last executing test programs: 11.832877235s ago: executing program 3 (id=11063): r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x80, 0x80}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x80, 0x80}]}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005200010001cb485c67dbdf250a008a4108000140", @ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4028890}, 0x20040810) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005200010001cb485c67dbdf250a008a4108000140", @ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4028890}, 0x20040810) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x4638ee184721e40f) (async) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x4638ee184721e40f) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'bridge_slave_1\x00', 0x8000}) r4 = socket$kcm(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270000004600fd5e00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0100000000000000c4000502ffffff07e53000110002d588380003c1000000"], 0xfd6c) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r8, 0x0, 0x10, &(0x7f00000000c0)="170007000a00020000ffbe8c5ee17688a2006c0001feffff7f77fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c) setsockopt$inet_opts(r8, 0x0, 0x0, &(0x7f0000000380)="44249908f0fc0d6db9cf3b0d4998f21d1794452827d07a806f136863ba106c3ef92e214b35cfceebf418640e48913da09ef917a0c46bbb601dc1e433a2d1e90fccfb47dfc285c75a6c9dbc846020695a1586ea00bd30891bf0a884f9473567131733581c514c367a5f3e4677a3c68de7d9e5badd39c07cbaec710400ded9bf5b3749ba971edacab83ae0ee4b401345a6e5db2a", 0x93) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000040)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x2404000a) close(0x3) (async) close(0x3) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x6, @private1, 0x10000}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x6, @private1, 0x10000}, 0x1c) 11.609053194s ago: executing program 3 (id=11064): r0 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x22, 0xa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_open_procfs$namespace(0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) socket$inet6(0xa, 0x5, 0x1000) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(r6, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @bcast, @bcast]}, 0x48) 3.706774018s ago: executing program 1 (id=11099): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000090400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028004001f0004000000080007"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x210, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10200000, 0x70}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0xc, 0x1}, {0x30, 0x1}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) 3.220009093s ago: executing program 1 (id=11102): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01070000000000100000670000000800c30000"], 0x2c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.187928158s ago: executing program 0 (id=11103): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f40)=ANY=[@ANYBLOB="700000001000010025bd7000fd5bdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000100000008001b0000000000480019804400020047e2fa02906888b6341000ecb1493f59f2969588b0ca01ede4adcc2b9aa13154e342b3c29530379cc305e35a119debc1f4fbfb65426991996283ef9e03"], 0x70}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 2.668868527s ago: executing program 0 (id=11104): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="850000007a0000007600000000000000270000000000b6dd9500000000000000990415e9fdddf411b40e47fe918fb8a776e6697c77f9c32feeb75916fc7f88ebc92863f7341e8323af3bccd0"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x99, &(0x7f0000000180)=""/153, 0x41100, 0x59, '\x00', 0x0, @fallback=0x35}, 0x94) 2.667804545s ago: executing program 1 (id=11105): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001700)={0x6, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x41000, 0x26, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000280)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)=[{0x5, 0x3, 0x10, 0xa}, {0x3, 0x5, 0x9, 0x6}, {0x5, 0x4}, {0x0, 0x5, 0x7, 0x2}], 0x10, 0x7}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000003140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x48}}, 0x0) 2.619159713s ago: executing program 4 (id=11106): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.595715489s ago: executing program 0 (id=11107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x58, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x58}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(r2, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x7a, 0x0, &(0x7f0000000340)) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f00000000c0)={0x4, {0x0, 0x800, 0x7, 0x2, 0x81}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @aes128, 0x0, @desc3}) 2.583042256s ago: executing program 3 (id=11108): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001700)={0x6, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x41000, 0x26, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000280)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)=[{0x5, 0x3, 0x10, 0xa}, {0x3, 0x5, 0x9, 0x6}, {0x5, 0x4}, {0x0, 0x5, 0x7, 0x2}], 0x10, 0x7}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000002140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x48}}, 0x0) 2.456970383s ago: executing program 4 (id=11109): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) recvmmsg(r1, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x2d, 0x10, 0x8, {0x2, @sctp_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x4e22, 0x4e21, 0x2}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x400, 0x5, [0x8, 0x6]}, @sctp_ip6_spec={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x4e23, 0x4e22, 0x7}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x9c71, 0x0, [0x10, 0x2]}, 0x504e, 0xd}}}) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0xdc}}, 0x8000) close(r4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000005c0)={0x5}, 0x8) r7 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) recvfrom(r7, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000180)=0x39b, 0x4) sendmsg$NFT_BATCH(r2, 0x0, 0x40) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x110, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x6, 0x578d2b3c232dfacf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048811}, 0x4004000) 2.382304098s ago: executing program 2 (id=11110): unshare(0x22020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x11, 0x3, 0x8) getsockopt$sock_int(r1, 0x1, 0x22, 0x0, &(0x7f0000000240)) 2.30631797s ago: executing program 1 (id=11111): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000ff07000009"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d000000ff0f0000040000000600000001000000", @ANYRES32=r2], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000340)=r2}, 0x20) close(0x3) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x7fff, r4}, 0x38) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffef, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xa, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x38}}, 0x0) 2.071332985s ago: executing program 1 (id=11112): r0 = socket$caif_stream(0x25, 0x1, 0x2) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0), &(0x7f0000000040)=0x8) connect$caif(r0, &(0x7f00000065c0), 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x20, 0x3, 0x0, 0x0, 0xfd, 0x0, 0x1, 0x0, 0x0, 0xfd, 0x8], 0x1, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], [0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000001, 0x13, r0, 0x1e780000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xd2, 0x7, 0xbe, 0x40, @remote, @loopback, 0x40, 0x40, 0x8000}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x100, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r2, r6, 0x25, 0x0, @val=@tracing={r7, 0x5a46}}, 0x20) r8 = socket(0xa, 0x3, 0x3a) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0xff, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x7fffffff, 0x7fffffff, 0xfffb, 0x8, 0x5, 0x9, [0xe, 0xfb]}}) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd1, &(0x7f0000000340), 0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000000d80100070000006600000001000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bf0000000007010000f8ffffffb77bdb3e8195b9572d1dd6b0bc02000008000000b50a00000000000085000000060000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 2.068789942s ago: executing program 3 (id=11113): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaef}, 0x7, 0x7}, [{0x8, 0xffbff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x80000001, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x84, 0x3, 0x8, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x13, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x6, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x7}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x200004, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x8}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xa, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x4, 0x8000, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x800009, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x4e22, 0x3, 'rr\x00', 0x28, 0x5, 0x72}, 0x2c) (async) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa0100fe, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) (async) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x6, @loopback, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x20000000) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) (async) socket$netlink(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x9eadc000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 2.013010363s ago: executing program 2 (id=11114): openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000200), 0x0}, 0x20) (async) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x87, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @random="7f0a00030011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x40, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x33, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, "31f8fffffff7ffff"}}}}}, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r2, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x404c080) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0x1000, "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"}, &(0x7f0000001480)=0x1008) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000240)={0x10000014}) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c00010006"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) sendmmsg$inet(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x800) (async) r7 = socket$igmp(0x2, 0x3, 0x2) (async) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @empty, 0x4}, 0x1c) (async) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000000)=0x2, 0x4) (async) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r9, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async) recvmmsg(r9, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) 1.762879106s ago: executing program 4 (id=11115): socket$inet6(0xa, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xce) socket(0x1e, 0x5, 0x0) socket(0x1e, 0x4, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x8, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r4], 0xc4}}, 0x0) 1.703520334s ago: executing program 2 (id=11116): r0 = bpf$MAP_CREATE(0x4000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="003601005f"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec5}, 0x80008001}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x12140, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000004000000850000007d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000200850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000000c0)={r7, 0x1, 0x6, @remote}, 0x10) 1.480679875s ago: executing program 0 (id=11117): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x28, 0xb, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4800) r2 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000016c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f00000017c0)=0xe8) r4 = getgid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r7 = gettid() r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001800)={0x0, 0x0, 0x0}, &(0x7f0000001840)=0xc) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r10, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r10, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r10, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x7, @mcast1, 0x4}, 0x1c) r11 = accept4$unix(0xffffffffffffffff, &(0x7f0000001880)=@abs, &(0x7f0000001900)=0x6e, 0x80800) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x45e], 0x0, 0x0, 0x1, 0x0, r13}}, 0x40) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001940)={0x0, 0x0, 0x0}, &(0x7f0000001980)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000200)="4014399865e097bab636572ac9f2abb01493be20f79745840f4ea2951abfd5f6e49955fc699d04fb21edc90972e1e5995ff021e3ad1a70a12506f3173e96275fb1cd15af3fe8ea015de43b39d2b58711f6282dab6c50302a19234b3d17bf1726b8c3e08d2c7d3cf3801f798f5db4bca232f23e1c7b315fd808c4313a70c56352f85c4262abb58dd452ac90b1e715fa032e51c4542b19920c216f0142bccd983ce7437a68e475a949d696a500fe", 0xad}, {&(0x7f00000002c0)="cf7c5501cb9ca4d01fc321085f5b13d85196f7fffd0e09b656c60880813038c9a62e10efc89d26d32d2a8115c8aa41c2e5a192d3b371899706a24e3abb4606f27f4958a9423919ea4551746cdce8e870479ca190201079f43d19ce849dc339933fb5b6", 0x63}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="1350af7d1bb8a952d5565be21091635deb3bb878d68e4eae1166013e077c1a5f81e753002304997e8f41f1", 0x2b}, {&(0x7f00000014c0)="01b7a9edc76778fd2732d931982207e886afb4e8afb5b72d1f95eefaecd19379b326dda274e9bb1301acbfcdad636a9aeb9f5fdc2ef879c74073efb34c0a32e6aa4bed727c6e06de865f95b653d0902159bbae0b70951e791978ed15b08940a4e0536191dd1b0bf40785619862e6cc3f3332844ce6db0034bf8601d11219ee03185f5011a6ef8b25cfcded3b9eaf226b6ecc4efbb895a42e23edd2bd3ea167bb481d92cecd582cc3112903234b", 0xad}, {&(0x7f0000001580)="2e52333599eaa13e995e28fc77604289875371264e8811ab4f9cd581e64ae9ab88a8facf726f564cbfc42ea5093d", 0x2e}, {&(0x7f00000015c0)="50dbff18d9d32e4c0d54ae18627ac3454b874768c0e423af30858f32094d7828caab2951782c7f163a471cee0e7f2dffb7f9c2896e7359e037eff9e633c604eb72f6885d16cb11d8009115d993689ac50e7aa9508690962bd49114c193d6266df67db28155fa5e8b1e9f5a6b16114cae1a33", 0x72}], 0x7, &(0x7f00000019c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, r9}}}, @rights={{0x34, 0x1, 0x1, [r1, r10, r1, r1, r1, r0, r0, r11, r1]}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xffffffffffffffff, r14}}}], 0xb0}}], 0x1, 0x4044) 1.38781388s ago: executing program 4 (id=11118): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x42, 0x8, 0x2, 0x0, 0x1}, 0x48) unshare(0x8040480) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000", @ANYRESOCT], 0x110) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x70, 0x1, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x31, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, 0x0}, 0x20) 1.366901204s ago: executing program 2 (id=11119): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.364548595s ago: executing program 3 (id=11120): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x5) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e07b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="cd86a8e58245ba6aaecd8fe257f2c2ffbf13d2630d10891cf0c8217c513384b8536012741f439818fa067448222aaea07d32f28b9996b4eecdd89a758e65e16199eff18b7b8732f6a1275b645df31f0e794aa8d0106dd3cf61ae3c1b470de91fa052ff09498a392a89fdd28053cf1f5b807e57ad37568fbdca440c8b3765a299736605cd0f5849d78926973e1f69028c65c2d268", 0x94}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r4, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003400)=""/147, 0x93}], 0x1}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000003640)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x40002000) sendmsg$unix(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000"], 0x18, 0x20000084}, 0x40880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.33734401s ago: executing program 1 (id=11121): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4080) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 1.150993272s ago: executing program 2 (id=11122): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r2, 0x0, 0x0, 0x2000) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000740)={0x0, 0xc8}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000580)={@val={0x0, 0x86dd}, @val={0x2, 0x1, 0x11, 0x4, 0x5, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x3, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) bind$vsock_stream(r3, &(0x7f0000000340)={0x28, 0x0, 0x0, @host}, 0x10) 1.150582041s ago: executing program 4 (id=11123): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0xfdff, 0x8}, 0x78) 911.429996ms ago: executing program 3 (id=11124): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0xffff, [0xde99, 0x8e9, 0xc, 0x1d, 0x43, 0xfffffffffffffffb, 0x28, 0x6, 0x34e0000, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]}) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000066000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000001200)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, "f517e5", 0x44, 0x2f, 0x1, @local, @remote, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x6, 0x1, 0x10, 0x2, 0x1, 0x0, 0x3, 0xe4}, 0x1, {0x76}}}, {0x8, 0x22eb, 0x3, {{0x3, 0x2, 0x3a, 0x3, 0x0, 0x1, 0x0, 0x7}, 0x2, {0x0, 0x8, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r3) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r4, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xd) sendto$llc(r0, 0x0, 0x0, 0x4000010, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001e00210027bd7000000000000700000005002a5148ad2857f5d4000000000004000f46fd035e29324aa53830108da9c1faad97d982e9a6813be0582602f81d4ddcb7baa939714385dff39660e9d8fcdca7c7c6bf2832b8286c18c72b20cac0e951e82b40e26878f94a719d58e8edbb2ea92b03d170ae726b74305f01e47cc84db74f93c10774409f8f811c8161e96a7d2d5ac0ad09bc1ad92c25cdb21cb778ea41f5a9d3bc567df37714bc69b4dfb0c69defa87e2599698a2e15c5ea8d5100b66af923f898065ea0b75c31936fc3ba2968f826795329a226c7d589dfa9bc25d3dfe46a68c4d3a75b45c692bb7ed2c897d4dca3cb41dff4711e3caafec12d15ed950c336fa4423bf41b3bef383c87b01dd4f8f3bbe87208"], 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000de80)={0x0, 0x0, &(0x7f000000de40)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x108, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd0, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, {0x4}, {0x4}, {0xac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x8, 0x6, 0x1, 0x0, "66af62fa"}, @NFTA_SET_ELEM_KEY_END={0xa0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x99, 0x1, "c360e32f3c987d42997a3ebadd335ac89d9a81b9df3e5afeae1c0e4e79decc01e6ed607589474be6b113ba0c6e21f1a711b433e1e7e90b0ec323ef14668766c196b80e64bd442f00b9cf9861f65960df060aad15360a95b056322a8e1b83e39d1bfc54375fc517cd304feded59de1b62cf17cf85c9f016212eaceef883ee39772286ed3008ecf5f84ad1a907753a9868d4389e0ec3"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x188}, 0x1, 0x0, 0x0, 0x8040}, 0x894) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) 551.933984ms ago: executing program 0 (id=11125): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00', @ANYRESOCT=r0], 0x28}, 0x400c000) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_batadv\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x0, 