last executing test programs: 9.426080715s ago: executing program 3 (id=14595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a01010000000000ffff00010002000900010073797a30000000000900030073797a32000000002c000000030a05000000000000000000010000050c00024000000000000000010900010073797a3000000000140000001100010000000000000000000700000a"], 0xa8}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c00000002000000000000000000000d0a0000000000008004000006"], &(0x7f0000000f40)=""/4089, 0x76, 0xff9, 0x7}, 0x28) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba0000", @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x0) sendmmsg(r4, 0x0, 0x0, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000019000000000004000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000426676b800000900000000000040000105df28a5267d39c7a19623ba28d34ef829ea15c42bf3ce55e9fc301400beaa43438cbeda03ab55fe"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r5, 0x0, 0x48000) socket$netlink(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000e63d1e659443750d3e259072b1e3fa9d8a320bf71031e89d5057242c6c20573a4c20b2d937d89139fee4b3f11e875bc8339571896e8365a7940098520acbedac0bfc5d1abb5c35719f4855f2e15fd05f79f23279f58b9fbee1fdaba3ac4e7a34e6bbd0001968d86eb6ba3ccea1438d0caaed587c379072fe75e8da4bff9c11564ef64227ffa55d26b507b88dc39950a0d92785ff5ff3ca2e1edb8a97b3", @ANYRES32=r9, @ANYRESOCT=r4], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) 8.732835517s ago: executing program 3 (id=14600): syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c02000000000000050200090502000005020006c204"], 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x0, 0x25dfdbff, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x0) accept(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x80) 8.614038147s ago: executing program 3 (id=14601): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="18000000150081044e81f782db44b9040a78080206000000", 0x18}], 0x1, 0x0, 0x0, 0x7400}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x3, @mcast2, 0x711}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r2, 0x20, &(0x7f0000000700)={&(0x7f00000004c0)=""/255, 0xff, 0x0, &(0x7f0000000680)=""/120, 0x78}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x9, &(0x7f0000000280)=ANY=[@ANYRESHEX=r3, @ANYRES64=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0xffffffffffffff60, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000940)={0x1ff, {{0xa, 0x4e22, 0xffff, @dev={0xfe, 0x80, '\x00', 0x42}, 0x4eb1}}, 0x0, 0x3, [{{0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x40}}, {{0xa, 0x4e21, 0x2, @mcast1, 0x1f6a}}, {{0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}]}, 0x210) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x9, 0x61, 0x11, 0x69}}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x2a}, 0x94) 8.422161819s ago: executing program 3 (id=14606): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000200)={0x14, {{0x29, 0x0, 0x43000000, @remote, 0x4}}}, 0x88) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0xfffffffffffff801], 0x0, 0x0, 0x100000}}, 0x40) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000200)={0x14, {{0x29, 0x0, 0x43000000, @remote, 0x4}}}, 0x88) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0xfffffffffffff801], 0x0, 0x0, 0x100000}}, 0x40) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000000)) (async) 8.30562102s ago: executing program 3 (id=14609): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @empty, @remote}, "00186371ae9b1c03"}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2000000076000d0b000000000000000043c00e000000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r5, @ANYBLOB="04005e801c005e8008000700c5f133694bbd07cb55000000080003006e8f000030005e800800020003000000080002491acf00000c0001"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xa0, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='2'}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r4, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xcb}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r4, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000d0) sendmmsg$inet6(r0, &(0x7f00000034c0)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x4d7, @dev={0xfe, 0x80, '\x00', 0x47}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000000c0)="7fff84", 0x3}], 0x1}}], 0x1, 0x4c040) 7.88664616s ago: executing program 3 (id=14613): socket$kcm(0x11, 0x200000000000003, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f00000002c0)=0x6, 0x4) sendto$inet(r2, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) (async) sendto$inet(r2, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001800010000000000000000000a80000000030006000000001400070000000000000000000000000000000001047431683a7e77f8fea9e092fc09490ee4147b39ac8328f42104c0567a9c6ca56023ec9c7c6858196273b0f1289c0c8b6000e646aef97dccd5f205a4250ffc5f69d6fe67ad12ede62cc46c6563c5ea47e8efb14ca0ad8c64e06dee0b023dd5991501829cbbe4e0be7634301471baca"], 0x30}}, 0x20000000) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001800010000000000000000000a80000000030006000000001400070000000000000000000000000000000001047431683a7e77f8fea9e092fc09490ee4147b39ac8328f42104c0567a9c6ca56023ec9c7c6858196273b0f1289c0c8b6000e646aef97dccd5f205a4250ffc5f69d6fe67ad12ede62cc46c6563c5ea47e8efb14ca0ad8c64e06dee0b023dd5991501829cbbe4e0be7634301471baca"], 0x30}}, 0x20000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89b1, &(0x7f0000000000)={'bond0\x00', 0x200}) close(0x4) 3.972397695s ago: executing program 1 (id=14638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x894a, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0x26}], 0x1}, 0x20000000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x80, 0x30, 0x51b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=r8, @ANYRES32=r11, @ANYBLOB="080002007f00787fde90e404dc703bd25d24163a5322869cfd4b3f1881939431c3376178ec6d90899b3622cd35d71c7f9914da986f4fd63de48eb4dae8"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0xea5bc50b619917ee) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r8}) r12 = socket$packet(0x11, 0x1, 0x300) getsockopt$inet6_mreq(r10, 0x29, 0x14, &(0x7f0000000200)={@rand_addr, 0x0}, &(0x7f0000000240)=0x14) setsockopt$packet_drop_memb(r12, 0x107, 0x2, &(0x7f0000000080)={r13, 0x1, 0x6, @remote}, 0x10) 3.67544983s ago: executing program 1 (id=14644): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)={0x2c, 0x3e, 0x107, 0x3, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @typed={0x11, 0x1, 0x0, 0x0, @str='hmac(sha224)\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000e00)='scalable', 0x8) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca238e0548c5e955d74b", 0xe6}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295499abbcb388d291aa83e93db6cf9ab0954e6a8dfc19c3c1533a11d81e0382999bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f0756604847689d37ee3047e61531a8672447cb501b2560bc0e0c5fb2c9f341ed3972b30190e930af94642ab1557e286442cfa6a84ad931e99549640705cd6261ca7094910df055747e2e2ae170e7850093bf0aa3370e03222b5de4597ca76f3193d4a45e424b540f292fd8b3523e5a2dd95177db84a801f0bc7", 0x15a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000480)}, {&(0x7f0000000880)="fb70b4c3828979137f8e899a032064ee15287cc8803ecee7b6203553b506e26c7d9d0bf628b2580352c6639716dcf515e2c2064edfd15755838f79f931eb9c11172d52729c2254544f874aae59c290a952e0ecc77fc3a0de141c9d400d745477bab96a1e7761f848770256", 0x6b}], 0x3}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xd4}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) close(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x1, 0x27dfdffd, {0xa, 0x0, 0x10, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x3, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9f5}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffffffffffffffff}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4bf913184e3ac755) 2.823155217s ago: executing program 4 (id=14654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x400082, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4}, 0x6) (async) r4 = socket(0x10, 0x2, 0x0) (async) close(0x3) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10000010}, 0x4040004) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) (async) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000063, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @local}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) 2.759882373s ago: executing program 1 (id=14656): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) close(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) 2.592566754s ago: executing program 4 (id=14657): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00cc00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700840000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4800) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=0x0, @ANYRES8=r3, @ANYRES64=r3, @ANYBLOB="35ac6507efb0ac66b9120fe36b783d4ea80be91c4fff642dd53441403dbace0f6c947b6cc2aa83d653f12d8491342348a9c696b0f7144a99ebe21959ca1c0d07bd530ab0"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc000) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000c40)={r4, 0x8000000000000001, 0x0, [0x1000, 0x10000, 0x8, 0x2, 0x13], [0x0, 0x5, 0x1, 0x3, 0x1, 0xfffffffffffffeff, 0x6, 0x7, 0x1, 0x0, 0x1000, 0xf, 0x8, 0x1, 0x6, 0x80, 0xe0, 0xa6, 0xf, 0x1, 0x2ce8, 0x448d, 0x10000, 0x709, 0xe, 0x3, 0xa42, 0xc, 0x9, 0x6, 0xa, 0x5, 0x2, 0x9f, 0xffff, 0x800000, 0x8, 0x2, 0x3, 0x5, 0x8001, 0x7f875b81, 0x3, 0x2, 0x6d, 0x4, 0xf, 0x8, 0x5, 0xfffffffffffffff9, 0x5, 0x6, 0x0, 0x982, 0x3, 0xd, 0x199d, 0x5, 0x1, 0x3, 0x100000001, 0x1, 0xfffffffffffffff5, 0x8, 0x7, 0x1, 0x9, 0x7, 0x853, 0x80000000, 0xbb6, 0x10000, 0x80000000, 0x9, 0xe, 0x2, 0x8, 0xa99c, 0x2, 0xbad, 0x0, 0x9591, 0x9, 0xfffffffffffffff7, 0x100, 0x3, 0xb27, 0x3, 0x9, 0xffffffffffffff01, 0x7f, 0xffffffff, 0x4, 0x1, 0x7f, 0x41285081, 0x4919, 0x2b8d, 0x31, 0x2a6, 0x7, 0x5, 0x4, 0x80000001, 0x1, 0xfff, 0xffffffff, 0xffffffffffffffff, 0xfffffffffffff464, 0x6, 0x673c, 0x9, 0x5, 0x3f, 0x1, 0x714, 0x6, 0x0, 0x400, 0x10001, 0x9]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0xf, 0x1ff, 0xfb9d, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}}, 0x81, 0x2, 0x80000001, 0x4b, 0x9}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) connect(r6, &(0x7f00000001c0)=@generic={0x29, "15b47c7aeba7ee49d0687cd8ffd93121dbedf77e489c3083022323bfb7828753d7f5f2583da9a331be0887a77ecf5f7b074de695cc6a3c62648cbc5dd8e3a578898d3549f2041a879e76856bf7acac13333378ff838aeafd062347ca506219c4dc8ac43f97064484fee61ec52a1b4b1394d97e48ed909ef285bb34eba7d1"}, 0x80) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x1ff, 0x1}, 0x1c) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2040, 0x0) recvmmsg$unix(r7, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0x7d4105cf, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000040) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r8, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) 2.563433414s ago: executing program 1 (id=14660): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_buf(r0, 0x1, 0x4a, 0x0, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x8) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000200), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc0902, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x51da80, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0x20000008}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2.097420699s ago: executing program 4 (id=14665): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r5, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x70}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x3, 0xfffffff9, {{0x6, 0x4, 0x3, 0x3e, 0x18, 0x65, 0x0, 0x93, 0x4, 0x0, @multicast2, @empty, {[@noop]}}}}}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv4_newroute={0x74, 0x18, 0x800, 0x70bd28, 0x25dfdbff, {0x2, 0x80, 0x0, 0x6, 0xfe, 0x2, 0xff, 0x4, 0x2400}, [@RTA_IIF={0x8, 0x3, r7}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x9}}, @RTA_TABLE={0x8, 0xf, 0x8}, @RTA_GATEWAY={0x8, 0x5, @broadcast}, @RTA_PRIORITY={0x8, 0x6, 0xe}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_MARK={0x8}, @RTA_DPORT={0x6, 0x1d, 0x4e21}]}, 0x74}}, 0x44010) 2.065164594s ago: executing program 4 (id=14666): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100003052abd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a000000a8010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="2883df2cb8b4e078dad706e65ef46376b552b5f49927aa0b6f26874cde1427d744c3ed00e685b3a4a2bb7acce6534fd73af80d841b2df6bda50c39e72d8cbd6973fbfdaa272dfd75f625179e4637c1932170f56d8be9fe713ac6e756917266255db02b8d63c90c8dd891cbbabc330c64f3281069c0d1734e0dd77636b279f109962e4adcda6bf76b7456822519c8a70f7163b9dc51b102060000003843856bb80f2ece29f5a74f66afe1fab70b676376f48c0a4bbef47109da5059d6c4313983de190063cf67e704883dd169dadb70f6bc7bb898a366997d97a732f7c0c929aed1d52c05b5565c5c00000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40011}, 0x800) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2.052505527s ago: executing program 0 (id=14667): accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0xe23, 0x8005, @mcast2, 0xffffffff}], 0x1c) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x6c, 0x0, @private, @rand_addr, {[@ra={0x94, 0x4, 0x1000}]}}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000203000000000000000000000b0200000000000000000000090200"], 0x0, 0x3e}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) 1.949793039s ago: executing program 0 (id=14668): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt(r0, 0x1, 0x2, &(0x7f0000000340)=""/187, &(0x7f0000000400)=0xbb) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000001900000095"], &(0x7f0000001b80)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.831158844s ago: executing program 4 (id=14670): listen(0xffffffffffffffff, 0xb5d6) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000340)={0xa, 0x0, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x4}, 0x20) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) sendmmsg(r2, &(0x7f0000002bc0)=[{{&(0x7f0000000500)=@ll={0x11, 0xf7, r4, 0x1, 0x1, 0x6, @remote}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000580)="3f7a83aee3649e3bac30c80d14e1f27acf1a171289846cea4f494296cbbbe513efc76afff42aebba6d7dba624aa21e2e3989611d100541c5362d410a3336baa0b04409bc2e3d840612b8de60ebeb406da15519bada06e6373fcf741f2e", 0x5d}, {&(0x7f0000000600)="ec5ae2b600f6dd5e56491309fc739908e55246b7836a53d0335da8734c0a8ff00013", 0x22}, {&(0x7f0000000640)="e2b2762d88e397b476b4c99af85b3e18ec891093b96a3fa318ab9bb27349c785414f2c91b125c44edd8adc7a96bf946563ecb4e4256e8a5c7c824665b42ab93582370d769169b22a55342e9a861fc75f9ba12095a09e8be5f72a1ea674fc30b69fc0b8027ac5bf5a593c", 0x6a}], 0x3}}, {{&(0x7f0000000700)=@pppoe={0x18, 0x0, {0x2, @broadcast, 'ip6gretap0\x00'}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)="3bac0b535128fac03e19ce2e3caad548f13dd260592e323bbd5aa5b14c7ef7d5952fdf8ab82cb27400298f55b20fc36af4063de5721d148940974a4b174cfaee6a20eedf3ac5d93d", 0x48}], 0x1, &(0x7f0000001940)=[{0x40, 0x6, 0x8000, "0fcce658c3bbcf4756891a2d614312a67c9100f9b421f5605be032842d23f838b195228c7c252e746faefecf7c1692cd"}, {0x58, 0x10a, 0x21d, "f3480cab2140aaf0bf5de5ac4124394eb2ba2008770237c94a536c79d6a8a82c9208e31aef3047b4b4fc03f9a17a2e0b130c60b632ec991888066c96e027ad87b7946ff4"}, {0x1010, 0x119, 0x0, "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"}, {0xb8, 0x0, 0x1, "a431a7b4e0124463f4e781d48cc31271a22d3313dfa74c2bf4333f63832a0cbebf18f5bbeb0d77ef090677592128312ce8431f107f29f7e7dc45064655f758d23c83c03e4363390800a992a2442eb364c3e87f3241ceaae7cc4d2e6514f4e11c5f57c5e92252e51d77d64bb5b2481785517c80881998725ee4a8552aec03f9fca6ba484037ca1a76fbb3ac1dc22820b2d6e235959ad57b060cf417047dfaec112dc69489a793"}, {0xe8, 0x111, 0x3a61, "21a18074c15fe0ce834d6d6909d2c29da61a7bfac8ef3869bb190bd414553bfe3d79a1d7f1b7e67b66d4b40fe2c93b751ebc2fad33f6d2e368b72e8e900217037327a7bb5c573f33a0092958f43927160b4b5423ed051349d0646db668f878f5f5d533981542eb61e2d8efa5aa7857cb7ea668818d572248279f5827d1a72f2807dc2d46136108b662e3ec380b6248e87fb0d364d3c01c07c0158f9cf2dc0e09e494fd85a72b2ac47c4e4e97f5ea7ddcc2effbe80cd522fc00900aa972a89316946bc9fda281280f0ec7f34face2497e3cba8df5df24"}], 0x1248}}], 0x2, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000820000000000000060b4000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r8, r6, 0x25, 0x0, @val=@tracing={0x0, 0xa}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[], 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001900)={0x24, 0x43, 0x107, 0xffffdffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x73, 0x0, 0x0, @uid}]}]}, 0x24}}, 0xc000) sendto$l2tp6(r3, &(0x7f0000000c40)="1f4ae4a3c618e0bd5b09f1af16c7fbc3620107920fea3bf2c7dc165464c8756f5e55f582f487260293052c71e81a012a995cbca7e93c44f655d45a07d8256b5c90a94ebc8828251dac9dec6c2dfddfc8add0cb70c374afcf6c01c07ceaf4fdc595cbe39547201e81f5cb00432fa145891a5e7a35caecc74bccd6ddd59f748187a6a2a1e19403f222ff917754a326d1093ad3471e67724b657411f27fda16ed531b13aecc603d43c5ea6db836528ac18349cadfe97e024d8ef1", 0xb9, 0x4080, &(0x7f0000000d00)={0xa, 0x0, 0x8, @local, 0x7, 0x3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800010301000d00000000000a410000ff0300060000000014000100fe80"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000002c40)={{r10}, r11, 0x10, @inherit={0x58, &(0x7f0000000bc0)={0x0, 0x2, 0x4, 0x6, {0x11, 0x9, 0xc429, 0x7, 0x7}, [0x8, 0x0]}}, @subvolid=0xdf}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f00000008c0)={&(0x7f0000000c40)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x240400d0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.722421838s ago: executing program 2 (id=14671): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) close(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) 1.609330126s ago: executing program 2 (id=14672): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 1.528378144s ago: executing program 1 (id=14673): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) (async) getsockopt(r4, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010010000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b0001006d61637300630000140002"], 0x44}}, 0x0) 1.478185424s ago: executing program 2 (id=14674): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f00)=""/50, 0x32}, {&(0x7f0000001f80)=""/132, 0x84}], 0x2}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffc, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 1.437247281s ago: executing program 1 (id=14675): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x9, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbf8a544}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0xa4ff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004900010028bd700000dcf4250a", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.373357302s ago: executing program 4 (id=14676): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="ebaa0000400007012bbd7000fedbdf25037c00000400c2800c00018008001d00ac1e0001"], 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0x20004004) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x14, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYRESDEC=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x86, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000280), &(0x7f0000000000)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000440), &(0x7f0000000580)=r2}, 0x20) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000001880)=@ethtool_drvinfo={0x3, "653b557e85cd6759f156bdb45c86da5abb01c33cf923b641b5bca051cdd737cf", "b005cc8cc932651b1e48d1d41e67e352407c6e1ec7c68f243a61879ce0e69561", "2f38157b1d9a34119d0a81b48cede472b0d6913fbd23d65745e068a94255c639", "2c391b0b0cff0a9069142b76b27ad949b3833b7a05faec47c2974adb78e46d41", "77297e53dd17606fbe9f3a2505c48fcd9415325d32dcc6200543a5328887482c", "fc87cfe7a1d3e857ee77ad63", 0x40, 0x1, 0x5, 0x6, 