last executing test programs: 4.502712821s ago: executing program 3 (id=1852): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x47, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="20eb84de5760f000000076000d0b004000000100000003000000000000000800010002000000"], 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0xfffffffffffffe22, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x2d9d, 0x0, 0x0, 0x2, 0x9a56}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYRES32=r0], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket(0x1e, 0x4, 0x0) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x2}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x2, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0xfe, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 4.152409585s ago: executing program 2 (id=1854): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) unshare(0x62040200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6de9608e9ceab21f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x6de5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@ipv4_delrule={0x70, 0x21, 0x400, 0x70bd26, 0x25dfdbfc, {0x2, 0x14, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6, 0x17}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_FLOW={0x8, 0xb, 0x462}, @FRA_FLOW={0x8, 0xb, 0x9}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}, @FRA_SRC={0x8, 0x2, @broadcast}, @FRA_SRC={0x8, 0x2, @empty}, @FRA_FLOW={0x8, 0xb, 0x4000000}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FRA_SRC={0x8, 0x2, @remote}, @FRA_DST={0x8, 0x1, @local}]}, 0x70}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000016c0)=[{{&(0x7f0000000940)={0xa, 0x4e24, 0xffffffff, @private1, 0x101}, 0x1c, 0x0, 0x0, &(0x7f0000001000)=[@flowinfo={{0x14, 0x29, 0x32, 0xb}}], 0x18}}], 0x1, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000040)=0x4, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newnexthop={0x34, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xe479}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) socket$netlink(0x10, 0x3, 0x13) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0xfffffffc, 0xfffffffd, 0x7, 0x7}, 0x3c) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010100, @multicast1, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d04a0f1d0d47b2", 0x10) r9 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, r9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x3) sendmmsg$inet6(r9, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="dacd5189a3831e198991e875a5b0e2a0631aadffd82be4a44a532a5c78916a94945addab2ba680d45927b0ed8f9b9c9addff71fbc1052f219d7d30a17c4ec05172dad26489", 0x45}], 0x1}}], 0x1, 0x4000040) 4.008762631s ago: executing program 4 (id=1855): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c000000530404"], 0x8c}, 0x1, 0x0, 0x0, 0x24008010}, 0x240000f0) (fail_nth: 1) 3.501619046s ago: executing program 1 (id=1856): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000027c0)=""/4096, &(0x7f0000000100)=0x1000) 3.472558441s ago: executing program 4 (id=1857): r0 = socket(0x28, 0x5, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r1) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000002100110000000000000000000a0000000000000000000000050013000100000008000f000001"], 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYRES16=r2], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1, 0x0, 0x1}, 0x18) (async, rerun: 64) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) (rerun: 64) connect$vsock_stream(r0, 0x0, 0x0) 3.386298954s ago: executing program 1 (id=1858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000a34800000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 3.09416846s ago: executing program 1 (id=1860): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0xfffffffe}}]}}, 0x0, 0x4a}, 0x28) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000280)=0x60, 0x80800) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100000000372500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010025bd7000fedbdf2500000000", @ANYRES32, @ANYBLOB="10080400220002001c002b80080003001100000008000100", @ANYRES32, @ANYBLOB='\b\x00\b'], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x20, 0x301, 0x70bd25, 0x25dfdbf6, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000804) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) 3.069506479s ago: executing program 4 (id=1861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596", @ANYRESHEX=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.436254873s ago: executing program 3 (id=1864): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000100), &(0x7f0000000300), 0x8, 0x4a, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0x99, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.388453444s ago: executing program 4 (id=1865): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="24cf4713299967bd15bf44cad1f4d266b29e2a4135a412b2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7282cdb224050171ea757aea781d4160e9223cc0312d38d6"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5f3b5d542091777612684837dbc0ec47ea67acb692453dd2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bd58c80a1143827"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9811fc13fbf66d28b02a7f7bff7ddc34"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="204183f74d05c885801d03a2488d3fd4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="32c5877eef25cfd5a4dd14ad07749005"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b27375be03440892"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "641b0230944a0546"}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000240)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001e00)=ANY=[@ANYBLOB="14140000380002002cbd7000fc0000000000000008008800", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"], 0x1414}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d", 0xde}, {0x0}, {&(0x7f0000000380)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b", 0x48}], 0x3}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000040)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5b", 0x3a}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291ed3bf4408b57142db3ae3da83206613704b856045dab", 0xa1}], 0x2}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001180)="dc09ad32bdb1c12a58eac5aab96535f58c67fb9fe1895a8f009f613ec01a0a69b2c9a0951e8a3e0493ba11f2544a9ce70a53a57a08710fe5bfb49a171137f27920651aa9e1d2b425764fdc57f5b5ed58ff6ae812f492717424246a5fb27b686152ef0918f4c4d5ceb0e046d8540027647c31f842e857f23b9988fb03", 0x7c}, {&(0x7f0000001240)="d61f65ae509c2dfcae0d3583f8d9f25e6edc3bdda76b4d36500d091cb5701353effae563b807c50c4a6ec2f9952c274da950cd667f10", 0x36}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000001c0)="153529b08eda7117f7fba64096575aaf02b5f4a605af08949be00e4be027e61174fd50bb48cd44b0b21bca1b21cec9d11e9729fad985a73e2b8b8642128b277831d20c21107e9c5079c356d1bfa3a62b749a3962f3e57f61d796f7e00563a7", 0xffffffffffffff6e, 0x10008095, 0x0, 0x0) 2.1972865s ago: executing program 3 (id=1866): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.074346244s ago: executing program 2 (id=1868): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000027c0)=""/4096, &(0x7f0000000100)=0x1000) 1.998456447s ago: executing program 1 (id=1869): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c000000530404"], 0x8c}, 0x1, 0x0, 0x0, 0x24008010}, 0x240000f0) (fail_nth: 2) 1.91907181s ago: executing program 2 (id=1871): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x12}], 0x1) (async, rerun: 32) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x1}, 0x8) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x0, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 1.593958078s ago: executing program 3 (id=1872): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x6, &(0x7f0000000080), &(0x7f0000000140)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) socket$nl_route(0x10, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0xe) getpeername(r0, 0x0, &(0x7f0000000300)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x28000000) r9 = socket$can_j1939(0x1d, 0x2, 0x7) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000200)={0x1d, r11, 0x1, {0x1, 0xff, 0x2}, 0x6f01bcc8e6cb9140}, 0x18) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00090025bd7000fddbdf250600000008000a"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040800) 1.473365506s ago: executing program 1 (id=1873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0xa, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000280)='\x00', 0x1) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x2160) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6001}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9100}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}]}]}, @NFT_MSG_NEWTABLE={0x120, 0x0, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xe8, 0x6, "39e3258851a91813efe215f9eb3e4b82b7b0489be6198f1258fae252314ddd76d607e69e03002bfdbfee5e16c774154fdaf31620dc246647955d59e64f4416f74698cebad09bac9f13240018dcc756a973a2984410e57397da7b2b4ef7558bc3709ae350e814038295a9acdc830517c7ca071ee5fbedcf01e08c2c7615b7ce01b230b842489bcc083ef73506c369762e2cb1893f585956ed985ef434787a95c5c4c6037acee8c3eff9a8dbd2d9b062c83efa846007449ae472242519f0557e18f478f6e28dd0eb0d928a1c2dd01f6d162777228f166dd372b502ba8e277982e8a84f2728"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1b4, 0x9, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0x198, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xbe}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa7c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0xfc, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1600}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff94}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff00}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ef}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd67a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}]}, @NFTA_SET_DESC_SIZE={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x354}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000080)=0x40000) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000000)=0x31) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r6, 0x89e1, &(0x7f00000000c0)={@loopback, @dev={0xfe, 0x80, '\x00', 0xf}}) 1.424656543s ago: executing program 4 (id=1874): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x3, 0x7, 0x1000, 0xffffffffffffffff, 0xfffffffd}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, 0x0) pipe(&(0x7f0000000600)) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000035390000560000022500000019000a00100000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0xc) 1.35917483s ago: executing program 2 (id=1875): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r3) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) close(0x4) 1.001801459s ago: executing program 0 (id=1876): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x51}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 975.566582ms ago: executing program 4 (id=1877): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) tee(r1, r1, 0x1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000040)={0x1d, r4}, 0x10) recvmmsg(r3, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/57, 0x39}], 0x1}, 0x4}], 0x1, 0x22, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x48040) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x44800) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000001c0)={0x1d, r6}, 0x10) recvmmsg(r5, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000500)=""/117, 0x75}], 0x2}, 0x4}], 0x2, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "771a16b92ea6656b"}, 0x10}, 0x1, 0x0, 0x0, 0x20048010}, 0xd209f6d814827b13) unshare(0x24060400) unshare(0x2c060000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r7, 0x952de000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'pimreg\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 920.112642ms ago: executing program 0 (id=1878): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x81c00) getsockopt$inet_buf(r2, 0x0, 0x24, &(0x7f0000001180)=""/4096, &(0x7f0000000140)=0x1000) setsockopt$inet_buf(r2, 0x0, 0x4, &(0x7f0000000180)="cc89edd6e0a03747099e6def19e377e7e2563321a1804e699454ad7ca983c30048b82d5b41a17ee9ca341d9cbd5256909e8436ab76021e31b5e116a014d9dc01c7fb0123f05b891bc8c2fb63542451ea44ae9f543e1a8c77", 0x58) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xd, 0x31, 0xffffffffffffffff, 0xa08d7000) sendto$inet6(r1, &(0x7f0000000040)="800037bbcd6731ea", 0x8, 0x4008852, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="54a4bf20", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b000100627269646765000024000280050017000000000005002c000100000005002400000000000500160000000000"], 0x54}}, 0x0) 866.315507ms ago: executing program 1 (id=1879): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) accept4$nfc_llcp(r1, &(0x7f0000000000), &(0x7f0000000280)=0x60, 0x80800) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100000000372500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010025bd7000fedbdf2500000000", @ANYRES32, @ANYBLOB="10080400220002001c002b80080003001100000008000100", @ANYRES32, @ANYBLOB='\b\x00\b'], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x20, 0x301, 0x70bd25, 0x25dfdbf6, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000804) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) 797.844545ms ago: executing program 0 (id=1880): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003180)=ANY=[@ANYBLOB="030000006a002902"], 0x14}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 644.08017ms ago: executing program 3 (id=1881): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00000027c0)=""/4096, &(0x7f0000000100)=0x1000) 564.85809ms ago: executing program 0 (id=1882): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'pim6reg\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c000000530404"], 0x8c}, 0x1, 0x0, 0x0, 0x24008010}, 0x240000f0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r3, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x59}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4a1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008001}, 0x805) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x6, 0x8000000000000000}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x640100ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2000, 0x3c}, 0x2, @in6=@dev, 0x0, 0x0, 0x1, 0x0, 0x6}, {{@in=@loopback, 0xfffffffe, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x0, @in=@remote}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x0, 0x0, 0x0, 0xc}, {{@in=@remote, 0x4d2, 0x33}, 0xa, @in6=@remote, 0x3500, 0x4, 0x0, 0x3}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="c3feaa52366e544d8bac54aaa4dedc91a1a1163ddba150289e98101d8ca17246", 0x20}, {&(0x7f0000000400)="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", 0x1000}], 0x2, &(0x7f0000001400)=[{0x108, 0x117, 0x2, "c9fcb2cd89c7a1658238a9a2accc478f7f10d87f672f5ee8792d926ee880802716e6bef53c389f29781ab3c8d1a6385385292471bade3c352e0be07f796dbb5be7c0ada222d47ffde61219d48c6c609e5fca5019b167b80f4e065e27beacf82cb1f2b3b85aea9a03c50cdff1633c9e62d4c4d0d13b1f52b6fcd9b605c8babd80f96a537187404a19608428d073515a9b0b688fab5cddfa64541d1e1b0d334bc31df5ede0a58494d3b0ae6c7ccded7d9df20b44e4a427aaa139c4c166bb4847ffe5c9e3dc1fb5870ad3b287b17e2cc121f2429a7d1a9918c49171a0f8a4f2894222150a51cbc96ec7aeeee51194f89043674fc491"}, {0xf0, 0x10a, 0x8, "fc743293fd87c28b7bf962bd79c51457d7efbf3f9ce81130022bb61ed5a159b97640732b8ff80aec7adf43b7095a3eda2767eee240c558fa75764bac4a35bf23f5d349018758037a543621a1deab793af9d9a0e1e527a976ba2c917fe49869864f7a92339d71deccd8050525268ab2d84b4e00339ef57dcbfbb2aef0119832f061326b68cd24a03f7d2c34c3e4f24b5c705f9d74d254296b5adeb743d9510c0e4166713d906f1c2288dc7e07423ad70733ce998202350fffa1896da051da08e77cf13646caf66abc1c6e75af138645c5d18ff7628200525c0068"}], 0x1f8}, 0x40000) 560.841586ms ago: executing program 2 (id=1883): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000002280)=[{0x0}, {&(0x7f0000000200)="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", 0xdf2}, {&(0x7f0000001200)="cfdcc636a66c46ec8e789a55cf0ccd41fd5e61b8e6592e028fe23ac42ecb2442eda61bdcd39168c887ae30b0d09fd21ea089effae15b58f57e87a3c9d3fb620025bc6ae917b0eb69d265c6d48e9b90974bbe0a7ffc2179bdd02520ffaeb1d313c4563a0f3667483573102fdf8ca82d8006c895956f2e290d67f5057f26868fd0f9862e8202ac5c495b19f0bee5e410c9513303364ff97fac372396ef88aff9b6f9d746296471cff33e9520674ddc30973b091c0502cda26cac72b2d0aafdb2fafea576a7a5c0c726756a4feaa4ce1c63610c8db8fe98983c46641be752d5aa0c7b5f8b8e161e1ab1a487f685ee42f568ac679859ea59335789f953aab36fc5249b08469274a46ed0b167330cb38dc8afa473b3bc375e7b6c83a38a606fbbc63a63d42229f0a7147f21a2ec465b7c331c4281315263315c275e5b4ce6fa619e5425734b6350e0bf1ae988b59c7945e5648442221df7fb07b92c0b4194ef8d7e0868d16fcfccf3209471e475f9e870548aa539439621b2bd95d6fc65e373d705b4ce63b9d1635ec5df6d748368c5f21dbb5d432706a05aa5e87ea6a372b9071f102f368c0fd5339b59272e8a7b31513e7d50ccb2f57986bb3d7e6c23c8f96f009c2096bebd03b6f9a035359619938d22a2251b0d4ee7311bd1f07c00549cc24e9f29d2bc77607c70f98311de850a959fb1ae8fce5c2c7493e732ee8bae2c9dacc31455dd4023b9138f56d2c022062d1d8fc8ed92449fead75c0382f0e4f61f007307b78c5bc5b746c11fc66330b08e8811cd9d24271b6b81580359b8bcb7bae71dcdcf095be30b7edd3e8647db572efca4744500483640e09abb7b96887e13edb5404b78c9893ee79531c66010a1bccf7b66c9895629faf5b0", 0x278}, {&(0x7f0000002200)="ee75971eadc6b3fce8779313a370fa6a8df9c7a4b9c18abd0a251842613faf0786db2694baf29c89bf196d3bd1985d0003b25928f24f7fbd0e5c74bd9bfcb1667ba6c536f7600794ae799ade756dee3a1a5e597b86b41c4096c9a4f62ab594953f3fb9174a4640dc290cdf4e25ae37c20e89473f4f06c6f03a9d07cd6c", 0x7d}], 0x4}}], 0x1, 0x8124) 393.696852ms ago: executing program 3 (id=1884): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x61f0, 0x0) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x880) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2], 0x54}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05060000000000000011af00000000008510000002000000850000002a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket(0x2d, 0x2, 0x0) close(0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 328.905521ms ago: executing program 2 (id=1885): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c000000530404"], 0x8c}, 0x1, 0x0, 0x0, 0x24008010}, 0x240000f0) (fail_nth: 3) 296.30094ms ago: executing program 0 (id=1886): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x7, @loopback, 0xfffffff7}}, 0x3, 0x2, 0xfffff800, 0x5, 0xdd4}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000001c0)={r2, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={r2, 0x2, 0x30, 0xb758, 0x6}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000280)={r3, 0x8}, &(0x7f00000002c0)=0x8) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macvlan0\x00', 0x0}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000380)={r2}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={r5, 0x4c, &(0x7f0000000400)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, @in6={0xa, 0x4e21, 0x78, @private1, 0x40}, @in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f00000004c0)=0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r7, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000640)={'veth0_to_team\x00'}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r9, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crontab_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=@getroute={0x14, 