0x1889, 0x40, @empty, @local, 0x7, 0x8000, 0x70, 0x746}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x40, 0x7800, 0xc, 0x2, {{0x14, 0x4, 0x3, 0x5, 0x50, 0x67, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@cipso={0x86, 0x1f, 0x2, [{0x1, 0x7, "7a252c23ed"}, {0x6, 0xb, "60fbec20a2780f407e"}, {0x7, 0x7, "ddadfff489"}]}, @timestamp_addr={0x44, 0x1c, 0x38, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0x6}, {@broadcast, 0x2}, {@local, 0x7}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r2, @ANYBLOB="000126bd7000fcdbdf2511000000400001800800030003000000080003000200000008000100", @ANYRES32=r3, @ANYBLOB="140002006e6574706369300000000000000000000800030000000000080003000200000030000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000140002007465616d5f736c6176655f310000000038000180080003000300000008000100", @ANYRES32=r4, @ANYBLOB="080003000000000008000100", @ANYRES32=r5, @ANYBLOB="1480020076657468305f746f5f7465616d000000"], 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'wlan0\x00', {'veth1_macvtap\x00'}, 0x6}) 397.704612ms ago: executing program 0 (id=11126): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009b80)=@newtfilter={0x2a50, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2a20, 0x2, [@TCA_CGROUP_EMATCHES={0x254, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x1ff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x1}, {0x9, 0x9, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x7}, {0xb, 0x60, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x198, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xcc, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x6}, "bb949062dbbdc2bac44e28b16d3db753b8d3bb9abd7d162a53466da118860f9f4ea1875d96136e6f833c42444576a511b23cbd7ebbf3fbf76126a4fd1676d385e02092ae85bd1bf28cf79425df6c64f56f5c365aa68db06eed04fd4cd0842ce614de1fcc66af66e713e787d7e0bf02714084028b134c6dc3a99858de79523cc36cc39298b4a6194c0d3ffb130e8e6e9a856adfee0055d40eb1f4e8f9c429590b2b80f726a8c53f3582f4642e11d622edef967ffdbaa8344b0ef646079b5ecd"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7fff, 0x3, 0x967}, {0x4, 0x6, 0x4, 0x8000}}}, @TCF_EM_IPT={0xac, 0x2, 0x0, 0x0, {{0x1, 0x9, 0x78c}, [@TCA_EM_IPT_MATCH_DATA={0x95, 0x5, "99cca969ec63820efd751cb1b7bb0c0efdb8bb49ecbf75905f0a24650a0ebf4c65e5494c3a72ce18b59139aef1ad9fbd94846e230515edea185b45d7d318c09f4e35f2eaedadb8b1013b1b309b6edd9ef842714c73f7492d6127d19c2dec88205192e4c6b8d302267eab072a2b0b2939e83ac3fc7d5c382c72fc71b751ba548e741c922da77ea9bea9508f303ec5384d28"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x38, 0x2, 0x0, 0x0, {{0x2, 0x9, 0x2f4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x93}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xff88, 0x7, 0x6}, {{0x2, 0x0, 0x1, 0x1}, {0x2}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x39}, {0x6, 0x2, 0x100, 0x68}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf5}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_CGROUP_EMATCHES={0x220, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4b0}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x20c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xac, 0x1, 0x0, 0x0, {{0x4, 0x0, 0x8}, "e2afe2b11afff5a2137a7a31a8f7bf3f347ec0f2c86e8e86c4d30e589a2024863e9a21673fadac2609105c9d10153f85de6d6a4e931c12b3ea877c47108a39063dde26b9cf6602730d4d4f19c7120d0a43aab6534fac124d833da918e0969be3ba8aa24f18b0a072b507281bb81dd8b9156c65f4820c350315f23a02372504efb116be802c8efc5d3b10aa48a2ec796acbd139030c964f8517bde1fcca32be"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x4007}, {{0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x6}, {0x7f, 0x9, 0x4, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xb98, 0x2, 0x2}, {0x8, 0x5, 0x0, "a9bc9d17bf"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x8}, {0x9, 0x1d55, 0x81, 0x81}}}, @TCF_EM_CONTAINER={0xf8, 0x3, 0x0, 0x0, {{0x3, 0x0, 0x5}, "4e0cdeefeb0c19dcca9a71a8e0d9d0661bc5ce9b1f0332e109364f030f70440285037ce433fbab737992629e7c7310e6b06447b60d50574a3fd2ab2cc445bba3a6e477442a973f4fbdb90392f9b4e463419413b0c19747235fcc979861f3a8a00e61dc94ae084165a1b203da69d91f6ae5dd441a2a52078ba960bb2e32aeeb697206186243acc6562a78d4d4739eabc5dcb03050f3d465b77e4bfa227e969f8aaaca75046470d5e0095d809792203733489986de8060bd895ce0769894233ef33212dbfe4f65c48ec6cce8fe96ee096fb6c9fff8e55fb66808b58fb007ad49fbfa4245af29fe7181d1"}}]}]}, @TCA_CGROUP_EMATCHES={0x117c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1134, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x8c, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x4}, "70731e9d973322ed263781be205faed4861362b731b71c69857d5f8e487782e0abbd4b4a366fb8c1c8ac2ab18a7e539166b79662209dda88e9ea8cc35f29762d483490f5cb09f457e6d5bbafd26dfacfa78896bdf79b5d1699cfcfbd65e359b7cce20823ab657c754bfaa6c7e244eb3c1fe050b079d81f498a5d8660f16536c4"}}, @TCF_EM_META={0x28, 0x3, 0x0, 0x0, {{0x0, 0x4, 0xee}, [@TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="070595ccf100a20f144c", @TCF_META_TYPE_VAR="86384dfe31a394", @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1000, 0x8, 0x6}, {0x1}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x8f01}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xac}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0x81}, {0x2, 0x7, 0x38ff, 0x2, 0x6, 0x1}}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x2, 0x9, 0x7}, [@TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x4}, {0xffffffffffffffff}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x90, 0x8, 0xc}, {0x1, 0x1, 0x5}}}, @TCF_EM_CONTAINER={0x100c, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x40}, "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"}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x5, 0x0, 0x0, {{0xf, 0x1, 0xfb3b}, {0x40, 0x129, 0xffb6, 0x1, 0x8}}}]}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x9, 0x2, 0x8001}, {0x47d5, 0x0, 0x3}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x2}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}}}}]}]}, @TCA_CGROUP_POLICE={0x43c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x3, 0x7, 0x40, 0x3, 0x2f, 0x7, 0x2, 0x1, 0x2641, 0xffffffbf, 0x0, 0xf, 0xc1, 0x5, 0x9, 0x5, 0xfffffff7, 0xff, 0xfffbff7f, 0x3, 0x8, 0xffffffff, 0x1, 0x4e4b, 0x4, 0x0, 0x6, 0x5, 0x1, 0x7, 0x10, 0x5, 0x74, 0x4, 0xe5d, 0x400, 0x10000, 0x7, 0x7, 0xffffffff, 0x9, 0x81, 0x0, 0x4, 0x9, 0x3, 0x7fff, 0x7, 0x3d, 0x2, 0x2, 0x8, 0x713, 0x8, 0x1, 0x8, 0x4b2, 0x20f3, 0x3eb, 0x65ad8de0, 0xfffffffd, 0x1, 0x4fe, 0x10001, 0xdafa, 0xc8, 0x827, 0x9, 0x7, 0x1, 0x0, 0x7, 0x7, 0x0, 0x1, 0xcc9, 0x0, 0xc0000000, 0xc07f, 0x95e, 0x80000000, 0xf, 0x9, 0x2, 0x100, 0x25c, 0x3f6ca3f6, 0xd, 0x36f, 0x73b, 0x3, 0xdf72, 0x3, 0x9, 0x4, 0x1, 0x7, 0x3, 0x7ff, 0x6, 0xffffffff, 0x5, 0x2, 0x1000, 0x8001, 0x4, 0x6, 0x3, 0xfffffff7, 0x7, 0x4, 0x40, 0x7, 0x3, 0xd, 0xa3e7, 0x6, 0x401, 0x1, 0x4, 0xfffffff9, 0x3, 0x2, 0x800, 0x4, 0xfffffff7, 0x10, 0x1, 0xa, 0xffffffff, 0xfff, 0x7, 0x7, 0x10000, 0xc, 0x1, 0x800, 0x1, 0x1000, 0x800, 0x0, 0x9, 0xfffffff7, 0xc74e, 0x81, 0x7, 0x7, 0xf6, 0x8, 0x5, 0x7fffffff, 0x5, 0x46db, 0x9, 0x0, 0x8000, 0x0, 0x1, 0x200, 0x4, 0x5, 0x8, 0xfffffff7, 0x4f, 0xea7, 0x6, 0xd, 0xfb4, 0xd5df, 0x9, 0x1, 0x9, 0x3817, 0xa324, 0x3ff, 0x44620000, 0x4, 0x3, 0x4, 0x4, 0xffffffff, 0x3a, 0x2, 0xe, 0x6, 0x1d8d, 0x101, 0x2, 0x2, 0xff, 0x1, 0x1, 0xffffffff, 0x81, 0xfffffffc, 0x7, 0x3, 0x8, 0xe648, 0x1, 0x9, 0x2, 0x2, 0x6, 0x1000000, 0x8, 0xfffffff0, 0x2, 0x0, 0x9, 0xc, 0x3ff, 0x100, 0x7, 0x2, 0x6, 0x30, 0x9, 0x1, 0x9, 0xae4, 0x9, 0x1, 0x7, 0xffffffff, 0x8, 0x7, 0x6, 0xb56b, 0xf, 0x11812, 0x8, 0x23, 0x0, 0x4, 0x9, 0x200, 0x81, 0x3, 0x4, 0x99, 0x2, 0xfffffffa, 0xe, 0xffff, 0x2, 0x0, 0x1, 0x8, 0x2, 0x7, 0x6, 0x8, 0x7fffffff, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8e7f}]}, @TCA_CGROUP_POLICE={0xc58, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xd20}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0xef84, 0x4, 0x9, {0xe, 0x1, 0x5, 0x5b9f, 0x2, 0xf}, {0x5d, 0x0, 0x81, 0x0, 0x8, 0x9}, 0x60b0, 0x0, 0xffff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x33f1, 0x1, 0x8, 0x0, 0x3, 0x2, 0x6, 0x0, 0x80, 0x72, 0x9, 0x7fffffff, 0x3, 0x2, 0x7fffffff, 0x7, 0x7ea6, 0xfffffffd, 0x9, 0x0, 0x4, 0x8, 0xd, 0x8, 0xc, 0xa3d8, 0x1, 0x270c, 0xc24a, 0xfffffffa, 0x81, 0x1, 0xc, 0x7, 0x10, 0x400, 0x9, 0x0, 0x10, 0x3, 0xa, 0xb, 0x80, 0xd, 0x4, 0x9, 0x8, 0xa3, 0x5, 0x3, 0x40, 0x1, 0x3, 0x3, 0x9, 0x9, 0xffffff7f, 0x6, 0x9f, 0x4, 0x8000, 0x4, 0x8, 0xf, 0xffffffff, 0x9, 0x7f, 0x7f, 0x5, 0xb25, 0x6, 0x4, 0x1000, 0x4, 0x7, 0x40, 0x8, 0x5, 0x4, 0x9, 0x200, 0x1ce5, 0x8000, 0xa3c, 0x6df30703, 0x80000001, 0x8, 0x527, 0x2, 0x7ff, 0x1, 0x400, 0x9, 0x1, 0x7, 0x0, 0x7, 0x4, 0x2, 0x3ff, 0xdd36, 0x4, 0x800, 0x8, 0x1, 0xffffff7f, 0x4, 0x2a897e25, 0x401, 0x0, 0x7, 0x5, 0xffff, 0x7, 0x2, 0x5, 0x1, 0x4, 0xd, 0xa4, 0x7f, 0xa9, 0xa, 0x2, 0x9, 0x3, 0x6, 0x1, 0x7ff, 0x7, 0x6, 0x4, 0xffffffff, 0x3, 0x3, 0x3, 0x7fffffff, 0xfffffff9, 0xfffffffb, 0x7, 0x7fffffff, 0x0, 0x1, 0xe3, 0x3, 0x80, 0xfffffffa, 0x559, 0xdd4, 0x1c, 0x3ff, 0x6, 0x2, 0x1, 0x188b, 0x0, 0x3, 0xfff, 0x0, 0xd755, 0x5, 0x1, 0x9, 0x5, 0x7, 0x2c667b41, 0x2, 0x7c, 0x4, 0x0, 0x85d, 0xebab, 0x6, 0x5, 0x8001, 0xffffff8d, 0x5, 0x4, 0x3, 0x6912b3a9, 0x4e5f, 0x7, 0xb, 0x80, 0x8000, 0x8, 0x8, 0x3, 0x8, 0x2, 0xe19, 0x3, 0x3, 0xd, 0x5, 0xab, 0x9, 0x5, 0x9, 0xfffffff7, 0x401, 0x3, 0x4, 0x80, 0xa, 0x8000, 0x5, 0x6, 0x5, 0xb, 0x4, 0x40, 0x3e, 0x6, 0x7, 0xd114, 0x50e3aa14, 0x8, 0x1000, 0x2, 0x7fff, 0xb4, 0x8, 0x0, 0x7, 0x57c, 0x0, 0x8, 0x4, 0x8, 0x8, 0x7, 0x400, 0x3, 0x9, 0xff0, 0x5, 0xffffffd9, 0x9, 0x2, 0x6, 0xfffffffd, 0x2, 0xb, 0x5, 0x4, 0x7, 0x7, 0x200, 0x7ff, 0x2, 0x2, 0x3, 0x32, 0x77b]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x16, 0x5, 0x8, 0x0, 0x7, 0x3, 0x3, 0x8, 0x1, 0x0, 0x6cf, 0x3, 0x9, 0x8, 0xd7, 0x10, 0x7, 0x5, 0x6, 0x6, 0x5ec6, 0x67c2, 0x9, 0x400, 0x9, 0x4, 0x18, 0x0, 0x25, 0xfffffffb, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x3, 0x0, 0x0, 0x8, 0x8, 0x0, 0x4, 0x9, 0x28, 0x6, 0x4, 0x4, 0xb1, 0x7, 0x2, 0x8001, 0x2, 0x6, 0xd, 0x0, 0x0, 0x7, 0x26f, 0x4, 0x2, 0x38, 0x6, 0x1, 0x1, 0xffff1e20, 0x3, 0xb, 0x81, 0xaea0, 0x4, 0xa, 0x8, 0x401, 0x0, 0x3, 0xd90, 0x68d, 0x814c, 0x7, 0x2, 0x0, 0x3, 0x8, 0x81, 0x4, 0x401, 0x4, 0x4, 0x8, 0xffffff01, 0x7, 0x4, 0x1, 0x4, 0x3, 0x6, 0xe, 0x9, 0x5, 0xb, 0x2, 0x3, 0x4, 0x409, 0x3, 0x8, 0xe7, 0x2, 0x9, 0x3, 0x7, 0x6, 0x3, 0xc9a, 0x1, 0x81, 0xfff, 0x3, 0x7, 0x80, 0xffffffff, 0x401, 0x0, 0x1, 0xffffffff, 0x3, 0x85, 0x68, 0x1, 0x7, 0x1, 0x40, 0x7, 0x6, 0x100, 0xffffffff, 0xb1, 0x1, 0x2, 0xfffffffc, 0x5, 0xc, 0x5, 0x5, 0x0, 0x8, 0x0, 0x9, 0x7, 0xfff, 0x1, 0x0, 0xfffffffa, 0x3, 0x3, 0x3, 0x7, 0x9, 0x6, 0x101, 0x7, 0x0, 0x3, 0x2, 0x40, 0x7ff, 0x88e6, 0x0, 0x8, 0x101, 0x3, 0x3, 0x2, 0x7, 0x208, 0x7fff, 0x1, 0xad4, 0x2, 0x0, 0xc1, 0x1, 0x6, 0x8, 0x3, 0x3, 0xffff, 0x10001, 0x6, 0x9, 0x7, 0xfffffff8, 0x460f0cda, 0xffff7a33, 0xffffffff, 0x7, 0x1, 0x8, 0x4, 0x1, 0x33, 0x1, 0x2, 0x80, 0x9026, 0x3, 0x1, 0x879, 0x2, 0x0, 0x100, 0x6, 0x5, 0xc00000, 0x8, 0x6, 0x8, 0x5, 0x1, 0x71, 0x444e, 0x9, 0x4, 0x1, 0xdf, 0x4, 0x3, 0x7, 0x200, 0xfffffffa, 0x4, 0x9, 0x6, 0x40, 0x8b7, 0x10000, 0xfffffff8, 0x1, 0x8, 0xa8, 0x7ff, 0x7, 0x2, 0x9, 0x5, 0x3, 0x4, 0x4, 0x1, 0x10001, 0x3, 0x87, 0x200]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0xffff, 0xffff2f1f, 0x4, 0x0, 0x9, 0x8f8, 0x5, 0x971, 0x575, 0x3, 0x6, 0x1, 0x0, 0x8, 0x7ff, 0xffffff95, 0x4e923fee, 0x200000, 0x1, 0xf764, 0x8, 0x2, 0x9a, 0x1020000, 0x4, 0x1, 0x1, 0xea0, 0x6, 0x7fffffff, 0x1c3c6bca, 0x1, 0x0, 0x80, 0x9, 0xa, 0x5, 0x2, 0x4, 0x2, 0x3, 0x3, 0x3, 0x4, 0x7, 0x7, 0xff, 0xff, 0x4, 0x830, 0x3, 0x7, 0x4, 0x2, 0x1, 0x2, 0xfffffffe, 0x8, 0x6b, 0x4, 0x6, 0x4, 0x7, 0x7, 0x3, 0x10, 0x0, 0xe, 0x80000001, 0x8, 0xb, 0x7, 0x20a, 0xb, 0x8, 0x3, 0x5, 0xffffffff, 0x200, 0xf89b, 0x9, 0x4, 0x8, 0x3, 0xfffffc00, 0x7, 0x7, 0x0, 0xfffffffe, 0x0, 0x5, 0x200, 0x0, 0x4, 0x9, 0x28, 0x7, 0xa, 0x0, 0xd3b, 0x23be, 0x7, 0x5, 0x1ff, 0x8, 0x7f, 0x4, 0x4322, 0x1, 0x3, 0x1ff, 0x101, 0x0, 0x3, 0x7, 0x800, 0x2, 0x1, 0xfff, 0x9, 0xfffffff9, 0x18b, 0x6a, 0x7, 0x5a, 0x1, 0x400, 0x1f21, 0x4, 0x4, 0x3ff, 0x8, 0x3, 0x1, 0x6, 0x8fd1, 0x1c000000, 0x9, 0x7, 0x1, 0x9, 0x2, 0x5, 0x2, 0xa, 0x1ff, 0x5, 0x3, 0x0, 0xfffffffc, 0x9, 0x8, 0x1, 0x0, 0x2, 0x10000, 0x2, 0x4, 0xa, 0x2, 0x1c6f, 0x6, 0x6, 0x10, 0x30000000, 0x2, 0x6, 0x6, 0x4, 0xa, 0x1, 0x3, 0x100, 0xd792, 0x5, 0x3, 0x40, 0x101, 0x3, 0x4, 0x1, 0x7f, 0x4, 0x8, 0x9, 0x401, 0x5, 0x6, 0x735, 0x3, 0x7, 0x7abba55c, 0x8, 0xa8fd, 0xb, 0x9, 0x6, 0xe7d, 0x9, 0x4, 0x7, 0x7fff, 0x2, 0x400, 0x1, 0x0, 0xa, 0x200, 0x7, 0x7f, 0x2, 0x3310, 0x401, 0x3, 0x4, 0x8, 0x5, 0xfffffff9, 0x2, 0x1, 0xde000000, 0x2, 0x4068d107, 0x1, 0x100, 0x2, 0x80000001, 0x2a92, 0x4, 0xfffffeff, 0x0, 0x9, 0xfffffffd, 0x0, 0x2, 0x4, 0x4, 0x32a6, 0x8, 0x40000000, 0xf, 0x5, 0x8, 0x101, 0x2, 0x7, 0x0, 0xa4, 0x3, 0x100, 0x40, 0xe03b, 0x4, 0x6]}]}, @TCA_CGROUP_ACT={0x394, 0x1, [@m_pedit={0xd0, 0x10, 0x0, 0x0, {{0xa}, {0x4}, {0xa4, 0x6, "7df2b8770dac8b0d2fec9af709aa3b5c850449a033ca7477144080226789cda42cc5b84fe202a6a0cec99190e5cf876ef6f8b1317c7d7ed2cf3c0b2e190ab07a71f1bd011d5e0c69694dde33cf48a60371ab0a4a446c4e9f9a7b156519122de0c76152fdf94f336cb4ff24f72c474f40c7fabb62eb507547e52790d761b45365c8a249b364aa90318bec827239736716b2fab26585c345cbb7781d9c492acbc6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x170, 0x10, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0xe5, 0x6, "50450e8203cc14af56776175d5c8f2a79b49616ae44cd25ff0c8b5ef0fa18833debebfdd7090d103c1b632dbad6d32826b2694a5b510e75ba3708e3b95b488b1deb31603783219322898e4d5720b243d9919e886a799343d7bfc3c0de79473327f0283916db1b4739dd9e0579f2fe6007f81d0f542bab7aa23912effec59f99ba7ee5ac798997d17b3f8724cf913f4785508065d972b88564f71f577bc955f6326d8f3c45c22578190d999eb975f16f68bfbbe9b8ee7f239a77f19eb1e9fe3bd2ffaa6a7973aa04f781659f6563d6755c81f3c84a1bc5fe431e59dcb2d85b18b6e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x150, 0x9, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x2, 0x0, 0x1000, 0x9}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xbdc}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffff9}]}, {0xea, 0x6, "13714b45e310593f7e7dc46fd131082dcad8b6eb0d37679138fe78d00361f7badba14fd87e40b454b4fe923fcf0e7ec10def14adc5b2c1b53d2cbab2968e22180bc888e55c8d6f8f11c9ab9b3890139a741eda0364b1acf54e35f23d03810d2a2498b91083d659c75eb48f2e779be77b729a6c4b8311809a08a1164bc693e7cd9101b7ec311bd70e432d664c6872fafe48f492e05291be8856ffb6dad47e14d0f205ebc8e73714fb9e56230e874c14b1fe01faaed44bd57a232b5494e72de34fb035de351c22fff081da0bfdaea84391a4bd60089b4c221b02c5b6ce7b15dee519249b163b98"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_CGROUP_POLICE={0x4}]}}]}, 0x2a50}}, 0x20040054) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001e09000000f850845ef7635633a6617faf1409400000000000000000020700", @ANYRES32=r8, @ANYBLOB="000002000a0002000000000000000000"], 0x28}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000182841f8debc34d561f12fb70ecf56907b000100fddd7e20a72821645c0000000000001c0002000000fd0000010000000006001500010000001400168010000800"], 0x38}}, 0x0) connect$can_j1939(r9, &(0x7f0000000140)={0x1d, r10}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2000000}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10080400764b040008002e00004000003208135b20c8ea6b777a617659be7271399dc1f681bb9e27fefb12de07fb1477b6f8e3c17f56eaee1b9198b5df358177237b500ecf64639c33854ad9ee55fbd263944299b9f2d89afee589255e0c672f8ba06bc03d724777f8348a18ff314d03b43ac720ac3bf22f8047a9dbe146ed04aeda99ea652d44bdb53c6a"], 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) sendmmsg(r9, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) 358.525679ms ago: executing program 4 (id=11127): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1000, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) 0s ago: executing program 2 (id=11128): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1000, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 65) kernel console output (not intermixed with test programs): invalid length. [ 1370.453696][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9610'. [ 1370.544787][T10780] hsr_slave_1 (unregistering): left promiscuous mode [ 1371.552497][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9614'. [ 1371.845235][T10828] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9620'. [ 1371.881656][T10828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9620'. [ 1372.148092][T10843] tipc: Started in network mode [ 1372.153742][T10843] tipc: Node identity 32a261507346, cluster identity 4711 [ 1372.162304][T10843] tipc: Enabled bearer , priority 0 [ 1372.171044][T10843] syzkaller0: entered promiscuous mode [ 1372.176782][T10843] syzkaller0: entered allmulticast mode [ 1372.291048][T10843] tipc: Resetting bearer [ 1373.253108][T10855] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1373.284467][T10842] tipc: Resetting bearer [ 1373.342129][T10842] tipc: Disabling bearer [ 1373.380957][T26053] tipc: Node number set to 1105486160 [ 1373.386922][ T6848] team_slave_0: entered promiscuous mode [ 1373.395067][ T6848] team_slave_1: entered promiscuous mode [ 1373.636091][T10866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1373.842748][T10885] __nla_validate_parse: 2 callbacks suppressed [ 1373.842769][T10885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9635'. [ 1373.965581][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9636'. [ 1374.200259][T10881] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9636'. [ 1374.337930][T10904] xt_TCPMSS: Only works on TCP SYN packets [ 1374.554273][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9643'. [ 1374.576257][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9643'. [ 1374.646716][T10909] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.861593][T10922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9646'. [ 1374.874811][T10922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9646'. [ 1374.905718][T10909] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.947719][T10916] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 1374.995297][T10916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9643'. [ 1375.062247][T10909] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.145146][T10930] dvmrp1: entered allmulticast mode [ 1375.366722][T10909] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.507452][T10927] tipc: Resetting bearer [ 1375.764138][T10943] bond1: (slave bond_slave_1): Device is not our slave [ 1375.771545][T10943] bond1: option active_slave: invalid value (bond_slave_1) [ 1375.784237][T10943] bond1 (unregistering): Released all slaves [ 1375.861074][T10927] tipc: Resetting bearer [ 1376.094548][T10942] lo speed is unknown, defaulting to 1000 [ 1376.326905][ T8929] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.487145][ T8929] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.667353][T30760] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.737410][ T8929] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.105161][T10962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9656'. [ 1377.207721][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9656'. [ 1377.221045][T10961] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1377.454147][T10973] Bluetooth: MGMT ver 1.23 [ 1377.852994][T10981] lo speed is unknown, defaulting to 1000 [ 1378.020959][T10990] netlink: 'syz.3.9662': attribute type 1 has an invalid length. [ 1378.355159][T10993] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 1378.568697][T10999] lo speed is unknown, defaulting to 1000 [ 1378.603455][T11001] sctp: [Deprecated]: syz.3.9664 (pid 