0x3}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) accept4$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000400)=0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) write$nci(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="71050208010082030a0604470500"], 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x12) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) accept4(r9, 0x0, 0x0, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x7fffffffffffffff}]}, 0x108) 1.367327811s ago: executing program 0 (id=14677): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="c37c75f3b13ce7e24afa414399b992031004000000efbbb0406d6edf2ae00005000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) close(0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none, 0x3, 0x1}, 0xe) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, &(0x7f0000000100)) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000010240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000010200)={&(0x7f00000001c0)={0x28, 0x3e9, 0x0, 0x7ffffff, 0x0, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x40810}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) 1.284110339s ago: executing program 0 (id=14679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000040)=0x7fff, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x1, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 574.177455ms ago: executing program 2 (id=14680): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002440)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @ssrr={0x89, 0xf, 0xce, [@loopback, @loopback, @rand_addr=0x64010102]}, @lsrr={0x83, 0x3, 0x1}]}}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x3}}}}}}, 0x0) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x7}, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[], 0x38}}, 0x2000a080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x4}}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x3}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x1}, {0xd, 0x1}, {0x5, 0x3}]}]}, {0x0, [0x61, 0x2e]}}, &(0x7f00000003c0)=""/99, 0x64, 0x63, 0x1, 0x8d}, 0x28) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 276.92703ms ago: executing program 0 (id=14681): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) close(0x3) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f00000000c0)=0x3ff, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031400d3fc220000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 219.855908ms ago: executing program 2 (id=14682): r0 = socket$packet(0x11, 0x3, 0x300) r1 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040)) writev(r1, &(0x7f0000001780)=[{&(0x7f0000000100)="59b4b905761bb6ebabf66c3ff21ff45da0426566ba35e1dd14dccb0e7b326b122513833c150c18b23a8b6a9dd49e3c94363a03328e3c74df79d89ce72e1b1ebb5622b89eabc766140a", 0x49}, {&(0x7f0000000200)="83c215", 0x3}, {&(0x7f00000003c0)="83884ca5a4ab8d5336d12b84100993a90a77e5d0edeee6293c073adb86064aec45b7297df8d04009ce4ed43bbf12971f930b714d58f6b5b46dd782d902a2d5b43a9085ac48fe14554f05ad2b533d66b41d1bc67525fd7728e3c2ae1a7aca4b7fbe7f574d27b3f2658caa293e4f8f58964e4cc2bdd1a65b5e953cd44ccf2e5a9e111f6282ad47ce76c04da10afe85a27264fc584586a006bc427ec095a9d96135baaad5e247de43628b1f7e59403f8a964e65ab800d0975444ec9283938014bb8f9f88684", 0xc4}, {&(0x7f00000004c0)="a6ddf091a9e795a6d96edca6225ab01335d7315a8c6acc1d1bd164650c2bea315fc960623dc2677e0c37e64524df499630c9f6169a1a13446fce03033f7df7f4cbea5885c2e483a9933bb023822d53e1e7f5e0bb35a59391aefb54fd571d624acd145ef267e73d9fd1259bae15b190a4c8e20bda73e9a12e716099bab5c4353ef3f64d112e89482aafdf0aafb6f89e257b1c1ddf9caafa25ea94c8b5a5c1a12ad0587f2dbb21685bc81f7a9dd47bc6c9e91f", 0xb2}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="b95d569974016f050518daac2b18baf59effcab35971082a28c5e526912614a040fc335b354ede8a5f93d464e7ea110d84f6398445abb55c57e9bae679fb389291a3d95bf495fbb70192f126f5f303223d410777c3a75a8d22386152c89e2b624f8c57aba3e9a19d6a25b12f648d17eea515c68cedd4fea10881a4284dc34d5fb0908bafa258bbddf8ab74e2b549cc034ed3e0bf8905dedea1516f093279b0b3ce9cd13bae564087e60e3b65aa9864242fdc8c4adf844391d771e4c48d75bc32df279ea7703de0e995bcaa58fda49ebdf3c9c2af7687ff9ae38d89a7076e4d357f0f738d1041cead", 0xe8}, {&(0x7f0000001680)="c81ba828fc228d4b915f9c05fd4435a6dd1e218709a0c32cb1b2211bc2abd9fe902c852909b1d017c4f5cd4b2e5c938f37927ba75e6f1e4f08529748003a55c642fb77172fdb83c5742511b28a33d35e0d5e8f3ad4eae9016fb5837359e668ab30e2462a66ca387d9c589ad705432cb8023ead66b231d5a58f2a1edcaecbbedef8d9b5861ba039ae2a1841986a8ca9f2c0388cc20892c9b85aabbc020c827662bbe75a1cdbcd8fe6389302f71c24d889f5e39b45b04959abbb897312bc540e4c68a3e527722236e6c64c8f17a5f7273b3b8705c4a8e6cf1b34b567eddb2405f7610b0c70add314b6cbfea6467162a0c3a89ba966a1cc4b06080d6a7ba7", 0xfd}], 0x7) socket$packet(0x11, 0x2, 0x300) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x44b, 0x70bd25, 0x0, {0x7a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x44b, 0x70bd25, 0x0, {0x7a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockopt$packet_int(r4, 0x107, 0xe, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x2, 0x1}, 0x4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002440)=@newlink={0x48, 0x10, 0x437, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, 0x51b0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r0, &(0x7f0000000000)='o', 0x12, 0x4, &(0x7f0000000180)={0x11, 0x8100, r5, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 70.76514ms ago: executing program 0 (id=14683): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x5, 0x7, {{0xb, 0x4, 0x3, 0x0, 0x2c, 0x64, 0x0, 0xff, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2f}, {[@ssrr={0x89, 0x17, 0xde, [@multicast2, @private=0xa010100, @rand_addr=0x64010101, @rand_addr=0x64010101, @broadcast]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x1, 0xe2, 0x2ca, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x20, 0x8, 0x5, 0xc3}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x810}, 0x40000000) (async) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa8, 0x0, 0x18, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x8c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x800}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x7a, 0x4, "44a2fdf1be58451579ac9c1c85dbfb32c90b439171a9db95fe09305ab8b9baa440a1ca947d922b5572dd6affe8b371b43a22c572195ecfcc485340d227f6355a7262940905110d487114306e9cab53056087af247cad6877b3ad18a073641541bfc14a4c1a60aa2476b05de4214f94f33a71127656c3"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4040050}, 0x800) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000540), &(0x7f0000000580)=0x28) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f00000005c0)) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0x3ff) (async) ioctl$sock_ifreq(r6, 0x8970, &(0x7f0000000640)={'ipvlan0\x00', @ifru_ivalue=0x6}) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', r3, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x11, 0x1e, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x79cb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000940)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001940)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) pipe(&(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x4, 0x3, &(0x7f0000000700)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000740)='syzkaller\x00', 0xff, 0x0, &(0x7f0000000780), 0x40f00, 0x9, '\x00', r3, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r8, 0xa, &(0x7f0000001b40)=[r9, r11, 0x1, r12], &(0x7f0000001b80)=[{0x1, 0x3, 0x10, 0x3}, {0x3, 0x5, 0x4, 0xc}, {0x1, 0x5, 0x10, 0x5}, {0x4, 0x1, 0x10, 0xc}, {0x1, 0x3, 0xa, 0x8}, {0x5, 0x3, 0xa, 0x2}, {0x1, 0x1, 0x10, 0xb}, {0x4, 0x1, 0x10, 0xb}, {0x2, 0x3, 0x3, 0x6}, {0x4, 0x1, 0xf, 0x4}], 0x10, 0xe}, 0x94) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001d40)=@generic={&(0x7f0000001d00)='./file0\x00', 0x0, 0x20}, 0x18) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000001ec0)={&(0x7f0000001d80)=[{0x1, 0x0, 0xffff, 0x54d, 0x8, 0x2, 0x1b34, 0x1}, {0x3, 0x0, 0xb86, 0x6, 0x3, 0x3, 0x4, 0x6}, {0x1, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffe, 0xaf3, 0x1, 0xa66, 0x1ffe00000000}, {0x2, 0x0, 0x8, 0x7fff, 0xc, 0x9, 0x8, 0x915c}, {0x2, 0x0, 0x5, 0x3, 0x7, 0x4, 0xfffffffffffffff8, 0x3}], 0x5, 0x38, 0x1, 0x9}) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r11, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x28, 0x140a, 0x200, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20041}, 0x4801) (async) sendmsg$sock(r0, &(0x7f0000002400)={&(0x7f0000002000)=@pptp={0x18, 0x2, {0x1, @broadcast}}, 0x80, &(0x7f0000002340)=[{&(0x7f0000002080)="c5f31f86b62c96ae7bc81ec5de1d32bc782e3597dffec65683303710782d9b784a3dcf30d2230d27e258c215e7f064187a800c187fe709eb4e1041b320121cbdf19b926583a2cab329e6c032fb59cb9c043dcc7667096e103f0f72e360c24304f7f8a26d9ce303c454da36c6820659babdf97ddcf7568da1c6bdeca0cd3a3f", 0x7f}, {&(0x7f0000002100)="6b1e1d4245e6ef287b6fb47cf562df2f8d08e5aa9ff4a50c5df0d30fb9", 0x1d}, {&(0x7f0000002140)="d58e799801eab6a1821f20fd60ebfc3850388a966a29c5a4d38eb1477584759fe1465586ba1ee7699d1ae737ed3e62a3e561116a787dbf7055c4b988de90413777a243a05fca9563b38461b8d554f528e69f58f03942d25e0cabe7a8ce2795733f8d7007de8f5d5482d4df542d05427618a0", 0x72}, {&(0x7f00000021c0)="86f7274c8b18c18bf809f35fcc761e86851a27e8880537949ab808deb0b144ae38d4a275e0fba8eeb28d649fb3d7f6758a52bc210fbeee03034c1ffa5c7c5d", 0x3f}, {&(0x7f0000002200)="baeeb9fb4feff340c08c9695291ea8e714eaa76c482b54deebb6d3c87675e206fcc37639b1da", 0x26}, {&(0x7f0000002240)="d5aceeeed69d496476c981e1305dd3d2b62840741bc05eafc1cc56993f517e437bd57f7a3b5d4509d53d6d90a16ee3557420c975758fc73d4bef6aed71cb416385a5e46334ddd204378b73c0f73b5d4f318e3707da", 0x55}, {&(0x7f00000022c0)="cd744755a74c7c186dfec80d2fa285a060c7696d891d87bc699d688f0f5bf84c22b77a270ca17e236533d7bff6724227972699164431dd629406e982c6ace386abf8bbe50489ce4156", 0x49}], 0x7, &(0x7f00000023c0)=[@timestamping={{0x14, 0x1, 0x25, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x30}, 0x40000c5) (async) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002480), r1) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x44, r13, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3a14}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x44}}, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f00000025c0), r1) (async) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000002640), r11) sendmsg$BATADV_CMD_GET_HARDIF(r10, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x1c, r14, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40) (async) bind$xdp(r11, &(0x7f0000002740)={0x2c, 0xc, r3, 0x13}, 0x10) 0s ago: executing program 2 (id=14684): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x28, 0x6, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaafaaaaaaaaaaaa3786dd6700000000103aff00000000000000000000ffffac1414aaff02000000000000000000000000000102009078ffff0001000000000000059625bd4784587d1a875b7d5f181325308bae523e9bd78b1fe2cdbc9fdf4ab766c749dd1a602ebfe1e0816e6ad1e2d911596bf9b331962018195de94112de6c451b1aac64ec00"], 0x0) write(r1, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000100000008000600ac1414aa08000b00", @ANYRESOCT=r3], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) r4 = socket(0x2, 0x80805, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$tipc(r5, 0x0, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x9, 0x20000003, 0x5, 0x3, 0x100, 0x7, 0x5, 0x2, 0x1, 0xa, 0x3a, 0x1d, 0x0, 0xffff8004, 0x9}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x178}}, 0x24040004) socket(0x21, 0x800, 0x1) sendmmsg$inet(r4, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v&U', 0x3}], 0x1}}], 0x3, 0x48000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x488f0}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r9, &(0x7f0000000180), 0x4000190, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r11}, 0x20) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r11, 0x6, 0x2, 0xa}, &(0x7f00000001c0)=0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r12 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 17] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1619.936587][T26730] tipc: Started in network mode [ 1619.941906][T26730] tipc: Node identity ac14140f, cluster identity 4711 [ 1619.949177][T26730] tipc: New replicast peer: 255.255.255.255 [ 1619.956805][T26730] tipc: Enabled bearer , priority 5 [ 1620.286772][T26746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1620.531963][T26758] xt_hashlimit: size too large, truncated to 1048576 [ 1620.572629][T26758] xt_hashlimit: invalid interval [ 1620.895767][T26755] bridge0: entered promiscuous mode [ 1620.913995][T26755] bridge0: entered allmulticast mode [ 1621.070188][T26794] __nla_validate_parse: 9 callbacks suppressed [ 1621.070206][T26794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13319'. [ 1621.087533][T26794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13319'. [ 1621.162312][T26802] openvswitch: netlink: Message has 4 unknown bytes. [ 1621.175493][T26798] netlink: 'syz.4.13317': attribute type 7 has an invalid length. [ 1621.180597][T26802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1621.440756][T30436] tipc: Node number set to 2886997007 [ 1621.618634][T13948] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1621.628340][T13948] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.639666][T13948] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1621.648729][T13948] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1621.670655][T13948] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.683333][T13948] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1621.741676][T13948] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1621.750888][T13948] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.761666][T13948] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1621.777483][T13948] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1621.787635][T13948] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.797428][T13948] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1621.878289][T26820] sctp: [Deprecated]: syz.4.13322 (pid 26820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1621.878289][T26820] Use struct sctp_sack_info instead [ 1622.005876][T26833] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13325'. [ 1622.454065][T26855] xt_hashlimit: size too large, truncated to 1048576 [ 1622.507615][T26859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13331'. [ 1622.645241][T26867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13332'. [ 1624.134641][T26934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13346'. [ 1624.317205][T26934] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1624.724649][T26972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13352'. [ 1624.740528][ T3194] Bluetooth: hci2: command 0x0406 tx timeout [ 1624.763391][T26973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13353'. [ 1624.876123][T26973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13353'. [ 1625.390266][T27005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13360'. [ 1625.649281][T27003] syzkaller0: entered promiscuous mode [ 1625.661218][T27003] syzkaller0: entered allmulticast mode [ 1626.156247][T27025] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1626.176725][T27025] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1626.460238][T27034] __nla_validate_parse: 3 callbacks suppressed [ 1626.460458][T27034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13365'. [ 1626.704906][T27043] ip6erspan0: entered promiscuous mode [ 1626.722111][T27043] ip6erspan0: entered allmulticast mode [ 1626.949205][T27051] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13373'. [ 1626.965947][T27049] netlink: 'syz.3.13372': attribute type 1 has an invalid length. [ 1627.000223][T27058] netlink: 68 bytes leftover after parsing attributes in process `syz.4.13374'. [ 1627.075737][T27054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13373'. [ 1627.106228][T27055] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1627.132745][T27062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13372'. [ 1627.155403][T27055] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1627.220147][T27065] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1627.231281][T27065] syzkaller1: Refused to change device type [ 1627.269194][T27049] bond5: (slave gretap2): making interface the new active one [ 1627.282758][T27049] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 1627.315241][T27062] macvlan2: entered promiscuous mode [ 1627.331063][T27062] macvlan2: entered allmulticast mode [ 1627.739284][T27081] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13380'. [ 1627.759297][T27082] netlink: 'syz.0.13379': attribute type 1 has an invalid length. [ 1627.994797][T27102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13384'. [ 1628.292499][T27111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13388'. [ 1628.334967][T27111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13388'. [ 1628.367806][T27111] netlink: 'syz.3.13388': attribute type 15 has an invalid length. [ 1628.442977][T27118] netlink: 76 bytes leftover after parsing attributes in process `syz.2.13389'. [ 1628.464183][T27118] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1628.690892][T27126] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1629.154317][T27151] tipc: Enabled bearer , priority 0 [ 1629.185637][T27150] tipc: Disabling bearer [ 1629.237373][T27154] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1630.526022][T26323] udevd[26323]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory [ 1631.502416][T27269] syzkaller0: entered promiscuous mode [ 1631.520851][T27269] syzkaller0: entered allmulticast mode [ 1631.717007][T27280] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1631.729652][T27280] __nla_validate_parse: 14 callbacks suppressed [ 1631.729671][T27280] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13432'. [ 1632.186477][T27296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13435'. [ 1632.203310][T27297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13437'. [ 1632.256684][T27305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13437'. [ 1632.301992][T27296] ip6gre1: entered promiscuous mode [ 1632.364242][T27301] ip6tnl1: entered promiscuous mode [ 1632.626862][T27315] lo speed is unknown, defaulting to 1000 [ 1632.641795][T27315] lo speed is unknown, defaulting to 1000 [ 1632.671417][T27315] lo speed is unknown, defaulting to 1000 [ 1632.681868][T27315] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1632.743418][T27315] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1632.748491][T27317] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13441'. [ 1632.802828][T27315] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1632.852664][T27317] netem: unknown loss type 11 [ 1632.887393][T27324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13441'. [ 1632.963477][T27317] netem: change failed [ 1632.992864][T27315] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1633.063105][T27330] netlink: del zone limit has 8 unknown bytes [ 1633.098044][T27330] netlink: 'syz.1.13444': attribute type 1 has an invalid length. [ 1633.250188][T27315] lo speed is unknown, defaulting to 1000 [ 1633.264581][T27315] lo speed is unknown, defaulting to 1000 [ 1633.296489][T27315] lo speed is unknown, defaulting to 1000 [ 1633.326366][T27315] lo speed is unknown, defaulting to 1000 [ 1633.355477][T27315] lo speed is unknown, defaulting to 1000 [ 1633.386023][T27340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13446'. [ 1633.386442][T27315] lo speed is unknown, defaulting to 1000 [ 1633.466563][T27315] lo speed is unknown, defaulting to 1000 [ 1633.498943][T27315] lo speed is unknown, defaulting to 1000 [ 1633.537065][T27315] lo speed is unknown, defaulting to 1000 [ 1633.576591][T27315] lo speed is unknown, defaulting to 1000 [ 1633.587161][T27348] netlink: 'syz.2.13449': attribute type 1 has an