0x1a, 0x400, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x40804) bind$alg(0xffffffffffffffff, &(0x7f0000000a00)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(ghash,ecb-aes-neon)\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x5d2, '\x00', r4, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={0x1, 0xffffffffffffffff}, 0x4) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d40)={0x0, 0xa, 0x18}, 0xc) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000dc0)=@generic={&(0x7f0000000d80)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x15, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000bc0)='syzkaller\x00', 0x4, 0xba, &(0x7f0000000c00)=""/186, 0x41000, 0x4, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)=[r12, r13, r14, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000fc0)=[{0x2, 0x5, 0x5, 0x4}, {0x5, 0x4, 0xf, 0xa}, {0x3, 0x2}, {0x1, 0x2, 0x10, 0xc}, {0x3, 0x4, 0xc, 0x2}, {0x4, 0x3, 0x1, 0x1}, {0x0, 0x3, 0x4, 0xb}], 0x10, 0x1}, 0x94) 0s ago: executing program 0 (id=1887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa2600, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', r1, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) unshare(0x62040200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000005000000080000004000000042", @ANYBLOB="0000000000000000000000000000000000000000422dd0a94222e825ddf6958b0ec103e292fea528ca203d5126f43632fa29aa05432b9598ad5a907bbb432c4f4af907be4c4451a8ef68cfee4bffb3d5a4b79f662d1b8819e5d3bbeae6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x46, 0x0, 0x1}, 0x28) epoll_create1(0x0) r6 = accept4(r4, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x80, 0x40800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) close(r0) kernel console output (not intermixed with test programs): an2: entered allmulticast mode [ 143.175449][ T7451] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 143.745883][ T7477] IPVS: length: 132 != 8 [ 143.785417][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 143.802960][ T7477] pimreg: entered allmulticast mode [ 143.829453][ T7477] pimreg: left allmulticast mode [ 144.011412][ T7488] tipc: Enabling of bearer rejected, failed to enable media [ 144.031014][ T7481] wg1 speed is unknown, defaulting to 1000 [ 144.580724][ T7495] wg1 speed is unknown, defaulting to 1000 [ 144.763771][ T7517] IPv6: addrconf: prefix option has invalid lifetime [ 144.942865][ T7508] wg1 speed is unknown, defaulting to 1000 [ 145.191364][ T7522] wg1 speed is unknown, defaulting to 1000 [ 145.620681][ T7533] wg1 speed is unknown, defaulting to 1000 [ 146.226764][ T7545] __nla_validate_parse: 4 callbacks suppressed [ 146.226786][ T7545] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.366'. [ 146.299373][ T7545] netlink: 40 bytes leftover after parsing attributes in process `syz.4.366'. [ 146.406855][ T7550] batadv1: entered allmulticast mode [ 146.415055][ T7550] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 146.666657][ T7563] netlink: 'syz.2.371': attribute type 4 has an invalid length. [ 146.754360][ T7563] netlink: 'syz.2.371': attribute type 4 has an invalid length. [ 146.957907][ T7570] netlink: zone id is out of range [ 146.996225][ T7572] tipc: Invalid UDP bearer configuration [ 146.996291][ T7572] tipc: Enabling of bearer rejected, failed to enable media [ 147.119654][ T7572] netlink: 68 bytes leftover after parsing attributes in process `syz.2.374'. [ 147.135986][ T7576] wg1 speed is unknown, defaulting to 1000 [ 147.669569][ T7597] netlink: 'syz.0.380': attribute type 10 has an invalid length. [ 147.737670][ T7601] netlink: 'syz.0.380': attribute type 10 has an invalid length. [ 147.744960][ T7597] team0: Port device dummy0 added [ 147.787754][ T7601] team0: Port device dummy0 removed [ 147.858126][ T7601] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 148.098166][ T7609] wg1 speed is unknown, defaulting to 1000 [ 148.148245][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 148.843514][ T7632] netlink: 'syz.4.388': attribute type 8 has an invalid length. [ 149.494784][ T7639] wg1 speed is unknown, defaulting to 1000 [ 150.545292][ T7659] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 150.552364][ T7659] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 150.558020][ T7688] netlink: 'syz.2.400': attribute type 4 has an invalid length. [ 150.573427][ T7688] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.400'. [ 150.634956][ T7659] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 150.652456][ T7659] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 150.792781][ T7659] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 150.806842][ T7687] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 150.842377][ T7659] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 150.893058][ T7659] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.921598][ T7659] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 150.975689][ T7659] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 150.982690][ T7659] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 151.097675][ T7697] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 151.108563][ T7697] syzkaller1: linktype set to 823 [ 151.237106][ T7710] netlink: 24 bytes leftover after parsing attributes in process `syz.4.406'. [ 151.458863][ T7718] pim6reg: entered allmulticast mode [ 151.541812][ T7718] pim6reg: left allmulticast mode [ 151.840396][ T7737] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 151.888501][ T7728] wg1 speed is unknown, defaulting to 1000 [ 152.202340][ T7745] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.252880][ T7745] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.559638][ T7745] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.594693][ T7745] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.663443][ T7760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.415'. [ 152.694515][ T7760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.415'. [ 152.828777][ T7745] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.876898][ T7745] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.995742][ T7780] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20002 [ 153.088644][ T7745] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.106665][ T7745] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.158969][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 153.283669][ T7786] hsr_slave_0: left promiscuous mode [ 153.310328][ T7786] hsr_slave_1: left promiscuous mode [ 153.536743][ T7801] syz_tun: entered allmulticast mode [ 153.647107][ T7801] dvmrp8: entered allmulticast mode [ 153.797753][ T7800] syz_tun: left allmulticast mode [ 153.854870][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.886451][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.967327][ T7809] wg1 speed is unknown, defaulting to 1000 [ 154.077323][ T151] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.117968][ T151] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.241181][ T151] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.268662][ T151] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.475751][ T6159] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.495125][ T6159] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.538067][ T7828] wg1 speed is unknown, defaulting to 1000 [ 155.045203][ T7850] tipc: Started in network mode [ 155.050420][ T7850] tipc: Node identity ac14142f, cluster identity 4711 [ 155.071672][ T7850] tipc: New replicast peer: 0.0.0.0 [ 155.095262][ T7850] tipc: Enabled bearer , priority 10 [ 155.114567][ T7853] tipc: New replicast peer: 172.30.1.2 [ 155.316760][ T7862] pim6reg: entered allmulticast mode [ 155.641100][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'. [ 155.700724][ T7882] SET target dimension over the limit! [ 155.725335][ T7895] netlink: 'syz.2.435': attribute type 16 has an invalid length. [ 155.816584][ T7875] wg1 speed is unknown, defaulting to 1000 [ 155.842650][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 155.971864][ T7900] macvtap1: entered promiscuous mode [ 155.977780][ T7900] bond0: entered promiscuous mode [ 155.983302][ T7900] bond_slave_0: entered promiscuous mode [ 155.992733][ T7900] bond_slave_1: entered promiscuous mode [ 155.999169][ T7900] macvtap1: entered allmulticast mode [ 156.005148][ T7900] bond0: entered allmulticast mode [ 156.010293][ T7900] bond_slave_0: entered allmulticast mode [ 156.017387][ T7900] bond_slave_1: entered allmulticast mode [ 156.026901][ T7900] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 156.150445][ T7902] bond0: left allmulticast mode [ 156.174833][ T7902] bond_slave_0: left allmulticast mode [ 156.211564][ T7902] bond_slave_1: left allmulticast mode [ 156.241391][ T7902] bond0: left promiscuous mode [ 156.265110][ T7902] bond_slave_0: left promiscuous mode [ 156.293562][ T7902] bond_slave_1: left promiscuous mode [ 156.329813][ T7917] netlink: 92 bytes leftover after parsing attributes in process `syz.0.442'. [ 156.330399][ T5924] tipc: Node number set to 2886997039 [ 156.672520][ T7928] 1: renamed from sit0 (while UP) [ 156.737316][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.447'. [ 156.839063][ T7930] wg1 speed is unknown, defaulting to 1000 [ 156.866495][ T7934] bridge_slave_1: left allmulticast mode [ 156.873509][ T7934] bridge_slave_1: left promiscuous mode [ 156.890562][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.972081][ T7934] bridge_slave_0: left allmulticast mode [ 156.999334][ T7934] bridge_slave_0: left promiscuous mode [ 157.026328][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.958130][ T7979] pimreg: entered allmulticast mode [ 158.033106][ T7998] sctp: [Deprecated]: syz.0.458 (pid 7998) Use of int in max_burst socket option. [ 158.033106][ T7998] Use struct sctp_assoc_value instead [ 158.320289][ T8007] wg1 speed is unknown, defaulting to 1000 [ 158.350213][ T8015] netlink: 'syz.2.462': attribute type 1 has an invalid length. [ 158.531284][ T8015] bond1: entered promiscuous mode [ 158.549409][ T8015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.652462][ T8025] bond1: (slave bridge1): making interface the new active one [ 158.688442][ T8025] bridge1: entered promiscuous mode [ 158.704840][ T8025] bridge1: left promiscuous mode [ 159.496687][ T8043] wg1 speed is unknown, defaulting to 1000 [ 159.704730][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 159.817994][ T8061] netlink: 20 bytes leftover after parsing attributes in process `syz.4.471'. [ 159.899680][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 159.930781][ T8067] netlink: 'syz.1.474': attribute type 5 has an invalid length. [ 160.126639][ T8072] batman_adv: batadv0: Adding interface: geneve3 [ 160.140656][ T8072] batman_adv: batadv0: The MTU of interface geneve3 is too small (1230) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.194296][ T8072] batman_adv: batadv0: Interface activated: geneve3 [ 160.399683][ T8086] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 160.542357][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 160.578659][ T8086] wg1 speed is unknown, defaulting to 1000 [ 160.794501][ T8093] hsr_slave_1 (unregistering): left promiscuous mode [ 160.940307][ T8102] wg1 speed is unknown, defaulting to 1000 [ 161.197620][ T8125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.492'. [ 161.682217][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 161.708103][ T8137] wg1 speed is unknown, defaulting to 1000 [ 161.737601][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 162.079127][ T8166] syzkaller0: entered promiscuous mode [ 162.097602][ T8166] syzkaller0: entered allmulticast mode [ 162.281195][ T8155] netlink: 104 bytes leftover after parsing attributes in process `syz.1.497'. [ 162.293044][ T8173] wg1 speed is unknown, defaulting to 1000 [ 162.583088][ T8152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.498'. [ 162.639195][ T8186] netlink: 'syz.2.505': attribute type 3 has an invalid length. [ 162.672069][ T8186] netlink: 'syz.2.505': attribute type 3 has an invalid length. [ 162.852754][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 163.076719][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'. [ 163.296421][ T8211] wg1 speed is unknown, defaulting to 1000 [ 163.413935][ T8221] team_slave_0: entered allmulticast mode [ 163.626460][ T8226] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 164.096898][ T8244] wg1 speed is unknown, defaulting to 1000 [ 164.386068][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'. [ 164.417549][ T8260] wg1 speed is unknown, defaulting to 1000 [ 164.552272][ T8268] netlink: 148 bytes leftover after parsing attributes in process `syz.0.526'. [ 164.562451][ T8268] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 164.705073][ T8268] wg1 speed is unknown, defaulting to 1000 [ 164.793446][ T8279] netlink: 388 bytes leftover after parsing attributes in process `syz.3.528'. [ 165.561539][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.535'. [ 165.822556][ T8316] syzkaller0: entered promiscuous mode [ 165.836234][ T8316] syzkaller0: entered allmulticast mode [ 166.488762][ T8352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.497122][ T8346] wg1 speed is unknown, defaulting to 1000 [ 166.639222][ T8352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.763479][ T8352] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 167.351569][ T8352] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 167.649829][ T8367] __nla_validate_parse: 4 callbacks suppressed [ 167.649850][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 168.072355][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.552'. [ 168.348270][ T8393] netlink: 'syz.4.558': attribute type 2 has an invalid length. [ 168.373021][ T8393] netlink: 132 bytes leftover after parsing attributes in process `syz.4.558'. [ 168.775605][ T8408] netlink: 'syz.2.563': attribute type 1 has an invalid length. [ 169.122551][ T8426] netlink: 'syz.4.567': attribute type 12 has an invalid length. [ 169.804545][ T8435] netlink: 'syz.2.570': attribute type 1 has an invalid length. [ 169.908335][ T8435] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.908885][ T8440] netlink: 'syz.2.570': attribute type 1 has an invalid length. [ 170.012442][ T8442] netlink: 152 bytes leftover after parsing attributes in process `syz.4.572'. [ 170.049353][ T8439] bond3: (slave veth3): Enslaving as an active interface with a down link [ 170.058654][ T8442] block nbd0: not configured, cannot reconfigure [ 170.075067][ T8438] wg1 speed is unknown, defaulting to 1000 [ 170.089049][ T8435] bond3: entered allmulticast mode [ 170.469719][ T8454] netlink: 'syz.4.575': attribute type 2 has an invalid length. [ 170.508591][ T8454] : entered promiscuous mode [ 170.523589][ T8454] netlink: 'syz.4.575': attribute type 6 has an invalid length. [ 170.638105][ T8456] netlink: 76 bytes leftover after parsing attributes in process `syz.3.577'. [ 170.879609][ T8460] wg1 speed is unknown, defaulting to 1000 [ 171.263196][ T8478] netlink: 'syz.2.582': attribute type 3 has an invalid length. [ 171.773272][ T8488] wg1 speed is unknown, defaulting to 1000 [ 171.806549][ T8488] wg1 speed is unknown, defaulting to 1000 [ 171.835635][ T8488] wg1 speed is unknown, defaulting to 1000 [ 171.836432][ T8487] wg1 speed is unknown, defaulting to 1000 [ 171.957779][ T8488] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 172.073551][ T8488] wg1 speed is unknown, defaulting to 1000 [ 172.195340][ T8488] wg1 speed is unknown, defaulting to 1000 [ 172.219400][ T8488] wg1 speed is unknown, defaulting to 1000 [ 172.250514][ T8488] wg1 speed is unknown, defaulting to 1000 [ 172.261374][ T8488] wg1 speed is unknown, defaulting to 1000 [ 172.278249][ T8488] wg1 speed is unknown, defaulting to 1000 [ 172.643623][ T8510] x_tables: duplicate underflow at hook 2 [ 172.872839][ T8516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.590'. [ 173.285258][ T8519] wg1 speed is unknown, defaulting to 1000 [ 173.328519][ T8519] wg1 speed is unknown, defaulting to 1000 [ 173.360677][ T5889] udevd[5889]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 173.437156][ T5889] udevd[5889]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 173.481495][ T8529] wg1 speed is unknown, defaulting to 1000 [ 173.498427][ T8529] wg1 speed is unknown, defaulting to 1000 [ 173.614522][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'. [ 173.634371][ T8543] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 173.725538][ T8543] ip6erspan0: entered allmulticast mode [ 173.969799][ T8554] netlink: 32 bytes leftover after parsing attributes in process `syz.1.597'. [ 174.088941][ T8553] wg1 speed is unknown, defaulting to 1000 [ 174.128530][ T8553] wg1 speed is unknown, defaulting to 1000 [ 174.293831][ T8564] wg1 speed is unknown, defaulting to 1000 [ 174.302073][ T8564] wg1 speed is unknown, defaulting to 1000 [ 174.440019][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 174.551650][ T8576] chnl_net:caif_netlink_parms(): no params data found [ 174.677504][ T8573] wg1 speed is unknown, defaulting to 1000 [ 174.746976][ T8573] wg1 speed is unknown, defaulting to 1000 [ 174.799808][ T8591] Bluetooth: MGMT ver 1.23 [ 174.815500][ T8586] tipc: Enabling of bearer rejected, failed to enable media [ 175.076419][ T8603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.394850][ T8595] wg1 speed is unknown, defaulting to 1000 [ 175.408874][ T8586] wg1 speed is unknown, defaulting to 1000 [ 175.410368][ T8595] wg1 speed is unknown, defaulting to 1000 [ 175.441191][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.612'. [ 175.554520][ T8586] wg1 speed is unknown, defaulting to 1000 [ 175.870898][ T8619] dvmrp0: entered allmulticast mode [ 175.880868][ T8621] sctp: [Deprecated]: syz.4.616 (pid 8621) Use of int in maxseg socket option. [ 175.880868][ T8621] Use struct sctp_assoc_value instead [ 176.157585][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 176.169177][ T8625] netlink: 48 bytes leftover after parsing attributes in process `syz.1.618'. [ 176.224774][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 176.233962][ T8626] netlink: 336 bytes leftover after parsing attributes in process `syz.1.618'. [ 176.251019][ T8628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.619'. [ 176.313901][ T8631] netlink: 'syz.0.620': attribute type 1 has an invalid length. [ 176.445724][ T8625] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 176.503826][ T8625] bond3 (unregistering): Released all slaves [ 176.575529][ T8626] gretap1: entered promiscuous mode [ 176.896993][ T8650] netlink: 'syz.2.627': attribute type 1 has an invalid length. [ 176.979946][ T8650] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 176.994749][ T8650] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 177.086250][ T8656] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.269055][ T8658] bond4: (slave bridge1): Enslaving as an active interface with a down link [ 177.470089][ T8657] vxlan0: left promiscuous mode [ 177.565442][ T8657] bond2: left promiscuous mode [ 177.594803][ T8657] erspan1: left promiscuous mode [ 177.633410][ T8657] gretap1: left promiscuous mode [ 177.702171][ T8689] wg1 speed is unknown, defaulting to 1000 [ 177.807539][ T8689] wg1 speed is unknown, defaulting to 1000 [ 178.203175][ T8703] wg1 speed is unknown, defaulting to 1000 [ 178.211777][ T8703] wg1 speed is unknown, defaulting to 1000 [ 178.792982][ T8730] __nla_validate_parse: 6 callbacks suppressed [ 178.793002][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'. [ 178.793939][ T8724] trusted_key: syz.1.640 sent an empty control message without MSG_MORE. [ 178.923355][ T8736] raw_sendmsg: syz.3.643 forgot to set AF_INET. Fix it! [ 179.345576][ T8752] wg1 speed is unknown, defaulting to 1000 [ 179.427413][ T8752] wg1 speed is unknown, defaulting to 1000 [ 179.472564][ T8756] wg1 speed is unknown, defaulting to 1000 [ 179.652547][ T8756] wg1 speed is unknown, defaulting to 1000 [ 180.262793][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 180.357691][ T8781] batadv_slave_1: entered promiscuous mode [ 180.408279][ T8786] batadv_slave_1 (unregistering): left promiscuous mode [ 180.428978][ T8786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.491812][ T8787] netlink: 32 bytes leftover after parsing attributes in process `syz.1.657'. [ 180.535928][ T8777] wg1 speed is unknown, defaulting to 1000 [ 180.543046][ T8777] wg1 speed is unknown, defaulting to 1000 [ 180.947806][ T8803] dvmrp0: entered allmulticast mode [ 181.116343][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 181.124351][ T8815] bond0: entered promiscuous mode [ 181.144244][ T8815] bond_slave_0: entered promiscuous mode [ 181.150215][ T8815] bond_slave_1: entered promiscuous mode [ 181.188614][ T8818] netlink: 'syz.1.664': attribute type 1 has an invalid length. [ 181.313495][ T8817] wg1 speed is unknown, defaulting to 1000 [ 181.322643][ T8817] wg1 speed is unknown, defaulting to 1000 [ 181.473295][ T8830] netlink: 88 bytes leftover after parsing attributes in process `syz.2.666'. [ 181.522993][ T8827] syzkaller0: entered promiscuous mode [ 181.535723][ T8825] netlink: 36 bytes leftover after parsing attributes in process `syz.2.666'. [ 181.546153][ T8827] syzkaller0: entered allmulticast mode [ 181.688063][ T8825] syzkaller1: entered promiscuous mode [ 181.693709][ T8825] syzkaller1: entered allmulticast mode [ 181.780153][ T8835] openvswitch: netlink: IP tunnel dst address not specified [ 181.789962][ T8835] netlink: 'syz.0.668': attribute type 11 has an invalid length. [ 181.926093][ T8837] sit0: entered promiscuous mode [ 181.967563][ T8837] netlink: 1 bytes leftover after parsing attributes in process `syz.1.670'. [ 182.189063][ T8857] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 182.259234][ T8857] sctp: [Deprecated]: syz.1.675 (pid 8857) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.259234][ T8857] Use struct sctp_sack_info instead [ 182.630876][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.676'. [ 182.803602][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 182.851135][ T8870] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 182.901481][ T8875] bond2: left promiscuous mode [ 182.907453][ T8875] macvtap1: left promiscuous mode [ 183.051626][ T8896] openvswitch: netlink: IP tunnel dst address not specified [ 183.060896][ T8896] netlink: 'syz.3.685': attribute type 11 has an invalid length. [ 183.119850][ T8900] sctp: [Deprecated]: syz.0.686 (pid 8900) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.119850][ T8900] Use struct sctp_sack_info instead [ 183.773228][ T8930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.846018][ T8930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.961960][ T8937] netlink: 'syz.2.698': attribute type 21 has an invalid length. [ 184.302475][ T8941] syzkaller0: entered promiscuous mode [ 184.324278][ T8941] syzkaller0: entered allmulticast mode [ 184.423629][ T8953] : entered promiscuous mode [ 187.728752][ T30] audit: type=1800 audit(1768930221.247:2): pid=9002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.716" name="blkio.bfq.time_recursive" dev="tmpfs" ino=724 res=0 errno=0 [ 187.799454][ T9004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.715'. [ 188.089937][ T9017] netlink: 'syz.2.720': attribute type 7 has an invalid length. [ 188.207510][ T9018] wg1 speed is unknown, defaulting to 1000 [ 188.226700][ T9018] wg1 speed is unknown, defaulting to 1000 [ 188.380944][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 188.694516][ T9049] netlink: 128 bytes leftover after parsing attributes in process `syz.4.726'. [ 188.703994][ T9049] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 188.739777][ T9038] netlink: 16 bytes leftover after parsing attributes in process `syz.4.726'. [ 188.964972][ T9065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.734'. [ 188.975993][ T9055] wg1 speed is unknown, defaulting to 1000 [ 188.977323][ T9063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.733'. [ 189.018438][ T9055] wg1 speed is unknown, defaulting to 1000 [ 189.228297][ T9077] netlink: 'syz.4.737': attribute type 10 has an invalid length. [ 189.275183][ T9077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.293659][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.739'. [ 189.301666][ T9077] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 189.408142][ T9069] wg1 speed is unknown, defaulting to 1000 [ 189.458525][ T9069] wg1 speed is unknown, defaulting to 1000 [ 189.943383][ T9100] netlink: 40 bytes leftover after parsing attributes in process `syz.0.743'. [ 190.018532][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.747'. [ 190.295807][ T9114] netlink: 'syz.2.747': attribute type 4 has an invalid length. [ 190.319467][ T9119] bridge0: entered allmulticast mode [ 190.340721][ T9119] bridge_slave_1: left allmulticast mode [ 190.354319][ T9119] bridge_slave_1: left promiscuous mode [ 190.372438][ T9119] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.407326][ T9119] bridge_slave_0: left allmulticast mode [ 190.423547][ T9119] bridge_slave_0: left promiscuous mode [ 190.432148][ T9119] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.441292][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.752'. [ 190.647792][ T9128] wg1 speed is unknown, defaulting to 1000 [ 190.671215][ T9128] wg1 speed is unknown, defaulting to 1000 [ 190.866607][ T9153] wg1 speed is unknown, defaulting to 1000 [ 190.874879][ T9153] wg1 speed is unknown, defaulting to 1000 [ 191.855605][ T9190] wg1 speed is unknown, defaulting to 1000 [ 191.894596][ T9190] wg1 speed is unknown, defaulting to 1000 [ 192.053020][ T9208] wg1 speed is unknown, defaulting to 1000 [ 192.074931][ T9208] wg1 speed is unknown, defaulting to 1000 [ 192.579161][ T9225] syzkaller0: entered promiscuous mode [ 192.590334][ T9225] syzkaller0: entered allmulticast mode [ 192.631459][ T9225] syz.2.776 uses old SIOCAX25GETINFO [ 192.816745][ T9209] delete_channel: no stack [ 193.349770][ T9260] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 193.476189][ T9268] netlink: 'syz.4.784': attribute type 21 has an invalid length. [ 193.484263][ T9268] IPv6: NLM_F_CREATE should be specified when creating new route [ 193.492623][ T9268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.500591][ T9268] IPv6: NLM_F_CREATE should be set when creating new route [ 193.508214][ T9268] IPv6: NLM_F_CREATE should be set when creating new route [ 193.515509][ T9268] IPv6: NLM_F_CREATE should be set when creating new route [ 193.950899][ T9278] wg1 speed is unknown, defaulting to 1000 [ 194.013916][ T9278] wg1 speed is unknown, defaulting to 1000 [ 194.173654][ T9288] ip6gretap2: entered promiscuous mode [ 194.185297][ T9288] ip6gretap2: entered allmulticast mode [ 194.528932][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.540292][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.656881][ T9304] wg1 speed is unknown, defaulting to 1000 [ 194.717978][ T9304] wg1 speed is unknown, defaulting to 1000 [ 194.940823][ T6020] IPVS: starting estimator thread 0... [ 194.988141][ T9313] netlink: 'syz.3.793': attribute type 10 has an invalid length. [ 195.025016][ T9313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.045064][ T9315] IPVS: using max 32 ests per chain, 76800 per kthread [ 195.079645][ T9313] team0: Port device bond0 added [ 195.153278][ T9317] bridge0: entered promiscuous mode [ 195.208290][ T9313] __nla_validate_parse: 4 callbacks suppressed [ 195.208313][ T9313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.793'. [ 195.243393][ T9320] netlink: 32 bytes leftover after parsing attributes in process `syz.1.794'. [ 195.448323][ T9320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.794'. [ 195.464455][ T9309] wg1 speed is unknown, defaulting to 1000 [ 195.502698][ T9324] netlink: 124 bytes leftover after parsing attributes in process `syz.2.795'. [ 195.551103][ T9309] wg1 speed is unknown, defaulting to 1000 [ 195.852430][ T9330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.797'. [ 195.868468][ T9330] netlink: 'syz.1.797': attribute type 1 has an invalid length. [ 195.955192][ T9334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.797'. [ 196.014871][ T9334] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 196.773387][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.800'. [ 196.914843][ T9347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.007007][ T9350] wg1 speed is unknown, defaulting to 1000 [ 197.074720][ T9350] wg1 speed is unknown, defaulting to 1000 [ 197.453141][ T9364] syzkaller0: entered promiscuous mode [ 197.459069][ T9364] syzkaller0: entered allmulticast mode [ 197.683507][ T9373] delete_channel: no stack [ 197.841476][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'. [ 198.285075][ T9398] syzkaller0: entered promiscuous mode [ 198.296006][ T9398] syzkaller0: entered allmulticast mode [ 198.306520][ T9356] lec:lec_atm_close: lec0: Shut down! [ 198.318785][ T9398] tipc: Enabled bearer , priority 0 [ 198.349808][ T9398] tipc: Resetting bearer [ 198.383320][ T9397] tipc: Resetting bearer [ 198.426504][ T9401] IPv6: Can't replace route, no match found [ 198.443250][ T9401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.816'. [ 198.461405][ T9397] tipc: Disabling bearer [ 198.927770][ T9430] netlink: 'syz.2.821': attribute type 13 has an invalid length. [ 198.959932][ T9430] netlink: 'syz.2.821': attribute type 17 has an invalid length. [ 198.988284][ T9427] wg1 speed is unknown, defaulting to 1000 [ 199.481673][ T9426] wg1 speed is unknown, defaulting to 1000 [ 199.495577][ T9427] wg1 speed is unknown, defaulting to 1000 [ 199.513416][ T9431] bond_slave_0: entered promiscuous mode [ 199.519570][ T9431] bond_slave_1: entered promiscuous mode [ 199.525395][ T9431] dummy0: entered promiscuous mode [ 199.534944][ T9431] macvlan3: entered promiscuous mode [ 199.540605][ T9431] bond0: entered promiscuous mode [ 199.553655][ T9431] macvlan3: entered allmulticast mode [ 199.560049][ T9431] bond0: entered allmulticast mode [ 199.566432][ T9431] bond_slave_0: entered allmulticast mode [ 199.573125][ T9431] bond_slave_1: entered allmulticast mode [ 199.582915][ T9431] dummy0: entered allmulticast mode [ 199.592884][ T9431] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 199.602613][ T9431] bond0: left allmulticast mode [ 199.608998][ T9431] bond_slave_0: left allmulticast mode [ 199.615484][ T9431] bond_slave_1: left allmulticast mode [ 199.621094][ T9431] dummy0: left allmulticast mode [ 199.628058][ T9431] bond0: left promiscuous mode [ 199.633904][ T9431] bond_slave_0: left promiscuous mode [ 199.639634][ T9431] bond_slave_1: left promiscuous mode [ 199.645377][ T9431] dummy0: left promiscuous mode [ 199.677308][ T9426] wg1 speed is unknown, defaulting to 1000 [ 199.687350][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.828'. [ 199.945322][ T5897] lec:lec_start_xmit: lec0:No lecd attached [ 200.064421][ T9464] netlink: 'syz.3.832': attribute type 1 has an invalid length. [ 200.119707][ T9464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.140275][ T9465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.147800][ T9465] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 200.160223][ T9465] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 200.404104][ T9467] syzkaller0: entered promiscuous mode [ 200.409952][ T9467] syzkaller0: entered allmulticast mode [ 200.427454][ T9484] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 202.131136][ T9508] wg1 speed is unknown, defaulting to 1000 [ 202.151073][ T9508] wg1 speed is unknown, defaulting to 1000 [ 202.324020][ T9519] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 202.406180][ T9526] __nla_validate_parse: 1 callbacks suppressed [ 202.406201][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.846'. [ 202.413593][ T9521] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 202.687141][ T9533] netlink: 'syz.4.847': attribute type 12 has an invalid length. [ 202.901232][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 202.934406][ T9541] netlink: 16 bytes leftover after parsing attributes in process `syz.1.848'. [ 203.015718][ T9544] netlink: 168 bytes leftover after parsing attributes in process `syz.1.848'. [ 203.068949][ T9541] netlink: 64 bytes leftover after parsing attributes in process `syz.1.848'. [ 203.118880][ T9541] block nbd0: not configured, cannot reconfigure [ 203.303559][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.854'. [ 203.356131][ T9563] batadv2: entered promiscuous mode [ 203.374718][ T9551] wg1 speed is unknown, defaulting to 1000 [ 203.402094][ T9551] wg1 speed is unknown, defaulting to 1000 [ 203.405862][ T9559] wg1 speed is unknown, defaulting to 1000 [ 203.477905][ T9563] netlink: 32 bytes leftover after parsing attributes in process `syz.2.857'. [ 203.488302][ T9559] wg1 speed is unknown, defaulting to 1000 [ 203.692944][ T9568] wg1 speed is unknown, defaulting to 1000 [ 203.840991][ T9568] wg1 speed is unknown, defaulting to 1000 [ 203.991604][ T9563] wg1 speed is unknown, defaulting to 1000 [ 204.016154][ T9563] wg1 speed is unknown, defaulting to 1000 [ 204.130287][ T9590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.388239][ T9590] netlink: 64 bytes leftover after parsing attributes in process `syz.4.863'. [ 204.627792][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 204.673355][ T9609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.866'. [ 204.755494][ T9607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.765681][ T9607] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.780565][ T9607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.096280][ T9623] netlink: 'syz.1.871': attribute type 2 has an invalid length. [ 205.182801][ T9620] wg1 speed is unknown, defaulting to 1000 [ 205.206309][ T9620] wg1 speed is unknown, defaulting to 1000 [ 205.384164][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5440 ms [ 205.393151][ C0] lec:lec_tx_timeout: lec0 [ 205.399262][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 205.418051][ T9629] IPVS: Scheduler module ip_vs_sip not found [ 205.437940][ T9639] IPVS: length: 8 != 418683829520 [ 205.449033][ T9633] netlink: 'syz.3.872': attribute type 10 has an invalid length. [ 205.860216][ T9653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.867659][ T9653] IPv6: NLM_F_CREATE should be set when creating new route [ 205.893929][ T9645] wg1 speed is unknown, defaulting to 1000 [ 205.955204][ T9664] syzkaller0: create flow: hash 2603174133 index 1 [ 206.057805][ T9646] wg1 speed is unknown, defaulting to 1000 [ 206.063942][ T9645] wg1 speed is unknown, defaulting to 1000 [ 206.132835][ T9673] syzkaller0: delete flow: hash 2603174133 index 1 [ 206.869957][ T9680] Unknown options in mask b7f2 [ 207.830133][ T9646] wg1 speed is unknown, defaulting to 1000 [ 208.000339][ T9683] wg1 speed is unknown, defaulting to 1000 [ 208.036399][ T9683] wg1 speed is unknown, defaulting to 1000 [ 208.058715][ T9695] __nla_validate_parse: 3 callbacks suppressed [ 208.058736][ T9695] netlink: 277 bytes leftover after parsing attributes in process `syz.3.890'. [ 208.553250][ T9714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.897'. [ 208.791663][ T9720] wg1 speed is unknown, defaulting to 1000 [ 208.822928][ T9720] wg1 speed is unknown, defaulting to 1000 [ 208.987839][ T9735] netlink: 'syz.2.901': attribute type 8 has an invalid length. [ 209.322721][ T9749] tipc: Enabled bearer , priority 0 [ 209.383704][ T9746] bond3: option arp_validate: invalid value (18446744073491447809) [ 209.428145][ T9760] netlink: 'syz.4.904': attribute type 13 has an invalid length. [ 209.437717][ T9746] bond3 (unregistering): Released all slaves [ 209.527089][ T9749] tipc: Disabling bearer [ 209.706931][ T9768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.908'. [ 210.043213][ T9779] netlink: 'syz.2.910': attribute type 10 has an invalid length. [ 210.055966][ T9779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.076183][ T9779] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 210.106368][ T9763] wg1 speed is unknown, defaulting to 1000 [ 210.120614][ T9763] wg1 speed is unknown, defaulting to 1000 [ 210.127847][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.910'. [ 210.139013][ T9779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.162310][ T9779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.189942][ T9779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.212725][ T9779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.293920][ T9789] nbd: must specify a size in bytes for the device [ 210.381067][ T9779] bond0: (slave batadv0): Releasing backup interface [ 210.675589][ T9800] wg1 speed is unknown, defaulting to 1000 [ 210.683492][ T9800] wg1 speed is unknown, defaulting to 1000 [ 211.041597][ T9824] netlink: 'syz.4.919': attribute type 2 has an invalid length. [ 211.088722][ T9824] netlink: 'syz.4.919': attribute type 1 has an invalid length. [ 211.101263][ T9824] netlink: 152 bytes leftover after parsing attributes in process `syz.4.919'. [ 211.144155][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 211.152417][ C0] lec:lec_tx_timeout: lec0 [ 211.157742][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 211.230199][ T9824] bond3: option resend_igmp: invalid value (2878) [ 211.237208][ T9824] bond3: option resend_igmp: allowed values 0 - 255 [ 211.265100][ T9824] bond3 (unregistering): Released all slaves [ 211.456245][ T9846] netlink: 16 bytes leftover after parsing attributes in process `syz.4.924'. [ 211.468722][ T9846] netlink: 64 bytes leftover after parsing attributes in process `syz.4.924'. [ 211.507472][ T9837] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 211.525500][ T9837] bond3: (slave lo): speed changed to 0 on port 1 [ 211.534889][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.924'. [ 211.543547][ T9837] bond3: (slave lo): Enslaving as a backup interface with an up link [ 211.555636][ T9837] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 211.571487][ T9846] netlink: 16 bytes leftover after parsing attributes in process `syz.4.924'. [ 211.594674][ T9848] netlink: 'syz.3.925': attribute type 1 has an invalid length. [ 211.602988][ T9848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.925'. [ 211.624296][ T9853] netlink: 'syz.2.926': attribute type 1 has an invalid length. [ 211.632345][ T9853] netlink: 'syz.2.926': attribute type 2 has an invalid length. [ 211.641731][ T9851] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 211.685224][ T9851] team0 (unregistering): Port device team_slave_0 removed [ 211.700344][ T9851] team0 (unregistering): Failed to send options change via netlink (err -105) [ 211.727382][ T9851] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 211.740032][ T9851] team0 (unregistering): Port device team_slave_1 removed [ 212.144851][ T9867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.182106][ T9867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.206387][ T9867] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 212.240070][ T9867] bond0 (unregistering): Released all slaves [ 212.781067][ T9905] syzkaller0: entered promiscuous mode [ 212.788274][ T9905] syzkaller0: entered allmulticast mode [ 212.906328][ T9913] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.915189][ T9913] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.151990][ T9918] sit0: entered promiscuous mode [ 213.196706][ T9918] __nla_validate_parse: 7 callbacks suppressed [ 213.196730][ T9918] netlink: 1 bytes leftover after parsing attributes in process `syz.0.943'. [ 213.247966][ T9921] wg1 speed is unknown, defaulting to 1000 [ 213.273273][ T9921] wg1 speed is unknown, defaulting to 1000 [ 213.376633][ T9936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.948'. [ 213.394028][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.949'. [ 213.419487][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.950'. [ 213.450920][ T9940] netlink: 'syz.4.950': attribute type 6 has an invalid length. [ 213.531875][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 213.565907][ T9941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.949'. [ 213.674020][ T9945] bond2 (unregistering): Released all slaves [ 214.012893][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.956'. [ 214.022735][ T9965] tipc: Enabling of bearer rejected, failed to enable media [ 214.269086][ T9979] Bluetooth: MGMT ver 1.23 [ 214.381469][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.959'. [ 214.605981][ T9988] netlink: 104 bytes leftover after parsing attributes in process `syz.3.961'. [ 214.725884][ T30] audit: type=1800 audit(1768930248.247:3): pid=9983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.960" name="memory.events" dev="tmpfs" ino=1034 res=0 errno=0 [ 215.068199][T10011] wg1 speed is unknown, defaulting to 1000 [ 215.098239][T10011] wg1 speed is unknown, defaulting to 1000 [ 215.159095][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'. [ 215.191598][T10018] netlink: 'syz.0.970': attribute type 13 has an invalid length. [ 215.263521][T10018] syzkaller0: entered promiscuous mode [ 215.269547][T10018] syzkaller0: entered allmulticast mode [ 215.557355][T10030] netlink: 'syz.4.973': attribute type 39 has an invalid length. [ 215.631466][T10032] netlink: 'syz.2.975': attribute type 1 has an invalid length. [ 215.641802][T10035] netlink: 'syz.4.973': attribute type 7 has an invalid length. [ 215.837523][T10043] pimreg: tun_chr_ioctl cmd 2147767520 [ 215.966491][T10042] delete_channel: no stack [ 216.012322][T10047] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 216.023448][T10047] pim6reg: Master is either lo or non-ether device [ 216.045118][T10047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.119036][T10051] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 216.174168][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 216.182361][ C0] lec:lec_tx_timeout: lec0 [ 216.187271][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 216.248547][T10058] vlan2: entered promiscuous mode [ 216.254089][T10058] geneve1: entered promiscuous mode [ 216.271759][T10058] vlan2: entered allmulticast mode [ 216.277313][T10058] geneve1: entered allmulticast mode [ 216.302395][T10062] syzkaller0: entered promiscuous mode [ 216.312673][T10062] syzkaller0: entered allmulticast mode [ 216.339080][T10062] TC_ACT_REPEAT abuse ? [ 216.446725][T10068] netlink: 'syz.2.989': attribute type 1 has an invalid length. [ 216.518255][T10069] wg1 speed is unknown, defaulting to 1000 [ 216.537207][T10068] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.572255][T10068] veth5: entered promiscuous mode [ 216.582013][T10068] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 216.591195][T10069] wg1 speed is unknown, defaulting to 1000 [ 217.000104][T10069] syzkaller1: entered allmulticast mode [ 217.311181][T10114] netlink: 'syz.3.1002': attribute type 3 has an invalid length. [ 217.350804][T10114] netlink: 'syz.3.1002': attribute type 1 has an invalid length. [ 217.539065][T10128] team_slave_0: entered promiscuous mode [ 217.545176][T10128] team_slave_1: entered promiscuous mode [ 217.551123][T10128] bond_slave_0: entered promiscuous mode [ 217.557090][T10128] bond_slave_1: entered promiscuous mode [ 217.603330][T10128] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 217.876252][T10145] bond2: entered promiscuous mode [ 217.882430][T10145] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 217.899875][T10145] bond2: left promiscuous mode [ 217.969516][T10148] tipc: Enabled bearer , priority 0 [ 218.054533][T10144] wg1 speed is unknown, defaulting to 1000 [ 218.056690][T10148] syzkaller0: entered promiscuous mode [ 218.089054][T10148] syzkaller0: entered allmulticast mode [ 218.120626][T10144] wg1 speed is unknown, defaulting to 1000 [ 218.160692][T10148] tipc: Resetting bearer [ 218.174728][T10147] tipc: Resetting bearer [ 218.205854][T10147] tipc: Disabling bearer [ 218.367862][T10172] __nla_validate_parse: 17 callbacks suppressed [ 218.367883][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 218.392952][T10172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1022'. [ 218.406671][T10164] bond2: option lacp_active: invalid value (8) [ 218.420706][T10164] bond2 (unregistering): Released all slaves [ 218.540360][T10176] macvtap0: entered promiscuous mode [ 218.567566][T10176] macvtap0: entered allmulticast mode [ 218.639705][T10180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1023'. [ 218.982651][T10180] bond4: entered promiscuous mode [ 218.994767][T10180] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.166444][T10183] bond5 (unregistering): Released all slaves [ 219.631069][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1030'. [ 219.651234][T10215] wg1 speed is unknown, defaulting to 1000 [ 219.787882][T10212] wg1 speed is unknown, defaulting to 1000 [ 219.795999][T10212] wg1 speed is unknown, defaulting to 1000 [ 220.075643][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'. [ 220.325443][T10239] netlink: 'syz.3.1039': attribute type 10 has an invalid length. [ 220.377892][T10240] syzkaller0: entered promiscuous mode [ 220.383963][T10240] syzkaller0: entered allmulticast mode [ 220.411484][T10239] team_slave_0: left promiscuous mode [ 220.454664][T10239] team_slave_1: left promiscuous mode [ 220.467273][T10239] bond_slave_0: left promiscuous mode [ 220.473151][T10239] bond_slave_1: left promiscuous mode [ 220.542742][T10240] tipc: Enabled bearer , priority 0 [ 220.565967][T10237] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1038'. [ 220.637427][T10237] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1038'. [ 220.667211][T10236] tipc: Resetting bearer [ 220.722923][T10236] tipc: Disabling bearer [ 221.017156][T10270] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1049'. [ 221.074571][T10269] wg1 speed is unknown, defaulting to 1000 [ 221.082610][T10269] wg1 speed is unknown, defaulting to 1000 [ 221.194168][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 221.202243][ C0] lec:lec_tx_timeout: lec0 [ 221.207113][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 221.312444][T10286] netlink: 'syz.2.1053': attribute type 11 has an invalid length. [ 221.321197][T10286] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1053'. [ 221.352097][T10289] netlink: 'syz.2.1053': attribute type 11 has an invalid length. [ 221.363153][T10289] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1053'. [ 221.555157][T10298] netlink: 'syz.3.1056': attribute type 4 has an invalid length. [ 221.813722][T10308] wg1: left promiscuous mode [ 221.829437][T10308] geneve2: left promiscuous mode [ 222.157599][T10321] netlink: 'syz.2.1063': attribute type 1 has an invalid length. [ 222.373348][T10321] 8021q: adding VLAN 0 to HW filter on device bond6 [ 222.492851][T10324] bond6: (slave ip6gretap1): making interface the new active one [ 222.516800][T10324] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 222.677948][T10326] veth7: entered promiscuous mode [ 222.692221][T10326] bond6: (slave veth7): Enslaving as an active interface with a down link [ 222.732559][T10331] erspan0: entered allmulticast mode [ 222.773716][T10331] bond6: (slave erspan0): Enslaving as an active interface with an up link [ 222.779681][T10344] netlink: 'syz.4.1066': attribute type 1 has an invalid length. [ 222.803250][T10344] netlink: 'syz.4.1066': attribute type 2 has an invalid length. [ 222.808943][T10321] bond6: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 223.116517][T10344] wg1 speed is unknown, defaulting to 1000 [ 223.155900][T10344] wg1 speed is unknown, defaulting to 1000 [ 223.314263][T10352] wg1 speed is unknown, defaulting to 1000 [ 223.322199][T10352] wg1 speed is unknown, defaulting to 1000 [ 223.498906][T10363] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 223.574804][T10363] __nla_validate_parse: 2 callbacks suppressed [ 223.574826][T10363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1072'. [ 223.669686][T10369] netlink: 'syz.2.1074': attribute type 1 has an invalid length. [ 223.699139][T10369] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1074'. [ 223.870525][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1076'. [ 223.884141][T10377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1076'. [ 224.036169][ T30] audit: type=1107 audit(1768930257.547:4): pid=10389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 224.133191][T10381] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 224.305013][ T5924] IPVS: starting estimator thread 0... [ 224.405158][T10402] IPVS: using max 25 ests per chain, 60000 per kthread [ 224.872128][T10416] wg1 speed is unknown, defaulting to 1000 [ 225.045163][T10425] syzkaller0: entered promiscuous mode [ 225.058207][T10425] syzkaller0: entered allmulticast mode [ 225.074636][T10416] wg1 speed is unknown, defaulting to 1000 [ 225.138287][T10437] tipc: Enabling of bearer rejected, failed to enable media [ 225.316079][T10437] syzkaller0: entered promiscuous mode [ 225.321952][T10437] syzkaller0: entered allmulticast mode [ 225.478905][T10439] tipc: Enabled bearer , priority 0 [ 226.214158][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 226.222754][ C0] lec:lec_tx_timeout: lec0 [ 226.847157][T10458] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1095'. [ 228.828505][T10439] tipc: Resetting bearer [ 228.853006][T10435] tipc: Resetting bearer [ 228.873578][T10435] tipc: Disabling bearer [ 229.105294][T10467] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1099'. [ 229.788612][T10497] wg1 speed is unknown, defaulting to 1000 [ 229.799126][T10497] wg1 speed is unknown, defaulting to 1000 [ 230.093764][T10503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1109'. [ 230.143885][T10503] nbd: must specify a size in bytes for the device [ 230.273159][T10511] wg1 speed is unknown, defaulting to 1000 [ 230.282490][T10511] wg1 speed is unknown, defaulting to 1000 [ 230.385924][T10512] netlink: 'syz.0.1111': attribute type 1 has an invalid length. [ 230.415263][T10512] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1111'. [ 230.501722][T10524] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1112'. [ 230.596194][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1112'. [ 230.648241][T10522] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1112'. [ 230.761920][T10533] netlink: 'syz.2.1115': attribute type 6 has an invalid length. [ 231.156068][T10545] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 231.160517][T10516] syzkaller1: entered promiscuous mode [ 231.163309][T10545] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 231.180716][T10516] syzkaller1: entered allmulticast mode [ 232.050880][T10568] syzkaller0: entered promiscuous mode [ 232.064413][T10568] syzkaller0: entered allmulticast mode [ 234.359091][T10623] erspan0: left allmulticast mode [ 234.469419][T10623] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.477901][T10623] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.910255][T10623] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 234.926601][T10623] batadv1: left allmulticast mode [ 234.951310][T10623] bond1: left promiscuous mode [ 234.966789][T10623] bond3: left allmulticast mode [ 235.014463][T10623] vlan2: left promiscuous mode [ 235.019480][T10623] geneve1: left promiscuous mode [ 235.026622][T10623] vlan2: left allmulticast mode [ 235.032914][T10623] geneve1: left allmulticast mode [ 235.046282][T10623] veth5: left promiscuous mode [ 235.094309][T10623] veth7: left promiscuous mode [ 235.177438][ T2903] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.200510][ T2903] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.238627][ T2903] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.281917][T10678] bond3: (slave lo): Releasing backup interface [ 235.303319][T10678] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 235.327008][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1150'. [ 235.366713][T10678] bridge_slave_0: left allmulticast mode [ 235.380883][T10678] bridge_slave_0: left promiscuous mode [ 235.405143][T10678] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.421040][T10678] bridge_slave_1: left allmulticast mode [ 235.448474][T10678] bridge_slave_1: left promiscuous mode [ 235.490095][T10678] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.536670][T10678] bond0: (slave bond_slave_0): Releasing backup interface [ 235.562868][T10678] bond_slave_0: left promiscuous mode [ 235.587119][T10678] bond0: (slave bond_slave_1): Releasing backup interface [ 235.603968][T10678] bond_slave_1: left promiscuous mode [ 235.629233][T10678] team0: Port device team_slave_0 removed [ 235.642334][T10678] team0: Port device team_slave_1 removed [ 235.650448][T10678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.658606][T10678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.670308][T10678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.680501][T10678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.691455][T10678] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 235.709874][ T2903] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.930099][T10701] wg1 speed is unknown, defaulting to 1000 [ 235.953825][T10701] wg1 speed is unknown, defaulting to 1000 [ 236.194671][T10718] syzkaller0: entered promiscuous mode [ 236.214984][T10718] syzkaller0: entered allmulticast mode [ 237.998495][T10714] netlink: 'syz.0.1160': attribute type 46 has an invalid length. [ 238.020032][T10717] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1160'. [ 238.046141][T10737] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.054297][T10737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.063130][T10737] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.070934][T10737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.083921][T10737] team_slave_0: entered promiscuous mode [ 238.090115][T10737] team_slave_1: entered promiscuous mode [ 238.096348][T10737] bond_slave_0: entered promiscuous mode [ 238.102707][T10737] bond_slave_1: entered promiscuous mode [ 238.113167][T10737] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.121784][T10737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.292291][T10767] netlink: 'syz.4.1169': attribute type 3 has an invalid length. [ 238.301890][T10767] netlink: 'syz.4.1169': attribute type 1 has an invalid length. [ 238.311035][T10767] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1169'. [ 238.344762][T10767] netlink: 'syz.4.1169': attribute type 1 has an invalid length. [ 238.359145][T10743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.483326][T10761] wg1 speed is unknown, defaulting to 1000 [ 238.497980][T10761] wg1 speed is unknown, defaulting to 1000 [ 239.247947][T10803] wg1 speed is unknown, defaulting to 1000 [ 239.263754][T10803] wg1 speed is unknown, defaulting to 1000 [ 239.379697][T10817] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1181'. [ 239.546661][T10819] syzkaller0: entered promiscuous mode [ 239.552517][T10819] syzkaller0: entered allmulticast mode [ 239.565179][T10824] netlink: 'syz.0.1183': attribute type 3 has an invalid length. [ 239.697008][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1185'. [ 239.855685][T10837] nbd0: detected capacity change from 0 to 127 [ 240.496550][ T5837] block nbd0: Receive control failed (result -104) [ 241.776866][T10860] wg1 speed is unknown, defaulting to 1000 [ 241.803784][T10860] wg1 speed is unknown, defaulting to 1000 [ 242.770939][T10899] syzkaller0: entered promiscuous mode [ 242.776823][T10899] syzkaller0: entered allmulticast mode [ 244.617465][T10927] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 244.621531][T10908] syzkaller1: entered promiscuous mode [ 244.651464][T10908] syzkaller1: entered allmulticast mode [ 244.677127][T10920] syzkaller1: left promiscuous mode [ 244.683069][T10920] syzkaller1: left allmulticast mode [ 244.806906][T10919] wg1 speed is unknown, defaulting to 1000 [ 244.830613][T10919] wg1 speed is unknown, defaulting to 1000 [ 244.848559][T10940] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1213'. [ 244.965834][T10947] netlink: 'syz.0.1217': attribute type 2 has an invalid length. [ 244.982072][T10947] !9: entered promiscuous mode [ 245.001035][T10944] netlink: 'syz.1.1214': attribute type 83 has an invalid length. [ 245.194491][T10945] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1215'. [ 245.262061][T10953] wg1 speed is unknown, defaulting to 1000 [ 245.299071][T10953] wg1 speed is unknown, defaulting to 1000 [ 245.420985][T10964] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1219'. [ 245.469826][T10960] wg1 speed is unknown, defaulting to 1000 [ 245.549363][T10960] wg1 speed is unknown, defaulting to 1000 [ 246.085773][T10984] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1225'. [ 246.681681][T11013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1236'. [ 246.705835][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1232'. [ 246.899675][T11021] bridge4: port 1(veth9) entered blocking state [ 246.944053][T11021] bridge4: port 1(veth9) entered disabled state [ 246.992551][T11021] veth9: entered allmulticast mode [ 247.024554][T11021] veth9: entered promiscuous mode [ 247.056205][T11006] bridge4: port 2(veth0_to_bond) entered blocking state [ 247.089350][T11006] bridge4: port 2(veth0_to_bond) entered disabled state [ 247.096776][T11006] veth0_to_bond: entered allmulticast mode [ 247.105669][T11006] veth0_to_bond: entered promiscuous mode [ 247.129201][T11030] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1238'. [ 247.139954][T11015] wg1 speed is unknown, defaulting to 1000 [ 247.163033][T11015] wg1 speed is unknown, defaulting to 1000 [ 247.202333][T11037] wg1 speed is unknown, defaulting to 1000 [ 247.236584][T11037] wg1 speed is unknown, defaulting to 1000 [ 247.236600][T11038] wg1 speed is unknown, defaulting to 1000 [ 247.278016][T11038] wg1 speed is unknown, defaulting to 1000 [ 247.520865][T11044] wg1 speed is unknown, defaulting to 1000 [ 247.558859][T11058] nbd: must specify an index to disconnect [ 247.580308][T11044] wg1 speed is unknown, defaulting to 1000 [ 247.581565][T11060] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1242'. [ 247.834716][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1243'. [ 247.836197][T11061] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1242'. [ 