11001) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1378.603455][T11001] Use struct sctp_sack_info instead [ 1378.682689][T11002] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1378.699234][T11002] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1378.718098][T11001] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1378.880040][T11010] __nla_validate_parse: 4 callbacks suppressed [ 1378.880063][T11010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9666'. [ 1379.006195][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9668'. [ 1379.572587][T11027] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9671'. [ 1379.995267][T28279] IPVS: starting estimator thread 0... [ 1380.112384][T11038] IPVS: using max 23 ests per chain, 55200 per kthread [ 1380.363059][T11046] syzkaller0: entered promiscuous mode [ 1380.369439][T11046] syzkaller0: entered allmulticast mode [ 1380.556696][T11051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9679'. [ 1380.599280][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9679'. [ 1380.863201][T11061] FAULT_INJECTION: forcing a failure. [ 1380.863201][T11061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1380.901983][T11061] CPU: 0 UID: 0 PID: 11061 Comm: syz.3.9682 Not tainted syzkaller #0 PREEMPT(full) [ 1380.902015][T11061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1380.902028][T11061] Call Trace: [ 1380.902037][T11061] [ 1380.902047][T11061] dump_stack_lvl+0xe8/0x150 [ 1380.902087][T11061] should_fail_ex+0x412/0x560 [ 1380.902125][T11061] _copy_from_user+0x2d/0xb0 [ 1380.902148][T11061] ___sys_sendmsg+0x1c6/0x360 [ 1380.902172][T11061] ? __lock_acquire+0x6b5/0x2cf0 [ 1380.902206][T11061] ? __pfx____sys_sendmsg+0x10/0x10 [ 1380.902235][T11061] ? kstrtouint+0x6e/0xe0 [ 1380.902303][T11061] ? __fget_files+0x2a/0x420 [ 1380.902325][T11061] ? __fget_files+0x3a0/0x420 [ 1380.902359][T11061] __sys_sendmmsg+0x27c/0x4e0 [ 1380.902389][T11061] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1380.902408][T11061] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1380.902468][T11061] ? ksys_write+0x242/0x270 [ 1380.902498][T11061] ? __pfx_ksys_write+0x10/0x10 [ 1380.902532][T11061] __x64_sys_sendmmsg+0xa0/0xc0 [ 1380.902555][T11061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.902577][T11061] do_syscall_64+0x15f/0xf80 [ 1380.902605][T11061] ? trace_irq_disable+0x3b/0x140 [ 1380.902633][T11061] ? clear_bhb_loop+0x40/0x90 [ 1380.902659][T11061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.902680][T11061] RIP: 0033:0x7f3ea4d9cdd9 [ 1380.902701][T11061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1380.902719][T11061] RSP: 002b:00007f3ea5c2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1380.902743][T11061] RAX: ffffffffffffffda RBX: 00007f3ea5015fa0 RCX: 00007f3ea4d9cdd9 [ 1380.902759][T11061] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1380.902772][T11061] RBP: 00007f3ea5c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1380.902785][T11061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1380.902799][T11061] R13: 00007f3ea5016038 R14: 00007f3ea5015fa0 R15: 00007ffcfa4a0f98 [ 1380.902833][T11061] [ 1381.329053][T11063] tipc: Started in network mode [ 1381.339926][T11063] tipc: Node identity 96473b61767b, cluster identity 4711 [ 1381.347908][T11063] tipc: Enabled bearer , priority 0 [ 1381.357696][T11063] syzkaller0: entered promiscuous mode [ 1381.363300][T11063] syzkaller0: entered allmulticast mode [ 1381.866372][T11068] tipc: Resetting bearer [ 1381.905354][T11062] tipc: Resetting bearer [ 1382.013296][T11062] tipc: Disabling bearer [ 1382.217400][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9689'. [ 1382.253967][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9689'. [ 1382.254145][T30753] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1382.325063][T30753] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1382.328613][T11099] netlink: 260 bytes leftover after parsing attributes in process `syz.1.9689'. [ 1382.353017][T30753] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1382.383336][T30753] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1382.457808][T11103] FAULT_INJECTION: forcing a failure. [ 1382.457808][T11103] name failslab, interval 1, probability 0, space 0, times 0 [ 1382.488043][T11103] CPU: 1 UID: 0 PID: 11103 Comm: syz.3.9694 Not tainted syzkaller #0 PREEMPT(full) [ 1382.488084][T11103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1382.488097][T11103] Call Trace: [ 1382.488106][T11103] [ 1382.488116][T11103] dump_stack_lvl+0xe8/0x150 [ 1382.488154][T11103] should_fail_ex+0x412/0x560 [ 1382.488193][T11103] should_failslab+0xa8/0x100 [ 1382.488228][T11103] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1382.488254][T11103] ? __alloc_skb+0x186/0x7d0 [ 1382.488274][T11103] ? __alloc_skb+0x1d0/0x7d0 [ 1382.488290][T11103] ? __local_bh_enable_ip+0xd0/0x130 [ 1382.488326][T11103] __alloc_skb+0x1d0/0x7d0 [ 1382.488349][T11103] netlink_sendmsg+0x5d4/0xb40 [ 1382.488381][T11103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1382.488407][T11103] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1382.488430][T11103] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1382.488457][T11103] ____sys_sendmsg+0x972/0x9f0 [ 1382.488489][T11103] ? __might_fault+0xaf/0x130 [ 1382.488519][T11103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1382.488551][T11103] ? import_iovec+0x73/0xa0 [ 1382.488578][T11103] ___sys_sendmsg+0x2a5/0x360 [ 1382.488599][T11103] ? __lock_acquire+0x6b5/0x2cf0 [ 1382.488633][T11103] ? __pfx____sys_sendmsg+0x10/0x10 [ 1382.488662][T11103] ? kstrtouint+0x6e/0xe0 [ 1382.488718][T11103] ? __fget_files+0x2a/0x420 [ 1382.488739][T11103] ? __fget_files+0x3a0/0x420 [ 1382.488770][T11103] __sys_sendmmsg+0x27c/0x4e0 [ 1382.488799][T11103] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1382.488819][T11103] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1382.488875][T11103] ? ksys_write+0x242/0x270 [ 1382.488904][T11103] ? __pfx_ksys_write+0x10/0x10 [ 1382.488937][T11103] __x64_sys_sendmmsg+0xa0/0xc0 [ 1382.488960][T11103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.488979][T11103] do_syscall_64+0x15f/0xf80 [ 1382.489006][T11103] ? trace_irq_disable+0x3b/0x140 [ 1382.489032][T11103] ? clear_bhb_loop+0x40/0x90 [ 1382.489059][T11103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.489079][T11103] RIP: 0033:0x7f3ea4d9cdd9 [ 1382.489099][T11103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1382.489117][T11103] RSP: 002b:00007f3ea5c2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1382.489139][T11103] RAX: ffffffffffffffda RBX: 00007f3ea5015fa0 RCX: 00007f3ea4d9cdd9 [ 1382.489154][T11103] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1382.489169][T11103] RBP: 00007f3ea5c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1382.489182][T11103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1382.489194][T11103] R13: 00007f3ea5016038 R14: 00007f3ea5015fa0 R15: 00007ffcfa4a0f98 [ 1382.489227][T11103] [ 1382.795568][T11107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9696'. [ 1382.805730][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9696'. [ 1383.177118][T11119] syzkaller0: entered promiscuous mode [ 1383.186547][T11119] syzkaller0: entered allmulticast mode [ 1384.146367][T11145] FAULT_INJECTION: forcing a failure. [ 1384.146367][T11145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1384.185840][T11145] CPU: 0 UID: 0 PID: 11145 Comm: syz.3.9708 Not tainted syzkaller #0 PREEMPT(full) [ 1384.185870][T11145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1384.185883][T11145] Call Trace: [ 1384.185891][T11145] [ 1384.185900][T11145] dump_stack_lvl+0xe8/0x150 [ 1384.185937][T11145] should_fail_ex+0x412/0x560 [ 1384.185974][T11145] _copy_from_iter+0x1d3/0x1670 [ 1384.186000][T11145] ? rcu_is_watching+0x15/0xb0 [ 1384.186028][T11145] ? __pfx__copy_from_iter+0x10/0x10 [ 1384.186057][T11145] ? netlink_sendmsg+0x650/0xb40 [ 1384.186077][T11145] ? skb_put+0x11b/0x210 [ 1384.186101][T11145] netlink_sendmsg+0x6c0/0xb40 [ 1384.186132][T11145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1384.186157][T11145] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1384.186180][T11145] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1384.186207][T11145] ____sys_sendmsg+0x972/0x9f0 [ 1384.186230][T11145] ? __might_fault+0xaf/0x130 [ 1384.186259][T11145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1384.186299][T11145] ? import_iovec+0x73/0xa0 [ 1384.186326][T11145] ___sys_sendmsg+0x2a5/0x360 [ 1384.186346][T11145] ? __lock_acquire+0x6b5/0x2cf0 [ 1384.186381][T11145] ? __pfx____sys_sendmsg+0x10/0x10 [ 1384.186408][T11145] ? kstrtouint+0x6e/0xe0 [ 1384.186465][T11145] ? __fget_files+0x2a/0x420 [ 1384.186485][T11145] ? __fget_files+0x3a0/0x420 [ 1384.186516][T11145] __sys_sendmmsg+0x27c/0x4e0 [ 1384.186544][T11145] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1384.186564][T11145] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1384.186620][T11145] ? ksys_write+0x242/0x270 [ 1384.186648][T11145] ? __pfx_ksys_write+0x10/0x10 [ 1384.186680][T11145] __x64_sys_sendmmsg+0xa0/0xc0 [ 1384.186701][T11145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.186722][T11145] do_syscall_64+0x15f/0xf80 [ 1384.186754][T11145] ? trace_irq_disable+0x3b/0x140 [ 1384.186779][T11145] ? clear_bhb_loop+0x40/0x90 [ 1384.186804][T11145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.186823][T11145] RIP: 0033:0x7f3ea4d9cdd9 [ 1384.186843][T11145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1384.186860][T11145] RSP: 002b:00007f3ea5c2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1384.186884][T11145] RAX: ffffffffffffffda RBX: 00007f3ea5015fa0 RCX: 00007f3ea4d9cdd9 [ 1384.186900][T11145] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1384.186913][T11145] RBP: 00007f3ea5c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1384.186926][T11145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1384.186937][T11145] R13: 00007f3ea5016038 R14: 00007f3ea5015fa0 R15: 00007ffcfa4a0f98 [ 1384.186971][T11145] [ 1384.867245][T11165] tipc: Enabled bearer , priority 0 [ 1384.896067][T11168] __nla_validate_parse: 1 callbacks suppressed [ 1384.896090][T11168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9716'. [ 1384.918054][T11165] syzkaller0: entered promiscuous mode [ 1384.926429][T11165] syzkaller0: entered allmulticast mode [ 1384.962890][T11170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9717'. [ 1384.999648][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9717'. [ 1385.349659][T11188] FAULT_INJECTION: forcing a failure. [ 1385.349659][T11188] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.401932][T11188] CPU: 1 UID: 0 PID: 11188 Comm: syz.3.9720 Not tainted syzkaller #0 PREEMPT(full) [ 1385.401963][T11188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1385.401976][T11188] Call Trace: [ 1385.401985][T11188] [ 1385.401995][T11188] dump_stack_lvl+0xe8/0x150 [ 1385.402036][T11188] should_fail_ex+0x412/0x560 [ 1385.402075][T11188] should_failslab+0xa8/0x100 [ 1385.402109][T11188] ? skb_clone+0x212/0x3a0 [ 1385.402134][T11188] kmem_cache_alloc_noprof+0x87/0x650 [ 1385.402160][T11188] ? __netlink_lookup+0xc6/0x8b0 [ 1385.402191][T11188] skb_clone+0x212/0x3a0 [ 1385.402219][T11188] __netlink_deliver_tap+0x404/0x850 [ 1385.402264][T11188] ? netlink_deliver_tap+0x2e/0x1b0 [ 1385.402288][T11188] netlink_deliver_tap+0x19c/0x1b0 [ 1385.402312][T11188] netlink_unicast+0x730/0x8e0 [ 1385.402352][T11188] netlink_sendmsg+0x813/0xb40 [ 1385.402386][T11188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1385.402413][T11188] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1385.402437][T11188] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1385.402466][T11188] ____sys_sendmsg+0x972/0x9f0 [ 1385.402490][T11188] ? __might_fault+0xaf/0x130 [ 1385.402520][T11188] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1385.402555][T11188] ? import_iovec+0x73/0xa0 [ 1385.402584][T11188] ___sys_sendmsg+0x2a5/0x360 [ 1385.402607][T11188] ? __lock_acquire+0x6b5/0x2cf0 [ 1385.402643][T11188] ? __pfx____sys_sendmsg+0x10/0x10 [ 1385.402673][T11188] ? kstrtouint+0x6e/0xe0 [ 1385.402734][T11188] ? __fget_files+0x2a/0x420 [ 1385.402755][T11188] ? __fget_files+0x3a0/0x420 [ 1385.402790][T11188] __sys_sendmmsg+0x27c/0x4e0 [ 1385.402820][T11188] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1385.402842][T11188] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1385.402903][T11188] ? ksys_write+0x242/0x270 [ 1385.402932][T11188] ? __pfx_ksys_write+0x10/0x10 [ 1385.402967][T11188] __x64_sys_sendmmsg+0xa0/0xc0 [ 1385.402990][T11188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.403013][T11188] do_syscall_64+0x15f/0xf80 [ 1385.403040][T11188] ? trace_irq_disable+0x3b/0x140 [ 1385.403067][T11188] ? clear_bhb_loop+0x40/0x90 [ 1385.403092][T11188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.403110][T11188] RIP: 0033:0x7f3ea4d9cdd9 [ 1385.403128][T11188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1385.403146][T11188] RSP: 002b:00007f3ea5c2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1385.403167][T11188] RAX: ffffffffffffffda RBX: 00007f3ea5015fa0 RCX: 00007f3ea4d9cdd9 [ 1385.403183][T11188] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1385.403197][T11188] RBP: 00007f3ea5c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1385.403208][T11188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1385.403219][T11188] R13: 00007f3ea5016038 R14: 00007f3ea5015fa0 R15: 00007ffcfa4a0f98 [ 1385.403343][T11188] [ 1386.114697][T11175] tipc: Resetting bearer [ 1386.180871][T11162] tipc: Resetting bearer [ 1386.212882][T11191] Unsupported ieee802154 address type: 0 [ 1386.225260][T11162] tipc: Disabling bearer [ 1386.245564][T11191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9721'. [ 1386.271241][T11191] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1386.285258][ T30] audit: type=1107 audit(1777091998.249:24): pid=11194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1386.299327][ T6848] tipc: Node number set to 4268141789 [ 1386.519779][ T6848] IPVS: starting estimator thread 0... [ 1386.539796][T11211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9728'. [ 1386.552751][T11201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9725'. [ 1386.632704][T11219] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9729'. [ 1386.641893][T11208] IPVS: using max 23 ests per chain, 55200 per kthread [ 1386.685656][T11221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9732'. [ 1386.697588][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9732'. [ 1386.811078][T11233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9734'. [ 1388.146326][T11264] tipc: Enabled bearer , priority 0 [ 1388.169629][T11264] syzkaller0: entered promiscuous mode [ 1388.201186][T11264] syzkaller0: entered allmulticast mode [ 1388.335119][T11264] tipc: Resetting bearer [ 1388.761004][T11263] tipc: Resetting bearer [ 1388.840372][T11277] sctp: [Deprecated]: syz.1.9744 (pid 11277) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1388.840372][T11277] Use struct sctp_sack_info instead [ 1388.883846][T11263] tipc: Disabling bearer [ 1388.906537][T11279] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1389.438978][T11295] bond0: entered promiscuous mode [ 1389.524948][T11295] bond_slave_0: entered promiscuous mode [ 1389.568563][T11295] bond_slave_1: entered promiscuous mode [ 1389.601042][T11295] batadv_slave_0: entered promiscuous mode [ 1389.607336][T11295] batadv_slave_0: left promiscuous mode [ 1389.692559][T11295] bond0: left promiscuous mode [ 1389.706302][T11295] bond_slave_0: left promiscuous mode [ 1389.721230][T11295] bond_slave_1: left promiscuous mode [ 1389.754247][T11306] žÿ: renamed from team_slave_1 (while UP) [ 1390.135101][T11316] tipc: Enabling of bearer rejected, failed to enable media [ 1390.793341][T11324] __nla_validate_parse: 3 callbacks suppressed [ 1390.793364][T11324] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9758'. [ 1390.829482][T11324] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9758'. [ 1391.263615][T11339] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1391.374504][T11347] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1391.696359][T11360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9769'. [ 1392.033972][T11371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9773'. [ 1392.048692][T11373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9774'. [ 1392.080037][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9773'. [ 1392.176438][T11373] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1392.193462][T11373] team0: Device batadv4 is up. Set it down before adding it as a team port [ 1392.319478][T11381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9776'. [ 1393.368853][T11403] netlink: 'syz.2.9779': attribute type 8 has an invalid length. [ 1393.386715][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9779'. [ 1393.438281][T11403] bond0: entered promiscuous mode [ 1393.449312][T11403] bond_slave_0: entered promiscuous mode [ 1393.463813][T11403] bond_slave_1: entered promiscuous mode [ 1393.473114][T11403] gretap0: entered promiscuous mode [ 1393.509822][T11411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9784'. [ 1393.521396][T11403] hsr1: entered promiscuous mode [ 1393.549886][T11411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1393.804385][T11432] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9785'. [ 1395.302367][T11480] syzkaller0: entered promiscuous mode [ 1395.320203][T11480] syzkaller0: entered allmulticast mode [ 1396.246384][T11496] __nla_validate_parse: 11 callbacks suppressed [ 1396.246416][T11496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9803'. [ 1396.297933][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9803'. [ 1396.359983][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9804'. [ 1396.386313][T11504] netlink: 34 bytes leftover after parsing attributes in process `syz.0.9805'. [ 1396.785667][T11510] dvmrp1: left allmulticast mode [ 1397.448572][T11524] tipc: Enabled bearer , priority 0 [ 1397.504621][T11525] syzkaller0: entered promiscuous mode [ 1397.571497][T11525] syzkaller0: entered allmulticast mode [ 1397.636285][T11522] tipc: Resetting bearer [ 1397.795914][T11521] tipc: Resetting bearer [ 1397.895268][T11521] tipc: Disabling bearer [ 1398.067587][T11552] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9811'. [ 1398.203837][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9816'. [ 1398.237458][T11571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9818'. [ 1398.270905][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9818'. [ 1398.284481][T11567] syzkaller0: entered promiscuous mode [ 1398.290184][T11567] syzkaller0: entered allmulticast mode [ 1398.304592][T11569] veth1_macvtap: left promiscuous mode [ 1403.352374][T11580] tipc: Started in network mode [ 1403.364808][T11580] tipc: Node identity 463a8db81b47, cluster identity 4711 [ 1403.397299][T11580] tipc: Enabled bearer , priority 0 [ 1403.421252][T11581] syzkaller0: entered promiscuous mode [ 1403.431505][T11581] syzkaller0: entered allmulticast mode [ 1403.445376][T11591] tipc: Resetting bearer [ 1403.502159][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9824'. [ 1403.511902][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9824'. [ 1403.633151][T11591] tipc: Resetting bearer [ 1403.727957][T11591] tipc: Disabling bearer [ 1403.817789][T11625] sctp: [Deprecated]: syz.2.9828 (pid 11625) Use