invalid length. [ 1633.809001][T27358] veth0_macvtap: entered allmulticast mode [ 1633.833168][T27358] netlink: 92 bytes leftover after parsing attributes in process `syz.2.13452'. [ 1633.843415][T27356] syzkaller0: entered promiscuous mode [ 1633.860185][T27356] syzkaller0: entered allmulticast mode [ 1633.882703][T27356] TC_ACT_REPEAT abuse ? [ 1634.161617][T27369] netlink: 'syz.2.13454': attribute type 4 has an invalid length. [ 1634.199221][T27360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13453'. [ 1634.269116][T27374] netlink: 'syz.2.13454': attribute type 4 has an invalid length. [ 1634.634239][T27384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13457'. [ 1634.646355][T27381] syzkaller0: entered promiscuous mode [ 1634.654936][T27381] syzkaller0: entered allmulticast mode [ 1635.642571][T27434] netlink: 'syz.4.13469': attribute type 4 has an invalid length. [ 1635.697873][T27436] netlink: 'syz.4.13469': attribute type 4 has an invalid length. [ 1635.871428][T27438] tc_dump_action: action bad kind [ 1636.618517][T27466] netlink: 'syz.4.13479': attribute type 1 has an invalid length. [ 1636.636416][T27466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1636.954817][T27484] __nla_validate_parse: 4 callbacks suppressed [ 1636.954838][T27484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13484'. [ 1637.541056][T27509] netlink: 'syz.4.13488': attribute type 13 has an invalid length. [ 1637.561906][T27509] netlink: 'syz.4.13488': attribute type 17 has an invalid length. [ 1637.704605][T27492] tipc: Enabling of bearer rejected, failed to enable media [ 1638.454387][T27507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1638.897889][T27509] batman_adv: batadv0: Interface activated: vlan3 [ 1638.925011][T27509] sit0: left promiscuous mode [ 1638.950855][T27509] bridge0: left promiscuous mode [ 1638.955947][T27509] bridge0: left allmulticast mode [ 1638.966725][T27509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1638.976584][T27509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1638.988987][T27509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1639.048623][ T5642] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.158270][T13948] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.187930][T13948] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.233820][T27543] netlink: 'syz.3.13494': attribute type 1 has an invalid length. [ 1639.273240][T13948] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.361224][T27543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13494'. [ 1639.681823][T27561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13498'. [ 1639.742649][T27571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13498'. [ 1639.745864][T27561] macvtap1: entered promiscuous mode [ 1639.800853][T27561] ip6gretap0: entered promiscuous mode [ 1639.806674][T27561] macvtap1: entered allmulticast mode [ 1639.815009][T27561] ip6gretap0: entered allmulticast mode [ 1639.849343][T27574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13502'. [ 1639.874493][T27571] ip6gretap0: left allmulticast mode [ 1639.884374][T27571] ip6gretap0: left promiscuous mode [ 1640.003847][T27585] netlink: 96 bytes leftover after parsing attributes in process `syz.4.13502'. [ 1640.072117][ T29] audit: type=1804 audit(1777220640.076:25): pid=27588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.13504" name="/newroot/302/memory.events" dev="tmpfs" ino=1572 res=1 errno=0 [ 1640.081610][T27588] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13504'. [ 1640.095878][ T29] audit: type=1800 audit(1777220640.076:26): pid=27588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13504" name="memory.events" dev="tmpfs" ino=1572 res=0 errno=0 [ 1640.147949][T27582] lo speed is unknown, defaulting to 1000 [ 1640.352089][T27594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13506'. [ 1640.352342][T27596] netlink: 88 bytes leftover after parsing attributes in process `syz.2.13506'. [ 1640.913117][T27626] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.13514'. [ 1641.185114][T27636] netlink: 'syz.3.13519': attribute type 11 has an invalid length. [ 1641.200437][T27636] netlink: 'syz.3.13519': attribute type 23 has an invalid length. [ 1641.258517][T27644] netlink: 'syz.0.13521': attribute type 19 has an invalid length. [ 1641.308060][T27644] netlink: 'syz.0.13521': attribute type 20 has an invalid length. [ 1641.535597][T27652] syzkaller0: entered promiscuous mode [ 1641.551737][T27652] syzkaller0: entered allmulticast mode [ 1641.884798][T27670] syzkaller0: entered promiscuous mode [ 1641.897728][T27670] syzkaller0: entered allmulticast mode [ 1641.907922][T27669] syzkaller1: entered promiscuous mode [ 1641.929776][T27669] syzkaller1: entered allmulticast mode [ 1642.489232][T27707] netlink: 'syz.4.13529': attribute type 16 has an invalid length. [ 1645.676078][ T5637] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.707998][ T5637] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.873001][ T5637] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.907302][ T5637] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1646.065564][T27732] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1646.097968][T27733] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1646.351441][T27726] __nla_validate_parse: 5 callbacks suppressed [ 1646.351461][T27726] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13536'. [ 1646.517703][T27752] lo speed is unknown, defaulting to 1000 [ 1646.689487][T27762] lo speed is unknown, defaulting to 1000 [ 1646.699773][T27758] netlink: 188 bytes leftover after parsing attributes in process `syz.3.13543'. [ 1646.771708][T27758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13543'. [ 1647.110287][T27772] sctp: [Deprecated]: syz.0.13545 (pid 27772) Use of int in maxseg socket option. [ 1647.110287][T27772] Use struct sctp_assoc_value instead [ 1647.172593][T27771] delete_channel: no stack [ 1647.435899][T27781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13546'. [ 1647.514208][T27781] netlink: 120 bytes leftover after parsing attributes in process `syz.1.13546'. [ 1647.559218][T27781] netlink: 'syz.1.13546': attribute type 1 has an invalid length. [ 1647.579043][T27781] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13546'. [ 1647.898913][T27798] xt_hashlimit: size too large, truncated to 1048576 [ 1648.126685][T27810] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13555'. [ 1648.153095][T27810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13555'. [ 1648.195214][T27812] netlink: 'syz.1.13556': attribute type 2 has an invalid length. [ 1648.204625][T27812] netlink: 'syz.1.13556': attribute type 8 has an invalid length. [ 1648.218720][T27812] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13556'. [ 1648.368768][T27812] macsec2: entered promiscuous mode [ 1648.400957][T27812] erspan0: entered promiscuous mode [ 1648.426770][T27812] erspan0: left promiscuous mode [ 1648.745060][T27832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13560'. [ 1649.058406][T20468] lec:lec_start_xmit: lec0:No lecd attached [ 1649.207682][T27855] syzkaller0: entered promiscuous mode [ 1649.222724][T27855] syzkaller0: entered allmulticast mode [ 1650.294064][T27906] bond0: entered promiscuous mode [ 1650.300554][T27906] geneve3: entered promiscuous mode [ 1650.308135][T27906] batadv_slave_0: entered promiscuous mode [ 1650.315101][T27906] batadv_slave_0: left promiscuous mode [ 1650.321502][T27906] bond0: left promiscuous mode [ 1650.326442][T27906] geneve3: left promiscuous mode [ 1650.342762][T27905] syzkaller0: entered promiscuous mode [ 1650.348364][T27905] syzkaller0: entered allmulticast mode [ 1650.740090][T27926] netlink: 'syz.0.13582': attribute type 6 has an invalid length. [ 1650.765778][T27926] netlink: 'syz.0.13582': attribute type 23 has an invalid length. [ 1650.767612][T27925] tipc: Enabled bearer , priority 0 [ 1650.791865][T27926] IPv6: NLM_F_CREATE should be specified when creating new route [ 1650.794290][T27925] syzkaller0: entered promiscuous mode [ 1650.806184][T27925] syzkaller0: entered allmulticast mode [ 1650.879147][T27925] tipc: Resetting bearer [ 1650.904401][T27924] tipc: Resetting bearer [ 1650.986339][T27924] tipc: Disabling bearer [ 1651.637411][T27960] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1651.641691][T27958] pim6reg1: entered promiscuous mode [ 1651.658358][T27960] netlink: 'syz.4.13591': attribute type 1 has an invalid length. [ 1651.671162][T27958] pim6reg1: entered allmulticast mode [ 1651.677140][T27960] __nla_validate_parse: 3 callbacks suppressed [ 1651.677156][T27960] netlink: 96 bytes leftover after parsing attributes in process `syz.4.13591'. [ 1651.748339][T27962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13592'. [ 1651.884757][T27969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13594'. [ 1652.019396][T27977] netlink: 200 bytes leftover after parsing attributes in process `syz.4.13595'. [ 1652.160766][T27982] syzkaller0: entered promiscuous mode [ 1652.178775][T27982] syzkaller0: entered allmulticast mode [ 1652.384424][T27986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13599'. [ 1652.423580][T27986] tipc: Enabling of bearer rejected, failed to enable media [ 1652.465704][T27989] dvmrp0: entered allmulticast mode [ 1652.581899][T27999] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13602'. [ 1652.595662][T27999] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13602'. [ 1652.607090][T27999] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13602'. [ 1652.629162][T27999] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13602'. [ 1652.649032][T28002] netlink: 108 bytes leftover after parsing attributes in process `syz.1.13604'. [ 1652.864176][T28012] veth1_to_bond: entered allmulticast mode [ 1652.903458][T28013] veth1_to_bond (unregistering): left allmulticast mode [ 1654.819735][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 1654.827863][ C0] lec:lec_tx_timeout: lec0 [ 1656.786671][T28067] __nla_validate_parse: 2 callbacks suppressed [ 1656.786690][T28067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13619'. [ 1657.002362][T28071] tipc: Enabling of bearer rejected, already enabled [ 1657.146094][T28086] netlink: 72 bytes leftover after parsing attributes in process `syz.2.13626'. [ 1657.167316][T28086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13626'. [ 1657.245239][T28087] netlink: 'syz.1.13625': attribute type 1 has an invalid length. [ 1657.262129][T28087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13625'. [ 1657.284164][T28087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13625'. [ 1657.297814][T28095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1657.310572][T28087] xt_TCPMSS: Only works on TCP SYN packets [ 1657.335959][T28092] lo speed is unknown, defaulting to 1000 [ 1657.915873][T28124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13635'. [ 1658.181401][T28133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13639'. [ 1658.262679][T28133] hsr_slave_1 (unregistering): left promiscuous mode [ 1658.543070][T28148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13642'. [ 1658.568774][T28148] veth1_to_team: entered promiscuous mode [ 1658.581643][T28148] veth1: entered promiscuous mode [ 1658.591514][T28148] hsr1: entered promiscuous mode [ 1658.764712][T28146] syzkaller0: entered promiscuous mode [ 1658.784288][T28146] syzkaller0: entered allmulticast mode [ 1658.817721][T28156] tipc: Enabling of bearer rejected, failed to enable media [ 1658.837670][T28162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13645'. [ 1659.093733][T28173] netlink: 666 bytes leftover after parsing attributes in process `syz.1.13647'. [ 1660.593069][ T3194] Bluetooth: hci5: command 0x0406 tx timeout [ 1662.615508][T28168] ip6gre2: entered promiscuous mode [ 1662.621505][T28168] ip6gre2: entered allmulticast mode [ 1662.743979][T28173] lo speed is unknown, defaulting to 1000 [ 1662.754964][T28200] pim6reg1: entered promiscuous mode [ 1662.771072][T28200] pim6reg1: entered allmulticast mode [ 1663.085834][T28216] __nla_validate_parse: 2 callbacks suppressed [ 1663.085853][T28216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13659'. [ 1663.134747][T28220] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13659'. [ 1663.369426][T28231] tipc: Enabled bearer , priority 0 [ 1663.391869][T28231] netlink: 'syz.4.13662': attribute type 1 has an invalid length. [ 1663.410652][T28231] netlink: 92 bytes leftover after parsing attributes in process `syz.4.13662'. [ 1663.430377][T28231] netlink: 'syz.4.13662': attribute type 1 has an invalid length. [ 1663.450693][T28231] netlink: 634 bytes leftover after parsing attributes in process `syz.4.13662'. [ 1663.487412][T28231] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13662'. [ 1663.535838][T28231] tipc: Resetting bearer [ 1663.588754][T28227] tipc: Disabling bearer [ 1663.869349][T28258] openvswitch: netlink: IP tunnel dst address not specified [ 1663.946402][T28262] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1664.040428][T28262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1664.057732][T28266] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1664.070274][T28266] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1664.102924][T28266] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1664.130159][T28267] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1664.154995][T28267] syzkaller1: linktype set to 780 [ 1664.172498][T28266] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1664.967571][T28293] delete_channel: no stack [ 1665.032289][T28292] lo speed is unknown, defaulting to 1000 [ 1665.306675][T28302] netlink: 'syz.1.13684': attribute type 8 has an invalid length. [ 1665.743543][T28307] lo speed is unknown, defaulting to 1000 [ 1665.843362][T28320] netlink: 'syz.3.13685': attribute type 1 has an invalid length. [ 1665.873031][T28320] netlink: 'syz.3.13685': attribute type 1 has an invalid length. [ 1666.051162][T28320] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.13685'. [ 1666.523341][ T29] audit: type=1800 audit(1777220666.516:27): pid=28345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13688" name=CB dev="tmpfs" ino=1333 res=0 errno=0 [ 1666.899263][T28360] tipc: Enabled bearer , priority 0 [ 1666.911509][T28360] syzkaller0: entered promiscuous mode [ 1666.917034][T28360] syzkaller0: entered allmulticast mode [ 1666.934277][T28360] tipc: Resetting bearer [ 1666.944779][T28360] netlink: 'syz.4.13692': attribute type 10 has an invalid length. [ 1666.953943][T28360] netlink: 224 bytes leftover after parsing attributes in process `syz.4.13692'. [ 1666.997034][T28359] tipc: Resetting bearer [ 1667.102086][T28359] tipc: Disabling bearer [ 1667.445017][T28389] netlink: 'syz.1.13700': attribute type 29 has an invalid length. [ 1667.487306][T28390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13699'. [ 1667.726639][T28401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13702'. [ 1667.756843][T28399] lo speed is unknown, defaulting to 1000 [ 1667.871975][T28413] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1667.908323][T28402] xt_CT: No such helper "syz1" [ 1667.959937][T28418] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1668.177919][T28425] netlink: 'syz.3.13707': attribute type 1 has an invalid length. [ 1668.206891][T28425] netlink: 240 bytes leftover after parsing attributes in process `syz.3.13707'. [ 1668.319285][T28425] syzkaller0: entered promiscuous mode [ 1668.355959][T28425] syzkaller0: entered allmulticast mode [ 1668.565936][T28447] netlink: 'syz.2.13709': attribute type 4 has an invalid length. [ 1668.686173][T28458] sctp: [Deprecated]: syz.1.13710 (pid 28458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1668.686173][T28458] Use struct sctp_sack_info instead [ 1668.746067][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.769250][ T1314] lec:lec_start_xmit: lec0:No lecd attached [ 1668.900447][T28461] FAULT_INJECTION: forcing a failure. [ 1668.900447][T28461] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1668.932961][T28461] CPU: 1 UID: 0 PID: 28461 Comm: syz.0.13711 Not tainted syzkaller #0 PREEMPT(full) [ 1668.932985][T28461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1668.932995][T28461] Call Trace: [ 1668.933003][T28461] [ 1668.933010][T28461] dump_stack_lvl+0xe8/0x150 [ 1668.933043][T28461] should_fail_ex+0x412/0x560 [ 1668.933073][T28461] prepare_alloc_pages+0x22a/0x650 [ 1668.933102][T28461] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1668.933128][T28461] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1668.933153][T28461] ? __pfx_policy_nodemask+0x10/0x10 [ 1668.933191][T28461] alloc_pages_mpol+0x235/0x490 [ 1668.933217][T28461] folio_alloc_mpol_noprof+0x39/0x160 [ 1668.933240][T28461] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1668.933265][T28461] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1668.933296][T28461] do_wp_page+0x118a/0x4cc0 [ 1668.933319][T28461] ? __pte_offset_map+0x29/0x240 [ 1668.933345][T28461] ? __pfx_do_wp_page+0x10/0x10 [ 1668.933359][T28461] ? do_raw_spin_lock+0x12b/0x2f0 [ 1668.933382][T28461] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1668.933411][T28461] handle_mm_fault+0x151d/0x3170 [ 1668.933443][T28461] ? handle_mm_fault+0xee/0x3170 [ 1668.933466][T28461] ? __pfx_handle_mm_fault+0x10/0x10 [ 1668.933496][T28461] ? __lock_acquire+0x6b5/0x2cf0 [ 1668.933523][T28461] ? lock_mm_and_find_vma+0xa7/0x340 [ 1668.933545][T28461] do_user_addr_fault+0x75b/0x1340 [ 1668.933584][T28461] exc_page_fault+0x6a/0xc0 [ 1668.933608][T28461] asm_exc_page_fault+0x26/0x30 [ 1668.933624][T28461] RIP: 0010:__put_user_4+0xd/0x20 [ 1668.933646][T28461] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1668.933659][T28461] RSP: 0018:ffffc900053afc98 EFLAGS: 00050202 [ 1668.933675][T28461] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000003038 [ 1668.933685][T28461] RDX: 0000000000000000 RSI: ffffffff8e24f3ee RDI: ffffffff8c289f60 [ 1668.933696][T28461] RBP: ffffc900053afeb0 R08: ffffffff82188cbf R09: ffff88802fb36538 [ 1668.933707][T28461] R10: dffffc0000000000 R11: fffffbfff20670df R12: 1ffff92000a75f9c [ 1668.933719][T28461] R13: 0000000000040000 R14: 0000200000003000 R15: 0000000000000291 [ 1668.933736][T28461] ? __might_fault+0xaf/0x130 [ 1668.933761][T28461] __sys_sendmmsg+0x2b0/0x4e0 [ 1668.933786][T28461] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1668.933801][T28461] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1668.933847][T28461] ? ksys_write+0x242/0x270 [ 1668.933869][T28461] ? __pfx_ksys_write+0x10/0x10 [ 1668.933895][T28461] __x64_sys_sendmmsg+0xa0/0xc0 [ 1668.933912][T28461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1668.933929][T28461] do_syscall_64+0x15f/0xf80 [ 1668.933949][T28461] ? trace_irq_disable+0x3b/0x140 [ 1668.933971][T28461] ? clear_bhb_loop+0x40/0x90 [ 1668.933991][T28461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1668.934006][T28461] RIP: 0033:0x7f1a2699cdd9 [ 1668.934022][T28461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1668.934034][T28461] RSP: 002b:00007f1a2791c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1668.934050][T28461] RAX: ffffffffffffffda RBX: 00007f1a26c15fa0 RCX: 00007f1a2699cdd9 [ 1668.934062][T28461] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 1668.934072][T28461] RBP: 00007f1a2791c090 R08: 0000000000000000 R09: 0000000000000000 [ 1668.934083][T28461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1668.934093][T28461] R13: 00007f1a26c16038 R14: 00007f1a26c15fa0 R15: 00007fffad86e418 [ 1668.934121][T28461] [ 1669.563267][T28472] dummy0: entered promiscuous mode [ 1669.573425][T28472] dummy0: entered allmulticast mode [ 1669.662820][T28478] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13716'. [ 1669.703121][T28470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13714'. [ 1669.849171][T28496] netlink: 