248.192569][T11085] xt_connbytes: Forcing CT accounting to be enabled [ 248.640408][T11096] netlink: 'syz.2.1248': attribute type 10 has an invalid length. [ 248.671054][T11096] team0: Failed to send options change via netlink (err -105) [ 248.680394][T11096] team0: Port device dummy0 added [ 248.688787][T11096] netlink: 'syz.2.1248': attribute type 10 has an invalid length. [ 248.721812][T11081] wg1 speed is unknown, defaulting to 1000 [ 248.723414][T11096] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 248.761894][T11096] team0: Failed to send options change via netlink (err -105) [ 248.771177][T11096] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 248.791244][T11096] team0: Port device dummy0 removed [ 248.805488][T11096] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 248.817387][T11081] wg1 speed is unknown, defaulting to 1000 [ 249.815133][T11134] syz_tun: entered promiscuous mode [ 249.827013][T11134] erspan0: entered promiscuous mode [ 249.841927][T11134] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 249.858836][T11134] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 250.145681][T11154] __nla_validate_parse: 10 callbacks suppressed [ 250.145702][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1266'. [ 250.267268][T11157] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1268'. [ 250.314041][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1268'. [ 250.344009][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1269'. [ 250.371611][T11166] wg1 speed is unknown, defaulting to 1000 [ 250.389419][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 250.443235][T11166] wg1 speed is unknown, defaulting to 1000 [ 250.680601][T11181] syzkaller0: entered promiscuous mode [ 250.690203][T11181] syzkaller0: entered allmulticast mode [ 250.880147][T11192] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1278'. [ 250.893510][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1281'. [ 251.124581][T11212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1282'. [ 251.270959][T11219] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1285'. [ 251.317681][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'. [ 251.352760][T11222] netlink: 'syz.4.1284': attribute type 16 has an invalid length. [ 251.361509][T11222] netlink: 'syz.4.1284': attribute type 17 has an invalid length. [ 251.404922][T11224] IPv6: NLM_F_REPLACE set, but no existing node found! [ 252.093449][T11238] wg1 speed is unknown, defaulting to 1000 [ 252.167550][T11238] wg1 speed is unknown, defaulting to 1000 [ 252.330593][T11250] erspan0: entered promiscuous mode [ 252.517397][T11255] sit0: left promiscuous mode [ 252.959263][T11255] team_slave_0: left allmulticast mode [ 253.033259][T11255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.416592][T11255] macvlan2: left promiscuous mode [ 253.421709][T11255] macvlan2: left allmulticast mode [ 253.657998][ T36] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.704312][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.728470][ T36] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.781799][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.830766][ T36] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.864344][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.894021][ T36] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.924456][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.389176][T11293] netlink: 'syz.0.1306': attribute type 16 has an invalid length. [ 254.618275][T11298] wg1 speed is unknown, defaulting to 1000 [ 254.646354][T11298] wg1 speed is unknown, defaulting to 1000 [ 255.018955][T11317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.188730][T11322] __nla_validate_parse: 9 callbacks suppressed [ 255.188752][T11322] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1315'. [ 255.806836][T11339] xt_ecn: cannot match TCP bits for non-tcp packets [ 255.880735][T11342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1323'. [ 255.952670][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.959346][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.968405][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 256.119620][T11353] netlink: 'syz.0.1326': attribute type 27 has an invalid length. [ 256.330243][T11358] wg1 speed is unknown, defaulting to 1000 [ 256.392363][T11358] wg1 speed is unknown, defaulting to 1000 [ 256.756288][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1336'. [ 256.953785][T11394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1338'. [ 257.229988][T11401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1340'. [ 257.240932][T11408] tipc: Enabling of bearer rejected, failed to enable media [ 257.312029][T11411] wg1 speed is unknown, defaulting to 1000 [ 257.339868][T11411] wg1 speed is unknown, defaulting to 1000 [ 257.738751][T11429] wg1 speed is unknown, defaulting to 1000 [ 257.760241][T11429] wg1 speed is unknown, defaulting to 1000 [ 257.994321][T11425] wg1 speed is unknown, defaulting to 1000 [ 258.002456][T11425] wg1 speed is unknown, defaulting to 1000 [ 258.016156][T11439] wg1 speed is unknown, defaulting to 1000 [ 258.017645][T11448] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1351'. [ 258.108635][T11448] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1351'. [ 258.217239][T11439] wg1 speed is unknown, defaulting to 1000 [ 258.552610][T11459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1352'. [ 258.813404][T11465] dvmrp1: entered allmulticast mode [ 258.932485][T11470] dvmrp1: left allmulticast mode [ 258.948147][T11470] dvmrp8: left allmulticast mode [ 259.005473][T11430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1345'. [ 259.072433][T11473] wg1 speed is unknown, defaulting to 1000 [ 259.082202][T11473] wg1 speed is unknown, defaulting to 1000 [ 259.177265][T11483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1358'. [ 259.386842][T11487] vlan2: entered promiscuous mode [ 259.392384][T11487] geneve1: entered promiscuous mode [ 259.432296][T11487] vlan2: entered allmulticast mode [ 259.438117][T11487] geneve1: entered allmulticast mode [ 259.485427][T11494] FAULT_INJECTION: forcing a failure. [ 259.485427][T11494] name failslab, interval 1, probability 0, space 0, times 0 [ 259.509984][T11494] CPU: 1 UID: 0 PID: 11494 Comm: syz.0.1361 Not tainted syzkaller #0 PREEMPT(full) [ 259.510011][T11494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.510022][T11494] Call Trace: [ 259.510029][T11494] [ 259.510037][T11494] dump_stack_lvl+0xe8/0x150 [ 259.510068][T11494] should_fail_ex+0x412/0x560 [ 259.510103][T11494] should_failslab+0xa8/0x100 [ 259.510128][T11494] __kmalloc_noprof+0xde/0x7e0 [ 259.510147][T11494] ? nft_obj_init+0x53/0x360 [ 259.510173][T11494] nft_obj_init+0x53/0x360 [ 259.510195][T11494] nf_tables_newobj+0xb28/0x1ca0 [ 259.510246][T11494] ? __pfx_nf_tables_newobj+0x10/0x10 [ 259.510278][T11494] ? __nla_parse+0x40/0x60 [ 259.510305][T11494] nfnetlink_rcv+0x1240/0x27b0 [ 259.510328][T11494] ? is_bpf_text_address+0x292/0x2b0 [ 259.510389][T11494] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 259.510463][T11494] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.510492][T11494] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.510537][T11494] netlink_unicast+0x80f/0x9b0 [ 259.510569][T11494] ? __pfx_netlink_unicast+0x10/0x10 [ 259.510595][T11494] ? netlink_sendmsg+0x650/0xb40 [ 259.510619][T11494] ? skb_put+0x11b/0x210 [ 259.510647][T11494] netlink_sendmsg+0x813/0xb40 [ 259.510683][T11494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.510713][T11494] ? aa_file_perm+0x12d/0x1630 [ 259.510738][T11494] ? aa_sock_msg_perm+0xf1/0x1b0 [ 259.510764][T11494] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.510780][T11494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.510807][T11494] __sock_sendmsg+0x21c/0x270 [ 259.510829][T11494] ____sys_sendmsg+0x4d7/0x810 [ 259.510854][T11494] ? __might_fault+0xaf/0x130 [ 259.510887][T11494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.510920][T11494] ? import_iovec+0x73/0xa0 [ 259.510946][T11494] ___sys_sendmsg+0x2a5/0x360 [ 259.510968][T11494] ? __lock_acquire+0x6b5/0x2cf0 [ 259.510991][T11494] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.511055][T11494] ? __fget_files+0x2a/0x420 [ 259.511075][T11494] ? __fget_files+0x3a0/0x420 [ 259.511109][T11494] __x64_sys_sendmsg+0x1bd/0x2a0 [ 259.511136][T11494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.511171][T11494] ? __pfx_ksys_write+0x10/0x10 [ 259.511201][T11494] do_syscall_64+0xe2/0xf80 [ 259.511234][T11494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.511251][T11494] ? trace_irq_disable+0x37/0x100 [ 259.511271][T11494] ? clear_bhb_loop+0x60/0xb0 [ 259.511292][T11494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.511309][T11494] RIP: 0033:0x7fc30899acb9 [ 259.511328][T11494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.511342][T11494] RSP: 002b:00007fc309890028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.511361][T11494] RAX: ffffffffffffffda RBX: 00007fc308c15fa0 RCX: 00007fc30899acb9 [ 259.511373][T11494] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 259.511383][T11494] RBP: 00007fc309890090 R08: 0000000000000000 R09: 0000000000000000 [ 259.511393][T11494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.511404][T11494] R13: 00007fc308c16038 R14: 00007fc308c15fa0 R15: 00007fffc5a6c218 [ 259.511436][T11494] [ 259.961258][T11499] wg1 speed is unknown, defaulting to 1000 [ 259.986496][T11499] wg1 speed is unknown, defaulting to 1000 [ 260.226385][T11507] wg1 speed is unknown, defaulting to 1000 [ 260.302802][T11507] wg1 speed is unknown, defaulting to 1000 [ 260.454371][T11519] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1368'. [ 260.557423][T11523] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1368'. [ 260.945908][T11537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1373'. [ 261.037680][T11546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1375'. [ 261.143229][T11537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.150419][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5170 ms [ 261.150493][ C0] lec:lec_tx_timeout: lec0 [ 261.178388][T11534] wg1 speed is unknown, defaulting to 1000 [ 261.253703][T11531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.265571][T11531] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address [ 261.281082][T11531] bond0: (slave vxcan5): Error -95 calling set_mac_address [ 261.344277][T11534] wg1 speed is unknown, defaulting to 1000 [ 261.434871][T11559] wg1 speed is unknown, defaulting to 1000 [ 261.475050][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1379'. [ 261.517814][T11559] wg1 speed is unknown, defaulting to 1000 [ 261.708735][ T30] audit: type=1107 audit(1768930295.227:5): pid=11573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ԛo3zI,֩SVbc?fӸ2`/ȡ͂Ŭ䮭g=+Sm ,ѼpL@TX2 [ 261.708735][ T30] $N [ 261.708735][ T30] gnR tKuخIA:' [ 261.773853][T11576] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1385'. [ 261.791511][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1385'. [ 261.949467][T11584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1387'. [ 262.023136][T11584] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.105391][T11591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1389'. [ 262.148985][T11591] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1389'. [ 262.183398][T11591] macsec1: entered promiscuous mode [ 262.195669][T11591] macvlan0: entered promiscuous mode [ 262.233212][T11591] macvlan0: left promiscuous mode [ 262.969465][T11606] wg1 speed is unknown, defaulting to 1000 [ 263.045770][T11606] wg1 speed is unknown, defaulting to 1000 [ 263.076116][T11607] wg1 speed is unknown, defaulting to 1000 [ 263.083923][T11607] wg1 speed is unknown, defaulting to 1000 [ 263.197533][T11619] wg1 speed is unknown, defaulting to 1000 [ 263.232246][T11619] wg1 speed is unknown, defaulting to 1000 [ 263.673804][T11657] xt_nfacct: accounting object `syz0' does not exist [ 263.774741][T11647] lo: Caught tx_queue_len zero misconfig [ 263.976487][T11654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.325208][T11679] netlink: 'syz.0.1414': attribute type 29 has an invalid length. [ 264.356818][T11681] sch_tbf: burst 4398 is lower than device lo mtu (32783) ! [ 264.517317][T11684] netlink: 'syz.0.1414': attribute type 29 has an invalid length. [ 264.738423][T11701] geneve4: entered promiscuous mode [ 264.798055][T11701] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 264.863035][T11701] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 265.033160][T11701] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 265.054955][T11701] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 265.199907][T11701] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 265.232892][T11701] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 265.349232][T11701] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 265.382357][T11701] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 265.597848][ T9137] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 265.617655][ T9137] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 265.668655][ T9137] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 265.700185][ T9137] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 265.762810][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 265.812473][ T36] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 265.933790][ T3437] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 265.952047][ T3437] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 265.965378][T11754] __nla_validate_parse: 10 callbacks suppressed [ 265.965403][T11754] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1430'. [ 265.989601][T11749] wg1 speed is unknown, defaulting to 1000 [ 266.031866][T11749] wg1 speed is unknown, defaulting to 1000 [ 266.492283][T11780] netlink: 'syz.4.1437': attribute type 2 has an invalid length. [ 266.549691][T11780] netlink: 'syz.4.1437': attribute type 1 has an invalid length. [ 267.033144][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1443'. [ 267.206495][T11813] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1444'. [ 267.490519][T11826] wg1 speed is unknown, defaulting to 1000 [ 267.543770][T11826] wg1 speed is unknown, defaulting to 1000 [ 267.812652][T11839] 8021q: VLANs not supported on xfrm0 [ 267.848469][T11840] netlink: 'syz.4.1450': attribute type 13 has an invalid length. [ 268.483037][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1459'. [ 268.507049][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1458'. [ 268.577765][T11868] wg1 speed is unknown, defaulting to 1000 [ 268.598835][T11868] wg1 speed is unknown, defaulting to 1000 [ 269.002918][ T30] audit: type=1107 audit(1768930302.517:6): pid=11889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ԛo3zI,֩SVbc?fӸ2`/ȡ͂Ŭ䮭g=+Sm ,ѼpL@TX2 [ 269.002918][ T30] $N [ 269.002918][ T30] gnR tKuخIA:' [ 269.058756][T11893] netlink: 'syz.1.1465': attribute type 33 has an invalid length. [ 269.079720][T11893] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1465'. [ 269.093902][T11893] `: renamed from team0 [ 269.134279][T11896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1464'. [ 269.246300][T11898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1467'. [ 269.717523][T11920] tipc: Enabling of bearer rejected, failed to enable media [ 269.836284][T11916] syzkaller1: entered promiscuous mode [ 269.856064][T11916] syzkaller1: entered allmulticast mode [ 269.928459][T11923] wg1 speed is unknown, defaulting to 1000 [ 269.998872][T11923] wg1 speed is unknown, defaulting to 1000 [ 270.026055][ T11] block nbd0: Possible stuck request ffff888025768000: control (read@0,1024B). Runtime 30 seconds [ 270.039476][ T11] block nbd0: Possible stuck request ffff888025768200: control (read@1024,1024B). Runtime 30 seconds [ 270.050986][ T11] block nbd0: Possible stuck request ffff888025768400: control (read@2048,1024B). Runtime 30 seconds [ 270.064593][ T11] block nbd0: Possible stuck request ffff888025768600: control (read@3072,1024B). Runtime 30 seconds [ 270.673584][T11956] netlink: 'syz.0.1482': attribute type 1 has an invalid length. [ 270.878632][T11965] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1484'. [ 270.882623][T11957] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 270.974674][T11957] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 271.048445][T11942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1481'. [ 271.172997][T11956] bond3: (slave gretap1): making interface the new active one [ 271.207685][T11956] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 271.254320][T11964] macvlan3: entered promiscuous mode [ 271.286314][T11964] macvlan3: entered allmulticast mode [ 271.432282][T11972] wg1 speed is unknown, defaulting to 1000 [ 271.477506][T11972] wg1 speed is unknown, defaulting to 1000 [ 272.114406][T12015] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1498'. [ 272.124310][T12015] FAULT_INJECTION: forcing a failure. [ 272.124310][T12015] name failslab, interval 1, probability 0, space 0, times 0 [ 272.137302][T12015] CPU: 0 UID: 0 PID: 12015 Comm: syz.3.1498 Not tainted syzkaller #0 PREEMPT(full) [ 272.137330][T12015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 272.137342][T12015] Call Trace: [ 272.137349][T12015] [ 272.137358][T12015] dump_stack_lvl+0xe8/0x150 [ 272.137387][T12015] should_fail_ex+0x412/0x560 [ 272.137425][T12015] should_failslab+0xa8/0x100 [ 272.137451][T12015] __kmalloc_noprof+0xde/0x7e0 [ 272.137471][T12015] ? nsim_fib_event_nb+0x295/0x1080 [ 272.137497][T12015] nsim_fib_event_nb+0x295/0x1080 [ 272.137529][T12015] notifier_call_chain+0x19d/0x3a0 [ 272.137557][T12015] ? atomic_notifier_call_chain+0x26/0x180 [ 272.137583][T12015] atomic_notifier_call_chain+0xda/0x180 [ 272.137609][T12015] call_fib_notifiers+0x31/0x60 [ 272.137637][T12015] fib6_del+0xf7e/0x15a0 [ 272.137668][T12015] ? fib6_del+0x10f1/0x15a0 [ 272.137713][T12015] ? __pfx_fib6_del+0x10/0x10 [ 272.137740][T12015] ? do_raw_spin_lock+0x12b/0x2f0 [ 272.137778][T12015] ? __ip6_del_rt_siblings+0xa2/0x7d0 [ 272.137804][T12015] __ip6_del_rt_siblings+0x4c1/0x7d0 [ 272.137835][T12015] ip6_route_del+0x131c/0x13d0 [ 272.137866][T12015] ? ip6_route_del+0xe8/0x13d0 [ 272.137913][T12015] ? __pfx_ip6_route_del+0x10/0x10 [ 272.137948][T12015] ? inet6_rtm_delroute+0x3e7/0x6d0 [ 272.137978][T12015] inet6_rtm_delroute+0x4f7/0x6d0 [ 272.138006][T12015] ? __pfx_inet6_rtm_delroute+0x10/0x10 [ 272.138057][T12015] ? __local_bh_enable_ip+0xd0/0x130 [ 272.138078][T12015] ? lockdep_hardirqs_on+0x7a/0x110 [ 272.138144][T12015] ? __pfx_inet6_rtm_delroute+0x10/0x10 [ 272.138168][T12015] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 272.138197][T12015] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 272.138220][T12015] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 272.138240][T12015] ? ref_tracker_free+0x693/0x840 [ 272.138258][T12015] ? __copy_skb_header+0xa3/0x4a0 [ 272.138287][T12015] ? __pfx_ref_tracker_free+0x10/0x10 [ 272.138319][T12015] netlink_rcv_skb+0x232/0x4b0 [ 272.138350][T12015] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 272.138376][T12015] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 272.138416][T12015] ? netlink_deliver_tap+0x2e/0x1b0 [ 272.138454][T12015] netlink_unicast+0x80f/0x9b0 [ 272.138491][T12015] ? __pfx_netlink_unicast+0x10/0x10 [ 272.138520][T12015] ? netlink_sendmsg+0x650/0xb40 [ 272.138545][T12015] ? skb_put+0x11b/0x210 [ 272.138573][T12015] netlink_sendmsg+0x813/0xb40 [ 272.138612][T12015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.138645][T12015] ? aa_sock_msg_perm+0xf1/0x1b0 [ 272.138673][T12015] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 272.138691][T12015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.138720][T12015] __sock_sendmsg+0x21c/0x270 [ 272.138744][T12015] ____sys_sendmsg+0x4d7/0x810 [ 272.138769][T12015] ? __might_fault+0xaf/0x130 [ 272.138804][T12015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.138841][T12015] ? import_iovec+0x73/0xa0 [ 272.138870][T12015] ___sys_sendmsg+0x2a5/0x360 [ 272.138894][T12015] ? __lock_acquire+0x6b5/0x2cf0 [ 272.138918][T12015] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.138987][T12015] ? __fget_files+0x2a/0x420 [ 272.139010][T12015] ? __fget_files+0x3a0/0x420 [ 272.139042][T12015] __x64_sys_sendmsg+0x1bd/0x2a0 [ 272.139070][T12015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 272.139102][T12015] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 272.139141][T12015] do_syscall_64+0xe2/0xf80 [ 272.139166][T12015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.139183][T12015] ? clear_bhb_loop+0x60/0xb0 [ 272.139207][T12015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.139226][T12015] RIP: 0033:0x7fd96879acb9 [ 272.139245][T12015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.139260][T12015] RSP: 002b:00007fd9696ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.139280][T12015] RAX: ffffffffffffffda RBX: 00007fd968a15fa0 RCX: 00007fd96879acb9 [ 272.139294][T12015] RDX: 00000000000000c0 RSI: 00002000000000c0 RDI: 0000000000000003 [ 272.139305][T12015] RBP: 00007fd9696ff090 R08: 0000000000000000 R09: 0000000000000000 [ 272.139315][T12015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.139327][T12015] R13: 00007fd968a16038 R14: 00007fd968a15fa0 R15: 00007ffeadc33958 [ 272.139363][T12015] [ 272.685037][T12022] netlink: 'syz.0.1496': attribute type 12 has an invalid length. [ 272.736322][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1500'. [ 272.968038][T12024] wg1 speed is unknown, defaulting to 1000 [ 272.991931][T12025] wg1 speed is unknown, defaulting to 1000 [ 272.999487][T12024] wg1 speed is unknown, defaulting to 1000 [ 273.036715][T12025] wg1 speed is unknown, defaulting to 1000 [ 273.101346][T12035] xt_limit: Overflow, try lower: 271964/0 [ 273.112050][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1502'. [ 273.123682][T12031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.238899][T12031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.248298][T12041] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1503'. [ 273.309088][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1502'. [ 273.421041][T12054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1503'. [ 273.604029][T12063] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20000 [ 273.656626][T12065] atomic_op ffff88807966c998 conn xmit_atomic 0000000000000000 [ 273.716098][T12065] netlink: 'syz.3.1511': attribute type 4 has an invalid length. [ 273.862135][T12075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1514'. [ 274.142553][T12083] wg1 speed is unknown, defaulting to 1000 [ 274.150849][T12083] wg1 speed is unknown, defaulting to 1000 [ 274.799969][T12109] wg1 speed is unknown, defaulting to 1000 [ 274.821636][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1522'. [ 274.845241][T12109] wg1 speed is unknown, defaulting to 1000 [ 275.034658][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1523'. [ 275.201132][T12131] ip6tnl0: Caught tx_queue_len zero misconfig [ 275.228042][T12129] wg1 speed is unknown, defaulting to 1000 [ 275.265267][T12129] wg1 speed is unknown, defaulting to 1000 [ 275.440535][T12137] wg1 speed is unknown, defaulting to 1000 [ 275.493242][T12137] wg1 speed is unknown, defaulting to 1000 [ 275.814063][T12153] bond4: option packets_per_slave: invalid value (1048582) [ 275.826452][T12153] bond4: option packets_per_slave: allowed values 0 - 65535 [ 275.841039][T12153] bond4 (unregistering): Released all slaves [ 276.239353][T12164] wg1 speed is unknown, defaulting to 1000 [ 276.254462][T12164] wg1 speed is unknown, defaulting to 1000 [ 276.534565][T12185] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1537'. [ 276.546692][T12178] wg1 speed is unknown, defaulting to 1000 [ 276.643412][T12178] wg1 speed is unknown, defaulting to 1000 [ 276.670787][T12179] wg1 speed is unknown, defaulting to 1000 [ 276.810948][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1540'. [ 276.847054][T12179] wg1 speed is unknown, defaulting to 1000 [ 277.212917][T12209] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 277.215361][T12210] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1544'. [ 277.298758][T12213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1545'. [ 278.005993][T12241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1553'. [ 278.072442][T12248] netlink: 'syz.2.1554': attribute type 1 has an invalid length. [ 278.321817][T12253] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 278.336400][T12253] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 278.443111][T12248] bond7: (slave gretap1): making interface the new active one [ 278.485326][T12248] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 278.632274][T12264] macvlan4: entered promiscuous mode [ 278.644270][T12264] macvlan4: entered allmulticast mode [ 278.677483][T12263] wg1 speed is unknown, defaulting to 1000 [ 278.696979][T12263] wg1 speed is unknown, defaulting to 1000 [ 279.353153][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1566'. [ 279.493256][T12301] pimreg3: entered allmulticast mode [ 279.629547][ T30] audit: type=1107 audit(1768930313.147:7): pid=12312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ԛo3zI,֩SVbc?fӸ2`/ȡ͂Ŭ䮭g=+Sm ,ѼpL@TX2 [ 279.629547][ T30] $N [ 279.629547][ T30] gnR tKuخIA:' [ 280.186053][T12331] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1576'. [ 280.200491][T12325] wg1 speed is unknown, defaulting to 1000 [ 280.220434][T12328] IPv6: sit3: Disabled Multicast RS [ 280.229981][T12328] sit3: entered promiscuous mode [ 280.238349][T12328] sit3: entered allmulticast mode [ 280.247013][T12325] wg1 speed is unknown, defaulting to 1000 [ 280.432071][T12341] xt_TCPMSS: Only works on TCP SYN packets [ 280.507569][T12341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.518087][T12341] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 281.297723][T12356] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1582'. [ 281.314649][T12358] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1585'. [ 281.386167][T12365] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1586'. [ 281.410289][T12365] netlink: 'syz.0.1586': attribute type 9 has an invalid length. [ 281.424021][T12365] netlink: 'syz.0.1586': attribute type 10 has an invalid length. [ 281.733637][T12378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1589'. [ 281.766806][T12378] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1589'. [ 281.788548][T12378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1589'. [ 281.827973][T12378] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1589'. [ 282.018434][T12388] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1593'. [ 282.060505][T12386] wg1 speed is unknown, defaulting to 1000 [ 282.069870][T12386] wg1 speed is unknown, defaulting to 1000 [ 282.077975][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1593'. [ 282.125763][T12400] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1593'. [ 282.558235][T12412] wg1 speed is unknown, defaulting to 1000 [ 282.572126][T12412] wg1 speed is unknown, defaulting to 1000 [ 283.028752][T12435] syzkaller0: entered promiscuous mode [ 283.054039][T12435] syzkaller0: entered allmulticast mode [ 283.063567][T12447] tunl0: Caught tx_queue_len zero misconfig [ 283.103528][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1607'. [ 283.126718][T12435] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1604'. [ 283.148870][T12450] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1607'. [ 283.490382][T12470] netlink: 'syz.0.1611': attribute type 33 has an invalid length. [ 285.107070][T12470] `: renamed from team0 [ 285.328752][T12483] wg1 speed is unknown, defaulting to 1000 [ 285.346910][T12483] wg1 speed is unknown, defaulting to 1000 [ 285.875675][T12503] chnl_net:caif_netlink_parms(): no params data found [ 286.051139][T12507] wg1 speed is unknown, defaulting to 1000 [ 286.069626][T12507] wg1 speed is unknown, defaulting to 1000 [ 286.971844][T12539] __nla_validate_parse: 8 callbacks suppressed [ 286.971864][T12539] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1629'. [ 287.101547][T12542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1630'. [ 287.208595][T12542] ipvlan2: entered promiscuous mode [ 287.215414][T12542] bridge0: port 3(ipvlan2) entered blocking state [ 287.222988][T12542] bridge0: port 3(ipvlan2) entered disabled state [ 287.233989][T12542] ipvlan2: entered allmulticast mode [ 287.255959][T12542] bridge0: entered allmulticast mode [ 287.277508][T12542] ipvlan2: left allmulticast mode [ 287.313552][T12542] bridge0: left allmulticast mode [ 287.473602][T12548] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1633'. [ 287.622940][T12554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1636'. [ 287.644508][T12550] wg1 speed is unknown, defaulting to 1000 [ 287.657921][T12550] wg1 speed is unknown, defaulting to 1000 [ 287.670070][T12554] block nbd2: not configured, cannot reconfigure [ 287.679438][T12557] wg1 speed is unknown, defaulting to 1000 [ 287.687453][T12558] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 287.779742][T12557] wg1 speed is unknown, defaulting to 1000 [ 287.939064][T12579] sctp: [Deprecated]: syz.2.1642 (pid 12579) Use of int in maxseg socket option. [ 287.939064][T12579] Use struct sctp_assoc_value instead [ 288.079333][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1644'. [ 288.143712][T12591] bridge_slave_1: left allmulticast mode [ 288.150382][T12591] bridge_slave_1: left promiscuous mode [ 288.162382][T12591] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.173703][T12597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 288.174966][T12591] bridge_slave_0: left allmulticast mode [ 288.181106][T12597] IPv6: NLM_F_CREATE should be set when creating new route [ 288.192440][T12591] bridge_slave_0: left promiscuous mode [ 288.194013][T12597] IPv6: NLM_F_CREATE should be set when creating new route [ 288.200132][T12591] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.340632][T12603] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1648'. [ 288.501245][T12586] wg1 speed is unknown, defaulting to 1000 [ 288.510029][T12586] wg1 speed is unknown, defaulting to 1000 [ 288.639838][T12615] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 288.649259][T12610] syzkaller0: entered promiscuous mode [ 288.655105][T12610] syzkaller0: entered allmulticast mode [ 288.770207][T12617] netlink: 'syz.3.1651': attribute type 1 has an invalid length. [ 288.841721][T12622] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1653'. [ 288.887641][T12625] openvswitch: netlink: Flow key attr not present in new flow. [ 289.315160][T12639] wg1 speed is unknown, defaulting to 1000 [ 289.323260][T12639] wg1 speed is unknown, defaulting to 1000 [ 289.499386][T12645] wg1 speed is unknown, defaulting to 1000 [ 289.517606][T12645] wg1 speed is unknown, defaulting to 1000 [ 289.549970][T12646] ip6tnl0: Caught tx_queue_len zero misconfig [ 289.796493][T12652] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1660'. [ 289.938224][T12660] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1664'. [ 290.233697][T12675] netlink: 'syz.0.1667': attribute type 1 has an invalid length. [ 290.482518][T12675] 8021q: adding VLAN 0 to HW filter on device bond4 [ 290.534526][T12676] bond4: (slave ip6gretap0): making interface the new active one [ 290.543802][T12676] bond4: (slave ip6gretap0): Enslaving as an active interface with an up link [ 290.568632][T12678] erspan0: entered allmulticast mode [ 290.640661][T12678] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 290.671609][T12675] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 291.150869][T12690] wg1 speed is unknown, defaulting to 1000 [ 291.167467][T12690] wg1 speed is unknown, defaulting to 1000 [ 291.245788][T12699] sctp: [Deprecated]: syz.0.1674 (pid 12699) Use of int in max_burst socket option. [ 291.245788][T12699] Use struct sctp_assoc_value instead [ 291.483226][T12713] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1676'. [ 292.148443][T12722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1678'. [ 292.383390][T12730] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 292.396814][T12730] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 292.409955][T12730] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 292.467542][T12726] veth0: entered promiscuous mode [ 292.507358][T12725] veth0: left promiscuous mode [ 292.546706][T12734] netlink: 'syz.2.1681': attribute type 10 has an invalid length. [ 292.568044][T12734] bond0: (slave dummy0): Releasing backup interface [ 292.587563][T12737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1682'. [ 292.596062][T12734] team0: Port device dummy0 added [ 292.605644][T12738] netlink: 'syz.2.1681': attribute type 10 has an invalid length. [ 292.650413][T12738] team0: Port device dummy0 removed [ 292.679448][T12738] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 292.828614][T12745] netlink: 'syz.1.1685': attribute type 1 has an invalid length. [ 292.859538][T12749] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1687'. [ 292.926929][T12755] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1689'. [ 293.079491][T12763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.158016][T12765] wg1 speed is unknown, defaulting to 1000 [ 293.187500][T12765] wg1 speed is unknown, defaulting to 1000 [ 293.385506][T12774] delete_channel: no stack [ 293.418072][T12783] netlink: 'syz.0.1696': attribute type 1 has an invalid length. [ 293.680587][T12792] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1700'. [ 293.775521][T12800] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1702'. [ 293.952375][T12807] wg1 speed is unknown, defaulting to 1000 [ 293.960659][T12807] wg1 speed is unknown, defaulting to 1000 [ 294.077703][ T30] audit: type=1107 audit(1768930327.597:8): pid=12810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ԛo3zI,֩SVbc?fӸ2`/ȡ͂Ŭ䮭g' [ 294.116968][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'. [ 294.134265][T12813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1708'. [ 294.528516][T12827] wg1 speed is unknown, defaulting to 1000 [ 294.566632][T12827] wg1 speed is unknown, defaulting to 1000 [ 294.617343][T12829] wg1 speed is unknown, defaulting to 1000 [ 294.699824][T12829] wg1 speed is unknown, defaulting to 1000 [ 295.106285][T12847] wg1 speed is unknown, defaulting to 1000 [ 295.139456][T12847] wg1 speed is unknown, defaulting to 1000 [ 295.148567][T12852] wg1 speed is unknown, defaulting to 1000 [ 295.183486][T12862] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1717'. [ 295.200063][T12852] wg1 speed is unknown, defaulting to 1000 [ 295.313951][ T30] audit: type=1107 audit(1768930328.827:9): pid=12863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ԛo3zI,֩SVbc' [ 295.859979][T12891] netlink: 'syz.0.1724': attribute type 10 has an invalid length. [ 295.986105][T12891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.013890][T12891] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 296.141569][T12877] wg1 speed is unknown, defaulting to 1000 [ 296.173392][T12877] wg1 speed is unknown, defaulting to 1000 [ 296.258848][T12907] wg1 speed is unknown, defaulting to 1000 [ 296.289696][T12907] wg1 speed is unknown, defaulting to 1000 [ 296.454610][T12917] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1730'. [ 296.553840][ T30] audit: type=1107 audit(1768930330.067:10): pid=12919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 296.686984][T12928] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 296.870906][T12931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.904055][T12931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.039294][T12931] bond0: (slave batadv0): Releasing backup interface [ 297.296191][T12949] wg1 speed is unknown, defaulting to 1000 [ 297.306455][T12949] wg1 speed is unknown, defaulting to 1000 [ 297.482648][T12959] netlink: 'syz.4.1742': attribute type 10 has an invalid length. [ 297.566780][T12971] netlink: 'syz.3.1745': attribute type 1 has an invalid length. [ 297.959965][T12984] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 298.049441][T12987] netlink: 'syz.2.1748': attribute type 2 has an invalid length. [ 298.088312][T12987] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 298.120702][T12986] wg1 speed is unknown, defaulting to 1000 [ 298.148150][T12986] wg1 speed is unknown, defaulting to 1000 [ 298.185622][T12993] netlink: 'syz.4.1751': attribute type 5 has an invalid length. [ 298.202209][T12993] ip6erspan0: entered promiscuous mode [ 298.463516][T13007] veth0: entered promiscuous mode [ 298.542420][T13006] veth0: left promiscuous mode [ 298.700881][T13016] wg1 speed is unknown, defaulting to 1000 [ 298.720583][T13016] wg1 speed is unknown, defaulting to 1000 [ 299.065046][T13027] wg1 speed is unknown, defaulting to 1000 [ 299.073824][T13027] wg1 speed is unknown, defaulting to 1000 [ 299.190888][T13037] __nla_validate_parse: 3 callbacks suppressed [ 299.190907][T13037] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1763'. [ 299.430384][T13044] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1765'. [ 299.443771][T13044] netlink: 'syz.1.1765': attribute type 3 has an invalid length. [ 299.491069][T13044] netlink: 'syz.1.1765': attribute type 3 has an invalid length. [ 299.939276][T13073] FAULT_INJECTION: forcing a failure. [ 299.939276][T13073] name failslab, interval 1, probability 0, space 0, times 0 [ 299.971071][T13065] wg1 speed is unknown, defaulting to 1000 [ 299.983997][T13073] CPU: 1 UID: 0 PID: 13073 Comm: syz.3.1771 Not tainted syzkaller #0 PREEMPT(full) [ 299.984037][T13073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 299.984049][T13073] Call Trace: [ 299.984063][T13073] [ 299.984071][T13073] dump_stack_lvl+0xe8/0x150 [ 299.984103][T13073] should_fail_ex+0x412/0x560 [ 299.984137][T13073] should_failslab+0xa8/0x100 [ 299.984163][T13073] __kmalloc_noprof+0xde/0x7e0 [ 299.984181][T13073] ? kfree+0x4d/0x650 [ 299.984205][T13073] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 299.984238][T13073] tomoyo_realpath_from_path+0xe3/0x5d0 [ 299.984265][T13073] ? tomoyo_domain+0xd7/0x130 [ 299.984297][T13073] ? tomoyo_path_number_perm+0x219/0x630 [ 299.984318][T13073] tomoyo_path_number_perm+0x246/0x630 [ 299.984344][T13073] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 299.984365][T13073] ? __lock_acquire+0x6b5/0x2cf0 [ 299.984400][T13073] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 299.984450][T13073] ? __fget_files+0x2a/0x420 [ 299.984476][T13073] ? __fget_files+0x2a/0x420 [ 299.984495][T13073] ? __fget_files+0x3a0/0x420 [ 299.984517][T13073] ? __fget_files+0x2a/0x420 [ 299.984545][T13073] security_file_ioctl+0xc3/0x2a0 [ 299.984568][T13073] __se_sys_ioctl+0x47/0x170 [ 299.984601][T13073] do_syscall_64+0xe2/0xf80 [ 