mode [ 335.029411][T12797] bond_slave_1: left promiscuous mode [ 335.596690][T12801] tipc: New replicast peer: 255.255.255.255 [ 335.618227][T12801] tipc: Enabled bearer , priority 10 [ 335.626877][ T1149] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.655641][ T1149] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.684327][ T1149] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.712497][ T1149] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.754301][T12800] tipc: Enabling of bearer rejected, already enabled [ 335.802034][ T1149] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.841060][ T1149] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.881220][ T1149] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.910837][ T1149] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.954542][T12817] __nla_validate_parse: 11 callbacks suppressed [ 335.954563][T12817] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1809'. [ 336.091176][T12820] lo speed is unknown, defaulting to 1000 [ 336.108332][T12820] syzkaller0 speed is unknown, defaulting to 1000 [ 336.117782][T12820] wg1 speed is unknown, defaulting to 1000 [ 336.152125][T12825] tun0: tun_chr_ioctl cmd 2148045848 [ 336.155304][T12824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1811'. [ 336.158228][T12825] tun0: tun_chr_ioctl cmd 21731 [ 336.341110][T12833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1813'. [ 336.398855][T12828] lo speed is unknown, defaulting to 1000 [ 336.407034][T12828] syzkaller0 speed is unknown, defaulting to 1000 [ 336.435213][T12828] wg1 speed is unknown, defaulting to 1000 [ 336.704721][T12844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 336.761013][T12842] lo speed is unknown, defaulting to 1000 [ 336.766941][T12844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 336.807264][T12842] syzkaller0 speed is unknown, defaulting to 1000 [ 336.814692][T12844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 336.889550][T12842] wg1 speed is unknown, defaulting to 1000 [ 336.930644][T12849] gtp0: entered promiscuous mode [ 336.954205][T12849] gtp0: entered allmulticast mode [ 337.497074][T12863] lo speed is unknown, defaulting to 1000 [ 337.522474][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1821'. [ 337.531693][T12868] netlink: 'syz.0.1821': attribute type 14 has an invalid length. [ 337.540205][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1821'. [ 337.573384][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1822'. [ 337.621253][T12863] syzkaller0 speed is unknown, defaulting to 1000 [ 337.632060][T12863] wg1 speed is unknown, defaulting to 1000 [ 337.694206][T12868] netlink: 'syz.0.1821': attribute type 14 has an invalid length. [ 338.237079][T12893] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.1828'. [ 338.727690][T12907] syzkaller0: entered promiscuous mode [ 338.733521][T12907] syzkaller0: entered allmulticast mode [ 338.741747][T12912] ..1·: renamed from ..0· [ 338.758591][T12912] ..1·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 338.790235][T12912] ..1·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.823934][T12912] A link change request failed with some changes committed already. Interface ..1· may have been left with an inconsistent configuration, please check. [ 339.766199][ T5865] Bluetooth: hci5: command 0x0406 tx timeout [ 340.997928][T12948] __nla_validate_parse: 1 callbacks suppressed [ 340.997947][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'. [ 341.041972][T12952] siw: device registration error -23 [ 341.063389][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1838'. [ 341.259618][T12959] lo speed is unknown, defaulting to 1000 [ 341.273665][T12959] syzkaller0 speed is unknown, defaulting to 1000 [ 341.282651][T12959] wg1 speed is unknown, defaulting to 1000 [ 341.303407][T12964] siw: device registration error -23 [ 341.314292][T12965] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1845'. [ 341.391772][T12967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1845'. [ 341.418465][T12967] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1845'. [ 341.438202][T12967] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1845'. [ 341.449678][T12967] netlink: 540 bytes leftover after parsing attributes in process `syz.5.1845'. [ 341.463679][T12963] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1845'. [ 341.954823][T12987] syzkaller1: entered promiscuous mode [ 341.961148][T12987] syzkaller1: entered allmulticast mode [ 341.968394][T12994] netlink: 'syz.5.1852': attribute type 1 has an invalid length. [ 342.098594][T12998] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 342.115095][T12998] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 342.127886][T12980] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 342.186210][T12997] netlink: 'syz.4.1853': attribute type 16 has an invalid length. [ 342.199207][T12994] netlink: 'syz.5.1852': attribute type 14 has an invalid length. [ 342.243482][T13000] gretap1: entered promiscuous mode [ 342.266612][T13000] bond4: (slave gretap1): making interface the new active one [ 342.278882][T13007] netlink: 'syz.6.1854': attribute type 23 has an invalid length. [ 342.308860][T13000] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 342.425034][T13013] netlink: 'syz.4.1855': attribute type 1 has an invalid length. [ 342.596282][T13014] bond5: (slave bridge5): making interface the new active one [ 342.606509][T13014] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 342.653369][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1856'. [ 342.865208][T13033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1861'. [ 343.137811][T13042] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 343.213965][T13058] syz_tun: entered allmulticast mode [ 343.253870][T13058] dvmrp8: entered allmulticast mode [ 343.304224][T13058] lo speed is unknown, defaulting to 1000 [ 343.314850][T13058] syzkaller0 speed is unknown, defaulting to 1000 [ 343.329041][T13058] wg1 speed is unknown, defaulting to 1000 [ 343.427339][T13062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 343.469003][T13068] lo speed is unknown, defaulting to 1000 [ 343.489632][T13072] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 343.499646][T13068] syzkaller0 speed is unknown, defaulting to 1000 [ 343.510427][T13068] wg1 speed is unknown, defaulting to 1000 [ 343.614680][T13057] syz_tun: left allmulticast mode [ 343.619932][T13057] dvmrp8: left allmulticast mode [ 343.932768][T13083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 344.246221][T13107] netlink: 'syz.0.1878': attribute type 13 has an invalid length. [ 344.270552][T13107] netlink: 'syz.0.1878': attribute type 17 has an invalid length. [ 344.358082][T13096] lo speed is unknown, defaulting to 1000 [ 344.429146][T13107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.461764][T13107] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.480045][T13107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.511809][T13096] syzkaller0 speed is unknown, defaulting to 1000 [ 344.518430][T13103] lo speed is unknown, defaulting to 1000 [ 344.527994][T13096] wg1 speed is unknown, defaulting to 1000 [ 344.529059][T13103] syzkaller0 speed is unknown, defaulting to 1000 [ 344.554782][T13103] wg1 speed is unknown, defaulting to 1000 [ 344.941093][T13121] lo speed is unknown, defaulting to 1000 [ 344.974848][T13121] syzkaller0 speed is unknown, defaulting to 1000 [ 345.027185][T13121] wg1 speed is unknown, defaulting to 1000 [ 345.433775][T13147] veth0_to_bond: entered allmulticast mode [ 345.639937][T13158] netlink: 'syz.6.1890': attribute type 10 has an invalid length. [ 345.799551][T13158] dummy0: left allmulticast mode [ 345.805316][T13158] bridge0: port 4(dummy0) entered disabled state [ 345.825051][T13158] team0: Device dummy0 is up. Set it down before adding it as a team port [ 347.135088][T13220] __nla_validate_parse: 6 callbacks suppressed [ 347.135109][T13220] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1904'. [ 347.183448][T13228] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1905'. [ 347.203137][T13228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.241535][T13228] lo speed is unknown, defaulting to 1000 [ 347.249320][T13228] syzkaller0 speed is unknown, defaulting to 1000 [ 347.275062][T13228] wg1 speed is unknown, defaulting to 1000 [ 347.283691][T13231] netlink: 'syz.0.1905': attribute type 1 has an invalid length. [ 347.339166][T13235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1905'. [ 347.429598][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1907'. [ 347.451269][T13234] netlink: 428 bytes leftover after parsing attributes in process `syz.6.1907'. [ 347.464922][T13231] 8021q: adding VLAN 0 to HW filter on device bond6 [ 347.520270][T13230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.538917][T13230] batadv_slave_0: entered promiscuous mode [ 347.564996][T13235] bond6: (slave geneve0): making interface the new active one [ 347.574931][T13235] bond6: (slave geneve0): Enslaving as an active interface with an up link [ 347.628912][T13234] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1907'. [ 347.690512][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.716718][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.776530][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.824059][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.051898][T13260] netlink: 'syz.5.1914': attribute type 9 has an invalid length. [ 348.070334][T13260] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1914'. [ 348.282472][T13269] netlink: 'syz.2.1916': attribute type 1 has an invalid length. [ 348.290271][T13269] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1916'. [ 348.312783][T13266] netlink: 'syz.6.1917': attribute type 4 has an invalid length. [ 348.333867][T13266] netlink: 'syz.6.1917': attribute type 4 has an invalid length. [ 348.350718][T13272] lo speed is unknown, defaulting to 1000 [ 348.429523][T13272] syzkaller0 speed is unknown, defaulting to 1000 [ 348.472951][T13270] netlink: 'syz.2.1916': attribute type 1 has an invalid length. [ 348.488731][T13272] wg1 speed is unknown, defaulting to 1000 [ 348.511141][T13270] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1916'. [ 348.572969][T13279] syz_tun: Device is already in use. [ 349.017906][T13290] tipc: Enabling of bearer rejected, already enabled [ 349.069440][T13287] netlink: 'syz.2.1921': attribute type 1 has an invalid length. [ 349.086294][T13294] tipc: New replicast peer: 255.255.255.255 [ 349.092801][T13287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1921'. [ 349.542885][T13316] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20004 [ 349.736228][T13324] netlink: 'syz.0.1930': attribute type 41 has an invalid length. [ 349.749870][T13320] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 349.998875][T13333] openvswitch: netlink: Flow actions attr not present in new flow. [ 350.123329][T13338] bond0: (slave syz_tun): Releasing backup interface [ 350.371603][T13349] nbd: socks must be embedded in a SOCK_ITEM attr [ 350.505640][T13365] netlink: 'syz.5.1940': attribute type 7 has an invalid length. [ 350.563542][T13368] Bluetooth: MGMT ver 1.23 [ 350.654854][T13355] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 350.825716][T13368] 8021q: adding VLAN 0 to HW filter on device bond5 [ 350.834389][T13368] bridge7: port 1(bond5) entered blocking state [ 350.841062][T13368] bridge7: port 1(bond5) entered disabled state [ 350.912160][T13368] bond5: entered allmulticast mode [ 350.927391][T13368] bridge7: port 1(bond5) entered blocking state [ 350.933912][T13368] bridge7: port 1(bond5) entered forwarding state [ 351.014499][ T9056] wg1 speed is unknown, defaulting to 1000 [ 351.020417][ T9056] syz0: Port: 1 Link DOWN [ 351.169584][T13382] lo speed is unknown, defaulting to 1000 [ 351.232585][T13382] syzkaller0 speed is unknown, defaulting to 1000 [ 351.257987][T13382] wg1 speed is unknown, defaulting to 1000 [ 351.272286][T13385] netlink: 'syz.2.1944': attribute type 41 has an invalid length. [ 351.285424][ T8099] bridge7: port 1(bond5) entered disabled state [ 352.049308][T13423] syzkaller1: entered promiscuous mode [ 352.078929][T13423] syzkaller1: entered allmulticast mode [ 352.325713][T13425] tipc: Enabling of bearer rejected, already enabled [ 352.414738][T13436] __nla_validate_parse: 7 callbacks suppressed [ 352.414757][T13436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1958'. [ 352.656881][T13436] vlan6: entered allmulticast mode [ 352.663193][T13436] bridge0: entered allmulticast mode [ 352.945641][T13453] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1962'. [ 353.222152][T13469] validate_nla: 2 callbacks suppressed [ 353.222175][T13469] netlink: 'syz.0.1967': attribute type 41 has an invalid length. [ 353.249026][T13474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1969'. [ 353.389183][T13472] syzkaller1: entered promiscuous mode [ 353.395910][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1969'. [ 353.398940][T13472] syzkaller1: entered allmulticast mode [ 353.424644][T13467] lo speed is unknown, defaulting to 1000 [ 353.519428][T13481] openvswitch: netlink: IPv4 tun info is not correct [ 353.806272][T13467] syzkaller0 speed is unknown, defaulting to 1000 [ 353.915317][T13481] 8021q: adding VLAN 0 to HW filter on device bond7 [ 353.930913][T13467] wg1 speed is unknown, defaulting to 1000 [ 354.016359][T13488] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20003 [ 354.310495][T13496] netlink: 'syz.0.1975': attribute type 1 has an invalid length. [ 354.897783][T13524] netlink: 'syz.4.1980': attribute type 41 has an invalid length. [ 355.222235][T13533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1983'. [ 355.292591][T13537] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1984'. [ 355.469336][T13540] netlink: 'syz.0.1985': attribute type 1 has an invalid length. [ 355.664835][T13546] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1987'. [ 355.727370][T13540] 8021q: adding VLAN 0 to HW filter on device bond8 [ 355.981068][T13544] 8021q: adding VLAN 0 to HW filter on device bond8 [ 355.994807][T13544] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 356.008019][T13544] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 356.159883][T13548] veth7: entered promiscuous mode [ 356.171676][T13548] bond8: (slave veth7): Enslaving as an active interface with a down link [ 356.622986][T13565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1991'. [ 356.677828][T13563] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1989'. [ 356.799167][T13571] netlink: 'syz.5.1992': attribute type 41 has an invalid length. [ 356.868036][T13574] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1993'. [ 357.016021][T13574] netlink: 'syz.6.1993': attribute type 1 has an invalid length. [ 357.609891][T13603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2001'. [ 357.676013][T13603] lo speed is unknown, defaulting to 1000 [ 357.705396][T13603] syzkaller0 speed is unknown, defaulting to 1000 [ 357.726868][T13603] wg1 speed is unknown, defaulting to 1000 [ 403.527694][T13610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2002'. [ 403.587251][T13616] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2006'. [ 403.625975][T13616] rdma_op ffff88807e6ec1f0 conn xmit_rdma 0000000000000000 [ 403.639323][T13616] netlink: 1800 bytes leftover after parsing attributes in process `syz.4.2006'. [ 403.690962][T13616] 8021q: adding VLAN 0 to HW filter on device bond6 [ 403.737265][T13627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2003'. [ 403.903456][T13616] bond6 (unregistering): Released all slaves [ 404.018744][T13629] lo speed is unknown, defaulting to 1000 [ 404.038736][ T5865] Bluetooth: hci6: link tx