2 bytes leftover after parsing attributes in process `syz.1.13721'. [ 1669.915981][T28479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13714'. [ 1670.237105][T28517] gretap0: entered promiscuous mode [ 1670.251080][T28516] gretap0: left promiscuous mode [ 1670.379869][T28526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13726'. [ 1670.397179][T28528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13728'. [ 1670.461528][T28533] sctp: [Deprecated]: syz.4.13729 (pid 28533) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1670.461528][T28533] Use struct sctp_sack_info instead [ 1670.482700][T28533] netlink: 'syz.4.13729': attribute type 32 has an invalid length. [ 1670.557403][T28540] netlink: 'syz.4.13732': attribute type 2 has an invalid length. [ 1670.568492][T28540] netlink: 'syz.4.13732': attribute type 2 has an invalid length. [ 1670.589634][T28543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13733'. [ 1670.691674][T28550] netlink: 'syz.1.13734': attribute type 1 has an invalid length. [ 1670.879703][T28554] netlink: 'syz.0.13735': attribute type 4 has an invalid length. [ 1670.887631][T28554] netlink: 17 bytes leftover after parsing attributes in process `syz.0.13735'. [ 1671.020761][T28558] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13737'. [ 1671.160243][T28570] xt_bpf: check failed: parse error [ 1671.174592][T28563] xt_bpf: check failed: parse error [ 1671.355234][T28580] bridge0: port 3(vlan0) entered blocking state [ 1671.361755][T28580] bridge0: port 3(vlan0) entered disabled state [ 1671.368234][T28580] vlan0: entered allmulticast mode [ 1671.373370][T28580] bridge0: entered allmulticast mode [ 1671.381178][T28580] vlan0: left allmulticast mode [ 1671.419566][T28580] bridge0: left allmulticast mode [ 1671.491776][T28587] lo speed is unknown, defaulting to 1000 [ 1671.792860][T28610] netlink: 'syz.4.13751': attribute type 83 has an invalid length. [ 1672.072696][T28621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1672.106334][T28624] lo speed is unknown, defaulting to 1000 [ 1672.429017][T13666] Bluetooth: hci3: link tx timeout [ 1672.434446][T13666] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1672.518789][T28636] block nbd6: server does not support multiple connections per device. [ 1672.531316][T28636] block nbd6: shutting down sockets [ 1672.857324][T28666] lo speed is unknown, defaulting to 1000 [ 1672.956919][T28666] sctp: [Deprecated]: syz.0.13764 (pid 28666) Use of int in maxseg socket option. [ 1672.956919][T28666] Use struct sctp_assoc_value instead [ 1673.258065][T28700] __nla_validate_parse: 9 callbacks suppressed [ 1673.258080][T28700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13774'. [ 1673.260473][T28702] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.13776'. [ 1673.340960][T28702] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.13776'. [ 1673.358746][T28702] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.13776'. [ 1673.368191][T28708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13777'. [ 1673.381615][T28702] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.13776'. [ 1673.395460][T28702] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.13776'. [ 1673.404920][T28702] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.13776'. [ 1673.414358][T28702] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.13776'. [ 1673.423812][T28702] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.13776'. [ 1673.427543][T28711] FAULT_INJECTION: forcing a failure. [ 1673.427543][T28711] name failslab, interval 1, probability 0, space 0, times 0 [ 1673.446907][T28711] CPU: 0 UID: 0 PID: 28711 Comm: syz.4.13778 Not tainted syzkaller #0 PREEMPT(full) [ 1673.446932][T28711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1673.446944][T28711] Call Trace: [ 1673.446952][T28711] [ 1673.446960][T28711] dump_stack_lvl+0xe8/0x150 [ 1673.446993][T28711] should_fail_ex+0x412/0x560 [ 1673.447027][T28711] should_failslab+0xa8/0x100 [ 1673.447054][T28711] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1673.447076][T28711] ? __alloc_skb+0x186/0x7d0 [ 1673.447094][T28711] ? __alloc_skb+0x1d0/0x7d0 [ 1673.447108][T28711] ? __local_bh_enable_ip+0xd0/0x130 [ 1673.447139][T28711] __alloc_skb+0x1d0/0x7d0 [ 1673.447163][T28711] alloc_skb_with_frags+0xc8/0x760 [ 1673.447194][T28711] sock_alloc_send_pskb+0x878/0x990 [ 1673.447233][T28711] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1673.447253][T28711] ? kasan_quarantine_put+0xbb/0x1f0 [ 1673.447274][T28711] ? lockdep_hardirqs_on+0x7a/0x110 [ 1673.447303][T28711] ? unix_dgram_sendmsg+0x57c/0x18d0 [ 1673.447327][T28711] ? kmem_cache_free+0x182/0x650 [ 1673.447350][T28711] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1673.447377][T28711] unix_dgram_sendmsg+0x460/0x18d0 [ 1673.447428][T28711] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1673.447458][T28711] ? aa_sock_msg_perm+0xda/0x1b0 [ 1673.447479][T28711] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 1673.447508][T28711] ____sys_sendmsg+0x972/0x9f0 [ 1673.447529][T28711] ? __might_fault+0xaf/0x130 [ 1673.447556][T28711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1673.447585][T28711] ? import_iovec+0x73/0xa0 [ 1673.447610][T28711] ___sys_sendmsg+0x2a5/0x360 [ 1673.447629][T28711] ? __lock_acquire+0x6b5/0x2cf0 [ 1673.447660][T28711] ? __pfx____sys_sendmsg+0x10/0x10 [ 1673.447678][T28711] ? __lock_acquire+0x6b5/0x2cf0 [ 1673.447718][T28711] ? kstrtouint+0x6e/0xe0 [ 1673.447784][T28711] __sys_sendmmsg+0x27c/0x4e0 [ 1673.447811][T28711] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1673.447829][T28711] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1673.447881][T28711] ? ksys_write+0x242/0x270 [ 1673.447907][T28711] ? __pfx_ksys_write+0x10/0x10 [ 1673.447936][T28711] __x64_sys_sendmmsg+0xa0/0xc0 [ 1673.447956][T28711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.447976][T28711] do_syscall_64+0x15f/0xf80 [ 1673.448000][T28711] ? trace_irq_disable+0x3b/0x140 [ 1673.448023][T28711] ? clear_bhb_loop+0x40/0x90 [ 1673.448046][T28711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.448064][T28711] RIP: 0033:0x7f9316b9cdd9 [ 1673.448082][T28711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1673.448098][T28711] RSP: 002b:00007f93179f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1673.448117][T28711] RAX: ffffffffffffffda RBX: 00007f9316e15fa0 RCX: 00007f9316b9cdd9 [ 1673.448131][T28711] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 1673.448143][T28711] RBP: 00007f93179f1090 R08: 0000000000000000 R09: 0000000000000000 [ 1673.448155][T28711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1673.448166][T28711] R13: 00007f9316e16038 R14: 00007f9316e15fa0 R15: 00007ffee7e30688 [ 1673.448197][T28711] [ 1673.800491][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1673.808551][ C0] lec:lec_tx_timeout: lec0 [ 1673.996048][T28733] tipc: Enabled bearer , priority 0 [ 1674.054916][T28733] syzkaller0: entered promiscuous mode [ 1674.060451][T28733] syzkaller0: entered allmulticast mode [ 1674.405093][T28727] tipc: Resetting bearer [ 1674.458003][T28727] tipc: Disabling bearer [ 1674.518729][ T3194] Bluetooth: hci3: command 0x0405 tx timeout [ 1674.559577][T28772] macvtap0: entered promiscuous mode [ 1674.577586][T28777] FAULT_INJECTION: forcing a failure. [ 1674.577586][T28777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1674.591095][T28777] CPU: 1 UID: 0 PID: 28777 Comm: syz.3.13794 Not tainted syzkaller #0 PREEMPT(full) [ 1674.591136][T28777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1674.591160][T28777] Call Trace: [ 1674.591175][T28777] [ 1674.591190][T28777] dump_stack_lvl+0xe8/0x150 [ 1674.591230][T28777] should_fail_ex+0x412/0x560 [ 1674.591260][T28777] _copy_from_user+0x2d/0xb0 [ 1674.591281][T28777] ___sys_sendmsg+0x1c6/0x360 [ 1674.591301][T28777] ? __lock_acquire+0x6b5/0x2cf0 [ 1674.591328][T28777] ? __pfx____sys_sendmsg+0x10/0x10 [ 1674.591346][T28777] ? __lock_acquire+0x6b5/0x2cf0 [ 1674.591375][T28777] ? kstrtouint+0x6e/0xe0 [ 1674.591430][T28777] __sys_sendmmsg+0x27c/0x4e0 [ 1674.591454][T28777] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1674.591471][T28777] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1674.591518][T28777] ? ksys_write+0x242/0x270 [ 1674.591542][T28777] ? __pfx_ksys_write+0x10/0x10 [ 1674.591578][T28777] __x64_sys_sendmmsg+0xa0/0xc0 [ 1674.591597][T28777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.591613][T28777] do_syscall_64+0x15f/0xf80 [ 1674.591635][T28777] ? trace_irq_disable+0x3b/0x140 [ 1674.591658][T28777] ? clear_bhb_loop+0x40/0x90 [ 1674.591680][T28777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.591698][T28777] RIP: 0033:0x7fcefcd9cdd9 [ 1674.591715][T28777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1674.591729][T28777] RSP: 002b:00007fcefdca5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1674.591746][T28777] RAX: ffffffffffffffda RBX: 00007fcefd015fa0 RCX: 00007fcefcd9cdd9 [ 1674.591758][T28777] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 1674.591770][T28777] RBP: 00007fcefdca5090 R08: 0000000000000000 R09: 0000000000000000 [ 1674.591781][T28777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1674.591791][T28777] R13: 00007fcefd016038 R14: 00007fcefd015fa0 R15: 00007ffcd1398658 [ 1674.591821][T28777] [ 1684.097617][T11431] erspan0: left allmulticast mode [ 1684.103753][T11431] erspan0: left promiscuous mode [ 1684.111212][T11431] bridge0: port 3(erspan0) entered disabled state [ 1684.123023][T11431] bridge_slave_1: left promiscuous mode [ 1684.132026][T11431] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.142486][T11431] ¾x9ÿ: left allmulticast mode [ 1684.147565][T11431] ¾x9ÿ: left promiscuous mode [ 1684.153055][T11431] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1684.195854][T11431] dvmrp1: left allmulticast mode [ 1684.404040][T28898] __nla_validate_parse: 59 callbacks suppressed [ 1684.404058][T28898] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13800'. [ 1684.602654][T11431] bond7 (unregistering): (slave geneve2): Releasing backup interface [ 1684.670126][T28919] FAULT_INJECTION: forcing a failure. [ 1684.670126][T28919] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.690419][T28919] CPU: 1 UID: 0 PID: 28919 Comm: syz.4.13806 Not tainted syzkaller #0 PREEMPT(full) [ 1684.690447][T28919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1684.690458][T28919] Call Trace: [ 1684.690465][T28919] [ 1684.690474][T28919] dump_stack_lvl+0xe8/0x150 [ 1684.690506][T28919] should_fail_ex+0x412/0x560 [ 1684.690543][T28919] should_failslab+0xa8/0x100 [ 1684.690570][T28919] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1684.690592][T28919] ? __alloc_skb+0x186/0x7d0 [ 1684.690609][T28919] ? __alloc_skb+0x1d0/0x7d0 [ 1684.690623][T28919] ? __local_bh_enable_ip+0xd0/0x130 [ 1684.690654][T28919] __alloc_skb+0x1d0/0x7d0 [ 1684.690675][T28919] alloc_skb_with_frags+0xc8/0x760 [ 1684.690705][T28919] sock_alloc_send_pskb+0x878/0x990 [ 1684.690745][T28919] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1684.690764][T28919] ? kasan_quarantine_put+0xbb/0x1f0 [ 1684.690785][T28919] ? lockdep_hardirqs_on+0x7a/0x110 [ 1684.690813][T28919] ? unix_dgram_sendmsg+0x57c/0x18d0 [ 1684.690836][T28919] ? kmem_cache_free+0x182/0x650 [ 1684.690858][T28919] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1684.690886][T28919] unix_dgram_sendmsg+0x460/0x18d0 [ 1684.690936][T28919] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1684.690968][T28919] ? aa_sock_msg_perm+0xda/0x1b0 [ 1684.690987][T28919] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 1684.691016][T28919] ____sys_sendmsg+0x972/0x9f0 [ 1684.691036][T28919] ? __might_fault+0xaf/0x130 [ 1684.691063][T28919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1684.691091][T28919] ? import_iovec+0x73/0xa0 [ 1684.691116][T28919] ___sys_sendmsg+0x2a5/0x360 [ 1684.691135][T28919] ? __lock_acquire+0x6b5/0x2cf0 [ 1684.691167][T28919] ? __pfx____sys_sendmsg+0x10/0x10 [ 1684.691185][T28919] ? __lock_acquire+0x6b5/0x2cf0 [ 1684.691216][T28919] ? kstrtouint+0x6e/0xe0 [ 1684.691276][T28919] __sys_sendmmsg+0x27c/0x4e0 [ 1684.691301][T28919] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1684.691320][T28919] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1684.691367][T28919] ? ksys_write+0x242/0x270 [ 1684.691393][T28919] ? __pfx_ksys_write+0x10/0x10 [ 1684.691419][T28919] __x64_sys_sendmmsg+0xa0/0xc0 [ 1684.691438][T28919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1684.691456][T28919] do_syscall_64+0x15f/0xf80 [ 1684.691481][T28919] ? clear_bhb_loop+0x40/0x90 [ 1684.691502][T28919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1684.691520][T28919] RIP: 0033:0x7f9316b9cdd9 [ 1684.691544][T28919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1684.691559][T28919] RSP: 002b:00007f93179f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1684.691578][T28919] RAX: ffffffffffffffda RBX: 00007f9316e15fa0 RCX: 00007f9316b9cdd9 [ 1684.691591][T28919] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 1684.691603][T28919] RBP: 00007f93179f1090 R08: 0000000000000000 R09: 0000000000000000 [ 1684.691614][T28919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1684.691624][T28919] R13: 00007f9316e16038 R14: 00007f9316e15fa0 R15: 00007ffee7e30688 [ 1684.691652][T28919] [ 1685.030906][T28922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13805'. [ 1685.907874][T11431] bond6 (unregistering): (slave bridge7): Releasing active interface [ 1685.946353][T11431] bond6 (unregistering): (slave bridge8): Releasing active interface [ 1686.088080][T11431] bond0 (unregistering): (slave c5ÿ): Releasing backup interface [ 1686.100163][T11431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1686.110902][T11431] bond0 (unregistering): Released all slaves [ 1686.132424][T11431] bond1 (unregistering): Released all slaves [ 1686.153096][T11431] bond2 (unregistering): Released all slaves [ 1686.182852][T11431] bond3 (unregistering): Released all slaves [ 1686.196680][T11431] bond4 (unregistering): Released all slaves [ 1686.212745][T11431] bond5 (unregistering): Released all slaves [ 1686.226109][T11431] bond6 (unregistering): Released all slaves [ 1686.246035][T11431] bond7 (unregistering): Released all slaves [ 1686.258751][T11431] bond8 (unregistering): Released all slaves [ 1686.271667][T11431] bond9 (unregistering): Released all slaves [ 1686.362067][T28946] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13813'. [ 1686.565212][T28954] syzkaller0: entered promiscuous mode [ 1686.599342][T28954] syzkaller0: entered allmulticast mode [ 1686.616317][T11431] tipc: Disabling bearer [ 1686.656221][T11431] tipc: Left network mode [ 1686.779167][T28970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13818'. [ 1686.811655][T28970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13818'. [ 1686.855089][T28972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13815'. [ 1686.904686][T28974] lo speed is unknown, defaulting to 1000 [ 1687.094258][T28978] syzkaller0: entered promiscuous mode [ 1687.100894][T28978] syzkaller0: entered allmulticast mode [ 1687.193662][T28947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1687.709032][T28995] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.13826'. [ 1687.805440][T29004] FAULT_INJECTION: forcing a failure. [ 1687.805440][T29004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1687.821192][T29004] CPU: 0 UID: 0 PID: 29004 Comm: syz.1.13828 Not tainted syzkaller #0 PREEMPT(full) [ 1687.821218][T29004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1687.821230][T29004] Call Trace: [ 1687.821237][T29004] [ 1687.821246][T29004] dump_stack_lvl+0xe8/0x150 [ 1687.821278][T29004] should_fail_ex+0x412/0x560 [ 1687.821312][T29004] _copy_from_user+0x2d/0xb0 [ 1687.821335][T29004] ___sys_sendmsg+0x1c6/0x360 [ 1687.821354][T29004] ? __lock_acquire+0x6b5/0x2cf0 [ 1687.821386][T29004] ? __pfx____sys_sendmsg+0x10/0x10 [ 1687.821404][T29004] ? __lock_acquire+0x6b5/0x2cf0 [ 1687.821434][T29004] ? kstrtouint+0x6e/0xe0 [ 1687.821500][T29004] __sys_sendmmsg+0x27c/0x4e0 [ 1687.821526][T29004] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1687.821544][T29004] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1687.821596][T29004] ? ksys_write+0x242/0x270 [ 1687.821621][T29004] ? __pfx_ksys_write+0x10/0x10 [ 1687.821651][T29004] __x64_sys_sendmmsg+0xa0/0xc0 [ 1687.821672][T29004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.821691][T29004] do_syscall_64+0x15f/0xf80 [ 1687.821717][T29004] ? clear_bhb_loop+0x40/0x90 [ 1687.821740][T29004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.821758][T29004] RIP: 0033:0x7f4b0059cdd9 [ 1687.821776][T29004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1687.821792][T29004] RSP: 002b:00007f4b01427028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1687.821812][T29004] RAX: ffffffffffffffda RBX: 00007f4b00815fa0 RCX: 00007f4b0059cdd9 [ 1687.821825][T29004] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 1687.821838][T29004] RBP: 00007f4b01427090 R08: 0000000000000000 R09: 0000000000000000 [ 1687.821850][T29004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1687.821864][T29004] R13: 00007f4b00816038 R14: 00007f4b00815fa0 R15: 00007ffd59a59a98 [ 1687.821895][T29004] [ 1688.215479][T29003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13829'. [ 1688.331463][T11431] hsr_slave_0: left promiscuous mode [ 1688.337271][T11431] hsr_slave_1: left promiscuous mode [ 1688.345015][T11431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1688.354012][T29024] netlink: 'syz.1.13836': attribute type 10 has an invalid length. [ 1688.362409][T11431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1688.388005][T11431] pim6reg (unregistering): left allmulticast mode [ 1688.676916][T11431] team0 (unregistering): Port device team_slave_1 removed [ 1688.736857][T11431] team0 (unregistering): Port device team_slave_0 removed [ 1688.977893][T29003] ip6gre1: entered promiscuous mode [ 1688.994790][T29017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13834'. [ 1688.996588][T29024] bond0: (slave wlan1): Opening slave failed [ 1689.011713][T29017] netlink: 'syz.0.13834': attribute type 30 has an invalid length. [ 1689.063159][T29017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13834'. [ 1689.073279][T29021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1689.086633][ T1321] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1689.109217][T29017] netlink: 'syz.0.13834': attribute type 30 has an invalid length. [ 1689.131075][ T1321] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1689.139848][ T1321] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1689.192684][ T1321] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1689.233546][T29042] FAULT_INJECTION: forcing a failure. [ 1689.233546][T29042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1689.246629][T29042] CPU: 1 UID: 0 PID: 29042 Comm: syz.2.13841 Not tainted syzkaller #0 PREEMPT(full) [ 1689.246654][T29042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1689.246665][T29042] Call Trace: [ 1689.246680][T29042] [ 1689.246688][T29042] dump_stack_lvl+0xe8/0x150 [ 1689.246721][T29042] should_fail_ex+0x412/0x560 [ 1689.246754][T29042] _copy_from_user+0x2d/0xb0 [ 1689.246784][T29042] ___sys_sendmsg+0x1c6/0x360 [ 1689.246805][T29042] ? __lock_acquire+0x6b5/0x2cf0 [ 1689.246835][T29042] ? __pfx____sys_sendmsg+0x10/0x10 [ 1689.246851][T29042] ? __lock_acquire+0x6b5/0x2cf0 [ 1689.246883][T29042] ? kstrtouint+0x6e/0xe0 [ 1689.246949][T29042] __sys_sendmmsg+0x27c/0x4e0 [ 1689.246976][T29042] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1689.246995][T29042] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1689.247044][T29042] ? ksys_write+0x242/0x270 [ 1689.247071][T29042] ? __pfx_ksys_write+0x10/0x10 [ 1689.247100][T29042] __x64_sys_sendmmsg+0xa0/0xc0 [ 1689.247120][T29042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.247141][T29042] do_syscall_64+0x15f/0xf80 [ 1689.247163][T29042] ? trace_irq_disable+0x3b/0x140 [ 1689.247186][T29042] ? clear_bhb_loop+0x40/0x90 [ 1689.247210][T29042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.247228][T29042] RIP: 0033:0x7fbb7a59cdd9 [ 1689.247247][T29042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1689.247262][T29042] RSP: 002b:00007fbb7b46c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1689.247282][T29042] RAX: ffffffffffffffda RBX: 00007fbb7a815fa0 RCX: 00007fbb7a59cdd9 [ 1689.247296][T29042] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 1689.247310][T29042] RBP: 00007fbb7b46c090 R08: 0000000000000000 R09: 0000000000000000 [ 1689.247323][T29042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1689.247335][T29042] R13: 00007fbb7a816038 R14: 00007fbb7a815fa0 R15: 00007fff2fe952e8 [ 1689.247366][T29042] [ 1689.550457][T29047] team0: entered allmulticast mode [ 1689.555630][T29047] team_slave_0: entered allmulticast mode [ 1689.561685][T29047] team_slave_1: entered allmulticast mode [ 1689.567520][T29047] dummy0: entered allmulticast mode [ 1690.013168][T29068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13847'. [ 1690.031813][T29068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13847'. [ 1690.042550][T29068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13847'. [ 1690.211363][T29070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13848'. [ 1690.225002][T29074] tipc: Enabling of bearer rejected, already enabled [ 1690.233190][T29070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13848'. [ 1690.255807][T29074] vlan0: entered allmulticast mode [ 1690.320334][T29079] netlink: 72 bytes leftover after parsing attributes in process `syz.1.13852'. [ 1690.345663][T11431] IPVS: stop unused estimator thread 0... [ 1690.396015][T29081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13853'. [ 1690.475315][T29086] netlink: 'syz.2.13855': attribute type 13 has an invalid length. [ 1690.484620][T29086] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.13855'. [ 1690.612891][T29092] netlink: 'syz.0.13853': attribute type 7 has an invalid length. [ 1690.787543][T29099] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1690.798957][T29099] bond4 (unregistering): Released all slaves [ 1690.896472][T29113] ..