299.984625][T13073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.984642][T13073] ? trace_irq_disable+0x37/0x100 [ 299.984665][T13073] ? clear_bhb_loop+0x60/0xb0 [ 299.984688][T13073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.984706][T13073] RIP: 0033:0x7fd96879acb9 [ 299.984724][T13073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.984740][T13073] RSP: 002b:00007fd9696ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.984762][T13073] RAX: ffffffffffffffda RBX: 00007fd968a15fa0 RCX: 00007fd96879acb9 [ 299.984776][T13073] RDX: 00002000000000c0 RSI: 00000000000089e1 RDI: 0000000000000003 [ 299.984788][T13073] RBP: 00007fd9696ff090 R08: 0000000000000000 R09: 0000000000000000 [ 299.984800][T13073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.984811][T13073] R13: 00007fd968a16038 R14: 00007fd968a15fa0 R15: 00007ffeadc33958 [ 299.984847][T13073] [ 300.214919][ T11] block nbd0: Possible stuck request ffff888025768000: control (read@0,1024B). Runtime 60 seconds [ 300.226948][ T11] block nbd0: Possible stuck request ffff888025768200: control (read@1024,1024B). Runtime 60 seconds [ 300.243212][ T11] block nbd0: Possible stuck request ffff888025768400: control (read@2048,1024B). Runtime 60 seconds [ 300.254701][ T11] block nbd0: Possible stuck request ffff888025768600: control (read@3072,1024B). Runtime 60 seconds [ 300.353044][T13079] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 300.373394][T13065] wg1 speed is unknown, defaulting to 1000 [ 300.391245][T13073] ERROR: Out of memory at tomoyo_realpath_from_path. [ 300.536831][T13086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1777'. [ 300.586600][T13083] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1775'. [ 300.651796][T13083] pim6reg1: entered promiscuous mode [ 300.665528][T13083] pim6reg1: entered allmulticast mode [ 300.762760][T13098] tipc: Enabling of bearer rejected, failed to enable media [ 301.048149][T13112] wg1 speed is unknown, defaulting to 1000 [ 301.101390][T13112] wg1 speed is unknown, defaulting to 1000 [ 301.387149][T13118] wg1 speed is unknown, defaulting to 1000 [ 301.438046][T13120] wg1 speed is unknown, defaulting to 1000 [ 301.445534][T13118] wg1 speed is unknown, defaulting to 1000 [ 301.477581][T13120] wg1 speed is unknown, defaulting to 1000 [ 302.622981][T13155] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1796'. [ 302.696300][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1796'. [ 302.769904][T13162] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1796'. [ 302.857506][T13163] wg1 speed is unknown, defaulting to 1000 [ 302.891511][T13163] wg1 speed is unknown, defaulting to 1000 [ 303.358464][T13179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1798'. [ 303.413478][T13191] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1801'. [ 303.426249][T13190] FAULT_INJECTION: forcing a failure. [ 303.426249][T13190] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 303.475166][T13190] CPU: 1 UID: 0 PID: 13190 Comm: syz.0.1802 Not tainted syzkaller #0 PREEMPT(full) [ 303.475197][T13190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 303.475208][T13190] Call Trace: [ 303.475216][T13190] [ 303.475224][T13190] dump_stack_lvl+0xe8/0x150 [ 303.475254][T13190] should_fail_ex+0x412/0x560 [ 303.475289][T13190] _copy_from_user+0x2d/0xb0 [ 303.475322][T13190] sock_ioctl_inout+0x53/0x170 [ 303.475347][T13190] ipmr_sk_ioctl+0xfa/0x1c0 [ 303.475371][T13190] ? __pfx_ipmr_sk_ioctl+0x10/0x10 [ 303.475392][T13190] ? stack_trace_save+0xa9/0x100 [ 303.475418][T13190] ? __pfx_stack_trace_save+0x10/0x10 [ 303.475447][T13190] ? stack_depot_save_flags+0x33/0x810 [ 303.475473][T13190] ? kasan_save_track+0x4f/0x80 [ 303.475492][T13190] ? kasan_save_free_info+0x46/0x50 [ 303.475516][T13190] ? __kasan_slab_free+0x5c/0x80 [ 303.475533][T13190] ? kfree+0x1be/0x650 [ 303.475557][T13190] ? tomoyo_path_number_perm+0x501/0x630 [ 303.475582][T13190] sk_ioctl+0x138/0x6d0 [ 303.475606][T13190] ? __pfx_sk_ioctl+0x10/0x10 [ 303.475656][T13190] inet_ioctl+0x484/0x560 [ 303.475679][T13190] ? __pfx_inet_ioctl+0x10/0x10 [ 303.475721][T13190] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 303.475758][T13190] sock_do_ioctl+0x101/0x320 [ 303.475780][T13190] ? __pfx_sock_do_ioctl+0x10/0x10 [ 303.475796][T13190] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 303.475841][T13190] sock_ioctl+0x5c6/0x7f0 [ 303.475872][T13190] ? __pfx_sock_ioctl+0x10/0x10 [ 303.475901][T13190] ? __fget_files+0x2a/0x420 [ 303.475924][T13190] ? __fget_files+0x3a0/0x420 [ 303.475945][T13190] ? __fget_files+0x2a/0x420 [ 303.475978][T13190] ? bpf_lsm_file_ioctl+0x9/0x20 [ 303.475999][T13190] ? __pfx_sock_ioctl+0x10/0x10 [ 303.476027][T13190] __se_sys_ioctl+0xfc/0x170 [ 303.476057][T13190] do_syscall_64+0xe2/0xf80 [ 303.476081][T13190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.476100][T13190] ? trace_irq_disable+0x37/0x100 [ 303.476124][T13190] ? clear_bhb_loop+0x60/0xb0 [ 303.476148][T13190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.476167][T13190] RIP: 0033:0x7fc30899acb9 [ 303.476185][T13190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.476201][T13190] RSP: 002b:00007fc309890028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.476222][T13190] RAX: ffffffffffffffda RBX: 00007fc308c15fa0 RCX: 00007fc30899acb9 [ 303.476236][T13190] RDX: 00002000000000c0 RSI: 00000000000089e1 RDI: 0000000000000003 [ 303.476249][T13190] RBP: 00007fc309890090 R08: 0000000000000000 R09: 0000000000000000 [ 303.476260][T13190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.476272][T13190] R13: 00007fc308c16038 R14: 00007fc308c15fa0 R15: 00007fffc5a6c218 [ 303.476310][T13190] [ 304.168872][T13217] syzkaller0: entered promiscuous mode [ 304.200483][T13217] syzkaller0: entered allmulticast mode [ 304.278308][T13227] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1813'. [ 304.278534][T13217] tipc: Enabled bearer , priority 0 [ 304.346766][T13227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1813'. [ 304.378433][T13221] tipc: Enabling of bearer rejected, already enabled [ 304.457626][T13214] tipc: Resetting bearer [ 304.608687][T13243] FAULT_INJECTION: forcing a failure. [ 304.608687][T13243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.616961][T13214] tipc: Disabling bearer [ 304.635985][T13243] CPU: 1 UID: 0 PID: 13243 Comm: syz.1.1817 Not tainted syzkaller #0 PREEMPT(full) [ 304.636018][T13243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.636039][T13243] Call Trace: [ 304.636048][T13243] [ 304.636057][T13243] dump_stack_lvl+0xe8/0x150 [ 304.636089][T13243] should_fail_ex+0x412/0x560 [ 304.636125][T13243] _copy_to_user+0x31/0xb0 [ 304.636152][T13243] sock_ioctl_inout+0xfe/0x170 [ 304.636178][T13243] ipmr_sk_ioctl+0xfa/0x1c0 [ 304.636204][T13243] ? __pfx_ipmr_sk_ioctl+0x10/0x10 [ 304.636226][T13243] ? stack_trace_save+0xa9/0x100 [ 304.636254][T13243] ? __pfx_stack_trace_save+0x10/0x10 [ 304.636283][T13243] ? stack_depot_save_flags+0x33/0x810 [ 304.636309][T13243] ? kasan_save_track+0x4f/0x80 [ 304.636328][T13243] ? kasan_save_free_info+0x46/0x50 [ 304.636352][T13243] ? __kasan_slab_free+0x5c/0x80 [ 304.636370][T13243] ? kfree+0x1be/0x650 [ 304.636394][T13243] ? tomoyo_path_number_perm+0x501/0x630 [ 304.636421][T13243] sk_ioctl+0x138/0x6d0 [ 304.636445][T13243] ? __pfx_sk_ioctl+0x10/0x10 [ 304.636496][T13243] inet_ioctl+0x484/0x560 [ 304.636519][T13243] ? __pfx_inet_ioctl+0x10/0x10 [ 304.636560][T13243] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 304.636598][T13243] sock_do_ioctl+0x101/0x320 [ 304.636620][T13243] ? __pfx_sock_do_ioctl+0x10/0x10 [ 304.636643][T13243] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 304.636687][T13243] sock_ioctl+0x5c6/0x7f0 [ 304.636726][T13243] ? __pfx_sock_ioctl+0x10/0x10 [ 304.636755][T13243] ? __fget_files+0x2a/0x420 [ 304.636778][T13243] ? __fget_files+0x3a0/0x420 [ 304.636800][T13243] ? __fget_files+0x2a/0x420 [ 304.636826][T13243] ? bpf_lsm_file_ioctl+0x9/0x20 [ 304.636848][T13243] ? __pfx_sock_ioctl+0x10/0x10 [ 304.636876][T13243] __se_sys_ioctl+0xfc/0x170 [ 304.636908][T13243] do_syscall_64+0xe2/0xf80 [ 304.636933][T13243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.636951][T13243] ? trace_irq_disable+0x37/0x100 [ 304.636976][T13243] ? clear_bhb_loop+0x60/0xb0 [ 304.637000][T13243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.637018][T13243] RIP: 0033:0x7fd6c319acb9 [ 304.637045][T13243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.637062][T13243] RSP: 002b:00007fd6c412b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.637085][T13243] RAX: ffffffffffffffda RBX: 00007fd6c3415fa0 RCX: 00007fd6c319acb9 [ 304.637098][T13243] RDX: 00002000000000c0 RSI: 00000000000089e1 RDI: 0000000000000003 [ 304.637111][T13243] RBP: 00007fd6c412b090 R08: 0000000000000000 R09: 0000000000000000 [ 304.637123][T13243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.637135][T13243] R13: 00007fd6c3416038 R14: 00007fd6c3415fa0 R15: 00007ffdefcc2a98 [ 304.637169][T13243] [ 305.215283][T13256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1810'. [ 305.266345][T13255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1821'. [ 305.872129][ T6610] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 305.899579][T10643] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 305.914381][ T6610] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 305.985071][T10643] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 306.027856][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1831'. [ 306.332335][T13308] netlink: 'syz.2.1836': attribute type 1 has an invalid length. [ 306.584737][T10643] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 306.622097][ T30] audit: type=1107 audit(1768930340.137:11): pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 306.768723][T13339] x_tables: duplicate underflow at hook 1 [ 306.803674][T13337] wg1 speed is unknown, defaulting to 1000 [ 306.822453][T13337] wg1 speed is unknown, defaulting to 1000 [ 307.363233][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1847'. [ 307.596599][T13361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.752125][T13373] wg1 speed is unknown, defaulting to 1000 [ 307.761257][T13376] netlink: 'syz.3.1852': attribute type 1 has an invalid length. [ 307.769667][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1852'. [ 307.778647][T13373] wg1 speed is unknown, defaulting to 1000 [ 307.905223][T13376] wg1 speed is unknown, defaulting to 1000 [ 307.945577][T13376] wg1 speed is unknown, defaulting to 1000 [ 308.309398][T13391] FAULT_INJECTION: forcing a failure. [ 308.309398][T13391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.385798][T13391] CPU: 1 UID: 0 PID: 13391 Comm: syz.4.1855 Not tainted syzkaller #0 PREEMPT(full) [ 308.385829][T13391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 308.385840][T13391] Call Trace: [ 308.385849][T13391] [ 308.385858][T13391] dump_stack_lvl+0xe8/0x150 [ 308.385888][T13391] should_fail_ex+0x412/0x560 [ 308.385924][T13391] _copy_from_user+0x2d/0xb0 [ 308.385950][T13391] ___sys_sendmsg+0x1c6/0x360 [ 308.385975][T13391] ? __lock_acquire+0x6b5/0x2cf0 [ 308.386000][T13391] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.386073][T13391] ? __fget_files+0x2a/0x420 [ 308.386096][T13391] ? __fget_files+0x3a0/0x420 [ 308.386128][T13391] __x64_sys_sendmsg+0x1bd/0x2a0 [ 308.386156][T13391] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.386190][T13391] ? __pfx_ksys_write+0x10/0x10 [ 308.386222][T13391] do_syscall_64+0xe2/0xf80 [ 308.386246][T13391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.386263][T13391] ? trace_irq_disable+0x37/0x100 [ 308.386287][T13391] ? clear_bhb_loop+0x60/0xb0 [ 308.386309][T13391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.386328][T13391] RIP: 0033:0x7f9b4b99acb9 [ 308.386345][T13391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.386358][T13391] RSP: 002b:00007f9b4c8e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.386380][T13391] RAX: ffffffffffffffda RBX: 00007f9b4bc15fa0 RCX: 00007f9b4b99acb9 [ 308.386393][T13391] RDX: 00000000240000f0 RSI: 0000200000000240 RDI: 0000000000000003 [ 308.386405][T13391] RBP: 00007f9b4c8e9090 R08: 0000000000000000 R09: 0000000000000000 [ 308.386416][T13391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.386427][T13391] R13: 00007f9b4bc16038 R14: 00007f9b4bc15fa0 R15: 00007ffee7c3f7e8 [ 308.386456][T13391] [ 308.828192][T13387] wg1 speed is unknown, defaulting to 1000 [ 308.837390][T13387] wg1 speed is unknown, defaulting to 1000 [ 309.504551][T13412] tipc: Enabled bearer , priority 0 [ 309.537171][T13412] syzkaller0: entered promiscuous mode [ 309.542967][T13412] syzkaller0: entered allmulticast mode [ 309.674559][T13412] tipc: Resetting bearer [ 309.683235][T13411] tipc: Resetting bearer [ 309.729301][T13411] tipc: Disabling bearer [ 309.896600][T13426] netlink: 'syz.4.1865': attribute type 1 has an invalid length. [ 309.915086][T13426] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1865'. [ 309.944339][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 310.058236][T13429] netlink: 'syz.3.1866': attribute type 1 has an invalid length. [ 310.136489][T13429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1866'. [ 310.256450][T13436] FAULT_INJECTION: forcing a failure. [ 310.256450][T13436] name failslab, interval 1, probability 0, space 0, times 0 [ 310.285518][T13436] CPU: 1 UID: 0 PID: 13436 Comm: syz.1.1869 Not tainted syzkaller #0 PREEMPT(full) [ 310.285549][T13436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 310.285560][T13436] Call Trace: [ 310.285568][T13436] [ 310.285577][T13436] dump_stack_lvl+0xe8/0x150 [ 310.285608][T13436] should_fail_ex+0x412/0x560 [ 310.285643][T13436] should_failslab+0xa8/0x100 [ 310.285668][T13436] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 310.285696][T13436] ? __alloc_skb+0x18b/0x710 [ 310.285717][T13436] ? __alloc_skb+0x1d0/0x710 [ 310.285736][T13436] ? __local_bh_enable_ip+0xd0/0x130 [ 310.285757][T13436] ? __alloc_skb+0x18b/0x710 [ 310.285780][T13436] __alloc_skb+0x1d0/0x710 [ 310.285801][T13436] ? netlink_autobind+0xda/0x300 [ 310.285819][T13436] ? netlink_autobind+0x2c1/0x300 [ 310.285841][T13436] netlink_sendmsg+0x5d4/0xb40 [ 310.285880][T13436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.285912][T13436] ? aa_file_perm+0x12d/0x1630 [ 310.285938][T13436] ? aa_sock_msg_perm+0xf1/0x1b0 [ 310.285973][T13436] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 310.285991][T13436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.286021][T13436] __sock_sendmsg+0x21c/0x270 [ 310.286045][T13436] ____sys_sendmsg+0x4d7/0x810 [ 310.286071][T13436] ? __might_fault+0xaf/0x130 [ 310.286105][T13436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.286140][T13436] ? import_iovec+0x73/0xa0 [ 310.286169][T13436] ___sys_sendmsg+0x2a5/0x360 [ 310.286192][T13436] ? __lock_acquire+0x6b5/0x2cf0 [ 310.286215][T13436] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.286278][T13436] ? __fget_files+0x2a/0x420 [ 310.286301][T13436] ? __fget_files+0x3a0/0x420 [ 310.286336][T13436] __x64_sys_sendmsg+0x1bd/0x2a0 [ 310.286365][T13436] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.286401][T13436] ? __pfx_ksys_write+0x10/0x10 [ 310.286434][T13436] do_syscall_64+0xe2/0xf80 [ 310.286464][T13436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.286482][T13436] ? trace_irq_disable+0x37/0x100 [ 310.286505][T13436] ? clear_bhb_loop+0x60/0xb0 [ 310.286528][T13436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.286547][T13436] RIP: 0033:0x7fd6c319acb9 [ 310.286565][T13436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.286580][T13436] RSP: 002b:00007fd6c412b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.286602][T13436] RAX: ffffffffffffffda RBX: 00007fd6c3415fa0 RCX: 00007fd6c319acb9 [ 310.286617][T13436] RDX: 00000000240000f0 RSI: 0000200000000240 RDI: 0000000000000003 [ 310.286629][T13436] RBP: 00007fd6c412b090 R08: 0000000000000000 R09: 0000000000000000 [ 310.286641][T13436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.286652][T13436] R13: 00007fd6c3416038 R14: 00007fd6c3415fa0 R15: 00007ffdefcc2a98 [ 310.286683][T13436] [ 311.540277][T13477] xt_CONNSECMARK: invalid mode: 66 [ 311.706146][ T30] audit: type=1800 audit(1768930345.227:12): pid=13483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1877" name="memory.events" dev="tmpfs" ino=1827 res=0 errno=0 [ 311.785596][ T30] audit: type=1804 audit(1768930345.247:13): pid=13483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1877" name="memory.events" dev="tmpfs" ino=1827 res=1 errno=0 [ 311.799363][T13487] xt_hashlimit: max too large, truncated to 1048576 [ 311.970096][T13490] wg1 speed is unknown, defaulting to 1000 [ 311.986800][T13490] wg1 speed is unknown, defaulting to 1000 [ 311.998599][T13495] FAULT_INJECTION: forcing a failure. [ 311.998599][T13495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.026174][T13495] CPU: 0 UID: 0 PID: 13495 Comm: syz.2.1885 Not tainted syzkaller #0 PREEMPT(full) [ 312.026204][T13495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.026215][T13495] Call Trace: [ 312.026223][T13495] [ 312.026231][T13495] dump_stack_lvl+0xe8/0x150 [ 312.026270][T13495] should_fail_ex+0x412/0x560 [ 312.026301][T13495] _copy_from_iter+0x1d3/0x1670 [ 312.026322][T13495] ? rcu_is_watching+0x15/0xb0 [ 312.026347][T13495] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 312.026377][T13495] ? kmalloc_reserve+0xbd/0x290 [ 312.026399][T13495] ? __pfx__copy_from_iter+0x10/0x10 [ 312.026428][T13495] ? netlink_sendmsg+0x650/0xb40 [ 312.026455][T13495] ? skb_put+0x11b/0x210 [ 312.026482][T13495] netlink_sendmsg+0x6c0/0xb40 [ 312.026521][T13495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.026552][T13495] ? aa_file_perm+0x12d/0x1630 [ 312.026576][T13495] ? aa_sock_msg_perm+0xf1/0x1b0 [ 312.026603][T13495] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.026621][T13495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.026650][T13495] __sock_sendmsg+0x21c/0x270 [ 312.026673][T13495] ____sys_sendmsg+0x4d7/0x810 [ 312.026698][T13495] ? __might_fault+0xaf/0x130 [ 312.026731][T13495] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.026763][T13495] ? import_iovec+0x73/0xa0 [ 312.026789][T13495] ___sys_sendmsg+0x2a5/0x360 [ 312.026811][T13495] ? __lock_acquire+0x6b5/0x2cf0 [ 312.026835][T13495] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.026900][T13495] ? __fget_files+0x2a/0x420 [ 312.026923][T13495] ? __fget_files+0x3a0/0x420 [ 312.026957][T13495] __x64_sys_sendmsg+0x1bd/0x2a0 [ 312.026985][T13495] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.027020][T13495] ? __pfx_ksys_write+0x10/0x10 [ 312.027053][T13495] do_syscall_64+0xe2/0xf80 [ 312.027079][T13495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.027103][T13495] ? trace_irq_disable+0x37/0x100 [ 312.027128][T13495] ? clear_bhb_loop+0x60/0xb0 [ 312.027151][T13495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.027169][T13495] RIP: 0033:0x7fc88c79acb9 [ 312.027188][T13495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.027204][T13495] RSP: 002b:00007fc88d720028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.027226][T13495] RAX: ffffffffffffffda RBX: 00007fc88ca15fa0 RCX: 00007fc88c79acb9 [ 312.027249][T13495] RDX: 00000000240000f0 RSI: 0000200000000240 RDI: 0000000000000003 [ 312.027262][T13495] RBP: 00007fc88d720090 R08: 0000000000000000 R09: 0000000000000000 [ 312.027274][T13495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.027284][T13495] R13: 00007fc88ca16038 R14: 00007fc88ca15fa0 R15: 