timeout [ 404.046113][ T5865] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 404.056800][ T5865] Bluetooth: hci6: link tx timeout [ 404.057131][T13629] syzkaller0 speed is unknown, defaulting to 1000 [ 404.062333][ T5865] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 404.080573][T13617] lo speed is unknown, defaulting to 1000 [ 404.095740][ T5865] Bluetooth: hci6: link tx timeout [ 404.100967][ T5865] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 404.108883][ T5865] Bluetooth: hci6: link tx timeout [ 404.112528][T13617] syzkaller0 speed is unknown, defaulting to 1000 [ 404.114501][ T5865] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 404.123187][T13629] wg1 speed is unknown, defaulting to 1000 [ 404.137802][T13617] wg1 speed is unknown, defaulting to 1000 [ 404.399979][T13615] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 404.408894][T13615] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 404.473208][T13615] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 404.503359][T13615] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 404.579439][T13615] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 404.595274][T13615] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 404.627621][T13640] lo speed is unknown, defaulting to 1000 [ 404.638949][T13643] netlink: 'syz.5.2011': attribute type 41 has an invalid length. [ 404.649794][T13640] syzkaller0 speed is unknown, defaulting to 1000 [ 404.666125][T13615] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 404.674754][T13640] wg1 speed is unknown, defaulting to 1000 [ 404.696122][T13615] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 404.844042][T13647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2012'. [ 405.240367][T13654] netlink: 'syz.5.2014': attribute type 10 has an invalid length. [ 405.271259][T13654] bond0: (slave wlan1): Opening slave failed [ 405.639282][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2019'. [ 405.716703][T13673] wg1: left promiscuous mode [ 405.721541][T13673] wg1: left allmulticast mode [ 405.730612][T13673] batadv_slave_0: left promiscuous mode [ 405.739213][T13673] vlan0: left promiscuous mode [ 405.748053][T13673] gre1: left allmulticast mode [ 405.758480][T13681] netlink: 'syz.4.2021': attribute type 10 has an invalid length. [ 405.770137][T13673] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 405.780095][T13673] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 405.788143][T13673] bridge5: left promiscuous mode [ 405.794130][T13673] bridge5: left allmulticast mode [ 405.800579][T13673] bridge6: left allmulticast mode [ 405.807535][T13673] veth5: left promiscuous mode [ 405.813552][T13673] ip6gre2: left allmulticast mode [ 405.819316][T13673] veth8: left promiscuous mode [ 405.824833][T13673] veth8: left allmulticast mode [ 405.830559][T13673] macvtap0: left allmulticast mode [ 405.852074][T13681] syz_tun: entered promiscuous mode [ 406.071943][ T5865] Bluetooth: hci6: command 0x0405 tx timeout [ 406.082373][T13615] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 406.088420][T13615] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 406.143910][T13696] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 406.195252][T13696] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 406.819885][T13734] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 407.006091][T13742] netlink: 'syz.2.2036': attribute type 41 has an invalid length. [ 407.113725][T13751] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 407.130990][T13752] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2037'. [ 407.307112][T13764] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2039'. [ 407.373559][T13764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.393672][T13769] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2041'. [ 407.434127][T13764] bond0 (unregistering): Released all slaves [ 407.690622][T13779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2043'. [ 408.061125][T13796] netlink: 'syz.5.2049': attribute type 41 has an invalid length. [ 408.226280][T13799] smc: net device bond0 applied user defined pnetid SYZ [ 408.837438][T13813] __nla_validate_parse: 2 callbacks suppressed [ 408.837458][T13813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2053'. [ 409.073596][ T6310] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.117558][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2054'. [ 409.136284][ T6310] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.185559][ T6310] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.211814][ T6310] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.375994][T13827] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2059'. [ 409.385424][T13827] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2059'. [ 409.402436][T13831] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2058'. [ 409.425310][T13831] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2058'. [ 409.665237][T13845] 8021q: adding VLAN 0 to HW filter on device bond2 [ 409.704201][T13851] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2063'. [ 409.718594][T13847] lo speed is unknown, defaulting to 1000 [ 409.788100][T13847] syzkaller0 speed is unknown, defaulting to 1000 [ 409.830708][T13847] wg1 speed is unknown, defaulting to 1000 [ 409.834542][T13859] IPVS: set_ctl: invalid protocol: 59 172.20.20.54:20002 [ 409.910943][T13857] syzkaller1: entered promiscuous mode [ 409.919329][T13857] syzkaller1: entered allmulticast mode [ 409.938427][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2068'. [ 409.957620][T13865] openvswitch: netlink: IP tunnel dst address not specified [ 409.998003][T13857] syzkaller1: left promiscuous mode [ 410.007056][T13857] syzkaller1: left allmulticast mode [ 410.756934][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2079'. [ 410.770509][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2079'. [ 410.907573][T13888] syzkaller1: entered promiscuous mode [ 410.914194][T13888] syzkaller1: entered allmulticast mode [ 411.654108][T13940] dvmrp0: left allmulticast mode [ 411.855435][T13947] lo speed is unknown, defaulting to 1000 [ 411.867360][T13947] syzkaller0 speed is unknown, defaulting to 1000 [ 411.883277][T13947] wg1 speed is unknown, defaulting to 1000 [ 411.930660][T13955] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 412.379214][T13981] netlink: 'syz.0.2098': attribute type 1 has an invalid length. [ 412.388215][T13981] netlink: 'syz.0.2098': attribute type 1 has an invalid length. [ 412.537218][T13993] bond0: entered promiscuous mode [ 412.547424][T13993] bond0: entered allmulticast mode [ 412.561268][T13993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.745785][T14003] team0: No ports can be present during mode change [ 412.857446][T14007] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20005 [ 413.477750][T14038] lo speed is unknown, defaulting to 1000 [ 413.512828][T14038] syzkaller0 speed is unknown, defaulting to 1000 [ 413.647099][T14036] bridge0: port 3(syz_tun) entered disabled state [ 413.656869][T14036] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.664773][T14036] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.703049][T14036] dummy0: left promiscuous mode [ 414.090092][T14036] batadv_slave_0: left promiscuous mode [ 414.120970][T14036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.176927][T14036] veth0_macvtap: left allmulticast mode [ 414.184165][T14036] macvtap0: left promiscuous mode [ 414.189238][T14036] macvtap0: left allmulticast mode [ 414.259245][T14036] gre1: left allmulticast mode [ 414.351861][T14036] ip6tnl1: left promiscuous mode [ 414.372051][T14038] wg1 speed is unknown, defaulting to 1000 [ 414.438304][ T6310] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 414.476034][ T6310] netdevsim netdevsim6 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 414.512272][ T6310] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.521259][ T6310] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 414.561903][ T6310] netdevsim netdevsim6 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 414.590737][ T6310] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.669302][ T6310] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 414.679805][ T6310] netdevsim netdevsim6 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 414.689449][ T6310] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.724414][ T6310] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 414.741880][ T6310] netdevsim netdevsim6 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 414.754184][ T6310] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.808250][T14043] lo speed is unknown, defaulting to 1000 [ 414.853227][T14043] syzkaller0 speed is unknown, defaulting to 1000 [ 414.969819][T14043] wg1 speed is unknown, defaulting to 1000 [ 414.976835][T14066] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 414.999875][T14066] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 415.075875][T14070] __nla_validate_parse: 14 callbacks suppressed [ 415.075895][T14070] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2120'. [ 415.100676][T14070] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2120'. [ 415.208035][T14073] netlink: 'syz.4.2121': attribute type 6 has an invalid length. [ 415.557186][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2124'. [ 415.661762][T14088] netlink: 'syz.5.2125': attribute type 3 has an invalid length. [ 415.668223][T14090] syz_tun: left promiscuous mode [ 415.671895][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2125'. [ 415.726732][T14090] batadv0: left promiscuous mode [ 415.770010][T14090] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 415.849497][T14088] netlink: 'syz.5.2125': attribute type 3 has an invalid length. [ 415.861476][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2125'. [ 417.355180][T14145] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2140'. [ 418.053371][T14173] macvlan2: entered allmulticast mode [ 418.077271][T14173] hsr0: entered allmulticast mode [ 418.104909][T14173] hsr_slave_0: entered allmulticast mode [ 418.152005][T14173] hsr_slave_1: entered allmulticast mode [ 418.182801][T14173] hsr0: left allmulticast mode [ 418.192020][T14173] hsr_slave_0: left allmulticast mode [ 418.214393][T14173] hsr_slave_1: left allmulticast mode [ 418.950108][T14195] sctp: [Deprecated]: syz.5.2152 (pid 14195) Use of int in max_burst socket option. [ 418.950108][T14195] Use struct sctp_assoc_value instead [ 418.979838][T14195] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2152'. [ 419.125278][T14205] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2157'. [ 419.280682][ T5871] block nbd3: Receive control failed (result -107) [ 419.290305][T14216] Àÿ: renamed from team_slave_1 [ 419.303780][T14212] nbd3: detected capacity change from 0 to 32 [ 419.334718][T14142] block nbd3: Dead connection, failed to find a fallback [ 419.350777][T14142] block nbd3: shutting down sockets [ 419.363669][T14142] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.403315][T14142] Buffer I/O error on dev nbd3, logical block 0, async page read [ 419.441032][T14142] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.468374][T14142] Buffer I/O error on dev nbd3, logical block 0, async page read [ 419.515777][T14142] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.554410][T14142] Buffer I/O error on dev nbd3, logical block 0, async page read [ 419.585791][T14142] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.594501][T14230] netlink: 'syz.2.2164': attribute type 11 has an invalid length. [ 419.618355][T14142] Buffer I/O error on dev nbd3, logical block 0, async page read [ 419.643326][T14230] netlink: 'syz.2.2164': attribute type 11 has an invalid length. [ 419.651217][T14230] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2164'. [ 419.658964][T14142] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.685171][T14231] lo speed is unknown, defaulting to 1000 [ 419.697895][T14142] Buffer I/O error on dev nbd3, logical block 0, async page read [ 419.726864][T14142] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.730155][T14231] syzkaller0 speed is unknown, defaulting to 1000 [ 419.742810][T14142] Buffer I/O error on dev nbd3, logical block 0, async page read [ 419.743055][T14142] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.743083][T14142] Buffer I/O error on dev nbd3, logical block 0, async page read [ 419.744677][T14142] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.773775][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2164'. [ 419.819591][T14142] Buffer I/O error on dev nbd3, logical block 0, async page read [ 419.871792][T14142] ldm_validate_partition_table(): Disk read failed. [ 419.888375][T14142] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.903236][T14142] Buffer I/O error on dev nbd3, logical block 0, async page read [ 419.918687][T14142] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.956200][T14142] Buffer I/O error on dev nbd3, logical block 0, async page read [ 419.977072][T14142] Dev nbd3: unable to read RDB block 0 [ 419.985483][T14142] nbd3: unable to read partition table [ 420.061132][T14235] lo speed is unknown, defaulting to 1000 [ 420.091879][T14142] ldm_validate_partition_table(): Disk read failed. [ 420.099127][T14142] Dev nbd3: unable to read RDB block 0 [ 420.136633][T14142] nbd3: unable to read partition table [ 420.144277][T14231] wg1 speed is unknown, defaulting to 1000 [ 420.227660][T14235] syzkaller0 speed is unknown, defaulting to 1000 [ 420.393295][T14235] wg1 speed is unknown, defaulting to 1000 [ 420.667348][T14252] geneve2: entered promiscuous mode [ 421.373016][T14270] __nla_validate_parse: 3 callbacks suppressed [ 421.373037][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'. [ 421.413030][T14270] netlink: 'syz.0.2175': attribute type 15 has an invalid length. [ 421.653385][T14280] netlink: 'syz.2.2177': attribute type 41 has an invalid length. [ 421.883324][T14286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2180'. [ 421.924920][T14289] netlink: 'syz.2.2181': attribute type 3 has an invalid length. [ 421.944926][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2181'. [ 421.968130][T14289] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2181'. [ 422.092276][T14289] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2181'. [ 422.407268][T14306] netlink: 'syz.0.2187': attribute type 1 has an invalid length. [ 422.412472][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2186'. [ 422.494941][T14306] 8021q: adding VLAN 0 to HW filter on device bond10 [ 422.832530][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2191'. [ 422.846789][T14321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2191'. [ 422.861617][T14321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2191'. [ 422.897902][T14321] netlink: 540 bytes leftover after parsing attributes in process `syz.0.2191'. [ 423.274728][T14344] syz_tun: left allmulticast mode [ 423.296688][T14344] syz_tun: left promiscuous mode [ 423.311213][T14344] bridge0: port 3(syz_tun) entered disabled state [ 423.375761][T14344] bridge_slave_1: left allmulticast mode [ 423.391485][T14344] bridge_slave_1: left promiscuous mode [ 423.413113][T14344] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.465622][T14344] bridge_slave_0: left allmulticast mode [ 423.483316][T14344] bridge_slave_0: left promiscuous mode [ 423.499441][T14344] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.590549][T14371] netlink: 'syz.2.2206': attribute type 10 has an invalid length. [ 423.632755][T14364] dvmrp1: entered allmulticast mode [ 423.638704][T14368] dvmrp1: left allmulticast mode [ 423.704456][T14371] batadv0: entered promiscuous mode [ 423.710697][T14371] batadv0: entered allmulticast