@ÿ: renamed from bond_slave_0 [ 1691.028389][T29115] lo speed is unknown, defaulting to 1000 [ 1691.238457][T29122] macsec0: entered promiscuous mode [ 1691.243717][T29122] erspan0: entered promiscuous mode [ 1691.284955][T29122] erspan0: left promiscuous mode [ 1691.343084][T29129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13864'. [ 1691.570252][T29139] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1691.580253][T29141] syzkaller0: entered promiscuous mode [ 1691.585826][T29141] syzkaller0: entered allmulticast mode [ 1691.756147][T29148] tipc: Enabling of bearer rejected, failed to enable media [ 1691.767572][T29148] set match dimension is over the limit! [ 1691.782353][T29148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13868'. [ 1691.893166][T29156] syzkaller0: entered promiscuous mode [ 1691.898670][T29156] syzkaller0: entered allmulticast mode [ 1692.146414][T29167] netlink: 'syz.2.13874': attribute type 1 has an invalid length. [ 1692.286580][T29169] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1692.367859][T29167] bond4: entered promiscuous mode [ 1692.385697][T29167] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1692.468111][T29175] .`: (slave dummy0): Releasing backup interface [ 1692.637423][T29176] syz_tun: entered allmulticast mode [ 1693.117049][T29176] syz_tun: left allmulticast mode [ 1693.423533][T29228] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20002 [ 1693.496654][T29235] netlink: 'syz.4.13891': attribute type 3 has an invalid length. [ 1693.517435][T29235] netlink: 'syz.4.13891': attribute type 3 has an invalid length. [ 1693.539494][T29235] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1693.641236][T29238] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1693.658401][T29238] syzkaller0: entered promiscuous mode [ 1693.664745][T29238] syzkaller0: entered allmulticast mode [ 1693.675647][T29238] TC_ACT_REPEAT abuse ? [ 1694.243129][T29246] bridge0: port 3(vlan2) entered blocking state [ 1694.260734][T29246] bridge0: port 3(vlan2) entered disabled state [ 1694.286982][T29246] vlan2: entered allmulticast mode [ 1694.308685][T29246] bridge0: entered allmulticast mode [ 1694.348276][T29246] vlan2: left allmulticast mode [ 1694.365921][T29246] bridge0: left allmulticast mode [ 1695.078219][T29272] __nla_validate_parse: 11 callbacks suppressed [ 1695.078239][T29272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13902'. [ 1695.332446][T29269] lo speed is unknown, defaulting to 1000 [ 1695.501651][T29283] netlink: 'syz.4.13905': attribute type 1 has an invalid length. [ 1696.157429][T29327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13915'. [ 1696.457771][T29331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13917'. [ 1696.853277][T29364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13925'. [ 1696.916206][T29366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13927'. [ 1697.063558][T29372] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1697.078996][T29374] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13930'. [ 1697.079725][T29375] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13930'. [ 1697.100002][T20708] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1697.152353][T27529] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1697.341568][T13941] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1697.361059][T29383] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13933'. [ 1697.417458][T29387] sctp: [Deprecated]: syz.4.13935 (pid 29387) Use of int in maxseg socket option. [ 1697.417458][T29387] Use struct sctp_assoc_value instead [ 1697.446766][T29389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13934'. [ 1697.463050][T29383] netlink: 'syz.2.13933': attribute type 3 has an invalid length. [ 1697.569121][T29397] netlink: 'syz.2.13937': attribute type 12 has an invalid length. [ 1697.862504][T29415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13945'. [ 1697.876224][T29415] openvswitch: netlink: Message has 2 unknown bytes. [ 1698.164768][T29445] syzkaller1: tun_chr_ioctl cmd 35111 [ 1698.411327][T28729] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1698.423506][T28729] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1698.482694][T20708] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1698.484367][T29459] ÿ: renamed from bond_slave_0 [ 1698.569262][T29461] syzkaller0: entered promiscuous mode [ 1698.579094][T29461] syzkaller0: entered allmulticast mode [ 1698.824831][T29481] netlink: 'syz.4.13962': attribute type 1 has an invalid length. [ 1699.456220][ T3194] Bluetooth: hci3: command 0x0405 tx timeout [ 1699.807060][T29531] netlink: 'syz.4.13974': attribute type 4 has an invalid length. [ 1699.911847][T29528] 8021q: adding VLAN 0 to HW filter on device team0 [ 1699.924011][T29531] erspan0: entered promiscuous mode [ 1700.136735][T29550] xt_l2tp: wrong L2TP version: 0 [ 1700.183128][T29543] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.226297][T29547] lo speed is unknown, defaulting to 1000 [ 1700.247215][T29552] lo speed is unknown, defaulting to 1000 [ 1700.257715][T29554] __nla_validate_parse: 5 callbacks suppressed [ 1700.257733][T29554] netlink: 192 bytes leftover after parsing attributes in process `syz.0.13980'. [ 1700.400335][T29543] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.517339][T29561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13984'. [ 1700.683754][T29569] pimreg: tun_chr_ioctl cmd 1074025677 [ 1700.698148][T29569] pimreg: linktype set to 823 [ 1700.712857][T29574] netlink: 100 bytes leftover after parsing attributes in process `syz.1.13987'. [ 1700.734818][T29569] sch_fq: defrate 0 ignored. [ 1700.766437][T29571] lo speed is unknown, defaulting to 1000 [ 1700.805002][T29579] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1700.812188][T29579] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1700.828041][T29567] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1700.979683][T29543] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.374169][T29543] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.451663][T29619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14000'. [ 1701.511957][T29620] pim6reg: entered allmulticast mode [ 1701.538248][T29622] netlink: 'syz.0.14001': attribute type 12 has an invalid length. [ 1701.554676][T29622] netlink: 'syz.0.14001': attribute type 29 has an invalid length. [ 1701.585966][T29622] netlink: 148 bytes leftover after parsing attributes in process `syz.0.14001'. [ 1701.598607][T29622] netlink: 59 bytes leftover after parsing attributes in process `syz.0.14001'. [ 1702.796600][T13948] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.824172][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1702.853395][T29638] tap0: tun_chr_ioctl cmd 1074025681 [ 1702.919462][T11431] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.951151][T11431] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.992279][T13941] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.071852][T29662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14010'. [ 1703.216926][T29664] lo speed is unknown, defaulting to 1000 [ 1703.349303][T29669] syzkaller0: entered promiscuous mode [ 1703.354884][T29669] syzkaller0: entered allmulticast mode [ 1703.401593][T29677] netlink: 'syz.3.14015': attribute type 1 has an invalid length. [ 1703.494471][T29677] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1703.518994][T29677] bond6: (slave bond7): making interface the new active one [ 1703.533799][T29677] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1703.546005][T29677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14015'. [ 1703.558504][T29677] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1703.613152][T29689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14017'. [ 1703.647675][T29689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14017'. [ 1703.787730][T29693] netlink: 'syz.4.14019': attribute type 83 has an invalid length. [ 1704.192997][T29716] FAULT_INJECTION: forcing a failure. [ 1704.192997][T29716] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1704.234471][T29716] CPU: 0 UID: 0 PID: 29716 Comm: syz.2.14025 Not tainted syzkaller #0 PREEMPT(full) [ 1704.234498][T29716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1704.234509][T29716] Call Trace: [ 1704.234517][T29716] [ 1704.234526][T29716] dump_stack_lvl+0xe8/0x150 [ 1704.234559][T29716] should_fail_ex+0x412/0x560 [ 1704.234593][T29716] prepare_alloc_pages+0x22a/0x650 [ 1704.234626][T29716] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1704.234655][T29716] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1704.234684][T29716] ? __pfx_policy_nodemask+0x10/0x10 [ 1704.234719][T29716] alloc_pages_mpol+0x235/0x490 [ 1704.234749][T29716] folio_alloc_mpol_noprof+0x39/0x160 [ 1704.234776][T29716] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1704.234805][T29716] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1704.234844][T29716] do_wp_page+0x118a/0x4cc0 [ 1704.234869][T29716] ? __pte_offset_map+0x29/0x240 [ 1704.234898][T29716] ? __pfx_do_wp_page+0x10/0x10 [ 1704.234914][T29716] ? do_raw_spin_lock+0x12b/0x2f0 [ 1704.234940][T29716] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1704.234974][T29716] handle_mm_fault+0x151d/0x3170 [ 1704.235009][T29716] ? handle_mm_fault+0xee/0x3170 [ 1704.235036][T29716] ? __pfx_handle_mm_fault+0x10/0x10 [ 1704.235069][T29716] ? __lock_acquire+0x6b5/0x2cf0 [ 1704.235101][T29716] ? lock_mm_and_find_vma+0xa7/0x340 [ 1704.235127][T29716] do_user_addr_fault+0x75b/0x1340 [ 1704.235170][T29716] exc_page_fault+0x6a/0xc0 [ 1704.235197][T29716] asm_exc_page_fault+0x26/0x30 [ 1704.235215][T29716] RIP: 0010:__put_user_4+0xd/0x20 [ 1704.235239][T29716] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1704.235256][T29716] RSP: 0018:ffffc9000547fc98 EFLAGS: 00050202 [ 1704.235273][T29716] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000003038 [ 1704.235286][T29716] RDX: 0000000000000000 RSI: ffffffff8e24f3ee RDI: ffffffff8c289f60 [ 1704.235298][T29716] RBP: ffffc9000547feb0 R08: ffffffff82188cbf R09: ffff88807aa49bb8 [ 1704.235311][T29716] R10: dffffc0000000000 R11: fffffbfff20670df R12: 1ffff92000a8ff9c [ 1704.235325][T29716] R13: 0000000000040000 R14: 0000200000003000 R15: 0000000000000291 [ 1704.235345][T29716] ? __might_fault+0xaf/0x130 [ 1704.235373][T29716] __sys_sendmmsg+0x2b0/0x4e0 [ 1704.235407][T29716] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1704.235425][T29716] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1704.235477][T29716] ? ksys_write+0x242/0x270 [ 1704.235503][T29716] ? __pfx_ksys_write+0x10/0x10 [ 1704.235532][T29716] __x64_sys_sendmmsg+0xa0/0xc0 [ 1704.235553][T29716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.235572][T29716] do_syscall_64+0x15f/0xf80 [ 1704.235595][T29716] ? trace_irq_disable+0x3b/0x140 [ 1704.235619][T29716] ? clear_bhb_loop+0x40/0x90 [ 1704.235642][T29716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.235660][T29716] RIP: 0033:0x7fbb7a59cdd9 [ 1704.235678][T29716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.235692][T29716] RSP: 002b:00007fbb7b46c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1704.235710][T29716] RAX: ffffffffffffffda RBX: 00007fbb7a815fa0 RCX: 00007fbb7a59cdd9 [ 1704.235724][T29716] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 1704.235736][T29716] RBP: 00007fbb7b46c090 R08: 0000000000000000 R09: 0000000000000000 [ 1704.235748][T29716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1704.235758][T29716] R13: 00007fbb7a816038 R14: 00007fbb7a815fa0 R15: 00007fff2fe952e8 [ 1704.235790][T29716] [ 1704.664212][T29721] syzkaller0: entered promiscuous mode [ 1704.670301][T29721] syzkaller0: entered allmulticast mode [ 1704.884947][T29733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1705.048510][T29736] sctp: [Deprecated]: syz.3.14033 (pid 29736) Use of int in maxseg socket option. [ 1705.048510][T29736] Use struct sctp_assoc_value instead [ 1705.237745][T29754] netlink: 'syz.0.14036': attribute type 4 has an invalid length. [ 1705.281629][T29754] netlink: 'syz.0.14036': attribute type 8 has an invalid length. [ 1705.304869][T29754] netlink: 212 bytes leftover after parsing attributes in process `syz.0.14036'. [ 1705.333261][T29755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14036'. [ 1705.778162][T29776] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14041'. [ 1706.746472][T29822] bond8: option arp_interval: invalid value (18446744073709551615) [ 1706.755685][T29822] bond8: option arp_interval: allowed values 0 - 2147483647 [ 1706.767672][T29822] bond8 (unregistering): Released all slaves [ 1706.832687][T29826] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14051'. [ 1707.155034][T29842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14056'. [ 1707.165285][T29842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14056'. [ 1707.175942][T29842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14056'. [ 1707.202479][T29842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14056'. [ 1707.375943][T29862] lo speed is unknown, defaulting to 1000 [ 1707.916718][T29885] netlink: 'syz.4.14063': attribute type 44 has an invalid length. [ 1707.924696][T29885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14063'. [ 1707.984964][T29887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14065'. [ 1708.062995][T29887] netlink: 'syz.1.14065': attribute type 11 has an invalid length. [ 1708.083072][T29890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1708.090698][T29887] netlink: 'syz.1.14065': attribute type 23 has an invalid length. [ 1708.248871][T29900] FAULT_INJECTION: forcing a failure. [ 1708.248871][T29900] name failslab, interval 1, probability 0, space 0, times 0 [ 1708.263125][T29900] CPU: 0 UID: 0 PID: 29900 Comm: syz.0.14069 Not tainted syzkaller #0 PREEMPT(full) [ 1708.263151][T29900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1708.263163][T29900] Call Trace: [ 1708.263170][T29900] [ 1708.263178][T29900] dump_stack_lvl+0xe8/0x150 [ 1708.263212][T29900] should_fail_ex+0x412/0x560 [ 1708.263245][T29900] should_failslab+0xa8/0x100 [ 1708.263272][T29900] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1708.263295][T29900] ? __alloc_skb+0x186/0x7d0 [ 1708.263313][T29900] ? __alloc_skb+0x1d0/0x7d0 [ 1708.263328][T29900] ? __local_bh_enable_ip+0xd0/0x130 [ 1708.263359][T29900] __alloc_skb+0x1d0/0x7d0 [ 1708.263382][T29900] alloc_skb_with_frags+0xc8/0x760 [ 1708.263413][T29900] sock_alloc_send_pskb+0x878/0x990 [ 1708.263454][T29900] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1708.263474][T29900] ? kasan_quarantine_put+0xbb/0x1f0 [ 1708.263494][T29900] ? lockdep_hardirqs_on+0x7a/0x110 [ 1708.263523][T29900] ? unix_dgram_sendmsg+0x57c/0x18d0 [ 1708.263548][T29900] ? kmem_cache_free+0x182/0x650 [ 1708.263571][T29900] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1708.263598][T29900] unix_dgram_sendmsg+0x460/0x18d0 [ 1708.263631][T29900] ? css_rstat_updated+0x23a/0x530 [ 1708.263660][T29900] ? __pfx_css_rstat_updated+0x10/0x10 [ 1708.263697][T29900] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1708.263732][T29900] ? count_memcg_event_mm+0x21/0x260 [ 1708.263752][T29900] ? aa_sock_msg_perm+0xda/0x1b0 [ 1708.263772][T29900] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 1708.263801][T29900] ____sys_sendmsg+0x972/0x9f0 [ 1708.263821][T29900] ? __might_fault+0xaf/0x130 [ 1708.263848][T29900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1708.263877][T29900] ? import_iovec+0x73/0xa0 [ 1708.263902][T29900] ___sys_sendmsg+0x2a5/0x360 [ 1708.263928][T29900] ? __pfx____sys_sendmsg+0x10/0x10 [ 1708.263946][T29900] ? __lock_acquire+0x6b5/0x2cf0 [ 1708.264021][T29900] __sys_sendmmsg+0x27c/0x4e0 [ 1708.264047][T29900] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1708.264066][T29900] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1708.264117][T29900] ? ksys_write+0x242/0x270 [ 1708.264143][T29900] ? __pfx_ksys_write+0x10/0x10 [ 1708.264172][T29900] __x64_sys_sendmmsg+0xa0/0xc0 [ 1708.264192][T29900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.264212][T29900] do_syscall_64+0x15f/0xf80 [ 1708.264235][T29900] ? trace_irq_disable+0x3b/0x140 [ 1708.264258][T29900] ? clear_bhb_loop+0x40/0x90 [ 1708.264281][T29900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.264299][T29900] RIP: 0033:0x7f1a2699cdd9 [ 1708.264317][T29900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1708.264333][T29900] RSP: 002b:00007f1a2791c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1708.264352][T29900] RAX: ffffffffffffffda RBX: 00007f1a26c15fa0 RCX: 00007f1a2699cdd9 [ 1708.264366][T29900] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 1708.264379][T29900] RBP: 00007f1a2791c090 R08: 0000000000000000 R09: 0000000000000000 [ 1708.264390][T29900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1708.264402][T29900] R13: 00007f1a26c16038 R14: 00007f1a26c15fa0 R15: 00007fffad86e418 [ 1708.264432][T29900] [ 1708.753599][T29914] netlink: 'syz.0.14075': attribute type 1 has an invalid length. [ 1708.914950][T29927] veth5: entered allmulticast mode [ 1708.944429][T29927] bond6: (slave veth5): Enslaving as a backup interface with a down link [ 1708.969583][T29929] batadv_slave_1: entered promiscuous mode [ 1708.986491][T29926] lo speed is unknown, defaulting to 1000 [ 1709.186011][T29929] batadv_slave_1 (unregistering): left promiscuous mode [ 1709.393617][T29957] netlink: 'syz.4.14084': attribute type 3 has an invalid length. [ 1709.420023][T29958] netlink: 'syz.2.14083': attribute type 1 has an invalid length. [ 