00007ffdb4a4bc28 [ 312.027316][T13495] [ 312.030219][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1884'. [ 312.271740][ C0] ------------[ cut here ]------------ [ 312.271810][ C0] ODEBUG: free active (active state 0) object: ffff888030c34490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 312.271855][ C0] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#0: syz.3.1884/13493 [ 312.271892][ C0] Modules linked in: [ 312.271945][ C0] CPU: 0 UID: 0 PID: 13493 Comm: syz.3.1884 Not tainted syzkaller #0 PREEMPT(full) [ 312.271969][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.271983][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 312.272012][ C0] Code: 89 44 24 20 e8 27 19 87 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 20 97 e0 8b 48 c7 c2 40 9c e0 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 312.272030][ C0] RSP: 0018:ffffc90000007b70 EFLAGS: 00010246 [ 312.272051][ C0] RAX: ffffffff8a62b8d0 RBX: ffffffff99f435b8 RCX: 0000000000000000 [ 312.272067][ C0] RDX: ffffffff8be09c40 RSI: ffffffff8be09720 RDI: ffffffff8fccc200 [ 312.272083][ C0] RBP: ffffffff8b8d2520 R08: ffff888030c34490 R09: ffffffff8b8d3680 [ 312.272099][ C0] R10: dffffc0000000000 R11: ffffffff81af5400 R12: ffff888030c34600 [ 312.272115][ C0] R13: ffffffff8fccc200 R14: ffff888030c34000 R15: ffff888030c34490 [ 312.272131][ C0] FS: 00007fd9696de6c0(0000) GS:ffff888125a0b000(0000) knlGS:0000000000000000 [ 312.272150][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.272165][ C0] CR2: 0000001b31418ff8 CR3: 000000007fbbe000 CR4: 00000000003526f0 [ 312.272187][ C0] Call Trace: [ 312.272197][ C0] [ 312.272205][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 312.272272][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 312.272315][ C0] kfree+0x139/0x650 [ 312.272352][ C0] rose_timer_expiry+0x4cb/0x600 [ 312.272379][ C0] ? call_timer_fn+0x178/0x5a0 [ 312.272406][ C0] call_timer_fn+0x192/0x5a0 [ 312.272430][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 312.272457][ C0] ? call_timer_fn+0xd4/0x5a0 [ 312.272489][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 312.272526][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.272550][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 312.272580][ C0] __run_timer_base+0x652/0x8b0 [ 312.272620][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 312.272639][ C0] ? clockevents_program_event+0x247/0x350 [ 312.272671][ C0] ? sched_clock_cpu+0x74/0x440 [ 312.272701][ C0] run_timer_softirq+0xb7/0x170 [ 312.272724][ C0] handle_softirqs+0x22a/0x7c0 [ 312.272750][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 312.272769][T13500] wg1 speed is unknown, defaulting to 1000 [ 312.272780][ C0] __irq_exit_rcu+0x5f/0x150 [ 312.272801][ C0] irq_exit_rcu+0x9/0x30 [ 312.272821][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 312.272848][ C0] [ 312.272856][ C0] [ 312.272866][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 312.272889][ C0] RIP: 0010:console_flush_all+0x801/0xb20 [ 312.272917][ C0] Code: ff ff e8 92 51 20 00 90 0f 0b 90 e9 85 fc ff ff e8 84 51 20 00 e8 cf 5c d3 09 48 85 db 74 c0 e8 75 51 20 00 fb 48 8b 5c 24 08 <48> 8b 44 24 20 42 80 3c 20 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 56 [ 312.272934][ C0] RSP: 0018:ffffc9000c2ae8e0 EFLAGS: 00000287 [ 312.272953][ C0] RAX: ffffffff81a2225b RBX: ffffc9000c2aea40 RCX: 0000000000080000 [ 312.272970][ C0] RDX: ffffc9000e951000 RSI: 00000000000322ba RDI: 00000000000322bb [ 312.272985][ C0] RBP: ffffc9000c2ae9f0 R08: ffffffff8fc25f77 R09: 1ffffffff1f84bee [ 312.273000][ C0] R10: dffffc0000000000 R11: fffffbfff1f84bef R12: dffffc0000000000 [ 312.273014][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8eb92be0 [ 312.273038][ C0] ? console_flush_all+0x7fb/0xb20 [ 312.273080][ C0] ? console_flush_all+0x123/0xb20 [ 312.273115][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 312.273148][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 312.273182][ C0] console_unlock+0xd1/0x1c0 [ 312.273211][ C0] ? __pfx_console_unlock+0x10/0x10 [ 312.273238][ C0] ? _printk+0xdd/0x130 [ 312.273284][ C0] vprintk_emit+0x485/0x560 [ 312.273307][ C0] ? unwind_get_return_address+0x4d/0x90 [ 312.273336][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 312.273374][ C0] _printk+0xdd/0x130 [ 312.273408][ C0] ? __pfx__printk+0x10/0x10 [ 312.273438][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 312.273462][ C0] ? ___ratelimit+0x58c/0x8d0 [ 312.273495][ C0] __nla_validate_parse+0x25d4/0x2dc0 [ 312.273519][ C0] ? ___sys_sendmsg+0x2a5/0x360 [ 312.273544][ C0] ? __sys_sendmmsg+0x27c/0x4e0 [ 312.273591][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 312.273645][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 312.273672][ C0] __nla_parse+0x40/0x60 [ 312.273701][ C0] rtnl_newlink+0x202/0x1be0 [ 312.273730][ C0] ? kasan_save_track+0x4f/0x80 [ 312.273749][ C0] ? kasan_save_track+0x3e/0x80 [ 312.273768][ C0] ? kasan_save_free_info+0x46/0x50 [ 312.273793][ C0] ? __kasan_slab_free+0x5c/0x80 [ 312.273812][ C0] ? kmem_cache_free+0x195/0x610 [ 312.273834][ C0] ? __dev_queue_xmit+0x14ed/0x32b0 [ 312.273861][ C0] ? __netlink_deliver_tap+0x5ad/0x850 [ 312.273889][ C0] ? netlink_deliver_tap+0x19c/0x1b0 [ 312.273916][ C0] ? netlink_unicast+0x7e3/0x9b0 [ 312.273940][ C0] ? netlink_sendmsg+0x813/0xb40 [ 312.273970][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 312.273993][ C0] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 312.274013][ C0] ? do_syscall_64+0xe2/0xf80 [ 312.274032][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.274133][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 312.274154][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 312.274183][ C0] ? kmem_cache_free+0x195/0x610 [ 312.274201][ C0] ? nlmon_xmit+0xb0/0x100 [ 312.274238][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 312.274277][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 312.274298][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 312.274321][ C0] ? __dev_queue_xmit+0x2a7/0x32b0 [ 312.274347][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 312.274365][ C0] ? __dev_queue_xmit+0x2a7/0x32b0 [ 312.274400][ C0] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 312.274440][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 312.274463][ C0] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 312.274491][ C0] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 312.274514][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 312.274535][ C0] ? ref_tracker_free+0x693/0x840 [ 312.274554][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 312.274582][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 312.274616][ C0] netlink_rcv_skb+0x232/0x4b0 [ 312.274644][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 312.274671][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.274715][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 312.274748][ C0] netlink_unicast+0x80f/0x9b0 [ 312.274778][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 312.274805][ C0] ? netlink_sendmsg+0x650/0xb40 [ 312.274829][ C0] ? skb_put+0x11b/0x210 [ 312.274856][ C0] netlink_sendmsg+0x813/0xb40 [ 312.274883][ C0] ? finish_task_switch+0x161/0x920 [ 312.274909][ C0] ? lock_acquire+0x106/0x330 [ 312.274935][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.274964][ C0] ? finish_task_switch+0x23c/0x920 [ 312.274988][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 312.275014][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.275033][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.275061][ C0] __sock_sendmsg+0x21c/0x270 [ 312.275085][ C0] ____sys_sendmsg+0x500/0x810 [ 312.275107][ C0] ? __might_fault+0xaf/0x130 [ 312.275136][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.275169][ C0] ? import_iovec+0x73/0xa0 [ 312.275198][ C0] ___sys_sendmsg+0x2a5/0x360 [ 312.275223][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 312.275248][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.275289][ C0] ? preempt_schedule_common+0x82/0xd0 [ 312.275315][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 312.275366][ C0] ? __fget_files+0x2a/0x420 [ 312.275390][ C0] ? __fget_files+0x3a0/0x420 [ 312.275427][ C0] __sys_sendmmsg+0x27c/0x4e0 [ 312.275458][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 312.275481][ C0] ? do_futex+0x395/0x420 [ 312.275510][ C0] ? fdget+0x183/0x1e0 [ 312.275558][ C0] ? rcu_is_watching+0x15/0xb0 [ 312.275592][ C0] __x64_sys_sendmmsg+0xa0/0xc0 [ 312.275623][ C0] do_syscall_64+0xe2/0xf80 [ 312.275649][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.275669][ C0] ? trace_irq_disable+0x37/0x100 [ 312.275696][ C0] ? clear_bhb_loop+0x60/0xb0 [ 312.275722][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.275742][ C0] RIP: 0033:0x7fd96879acb9 [ 312.275763][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.275781][ C0] RSP: 002b:00007fd9696de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 312.275806][ C0] RAX: ffffffffffffffda RBX: 00007fd968a16090 RCX: 00007fd96879acb9 [ 312.275822][ C0] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 312.275836][ C0] RBP: 00007fd968808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 312.275851][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.275864][ C0] R13: 00007fd968a16128 R14: 00007fd968a16090 R15: 00007ffeadc33958 [ 312.275902][ C0] [ 312.275915][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 312.275930][ C0] CPU: 0 UID: 0 PID: 13493 Comm: syz.3.1884 Not tainted syzkaller #0 PREEMPT(full) [ 312.275952][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.275964][ C0] Call Trace: [ 312.275973][ C0] [ 312.275982][ C0] vpanic+0x1e0/0x670 [ 312.276009][ C0] panic+0xc5/0xd0 [ 312.276033][ C0] ? __pfx_panic+0x10/0x10 [ 312.276077][ C0] __warn+0x315/0x4a0 [ 312.276100][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 312.276132][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 312.276164][ C0] __report_bug+0x29a/0x540 [ 312.276189][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 312.276218][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 312.276248][ C0] ? __pfx___report_bug+0x10/0x10 [ 312.276288][ C0] ? call_timer_fn+0x192/0x5a0 [ 312.276309][ C0] ? __run_timer_base+0x652/0x8b0 [ 312.276327][ C0] ? run_timer_softirq+0xb7/0x170 [ 312.276345][ C0] ? handle_softirqs+0x22a/0x7c0 [ 312.276363][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 312.276378][ C0] ? irq_exit_rcu+0x9/0x30 [ 312.276394][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 312.276413][ C0] ? console_flush_all+0x801/0xb20 [ 312.276433][ C0] ? console_unlock+0xd1/0x1c0 [ 312.276448][ C0] ? vprintk_emit+0x485/0x560 [ 312.276466][ C0] report_bug_entry+0x19a/0x290 [ 312.276487][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 312.276514][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 312.276539][ C0] handle_bug+0xca/0x200 [ 312.276566][ C0] exc_invalid_op+0x1a/0x50 [ 312.276593][ C0] asm_exc_invalid_op+0x1a/0x20 [ 312.276610][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 312.276639][ C0] Code: 89 44 24 20 e8 27 19 87 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 20 97 e0 8b 48 c7 c2 40 9c e0 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 312.276656][ C0] RSP: 0018:ffffc90000007b70 EFLAGS: 00010246 [ 312.276674][ C0] RAX: ffffffff8a62b8d0 RBX: ffffffff99f435b8 RCX: 0000000000000000 [ 312.276689][ C0] RDX: ffffffff8be09c40 RSI: ffffffff8be09720 RDI: ffffffff8fccc200 [ 312.276712][ C0] RBP: ffffffff8b8d2520 R08: ffff888030c34490 R09: ffffffff8b8d3680 [ 312.276727][ C0] R10: dffffc0000000000 R11: ffffffff81af5400 R12: ffff888030c34600 [ 312.276741][ C0] R13: ffffffff8fccc200 R14: ffff888030c34000 R15: ffff888030c34490 [ 312.276761][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 312.276784][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 312.276817][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 312.276852][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 312.276879][ C0] kfree+0x139/0x650 [ 312.276913][ C0] rose_timer_expiry+0x4cb/0x600 [ 312.276939][ C0] ? call_timer_fn+0x178/0x5a0 [ 312.276964][ C0] call_timer_fn+0x192/0x5a0 [ 312.276987][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 312.277021][ C0] ? call_timer_fn+0xd4/0x5a0 [ 312.277042][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 312.277078][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.277101][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 312.277129][ C0] __run_timer_base+0x652/0x8b0 [ 312.277168][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 312.277187][ C0] ? clockevents_program_event+0x247/0x350 [ 312.277218][ C0] ? sched_clock_cpu+0x74/0x440 [ 312.277247][ C0] run_timer_softirq+0xb7/0x170 [ 312.277279][ C0] handle_softirqs+0x22a/0x7c0 [ 312.277304][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 312.277334][ C0] __irq_exit_rcu+0x5f/0x150 [ 312.277355][ C0] irq_exit_rcu+0x9/0x30 [ 312.277374][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 312.277398][ C0] [ 312.277405][ C0] [ 312.277415][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 312.277436][ C0] RIP: 0010:console_flush_all+0x801/0xb20 [ 312.277461][ C0] Code: ff ff e8 92 51 20 00 90 0f 0b 90 e9 85 fc ff ff e8 84 51 20 00 e8 cf 5c d3 09 48 85 db 74 c0 e8 75 51 20 00 fb 48 8b 5c 24 08 <48> 8b 44 24 20 42 80 3c 20 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 56 [ 312.277478][ C0] RSP: 0018:ffffc9000c2ae8e0 EFLAGS: 00000287 [ 312.277495][ C0] RAX: ffffffff81a2225b RBX: ffffc9000c2aea40 RCX: 0000000000080000 [ 312.277516][ C0] RDX: ffffc9000e951000 RSI: 00000000000322ba RDI: 00000000000322bb [ 312.277530][ C0] RBP: ffffc9000c2ae9f0 R08: ffffffff8fc25f77 R09: 1ffffffff1f84bee [ 312.277545][ C0] R10: dffffc0000000000 R11: fffffbfff1f84bef R12: dffffc0000000000 [ 312.277560][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8eb92be0 [ 312.277583][ C0] ? console_flush_all+0x7fb/0xb20 [ 312.277623][ C0] ? console_flush_all+0x123/0xb20 [ 312.277655][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 312.277687][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 312.277728][ C0] console_unlock+0xd1/0x1c0 [ 312.277755][ C0] ? __pfx_console_unlock+0x10/0x10 [ 312.277781][ C0] ? _printk+0xdd/0x130 [ 312.277815][ C0] vprintk_emit+0x485/0x560 [ 312.277837][ C0] ? unwind_get_return_address+0x4d/0x90 [ 312.277864][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 312.277900][ C0] _printk+0xdd/0x130 [ 312.277935][ C0] ? __pfx__printk+0x10/0x10 [ 312.277963][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 312.277997][ C0] ? ___ratelimit+0x58c/0x8d0 [ 312.278027][ C0] __nla_validate_parse+0x25d4/0x2dc0 [ 312.278050][ C0] ? ___sys_sendmsg+0x2a5/0x360 [ 312.278073][ C0] ? __sys_sendmmsg+0x27c/0x4e0 [ 312.278119][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 312.278170][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 312.278206][ C0] __nla_parse+0x40/0x60 [ 312.278234][ C0] rtnl_newlink+0x202/0x1be0 [ 312.278270][ C0] ? kasan_save_track+0x4f/0x80 [ 312.278288][ C0] ? kasan_save_track+0x3e/0x80 [ 312.278306][ C0] ? kasan_save_free_info+0x46/0x50 [ 312.278331][ C0] ? __kasan_slab_free+0x5c/0x80 [ 312.278350][ C0] ? kmem_cache_free+0x195/0x610 [ 312.278370][ C0] ? __dev_queue_xmit+0x14ed/0x32b0 [ 312.278405][ C0] ? __netlink_deliver_tap+0x5ad/0x850 [ 312.278432][ C0] ? netlink_deliver_tap+0x19c/0x1b0 [ 312.278458][ C0] ? netlink_unicast+0x7e3/0x9b0 [ 312.278481][ C0] ? netlink_sendmsg+0x813/0xb40 [ 312.278511][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 312.278533][ C0] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 312.278557][ C0] ? do_syscall_64+0xe2/0xf80 [ 312.278580][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.278642][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 312.278662][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 312.278692][ C0] ? kmem_cache_free+0x195/0x610 [ 312.278712][ C0] ? nlmon_xmit+0xb0/0x100 [ 312.278748][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 312.278780][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 312.278801][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 312.278825][ C0] ? __dev_queue_xmit+0x2a7/0x32b0 [ 312.278851][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 312.278870][ C0] ? __dev_queue_xmit+0x2a7/0x32b0 [ 312.278907][ C0] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 312.278949][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 312.278973][ C0] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 312.279002][ C0] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 312.279024][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 312.279045][ C0] ? ref_tracker_free+0x693/0x840 [ 312.279065][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 312.279093][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 312.279128][ C0] netlink_rcv_skb+0x232/0x4b0 [ 312.279158][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 312.279185][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.279225][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 312.279279][ C0] netlink_unicast+0x80f/0x9b0 [ 312.279316][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 312.279345][ C0] ? netlink_sendmsg+0x650/0xb40 [ 312.279370][ C0] ? skb_put+0x11b/0x210 [ 312.279398][ C0] netlink_sendmsg+0x813/0xb40 [ 312.279424][ C0] ? finish_task_switch+0x161/0x920 [ 312.279450][ C0] ? lock_acquire+0x106/0x330 [ 312.279478][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.279509][ C0] ? finish_task_switch+0x23c/0x920 [ 312.279535][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 312.279570][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.279589][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.279619][ C0] __sock_sendmsg+0x21c/0x270 [ 312.279645][ C0] ____sys_sendmsg+0x500/0x810 [ 312.279670][ C0] ? __might_fault+0xaf/0x130 [ 312.279705][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.279748][ C0] ? import_iovec+0x73/0xa0 [ 312.279777][ C0] ___sys_sendmsg+0x2a5/0x360 [ 312.279802][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 312.279827][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.279859][ C0] ? preempt_schedule_common+0x82/0xd0 [ 312.279885][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 312.279935][ C0] ? __fget_files+0x2a/0x420 [ 312.279958][ C0] ? __fget_files+0x3a0/0x420 [ 312.279996][ C0] __sys_sendmmsg+0x27c/0x4e0 [ 312.280027][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 312.280051][ C0] ? do_futex+0x395/0x420 [ 312.280082][ C0] ? fdget+0x183/0x1e0 [ 312.280129][ C0] ? rcu_is_watching+0x15/0xb0 [ 312.280162][ C0] __x64_sys_sendmmsg+0xa0/0xc0 [ 312.280191][ C0] do_syscall_64+0xe2/0xf80 [ 312.280216][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.280235][ C0] ? trace_irq_disable+0x37/0x100 [ 312.280267][ C0] ? clear_bhb_loop+0x60/0xb0 [ 312.280292][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.280312][ C0] RIP: 0033:0x7fd96879acb9 [ 312.280330][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.280347][ C0] RSP: 002b:00007fd9696de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 312.280367][ C0] RAX: ffffffffffffffda RBX: 00007fd968a16090 RCX: 00007fd96879acb9 [ 312.280382][ C0] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 312.280396][ C0] RBP: 00007fd968808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 312.280408][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.280422][ C0] R13: 00007fd968a16128 R14: 00007fd968a16090 R15: 00007ffeadc33958 [ 312.280457][ C0] [ 312.281071][ C0] Kernel Offset: disabled