mode [ 423.720554][T14371] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 423.973001][T14385] : renamed from veth0_to_bond [ 425.001782][T14438] netlink: 'syz.6.2224': attribute type 1 has an invalid length. [ 425.125317][T14441] bond2: (slave geneve2): making interface the new active one [ 425.134841][T14441] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 425.145681][ T6310] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 425.163880][ T6310] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 425.189187][T14438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 425.197873][ T6310] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 425.220759][ T6310] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 425.530400][T14456] openvswitch: netlink: Flow actions attr not present in new flow. [ 425.642677][T14463] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 425.928688][T14470] xt_l2tp: v2 tid > 0xffff: 37482740 [ 425.976355][T14472] sit1: entered promiscuous mode [ 426.329390][T14486] lo speed is unknown, defaulting to 1000 [ 426.340722][T14486] syzkaller0 speed is unknown, defaulting to 1000 [ 426.355406][T14486] wg1 speed is unknown, defaulting to 1000 [ 426.987184][T14497] lo speed is unknown, defaulting to 1000 [ 427.095793][T14497] syzkaller0 speed is unknown, defaulting to 1000 [ 427.358222][T14497] wg1 speed is unknown, defaulting to 1000 [ 427.495769][T14513] lo speed is unknown, defaulting to 1000 [ 427.553784][T14513] syzkaller0 speed is unknown, defaulting to 1000 [ 427.611929][T14513] wg1 speed is unknown, defaulting to 1000 [ 427.668275][T14520] tipc: Cannot configure node identity twice [ 427.974203][T14525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.537594][T14539] netlink: 'syz.6.2253': attribute type 2 has an invalid length. [ 428.627130][T14542] lo speed is unknown, defaulting to 1000 [ 428.683822][T14542] syzkaller0 speed is unknown, defaulting to 1000 [ 428.713905][T14542] wg1 speed is unknown, defaulting to 1000 [ 429.082326][T14561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.125676][T14561] __nla_validate_parse: 12 callbacks suppressed [ 429.125696][T14561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2259'. [ 429.171604][T14561] 8021q: VLANs not supported on nicvf0 [ 429.182910][T14562] 8021q: VLANs not supported on nicvf0 [ 429.196093][T14570] netlink: 'syz.5.2261': attribute type 10 has an invalid length. [ 429.218692][T14572] sctp: [Deprecated]: syz.6.2263 (pid 14572) Use of int in maxseg socket option. [ 429.218692][T14572] Use struct sctp_assoc_value instead [ 429.244689][T14570] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 429.287073][T14570] bond0: (slave lo): Enslaving as an active interface with an up link [ 429.321289][T14578] netlink: 'syz.0.2264': attribute type 4 has an invalid length. [ 429.348744][T14578] netlink: 'syz.0.2264': attribute type 4 has an invalid length. [ 429.827895][T14601] tap0: tun_chr_ioctl cmd 1074025673 [ 429.849074][T14600] tap0: tun_chr_ioctl cmd 1074025677 [ 429.870869][T14600] tap0: linktype set to 0 [ 430.556822][T14625] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2278'. [ 430.674086][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2279'. [ 430.695995][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2279'. [ 431.172783][T14651] siw: device registration error -23 [ 431.800793][T14663] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2287'. [ 431.814064][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2287'. [ 432.354321][T14675] netlink: 240 bytes leftover after parsing attributes in process `syz.6.2289'. [ 432.362828][T14678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2291'. [ 432.485109][T14681] macsec1: entered promiscuous mode [ 432.490603][T14681] macsec0: entered promiscuous mode [ 432.507324][T14681] macsec1: entered allmulticast mode [ 432.520566][T14681] macsec0: entered allmulticast mode [ 432.537755][T14683] netlink: 'syz.4.2292': attribute type 10 has an invalid length. [ 432.714747][T14690] netlink: 'syz.0.2296': attribute type 1 has an invalid length. [ 432.731696][T14690] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2296'. [ 432.755551][T14690] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 432.900029][T14687] lo speed is unknown, defaulting to 1000 [ 432.955670][T14687] syzkaller0 speed is unknown, defaulting to 1000 [ 432.967150][T14687] wg1 speed is unknown, defaulting to 1000 [ 433.516210][T14700] lo speed is unknown, defaulting to 1000 [ 433.537007][T14700] syzkaller0 speed is unknown, defaulting to 1000 [ 433.545896][T14700] wg1 speed is unknown, defaulting to 1000 [ 434.252098][T14713] netlink: 'syz.4.2301': attribute type 3 has an invalid length. [ 434.840708][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2307'. [ 434.986448][T14735] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2308'. [ 435.065392][T14635] Set syz1 is full, maxelem 65536 reached [ 435.573855][T14763] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2312'. [ 435.659973][T14767] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2317'. [ 435.835451][T14773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2319'. [ 436.094870][T14783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2321'. [ 436.223019][T14788] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2322'. [ 436.250841][T14783] smc: net device bond0 erased user defined pnetid SYZ [ 436.467397][T14795] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2323'. [ 436.596345][T14798] gtp0: entered promiscuous mode [ 436.644726][T14798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2326'. [ 436.669705][T14801] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 436.676478][T14801] syzkaller1: linktype set to 6 [ 436.769702][T14803] syz_tun: entered allmulticast mode [ 436.810344][T14803] lo speed is unknown, defaulting to 1000 [ 436.820641][T14803] syzkaller0 speed is unknown, defaulting to 1000 [ 436.864942][T14803] wg1 speed is unknown, defaulting to 1000 [ 436.879520][T14806] netlink: 'syz.0.2328': attribute type 23 has an invalid length. [ 437.203843][T14824] syzkaller1: entered allmulticast mode [ 438.056194][T14867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2345'. [ 438.202379][T14835] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 438.260555][T14860] lo speed is unknown, defaulting to 1000 [ 438.273796][T14860] syzkaller0 speed is unknown, defaulting to 1000 [ 438.294305][T14860] wg1 speed is unknown, defaulting to 1000 [ 438.518410][T14877] wireguard0: entered promiscuous mode [ 438.528140][T14877] wireguard0: entered allmulticast mode [ 438.624073][T14885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.976669][T14888] lo speed is unknown, defaulting to 1000 [ 438.992983][T14888] syzkaller0 speed is unknown, defaulting to 1000 [ 439.019766][T14888] wg1 speed is unknown, defaulting to 1000 [ 439.324032][T14904] netlink: 'syz.6.2355': attribute type 4 has an invalid length. [ 439.360113][T14906] lo speed is unknown, defaulting to 1000 [ 439.414262][T14906] syzkaller0 speed is unknown, defaulting to 1000 [ 439.445119][T14906] wg1 speed is unknown, defaulting to 1000 [ 439.515610][T14916] netlink: 'syz.6.2359': attribute type 1 has an invalid length. [ 439.635125][T14920] netlink: 'syz.6.2359': attribute type 1 has an invalid length. [ 439.653347][T14920] netlink: 'syz.6.2359': attribute type 1 has an invalid length. [ 440.039028][T14940] tipc: Enabled bearer , priority 0 [ 440.191481][T14938] lo speed is unknown, defaulting to 1000 [ 440.211186][T14938] syzkaller0 speed is unknown, defaulting to 1000 [ 440.227226][T14938] wg1 speed is unknown, defaulting to 1000 [ 440.246402][T14948] vti0: entered promiscuous mode [ 440.765004][T14971] __nla_validate_parse: 8 callbacks suppressed [ 440.765026][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2374'. [ 440.808440][T14974] netlink: 3752 bytes leftover after parsing attributes in process `syz.5.2376'. [ 441.002863][T14971] sit1: left promiscuous mode [ 441.050288][T14992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2374'. [ 441.080720][T14971] macsec0: left allmulticast mode [ 441.097101][T14971] macsec0: left promiscuous mode [ 441.106281][T14971] macsec1: left promiscuous mode [ 441.112348][T14971] macsec1: left allmulticast mode [ 441.139711][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 441.149083][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 441.173440][T14992] hsr_slave_0: left promiscuous mode [ 441.201524][T14992] hsr_slave_1: left promiscuous mode [ 441.330192][ T36] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 441.376769][T15007] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2383'. [ 441.400613][ T36] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 441.407637][T15013] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2384'. [ 441.424351][T15011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2385'. [ 441.436149][T15011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2385'. [ 441.450841][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2384'. [ 441.674371][T15022] netlink: 'syz.0.2388': attribute type 10 has an invalid length. [ 441.711096][T15022] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.733774][T15028] netlink: 'syz.6.2390': attribute type 10 has an invalid length. [ 441.735234][T15022] bond0: (slave team0): Enslaving as an active interface with an up link [ 441.750342][T15027] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2391'. [ 441.764691][T15028] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2390'. [ 441.818762][T15029] lo speed is unknown, defaulting to 1000 [ 441.833225][T15029] syzkaller0 speed is unknown, defaulting to 1000 [ 441.843793][T15029] wg1 speed is unknown, defaulting to 1000 [ 442.399437][T15054] netlink: 'syz.6.2397': attribute type 13 has an invalid length. [ 442.448863][T15054] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 443.123247][T15060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.144572][T15060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.163123][T15060] bond0 (unregistering): Released all slaves [ 444.086747][T15092] lo speed is unknown, defaulting to 1000 [ 444.094812][T15092] syzkaller0 speed is unknown, defaulting to 1000 [ 444.104058][T15092] wg1 speed is unknown, defaulting to 1000 [ 444.433911][T15106] tipc: Enabling of bearer rejected, failed to enable media [ 444.442855][T15105] tipc: Enabling of bearer rejected, failed to enable media [ 444.463828][ T9054] IPVS: starting estimator thread 0... [ 444.563455][T15108] IPVS: using max 28 ests per chain, 67200 per kthread [ 444.770982][T15116] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 445.167190][T15133] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.186112][T15133] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 445.254131][T15152] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 445.319959][T15152] smc: net device bond0 applied user defined pnetid SYZ0 [ 445.339442][T15140] lo speed is unknown, defaulting to 1000 [ 445.347835][T15140] syzkaller0 speed is unknown, defaulting to 1000 [ 445.358079][T15140] wg1 speed is unknown, defaulting to 1000 [ 445.374752][T15152] smc: net device bond0 erased user defined pnetid SYZ0 [ 445.508880][T15159] lo speed is unknown, defaulting to 1000 [ 445.517644][T15159] syzkaller0 speed is unknown, defaulting to 1000 [ 445.527154][T15159] wg1 speed is unknown, defaulting to 1000 [ 445.797279][T15177] __nla_validate_parse: 14 callbacks suppressed [ 445.797300][T15177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2428'. [ 446.011075][T15183] netlink: 'syz.0.2432': attribute type 1 has an invalid length. [ 446.027120][T15183] netlink: 'syz.0.2432': attribute type 2 has an invalid length. [ 446.047787][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2432'. [ 446.230492][T15196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2434'. [ 446.269505][T15195] netlink: 'syz.0.2435': attribute type 41 has an invalid length. [ 446.293041][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2436'. [ 446.342615][T15201] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2437'. [ 446.506427][T15190] lo speed is unknown, defaulting to 1000 [ 446.533672][T15190] syzkaller0 speed is unknown, defaulting to 1000 [ 446.547269][T15190] wg1 speed is unknown, defaulting to 1000 [ 446.949434][T15219] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2443'. [ 446.959794][T15219] netlink: 'syz.0.2443': attribute type 15 has an invalid length. [ 446.967897][T15219] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2443'. [ 446.989482][T15219] netlink: 'syz.0.2443': attribute type 1 has an invalid length. [ 447.008723][T15219] netlink: 14102 bytes leftover after parsing attributes in process `syz.0.2443'. [ 447.078298][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.092993][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.153944][T15226] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2446'. [ 447.175677][T15225] FAULT_INJECTION: forcing a failure. [ 447.175677][T15225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.192690][T15230] netlink: 'syz.4.2448': attribute type 41 has an invalid length. [ 447.237020][T15225] CPU: 0 UID: 0 PID: 15225 Comm: syz.6.2445 Not tainted syzkaller #0 PREEMPT(full) [ 447.237051][T15225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 447.237069][T15225] Call Trace: [ 447.237079][T15225] [ 447.237089][T15225] dump_stack_lvl+0x189/0x250 [ 447.237120][T15225] ? __pfx____ratelimit+0x10/0x10 [ 447.237143][T15225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.237169][T15225] ? __pfx__printk+0x10/0x10 [ 447.237199][T15225] ? __might_fault+0xb0/0x130 [ 447.237242][T15225] should_fail_ex+0x414/0x560 [ 447.237280][T15225] _copy_from_iter+0x1de/0x1790 [ 447.237315][T15225] ? rcu_is_watching+0x15/0xb0 [ 447.237338][T15225] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 447.237368][T15225] ? __pfx__copy_from_iter+0x10/0x10 [ 447.237395][T15225] ? __build_skb_around+0x257/0x3e0 [ 447.237426][T15225] ? netlink_sendmsg+0x642/0xb30 [ 447.237449][T15225] ? skb_put+0x11b/0x210 [ 447.237479][T15225] netlink_sendmsg+0x6b2/0xb30 [ 447.237515][T15225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.237545][T15225] ? aa_sock_msg_perm+0xf1/0x1d0 [ 447.237569][T15225] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 447.237592][T15225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.237618][T15225] __sock_sendmsg+0x21c/0x270 [ 447.237643][T15225] ____sys_sendmsg+0x505/0x830 [ 447.237678][T15225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.237717][T15225] ? import_iovec+0x74/0xa0 [ 447.237748][T15225] ___sys_sendmsg+0x21f/0x2a0 [ 447.237779][T15225] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.237849][T15225] ? __fget_files+0x2a/0x420 [ 447.237866][T15225] ? __fget_files+0x3a0/0x420 [ 447.237897][T15225] __x64_sys_sendmsg+0x19b/0x260 [ 447.237939][T15225] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.237979][T15225] ? __pfx_ksys_write+0x10/0x10 [ 447.238004][T15225] ? rcu_is_watching+0x15/0xb0 [ 447.238030][T15225] ? do_syscall_64+0xbe/0x3b0 [ 447.238058][T15225] do_syscall_64+0xfa/0x3b0 [ 447.238079][T15225] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.238100][T15225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.238121][T15225] ? clear_bhb_loop+0x60/0xb0 [ 447.238146][T15225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.238170][T15225] RIP: 0033:0x7fa890b8ec29 [ 447.238190][T15225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.238207][T15225] RSP: 002b:00007fa891ad0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.238230][T15225] RAX: ffffffffffffffda RBX: 00007fa890dd5fa0 RCX: 00007fa890b8ec29 [ 447.238245][T15225] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000004 [ 