1709.881072][T29975] macsec0: entered promiscuous mode [ 1709.888754][T29975] macsec0: left promiscuous mode [ 1709.936389][T29978] IPVS: Error connecting to the multicast addr [ 1710.041831][T29978] `: entered promiscuous mode [ 1710.049413][T29986] FAULT_INJECTION: forcing a failure. [ 1710.049413][T29986] name failslab, interval 1, probability 0, space 0, times 0 [ 1710.060576][T29978] batadv1: entered promiscuous mode [ 1710.071705][T29978] `: left promiscuous mode [ 1710.074783][T29986] CPU: 0 UID: 0 PID: 29986 Comm: syz.1.14096 Not tainted syzkaller #0 PREEMPT(full) [ 1710.074817][T29986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1710.074828][T29986] Call Trace: [ 1710.074836][T29986] [ 1710.074843][T29986] dump_stack_lvl+0xe8/0x150 [ 1710.074876][T29986] should_fail_ex+0x412/0x560 [ 1710.074908][T29986] should_failslab+0xa8/0x100 [ 1710.074934][T29986] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1710.074956][T29986] ? __alloc_skb+0x186/0x7d0 [ 1710.074972][T29986] ? __alloc_skb+0x1d0/0x7d0 [ 1710.074986][T29986] ? __local_bh_enable_ip+0xd0/0x130 [ 1710.075015][T29986] __alloc_skb+0x1d0/0x7d0 [ 1710.075037][T29986] alloc_skb_with_frags+0xc8/0x760 [ 1710.075067][T29986] sock_alloc_send_pskb+0x878/0x990 [ 1710.075104][T29986] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1710.075124][T29986] ? kasan_quarantine_put+0xbb/0x1f0 [ 1710.075144][T29986] ? lockdep_hardirqs_on+0x7a/0x110 [ 1710.075171][T29986] ? unix_dgram_sendmsg+0x57c/0x18d0 [ 1710.075194][T29986] ? kmem_cache_free+0x182/0x650 [ 1710.075215][T29986] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1710.075242][T29986] unix_dgram_sendmsg+0x460/0x18d0 [ 1710.075269][T29986] ? css_rstat_updated+0x23a/0x530 [ 1710.075295][T29986] ? __pfx_css_rstat_updated+0x10/0x10 [ 1710.075330][T29986] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1710.075357][T29986] ? count_memcg_event_mm+0x21/0x260 [ 1710.075376][T29986] ? aa_sock_msg_perm+0xda/0x1b0 [ 1710.075395][T29986] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 1710.075422][T29986] ____sys_sendmsg+0x972/0x9f0 [ 1710.075441][T29986] ? __might_fault+0xaf/0x130 [ 1710.075466][T29986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1710.075494][T29986] ? import_iovec+0x73/0xa0 [ 1710.075516][T29986] ___sys_sendmsg+0x2a5/0x360 [ 1710.075540][T29986] ? __pfx____sys_sendmsg+0x10/0x10 [ 1710.075557][T29986] ? __lock_acquire+0x6b5/0x2cf0 [ 1710.075628][T29986] __sys_sendmmsg+0x27c/0x4e0 [ 1710.075652][T29986] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1710.075669][T29986] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1710.075717][T29986] ? ksys_write+0x242/0x270 [ 1710.075740][T29986] ? __pfx_ksys_write+0x10/0x10 [ 1710.075768][T29986] __x64_sys_sendmmsg+0xa0/0xc0 [ 1710.075787][T29986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.075813][T29986] do_syscall_64+0x15f/0xf80 [ 1710.075835][T29986] ? trace_irq_disable+0x3b/0x140 [ 1710.075858][T29986] ? clear_bhb_loop+0x40/0x90 [ 1710.075880][T29986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.075897][T29986] RIP: 0033:0x7f4b0059cdd9 [ 1710.075914][T29986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1710.075929][T29986] RSP: 002b:00007f4b01427028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1710.075947][T29986] RAX: ffffffffffffffda RBX: 00007f4b00815fa0 RCX: 00007f4b0059cdd9 [ 1710.075960][T29986] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 1710.075972][T29986] RBP: 00007f4b01427090 R08: 0000000000000000 R09: 0000000000000000 [ 1710.075983][T29986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1710.075994][T29986] R13: 00007f4b00816038 R14: 00007f4b00815fa0 R15: 00007ffd59a59a98 [ 1710.076022][T29986] [ 1710.419328][T29978] batadv1: left promiscuous mode [ 1710.436456][T29984] netlink: 'syz.2.14095': attribute type 29 has an invalid length. [ 1710.444720][T29984] __nla_validate_parse: 17 callbacks suppressed [ 1710.444730][T29984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14095'. [ 1710.727257][T30016] syzkaller0: entered promiscuous mode [ 1710.744582][T30016] syzkaller0: entered allmulticast mode [ 1710.799266][T30021] FAULT_INJECTION: forcing a failure. [ 1710.799266][T30021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1710.816404][T30021] CPU: 1 UID: 0 PID: 30021 Comm: syz.3.14108 Not tainted syzkaller #0 PREEMPT(full) [ 1710.816430][T30021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1710.816441][T30021] Call Trace: [ 1710.816449][T30021] [ 1710.816457][T30021] dump_stack_lvl+0xe8/0x150 [ 1710.816490][T30021] should_fail_ex+0x412/0x560 [ 1710.816523][T30021] _copy_from_user+0x2d/0xb0 [ 1710.816546][T30021] ___sys_sendmsg+0x1c6/0x360 [ 1710.816574][T30021] ? __pfx____sys_sendmsg+0x10/0x10 [ 1710.816592][T30021] ? __lock_acquire+0x6b5/0x2cf0 [ 1710.816668][T30021] __sys_sendmmsg+0x27c/0x4e0 [ 1710.816704][T30021] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1710.816722][T30021] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1710.816773][T30021] ? ksys_write+0x242/0x270 [ 1710.816798][T30021] ? __pfx_ksys_write+0x10/0x10 [ 1710.816827][T30021] __x64_sys_sendmmsg+0xa0/0xc0 [ 1710.816847][T30021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.816866][T30021] do_syscall_64+0x15f/0xf80 [ 1710.816889][T30021] ? trace_irq_disable+0x3b/0x140 [ 1710.816912][T30021] ? clear_bhb_loop+0x40/0x90 [ 1710.816934][T30021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.816953][T30021] RIP: 0033:0x7fcefcd9cdd9 [ 1710.816970][T30021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1710.816985][T30021] RSP: 002b:00007fcefdca5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1710.817005][T30021] RAX: ffffffffffffffda RBX: 00007fcefd015fa0 RCX: 00007fcefcd9cdd9 [ 1710.817018][T30021] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 1710.817031][T30021] RBP: 00007fcefdca5090 R08: 0000000000000000 R09: 0000000000000000 [ 1710.817042][T30021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1710.817053][T30021] R13: 00007fcefd016038 R14: 00007fcefd015fa0 R15: 00007ffcd1398658 [ 1710.817084][T30021] [ 1710.887352][T30026] netlink: 'syz.2.14104': attribute type 1 has an invalid length. [ 1711.368396][T30026] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1711.471363][T30047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14112'. [ 1711.514126][T30047] SET target dimension over the limit! [ 1711.659399][T30047] bond5: option arp_interval: invalid value (18446744073709551615) [ 1711.667357][T30047] bond5: option arp_interval: allowed values 0 - 2147483647 [ 1711.703459][T30047] bond5 (unregistering): Released all slaves [ 1711.731643][T30044] netlink: 'syz.1.14112': attribute type 39 has an invalid length. [ 1712.249776][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1712.299921][T30086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14119'. [ 1712.304406][T30080] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14116'. [ 1712.777352][T20468] lec:lec_start_xmit: lec0:No lecd attached [ 1712.952385][T30127] netlink: 'syz.3.14125': attribute type 11 has an invalid length. [ 1712.960341][T30127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14125'. [ 1713.061121][T30130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14128'. [ 1713.091931][T30130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14128'. [ 1713.503886][T30107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14121'. [ 1713.858804][T30164] lo speed is unknown, defaulting to 1000 [ 1714.080916][T30178] netlink: 'syz.0.14137': attribute type 1 has an invalid length. [ 1714.149618][T30178] bond7: entered promiscuous mode [ 1714.155140][T30178] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1714.248638][T30190] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14140'. [ 1714.315713][T30192] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1714.682998][T30213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14147'. [ 1714.693979][T30213] syzkaller1: entered promiscuous mode [ 1714.701550][T30213] syzkaller1: entered allmulticast mode [ 1714.760075][T30216] netlink: 'syz.1.14148': attribute type 1 has an invalid length. [ 1714.897309][T30223] ip6tnl1: entered allmulticast mode [ 1715.159943][T30236] netlink: 'syz.2.14155': attribute type 30 has an invalid length. [ 1715.173679][T30235] netlink: 'syz.0.14154': attribute type 10 has an invalid length. [ 1715.222701][T30236] bond6: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 1715.234908][T30236] bond6 (unregistering): Released all slaves [ 1715.262889][T30235] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1717.790121][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1717.798158][ C0] lec:lec_tx_timeout: lec0 [ 1725.551680][T30262] gre0: entered promiscuous mode [ 1725.556811][T30262] gre0: entered allmulticast mode [ 1725.572672][T30263] __nla_validate_parse: 6 callbacks suppressed [ 1725.572718][T30263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14161'. [ 1725.715769][T30265] syzkaller0: entered promiscuous mode [ 1725.727941][T30265] syzkaller0: entered allmulticast mode [ 1726.472217][T30316] syzkaller1: entered promiscuous mode [ 1726.504480][T30316] syzkaller1: entered allmulticast mode [ 1726.533773][T30318] netlink: 'syz.4.14175': attribute type 2 has an invalid length. [ 1726.565079][T30318] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14175'. [ 1726.625538][T30316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14175'. [ 1727.175422][T30347] netlink: 'syz.2.14180': attribute type 3 has an invalid length. [ 1727.214560][T30338] syzkaller1: entered promiscuous mode [ 1727.237033][T30338] syzkaller1: entered allmulticast mode [ 1727.357974][T30356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14181'. [ 1727.475580][T30368] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14184'. [ 1727.489064][T30368] ip6erspan0: entered promiscuous mode [ 1727.815778][T30378] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14186'. [ 1727.822849][T30382] syzkaller0: entered promiscuous mode [ 1727.830311][T30382] syzkaller0: entered allmulticast mode [ 1728.288564][T30392] netlink: 'syz.1.14190': attribute type 1 has an invalid length. [ 1728.345884][T30393] SET target dimension over the limit! [ 1728.463718][T30397] sctp: [Deprecated]: syz.1.14190 (pid 30397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1728.463718][T30397] Use struct sctp_sack_info instead [ 1728.796524][T30386] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14189'. [ 1730.224429][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.236914][ T1314] lec:lec_start_xmit: lec0:No lecd attached [ 1730.809784][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1730.871226][T30430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14194'. [ 1730.897933][T30428] delete_channel: no stack [ 1731.030760][T30440] netlink: 'syz.2.14192': attribute type 15 has an invalid length. [ 1731.038707][T30440] netlink: 666 bytes leftover after parsing attributes in process `syz.2.14192'. [ 1731.053641][T30438] tipc: Failed to remove unknown binding: 66,0,0/0:2437357204/2437357205 [ 1731.166490][T30431] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0xfff60800000018 ref_ctr_offset(new): 0x800000000 [ 1731.358315][T30456] veth1_to_bridge: entered allmulticast mode [ 1731.415863][T30458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14202'. [ 1731.460139][T30458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14202'. [ 1731.471707][T30458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14202'. [ 1731.480673][T30458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14202'. [ 1731.706251][T30479] tipc: Enabled bearer , priority 0 [ 1731.716859][T30479] syzkaller0: entered promiscuous mode [ 1731.724873][T30479] syzkaller0: entered allmulticast mode [ 1731.780370][T30479] tipc: Resetting bearer [ 1731.807675][T30483] openvswitch: netlink: Actions may not be safe on all matching packets [ 1731.816928][T30479] tipc: Resetting bearer [ 1731.847908][T30479] tipc: Disabling bearer [ 1732.083553][T30496] lo speed is unknown, defaulting to 1000 [ 1732.110468][T30493] netlink: 'syz.2.14212': attribute type 62 has an invalid length. [ 1732.136555][T30493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14212'. [ 1732.377310][T30506] bridge0: port 1(vlan1) entered blocking state [ 1732.384606][T30506] bridge0: port 1(vlan1) entered disabled state [ 1732.392073][T30506] vlan1: entered allmulticast mode [ 1732.397339][T30506] geneve0: entered allmulticast mode [ 1732.407745][T30506] vlan1: entered promiscuous mode [ 1732.413891][T30506] geneve0: entered promiscuous mode [ 1732.438653][T30498] block nbd6: server does not support multiple connections per device. [ 1732.469441][T30498] block nbd6: shutting down sockets [ 1732.525036][T30511] syzkaller0: entered promiscuous mode [ 1732.530592][T30511] syzkaller0: entered allmulticast mode [ 1732.810566][T30515] syzkaller1: entered promiscuous mode [ 1732.816088][T30515] syzkaller1: entered allmulticast mode [ 1733.322939][T30539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14224'. [ 1733.335495][T30539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14224'. [ 1733.454708][T30545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14227'. [ 1733.548470][T30548] lo speed is unknown, defaulting to 1000 [ 1733.968482][T30571] vxcan0: entered promiscuous mode [ 1733.979102][T30571] vxcan1: entered allmulticast mode [ 1734.259443][T30595] tipc: Enabling of bearer rejected, failed to enable media [ 1735.453802][T30650] syzkaller0: entered promiscuous mode [ 1735.466067][T30650] syzkaller0: entered allmulticast mode [ 1735.769686][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5530 ms [ 1735.777799][ C0] lec:lec_tx_timeout: lec0 [ 1736.793874][T30686] __nla_validate_parse: 6 callbacks suppressed [ 1736.793893][T30686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14256'. [ 1736.815149][T30686] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14256'. [ 1738.996872][T30670] tipc: Enabling of bearer rejected, failed to enable media [ 1739.073887][T30686] 8021q: VLANs not supported on sit0 [ 1739.131748][T30690] xt_hashlimit: size too large, truncated to 1048576 [ 1739.150435][T30691] netlink: 'syz.1.14257': attribute type 3 has an invalid length. [ 1739.167311][T30693] openvswitch: netlink: Message has 8 unknown bytes. [ 1739.264490][T30701] xt_hashlimit: size too large, truncated to 1048576 [ 1739.504066][T30711] syzkaller1: entered promiscuous mode [ 1739.527900][T30711] syzkaller1: entered allmulticast mode [ 1739.670854][T30720] netlink: 72 bytes leftover after parsing attributes in process `syz.3.14263'. [ 1740.035974][T30729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14264'. [ 1740.313990][T30722] syzkaller1: entered promiscuous mode [ 1740.319505][T30722] syzkaller1: entered allmulticast mode [ 1740.364096][T30718] lo speed is unknown, defaulting to 1000 [ 1740.458735][T30744] netlink: 'syz.2.14269': attribute type 22 has an invalid length. [ 1740.489065][T30738] syzkaller0: entered promiscuous mode [ 1740.495687][T30744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14269'. [ 1740.506446][T30738] syzkaller0: entered allmulticast mode [ 1740.528147][T30746] netlink: 'syz.2.14269': attribute type 22 has an invalid length. [ 1740.547532][T30746] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14269'. [ 1744.188950][T30747] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1744.207572][T30756] netlink: 'syz.4.14271': attribute type 2 has an invalid length. [ 1744.217222][T30747] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1744.226837][T30756] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14271'. [ 1744.236950][T30747] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1744.508911][T30773] lo speed is unknown, defaulting to 1000 [ 1744.537298][T27512] IPVS: starting estimator thread 0... [ 1744.548139][T27532] IPVS: starting estimator thread 0... [ 1744.552720][T30769] Cannot find set identified by id 65534 to match [ 1744.587787][T30769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.596777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.864934][T30780] IPVS: using max 29 ests per chain, 69600 per kthread [ 1744.872989][T30777] IPVS: using max 26 ests per chain, 62400 per kthread [ 1744.889101][T30795] netlink: 'syz.1.14279': attribute type 53 has an invalid length. [ 1745.326339][T30809] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14283'. [ 1745.402730][T30817] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14285'. [ 1745.722653][T30828] FAULT_INJECTION: forcing a failure. [ 1745.722653][T30828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1745.775601][T30828] CPU: 0 UID: 0 PID: 30828 Comm: syz.4.14287 Not tainted syzkaller #0 PREEMPT(full) [ 1745.775626][T30828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1745.775638][T30828] Call Trace: [ 1745.775645][T30828] [ 1745.775651][T30826] syzkaller0: entered promiscuous mode [ 1745.775653][T30828] dump_stack_lvl+0xe8/0x150 [ 1745.775685][T30828] should_fail_ex+0x412/0x560 [ 1745.775712][T30828] _copy_from_user+0x2d/0xb0 [ 1745.775731][T30828] ___sys_sendmsg+0x1c6/0x360 [ 1745.775755][T30828] ? __pfx____sys_sendmsg+0x10/0x10 [ 1745.775773][T30828] ? __lock_acquire+0x6b5/0x2cf0 [ 1745.775844][T30828] __sys_sendmmsg+0x27c/0x4e0 [ 1745.775869][T30828] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1745.775887][T30828] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1745.775936][T30828] ? ksys_write+0x242/0x270 [ 1745.775960][T30828] ? __pfx_ksys_write+0x10/0x10 [ 1745.775988][T30828] __x64_sys_sendmmsg+0xa0/0xc0 [ 1745.776015][T30828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.776033][T30828] do_syscall_64+0x15f/0xf80 [ 1745.776055][T30828] ? trace_irq_disable+0x3b/0x140 [ 1745.776078][T30828] ? clear_bhb_loop+0x40/0x90 [ 1745.776101][T30828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.776118][T30828] RIP: 0033:0x7f9316b9cdd9 [ 1745.776136][T30828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1745.776150][T30828] RSP: 002b:00007f93179f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1745.776169][T30828] RAX: ffffffffffffffda RBX: 00007f9316e15fa0 RCX: 00007f9316b9cdd9 [ 1745.776182][T30828] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 1745.776194][T30828] RBP: 00007f93179f1090 R08: 0000000000000000 R09: 0000000000000000 [ 1745.776206][T30828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1745.776216][T30828] R13: 00007f9316e16038 R14: 00007f9316e15fa0 R15: 00007ffee7e30688 [ 1745.776245][T30828] [ 1746.026290][T30826] syzkaller0: entered allmulticast mode [ 1746.055646][T30835] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14288'. [ 1746.523118][T30865] netlink: 'syz.3.14294': attribute type 7 has an invalid length. [ 1746.584360][T30868] netlink: 'syz.0.14295': attribute type 1 has an invalid length. [ 1746.592292][T30868] netlink: 256 bytes leftover after parsing attributes in process `syz.0.14295'. [ 1746.623935][T30862] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.875649][T30862] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.963163][T30862] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.174335][T30862] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.320961][T30899] xt_hashlimit: max too large, truncated to 1048576 [ 1747.329248][T30900] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1747.383739][T30900] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1747.394561][T30903] SET target dimension over the limit! [ 1747.476498][T28729] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.550977][T13948] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.572353][T13948] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.632000][T13933] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.802612][T30921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14308'. [ 1747.972076][T30931] FAULT_INJECTION: forcing a failure. [ 