of int in max_burst socket option deprecated. [ 1403.817789][T11625] Use struct sctp_assoc_value instead [ 1403.910154][T11620] lo speed is unknown, defaulting to 1000 [ 1403.910207][T11629] netlink: 'syz.1.9829': attribute type 12 has an invalid length. [ 1404.123158][T11638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9833'. [ 1404.161844][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9833'. [ 1404.534898][T11620] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9827'. [ 1404.944407][T11654] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9836'. [ 1404.988403][T11654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9836'. [ 1405.201598][T11654] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1405.212113][T11661] bond3: entered allmulticast mode [ 1405.321538][T11669] tipc: Enabled bearer , priority 0 [ 1405.343673][T11669] syzkaller0: entered promiscuous mode [ 1405.355726][T11669] syzkaller0: entered allmulticast mode [ 1405.381353][T11660] lo speed is unknown, defaulting to 1000 [ 1405.490711][T11669] tipc: Resetting bearer [ 1405.516244][T11682] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9842'. [ 1405.708750][T11668] tipc: Resetting bearer [ 1405.744173][T11668] tipc: Disabling bearer [ 1405.778793][T11687] lo speed is unknown, defaulting to 1000 [ 1406.272829][T11703] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9848'. [ 1406.362389][T11708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9850'. [ 1406.460332][T11701] syzkaller0: entered promiscuous mode [ 1406.466645][T11701] syzkaller0: entered allmulticast mode [ 1406.487268][T11710] openvswitch: netlink: IP tunnel dst address not specified [ 1406.538240][T11710] netlink: 'syz.3.9851': attribute type 20 has an invalid length. [ 1411.953222][T11710] netlink: 'syz.3.9851': attribute type 20 has an invalid length. [ 1411.954655][T11720] __nla_validate_parse: 2 callbacks suppressed [ 1411.954672][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9855'. [ 1411.961756][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9851'. [ 1411.975668][T11720] netlink: 'syz.4.9855': attribute type 11 has an invalid length. [ 1412.007277][ T8931] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.031304][ T8931] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.103331][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9855'. [ 1412.112367][ T8931] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.113287][ T8931] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.140168][T11720] netlink: 'syz.4.9855': attribute type 11 has an invalid length. [ 1412.185150][ T8931] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.206435][ T8931] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.235991][ T8931] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.264797][ T8931] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1412.366458][T11747] netlink: 27 bytes leftover after parsing attributes in process `syz.4.9862'. [ 1412.516868][T11755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9866'. [ 1412.527350][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9866'. [ 1412.751326][T11764] syzkaller1: entered promiscuous mode [ 1412.778552][T11764] syzkaller1: entered allmulticast mode [ 1413.694939][T11759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.702779][T11759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.783724][T11759] team_slave_0: left promiscuous mode [ 1413.801812][T11759] team_slave_1: left promiscuous mode [ 1414.220676][T11759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1414.269826][T11759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1414.691478][T11759] hsr1: left promiscuous mode [ 1414.715038][T11759] syzkaller1: left promiscuous mode [ 1414.730505][T11759] syzkaller1: left allmulticast mode [ 1414.790113][T11772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1414.808814][T11754] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1414.877205][T30392] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.904210][T30392] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.938502][T30392] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.948576][T30392] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.959260][T11795] lo speed is unknown, defaulting to 1000 [ 1414.997251][T11808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9874'. [ 1415.020271][T11806] syzkaller0: entered promiscuous mode [ 1415.027013][T11806] syzkaller0: entered allmulticast mode [ 1415.057915][T11814] openvswitch: netlink: EtherType 0 is less than min 600 [ 1415.159862][T11815] veth1_to_bond: entered promiscuous mode [ 1415.166415][T11812] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1415.173029][T11816] veth1_to_bond: entered allmulticast mode [ 1415.186166][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9876'. [ 1415.206823][T11818] bond1: Removing last arp target with arp_interval on [ 1415.234580][T11815] veth1_to_bond (unregistering): left promiscuous mode [ 1415.241826][T11815] veth1_to_bond (unregistering): left allmulticast mode [ 1415.258373][T11815] bond0: (slave bond_slave_1): Releasing backup interface [ 1415.275285][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9876'. [ 1415.292372][T11815] bond_slave_1 (unregistering): left promiscuous mode [ 1415.307815][T11808] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9874'. [ 1415.427178][T11827] netlink: 'syz.0.9880': attribute type 1 has an invalid length. [ 1415.514884][T11827] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1415.635783][T11822] team0 (unregistering): Port device team_slave_0 removed [ 1415.690227][T11822] team0 (unregistering): Port device team_slave_1 removed [ 1416.214680][T11860] syzkaller0: entered promiscuous mode [ 1416.238038][T11860] syzkaller0: entered allmulticast mode [ 1416.586178][T11871] syzkaller0: mtu greater than device maximum [ 1417.096836][T26165] lec:lec_start_xmit: lec0:No lecd attached [ 1417.133129][T11885] lo speed is unknown, defaulting to 1000 [ 1417.302226][T11897] __nla_validate_parse: 8 callbacks suppressed [ 1417.302249][T11897] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9899'. [ 1417.339748][T11897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9899'. [ 1417.526603][T11902] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1417.934338][T11917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9905'. [ 1417.985993][T11917] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1418.022742][T11917] team0: Port device batadv1 added [ 1418.472232][T11928] sock: sock_timestamping_bind_phc: sock not bind to device [ 1418.506793][T11927] tun0: tun_chr_ioctl cmd 1074812118 [ 1418.535110][T11927] tun0: tun_chr_ioctl cmd 1074033169 [ 1418.595693][T11928] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9908'. [ 1419.060109][T11945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9915'. [ 1419.193410][T11953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9916'. [ 1419.216587][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9916'. [ 1419.244473][T11954] netlink: 'syz.4.9917': attribute type 3 has an invalid length. [ 1419.618977][T11971] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9921'. [ 1420.702399][T11988] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9927'. [ 1420.749759][T11990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1420.844257][T11993] netlink: 'syz.0.9929': attribute type 13 has an invalid length. [ 1421.269253][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9929'. [ 1421.456279][T12010] batadv2: entered promiscuous mode [ 1421.462132][T12010] batadv2: entered allmulticast mode [ 1421.468823][T12010] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1421.479193][T12010] team0: Device batadv2 is up. Set it down before adding it as a team port [ 1421.611213][T12012] bond2: entered allmulticast mode [ 1421.625212][T12012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1421.855273][T12023] netlink: 'syz.1.9935': attribute type 1 has an invalid length. [ 1422.248708][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5140 ms [ 1422.256934][ C1] lec:lec_tx_timeout: lec0 [ 1422.867893][T12060] __nla_validate_parse: 5 callbacks suppressed [ 1422.867916][T12060] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9948'. [ 1423.123145][T12068] No such timeout policy "syz0" [ 1423.175124][T12068] netlink: 'syz.4.9951': attribute type 39 has an invalid length. [ 1423.428157][T12084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9955'. [ 1423.445811][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.458131][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.467083][ T1314] lec:lec_start_xmit: lec0:No lecd attached [ 1423.528351][T12089] netlink: 'syz.1.9956': attribute type 1 has an invalid length. [ 1423.632476][T12092] netlink: 'syz.0.9954': attribute type 10 has an invalid length. [ 1423.876306][T12083] tipc: Enabled bearer , priority 0 [ 1423.955389][T12092] team0: Port device dummy0 added [ 1423.970353][T12087] syzkaller0: entered promiscuous mode [ 1423.980125][T12087] syzkaller0: entered allmulticast mode [ 1424.039068][T12075] tipc: Resetting bearer [ 1424.185184][T12075] tipc: Disabling bearer [ 1424.206326][T12103] netlink: 'syz.1.9960': attribute type 10 has an invalid length. [ 1424.227828][T12104] GUP no longer grows the stack in syz.3.9959 (12104): 200000003000-20000000a000 (200000001000) [ 1424.227992][T12103] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9960'. [ 1424.259225][T12104] CPU: 0 UID: 0 PID: 12104 Comm: syz.3.9959 Not tainted syzkaller #0 PREEMPT(full) [ 1424.259259][T12104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1424.259272][T12104] Call Trace: [ 1424.259281][T12104] [ 1424.259290][T12104] dump_stack_lvl+0xe8/0x150 [ 1424.259330][T12104] __get_user_pages+0x2378/0x2720 [ 1424.259373][T12104] ? __gup_longterm_locked+0xc4e/0x1630 [ 1424.259417][T12104] ? __gup_longterm_locked+0xc4e/0x1630 [ 1424.259439][T12104] ? down_read_killable+0x1bb/0x340 [ 1424.259469][T12104] __gup_longterm_locked+0xdcf/0x1630 [ 1424.259498][T12104] ? lock_acquire+0x106/0x350 [ 1424.259552][T12104] gup_fast_fallback+0x1d84/0x20d0 [ 1424.259623][T12104] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1424.259648][T12104] ? is_valid_gup_args+0x11f/0x200 [ 1424.259674][T12104] ? get_user_pages_fast+0x4d/0xb0 [ 1424.259697][T12104] __iov_iter_get_pages_alloc+0x370/0xa10 [ 1424.259731][T12104] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1424.259762][T12104] iov_iter_get_pages2+0x5e/0xa0 [ 1424.259791][T12104] __se_sys_vmsplice+0x7c7/0x1620 [ 1424.259839][T12104] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1424.259863][T12104] ? __pfx_futex_wait+0x10/0x10 [ 1424.259964][T12104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.259989][T12104] do_syscall_64+0x15f/0xf80 [ 1424.260016][T12104] ? trace_irq_disable+0x3b/0x140 [ 1424.260043][T12104] ? clear_bhb_loop+0x40/0x90 [ 1424.260071][T12104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.260092][T12104] RIP: 0033:0x7f3ea4d9cdd9 [ 1424.260114][T12104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1424.260133][T12104] RSP: 002b:00007f3ea5c2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1424.260169][T12104] RAX: ffffffffffffffda RBX: 00007f3ea5015fa0 RCX: 00007f3ea4d9cdd9 [ 1424.260185][T12104] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1424.260199][T12104] RBP: 00007f3ea4e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1424.260213][T12104] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1424.260227][T12104] R13: 00007f3ea5016038 R14: 00007f3ea5015fa0 R15: 00007ffcfa4a0f98 [ 1424.260265][T12104] [ 1424.262839][T12103] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1424.345958][T12107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9961'. [ 1424.348021][T12103] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1424.361877][T12107] block nbd0: not configured, cannot reconfigure [ 1424.364956][T12103] hsr0: entered promiscuous mode [ 1424.545493][T12110] netlink: 'syz.4.9962': attribute type 11 has an invalid length. [ 1425.065613][T12131] lo: Caught tx_queue_len zero misconfig [ 1425.149658][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9971'. [ 1425.173745][T12135] batadv2: entered promiscuous mode [ 1425.179590][T12135] batadv2: entered allmulticast mode [ 1425.187685][T12135] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1425.198752][T12135] team0: Device batadv2 is up. Set it down before adding it as a team port [ 1425.207999][T12119] lec:lec_atm_close: lec0: Shut down! [ 1425.525315][T26061] IPVS: starting estimator thread 0... [ 1425.531450][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9975'. [ 1425.571793][T12151] veth1_to_bridge: entered allmulticast mode [ 1425.640685][T12152] IPVS: using max 26 ests per chain, 62400 per kthread [ 1425.672607][T12146] lo speed is unknown, defaulting to 1000 [ 1425.733142][T12161] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9976'. [ 1425.879005][T12166] žÿ: renamed from team_slave_1 [ 1426.047186][T12174] netlink: 'syz.2.9980': attribute type 8 has an invalid length. [ 1426.096778][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9980'. [ 1426.279745][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9982'. [ 1426.474452][T12183] tipc: Enabled bearer , priority 0 [ 1426.579860][T12184] syzkaller0: entered promiscuous mode [ 1426.590644][T12184] syzkaller0: entered allmulticast mode [ 1426.603350][T12184] tipc: Resetting bearer [ 1426.778290][T12182] tipc: Resetting bearer [ 1427.331928][T20505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.240803][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1430.249232][ C1] lec:lec_tx_timeout: lec0 [ 1432.103827][T12182] tipc: Disabling bearer [ 1432.117385][T12204] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1432.135920][T12215] tipc: Enabled bearer , priority 0 [ 1432.164546][T12216] syzkaller0: entered promiscuous mode [ 1432.180918][T12216] syzkaller0: entered allmulticast mode [ 1432.201547][T12220] tipc: Resetting bearer [ 1432.294757][T12238] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1432.313837][T12238] bond2 (unregistering): Released all slaves [ 1432.407502][T12220] tipc: Resetting bearer [ 1432.439352][T12220] tipc: Disabling bearer [ 1432.656327][T12256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10003'. [ 1432.685112][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10000'. [ 1432.877526][T12279] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10006'. [ 1432.951309][T12283] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10007'. [ 1432.972028][T12283] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10007'. [ 1433.235736][T12269] ip6erspan0: entered promiscuous mode [ 1433.486888][T12288] bond0: (slave bond_slave_0): Releasing backup interface [ 1433.495900][T12260] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1433.521072][T12287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10008'. [ 1433.596681][T12287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10008'. [ 1433.649186][T12289] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1433.699262][T12288] bond0: (slave bond_slave_1): Releasing backup interface [ 1433.793030][T12288] team0: Port device team_slave_0 removed [ 1433.814323][T12288] team0: Port device 76žÿ removed [ 1433.841099][T12288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1433.882054][T12288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1433.904769][T12288] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1434.109053][T12287] bond3: option primary_reselect: invalid value (133) [ 1434.176880][T12287] bond3 (unregistering): Released all slaves [ 1434.290833][T12289] netlink: 830 bytes leftover after parsing attributes in process `syz.1.10008'. [ 1434.408251][T26058] IPVS: starting estimator thread 0... [ 1434.420146][T12276] macvtap1: entered promiscuous mode [ 1434.433431][T12276] bridge0: entered promiscuous mode [ 1434.446841][T12276] bridge0: port 3(macvtap1) entered blocking state [ 1434.462446][T12276] bridge0: port 3(macvtap1) entered disabled state [ 1434.469596][T12276] macvtap1: entered allmulticast mode [ 1434.475926][T12276] bridge0: entered allmulticast mode [ 1434.485216][T12276] macvtap1: left allmulticast mode [ 1434.492889][T12276] bridge0: left allmulticast mode [ 1434.514830][T12276] bridge0: left promiscuous mode [ 1434.533151][T12305] IPVS: using max 22 ests per chain, 52800 per kthread [ 1434.703940][T12310] tipc: Enabling of bearer rejected, failed to enable media [ 1434.874106][ T5161] Bluetooth: hci0: command 0x0401 tx timeout [ 1434.970774][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10012'. [ 1435.065539][T12327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10014'. [ 1435.130997][T12327] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1435.154518][T12327] team0: Port device batadv4 added [ 1435.435375][T12339] syzkaller0: entered promiscuous mode [ 1435.451012][T12339] syzkaller0: entered allmulticast mode [ 1435.498380][T12339] macsec1: entered promiscuous mode [ 1435.510932][T12339] virt_wifi0: entered promiscuous mode [ 1435.826672][T12354] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1435.860322][T12356] netlink: 'syz.3.10024': attribute type 1 has an invalid length. [ 1435.875570][T12354] bond4 (unregistering): Released all slaves [ 1435.927620][T12356] netlink: 'syz.3.10024': attribute type 21 has an invalid length. [ 1435.936095][T12356] netlink: 'syz.3.10024': attribute type 4 has an invalid length. [ 1435.948499][T12356] netlink: 'syz.3.10024': attribute type 5 has an invalid length. [ 1436.324688][T12371] tipc: Enabled bearer , priority 0 [ 1436.351223][T12371] syzkaller0: entered promiscuous mode [ 1436.365444][T12371] syzkaller0: entered allmulticast mode [ 1436.525096][T12371] tipc: Resetting bearer [ 1436.571300][T12370] tipc: Resetting bearer [ 1436.696730][T12370] tipc: Disabling bearer [ 1436.735640][ T2356] IPVS: starting estimator thread 0... [ 1436.840871][T12377] IPVS: using max 28 ests per chain, 67200 per kthread [ 1436.872705][ T2356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.169758][T12397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.198017][T12397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.206913][T12397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.215833][T12397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.968004][T12393] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.975616][T12393] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.015450][T12416] netlink: 'syz.1.10040': attribute type 1 has an invalid length. [ 1438.024082][T12416] __nla_validate_parse: 10 callbacks suppressed [ 1438.024104][T12416] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10040'. [ 1438.328718][T12393] team0: Failed to send port change of device 76žÿ via netlink (err -105) [ 1438.357637][T12393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1438.387934][T12393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1438.658605][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10043'. [ 1438.804456][T12393] ip6gre1: left promiscuous mode [ 1438.809526][T12393] ip6gre1: left allmulticast mode [ 1438.833501][T12393] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 1438.847640][T12393] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 1438.869853][T12393] team0: Failed to send port change of device batadv3 via netlink (err -105) [ 1438.912490][T12393] bond3: left allmulticast mode [ 1438.947315][T12393] team0: Failed to send port change of device batadv4 via netlink (err -105) [ 1438.975539][T12393] virt_wifi0: left promiscuous mode [ 1438.982280][T12393] macsec1: left promiscuous mode [ 1439.054371][T12430] ip6tnl2: entered allmulticast mode [ 1439.060131][ T8927] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.103537][ T8927] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.194332][ T8927] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.222995][ T8927] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.285280][T12442] syzkaller0: entered promiscuous mode [ 1439.301718][T12442] syzkaller0: entered allmulticast mode [ 1439.404837][T12446] team0: Port device syz_tun added [ 1439.499108][T12446] team0: Port device syz_tun removed [ 1439.515045][T12446] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1439.765674][T12457] netlink: 120 bytes leftover after parsing attributes in process `syz.3.10050'. [ 1439.775776][T12457] netlink: 120 bytes leftover after parsing attributes in process `syz.3.10050'. [ 1440.145732][T12471] netlink: 676 bytes leftover after parsing attributes in process `syz.4.10054'. [ 1440.374050][T12483] netlink: 'syz.2.10059': attribute type 1 has an invalid length. [ 1440.445990][T12489] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10060'. [ 1440.719904][T12499] syzkaller1: tun_chr_ioctl cmd 35108 [ 1440.862522][T12514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10069'. [ 1440.891669][ T5841] Bluetooth: hci0: command 0x0401 tx timeout [ 1440.993179][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10072'. [ 1441.393073][T12535] sctp: [Deprecated]: syz.2.10076 (pid 12535) Use of int in max_burst socket option. [ 1441.393073][T12535] Use struct sctp_assoc_value instead [ 1441.478404][T12536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1442.005551][T12548] lo speed is unknown, defaulting to 1000 [ 1442.012617][T12561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10083'. [ 1442.226191][T12571] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10086'. [ 1442.766957][T12594] tipc: Started in network mode [ 1442.773173][T12594] tipc: Node identity 1ab9da0b24b5, cluster identity 4711 [ 1442.781954][T12594] tipc: Enabled bearer , priority 0 [ 1442.791470][T12587] syzkaller0: entered promiscuous mode [ 1442.797597][T12587] syzkaller0: entered allmulticast mode [ 1442.897024][T12587] tipc: Resetting bearer [ 1443.196424][T12611] netlink: 'syz.0.10096': attribute type 29 has an invalid length. [ 1443.216665][T12611] __nla_validate_parse: 3 callbacks suppressed [ 1443.216685][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10096'. [ 1443.252663][T12613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10097'. [ 1443.287346][T12586] tipc: Resetting bearer [ 1443.323372][T12586] tipc: Disabling bearer [ 1443.395395][T12618] netlink: 80 bytes leftover after parsing attributes in process `syz.1.10098'. [ 1443.467073][T12626] bond4: entered promiscuous mode [ 1443.473269][T12626] bond4: entered allmulticast mode [ 1443.594472][T12636] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1443.902041][T12647] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1444.102600][T12653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10108'. [ 1444.212980][T12651] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1444.242570][T12651] bond2 (unregistering): Released all slaves [ 1444.806069][T30757] team0: Port device bridge1 removed [ 1445.037099][T30757] bond9 (unregistering): (slave bridge6): Releasing backup interface [ 1445.135931][T30757] bond0 (unregistering): Released all slaves [ 1445.146760][T30757] bond1 (unregistering): Released all slaves [ 1445.164037][T30757] bond2 (unregistering): (slave veth3): Releasing backup interface [ 1445.174576][T30757] bond2 (unregistering): Released all slaves [ 1445.189465][T30757] bond3 (unregistering): Released all slaves [ 1445.215977][T30757] bond4 (unregistering): Released all slaves [ 1445.231312][T30757] bond5 (unregistering): Released all slaves [ 1445.246729][T30757] bond6 (unregistering): (slave bond7): Releasing backup interface [ 1445.264757][T30757] bond6 (unregistering): Released all slaves [ 1445.282442][T30757] bond7 (unregistering): Released all slaves [ 1445.297269][T30757] bond8 (unregistering): Released all slaves [ 1445.312597][T30757] bond9 (unregistering): Released all slaves [ 1445.328169][T30757] bond10 (unregistering): Released all slaves [ 1445.362445][T30757] bond11 (unregistering): (slave veth5): Releasing active interface [ 1445.372833][T30757] bond11 (unregistering): Released all slaves [ 1445.389395][T30757] bond12 (unregistering): Released all slaves [ 1445.404778][T30757] bond13 (unregistering): Released all slaves [ 1445.421154][T30757] bond14 (unregistering): Released all slaves [ 1445.743525][T12685] tipc: Enabled bearer , priority 0 [ 1445.761817][T12685] syzkaller0: entered promiscuous mode [ 1445.772734][T12685] syzkaller0: entered allmulticast mode [ 1445.806089][T12688] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1445.907417][T12692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10117'. [ 1445.952962][T12692] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10117'. [ 1445.992040][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 1446.789192][T12692] vlan3: entered promiscuous mode [ 1446.796083][T12692] syz_tun: entered promiscuous mode [ 1446.806797][T12692] vlan3: entered allmulticast mode [ 1446.815904][T12692] syz_tun: entered allmulticast mode [ 1446.888297][T12696] tipc: Resetting bearer [ 1446.914175][T30757] tipc: Disabling bearer [ 1446.980040][T30757] tipc: Left network mode [ 1446.987782][T12684] tipc: Resetting bearer [ 1447.083993][T12684] tipc: Disabling bearer [ 1447.169354][T30757] IPVS: stopping backup sync thread 29938 ... [ 1447.906740][T12736] netlink: 'syz.4.10126': attribute type 4 has an invalid length. [ 1448.068040][T12713] syzkaller1: entered promiscuous mode [ 1448.079475][T12713] syzkaller1: entered allmulticast mode [ 1448.249080][T12724] lo speed is unknown, defaulting to 1000 [ 1448.317224][T12742] FAULT_INJECTION: forcing a failure. [ 1448.317224][T12742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1448.338669][T12742] CPU: 1 UID: 0 PID: 12742 Comm: syz.3.10129 Not tainted syzkaller #0 PREEMPT(full) [ 1448.338698][T12742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1448.338711][T12742] Call Trace: [ 1448.338719][T12742] [ 1448.338728][T12742] dump_stack_lvl+0xe8/0x150 [ 1448.338764][T12742] should_fail_ex+0x412/0x560 [ 1448.338800][T12742] _copy_from_user+0x2d/0xb0 [ 1448.338823][T12742] bpf_test_init+0xd8/0x150 [ 1448.338856][T12742] bpf_prog_test_run_xdp+0x529/0x1160 [ 1448.338893][T12742] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1448.338919][T12742] ? __fget_files+0x2a/0x420 [ 1448.338944][T12742] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1448.338965][T12742] bpf_prog_test_run+0x2c7/0x340 [ 1448.338996][T12742] __sys_bpf+0x643/0x950 [ 1448.339023][T12742] ? __pfx___sys_bpf+0x10/0x10 [ 1448.339066][T12742] ? __irq_exit_rcu+0xca/0x220 [ 1448.339092][T12742] ? lockdep_softirqs_on+0x11d/0x180 [ 1448.339120][T12742] ? handle_softirqs+0x715/0x840 [ 1448.339151][T12742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.339172][T12742] __x64_sys_bpf+0x7c/0x90 [ 1448.339196][T12742] do_syscall_64+0x15f/0xf80 [ 1448.339224][T12742] ? clear_bhb_loop+0x40/0x90 [ 1448.339248][T12742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.339267][T12742] RIP: 0033:0x7f3ea4d9cdd9 [ 1448.339286][T12742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.339303][T12742] RSP: 002b:00007f3ea5c2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1448.339325][T12742] RAX: ffffffffffffffda RBX: 00007f3ea5015fa0 RCX: 00007f3ea4d9cdd9 [ 1448.339339][T12742] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1448.339352][T12742] RBP: 00007f3ea5c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1448.339363][T12742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1448.339374][T12742] R13: 00007f3ea5016038 R14: 00007f3ea5015fa0 R15: 00007ffcfa4a0f98 [ 1448.339407][T12742] [ 1449.377525][T12766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10136'. [ 1449.835029][T12784] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10142'. [ 1449.850562][T12783] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10142'. [ 1449.869018][T12781] netlink: 'syz.1.10140': attribute type 11 has an invalid length. [ 1450.081723][T12793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10146'. [ 1450.086353][T12791] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10143'. [ 1450.097625][T12793] batadv1: entered promiscuous mode [ 1450.105350][T12793] batadv1: entered allmulticast mode [ 1450.132644][T12793] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1450.142011][T12793] team0: Port device batadv1 added [ 1450.352065][T12802] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10147'. [ 1450.368009][T12800] syzkaller1: entered promiscuous mode [ 1450.373753][T12800] syzkaller1: entered allmulticast mode [ 1450.498159][T12804] netlink: 'syz.4.10150': attribute type 4 has an invalid length. [ 1450.532950][T12804] netlink: 'syz.4.10150': attribute type 4 has an invalid length. [ 1450.861009][T12813] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 1451.312683][T12817] lo speed is unknown, defaulting to 1000 [ 1451.773392][T12825] sock: sock_timestamping_bind_phc: sock not bind to device [ 1451.949712][T12834] veth0_to_bridge: entered promiscuous mode [ 1451.956048][T12834] veth0_to_bridge: entered allmulticast mode [ 1452.092572][T12843] netlink: 200 bytes leftover after parsing attributes in process `syz.4.10162'. [ 1452.124094][T12842] netlink: 200 bytes leftover after parsing attributes in process `syz.4.10162'. [ 1452.157258][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10162'. [ 1453.412735][T12864] netlink: 'syz.1.10167': attribute type 4 has an invalid length. [ 1453.413267][T12865] netlink: 'syz.1.10167': attribute type 4 has an invalid length. [ 1453.428994][T12865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10167'. [ 1453.492876][T12871] xt_hashlimit: overflow, rate too high: 0 [ 1453.532472][T12870] netlink: 'syz.3.10169': attribute type 2 has an invalid length. [ 1454.517143][T30757] hsr_slave_0: left promiscuous mode [ 1454.742270][T30757] team0 (unregistering): Port device batadv12 removed [ 1454.778636][T30757] team0 (unregistering): Port device batadv11 removed [ 1454.912771][T30757] team0 (unregistering): Port device batadv10 removed [ 1454.941722][T30757] team0 (unregistering): Port device batadv9 removed [ 1454.987341][T30757] team0 (unregistering): Port device batadv8 removed [ 1455.015017][T30757] team0 (unregistering): Port device batadv7 removed [ 1455.050144][T30757] team0 (unregistering): Port device batadv6 removed [ 1455.084266][T30757] team0 (unregistering): Port device batadv5 removed [ 1455.098378][T30757] team0 (unregistering): Port device batadv4 removed [ 1455.114587][T30757] team0 (unregistering): Port device batadv3 removed [ 1455.128195][T30757] team0 (unregistering): Port device batadv2 removed [ 1455.174894][T30757] team0 (unregistering): Port device batadv1 removed [ 1455.816852][ T8927] smbdirect: ib_dev[syz2] removed [ 1456.560738][T12938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1456.620233][T12956] __nla_validate_parse: 3 callbacks suppressed [ 1456.620254][T12956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10186'. [ 1456.674138][T12960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10188'. [ 1456.696856][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10188'. [ 1457.101372][T12973] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10190'. [ 1457.111151][T12973] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10190'. [ 1457.121221][T12973] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 1457.962114][T12992] team0: entered promiscuous mode [ 1458.017121][T12996] FAULT_INJECTION: forcing a failure. [ 1458.017121][T12996] name failslab, interval 1, probability 0, space 0, times 0 [ 1458.030141][T12996] CPU: 1 UID: 0 PID: 12996 Comm: syz.4.10194 Not tainted syzkaller #0 PREEMPT(full) [ 1458.030172][T12996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1458.030184][T12996] Call Trace: [ 1458.030194][T12996] [ 1458.030203][T12996] dump_stack_lvl+0xe8/0x150 [ 1458.030242][T12996] should_fail_ex+0x412/0x560 [ 1458.030282][T12996] should_failslab+0xa8/0x100 [ 1458.030314][T12996] __kmalloc_cache_noprof+0x88/0x660 [ 1458.030339][T12996] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1458.030368][T12996] ? __xdp_reg_mem_model+0x1e3/0x5d0 [ 1458.030397][T12996] __xdp_reg_mem_model+0x1e3/0x5d0 [ 1458.030425][T12996] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 1458.030451][T12996] ? page_pool_create_percpu+0x7f9/0xb80 [ 1458.030482][T12996] xdp_reg_mem_model+0x22/0x40 [ 1458.030506][T12996] bpf_test_run_xdp_live+0x295/0x1cf0 [ 1458.030535][T12996] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 1458.030585][T12996] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1458.030615][T12996] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1458.030662][T12996] ? 0xffffffffa0201a54 [ 1458.030681][T12996] ? 0xffffffffa0203694 [ 1458.030738][T12996] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1458.030774][T12996] ? _copy_from_user+0x94/0xb0 [ 1458.030799][T12996] ? bpf_test_init+0x113/0x150 [ 1458.030818][T12996] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1458.030842][T12996] bpf_prog_test_run_xdp+0x81c/0x1160 [ 1458.030883][T12996] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1458.030910][T12996] ? __fget_files+0x2a/0x420 [ 1458.030938][T12996] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1458.030962][T12996] bpf_prog_test_run+0x2c7/0x340 [ 1458.030997][T12996] __sys_bpf+0x643/0x950 [ 1458.031027][T12996] ? __pfx___sys_bpf+0x10/0x10 [ 1458.031073][T12996] ? ksys_write+0x242/0x270 [ 1458.031101][T12996] ? __pfx_ksys_write+0x10/0x10 [ 1458.031133][T12996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.031156][T12996] __x64_sys_bpf+0x7c/0x90 [ 1458.031183][T12996] do_syscall_64+0x15f/0xf80 [ 1458.031210][T12996] ? trace_irq_disable+0x3b/0x140 [ 1458.031237][T12996] ? clear_bhb_loop+0x40/0x90 [ 1458.031262][T12996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.031284][T12996] RIP: 0033:0x7f3ff299cdd9 [ 1458.031305][T12996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1458.031323][T12996] RSP: 002b:00007f3ff379f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1458.031346][T12996] RAX: ffffffffffffffda RBX: 00007f3ff2c15fa0 RCX: 00007f3ff299cdd9 [ 1458.031362][T12996] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1458.031374][T12996] RBP: 00007f3ff379f090 R08: 0000000000000000 R09: 0000000000000000 [ 1458.031387][T12996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1458.031398][T12996] R13: 00007f3ff2c16038 R14: 00007f3ff2c15fa0 R15: 00007ffedfdf3968 [ 1458.031430][T12996] [ 1458.622722][T13009] FAULT_INJECTION: forcing a failure. [ 1458.622722][T13009] name failslab, interval 1, probability 0, space 0, times 0 [ 1458.677833][T13009] CPU: 1 UID: 0 PID: 13009 Comm: syz.4.10197 Not tainted syzkaller #0 PREEMPT(full) [ 1458.677864][T13009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1458.677876][T13009] Call Trace: [ 1458.677885][T13009] [ 1458.677894][T13009] dump_stack_lvl+0xe8/0x150 [ 1458.677933][T13009] should_fail_ex+0x412/0x560 [ 1458.677972][T13009] should_failslab+0xa8/0x100 [ 1458.678002][T13009] __kmalloc_noprof+0xe8/0x760 [ 1458.678028][T13009] ? bpf_test_init+0x9f/0x150 [ 1458.678055][T13009] bpf_test_init+0x9f/0x150 [ 1458.678080][T13009] bpf_prog_test_run_flow_dissector+0x209/0x610 [ 1458.678117][T13009] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1458.678144][T13009] ? __fget_files+0x2a/0x420 [ 1458.678170][T13009] ? __fget_files+0x2a/0x420 [ 1458.678191][T13009] ? __fget_files+0x3a0/0x420 [ 1458.678209][T13009] ? __fget_files+0x2a/0x420 [ 1458.678234][T13009] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1458.678258][T13009] bpf_prog_test_run+0x2c7/0x340 [ 1458.678290][T13009] __sys_bpf+0x643/0x950 [ 1458.678320][T13009] ? __pfx___sys_bpf+0x10/0x10 [ 1458.678362][T13009] ? ksys_write+0x242/0x270 [ 1458.678388][T13009] ? __pfx_ksys_write+0x10/0x10 [ 1458.678417][T13009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.678440][T13009] __x64_sys_bpf+0x7c/0x90 [ 1458.678465][T13009] do_syscall_64+0x15f/0xf80 [ 1458.678492][T13009] ? trace_irq_disable+0x3b/0x140 [ 1458.678514][T13009] ? clear_bhb_loop+0x40/0x90 [ 1458.678535][T13009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.678552][T13009] RIP: 0033:0x7f3ff299cdd9 [ 1458.678570][T13009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1458.678585][T13009] RSP: 002b:00007f3ff379f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1458.678604][T13009] RAX: ffffffffffffffda RBX: 00007f3ff2c15fa0 RCX: 00007f3ff299cdd9 [ 1458.678616][T13009] RDX: 000000000000004c RSI: 0000200000000740 RDI: 000000000000000a [ 1458.678627][T13009] RBP: 00007f3ff379f090 R08: 0000000000000000 R09: 0000000000000000 [ 1458.678637][T13009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1458.678647][T13009] R13: 00007f3ff2c16038 R14: 00007f3ff2c15fa0 R15: 00007ffedfdf3968 [ 1458.678673][T13009] [ 1458.679840][T13008] openvswitch: netlink: IP tunnel dst address not specified [ 1458.943091][T13004] tipc: New replicast peer: 172.20.20.170 [ 1458.959260][T13004] tipc: Enabled bearer , priority 10 [ 1458.987892][T13015] netlink: 364 bytes leftover after parsing attributes in process `syz.4.10198'. [ 1459.002633][T13010] netlink: 'syz.1.10196': attribute type 13 has an invalid length. [ 1459.026412][T13010] netlink: 'syz.1.10196': attribute type 17 has an invalid length. [ 1459.058112][T13008] netlink: 'syz.1.10196': attribute type 13 has an invalid length. [ 1459.125683][T13018] netlink: 'syz.3.10199': attribute type 1 has an invalid length. [ 1459.148359][T13008] netlink: 'syz.1.10196': attribute type 17 has an invalid length. [ 1459.187006][T13010] gretap0: entered promiscuous mode [ 1459.357908][T13010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1459.381542][T13010] team0: left promiscuous mode [ 1459.387305][T13010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1459.444207][T13010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1459.464569][T13030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10200'. [ 1459.501708][T13018] bond5: entered promiscuous mode [ 1459.528347][T13018] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1459.567727][T13008] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1459.705946][T13028] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1459.728208][T13028] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1459.751835][T13028] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1459.766770][T13028] bond5: (slave ip6gre1): making interface the new active one [ 1459.776542][T13028] ip6gre1: entered promiscuous mode [ 1459.786744][T13028] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 1459.916538][T13030] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1459.925966][T13030] team0: Port device batadv5 added [ 1460.120676][T26066] tipc: Node number set to 1041029643 [ 1460.217758][T13049] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1460.224203][T13054] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1460.241557][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10205'. [ 