447.238258][T15225] RBP: 00007fa891ad0090 R08: 0000000000000000 R09: 0000000000000000 [ 447.238270][T15225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.238283][T15225] R13: 00007fa890dd6038 R14: 00007fa890dd5fa0 R15: 00007ffd3fe3e8e8 [ 447.238317][T15225] [ 447.853427][T15242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.282565][T15242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.390799][T15253] tipc: Enabled bearer , priority 0 [ 448.442073][T15255] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode [ 448.452308][T15255] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode [ 448.472435][T15255] tipc: Resetting bearer [ 448.584372][T15272] tipc: Resetting bearer [ 448.614126][ T8098] tipc: Resetting bearer [ 448.700175][T15287] netlink: 'syz.0.2458': attribute type 4 has an invalid length. [ 448.752958][T15289] netlink: 'syz.0.2458': attribute type 4 has an invalid length. [ 448.887527][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.891901][T15288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2459'. [ 448.899667][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.189692][T15298] FAULT_INJECTION: forcing a failure. [ 449.189692][T15298] name failslab, interval 1, probability 0, space 0, times 0 [ 449.216108][T15298] CPU: 1 UID: 0 PID: 15298 Comm: syz.2.2462 Not tainted syzkaller #0 PREEMPT(full) [ 449.216139][T15298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 449.216152][T15298] Call Trace: [ 449.216160][T15298] [ 449.216170][T15298] dump_stack_lvl+0x189/0x250 [ 449.216200][T15298] ? __pfx____ratelimit+0x10/0x10 [ 449.216222][T15298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.216247][T15298] ? __pfx__printk+0x10/0x10 [ 449.216279][T15298] ? __pfx___might_resched+0x10/0x10 [ 449.216299][T15298] ? fs_reclaim_acquire+0x7d/0x100 [ 449.216325][T15298] should_fail_ex+0x414/0x560 [ 449.216362][T15298] should_failslab+0xa8/0x100 [ 449.216395][T15298] __kmalloc_noprof+0xcb/0x4f0 [ 449.216422][T15298] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 449.216461][T15298] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 449.216501][T15298] genl_family_rcv_msg_doit+0xb8/0x300 [ 449.216541][T15298] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 449.216582][T15298] ? apparmor_capable+0x137/0x1b0 [ 449.216610][T15298] ? bpf_lsm_capable+0x9/0x20 [ 449.216637][T15298] ? security_capable+0x7e/0x2e0 [ 449.216675][T15298] genl_rcv_msg+0x60e/0x790 [ 449.216714][T15298] ? __pfx_genl_rcv_msg+0x10/0x10 [ 449.216742][T15298] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 449.216761][T15298] ? __pfx_nl80211_del_station+0x10/0x10 [ 449.216783][T15298] ? __pfx_nl80211_post_doit+0x10/0x10 [ 449.216820][T15298] netlink_rcv_skb+0x208/0x470 [ 449.216842][T15298] ? __lock_acquire+0xab9/0xd20 [ 449.216885][T15298] ? __pfx_genl_rcv_msg+0x10/0x10 [ 449.216918][T15298] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 449.216964][T15298] ? down_read+0x1ad/0x2e0 [ 449.216998][T15298] genl_rcv+0x28/0x40 [ 449.217026][T15298] netlink_unicast+0x82f/0x9e0 [ 449.217059][T15298] ? __pfx_netlink_unicast+0x10/0x10 [ 449.217083][T15298] ? netlink_sendmsg+0x642/0xb30 [ 449.217105][T15298] ? skb_put+0x11b/0x210 [ 449.217135][T15298] netlink_sendmsg+0x805/0xb30 [ 449.217172][T15298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.217200][T15298] ? aa_sock_msg_perm+0xf1/0x1d0 [ 449.217223][T15298] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 449.217245][T15298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.217271][T15298] __sock_sendmsg+0x21c/0x270 [ 449.217296][T15298] ____sys_sendmsg+0x505/0x830 [ 449.217331][T15298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.217371][T15298] ? import_iovec+0x74/0xa0 [ 449.217402][T15298] ___sys_sendmsg+0x21f/0x2a0 [ 449.217433][T15298] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.217505][T15298] ? __fget_files+0x2a/0x420 [ 449.217522][T15298] ? __fget_files+0x3a0/0x420 [ 449.217553][T15298] __x64_sys_sendmsg+0x19b/0x260 [ 449.217585][T15298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.217625][T15298] ? __pfx_ksys_write+0x10/0x10 [ 449.217651][T15298] ? rcu_is_watching+0x15/0xb0 [ 449.217679][T15298] ? do_syscall_64+0xbe/0x3b0 [ 449.217707][T15298] do_syscall_64+0xfa/0x3b0 [ 449.217728][T15298] ? lockdep_hardirqs_on+0x9c/0x150 [ 449.217751][T15298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.217771][T15298] ? clear_bhb_loop+0x60/0xb0 [ 449.217797][T15298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.217817][T15298] RIP: 0033:0x7f756958ec29 [ 449.217836][T15298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.217854][T15298] RSP: 002b:00007f756a446038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.217875][T15298] RAX: ffffffffffffffda RBX: 00007f75697d5fa0 RCX: 00007f756958ec29 [ 449.217891][T15298] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000004 [ 449.217904][T15298] RBP: 00007f756a446090 R08: 0000000000000000 R09: 0000000000000000 [ 449.217916][T15298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.217928][T15298] R13: 00007f75697d6038 R14: 00007f75697d5fa0 R15: 00007fffd6856f48 [ 449.217964][T15298] [ 449.624418][ T9054] tipc: Node number set to 4227858433 [ 449.974446][T15310] lo speed is unknown, defaulting to 1000 [ 449.982697][T15310] syzkaller0 speed is unknown, defaulting to 1000 [ 449.991202][T15310] wg1 speed is unknown, defaulting to 1000 [ 450.689370][T15319] bond0 (unregistering): (slave lo): Releasing backup interface [ 450.698864][T15319] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 450.730860][T15319] bond0 (unregistering): Released all slaves [ 450.971702][T15331] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2467'. [ 451.011726][T15312] lo speed is unknown, defaulting to 1000 [ 451.197343][T15312] syzkaller0 speed is unknown, defaulting to 1000 [ 451.227014][T15345] netlink: 'syz.0.2473': attribute type 13 has an invalid length. [ 451.228086][T15312] wg1 speed is unknown, defaulting to 1000 [ 451.236117][T15345] netlink: 'syz.0.2473': attribute type 17 has an invalid length. [ 451.362486][T15345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 451.428020][T15353] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2474'. [ 451.647684][T15364] FAULT_INJECTION: forcing a failure. [ 451.647684][T15364] name failslab, interval 1, probability 0, space 0, times 0 [ 451.665252][T15364] CPU: 1 UID: 0 PID: 15364 Comm: syz.0.2477 Not tainted syzkaller #0 PREEMPT(full) [ 451.665283][T15364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 451.665295][T15364] Call Trace: [ 451.665302][T15364] [ 451.665312][T15364] dump_stack_lvl+0x189/0x250 [ 451.665342][T15364] ? __pfx____ratelimit+0x10/0x10 [ 451.665363][T15364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.665388][T15364] ? __pfx__printk+0x10/0x10 [ 451.665419][T15364] ? __pfx___might_resched+0x10/0x10 [ 451.665438][T15364] ? fs_reclaim_acquire+0x7d/0x100 [ 451.665464][T15364] should_fail_ex+0x414/0x560 [ 451.665501][T15364] should_failslab+0xa8/0x100 [ 451.665544][T15364] __kmalloc_noprof+0xcb/0x4f0 [ 451.665570][T15364] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 451.665610][T15364] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 451.665649][T15364] genl_family_rcv_msg_doit+0xb8/0x300 [ 451.665689][T15364] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 451.665729][T15364] ? apparmor_capable+0x137/0x1b0 [ 451.665758][T15364] ? bpf_lsm_capable+0x9/0x20 [ 451.665785][T15364] ? security_capable+0x7e/0x2e0 [ 451.665825][T15364] genl_rcv_msg+0x60e/0x790 [ 451.665863][T15364] ? __pfx_genl_rcv_msg+0x10/0x10 [ 451.665891][T15364] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 451.665910][T15364] ? __pfx_nl80211_del_station+0x10/0x10 [ 451.665931][T15364] ? __pfx_nl80211_post_doit+0x10/0x10 [ 451.665952][T15364] ? __asan_memcpy+0x40/0x70 [ 451.665975][T15364] ? __pfx_ref_tracker_free+0x10/0x10 [ 451.666004][T15364] netlink_rcv_skb+0x208/0x470 [ 451.666025][T15364] ? __lock_acquire+0xab9/0xd20 [ 451.666055][T15364] ? __pfx_genl_rcv_msg+0x10/0x10 [ 451.666086][T15364] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 451.666134][T15364] ? down_read+0x1ad/0x2e0 [ 451.666162][T15364] genl_rcv+0x28/0x40 [ 451.666189][T15364] netlink_unicast+0x82f/0x9e0 [ 451.666223][T15364] ? __pfx_netlink_unicast+0x10/0x10 [ 451.666252][T15364] ? netlink_sendmsg+0x642/0xb30 [ 451.666275][T15364] ? skb_put+0x11b/0x210 [ 451.666306][T15364] netlink_sendmsg+0x805/0xb30 [ 451.666342][T15364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.666371][T15364] ? aa_sock_msg_perm+0xf1/0x1d0 [ 451.666394][T15364] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 451.666416][T15364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.666442][T15364] __sock_sendmsg+0x21c/0x270 [ 451.666467][T15364] ____sys_sendmsg+0x505/0x830 [ 451.666502][T15364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.666548][T15364] ? import_iovec+0x74/0xa0 [ 451.666580][T15364] ___sys_sendmsg+0x21f/0x2a0 [ 451.666612][T15364] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.666682][T15364] ? __fget_files+0x2a/0x420 [ 451.666700][T15364] ? __fget_files+0x3a0/0x420 [ 451.666731][T15364] __x64_sys_sendmsg+0x19b/0x260 [ 451.666761][T15364] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.666800][T15364] ? __pfx_ksys_write+0x10/0x10 [ 451.666825][T15364] ? rcu_is_watching+0x15/0xb0 [ 451.666852][T15364] ? do_syscall_64+0xbe/0x3b0 [ 451.666880][T15364] do_syscall_64+0xfa/0x3b0 [ 451.666901][T15364] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.666922][T15364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.666943][T15364] ? clear_bhb_loop+0x60/0xb0 [ 451.666969][T15364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.666989][T15364] RIP: 0033:0x7fb9d358ec29 [ 451.667008][T15364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.667027][T15364] RSP: 002b:00007fb9d44c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.667048][T15364] RAX: ffffffffffffffda RBX: 00007fb9d37d5fa0 RCX: 00007fb9d358ec29 [ 451.667064][T15364] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000004 [ 451.667077][T15364] RBP: 00007fb9d44c9090 R08: 0000000000000000 R09: 0000000000000000 [ 451.667089][T15364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.667102][T15364] R13: 00007fb9d37d6038 R14: 00007fb9d37d5fa0 R15: 00007ffc08fb1a78 [ 451.667137][T15364] [ 452.430084][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2479'. [ 452.505973][T15379] lo speed is unknown, defaulting to 1000 [ 452.543970][T15379] syzkaller0 speed is unknown, defaulting to 1000 [ 452.579313][T15376] lo speed is unknown, defaulting to 1000 [ 452.591956][T15379] wg1 speed is unknown, defaulting to 1000 [ 452.626253][T15376] syzkaller0 speed is unknown, defaulting to 1000 [ 452.702657][T15376] wg1 speed is unknown, defaulting to 1000 [ 453.119372][T15368] lec:lec_atm_close: lec0: Shut down! [ 453.156550][T15397] tipc: Enabling of bearer rejected, already enabled [ 453.201702][T15397] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 453.239449][T15399] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.2488'. [ 453.293896][T15400] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2488'. [ 453.348339][T15404] netlink: 'syz.5.2488': attribute type 41 has an invalid length. [ 453.450769][T15405] netlink: 'syz.0.2489': attribute type 41 has an invalid length. [ 453.472224][T15405] FAULT_INJECTION: forcing a failure. [ 453.472224][T15405] name failslab, interval 1, probability 0, space 0, times 0 [ 453.517720][T15405] CPU: 0 UID: 0 PID: 15405 Comm: syz.0.2489 Not tainted syzkaller #0 PREEMPT(full) [ 453.517751][T15405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 453.517765][T15405] Call Trace: [ 453.517774][T15405] [ 453.517782][T15405] dump_stack_lvl+0x189/0x250 [ 453.517813][T15405] ? __pfx____ratelimit+0x10/0x10 [ 453.517836][T15405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.517859][T15405] ? __pfx__printk+0x10/0x10 [ 453.517890][T15405] ? __pfx___might_resched+0x10/0x10 [ 453.517907][T15405] ? fs_reclaim_acquire+0x7d/0x100 [ 453.517928][T15405] should_fail_ex+0x414/0x560 [ 453.517961][T15405] should_failslab+0xa8/0x100 [ 453.517989][T15405] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 453.518015][T15405] ? __alloc_skb+0x112/0x2d0 [ 453.518040][T15405] __alloc_skb+0x112/0x2d0 [ 453.518065][T15405] netlink_ack+0x146/0xa50 [ 453.518084][T15405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.518108][T15405] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 453.518125][T15405] ? __pfx_nl80211_post_doit+0x10/0x10 [ 453.518147][T15405] ? __asan_memcpy+0x40/0x70 [ 453.518167][T15405] ? __pfx_ref_tracker_free+0x10/0x10 [ 453.518194][T15405] netlink_rcv_skb+0x28c/0x470 [ 453.518215][T15405] ? __lock_acquire+0xab9/0xd20 [ 453.518245][T15405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.518273][T15405] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 453.518311][T15405] ? down_read+0x1ad/0x2e0 [ 453.518335][T15405] genl_rcv+0x28/0x40 [ 453.518360][T15405] netlink_unicast+0x82f/0x9e0 [ 453.518388][T15405] ? __pfx_netlink_unicast+0x10/0x10 [ 453.518409][T15405] ? netlink_sendmsg+0x642/0xb30 [ 453.518431][T15405] ? skb_put+0x11b/0x210 [ 453.518460][T15405] netlink_sendmsg+0x805/0xb30 [ 453.518494][T15405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.518522][T15405] ? aa_sock_msg_perm+0xf1/0x1d0 [ 453.518545][T15405] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 453.518567][T15405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.518602][T15405] __sock_sendmsg+0x21c/0x270 [ 453.518626][T15405] ____sys_sendmsg+0x505/0x830 [ 453.518660][T15405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.518698][T15405] ? import_iovec+0x74/0xa0 [ 453.518728][T15405] ___sys_sendmsg+0x21f/0x2a0 [ 453.518763][T15405] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.518835][T15405] ? __fget_files+0x2a/0x420 [ 453.518853][T15405] ? __fget_files+0x3a0/0x420 [ 453.518885][T15405] __x64_sys_sendmsg+0x19b/0x260 [ 453.518918][T15405] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.518958][T15405] ? __pfx_ksys_write+0x10/0x10 [ 453.518984][T15405] ? rcu_is_watching+0x15/0xb0 [ 453.519012][T15405] ? do_syscall_64+0xbe/0x3b0 [ 453.519040][T15405] do_syscall_64+0xfa/0x3b0 [ 453.519062][T15405] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.519084][T15405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.519106][T15405] ? clear_bhb_loop+0x60/0xb0 [ 453.519132][T15405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.519152][T15405] RIP: 0033:0x7fb9d358ec29 [ 453.519172][T15405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.519190][T15405] RSP: 002b:00007fb9d44c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.519213][T15405] RAX: ffffffffffffffda RBX: 00007fb9d37d5fa0 RCX: 00007fb9d358ec29 [ 453.519228][T15405] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000004 [ 453.519242][T15405] RBP: 00007fb9d44c9090 R08: 0000000000000000 R09: 0000000000000000 [ 453.519255][T15405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.519267][T15405] R13: 00007fb9d37d6038 R14: 00007fb9d37d5fa0 R15: 00007ffc08fb1a78 [ 453.519303][T15405] [ 453.966548][T15418] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2492'. [ 453.978254][T15418] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2492'. [ 454.034123][T15419] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2492'. [ 454.047900][T15419] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2492'. [ 454.059098][T15419] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2492'. [ 454.276149][T15429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.314894][T15430] bridge2: entered allmulticast mode [ 454.454864][T15435] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 454.704812][T15441] netlink: 'syz.5.2501': attribute type 41 has an invalid length. [ 