1747.972076][T30931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1747.990591][T30931] CPU: 1 UID: 0 PID: 30931 Comm: syz.1.14311 Not tainted syzkaller #0 PREEMPT(full) [ 1747.990616][T30931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1747.990627][T30931] Call Trace: [ 1747.990635][T30931] [ 1747.990644][T30931] dump_stack_lvl+0xe8/0x150 [ 1747.990675][T30931] should_fail_ex+0x412/0x560 [ 1747.990707][T30931] _copy_from_user+0x2d/0xb0 [ 1747.990739][T30931] ___sys_sendmsg+0x1c6/0x360 [ 1747.990765][T30931] ? __pfx____sys_sendmsg+0x10/0x10 [ 1747.990783][T30931] ? __lock_acquire+0x6b5/0x2cf0 [ 1747.990860][T30931] __sys_sendmmsg+0x27c/0x4e0 [ 1747.990886][T30931] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1747.990904][T30931] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1747.990954][T30931] ? ksys_write+0x242/0x270 [ 1747.990978][T30931] ? __pfx_ksys_write+0x10/0x10 [ 1747.991006][T30931] __x64_sys_sendmmsg+0xa0/0xc0 [ 1747.991026][T30931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.991045][T30931] do_syscall_64+0x15f/0xf80 [ 1747.991068][T30931] ? trace_irq_disable+0x3b/0x140 [ 1747.991091][T30931] ? clear_bhb_loop+0x40/0x90 [ 1747.991113][T30931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.991131][T30931] RIP: 0033:0x7f4b0059cdd9 [ 1747.991148][T30931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1747.991163][T30931] RSP: 002b:00007f4b01427028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1747.991183][T30931] RAX: ffffffffffffffda RBX: 00007f4b00815fa0 RCX: 00007f4b0059cdd9 [ 1747.991196][T30931] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 1747.991208][T30931] RBP: 00007f4b01427090 R08: 0000000000000000 R09: 0000000000000000 [ 1747.991219][T30931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1747.991231][T30931] R13: 00007f4b00816038 R14: 00007f4b00815fa0 R15: 00007ffd59a59a98 [ 1747.991260][T30931] [ 1748.370212][T30937] TC_ACT_REPEAT abuse ? [ 1748.377484][T30945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14309'. [ 1748.471942][T30945] bond8 (unregistering): Released all slaves [ 1748.611743][T30953] openvswitch: netlink: IP tunnel dst address not specified [ 1748.882010][T30971] netlink: 240 bytes leftover after parsing attributes in process `syz.1.14320'. [ 1748.918285][T30962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14320'. [ 1749.004203][T30973] FAULT_INJECTION: forcing a failure. [ 1749.004203][T30973] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.019994][T30973] CPU: 1 UID: 0 PID: 30973 Comm: syz.0.14323 Not tainted syzkaller #0 PREEMPT(full) [ 1749.020022][T30973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1749.020032][T30973] Call Trace: [ 1749.020038][T30973] [ 1749.020046][T30973] dump_stack_lvl+0xe8/0x150 [ 1749.020079][T30973] should_fail_ex+0x412/0x560 [ 1749.020112][T30973] should_failslab+0xa8/0x100 [ 1749.020139][T30973] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1749.020161][T30973] ? __alloc_skb+0x186/0x7d0 [ 1749.020179][T30973] ? __alloc_skb+0x1d0/0x7d0 [ 1749.020194][T30973] ? __local_bh_enable_ip+0xd0/0x130 [ 1749.020225][T30973] __alloc_skb+0x1d0/0x7d0 [ 1749.020248][T30973] alloc_skb_with_frags+0xc8/0x760 [ 1749.020279][T30973] sock_alloc_send_pskb+0x878/0x990 [ 1749.020319][T30973] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1749.020337][T30973] ? kasan_quarantine_put+0xbb/0x1f0 [ 1749.020357][T30973] ? lockdep_hardirqs_on+0x7a/0x110 [ 1749.020385][T30973] ? unix_dgram_sendmsg+0x57c/0x18d0 [ 1749.020413][T30973] ? kmem_cache_free+0x182/0x650 [ 1749.020434][T30973] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1749.020458][T30973] unix_dgram_sendmsg+0x460/0x18d0 [ 1749.020485][T30973] ? css_rstat_updated+0x23a/0x530 [ 1749.020512][T30973] ? __pfx_css_rstat_updated+0x10/0x10 [ 1749.020545][T30973] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1749.020569][T30973] ? count_memcg_event_mm+0x21/0x260 [ 1749.020587][T30973] ? aa_sock_msg_perm+0xda/0x1b0 [ 1749.020607][T30973] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 1749.020633][T30973] ____sys_sendmsg+0x972/0x9f0 [ 1749.020652][T30973] ? __might_fault+0xaf/0x130 [ 1749.020678][T30973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1749.020707][T30973] ? import_iovec+0x73/0xa0 [ 1749.020730][T30973] ___sys_sendmsg+0x2a5/0x360 [ 1749.020754][T30973] ? __pfx____sys_sendmsg+0x10/0x10 [ 1749.020771][T30973] ? __lock_acquire+0x6b5/0x2cf0 [ 1749.020844][T30973] __sys_sendmmsg+0x27c/0x4e0 [ 1749.020869][T30973] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1749.020886][T30973] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1749.020935][T30973] ? ksys_write+0x242/0x270 [ 1749.020959][T30973] ? __pfx_ksys_write+0x10/0x10 [ 1749.020987][T30973] __x64_sys_sendmmsg+0xa0/0xc0 [ 1749.021007][T30973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.021026][T30973] do_syscall_64+0x15f/0xf80 [ 1749.021049][T30973] ? trace_irq_disable+0x3b/0x140 [ 1749.021072][T30973] ? clear_bhb_loop+0x40/0x90 [ 1749.021094][T30973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.021111][T30973] RIP: 0033:0x7f1a2699cdd9 [ 1749.021127][T30973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1749.021141][T30973] RSP: 002b:00007f1a2791c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1749.021160][T30973] RAX: ffffffffffffffda RBX: 00007f1a26c15fa0 RCX: 00007f1a2699cdd9 [ 1749.021173][T30973] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 1749.021184][T30973] RBP: 00007f1a2791c090 R08: 0000000000000000 R09: 0000000000000000 [ 1749.021195][T30973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1749.021205][T30973] R13: 00007f1a26c16038 R14: 00007f1a26c15fa0 R15: 00007fffad86e418 [ 1749.021233][T30973] [ 1749.488453][T30990] openvswitch: netlink: Message has 16 unknown bytes. [ 1749.525948][T30990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14328'. [ 1749.536224][T30978] syzkaller0: entered promiscuous mode [ 1749.541743][T30978] syzkaller0: entered allmulticast mode [ 1749.633146][T30991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14327'. [ 1750.104114][T31029] netlink: 'syz.4.14336': attribute type 22 has an invalid length. [ 1750.114497][T31029] netlink: 'syz.4.14336': attribute type 22 has an invalid length. [ 1750.123198][T31029] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14336'. [ 1750.188239][T31031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14336'. [ 1750.248131][T31031] macsec1: entered promiscuous mode [ 1750.256056][T31031] mac80211_hwsim hwsim153 wlan1: entered promiscuous mode [ 1750.834250][T31052] netlink: 'syz.0.14342': attribute type 1 has an invalid length. [ 1750.860632][T31052] netlink: 'syz.0.14342': attribute type 22 has an invalid length. [ 1751.513972][T31080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14348'. [ 1751.793438][T31080] geneve4: entered promiscuous mode [ 1753.378223][T31151] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14357'. [ 1753.422297][T31155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14360'. [ 1753.480050][T31151] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14357'. [ 1753.613986][T31166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14363'. [ 1753.680597][T31163] lo speed is unknown, defaulting to 1000 [ 1753.740467][T31167] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14362'. [ 1754.913642][T31232] __nla_validate_parse: 3 callbacks suppressed [ 1754.913663][T31232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14382'. [ 1754.930481][T31232] netlink: 168 bytes leftover after parsing attributes in process `syz.4.14382'. [ 1754.940837][T31232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14382'. [ 1755.035473][T31239] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1486184165/1486184166 [ 1755.118509][T31243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14386'. [ 1755.351633][T31223] lo speed is unknown, defaulting to 1000 [ 1755.565902][T31246] lo speed is unknown, defaulting to 1000 [ 1755.757161][T31272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14393'. [ 1755.852868][T31271] netlink: 'syz.1.14394': attribute type 1 has an invalid length. [ 1755.860765][T31271] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14394'. [ 1755.864050][T31278] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.14395'. [ 1755.895135][T28725] dvmrp0: left allmulticast mode [ 1755.901446][T28725] dummy0: left allmulticast mode [ 1756.124994][T31288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14398'. [ 1756.347567][T28725] bond6 (unregistering): (slave bridge4): Releasing active interface [ 1756.405776][T28725] bond0 (unregistering): Released all slaves [ 1756.421272][T28725] bond1 (unregistering): (slave veth5): Releasing active interface [ 1756.430621][T28725] bond1 (unregistering): Released all slaves [ 1756.452448][T28725] bond2 (unregistering): Released all slaves [ 1756.476510][T28725] bond3 (unregistering): (slave vcan1): Releasing backup interface [ 1756.488372][T28725] vcan1: left promiscuous mode [ 1756.497025][T28725] bond3 (unregistering): Released all slaves [ 1756.521040][T28725] bond4 (unregistering): Released all slaves [ 1756.543548][T28725] bond5 (unregistering): Released all slaves [ 1756.591024][T28725] bond6 (unregistering): Released all slaves [ 1756.848750][T31287] netlink: 'syz.1.14394': attribute type 3 has an invalid length. [ 1756.876809][T31288] team_slave_0 (unregistering): left allmulticast mode [ 1756.892091][T31288] team0: Port device team_slave_0 removed [ 1756.935559][T28725] tipc: Left network mode [ 1756.976233][T31299] tipc: Failed to remove unknown binding: 66,0,0/0:1977467053/1977467054 [ 1757.011731][T31299] tipc: Failed to remove unknown binding: 66,0,0/0:1977467053/1977467054 [ 1757.648784][T31320] bridge2: entered promiscuous mode [ 1757.771196][T31326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14409'. [ 1757.931644][T31338] lo speed is unknown, defaulting to 1000 [ 1758.345489][T28725] hsr_slave_0: left promiscuous mode [ 1758.365052][T28725] hsr_slave_1: left promiscuous mode [ 1758.413442][T28725] pim6reg (unregistering): left allmulticast mode [ 1759.083345][T28725] IPVS: stop unused estimator thread 0... [ 1760.898727][ T137] batadv1: left allmulticast mode [ 1760.904419][ T137] batadv1: left promiscuous mode [ 1760.911211][ T137] bridge0: port 4(batadv1) entered disabled state [ 1760.920535][ T137] bridge_slave_1: left promiscuous mode [ 1760.926598][ T137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.957482][ T137] pimreg: left allmulticast mode [ 1761.338961][ T137] bond13 (unregistering): (slave geneve6): Releasing active interface [ 1761.374061][ T137] bond3 (unregistering): (slave geneve2): Releasing backup interface [ 1761.468760][ T137] team0: Port device bridge1 removed [ 1761.757598][ T137] bond12 (unregistering): (slave bond0): Releasing active interface [ 1761.770320][ T137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1761.783680][ T137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1761.795629][ T137] bond0 (unregistering): Released all slaves [ 1761.810404][ T137] bond1 (unregistering): Released all slaves [ 1761.831082][ T137] bond2 (unregistering): Released all slaves [ 1761.855646][ T137] bond3 (unregistering): Released all slaves [ 1761.875965][ T137] bond4 (unregistering): Released all slaves [ 1761.898451][ T137] team0: Port device bond5 removed [ 1761.905659][ T137] bond5 (unregistering): Released all slaves [ 1761.930648][ T137] bond6 (unregistering): Released all slaves [ 1761.951285][ T137] bond7 (unregistering): Released all slaves [ 1761.972230][ T137] bond8 (unregistering): Released all slaves [ 1762.009121][ T137] bond9 (unregistering): Released all slaves [ 1762.029122][ T137] bond10 (unregistering): Released all slaves [ 1762.049336][ T137] bond11 (unregistering): Released all slaves [ 1762.076067][ T137] bond12 (unregistering): Released all slaves [ 1762.096174][ T137] bond13 (unregistering): Released all slaves [ 1762.256511][ T137] : left promiscuous mode [ 1762.455954][ T137] tipc: Disabling bearer [ 1762.461318][ T137] tipc: Disabling bearer [ 1762.466851][ T137] tipc: Left network mode [ 1762.518401][ T137] IPVS: stopping master sync thread 20695 ... [ 1762.758264][ T137] veth1_to_team: left promiscuous mode [ 1762.765438][ T137] veth1: left promiscuous mode [ 1762.777148][ T137] hsr_slave_0: left promiscuous mode [ 1762.784469][ T137] hsr_slave_1: left promiscuous mode [ 1762.795149][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1762.804381][ T137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1762.817726][ T137] veth1_macvtap: left promiscuous mode [ 1762.824023][ T137] veth0_macvtap: left promiscuous mode [ 1763.126616][ T137] team0 (unregistering): Port device team_slave_1 removed [ 1763.145701][ T137] team0 (unregistering): Port device team_slave_0 removed [ 1763.731536][ T137] IPVS: stop unused estimator thread 0... [ 1767.138358][T31365] lo speed is unknown, defaulting to 1000 [ 1767.187126][T31373] netlink: 'syz.1.14419': attribute type 4 has an invalid length. [ 1767.196306][T31373] netlink: 17 bytes leftover after parsing attributes in process `syz.1.14419'. [ 1767.213412][T31369] netlink: 'syz.0.14418': attribute type 1 has an invalid length. [ 1767.253864][T31369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14418'. [ 1767.283789][T31369] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1767.301495][T31369] macvlan2: entered promiscuous mode [ 1767.306933][T31369] macvlan2: entered allmulticast mode [ 1767.314817][T31369] bond8: entered promiscuous mode [ 1767.321757][T31369] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1767.353832][T31369] bond8: left promiscuous mode [ 1768.188713][T31404] netlink: 276 bytes leftover after parsing attributes in process `syz.1.14425'. [ 1768.370844][T31409] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1768.415186][T31419] sctp: [Deprecated]: syz.1.14428 (pid 31419) Use of int in maxseg socket option. [ 1768.415186][T31419] Use struct sctp_assoc_value instead [ 1768.504454][T11431] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.531326][T31413] syzkaller1: entered promiscuous mode [ 1768.547165][T31413] syzkaller1: entered allmulticast mode [ 1768.558481][T11431] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.569701][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1768.701416][T11431] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.736009][T11431] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.884808][T31454] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14436'. [ 1768.946905][T31456] netlink: 'syz.2.14437': attribute type 27 has an invalid length. [ 1769.074989][T31460] netlink: 'syz.4.14438': attribute type 10 has an invalid length. [ 1769.089223][T31460] team0: Device wg1 is of different type [ 1769.265270][T31467] sctp: [Deprecated]: syz.4.14439 (pid 31467) Use of int in maxseg socket option. [ 1769.265270][T31467] Use struct sctp_assoc_value instead [ 1769.326924][T31464] lo speed is unknown, defaulting to 1000 [ 1769.517411][T31478] Cannot find add_set index 0 as target [ 1776.927403][T20468] lec:lec_start_xmit: lec0:No lecd attached [ 1778.267449][T31490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14448'. [ 1778.277485][T31490] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14448'. [ 1778.292102][T31490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14448'. [ 1778.415362][T31501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14446'. [ 1778.514409][T31508] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1778.524912][T31508] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1778.534279][T31508] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1778.544172][T31508] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len [ 1778.738835][T31517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14453'. [ 1778.804864][T31517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14453'. [ 1778.815133][T31520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14454'. [ 1778.827730][T31517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14453'. [ 1778.866855][ T137] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1778.876860][ T137] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1778.885080][ T137] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1778.893324][ T137] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1779.295609][T31529] lo speed is unknown, defaulting to 1000 [ 1779.429316][T31544] netlink: 'syz.0.14461': attribute type 2 has an invalid length. [ 1779.457427][T31544] netlink: 'syz.0.14461': attribute type 2 has an invalid length. [ 1779.849139][T31572] netlink: 'syz.3.14467': attribute type 10 has an invalid length. [ 1779.910484][T31572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1779.918321][T31572] .`: (slave batadv0): Enslaving as an active interface with an up link [ 1779.937764][T31572] netlink: 'syz.3.14467': attribute type 10 has an invalid length. [ 1779.947349][T31572] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14467'. [ 1779.958896][T31572] batadv0: entered promiscuous mode [ 1779.970317][T31572] batadv0: entered allmulticast mode [ 1779.978393][T31572] .