1460.259900][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10205'. [ 1460.515475][T13065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10206'. [ 1460.622463][T13070] netlink: 'syz.3.10206': attribute type 3 has an invalid length. [ 1461.365024][T13081] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1462.068287][T13105] tipc: Enabled bearer , priority 0 [ 1462.095323][T13109] syzkaller0: entered promiscuous mode [ 1462.105910][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10214'. [ 1462.120614][T30757] IPVS: stop unused estimator thread 0... [ 1462.144168][T13109] syzkaller0: entered allmulticast mode [ 1462.239156][T13094] tipc: Resetting bearer [ 1462.355524][T13094] tipc: Disabling bearer [ 1463.061494][T13132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10220'. [ 1463.074418][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10220'. [ 1465.088250][T13172] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1465.188994][T13177] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10234'. [ 1465.199635][T13177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10234'. [ 1465.508214][T13187] syzkaller0: entered promiscuous mode [ 1465.513932][T13187] syzkaller0: entered allmulticast mode [ 1465.873232][T13190] netlink: 'syz.4.10238': attribute type 39 has an invalid length. [ 1465.896044][T13190] xt_hashlimit: size too large, truncated to 1048576 [ 1465.902858][T13190] xt_hashlimit: max too large, truncated to 1048576 [ 1466.125246][T13196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10241'. [ 1466.151548][T13193] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1466.271945][T13196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1466.470720][ T5161] Bluetooth: hci1: command 0x0406 tx timeout [ 1466.518009][T13196] bond3: entered promiscuous mode [ 1466.530077][T13196] bond3: entered allmulticast mode [ 1466.545036][T13196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1466.554011][T13196] team0: Port device bond3 added [ 1467.296541][T13236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10249'. [ 1467.321677][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10249'. [ 1467.522456][T13246] netlink: 'syz.1.10251': attribute type 12 has an invalid length. [ 1468.065007][T13253] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1468.071078][T13253] syzkaller1: linktype set to 270 [ 1468.103413][T13253] bridge0: port 3(erspan0) entered blocking state [ 1468.110084][T13253] bridge0: port 3(erspan0) entered disabled state [ 1468.116955][T13253] erspan0: entered allmulticast mode [ 1468.124564][T13253] erspan0: entered promiscuous mode [ 1468.132467][T13253] erspan0: left allmulticast mode [ 1468.137540][T13253] erspan0: left promiscuous mode [ 1468.142833][T13253] bridge0: port 3(erspan0) entered disabled state [ 1468.621630][T13259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10255'. [ 1469.119582][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10257'. [ 1469.733574][T13278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10261'. [ 1469.970130][T13296] dvmrp0: entered allmulticast mode [ 1469.978227][T13301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10265'. [ 1469.987856][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10265'. [ 1470.852525][T13313] ip6gretap0: entered promiscuous mode [ 1470.855325][T13318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10270'. [ 1470.858825][T13313] macsec0: entered promiscuous mode [ 1470.875608][T13313] macsec0: entered allmulticast mode [ 1470.880958][T13313] ip6gretap0: entered allmulticast mode [ 1470.889481][T13313] ip6gretap0: left allmulticast mode [ 1470.895079][T13313] ip6gretap0: left promiscuous mode [ 1470.928658][T13321] netlink: 'syz.1.10268': attribute type 1 has an invalid length. [ 1470.962091][T13318] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1470.979812][T13318] team0: Port device batadv2 added [ 1471.152167][T13324] netlink: 'syz.0.10271': attribute type 1 has an invalid length. [ 1471.181570][T13321] bond3: entered promiscuous mode [ 1471.221380][T13321] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1471.339076][T13324] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1471.354551][T13321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10268'. [ 1471.397360][T13317] bond4: (slave geneve2): making interface the new active one [ 1471.407042][T13317] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1471.614764][ T8924] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.649639][ T8924] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.683964][ T8924] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.715676][ T8924] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.974127][T13341] syzkaller0: entered promiscuous mode [ 1472.006473][T13341] syzkaller0: entered allmulticast mode [ 1472.128047][T13348] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10281'. [ 1472.432408][T13358] __nla_validate_parse: 1 callbacks suppressed [ 1472.432431][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10283'. [ 1472.785789][T13365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1472.803182][T13365] xt_cgroup: xt_cgroup: no path or classid specified [ 1472.841716][T13358] netlink: 183640 bytes leftover after parsing attributes in process `syz.0.10283'. [ 1473.687828][T13380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10288'. [ 1473.697215][T13380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10288'. [ 1473.707113][T13380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1474.255928][T13399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10296'. [ 1474.310515][T13399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10296'. [ 1474.937159][T13425] netlink: 776 bytes leftover after parsing attributes in process `syz.1.10301'. [ 1474.948861][T13420] ip6t_rpfilter: unknown options [ 1475.928223][T13468] xt_hashlimit: size too large, truncated to 1048576 [ 1476.163524][T13472] netlink: 'syz.0.10312': attribute type 9 has an invalid length. [ 1476.247251][T13479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10313'. [ 1477.237715][T13493] SET target dimension over the limit! [ 1477.592906][T13508] netlink: 'syz.4.10323': attribute type 10 has an invalid length. [ 1477.662337][T13508] team0: Port device bond0 added [ 1478.472269][T13533] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10331'. [ 1478.812220][T13549] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10338'. [ 1478.875238][T13552] sctp: [Deprecated]: syz.0.10339 (pid 13552) Use of int in max_burst socket option. [ 1478.875238][T13552] Use struct sctp_assoc_value instead [ 1478.927357][T13552] syzkaller0: entered promiscuous mode [ 1478.948772][T13552] syzkaller0: entered allmulticast mode [ 1480.961989][T26165] lec:lec_start_xmit: lec0:No lecd attached [ 1481.786726][T13607] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10352'. [ 1482.575170][T13615] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1483.468744][T13630] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10360'. [ 1483.581557][T13627] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10360'. [ 1484.663142][T13669] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10372'. [ 1484.697475][T13669] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10372'. [ 1484.801093][T13680] syzkaller0: entered promiscuous mode [ 1484.806789][T13680] syzkaller0: entered allmulticast mode [ 1484.910514][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.922133][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.976999][T13685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10375'. [ 1484.990144][T13685] netlink: 'syz.2.10375': attribute type 16 has an invalid length. [ 1485.001170][T13685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10375'. [ 1485.654043][T13693] macsec1: entered allmulticast mode [ 1485.659492][T13693] macsec0: entered allmulticast mode [ 1485.955455][T13701] netlink: 'syz.1.10382': attribute type 1 has an invalid length. [ 1485.967906][T13701] netlink: 'syz.1.10382': attribute type 39 has an invalid length. [ 1485.974221][T13707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1485.986629][T13707] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.996942][T13707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1486.189840][T13714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10383'. [ 1486.259624][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5290 ms [ 1486.267684][ C1] lec:lec_tx_timeout: lec0 [ 1486.272982][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1486.493247][T13729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10386'. [ 1486.711378][ T5161] Bluetooth: hci0: command 0x0401 tx timeout [ 1486.718758][ T5841] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1486.769860][T13742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10392'. [ 1486.926130][T13740] Unsupported ieee802154 address type: 0 [ 1486.958386][T13749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10392'. [ 1486.974952][T13746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10393'. [ 1486.996867][T13746] openvswitch: netlink: Message has 4 unknown bytes. [ 1487.015353][T13746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1487.363052][T13754] bond4: option lacp_active: invalid value (8) [ 1487.393882][T13756] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1487.640098][T13754] bond4 (unregistering): Released all slaves [ 1487.820256][T13778] syzkaller0: entered promiscuous mode [ 1487.830722][T13778] syzkaller0: entered allmulticast mode [ 1489.332174][T13836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1489.354386][T13836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1489.379504][ T5841] Bluetooth: hci0: command 0x0401 tx timeout [ 1489.405145][T13842] __nla_validate_parse: 3 callbacks suppressed [ 1489.405167][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10415'. [ 1489.455979][T13837] xt_hashlimit: size too large, truncated to 1048576 [ 1489.462904][T13837] xt_hashlimit: invalid interval [ 1489.861459][T13836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1489.869095][T13836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1489.916242][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10418'. [ 1490.264347][T13855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10421'. [ 1490.264711][T13853] macvtap0: entered promiscuous mode [ 1490.280724][T13857] netlink: 'syz.1.10421': attribute type 1 has an invalid length. [ 1490.281465][T13856] netlink: 'syz.1.10421': attribute type 1 has an invalid length. [ 1490.400891][T20505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1490.455907][T13855] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1490.467795][T13855] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 1490.474874][T13868] netlink: 'syz.4.10424': attribute type 3 has an invalid length. [ 1490.639189][T13877] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1490.807512][T13885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10430'. [ 1491.003271][T13892] netlink: 'syz.3.10433': attribute type 1 has an invalid length. [ 1491.013998][T13892] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10433'. [ 1491.014552][T13898] netlink: 'syz.2.10431': attribute type 1 has an invalid length. [ 1491.023163][T13892] netlink: 658 bytes leftover after parsing attributes in process `syz.3.10433'. [ 1491.023188][T13892] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10433'. [ 1491.049914][T13898] netlink: 'syz.2.10431': attribute type 2 has an invalid length. [ 1491.245166][T13906] gre0: entered promiscuous mode [ 1491.267652][T13906] gre0: entered allmulticast mode [ 1491.299220][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1491.307276][ C1] lec:lec_tx_timeout: lec0 [ 1491.534718][T13921] netlink: 212 bytes leftover after parsing attributes in process `syz.1.10442'. [ 1492.107733][T13944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10449'. [ 1492.124822][T13944] netlink: 'syz.4.10449': attribute type 1 has an invalid length. [ 1492.541922][T13960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1492.552529][ T5161] Bluetooth: hci4: command 0x0405 tx timeout [ 1492.735022][T13975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10451'. [ 1493.053751][T13978] xt_connbytes: Forcing CT accounting to be enabled [ 1493.171361][T13978] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1493.179973][T13988] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1493.228281][T13988] bond4: (slave lo): Enslaving as an active interface with an up link [ 1493.242781][T13988] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1493.610523][T14011] netlink: 'syz.1.10460': attribute type 11 has an invalid length. [ 1493.911685][T14023] netlink: 'syz.1.10463': attribute type 15 has an invalid length. [ 1494.171652][T14025] tipc: Enabling of bearer rejected, already enabled [ 1494.418855][T14037] xt_CT: No such helper "snmp_trap" [ 1494.665890][T14050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1494.669046][T14049] __nla_validate_parse: 3 callbacks suppressed [ 1494.669066][T14049] netlink: 9 bytes leftover after parsing attributes in process `syz.4.10471'. [ 1494.691516][T14049] .70·: renamed from hsr0 (while UP) [ 1494.743538][T14049] .70·: entered allmulticast mode [ 1494.765570][T14041] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10468'. [ 1494.774890][T14049] hsr_slave_0: entered allmulticast mode [ 1494.780962][T14049] hsr_slave_1: entered allmulticast mode [ 1494.787989][T14049] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 1494.806527][T14041] netlink: 'syz.0.10468': attribute type 1 has an invalid length. [ 1494.896056][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10469'. [ 1494.917947][T14049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10471'. [ 1495.019773][T14041] bond5: entered promiscuous mode [ 1495.026255][T14041] bond5: entered allmulticast mode [ 1495.032053][ T30] audit: type=1800 audit(1777092106.959:25): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10473" name=CB dev="tmpfs" ino=911 res=0 errno=0 [ 1495.050914][T14041] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1495.090135][T14050] erspan1: entered allmulticast mode [ 1495.118115][T14050] bond5: (slave erspan1): making interface the new active one [ 1495.125732][T14050] erspan1: entered promiscuous mode [ 1495.132639][T14050] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 1495.152741][T14066] delete_channel: no stack [ 1495.759928][T14082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.913035][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10478'. [ 1495.954445][T14086] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1495.966249][T14086] team0: Port device batadv3 added [ 1496.090178][T14098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1496.114308][T14101] tipc: Enabled bearer , priority 14 [ 1496.126920][T14098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1496.164890][T14098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1496.191617][T14098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1496.221325][T14098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1496.248023][T14098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1496.277243][T14098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1496.317738][T14098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1496.342687][T14098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1496.410611][T14108] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10486'. [ 1496.613790][T14115] syzkaller0: entered promiscuous mode [ 1496.643167][T14115] syzkaller0: entered allmulticast mode [ 1496.654305][T14115] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 1496.672224][T14118] netlink: 'syz.1.10490': attribute type 5 has an invalid length. [ 1496.697019][T14118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10490'. [ 1497.445431][T14123] tipc: Enabled bearer , priority 0 [ 1497.553613][T14123] tipc: Disabling bearer [ 1498.046671][T14142] netlink: 'syz.3.10495': attribute type 16 has an invalid length. [ 1498.085129][T14142] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.10495'. [ 1498.426534][T14161] ¾x9ÿ: renamed from bridge_slave_0 [ 1498.649660][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10504'. [ 1498.713393][T14174] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1498.920823][T14181] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10505'. [ 1498.971113][T14180] vxcan3: entered promiscuous mode [ 1499.046139][T14180] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1499.055014][T14180] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1499.071733][T14180] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1499.554064][T14201] netlink: 'syz.0.10510': attribute type 1 has an invalid length. [ 1499.775435][T14197] bond7 (unregistering): Released all slaves [ 1500.257864][T14209] __nla_validate_parse: 5 callbacks suppressed [ 1500.257886][T14209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10512'. [ 1500.359925][T14221] netlink: 'syz.2.10515': attribute type 4 has an invalid length. [ 1500.375251][T14222] netlink: 'syz.0.10516': attribute type 1 has an invalid length. [ 1500.399724][T14222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10516'. [ 1500.412127][T14226] netlink: 'syz.2.10515': attribute type 4 has an invalid length. [ 1500.428255][T14222] netlink: 'syz.0.10516': attribute type 1 has an invalid length. [ 1500.481281][T14222] syzkaller1: entered promiscuous mode [ 1500.495118][T14222] syzkaller1: entered allmulticast mode [ 1500.700602][T14224] Cannot find del_set index 1 as target [ 1501.645569][T14282] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10529'. [ 1501.812720][T14286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10530'. [ 1501.821735][T14286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10530'. [ 1501.831126][T14286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10530'. [ 1501.856381][T14286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10530'. [ 1502.587034][T14326] net_ratelimit: 24 callbacks suppressed [ 1502.587057][T14326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.721608][T14328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10539'. [ 1502.867511][T14334] netlink: 'syz.4.10540': attribute type 1 has an invalid length. [ 1503.275619][T14349] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10546'. [ 1503.294836][T14349] bond0 (unregistering): left promiscuous mode [ 1503.301081][T14349] bond_slave_0: left promiscuous mode [ 1503.308865][T14349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1503.318862][T14349] bond0 (unregistering): Released all slaves [ 1503.542230][T14356] syzkaller0: entered promiscuous mode [ 1503.547774][T14356] syzkaller0: entered allmulticast mode [ 1503.550689][T14360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10548'. [ 1506.345435][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10555'. [ 1506.357132][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10555'. [ 1506.369396][T14392] netlink: 'syz.0.10555': attribute type 18 has an invalid length. [ 1508.557985][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.052361][T14403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10556'. [ 1509.222212][T14422] xt_bpf: check failed: parse error [ 1510.108374][T14462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10566'. [ 1510.887036][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10570'. [ 