454.705836][T15439] tipc: Enabling of bearer rejected, already enabled [ 454.936555][T15451] netlink: 'syz.5.2504': attribute type 41 has an invalid length. [ 454.971282][T15452] netlink: 'syz.6.2503': attribute type 41 has an invalid length. [ 454.972129][T15455] lo speed is unknown, defaulting to 1000 [ 454.983864][T15455] syzkaller0 speed is unknown, defaulting to 1000 [ 454.987538][T15446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.995666][T15455] wg1 speed is unknown, defaulting to 1000 [ 455.002936][T15451] FAULT_INJECTION: forcing a failure. [ 455.002936][T15451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.033094][T15451] CPU: 0 UID: 0 PID: 15451 Comm: syz.5.2504 Not tainted syzkaller #0 PREEMPT(full) [ 455.033122][T15451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 455.033135][T15451] Call Trace: [ 455.033144][T15451] [ 455.033153][T15451] dump_stack_lvl+0x189/0x250 [ 455.033184][T15451] ? __pfx____ratelimit+0x10/0x10 [ 455.033207][T15451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.033231][T15451] ? __pfx__printk+0x10/0x10 [ 455.033275][T15451] should_fail_ex+0x414/0x560 [ 455.033312][T15451] _copy_to_user+0x31/0xb0 [ 455.033343][T15451] simple_read_from_buffer+0xe1/0x170 [ 455.033379][T15451] proc_fail_nth_read+0x1b3/0x220 [ 455.033408][T15451] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 455.033436][T15451] ? rw_verify_area+0x2a6/0x4d0 [ 455.033462][T15451] ? __lock_acquire+0xab9/0xd20 [ 455.033497][T15451] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 455.033523][T15451] vfs_read+0x1fd/0xa30 [ 455.033549][T15451] ? fdget_pos+0x247/0x320 [ 455.033573][T15451] ? __pfx___mutex_lock+0x10/0x10 [ 455.033597][T15451] ? __pfx_vfs_read+0x10/0x10 [ 455.033626][T15451] ? __fget_files+0x2a/0x420 [ 455.033650][T15451] ? __fget_files+0x3a0/0x420 [ 455.033667][T15451] ? __fget_files+0x2a/0x420 [ 455.033700][T15451] ksys_read+0x145/0x250 [ 455.033731][T15451] ? __pfx_ksys_read+0x10/0x10 [ 455.033755][T15451] ? rcu_is_watching+0x15/0xb0 [ 455.033783][T15451] ? do_syscall_64+0xbe/0x3b0 [ 455.033811][T15451] do_syscall_64+0xfa/0x3b0 [ 455.033832][T15451] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.033853][T15451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.033875][T15451] ? clear_bhb_loop+0x60/0xb0 [ 455.033901][T15451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.033920][T15451] RIP: 0033:0x7f86c358d63c [ 455.033939][T15451] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 455.033957][T15451] RSP: 002b:00007f86c43be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 455.033979][T15451] RAX: ffffffffffffffda RBX: 00007f86c37d5fa0 RCX: 00007f86c358d63c [ 455.033994][T15451] RDX: 000000000000000f RSI: 00007f86c43be0a0 RDI: 0000000000000007 [ 455.034007][T15451] RBP: 00007f86c43be090 R08: 0000000000000000 R09: 0000000000000000 [ 455.034020][T15451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.034032][T15451] R13: 00007f86c37d6038 R14: 00007f86c37d5fa0 R15: 00007ffdf5911d68 [ 455.034067][T15451] [ 455.344805][T15463] netlink: 'syz.2.2506': attribute type 1 has an invalid length. [ 455.414350][T15465] netlink: 'syz.5.2509': attribute type 33 has an invalid length. [ 455.422921][T15461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 455.471070][T15465] netlink: 'syz.5.2509': attribute type 1 has an invalid length. [ 455.624195][T15468] lo speed is unknown, defaulting to 1000 [ 455.712528][T15468] syzkaller0 speed is unknown, defaulting to 1000 [ 455.724823][T15468] wg1 speed is unknown, defaulting to 1000 [ 455.989867][T15484] __nla_validate_parse: 10 callbacks suppressed [ 455.989887][T15484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2514'. [ 456.467224][T15508] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2520'. [ 456.477921][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2520'. [ 456.497544][T15508] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2520'. [ 456.520456][T15512] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.2522'. [ 456.523973][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2520'. [ 456.566318][T15510] syzkaller1: entered promiscuous mode [ 456.571977][T15510] syzkaller1: entered allmulticast mode [ 456.579709][T15512] siw: device registration error -23 [ 456.739057][T15518] block nbd4: shutting down sockets [ 456.748906][T15522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2525'. [ 456.771532][T15508] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 456.783761][T15508] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 456.793855][T15508] tipc: Resetting bearer [ 456.919136][T15520] lo speed is unknown, defaulting to 1000 [ 456.938957][T15520] syzkaller0 speed is unknown, defaulting to 1000 [ 456.974785][T15520] wg1 speed is unknown, defaulting to 1000 [ 457.143735][T15537] macsec0: entered promiscuous mode [ 457.155673][T15537] macsec0: entered allmulticast mode [ 457.206285][T15542] erspan0: entered promiscuous mode [ 457.227009][T15542] erspan0: entered allmulticast mode [ 457.235386][T15542] macsec0: left promiscuous mode [ 457.240725][T15542] macsec0: left allmulticast mode [ 457.246912][T15542] erspan0: left allmulticast mode [ 457.257485][T15531] lo speed is unknown, defaulting to 1000 [ 457.347144][T15551] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2534'. [ 457.390841][T15531] syzkaller0 speed is unknown, defaulting to 1000 [ 457.404964][T15545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2532'. [ 457.416382][T15531] wg1 speed is unknown, defaulting to 1000 [ 457.501150][T15545] syzkaller1: entered promiscuous mode [ 457.519786][T15545] syzkaller1: entered allmulticast mode [ 457.653978][T15562] netlink: 'syz.4.2535': attribute type 10 has an invalid length. [ 457.885537][T15553] lo speed is unknown, defaulting to 1000 [ 458.096373][T15584] tipc: Failed to remove unknown binding: 66,1,1/134418688:2494931405/2494931407 [ 458.151537][T15584] tipc: Failed to remove unknown binding: 66,1,1/134418688:2494931405/2494931407 [ 458.198211][T15584] tipc: Failed to remove unknown binding: 66,1,1/134418688:2494931405/2494931407 [ 458.311233][T15553] syzkaller0 speed is unknown, defaulting to 1000 [ 458.369824][T15553] wg1 speed is unknown, defaulting to 1000 [ 458.405072][T15582] lo speed is unknown, defaulting to 1000 [ 458.482599][T15582] syzkaller0 speed is unknown, defaulting to 1000 [ 458.510355][T15582] wg1 speed is unknown, defaulting to 1000 [ 458.607872][T15596] tipc: Enabling of bearer rejected, already enabled [ 459.126999][T15612] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2543'. [ 459.357902][T15611] netlink: 'syz.0.2545': attribute type 10 has an invalid length. [ 459.408962][T15611] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 459.427645][T15617] lo speed is unknown, defaulting to 1000 [ 459.436656][T15617] syzkaller0 speed is unknown, defaulting to 1000 [ 459.446769][T15617] wg1 speed is unknown, defaulting to 1000 [ 460.119824][T15631] netlink: 'syz.4.2548': attribute type 41 has an invalid length. [ 460.506360][T15649] netlink: 'syz.5.2553': attribute type 1 has an invalid length. [ 460.598598][T15649] bond0: entered promiscuous mode [ 460.609017][T15649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.648530][T15649] netlink: 'syz.5.2553': attribute type 8 has an invalid length. [ 460.696666][T15653] 8021q: adding VLAN 0 to HW filter on device bond6 [ 460.709838][T15653] bond0: (slave bond6): making interface the new active one [ 460.726533][T15653] bond6: entered promiscuous mode [ 460.739685][T15653] bond0: (slave bond6): Enslaving as an active interface with an up link [ 460.770747][T15653] netlink: 'syz.5.2553': attribute type 21 has an invalid length. [ 460.843800][T15667] syzkaller1: entered promiscuous mode [ 460.876341][T15667] syzkaller1: entered allmulticast mode [ 461.098447][T15678] netlink: 'syz.0.2558': attribute type 11 has an invalid length. [ 461.718971][T15672] __nla_validate_parse: 8 callbacks suppressed [ 461.718995][T15672] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2560'. [ 461.892500][T15689] batadv_slave_1: entered promiscuous mode [ 461.914496][T15686] batadv_slave_1: left promiscuous mode [ 462.091077][T15699] netlink: 'syz.0.2567': attribute type 2 has an invalid length. [ 462.105024][T15697] lo speed is unknown, defaulting to 1000 [ 462.112675][T15699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2567'. [ 462.124533][T15697] syzkaller0 speed is unknown, defaulting to 1000 [ 462.137969][T15702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2568'. [ 462.145139][T15699] netlink: 'syz.0.2567': attribute type 1 has an invalid length. [ 462.156067][T15697] wg1 speed is unknown, defaulting to 1000 [ 462.185812][T15702] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 462.198629][T15702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2568'. [ 462.553248][T15718] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2572'. [ 462.849209][T15734] netlink: 'syz.2.2578': attribute type 1 has an invalid length. [ 462.873845][T15737] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2577'. [ 462.884603][T15737] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2577'. [ 463.483487][T15758] lo speed is unknown, defaulting to 1000 [ 463.492102][T15758] syzkaller0 speed is unknown, defaulting to 1000 [ 463.500627][T15758] wg1 speed is unknown, defaulting to 1000 [ 463.774215][T15778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.012562][T15794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2592'. [ 464.096084][T15794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.412782][T15812] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2597'. [ 464.437469][T15808] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 464.463500][T15808] netlink: 'syz.2.2595': attribute type 3 has an invalid length. [ 464.473226][T15808] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2595'. [ 464.824208][T15839] netem: change failed [ 465.036958][T15855] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 465.078048][T15852] netlink: 'syz.0.2608': attribute type 12 has an invalid length. [ 465.848529][T15908] netlink: 'syz.0.2623': attribute type 1 has an invalid length. [ 465.868514][T15908] netlink: 'syz.0.2623': attribute type 2 has an invalid length. [ 466.233877][T15939] netlink: 'syz.0.2631': attribute type 2 has an invalid length. [ 466.242615][T15939] netlink: 'syz.0.2631': attribute type 1 has an invalid length. [ 466.409201][T15943] netlink: 'syz.0.2633': attribute type 1 has an invalid length. [ 466.509789][T15943] 8021q: adding VLAN 0 to HW filter on device bond12 [ 466.644631][T15957] netlink: zone id is out of range [ 466.660352][T15951] bond12: (slave veth11): Enslaving as an active interface with a down link [ 466.745687][T15943] gretap1: entered promiscuous mode [ 466.974658][T15970] tipc: Enabling of bearer rejected, already enabled [ 467.009841][T15970] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 467.072064][T15970] tipc: Resetting bearer [ 467.099775][T15979] __nla_validate_parse: 12 callbacks suppressed [ 467.099796][T15979] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2640'. [ 467.127421][T15983] netlink: 'syz.0.2643': attribute type 1 has an invalid length. [ 467.153155][T15983] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2643'. [ 467.340875][T15990] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2647'. [ 467.436141][T15998] lo speed is unknown, defaulting to 1000 [ 467.486136][T15998] syzkaller0 speed is unknown, defaulting to 1000 [ 467.496031][T15998] wg1 speed is unknown, defaulting to 1000 [ 467.557712][T16008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2652'. [ 467.804463][ T13] tipc: Resetting bearer [ 467.839972][T16015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2655'. [ 467.891631][T16021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.025892][T16024] netlink: 'syz.2.2657': attribute type 6 has an invalid length. [ 468.034838][T16024] netlink: 'syz.2.2657': attribute type 25 has an invalid length. [ 468.047835][T16024] netlink: 'syz.2.2657': attribute type 27 has an invalid length. [ 468.056410][T16024] netlink: 'syz.2.2657': attribute type 28 has an invalid length. [ 468.065004][T16024] netlink: 'syz.2.2657': attribute type 29 has an invalid length. [ 468.078297][T16024] netlink: 'syz.2.2657': attribute type 30 has an invalid length. [ 468.508177][T16051] tipc: Enabling of bearer rejected, already enabled [ 468.558721][T16052] lo speed is unknown, defaulting to 1000 [ 468.566681][T16052] syzkaller0 speed is unknown, defaulting to 1000 [ 468.574093][ T30] audit: type=1800 audit(1758401496.501:3): pid=16049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2665" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2685 res=0 errno=0 [ 468.599486][T16052] wg1 speed is unknown, defaulting to 1000 [ 468.631696][T16055] tipc: Resetting bearer [ 468.733502][T16057] netlink: 'syz.5.2667': attribute type 1 has an invalid length. [ 468.775091][T16057] netlink: 'syz.5.2667': attribute type 2 has an invalid length. [ 468.794996][T16057] netlink: 1172 bytes leftover after parsing attributes in process `syz.5.2667'. [ 469.021483][T16044] lo speed is unknown, defaulting to 1000 [ 469.056950][T16044] syzkaller0 speed is unknown, defaulting to 1000 [ 469.074927][T16044] wg1 speed is unknown, defaulting to 1000 [ 469.236865][ T30] audit: type=1800 audit(1758401497.211:4): pid=16075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2672" name=CB dev="tmpfs" ino=2702 res=0 errno=0 [ 469.273619][T16076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2671'. [ 469.318439][T16071] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 469.736445][T16094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2677'. [ 469.745994][T16094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2677'. [ 469.796413][T16094] netlink: 'syz.2.2677': attribute type 11 has an invalid length. [ 470.040403][T16107] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2681'. [ 470.119096][T16111] netlink: 'syz.0.2682': attribute type 2 has an invalid length. [ 470.422617][T16114] tipc: Resetting bearer [ 470.504358][T16123] vlan2: entered allmulticast mode [ 470.549421][T16122] lo speed is unknown, defaulting to 1000 [ 470.557995][T16122] syzkaller0 speed is unknown, defaulting to 1000 [ 470.568761][T16122] wg1 speed is unknown, defaulting to 1000 [ 470.673534][T16137] gre0: entered allmulticast mode [ 470.687648][T16137] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 470.714142][T16136] IPVS: Error connecting to the multicast addr [ 471.037510][T16155] batadv2: entered promiscuous mode [ 471.061718][T16155] batadv2: entered allmulticast mode [ 471.749589][T16185] !: renamed from dummy0 [ 471.988592][T16196] bridge0: port 1(erspan0) entered blocking state [ 472.018409][T16196] bridge0: port 1(erspan0) entered disabled state [ 472.040356][T16196] erspan0: entered allmulticast mode [ 472.053226][T16196] erspan0: left allmulticast mode [ 472.258052][T16205] lo speed is unknown, defaulting to 1000 [ 472.296401][T16205] syzkaller0 speed is unknown, defaulting to 1000 [ 472.324301][T16205] wg1 speed is unknown, defaulting to 1000 [ 472.471059][T16218] __nla_validate_parse: 23 callbacks suppressed [ 472.471080][T16218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2713'. [ 472.565934][T16218] netdevsim netdevsim0: Direct firmware load for ./bus failed with error -2 [ 472.605557][T16218] netdevsim netdevsim0: Falling back to sysfs fallback for: ./bus [ 472.819644][T16235] pimreg: tun_chr_ioctl cmd 1074025677 [ 472.837585][T16235] pimreg: linktype set to 780 [ 472.845324][T16235] pimreg: tun_chr_ioctl cmd 35111 [ 473.005722][T16239] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2720'. [ 473.100470][T16241] validate_nla: 2 callbacks suppressed [ 473.100490][T16241] netlink: 