1511.252746][T14506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10572'. [ 1511.262851][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10575'. [ 1511.270854][T14506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10572'. [ 1511.274933][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10575'. [ 1511.290598][T14506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10572'. [ 1511.448737][T14514] netlink: 'syz.4.10577': attribute type 2 has an invalid length. [ 1511.476603][T14514] __nla_validate_parse: 1 callbacks suppressed [ 1511.476625][T14514] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.10577'. [ 1511.799140][T14525] netlink: 'syz.0.10579': attribute type 22 has an invalid length. [ 1511.807131][T14525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10579'. [ 1511.816752][T14525] netlink: 'syz.0.10579': attribute type 22 has an invalid length. [ 1511.824778][T14525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10579'. [ 1512.053519][T14530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10580'. [ 1512.065958][T14530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10580'. [ 1512.242153][T14530] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.10580'. [ 1512.831932][T14548] netlink: 'syz.4.10582': attribute type 8 has an invalid length. [ 1513.470702][T14575] geneve2: entered promiscuous mode [ 1513.676237][T14578] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10591'. [ 1513.707200][T14580] xt_TCPMSS: Only works on TCP SYN packets [ 1513.741616][T14579] netlink: 'syz.2.10590': attribute type 1 has an invalid length. [ 1513.809222][T13443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.814124][T14586] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10590'. [ 1513.829245][T14586] 0ªX¹¦À: renamed from caif0 [ 1513.836993][T14586] tipc: Disabling bearer [ 1513.845344][T14586] 0ªX¹¦À: entered allmulticast mode [ 1513.852428][T14586] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1514.506835][T14600] syzkaller0: entered promiscuous mode [ 1514.517030][T14600] syzkaller0: entered allmulticast mode [ 1514.721902][ T6849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.349082][T14570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1516.697173][T14616] 8021q: VLANs not supported on syzkaller1 [ 1516.812332][T14620] netlink: 'syz.4.10601': attribute type 10 has an invalid length. [ 1516.923345][T14620] team0: Device vxcan1 is of different type [ 1516.978365][T14643] netlink: 'syz.1.10605': attribute type 13 has an invalid length. [ 1517.037770][T14623] netlink: 9 bytes leftover after parsing attributes in process `syz.1.10605'. [ 1517.082130][T13443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.145628][T14648] netlink: 780 bytes leftover after parsing attributes in process `syz.4.10607'. [ 1517.148205][T14623] .70·X: renamed from hsr0 (while UP) [ 1517.159814][T14648] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1517.169903][T26066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.172860][T14623] .70·X: left promiscuous mode [ 1517.199642][T26066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.213670][T14623] .70·X: entered allmulticast mode [ 1517.218852][T14623] hsr_slave_0: entered allmulticast mode [ 1517.224695][T14623] hsr_slave_1: entered allmulticast mode [ 1517.231111][T14623] A link change request failed with some changes committed already. Interface .70·X may have been left with an inconsistent configuration, please check. [ 1517.248767][T14633] veth1_macvtap: Caught tx_queue_len zero misconfig [ 1517.301850][ T6820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.537435][T14657] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10610'. [ 1517.760825][ T6820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.112845][T14655] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1518.274314][T14667] netlink: 'syz.3.10612': attribute type 1 has an invalid length. [ 1518.347408][T14667] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1518.525685][T14678] netlink: 'syz.3.10614': attribute type 1 has an invalid length. [ 1518.528520][T14677] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1518.556342][T26066] team_slave_0: entered promiscuous mode [ 1518.564824][T26066] team_slave_1: entered promiscuous mode [ 1518.573214][T26066] bond_slave_0: entered promiscuous mode [ 1518.582480][T26066] bond_slave_1: entered promiscuous mode [ 1518.655218][T14666] netlink: 240 bytes leftover after parsing attributes in process `syz.4.10613'. [ 1518.662739][ T5841] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1518.671827][T14666] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10613'. [ 1518.683960][T14619] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1518.712252][T14678] bond8: entered promiscuous mode [ 1518.720461][T14678] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1518.753396][T14684] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1518.761840][T14684] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1518.773128][T14684] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1518.871155][T14684] bond8: (slave wireguard0): making interface the new active one [ 1518.911028][T14684] wireguard0: entered promiscuous mode [ 1518.922724][T14684] bond8: (slave wireguard0): Enslaving as an active interface with an up link [ 1518.954487][T14687] bond8: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1518.969902][T14687] bond8: (slave wireguard1): Enslaving as a backup interface with an up link [ 1518.981472][T14697] netlink: 'syz.1.10617': attribute type 12 has an invalid length. [ 1519.510266][T14713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10622'. [ 1519.790671][T14722] netlink: 'syz.1.10625': attribute type 6 has an invalid length. [ 1519.819703][T14722] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1520.093155][T14717] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10624'. [ 1520.159913][T14738] gretap0: Device is already in use. [ 1521.646943][T14794] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1521.657336][T14796] netlink: 'syz.3.10649': attribute type 1 has an invalid length. [ 1521.666013][T14794] syzkaller1: linktype set to 768 [ 1521.746642][T14796] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1521.799358][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10652'. [ 1521.877196][T14805] netlink: 'syz.0.10651': attribute type 7 has an invalid length. [ 1521.893693][T14804] vlan2: entered promiscuous mode [ 1521.898794][T14804] bond9: entered promiscuous mode [ 1521.904140][T14804] vlan2: entered allmulticast mode [ 1521.909296][T14804] bond9: entered allmulticast mode [ 1521.931572][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10653'. [ 1521.944825][T14812] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10652'. [ 1522.064708][T14816] __nla_validate_parse: 1 callbacks suppressed [ 1522.064731][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10652'. [ 1522.633879][T14845] netlink: 9 bytes leftover after parsing attributes in process `syz.3.10661'. [ 1522.650186][T14845] .70·: renamed from hsr0 (while UP) [ 1522.974620][T14845] .70·: entered allmulticast mode [ 1522.981426][T14845] hsr_slave_0: entered allmulticast mode [ 1522.984900][T14859] netlink: 'syz.4.10665': attribute type 1 has an invalid length. [ 1522.988624][T14845] hsr_slave_1: entered allmulticast mode [ 1523.001569][T14845] net_ratelimit: 2 callbacks suppressed [ 1523.001588][T14845] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 1523.031250][T14856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1523.039260][T14856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1523.043362][T14845] netlink: 9 bytes leftover after parsing attributes in process `syz.3.10661'. [ 1523.084613][T14859] netlink: 'syz.4.10665': attribute type 14 has an invalid length. [ 1523.118636][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10662'. [ 1523.127969][T14845] .71·: renamed from .70· (while UP) [ 1523.136926][T14845] A link change request failed with some changes committed already. Interface .71· may have been left with an inconsistent configuration, please check. [ 1523.491792][T14877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10668'. [ 1523.551280][T14878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10669'. [ 1523.718692][T14882] netlink: 'syz.3.10670': attribute type 11 has an invalid length. [ 1523.863397][T14892] netlink: 10 bytes leftover after parsing attributes in process `syz.1.10673'. [ 1524.099634][T14904] netlink: 'syz.1.10676': attribute type 1 has an invalid length. [ 1524.135733][T14904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10676'. [ 1524.278349][T14909] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10679'. [ 1524.498958][T14923] netlink: 'syz.0.10684': attribute type 29 has an invalid length. [ 1524.542236][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10684'. [ 1524.665034][T14925] bond0: option primary_reselect: invalid value (133) [ 1524.768661][T14925] bond0 (unregistering): Released all slaves [ 1525.654027][T14952] netlink: 'syz.4.10693': attribute type 26 has an invalid length. [ 1525.665038][T14925] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1525.691627][T14952] netlink: 'syz.4.10693': attribute type 26 has an invalid length. [ 1526.241473][T14977] netlink: 'syz.1.10698': attribute type 8 has an invalid length. [ 1526.249599][T14977] netlink: 'syz.1.10698': attribute type 4 has an invalid length. [ 1526.332970][T30757] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1526.341675][T30757] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1526.351745][T14981] xt_TCPMSS: Only works on TCP SYN packets [ 1526.373053][T30757] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1526.381327][T30757] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1526.925952][T14995] syzkaller0: entered promiscuous mode [ 1526.938399][T14995] syzkaller0: entered allmulticast mode [ 1527.548798][T15024] wg2: Caught tx_queue_len zero misconfig [ 1527.963266][T15040] __nla_validate_parse: 18 callbacks suppressed [ 1527.963287][T15040] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10717'. [ 1528.283268][T15048] netlink: 'syz.3.10719': attribute type 1 has an invalid length. [ 1528.856054][T15067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1528.970713][T15069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10726'. [ 1528.993733][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10725'. [ 1529.060924][T15074] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10727'. [ 1529.070607][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10727'. [ 1529.789633][T15072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10725'. [ 1530.576274][T15116] vxcan2: entered allmulticast mode [ 1531.113228][T15139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10748'. [ 1531.202914][T15139] bond0: option primary_reselect: invalid value (133) [ 1531.267290][T15139] bond0 (unregistering): Released all slaves [ 1531.267666][T15148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10749'. [ 1531.404556][T15148] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 1531.437168][T15148] team0: Port device batadv6 added [ 1531.482030][T15136] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10747'. [ 1531.669304][T15153] vlan3: entered promiscuous mode [ 1531.690109][T15153] bond0: entered promiscuous mode [ 1531.690939][T15157] netlink: 'syz.2.10752': attribute type 10 has an invalid length. [ 1531.695218][T15153] bond_slave_0: entered promiscuous mode [ 1531.695464][T15153] bond_slave_1: entered promiscuous mode [ 1531.788820][ T30] audit: type=1804 audit(1777092143.749:26): pid=15159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.10751" name="/newroot/250/cgroup.controllers" dev="tmpfs" ino=1291 res=1 errno=0 [ 1531.811560][ T30] audit: type=1800 audit(1777092143.749:27): pid=15159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10751" name="cgroup.controllers" dev="tmpfs" ino=1291 res=0 errno=0 [ 1531.915598][T15165] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10754'. [ 1532.758794][T15188] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1532.944737][T15195] netlink: 'syz.4.10763': attribute type 1 has an invalid length. [ 1532.952744][T15195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1532.983166][T15191] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.095422][T15209] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10765'. [ 1533.383502][T15191] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.713776][T15191] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.889845][T15240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10772'. [ 1533.929294][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10772'. [ 1533.966254][T15191] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.979892][T15240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10772'. [ 1534.043859][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10772'. [ 1534.053021][T15240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10772'. [ 1535.219653][ T8932] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.261179][T15278] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20003 [ 1535.391739][T15280] sctp: [Deprecated]: syz.2.10783 (pid 15280) Use of int in max_burst socket option. [ 1535.391739][T15280] Use struct sctp_assoc_value instead [ 1535.426406][T30751] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.539515][ T8924] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.630857][T30755] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.992203][T15296] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10788'. [ 1536.381999][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10789'. [ 1536.597568][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10791'. [ 1537.186179][T15317] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 1537.272107][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10795'. [ 1537.462658][T15327] netlink: 'syz.4.10797': attribute type 1 has an invalid length. [ 1537.531462][T15327] netlink: 'syz.4.10797': attribute type 1 has an invalid length. [ 1537.539664][T15327] netlink: 'syz.4.10797': attribute type 2 has an invalid length. [ 1538.984425][T15373] __nla_validate_parse: 2 callbacks suppressed [ 1538.984448][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10811'. [ 1539.391925][T15384] netlink: 504 bytes leftover after parsing attributes in process `syz.0.10815'. [ 1539.709055][T15404] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20002 [ 1539.846017][T15403] mac80211_hwsim hwsim110 wlan0: Caught tx_queue_len zero misconfig [ 1539.920797][T15411] pim6reg: entered allmulticast mode [ 1539.955166][T15411] pim6reg: left allmulticast mode [ 1540.003238][T15415] sctp: [Deprecated]: syz.4.10825 (pid 15415) Use of int in max_burst socket option. [ 1540.003238][T15415] Use struct sctp_assoc_value instead [ 1540.024459][T15415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10825'. [ 1540.238207][T15424] netlink: 'syz.2.10829': attribute type 1 has an invalid length. [ 1540.311975][T15424] bond0: entered promiscuous mode [ 1540.317516][T15424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1540.397158][T15424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1540.404497][T15424] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1540.415037][T15424] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1540.465408][T15424] bond0: (slave wireguard0): making interface the new active one [ 1540.473191][T15424] wireguard0: entered promiscuous mode [ 1540.480439][T15424] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 1540.635928][T15422] netlink: 'syz.1.10828': attribute type 29 has an invalid length. [ 1540.833769][T15443] macsec1: entered promiscuous mode [ 1540.924734][T15445] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10834'. [ 1541.075934][T15452] netlink: 'syz.1.10835': attribute type 3 has an invalid length. [ 1541.100120][T15452] netlink: 772 bytes leftover after parsing attributes in process `syz.1.10835'. [ 1541.120935][T15452] netlink: 'syz.1.10835': attribute type 3 has an invalid length. [ 1541.129172][T15452] netlink: 772 bytes leftover after parsing attributes in process `syz.1.10835'. [ 1541.314175][T15464] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 1541.590737][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10840'. [ 1541.613949][ T30] audit: type=1804 audit(1777092153.579:28): pid=15474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.10840" name="/newroot/302/cgroup.controllers" dev="tmpfs" ino=1564 res=1 errno=0 [ 1541.741002][ T30] audit: type=1800 audit(1777092153.579:29): pid=15474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10840" name="cgroup.controllers" dev="tmpfs" ino=1564 res=0 errno=0 [ 1542.205398][T15500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1542.212782][T15500] IPv6: NLM_F_CREATE should be set when creating new route [ 1542.220092][T15500] IPv6: NLM_F_CREATE should be set when creating new route [ 1542.227493][T15500] IPv6: NLM_F_CREATE should be set when creating new route [ 1542.315034][T15500] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.10849'. [ 1542.735588][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10851'. [ 1543.023866][ T5161] Bluetooth: hci4: command 0x0405 tx timeout [ 1543.061953][T15502] .70·X: left allmulticast mode [ 1543.066966][T15502] hsr_slave_0: left allmulticast mode [ 1543.072374][T15502] hsr_slave_1: left allmulticast mode [ 1543.145598][T15502] bond3: left promiscuous mode [ 1543.154157][T15502] macsec0: left allmulticast mode [ 1543.159261][T15502] macsec1: left allmulticast mode [ 1543.208507][T15493] syzkaller1: entered promiscuous mode [ 1543.221885][T15493] syzkaller1: entered allmulticast mode [ 1543.285186][T15524] netlink: 'syz.2.10852': attribute type 6 has an invalid length. [ 1543.293331][T15524] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10852'. [ 1543.329943][T15521] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1543.337502][T15521] batadv2: entered promiscuous mode [ 1543.360388][T15521] team0: Port device batadv2 added [ 1543.420298][T30755] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1543.429531][T30755] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1543.555775][T15530] netlink: 'syz.2.10855': attribute type 10 has an invalid length. [ 1543.564142][T30755] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1543.596533][T30755] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1543.609830][T15530] team0: Port device dummy0 added [ 1543.626354][T15530] netlink: 'syz.2.10855': attribute type 10 has an invalid length. [ 1543.648059][T15530] team0: Port device dummy0 removed [ 1544.366399][T15570] __nla_validate_parse: 33 callbacks suppressed [ 1544.366420][T15570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10864'. [ 1544.737472][T15581] syzkaller0: entered promiscuous mode [ 1544.743491][T15581] syzkaller0: entered allmulticast mode [ 1544.811809][T15582] netlink: 'syz.0.10870': attribute type 16 has an invalid length. [ 1545.563023][T15603] lo: Caught tx_queue_len zero misconfig [ 1545.601474][T26165] lec:lec_start_xmit: lec0:No lecd attached [ 1546.219638][T15610] bond2: entered allmulticast mode [ 1546.338102][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.355399][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.446757][T15618] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10881'. [ 1546.532954][T15620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10882'. [ 1546.600671][T15622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10883'. [ 1546.615631][T15622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1546.623873][T15622] team0: Port device batadv0 added [ 1546.997750][T15553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1547.199737][T15629] netlink: 'syz.0.10886': attribute type 13 has an invalid length. [ 1547.536531][ T8932] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.555482][ T8932] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.574374][ T8932] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.651519][T15637] syzkaller0: entered promiscuous mode [ 1547.657142][T15637] syzkaller0: entered allmulticast mode [ 1547.664805][ T8932] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.705329][T15640] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 1547.888347][T15638] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10889'. [ 1547.902333][T15649] netlink: 'syz.0.10893': attribute type 4 has an invalid length. [ 1547.915589][T15650] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10892'. [ 1548.046596][T15656] netlink: 7 bytes leftover after parsing attributes in process `syz.2.10894'. [ 1548.058325][T15656] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10894'. [ 1548.074826][T15656] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10894'. [ 1548.464773][T15673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10901'. [ 1548.846506][T15691] netlink: 'syz.1.10906': attribute type 1 has an invalid length. [ 1548.854653][T15691] netlink: 'syz.1.10906': attribute type 2 has an invalid length. [ 1549.009044][T15702] netlink: 'syz.4.10908': attribute type 8 has an invalid length. [ 1549.425764][T15724] netlink: 'syz.2.10917': attribute type 3 has an invalid length. [ 1550.173777][T15744] __nla_validate_parse: 5 callbacks suppressed [ 1550.173800][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10921'. [ 1550.488160][T15713] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.496387][T15713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.513194][T15713] bond_slave_0: left promiscuous mode [ 1550.519184][T15713] bond_slave_1: left promiscuous mode [ 1550.532316][T15713] team_slave_0: left promiscuous mode [ 1550.540025][T15713] team_slave_1: left promiscuous mode [ 1550.546263][T15713] batadv2: left promiscuous mode [ 1550.660193][T15713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1551.136701][T30757] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1551.150516][T30757] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.181259][T30757] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1551.190511][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 1551.199944][ C1] lec:lec_tx_timeout: lec0 [ 1551.205190][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1551.223520][T30757] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.252348][T30757] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1551.294951][T30757] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.343584][T30757] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1551.343906][T15764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10925'. [ 1551.352531][T30757] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.464305][T15764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10925'. [ 1551.483296][T15768] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.10929'. [ 1551.530578][T15768] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1551.630847][T15768] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1551.667617][T15768] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1551.694773][T15768] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1552.437047][T15791] netlink: 'syz.2.10936': attribute type 1 has an invalid length. [ 1552.449675][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10936'. [ 1552.511713][T15792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10936'. [ 1552.637445][T15797] pim6reg: entered allmulticast mode [ 1552.658815][T15795] 5nè: entered promiscuous mode [ 1552.739869][T15804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10940'. [ 1552.751014][T15804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10940'. [ 1552.810792][T15805] netlink: 'syz.4.10941': attribute type 1 has an invalid length. [ 1552.870650][T15805] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1552.908434][T15810] bond5: (slave veth11): Enslaving as an active interface with a down link [ 1552.958966][T15805] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1552.972686][T15805] bond5: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1553.085396][T15824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10946'. [ 1553.099005][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10946'. [ 1553.207501][T15829] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 1553.768918][T15846] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 1553.784465][T15846] team0: Port device batadv7 added [ 1553.829376][T15852] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1553.859439][T15852] team0: Port device batadv1 added [ 1554.586621][T20505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.005032][T15896] : renamed from veth0_to_bond [ 1555.349070][T15907] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1555.365625][T15907] syzkaller1: linktype set to 270 [ 1555.392879][T15907] __nla_validate_parse: 9 callbacks suppressed [ 1555.392900][T15907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10970'. [ 1556.231061][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1556.240370][ C1] lec:lec_tx_timeout: lec0 [ 1556.606566][T15948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10980'. [ 1556.633961][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10981'. [ 1557.569555][T15979] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 1558.434539][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11003'. [ 1558.509952][T16013] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1558.535777][T16013] team0: Port device batadv4 added [ 1558.651672][T16023] netlink: 120 bytes leftover after parsing attributes in process `syz.4.11006'. [ 1558.687860][T16020] bond6: option ad_user_port_key: invalid value (65535) [ 1558.702897][T16020] bond6: option ad_user_port_key: allowed values 0 - 1023 [ 1558.713087][T16023] netlink: 'syz.4.11006': attribute type 1 has an invalid length. [ 1558.746157][T16023] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11006'. [ 1558.766211][T16020] bond6 (unregistering): Released all slaves [ 1558.945811][T16039] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11012'. [ 1558.985300][T16043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11014'. [ 1559.015291][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11014'. [ 1559.199095][T16041] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11013'. [ 1559.494668][T16057] netlink: 'syz.4.11015': attribute type 2 has an invalid length. [ 1560.529485][T16090] bond6: option xmit_hash_policy: invalid value (10) [ 1560.539270][T16099] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 1560.540050][T16090] bond6 (unregistering): Released all slaves [ 1561.002588][T16102] can: request_module (can-proto-0) failed. [ 1561.092280][T16120] __nla_validate_parse: 5 callbacks suppressed [ 1561.092301][T16120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11034'. [ 1561.158995][T16120] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1561.213960][T16120] team0: Port device batadv5 added [ 1561.306136][T16128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11037'. [ 1561.413394][T16134] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11040'. [ 1561.869545][T16145] netlink: 272 bytes leftover after parsing attributes in process `syz.0.11042'. [ 1561.901968][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11043'. [ 1562.296530][ T8927] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1562.379914][T16178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11050'. [ 1562.594952][T16178] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1562.626249][T16178] team0: Port device batadv3 added [ 1562.627370][T16189] xt_hashlimit: max too large, truncated to 1048576 [ 1562.682676][T16189] xt_hashlimit: overflow, try lower: 2/0 [ 1562.743675][T16194] netlink: 'syz.1.11054': attribute type 9 has an invalid length. [ 1562.751726][T16194] netlink: 'syz.1.11054': attribute type 6 has an invalid length. [ 1562.847601][T16196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11056'. [ 1562.876212][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11057'. [ 1562.896930][T16201] vlan3: entered allmulticast mode [ 1562.902641][T16201] geneve0: entered allmulticast mode [ 1563.143326][T16196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11056'. [ 1563.596709][T16222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11063'. [ 1563.731616][T16227] syzkaller0: entered promiscuous mode [ 1563.737169][T16227] syzkaller0: entered allmulticast mode [ 1563.768931][T16234] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 1563.781169][T16234] team0: Port device batadv8 added [ 1570.061896][T16297] team0: entered promiscuous mode [ 1570.075359][T16297] team_slave_0: entered promiscuous mode [ 1570.082047][T16297] žÿ: entered promiscuous mode [ 1570.088097][T16297] batadv1: entered promiscuous mode [ 1570.094172][T16297] batadv2: entered promiscuous mode [ 1570.099643][T16297] batadv3: entered promiscuous mode [ 1570.106212][T16297] dummy0: entered promiscuous mode [ 1570.112260][T16297] batadv4: entered promiscuous mode [ 1570.117944][T16297] batadv5: entered promiscuous mode [ 1570.146112][T16297] batadv6: entered promiscuous mode [ 1570.155329][T16297] batadv7: entered promiscuous mode [ 1570.161508][T16297] batadv8: entered promiscuous mode [ 1570.166990][T16297] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1570.263224][T16306] syzkaller1: entered promiscuous mode [ 1570.269420][T16306] syzkaller1: entered allmulticast mode [ 1570.281375][T16306] __nla_validate_parse: 4 callbacks suppressed [ 1570.281397][T16306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11087'. [ 1570.510551][T16316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11090'. [ 1570.745198][T16329] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.11093'. [ 1570.909757][T30751] hsr0: left allmulticast mode [ 1570.916613][T30751] hsr_slave_0: left allmulticast mode [ 1570.924668][T30751] bridge0: port 3(hsr0) entered disabled state [ 1571.385493][T30751] bond2 (unregistering): (slave bridge1): Releasing active interface [ 1571.621931][T30751] bond0 (unregistering): Released all slaves [ 1571.658759][T30751] bond1 (unregistering): Released all slaves [ 1571.747104][T16353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11100'. [ 1571.761784][T30751] bond2 (unregistering): (slave veth3): Releasing active interface [ 1571.772589][T30751] bond2 (unregistering): (slave veth5): Releasing active interface [ 1571.782139][T30751] bond2 (unregistering): Released all slaves [ 1571.798378][T30751] bond3 (unregistering): (slave wireguard0): Releasing backup interface [ 1571.807212][T30751] wireguard0: left promiscuous mode [ 1571.814736][T30751] bond3 (unregistering): (slave wireguard1): Releasing backup interface [ 1571.824897][T30751] bond3 (unregistering): Released all slaves [ 1571.838884][T30751] bond4 (unregistering): Released all slaves [ 1571.854413][T30751] bond5 (unregistering): Released all slaves [ 1571.869974][T30751] bond6 (unregistering): (slave vcan1): Releasing backup interface [ 1571.878110][T30751] vcan1: left promiscuous mode [ 1571.885857][T16354] netlink: 'syz.4.11100': attribute type 13 has an invalid length. [ 1571.886776][T30751] bond6 (unregistering): Released all slaves [ 1571.894557][T16354] netlink: 'syz.4.11100': attribute type 17 has an invalid length. [ 1571.924390][T30751] bond7 (unregistering): Released all slaves [ 1571.973239][T16354] gre0: left promiscuous mode [ 1571.978177][T16354] gre0: left allmulticast mode [ 1572.003685][T16353] netlink: 'syz.4.11100': attribute type 1 has an invalid length. [ 1572.026304][T16353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11100'. [ 1572.314565][T16354] 8021q: adding VLAN 0 to HW filter on device team0 [ 1572.368283][T16354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1572.412224][T16367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1572.451810][T30751] : left promiscuous mode [ 1572.515265][T16365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1572.534218][T16367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11102'. [ 1572.699656][T30751] tipc: Disabling bearer [ 1572.710135][T16374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11105'. [ 1572.738223][T30751] tipc: Disabling bearer [ 1572.776889][T30751] tipc: Left network mode [ 1572.795450][T16374] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1572.823866][T16374] team0: Port device batadv2 added [ 1572.887054][T16383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11108'. [ 1573.049976][T16386] netlink: 25 bytes leftover after parsing attributes in process `syz.4.11109'. [ 1573.315973][T16400] bond0: Caught tx_queue_len zero misconfig [ 1575.733229][T30751] ------------[ cut here ]------------ [ 1575.741186][T30751] err [ 1575.741206][T30751] WARNING: net/wireless/core.c:207 at cfg80211_switch_netns+0x574/0x5a0, CPU#0: kworker/u8:13/30751 [ 1575.755171][T30751] Modules linked in: [ 1575.761272][T30751] CPU: 0 UID: 0 PID: 30751 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 1575.771073][T30751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1575.781495][T30751] Workqueue: netns cleanup_net [ 1575.786346][T30751] RIP: 0010:cfg80211_switch_netns+0x574/0x5a0 [ 1575.792699][T30751] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 a8 ec 31 f7 eb 82 e8 01 b2 c6 f6 e9 63 fe ff ff e8 f7 b1 c6 f6 e9 59 fe ff ff e8 ed b1 c6 f6 90 <0f> 0b 90 e9 95 fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c b7 fa [ 1575.812839][T30751] RSP: 0018:ffffc9000205f8a0 EFLAGS: 00010293 [ 1575.819046][T30751] RAX: ffffffff8aff1f03 RBX: ffff888074710df0 RCX: ffff88809b953d80 [ 1575.827148][T30751] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000 [ 1575.835987][T30751] RBP: 00000000ffffffef R08: ffffffff903386f7 R09: 1ffffffff20670de [ 1575.846509][T30751] R10: dffffc0000000000 R11: fffffbfff20670df R12: ffff888074710720 [ 1575.854815][T30751] R13: ffff8880775104a0 R14: dffffc0000000000 R15: ffff888074710908 [ 1575.863141][T30751] FS: 0000000000000000(0000) GS:ffff888125213000(0000) knlGS:0000000000000000 [ 1575.872246][T30751] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1575.878896][T30751] CR2: 00002000002cf030 CR3: 00000000630a4000 CR4: 00000000003526f0 [ 1575.888104][T30751] Call Trace: [ 1575.891645][T30751] [ 1575.894914][T30751] cfg80211_pernet_exit+0x92/0x120 [ 1575.900088][T30751] ops_undo_list+0x49f/0x940 [ 1575.905688][T30751] ? __pfx_ops_undo_list+0x10/0x10 [ 1575.911348][T30751] ? idr_destroy+0x218/0x290 [ 1575.915991][T30751] ? do_raw_spin_unlock+0xf5/0x210 [ 1575.921552][T30751] cleanup_net+0x56b/0x800 [ 1575.926099][T30751] ? __pfx_cleanup_net+0x10/0x10 [ 1575.931492][T30751] ? process_scheduled_works+0xa70/0x1860 [ 1575.937290][T30751] ? process_scheduled_works+0xa70/0x1860 [ 1575.943226][T30751] process_scheduled_works+0xb5d/0x1860 [ 1575.948848][T30751] ? __pfx_process_scheduled_works+0x10/0x10 [ 1575.955333][T30751] ? assign_work+0x3d5/0x5e0 [ 1575.960081][T30751] worker_thread+0xa53/0xfc0 [ 1575.965115][T30751] kthread+0x388/0x470 [ 1575.969254][T30751] ? __pfx_worker_thread+0x10/0x10 [ 1575.974600][T30751] ? __pfx_kthread+0x10/0x10 [ 1575.979227][T30751] ret_from_fork+0x514/0xb70 [ 1575.983964][T30751] ? __pfx_ret_from_fork+0x10/0x10 [ 1575.989120][T30751] ? __switch_to+0xc79/0x1410 [ 1575.994054][T30751] ? __pfx_kthread+0x10/0x10 [ 1575.998722][T30751] ret_from_fork_asm+0x1a/0x30 [ 1576.003625][T30751] [ 1576.006682][T30751] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1576.014064][T30751] CPU: 0 UID: 0 PID: 30751 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 1576.023710][T30751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1576.033800][T30751] Workqueue: netns cleanup_net [ 1576.038631][T30751] Call Trace: [ 1576.041959][T30751] [ 1576.044905][T30751] vpanic+0x56c/0xa60 [ 1576.048914][T30751] ? __pfx__printk+0x10/0x10 [ 1576.053559][T30751] ? __pfx_vpanic+0x10/0x10 [ 1576.058106][T30751] ? is_bpf_text_address+0x292/0x2b0 [ 1576.063523][T30751] ? is_bpf_text_address+0x26/0x2b0 [ 1576.068778][T30751] panic+0xc5/0xd0 [ 1576.072565][T30751] ? __pfx_panic+0x10/0x10 [ 1576.077110][T30751] ? ret_from_fork_asm+0x1a/0x30 [ 1576.082097][T30751] __warn+0x315/0x4c0 [ 1576.086182][T30751] ? cfg80211_switch_netns+0x574/0x5a0 [ 1576.091710][T30751] ? cfg80211_switch_netns+0x574/0x5a0 [ 1576.097194][T30751] __report_bug+0x29a/0x540 [ 1576.101725][T30751] ? cfg80211_switch_netns+0x574/0x5a0 [ 1576.107196][T30751] ? __pfx___report_bug+0x10/0x10 [ 1576.112265][T30751] ? cfg80211_switch_netns+0x574/0x5a0 [ 1576.118070][T30751] report_bug+0x16a/0x220 [ 1576.122498][T30751] ? cfg80211_switch_netns+0x574/0x5a0 [ 1576.128054][T30751] ? cfg80211_switch_netns+0x576/0x5a0 [ 1576.133524][T30751] handle_bug+0x9c/0x200 [ 1576.137782][T30751] exc_invalid_op+0x1a/0x50 [ 1576.142309][T30751] asm_exc_invalid_op+0x1a/0x20 [ 1576.147188][T30751] RIP: 0010:cfg80211_switch_netns+0x574/0x5a0 [ 1576.153270][T30751] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 a8 ec 31 f7 eb 82 e8 01 b2 c6 f6 e9 63 fe ff ff e8 f7 b1 c6 f6 e9 59 fe ff ff e8 ed b1 c6 f6 90 <0f> 0b 90 e9 95 fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c b7 fa [ 1576.173149][T30751] RSP: 0018:ffffc9000205f8a0 EFLAGS: 00010293 [ 1576.179238][T30751] RAX: ffffffff8aff1f03 RBX: ffff888074710df0 RCX: ffff88809b953d80 [ 1576.187488][T30751] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000 [ 1576.195810][T30751] RBP: 00000000ffffffef R08: ffffffff903386f7 R09: 1ffffffff20670de [ 1576.203874][T30751] R10: dffffc0000000000 R11: fffffbfff20670df R12: ffff888074710720 [ 1576.212029][T30751] R13: ffff8880775104a0 R14: dffffc0000000000 R15: ffff888074710908 [ 1576.220286][T30751] ? cfg80211_switch_netns+0x573/0x5a0 [ 1576.226040][T30751] cfg80211_pernet_exit+0x92/0x120 [ 1576.231189][T30751] ops_undo_list+0x49f/0x940 [ 1576.235989][T30751] ? __pfx_ops_undo_list+0x10/0x10 [ 1576.241476][T30751] ? idr_destroy+0x218/0x290 [ 1576.246289][T30751] ? do_raw_spin_unlock+0xf5/0x210 [ 1576.251623][T30751] cleanup_net+0x56b/0x800 [ 1576.256053][T30751] ? __pfx_cleanup_net+0x10/0x10 [ 1576.261006][T30751] ? process_scheduled_works+0xa70/0x1860 [ 1576.266833][T30751] ? process_scheduled_works+0xa70/0x1860 [ 1576.272652][T30751] process_scheduled_works+0xb5d/0x1860 [ 1576.278275][T30751] ? __pfx_process_scheduled_works+0x10/0x10 [ 1576.284461][T30751] ? assign_work+0x3d5/0x5e0 [ 1576.289167][T30751] worker_thread+0xa53/0xfc0 [ 1576.293808][T30751] kthread+0x388/0x470 [ 1576.298148][T30751] ? __pfx_worker_thread+0x10/0x10 [ 1576.303371][T30751] ? __pfx_kthread+0x10/0x10 [ 1576.308074][T30751] ret_from_fork+0x514/0xb70 [ 1576.312716][T30751] ? __pfx_ret_from_fork+0x10/0x10 [ 1576.318388][T30751] ? __switch_to+0xc79/0x1410 [ 1576.323183][T30751] ? __pfx_kthread+0x10/0x10 [ 1576.327810][T30751] ret_from_fork_asm+0x1a/0x30 [ 1576.332620][T30751] [ 1576.336161][T30751] Kernel Offset: disabled [ 1576.340496][T30751] Rebooting in 86400 seconds..