'syz.4.2721': attribute type 41 has an invalid length. [ 473.567012][T16256] syz_tun: entered allmulticast mode [ 473.582865][T16256] dvmrp8: entered allmulticast mode [ 473.622629][T16256] lo speed is unknown, defaulting to 1000 [ 473.643758][T16256] syzkaller0 speed is unknown, defaulting to 1000 [ 473.654946][T16259] netlink: 'syz.6.2726': attribute type 23 has an invalid length. [ 473.675629][T16256] wg1 speed is unknown, defaulting to 1000 [ 473.766322][T16261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2728'. [ 473.777143][T16261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2728'. [ 473.789095][T16261] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2728'. [ 473.906805][T16254] syz_tun: left allmulticast mode [ 473.941243][T16254] dvmrp8: left allmulticast mode [ 474.977161][T16305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2740'. [ 475.020000][T16306] syzkaller0 speed is unknown, defaulting to 1000 [ 475.059458][T16306] wg1 speed is unknown, defaulting to 1000 [ 475.390364][T16316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2743'. [ 475.824896][T16329] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2747'. [ 476.004865][T16336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2750'. [ 476.034333][T16336] bridge0: port 1(erspan0) entered blocking state [ 476.041097][T16336] bridge0: port 1(erspan0) entered disabled state [ 476.052768][T16336] erspan0: entered allmulticast mode [ 476.072274][T16336] erspan0: left allmulticast mode [ 476.143649][T16337] syzkaller0 speed is unknown, defaulting to 1000 [ 476.153157][T16337] wg1 speed is unknown, defaulting to 1000 [ 476.385835][T16350] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0 [ 477.097612][T16376] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2759'. [ 477.119555][T16378] tipc: Resetting bearer [ 477.150236][T16378] tipc: Resetting bearer [ 477.263227][T16378] tipc: Resetting bearer [ 477.520762][T16389] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2761'. [ 477.580786][T16389] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2761'. [ 477.684279][T16393] pim6reg1: entered promiscuous mode [ 477.689650][T16393] pim6reg1: entered allmulticast mode [ 477.780479][T16397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2762'. [ 477.909956][T16402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2764'. [ 478.037747][T16404] syzkaller0 speed is unknown, defaulting to 1000 [ 478.058893][T16404] wg1 speed is unknown, defaulting to 1000 [ 478.670338][T16421] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2767'. [ 478.748226][T16421] syzkaller0 speed is unknown, defaulting to 1000 [ 478.789526][T16421] wg1 speed is unknown, defaulting to 1000 [ 478.904291][T16434] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2771'. [ 479.105178][T16428] syzkaller0 speed is unknown, defaulting to 1000 [ 479.598186][T16428] wg1 speed is unknown, defaulting to 1000 [ 479.799458][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2774'. [ 480.410387][T16457] netlink: 'syz.4.2775': attribute type 41 has an invalid length. [ 480.635560][T16471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2778'. [ 480.698888][T16473] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2778'. [ 480.962077][T16482] IPv6: Can't replace route, no match found [ 481.295125][T16504] syzkaller0 speed is unknown, defaulting to 1000 [ 481.326151][T16504] wg1 speed is unknown, defaulting to 1000 [ 481.467925][T16514] netlink: 'syz.0.2788': attribute type 1 has an invalid length. [ 481.536213][T16514] 8021q: adding VLAN 0 to HW filter on device bond13 [ 481.558156][T16513] syzkaller0 speed is unknown, defaulting to 1000 [ 481.725331][T16513] wg1 speed is unknown, defaulting to 1000 [ 481.912663][T16524] lo: entered allmulticast mode [ 481.968626][T16528] netlink: 'syz.4.2792': attribute type 10 has an invalid length. [ 481.976759][T16528] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2792'. [ 481.993475][T16528] batadv0: entered promiscuous mode [ 482.009804][T16528] bridge0: port 2(batadv0) entered blocking state [ 482.029431][T16528] bridge0: port 2(batadv0) entered disabled state [ 482.045271][T16528] bond3: entered promiscuous mode [ 482.152222][ T1164] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 482.161706][ T1164] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 482.254125][T16537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.737332][T16523] lo: left allmulticast mode [ 482.832554][T16541] syzkaller0 speed is unknown, defaulting to 1000 [ 482.841255][T16541] wg1 speed is unknown, defaulting to 1000 [ 482.879218][T16543] syzkaller0 speed is unknown, defaulting to 1000 [ 482.966584][T16552] __nla_validate_parse: 2 callbacks suppressed [ 482.966604][T16552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2797'. [ 483.005363][T16543] wg1 speed is unknown, defaulting to 1000 [ 483.047296][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2797'. [ 483.086771][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2797'. [ 483.375293][T16571] netlink: 'syz.4.2802': attribute type 1 has an invalid length. [ 483.459063][T16571] 8021q: adding VLAN 0 to HW filter on device bond6 [ 483.543017][T16575] 8021q: adding VLAN 0 to HW filter on device bond6 [ 483.562878][T16575] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 483.581802][T16575] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 483.714630][T16571] veth15: entered promiscuous mode [ 483.743447][T16571] bond6: (slave veth15): Enslaving as an active interface with a down link [ 483.870753][T16230] Set syz1 is full, maxelem 65536 reached [ 484.259852][T16594] netlink: zone id is out of range [ 484.266280][T16594] netlink: zone id is out of range [ 484.292170][T16597] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2811'. [ 484.303931][T16594] netlink: zone id is out of range [ 484.332198][T16594] netlink: zone id is out of range [ 484.337567][T16594] netlink: zone id is out of range [ 484.343259][T16594] netlink: zone id is out of range [ 484.353508][T16594] netlink: zone id is out of range [ 484.364876][T16594] netlink: zone id is out of range [ 484.389407][T16603] netlink: 'syz.5.2812': attribute type 4 has an invalid length. [ 484.443828][T16605] netlink: 'syz.5.2812': attribute type 4 has an invalid length. [ 484.636347][T16618] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2816'. [ 484.783269][T16624] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2817'. [ 485.065454][T16642] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2823'. [ 485.175481][T16645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2824'. [ 485.185538][T16645] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2824'. [ 485.390342][T16661] netlink: 'syz.6.2828': attribute type 13 has an invalid length. [ 485.599241][T16680] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2831'. [ 485.712976][T16680] netlink: 'syz.6.2831': attribute type 13 has an invalid length. [ 485.721054][T16680] netlink: 'syz.6.2831': attribute type 17 has an invalid length. [ 486.061901][T16680] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.158465][T16701] tipc: Resetting bearer [ 486.185002][T16683] syzkaller0 speed is unknown, defaulting to 1000 [ 486.214512][T16683] wg1 speed is unknown, defaulting to 1000 [ 486.554064][T16716] tipc: Resetting bearer [ 486.933359][T16729] syzkaller0 speed is unknown, defaulting to 1000 [ 487.074703][T16745] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 487.290032][T16729] wg1 speed is unknown, defaulting to 1000 [ 487.479363][T16762] netlink: 'syz.2.2854': attribute type 1 has an invalid length. [ 487.819723][T16784] netlink: 'syz.4.2861': attribute type 4 has an invalid length. [ 488.606635][T16798] syzkaller0 speed is unknown, defaulting to 1000 [ 488.625970][T16798] wg1 speed is unknown, defaulting to 1000 [ 488.917620][T16807] syzkaller0 speed is unknown, defaulting to 1000 [ 489.003340][T16815] syzkaller0 speed is unknown, defaulting to 1000 [ 489.014746][T16807] wg1 speed is unknown, defaulting to 1000 [ 489.189543][T16815] wg1 speed is unknown, defaulting to 1000 [ 489.598558][T16828] tipc: Enabling of bearer rejected, already enabled [ 489.686392][T16830] geneve2: entered promiscuous mode [ 489.723199][ T6310] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.745002][ T6310] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.859258][ T6310] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.129404][ T6310] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.190795][T16847] __nla_validate_parse: 13 callbacks suppressed [ 490.190817][T16847] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2876'. [ 490.243391][T16847] netlink: 59 bytes leftover after parsing attributes in process `syz.2.2876'. [ 490.291843][T16847] netlink: 59 bytes leftover after parsing attributes in process `syz.2.2876'. [ 490.754392][T16866] tipc: Enabled bearer , priority 10 [ 490.835030][T16868] netlink: 'syz.0.2884': attribute type 10 has an invalid length. [ 490.902671][T16862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2882'. [ 490.958506][T16862] macvtap0: entered promiscuous mode [ 490.974678][T16862] macvtap0: entered allmulticast mode [ 490.993219][T16862] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 491.032513][T16881] netlink: 'syz.4.2887': attribute type 2 has an invalid length. [ 491.043352][T16881] netlink: 'syz.4.2887': attribute type 1 has an invalid length. [ 491.057944][T16881] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2887'. [ 491.470595][T16891] syzkaller0 speed is unknown, defaulting to 1000 [ 491.490361][T16891] wg1 speed is unknown, defaulting to 1000 [ 491.992835][ T5874] syz_tun (unregistering): left allmulticast mode [ 492.215845][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 492.226181][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 492.244994][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 492.255263][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 492.264365][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 492.793302][T16906] tipc: Resetting bearer [ 493.203270][T16919] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2897'. [ 493.443612][T16910] syzkaller0 speed is unknown, defaulting to 1000 [ 493.464746][T16910] wg1 speed is unknown, defaulting to 1000 [ 493.523852][T16925] net_ratelimit: 5 callbacks suppressed [ 493.523887][T16925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.608081][T16925] tipc: Enabling of bearer rejected, already enabled [ 493.776102][T16933] macsec0: entered allmulticast mode [ 494.200036][T16910] chnl_net:caif_netlink_parms(): no params data found [ 494.325128][ T5871] Bluetooth: hci0: command tx timeout [ 494.608913][T16966] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2908'. [ 494.664081][T16966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2908'. [ 494.713274][T16910] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.720733][T16910] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.729586][T16910] bridge_slave_0: entered allmulticast mode [ 494.740521][T16910] bridge_slave_0: entered promiscuous mode [ 494.762694][T16910] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.770387][T16910] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.780008][T16910] bridge_slave_1: entered allmulticast mode [ 494.789451][T16910] bridge_slave_1: entered promiscuous mode [ 494.839052][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2911'. [ 494.918943][T16973] IPVS: Error joining to the multicast group [ 494.935402][T16910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.978674][T16910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.010175][T16984] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2914'. [ 495.170445][T16910] team0: Port device team_slave_0 added [ 495.187890][T16910] team0: Port device team_slave_1 added [ 495.223257][T16997] netlink: 'syz.6.2918': attribute type 13 has an invalid length. [ 495.246489][T16997] netlink: 'syz.6.2918': attribute type 17 has an invalid length. [ 495.285606][T16996] __nla_validate_parse: 1 callbacks suppressed [ 495.285629][T16996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2916'. [ 495.320405][T16997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 495.348216][T17012] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2916'. [ 495.365329][T16910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.375753][T16910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.481181][T16910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.539690][T16910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.558178][T16910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.595484][T16910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.717580][T17028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2924'. [ 495.729631][T17028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2924'. [ 495.748646][T16910] hsr_slave_0: entered promiscuous mode [ 495.763333][T16910] hsr_slave_1: entered promiscuous mode [ 495.858753][T17035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2924'. [ 495.892604][T17035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2924'. [ 496.026378][T17040] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2926'. [ 496.047598][T17040] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2926'. [ 496.113944][T17041] netlink: 'syz.5.2926': attribute type 10 has an invalid length. [ 496.392900][ T5871] Bluetooth: hci0: command tx timeout [ 496.544165][T16910] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 496.643561][T16910] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 496.692481][T16910] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 496.720928][T16910] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 496.746379][T17050] xfrm0: entered promiscuous mode [ 496.753630][T17050] xfrm0: entered allmulticast mode [ 496.838846][T17059] tipc: Resetting bearer [ 496.870652][T17059] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode [ 496.876506][T17066] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2934'. [ 496.889664][T17066] netlink: 'syz.4.2934': attribute type 1 has an invalid length. [ 496.890794][T17059] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode [ 496.907043][T17059] bridge2: left allmulticast mode [ 497.001227][T17069] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 497.103988][T17074] syzkaller0 speed is unknown, defaulting to 1000 [ 497.129440][T17074] wg1 speed is unknown, defaulting to 1000 [ 497.258248][T16910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.338546][T16910] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.370754][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.378048][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.409882][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.417159][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.524713][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2941'. [ 498.159751][T17116] nft_compat: unsupported protocol 0 [ 498.186029][T16910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.456943][T16910] veth0_vlan: entered promiscuous mode [ 498.472057][ T5871] Bluetooth: hci0: command tx timeout [ 498.498197][T16910] veth1_vlan: entered promiscuous mode [ 498.593622][T16910] veth0_macvtap: entered promiscuous mode [ 498.608291][T16910] veth1_macvtap: entered promiscuous mode [ 498.690936][T16910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.746973][T16910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.807741][ T6310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.822112][ T6310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.830897][ T6310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.883012][ T6310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.167676][ T8100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.192057][ T8100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.336034][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.372774][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.925567][T17176] xfrm1: entered promiscuous mode [ 499.930773][T17176] xfrm1: entered allmulticast mode [ 500.216927][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.259647][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 500.270541][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 500.294876][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 500.325755][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 500.335119][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 500.353169][T17187] pim6reg1: entered promiscuous mode [ 500.377645][T17187] pim6reg1: entered allmulticast mode [ 500.455540][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.558247][ T5865] Bluetooth: hci0: command tx timeout [ 500.590344][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.602265][T17194] netlink: 'syz.0.2968': attribute type 21 has an invalid length. [ 500.699863][T17183] syzkaller0 speed is unknown, defaulting to 1000 [ 500.744800][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.783386][T17183] wg1 speed is unknown, defaulting to 1000 [ 500.836243][T17198] __nla_validate_parse: 8 callbacks suppressed [ 500.836263][T17198] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2970'. [ 501.150257][T17206] syzkaller0 speed is unknown, defaulting to 1000 [ 501.418646][T17206] wg1 speed is unknown, defaulting to 1000 [ 501.418683][T17207] syzkaller0 speed is unknown, defaulting to 1000 [ 501.644383][T17216] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2974'. [ 502.225173][ T12] team0: Port device bridge5 removed [ 502.472279][ T5865] Bluetooth: hci1: command tx timeout [ 502.526436][ T12] bond1 (unregistering): Released all slaves [ 502.642517][ T12] bond2 (unregistering): Released all slaves [ 502.761068][ T12] bond3 (unregistering): Released all slaves [ 502.877747][ T12] bond4 (unregistering): (slave veth5): Releasing backup interface [ 502.887387][ T12] bond4 (unregistering): Released all slaves [ 502.904441][ T12] bond5 (unregistering): Released all slaves [ 502.919156][ T12] bond6 (unregistering): Released all slaves [ 503.039982][ T12] bond0 (unregistering): Released all slaves [ 503.068167][T17207] wg1 speed is unknown, defaulting to 1000 [ 503.102284][T17226] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2974'. [ 503.310724][T17231] macsec0: left allmulticast mode [ 503.318043][T17231] macvtap1: left allmulticast mode [ 503.324134][T17231] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 503.332522][T17231] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 503.345812][T17231] gtp0: left promiscuous mode [ 503.352252][T17231] veth15: left promiscuous mode [ 503.388480][T17231] xfrm1: left promiscuous mode [ 503.394448][T17231] xfrm1: left allmulticast mode [ 503.479671][T17235] macsec3: entered promiscuous mode [ 503.485545][T17235] veth0_to_team: entered promiscuous mode [ 503.494595][T17235] veth0_to_team: left promiscuous mode [ 503.635857][T17183] chnl_net:caif_netlink_parms(): no params data found [ 503.807423][T17242] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 503.824131][T17242] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.831990][T17242] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.965038][T17183] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.988482][T17183] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.011048][T17183] bridge_slave_0: entered allmulticast mode [ 504.021257][T17183] bridge_slave_0: entered promiscuous mode [ 504.033913][T17183] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.058097][T17183] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.068061][T17183] bridge_slave_1: entered allmulticast mode [ 504.084128][T17183] bridge_slave_1: entered promiscuous mode [ 504.194092][T17254] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2983'. [ 504.215180][T17183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.238310][T17254] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2983'. [ 504.239272][T17253] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2984'. [ 504.296183][T17183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.376743][T17183] team0: Port device team_slave_0 added [ 504.389637][T17183] team0: Port device team_slave_1 added [ 504.552234][ T5865] Bluetooth: hci1: command tx timeout [ 504.552672][T17183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.597766][T17183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.629516][T17183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.647230][T17183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.660275][T17183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.696939][T17183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.790002][ T12] _ÐZ`Ô€@ÿÿ: left promiscuous mode [ 504.800914][T17273] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2992'. [ 504.918923][ T12] tipc: Disabling bearer [ 504.943630][ T12] tipc: Disabling bearer [ 504.972929][ T12] tipc: Left network mode [ 504.978730][T17183] hsr_slave_0: entered promiscuous mode [ 504.994750][T17183] hsr_slave_1: entered promiscuous mode [ 505.037831][T17183] debugfs: 'hsr0' already exists in 'hsr' [ 505.047391][T17183] Cannot create hsr debugfs directory [ 505.440342][T17309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3002'. [ 505.678969][T17322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3006'. [ 505.690321][T17322] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3006'. [ 505.700468][T17320] wg1 speed is unknown, defaulting to 1000 [ 505.885845][ T12] hsr_slave_0: left promiscuous mode [ 505.893552][ T12] hsr_slave_1: left promiscuous mode [ 505.899775][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.909015][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.909581][T17331] netlink: 'syz.0.3007': attribute type 6 has an invalid length. [ 506.095598][ T12] pim6reg (unregistering): left allmulticast mode [ 506.130214][T17336] netlink: 'syz.0.3007': attribute type 12 has an invalid length. [ 506.139494][T17336] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3007'. [ 506.634166][ T5865] Bluetooth: hci1: command tx timeout [ 506.652301][ T12] team0 (unregistering): Port device team_slave_1 removed [ 506.699497][ T12] team0 (unregistering): Port device team_slave_0 removed [ 506.987340][ T12] team0 (unregistering): Port device 0! removed [ 507.213023][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3009'. [ 507.775532][T17368] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3015'. [ 507.880542][T17183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 507.909034][T17183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 507.946137][T17183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 507.977665][T17183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 507.988312][T17377] netlink: 'syz.0.3022': attribute type 1 has an invalid length. [ 508.011173][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3022'. [ 508.034370][ T8098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.060825][ T8098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.254187][T17183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.293477][T17183] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.308539][ T6310] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.315956][ T6310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.328375][T17400] batadv_slave_1: entered promiscuous mode [ 508.341053][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.348335][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.389868][T17400] batadv_slave_1: left promiscuous mode [ 508.722792][ T5865] Bluetooth: hci1: command tx timeout [ 508.794832][T17183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.873034][T17183] veth0_vlan: entered promiscuous mode [ 508.891214][T17183] veth1_vlan: entered promiscuous mode [ 508.958992][T17183] veth0_macvtap: entered promiscuous mode [ 508.997281][T17183] veth1_macvtap: entered promiscuous mode [ 509.031257][ T12] IPVS: stop unused estimator thread 0... [ 509.063894][T17183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.106200][T17183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.179921][ T1149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.218998][ T1149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.255285][T17441] lo: entered allmulticast mode [ 509.286313][T17441] tunl0: entered allmulticast mode [ 509.305492][T17441] gre0: entered allmulticast mode [ 509.345508][T17441] gretap0: entered allmulticast mode [ 509.368881][T17441] erspan0: entered allmulticast mode [ 509.395561][T17441] ip_vti0: entered allmulticast mode [ 509.427173][T17441] ip6_vti0: entered allmulticast mode [ 509.463129][T17441] sit0: entered allmulticast mode [ 509.507430][T17441] ip6tnl0: entered allmulticast mode [ 509.524084][T17441] ip6gre0: entered allmulticast mode [ 509.539813][T17441] ip6gretap0: entered allmulticast mode [ 509.574440][T17441] bridge0: entered allmulticast mode [ 509.597517][T17441] bond0: entered allmulticast mode [ 509.609964][T17441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.620897][T17441] !: entered allmulticast mode [ 509.648056][T17441] nlmon0: entered allmulticast mode [ 509.702632][T17441] caif0: entered allmulticast mode [ 509.708181][T17441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 509.793808][ T1149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.809971][ T1149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.180098][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.211222][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.282387][T17469] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.3045'. [ 510.304347][T17474] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3047'. [ 510.359694][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.369404][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.586809][T17482] netlink: 'syz.2.2962': attribute type 1 has an invalid length. [ 510.606985][T17482] netlink: 'syz.2.2962': attribute type 3 has an invalid length. [ 510.625692][T17482] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2962'. [ 510.764352][T17485] netlink: del zone limit has 4 unknown bytes [ 511.160159][T17495] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3055'. [ 511.221014][T17495] netlink: 'syz.6.3055': attribute type 30 has an invalid length. [ 511.258444][T17495] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3055'. [ 511.352494][ T5871] Bluetooth: hci1: command 0x0405 tx timeout [ 511.559390][T17505] netlink: 'syz.6.3057': attribute type 1 has an invalid length. [ 511.582213][T17505] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3057'. [ 511.776380][ T5871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 511.796896][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 511.806772][ T5871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 511.816554][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 511.825743][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 513.249935][T17549] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3066'. [ 513.528960][T17511] chnl_net:caif_netlink_parms(): no params data found [ 513.553333][T17560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3069'. [ 513.669752][T17564] netlink: 'syz.2.3069': attribute type 1 has an invalid length. [ 513.686466][T17560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3069'. [ 513.703632][T17564] netlink: 'syz.2.3069': attribute type 1 has an invalid length. [ 513.758166][T17560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3069'. [ 513.934675][ T5871] Bluetooth: hci3: command tx timeout [ 514.224847][T17511] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.252368][T17511] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.259693][T17511] bridge_slave_0: entered allmulticast mode [ 514.287946][T17511] bridge_slave_0: entered promiscuous mode [ 514.306579][T17590] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3076'. [ 514.319186][T17511] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.327725][T17511] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.338216][T17511] bridge_slave_1: entered allmulticast mode [ 514.347749][T17511] bridge_slave_1: entered promiscuous mode [ 514.388207][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3076'. [ 514.543948][T17511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.585235][T17511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.723973][T17511] team0: Port device team_slave_0 added [ 514.749027][T17511] team0: Port device team_slave_1 added [ 514.801192][T17599] macvtap2: entered allmulticast mode [ 514.843300][T17599] bridge0: entered allmulticast mode [ 514.859367][T17599] batman_adv: batadv0: Adding interface: macvtap2 [ 514.866998][T17599] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.896703][T17599] batman_adv: batadv0: Interface activated: macvtap2 [ 515.144545][T17511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.173678][T17511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.220167][T17511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.236746][T17511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.244670][T17511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.338426][T17511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.605108][T17629] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3084'. [ 515.658238][T17511] hsr_slave_0: entered promiscuous mode [ 515.676183][T17511] hsr_slave_1: entered promiscuous mode [ 515.689064][T17511] debugfs: 'hsr0' already exists in 'hsr' [ 515.696403][T17511] Cannot create hsr debugfs directory [ 515.889670][T17643] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20003 [ 516.000659][ T5871] Bluetooth: hci3: command tx timeout [ 516.210152][T17650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3089'. [ 516.570212][T17664] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3092'. [ 516.748454][T17672] openvswitch: netlink: IP tunnel TTL not specified. [ 516.824424][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3094'. [ 517.118237][T17511] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 517.147199][T17511] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 517.167911][T17511] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 517.170867][T17447] Set syz1 is full, maxelem 65536 reached [ 517.203077][T17511] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 517.529968][T17701] netlink: 'syz.2.3101': attribute type 1 has an invalid length. [ 517.538982][T17701] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3101'. [ 517.703303][T17511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.738098][T17715] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3108'. [ 517.846712][T17511] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.897590][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.904866][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.936262][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.943540][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.079022][T17511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 518.086211][ T5871] Bluetooth: hci3: command tx timeout [ 518.234941][T17736] netlink: 252 bytes leftover after parsing attributes in process `syz.5.3110'. [ 518.284651][T17742] netlink: 'syz.6.3114': attribute type 1 has an invalid length. [ 518.414588][T17742] bond0: entered promiscuous mode [ 518.419719][T17742] bond0: entered allmulticast mode [ 518.426701][T17742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.469300][T17746] bridge26: entered promiscuous mode [ 518.487022][T17746] bridge26: entered allmulticast mode [ 518.495771][T17746] bond0: (slave bridge26): Enslaving as a backup interface with an up link [ 518.522564][ T6310] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 518.570736][T17754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3116'. [ 518.589465][T17754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3116'. [ 518.604897][T17511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.652313][ T8098] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 518.895231][T17765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3121'. [ 519.425404][T17796] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3127'. [ 519.573473][T17511] veth0_vlan: entered promiscuous mode [ 519.595850][T17511] veth1_vlan: entered promiscuous mode [ 519.896495][T17511] veth0_macvtap: entered promiscuous mode [ 519.924439][T17511] veth1_macvtap: entered promiscuous mode [ 519.977777][T17511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.045312][T17511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.108634][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.147438][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.161385][ T5871] Bluetooth: hci3: command tx timeout [ 520.180835][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.235964][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.334979][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.357782][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.426266][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.436345][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.834306][T17848] ip6gretap1: entered promiscuous mode [ 521.485832][T17875] __nla_validate_parse: 5 callbacks suppressed [ 521.485851][T17875] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3144'. [ 521.684805][T17880] netlink: 'syz.5.3145': attribute type 6 has an invalid length. [ 521.693975][T17880] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3145'. [ 522.239674][T17892] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 522.550946][T17908] netlink: 'syz.2.3155': attribute type 11 has an invalid length. [ 522.562074][T17908] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3155'. [ 522.582804][T17907] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 523.323639][T17928] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3164'. [ 523.335621][T17934] netlink: 'syz.4.3164': attribute type 3 has an invalid length. [ 523.357188][T17935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3166'. [ 523.372890][T17928] netlink: 'syz.4.3164': attribute type 3 has an invalid length. [ 523.767083][T17953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3171'. [ 523.979688][T17953] batman_adv: batadv0: Interface deactivated: macvtap2 [ 524.005776][T17953] bridge0 (unregistering): left allmulticast mode [ 524.077011][T17953] batman_adv: batadv0: Removing interface: macvtap2 [ 524.456604][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3173'. [ 524.467686][T17967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3173'. [ 525.217515][T17989] FAULT_INJECTION: forcing a failure. [ 525.217515][T17989] name failslab, interval 1, probability 0, space 0, times 0 [ 525.251998][T17989] CPU: 0 UID: 0 PID: 17989 Comm: syz.4.3179 Not tainted syzkaller #0 PREEMPT(full) [ 525.252027][T17989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 525.252039][T17989] Call Trace: [ 525.252048][T17989] [ 525.252058][T17989] dump_stack_lvl+0x189/0x250 [ 525.252088][T17989] ? __pfx____ratelimit+0x10/0x10 [ 525.252121][T17989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.252145][T17989] ? __pfx__printk+0x10/0x10 [ 525.252179][T17989] ? __pfx___might_resched+0x10/0x10 [ 525.252204][T17989] should_fail_ex+0x414/0x560 [ 525.252240][T17989] should_failslab+0xa8/0x100 [ 525.252272][T17989] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 525.252301][T17989] ? __alloc_skb+0x112/0x2d0 [ 525.252331][T17989] __alloc_skb+0x112/0x2d0 [ 525.252360][T17989] netlink_sendmsg+0x5c6/0xb30 [ 525.252396][T17989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.252425][T17989] ? aa_sock_msg_perm+0xf1/0x1d0 [ 525.252448][T17989] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 525.252469][T17989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.252494][T17989] __sock_sendmsg+0x21c/0x270 [ 525.252518][T17989] ____sys_sendmsg+0x505/0x830 [ 525.252552][T17989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.252590][T17989] ? import_iovec+0x74/0xa0 [ 525.252622][T17989] ___sys_sendmsg+0x21f/0x2a0 [ 525.252652][T17989] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.252722][T17989] ? __fget_files+0x2a/0x420 [ 525.252739][T17989] ? __fget_files+0x3a0/0x420 [ 525.252769][T17989] __x64_sys_sendmsg+0x19b/0x260 [ 525.252801][T17989] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 525.252841][T17989] ? __pfx_ksys_write+0x10/0x10 [ 525.252866][T17989] ? rcu_is_watching+0x15/0xb0 [ 525.252892][T17989] ? do_syscall_64+0xbe/0x3b0 [ 525.252921][T17989] do_syscall_64+0xfa/0x3b0 [ 525.252942][T17989] ? lockdep_hardirqs_on+0x9c/0x150 [ 525.252963][T17989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.252984][T17989] ? clear_bhb_loop+0x60/0xb0 [ 525.253009][T17989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.253029][T17989] RIP: 0033:0x7fe591b8ec29 [ 525.253049][T17989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.253066][T17989] RSP: 002b:00007fe5929ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.253089][T17989] RAX: ffffffffffffffda RBX: 00007fe591dd5fa0 RCX: 00007fe591b8ec29 [ 525.253126][T17989] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000003 [ 525.253140][T17989] RBP: 00007fe5929ee090 R08: 0000000000000000 R09: 0000000000000000 [ 525.253153][T17989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.253165][T17989] R13: 00007fe591dd6038 R14: 00007fe591dd5fa0 R15: 00007ffdc032ab78 [ 525.253199][T17989] [ 525.846075][T18002] bond0: left promiscuous mode [ 525.871484][T18002] bridge26: left promiscuous mode [ 525.876760][T18002] bond0: left allmulticast mode [ 525.883533][T18002] bridge26: left allmulticast mode [ 526.008755][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3189'. [ 526.010949][T18006] erspan0: entered promiscuous mode [ 526.085135][T18019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3185'. [ 526.300710][T18027] tipc: Started in network mode [ 526.309732][T18027] tipc: Node identity ac14142f, cluster identity 4711 [ 526.319344][T18027] tipc: New replicast peer: 0.0.0.0 [ 526.357281][T18027] tipc: Enabled bearer , priority 10 [ 526.366876][T18035] netlink: 'syz.6.3192': attribute type 1 has an invalid length. [ 526.386726][T18028] tipc: New replicast peer: 255.255.255.255 [ 526.486827][T18031] mac80211_hwsim hwsim53 wlan0: entered promiscuous mode [ 526.556290][T18030] bond3: (slave geneve3): making interface the new active one [ 526.566299][T18030] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 526.583264][T18047] __nla_validate_parse: 2 callbacks suppressed [ 526.583283][T18047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3198'. [ 526.599865][T18047] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3198'. [ 526.625547][T18047] tipc: Enabling of bearer rejected, failed to enable media [ 526.648225][ T1164] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 526.692875][ T1164] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 526.712856][T18050] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3198'. [ 526.724596][ T1164] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 526.762757][ T6310] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 526.799128][T18050] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 526.920215][T18056] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.927516][T18056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.935332][T18056] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.942606][T18056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.004781][T18056] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 527.137522][T18071] tipc: Started in network mode [ 527.153050][T18071] tipc: Node identity 4a3b607b25da, cluster identity 4711 [ 527.160559][T18071] tipc: Enabled bearer , priority 0 [ 527.200881][T18066] syzkaller0: entered promiscuous mode [ 527.209469][T18066] syzkaller0: entered allmulticast mode [ 527.224667][T18073] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 527.316545][T18066] veth0_to_batadv: mtu less than device minimum [ 527.327632][T18065] tipc: Resetting bearer [ 527.367811][T18083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3211'. [ 527.383417][T18065] tipc: Disabling bearer [ 527.416574][T18073] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 527.463204][ T5951] tipc: Node number set to 2886997039 [ 527.496880][T18073] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 527.659507][T18073] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 527.826894][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 527.941041][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 527.950339][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 527.959788][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 528.466434][T18130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3223'. [ 528.533352][T18133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3225'. [ 528.614068][T18138] veth0_to_bond: entered allmulticast mode [ 528.647150][T18138] tipc: Enabling of bearer rejected, already enabled [ 528.657906][T18138] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode [ 528.666627][T18138] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode [ 528.679352][T18138] mac80211_hwsim hwsim24 syzkaller0: Caught tx_queue_len zero misconfig [ 529.092010][T18169] veth1_to_bond: entered allmulticast mode [ 529.094351][ T30] audit: type=1800 audit(1758401557.071:5): pid=18165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3230" name="memory.events" dev="tmpfs" ino=290 res=0 errno=0 [ 529.148883][T18169] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3236'. [ 529.213488][T18169] veth1_to_bond (unregistering): left allmulticast mode [ 529.532970][T18180] netlink: 'syz.5.3238': attribute type 8 has an invalid length. [ 529.595579][T18189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3242'. [ 529.599481][T18192] netlink: 'syz.6.3243': attribute type 21 has an invalid length. [ 529.618171][T18192] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3243'. [ 529.640035][T18192] netlink: 'syz.6.3243': attribute type 5 has an invalid length. [ 529.649801][T18192] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3243'. [ 530.107652][T18218] bridge0: entered promiscuous mode [ 530.134985][T18218] bridge0: left promiscuous mode [ 530.382699][T18225] ip6gretap1: entered promiscuous mode Connection to 10.128.0.29 closed by remote host. [ 531.605764][ T8098] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.684006][ T8098] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.768634][ T8098] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.839290][ T8098] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.965984][ T8098] bridge_slave_1: left allmulticast mode [ 531.972196][ T8098] bridge_slave_1: left promiscuous mode [ 531.977950][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.989659][ T8098] bridge_slave_0: left allmulticast mode [ 531.996045][ T8098] bridge_slave_0: left promiscuous mode [ 532.002931][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.377332][ T8098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.389151][ T8098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.401973][ T8098] bond0 (unregistering): Released all slaves [ 532.652161][ T8098] hsr_slave_0: left promiscuous mode [ 532.658156][ T8098] hsr_slave_1: left promiscuous mode [ 532.665985][ T8098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.674594][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.683660][ T8098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.691074][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.723008][ T8098] veth1_macvtap: left promiscuous mode [ 532.728567][ T8098] veth0_macvtap: left promiscuous mode [ 532.734960][ T8098] veth1_vlan: left promiscuous mode [ 532.740256][ T8098] veth0_vlan: left promiscuous mode [ 533.234778][ T8098] team0 (unregistering): Port device team_slave_1 removed [ 533.279042][ T8098] team0 (unregistering): Port device team_slave_0 removed [ 534.001403][ T8098] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.080669][ T8098] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.143557][ T8098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.210050][ T8098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.337381][ T8098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.433728][ T8098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.489725][ T8098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.565065][ T8098] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.674861][ T8098] bridge_slave_1: left allmulticast mode [ 534.680565][ T8098] bridge_slave_1: left promiscuous mode [ 534.686722][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.696714][ T8098] bridge_slave_0: left allmulticast mode [ 534.703024][ T8098] bridge_slave_0: left promiscuous mode [ 534.708893][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.720592][ T8098] bridge_slave_1: left allmulticast mode [ 534.726824][ T8098] bridge_slave_1: left promiscuous mode [ 534.733419][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.744265][ T8098] bridge_slave_0: left allmulticast mode [ 534.750498][ T8098] bridge_slave_0: left promiscuous mode [ 534.757978][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.176700][ T8098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.189071][ T8098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.200262][ T8098] bond0 (unregistering): Released all slaves [ 535.627146][ T8098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.638855][ T8098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.650647][ T8098] bond0 (unregistering): Released all slaves [ 535.744040][ T8098] tipc: Left network mode [ 535.763706][ T8098] tipc: Disabling bearer [ 535.769220][ T8098] tipc: Left network mode [ 536.169196][ T8098] hsr_slave_0: left promiscuous mode [ 536.175751][ T8098] hsr_slave_1: left promiscuous mode [ 536.181881][ T8098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.189301][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.198276][ T8098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.206271][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.221070][ T8098] hsr_slave_0: left promiscuous mode [ 536.227911][ T8098] hsr_slave_1: left promiscuous mode [ 536.234661][ T8098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.242778][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.250812][ T8098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.259555][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.307593][ T8098] veth1_macvtap: left promiscuous mode [ 536.314078][ T8098] veth0_macvtap: left promiscuous mode [ 536.319705][ T8098] veth1_vlan: left promiscuous mode [ 536.325745][ T8098] veth0_vlan: left promiscuous mode [ 536.332752][ T8098] veth1_macvtap: left promiscuous mode [ 536.338361][ T8098] veth0_macvtap: left promiscuous mode [ 536.344801][ T8098] veth1_vlan: left promiscuous mode [ 536.350137][ T8098] veth0_vlan: left promiscuous mode [ 536.907772][ T8098] team0 (unregistering): Port device team_slave_1 removed [ 536.957028][ T8098] team0 (unregistering): Port device team_slave_0 removed [ 537.778243][ T8098] team0 (unregistering): Port device team_slave_1 removed [ 537.823166][ T8098] team0 (unregistering): Port device team_slave_0 removed