`: (slave batadv0): Releasing backup interface [ 1779.994076][T31572] bridge0: port 1(batadv0) entered blocking state [ 1780.001806][T31576] netlink: 'syz.1.14468': attribute type 3 has an invalid length. [ 1780.012657][T31572] bridge0: port 1(batadv0) entered disabled state [ 1780.030938][T31576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14468'. [ 1780.234233][T31581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1780.271880][ T137] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1780.281885][ T137] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1780.353847][T31591] netlink: 'syz.2.14474': attribute type 2 has an invalid length. [ 1780.381389][T31591] netlink: 'syz.2.14474': attribute type 2 has an invalid length. [ 1780.521597][T31603] lo speed is unknown, defaulting to 1000 [ 1780.689299][T31618] netlink: 'syz.4.14481': attribute type 1 has an invalid length. [ 1780.832177][T31618] netlink: 'syz.4.14481': attribute type 1 has an invalid length. [ 1780.852599][T31618] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1781.023850][T31595] tc_dump_action: action bad kind [ 1781.484821][T31659] netlink: 'syz.1.14492': attribute type 1 has an invalid length. [ 1781.940152][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1781.948239][ C0] lec:lec_tx_timeout: lec0 [ 1782.591779][T31697] delete_channel: no stack [ 1784.422023][T31653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1784.615903][T31707] netlink: 'syz.0.14503': attribute type 1 has an invalid length. [ 1784.874415][T31719] __nla_validate_parse: 5 callbacks suppressed [ 1784.874434][T31719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14507'. [ 1784.914776][T31719] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.14507'. [ 1785.068917][T31723] netlink: 'syz.1.14509': attribute type 210 has an invalid length. [ 1785.161011][T31729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14511'. [ 1785.223525][T31740] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1785.995118][T13941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.003426][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.014691][T13941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.022966][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.053103][T13941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.074409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.074666][T31788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14530'. [ 1786.097237][T28725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.106420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.166982][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.175714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.291389][T31800] lo speed is unknown, defaulting to 1000 [ 1786.325048][T31803] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14533'. [ 1786.398807][T31807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14535'. [ 1786.438877][T31803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14533'. [ 1786.496318][T31803] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14533'. [ 1786.703807][T31819] lo speed is unknown, defaulting to 1000 [ 1786.782924][T31822] bond9: option packets_per_slave: invalid value (1048582) [ 1786.790174][T31822] bond9: option packets_per_slave: allowed values 0 - 65535 [ 1786.816827][T31822] bond9 (unregistering): Released all slaves [ 1786.908374][T31823] bond9: option packets_per_slave: invalid value (1048582) [ 1786.915625][T31823] bond9: option packets_per_slave: allowed values 0 - 65535 [ 1786.924585][T31823] bond9 (unregistering): Released all slaves [ 1787.106150][T31842] syz_tun: entered allmulticast mode [ 1787.339937][T31847] netlink: 'syz.0.14546': attribute type 21 has an invalid length. [ 1787.483981][T31855] netlink: 'syz.2.14548': attribute type 13 has an invalid length. [ 1787.513128][T31855] netlink: 'syz.2.14548': attribute type 17 has an invalid length. [ 1787.652021][T31865] netlink: 104 bytes leftover after parsing attributes in process `syz.4.14547'. [ 1787.652624][T31855] 8021q: adding VLAN 0 to HW filter on device team0 [ 1787.680108][T31855] dummy0: left promiscuous mode [ 1787.690194][T31855] dummy0: left allmulticast mode [ 1787.702985][ T137] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1787.719311][ T137] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1787.728653][ T137] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1787.737032][ T137] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1787.875096][T31855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14548'. [ 1787.977256][T31890] netlink: 'syz.1.14555': attribute type 1 has an invalid length. [ 1788.422855][T31910] wg1: Master is either lo or non-ether device [ 1788.483885][T31914] sctp: [Deprecated]: syz.2.14563 (pid 31914) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1788.483885][T31914] Use struct sctp_sack_info instead [ 1789.700252][T31954] netlink: 'syz.2.14573': attribute type 1 has an invalid length. [ 1790.004772][T31961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1790.033737][T31961] netlink: 'syz.3.14576': attribute type 1 has an invalid length. [ 1790.148989][T31961] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1790.197166][T31972] __nla_validate_parse: 15 callbacks suppressed [ 1790.197186][T31972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14579'. [ 1790.219335][T31969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14576'. [ 1790.258871][T31964] bond8: (slave veth7): Enslaving as an active interface with a down link [ 1790.350983][T31961] ip6gre2: left promiscuous mode [ 1790.362749][T31961] ip6gre2: left allmulticast mode [ 1790.375099][T31961] macvlan2: left promiscuous mode [ 1790.387771][T31961] macvlan2: left allmulticast mode [ 1790.401730][T31961] ip6tnl1: left promiscuous mode [ 1790.416750][T31961] geneve4: left promiscuous mode [ 1790.428943][T31961] bridge2: left promiscuous mode [ 1790.677764][T31981] netlink: 504 bytes leftover after parsing attributes in process `syz.3.14583'. [ 1791.414004][T32002] lo speed is unknown, defaulting to 1000 [ 1791.453516][T31997] netlink: 'syz.3.14587': attribute type 10 has an invalid length. [ 1791.504590][T32010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14590'. [ 1791.567145][T31997] 8021q: adding VLAN 0 to HW filter on device ` [ 1791.626414][T31997] .`: (slave `): Enslaving as an active interface with an up link [ 1791.634604][ T1314] net_ratelimit: 5 callbacks suppressed [ 1791.634620][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.652297][ T1314] lec:lec_start_xmit: lec0:No lecd attached [ 1791.799842][T32010] vlan2: entered promiscuous mode [ 1791.818475][T32010] bridge0: entered promiscuous mode [ 1791.914300][T32019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14592'. [ 1791.960010][T32019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14592'. [ 1791.986103][T32019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14592'. [ 1792.014300][T32019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14592'. [ 1792.065999][T32019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14592'. [ 1792.110469][T32019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14592'. [ 1792.584061][T32032] vlan0: entered allmulticast mode [ 1792.598683][T32032] bridge_slave_0: entered allmulticast mode [ 1792.677718][T32041] xt_hashlimit: size too large, truncated to 1048576 [ 1792.721726][T32044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1793.191998][T32063] 8021q: VLANs not supported on vcan0 [ 1793.338919][T32074] IPv6: NLM_F_CREATE should be specified when creating new route [ 1793.346778][T32074] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1793.353987][T32074] IPv6: NLM_F_CREATE should be set when creating new route [ 1793.372059][T32074] IPv6: NLM_F_CREATE should be set when creating new route [ 1793.379325][T32074] IPv6: NLM_F_CREATE should be set when creating new route [ 1793.815198][T32096] syzkaller0: entered promiscuous mode [ 1793.821881][T32096] syzkaller0: entered allmulticast mode [ 1796.809625][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5160 ms [ 1796.817734][ C0] lec:lec_tx_timeout: lec0 [ 1796.836772][T32111] team0: Port device team_slave_0 removed [ 1796.989639][T32140] __nla_validate_parse: 33 callbacks suppressed [ 1796.989658][T32140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14626'. [ 1797.048552][T32140] bpq0: entered allmulticast mode [ 1797.175234][T32149] syz_tun: left allmulticast mode [ 1797.183856][T32149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14627'. [ 1797.337183][T32168] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14631'. [ 1797.526420][T32176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14634'. [ 1797.547314][T32176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14634'. [ 1797.667868][T32186] syzkaller0: entered promiscuous mode [ 1797.677276][T32188] netlink: 'syz.2.14637': attribute type 11 has an invalid length. [ 1797.688917][T32186] syzkaller0: entered allmulticast mode [ 1797.906157][T27515] IPVS: starting estimator thread 0... [ 1797.999802][T32200] IPVS: using max 26 ests per chain, 62400 per kthread [ 1798.150336][T32209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14645'. [ 1798.166963][T32208] delete_channel: no stack [ 1798.560077][T32222] syzkaller0: entered promiscuous mode [ 1798.565633][T32222] syzkaller0: entered allmulticast mode [ 1798.577062][T32222] syzkaller0: left allmulticast mode [ 1798.959215][T32243] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.14655'. [ 1799.318968][T32259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14662'. [ 1799.526554][T32270] netlink: 68 bytes leftover after parsing attributes in process `syz.0.14664'. [ 1799.546594][T32270] netlink: 'syz.0.14664': attribute type 21 has an invalid length. [ 1799.562130][T32270] netlink: 'syz.0.14664': attribute type 6 has an invalid length. [ 1799.570359][T32270] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14664'. [ 1799.910998][T32291] netlink: del zone limit has 8 unknown bytes [ 1799.941770][T32291] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1800.643205][T13666] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1800.683186][T13666] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1800.702647][T13666] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1800.726470][T13666] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1800.752886][T13666] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1801.057062][T32322] lo speed is unknown, defaulting to 1000 [ 1801.110943][T32327] netlink: 'syz.2.14680': attribute type 1 has an invalid length. [ 1801.137093][T32327] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1801.161912][T32327] bond7: (slave veth13): Enslaving as an active interface with a down link [ 1801.293847][T32327] bond7: (slave veth15): Enslaving as an active interface with a down link [ 1801.310717][T32322] chnl_net:caif_netlink_parms(): no params data found [ 1801.387442][T32327] bond7: (slave bridge4): Enslaving as an active interface with a down link [ 1801.481744][T32322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1801.489684][T32322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.497042][T32322] bridge_slave_0: entered allmulticast mode [ 1801.520665][T32322] bridge_slave_0: entered promiscuous mode [ 1801.528316][T32341] netlink: 'syz.2.14682': attribute type 12 has an invalid length. [ 1801.536238][T32341] netlink: 'syz.2.14682': attribute type 29 has an invalid length. [ 1801.545459][T32322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.552716][T32322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.568567][T32322] bridge_slave_1: entered allmulticast mode [ 1801.575582][T32322] bridge_slave_1: entered promiscuous mode [ 1801.656069][T32322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1801.707238][T32322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1801.760865][T32322] team0: Port device team_slave_0 added [ 1801.769359][T32322] team0: Port device team_slave_1 added [ 1801.789944][T32322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1801.796902][T32322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1801.822757][T32322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1801.848180][T32322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1801.850426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1801.858311][T32322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1801.864964][ C0] ------------[ cut here ]------------ [ 1801.891966][T32322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1801.897204][ C0] ODEBUG: free active (active state 0) object: ffff888055915490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 1801.922393][ C0] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#0: kworker/u8:23/28724 [ 1801.933428][ C0] Modules linked in: [ 1801.937667][ C0] CPU: 0 UID: 0 PID: 28724 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT(full) [ 1801.946267][T32322] hsr_slave_0: entered promiscuous mode [ 1801.947355][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1801.953871][T32322] hsr_slave_1: entered promiscuous mode [ 1801.962951][ C0] Workqueue: netns cleanup_net [ 1801.973259][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1801.979650][ C0] Code: 89 44 24 20 e8 f7 bf 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 a5 28 8c 48 c7 c2 20 ab 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1801.999315][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00010246 [ 1802.005436][ C0] RAX: ffffffff8a9f6db0 RBX: ffffffff9a6b8048 RCX: 0000000000000000 [ 1802.013478][ C0] RDX: ffffffff8c28ab20 RSI: ffffffff8c28a5a0 RDI: ffffffff903e6a40 [ 1802.021533][ C0] RBP: ffffffff8bcf39a0 R08: ffff888055915490 R09: ffffffff8bcf4d00 [ 1802.031350][ C0] R10: dffffc0000000000 R11: ffffffff81b236d0 R12: ffff888055915600 [ 1802.039355][ C0] R13: ffffffff903e6a40 R14: ffff888055915000 R15: ffff888055915490 [ 1802.047400][ C0] FS: 0000000000000000(0000) GS:ffff888125213000(0000) knlGS:0000000000000000 [ 1802.056393][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1802.063034][ C0] CR2: 00007fbb7a5ea4c0 CR3: 000000009a5ae000 CR4: 00000000003526f0 [ 1802.071100][ C0] Call Trace: [ 1802.074396][ C0] [ 1802.077246][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1802.082964][ C0] kfree+0x13e/0x640 [ 1802.086884][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 1802.092075][ C0] rose_timer_expiry+0x4cb/0x600 [ 1802.097030][ C0] ? call_timer_fn+0x178/0x5e0 [ 1802.101837][ C0] call_timer_fn+0x192/0x5e0 [ 1802.106438][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1802.111938][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1802.116637][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1802.121801][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1802.126989][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1802.132467][ C0] __run_timer_base+0x652/0x8b0 [ 1802.137329][ C0] ? ktime_get+0x45/0x220 [ 1802.141700][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1802.147097][ C0] run_timer_softirq+0xb7/0x170 [ 1802.151977][ C0] handle_softirqs+0x22a/0x840 [ 1802.156764][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1802.161567][ C0] __irq_exit_rcu+0xca/0x220 [ 1802.166174][ C0] irq_exit_rcu+0x9/0x30 [ 1802.170445][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1802.176107][ C0] [ 1802.179025][ C0] [ 1802.181975][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1802.187965][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1802.194408][ C0] Code: f7 e8 8d e4 e6 f5 f7 c3 00 02 00 00 74 05 e8 90 6f 12 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d4 66 d8 f5 65 8b 05 1d 43 85 07 85 c0 74 18 5b 41 5e e9 41 48 [ 1802.214065][ C0] RSP: 0018:ffffc90003bc7298 EFLAGS: 00000206 [ 1802.220187][ C0] RAX: 0000000000000006 RBX: 0000000000000296 RCX: 0000000080000001 [ 1802.228164][ C0] RDX: 0000000000000006 RSI: ffffffff8dfd8f45 RDI: 0000000000000001 [ 1802.236196][ C0] RBP: 0000000000000000 R08: ffffffff903386f7 R09: 1ffffffff20670de [ 1802.244216][ C0] R10: dffffc0000000000 R11: fffffbfff20670df R12: ffff88807bb03eb8 [ 1802.252225][ C0] R13: ffff88807bb03ea8 R14: ffffffff9a774cf0 R15: 1ffff1100f7607d7 [ 1802.260249][ C0] debug_object_activate+0x320/0x580 [ 1802.265549][ C0] ? __pfx_inode_free_by_rcu+0x10/0x10 [ 1802.271028][ C0] call_rcu+0x43/0x890 [ 1802.275100][ C0] ? preempt_count_add+0x91/0x190 [ 1802.280158][ C0] ? bpf_inode_storage_free+0x3f3/0x5b0 [ 1802.285718][ C0] __destroy_inode+0x2b2/0x640 [ 1802.290541][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1802.295757][ C0] evict+0x8a7/0xb10 [ 1802.299697][ C0] ? __pfx_evict+0x10/0x10 [ 1802.304122][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1802.309219][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1802.314095][ C0] ? iput+0xb25/0xe80 [ 1802.318086][ C0] __dentry_kill+0x1a2/0x690 [ 1802.322731][ C0] ? finish_dput+0xad/0x480 [ 1802.327246][ C0] finish_dput+0xc9/0x480 [ 1802.331612][ C0] find_next_child+0x1e5/0x250 [ 1802.336372][ C0] __simple_recursive_removal+0x10b/0x520 [ 1802.342114][ C0] ? __pfx_remove_one+0x10/0x10 [ 1802.346978][ C0] debugfs_remove+0x5b/0x70 [ 1802.351507][ C0] __nsim_dev_port_del+0x174/0x200 [ 1802.356633][ C0] nsim_dev_reload_destroy+0x288/0x490 [ 1802.362126][ C0] nsim_dev_reload_down+0x8a/0xc0 [ 1802.367161][ C0] devlink_reload+0x1eb/0x8c0 [ 1802.371874][ C0] ? __pfx_devlink_reload+0x10/0x10 [ 1802.377104][ C0] ? xa_get_mark+0x6fc/0x7b0 [ 1802.381741][ C0] devlink_pernet_pre_exit+0x1ff/0x420 [ 1802.387214][ C0] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1802.393240][ C0] ? class_remove_file_ns+0x121/0x160 [ 1802.398623][ C0] ops_undo_list+0x187/0x940 [ 1802.403239][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 1802.408354][ C0] ? idr_destroy+0x218/0x290 [ 1802.412966][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1802.418093][ C0] cleanup_net+0x56b/0x800 [ 1802.422535][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 1802.427493][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1802.433283][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1802.439036][ C0] process_scheduled_works+0xb5d/0x1860 [ 1802.444662][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1802.450701][ C0] ? assign_work+0x3d5/0x5e0 [ 1802.455310][ C0] worker_thread+0xa53/0xfc0 [ 1802.459964][ C0] kthread+0x388/0x470 [ 1802.464044][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1802.469142][ C0] ? __pfx_kthread+0x10/0x10 [ 1802.473768][ C0] ret_from_fork+0x514/0xb70 [ 1802.478380][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1802.483525][ C0] ? __switch_to+0xc79/0x1410 [ 1802.488222][ C0] ? __pfx_kthread+0x10/0x10 [ 1802.492848][ C0] ret_from_fork_asm+0x1a/0x30 [ 1802.497628][ C0] [ 1802.500693][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1802.507973][ C0] CPU: 0 UID: 0 PID: 28724 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT(full) [ 1802.517582][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1802.527615][ C0] Workqueue: netns cleanup_net [ 1802.532365][ C0] Call Trace: [ 1802.535626][ C0] [ 1802.538454][ C0] vpanic+0x56c/0xa60 [ 1802.542423][ C0] ? __pfx__printk+0x10/0x10 [ 1802.547028][ C0] ? __pfx_vpanic+0x10/0x10 [ 1802.551536][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1802.556842][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1802.562034][ C0] panic+0xc5/0xd0 [ 1802.565732][ C0] ? __pfx_panic+0x10/0x10 [ 1802.570128][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1802.575048][ C0] __warn+0x315/0x4c0 [ 1802.579005][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 1802.584702][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 1802.590396][ C0] __report_bug+0x29a/0x540 [ 1802.594880][ C0] ? ops_undo_list+0x187/0x940 [ 1802.599623][ C0] ? cleanup_net+0x56b/0x800 [ 1802.604190][ C0] ? process_scheduled_works+0xb5d/0x1860 [ 1802.609893][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 1802.615596][ C0] ? __pfx___report_bug+0x10/0x10 [ 1802.620617][ C0] report_bug_entry+0x19a/0x290 [ 1802.625450][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 1802.631145][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 1802.636839][ C0] handle_bug+0xce/0x200 [ 1802.641061][ C0] exc_invalid_op+0x1a/0x50 [ 1802.645540][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1802.650377][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1802.656712][ C0] Code: 89 44 24 20 e8 f7 bf 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 a5 28 8c 48 c7 c2 20 ab 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1802.676321][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00010246 [ 1802.682368][ C0] RAX: ffffffff8a9f6db0 RBX: ffffffff9a6b8048 RCX: 0000000000000000 [ 1802.690316][ C0] RDX: ffffffff8c28ab20 RSI: ffffffff8c28a5a0 RDI: ffffffff903e6a40 [ 1802.698282][ C0] RBP: ffffffff8bcf39a0 R08: ffff888055915490 R09: ffffffff8bcf4d00 [ 1802.706232][ C0] R10: dffffc0000000000 R11: ffffffff81b236d0 R12: ffff888055915600 [ 1802.714200][ C0] R13: ffffffff903e6a40 R14: ffff888055915000 R15: ffff888055915490 [ 1802.722156][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 1802.727505][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1802.733124][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1802.738744][ C0] kfree+0x13e/0x640 [ 1802.742632][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 1802.747723][ C0] rose_timer_expiry+0x4cb/0x600 [ 1802.752640][ C0] ? call_timer_fn+0x178/0x5e0 [ 1802.757382][ C0] call_timer_fn+0x192/0x5e0 [ 1802.761956][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1802.767422][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1802.772096][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1802.777192][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1802.782387][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1802.787825][ C0] __run_timer_base+0x652/0x8b0 [ 1802.792665][ C0] ? ktime_get+0x45/0x220 [ 1802.796980][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1802.802339][ C0] run_timer_softirq+0xb7/0x170 [ 1802.807170][ C0] handle_softirqs+0x22a/0x840 [ 1802.811919][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1802.816669][ C0] __irq_exit_rcu+0xca/0x220 [ 1802.821241][ C0] irq_exit_rcu+0x9/0x30 [ 1802.825464][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1802.831080][ C0] [ 1802.833990][ C0] [ 1802.836901][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1802.842856][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1802.849248][ C0] Code: f7 e8 8d e4 e6 f5 f7 c3 00 02 00 00 74 05 e8 90 6f 12 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d4 66 d8 f5 65 8b 05 1d 43 85 07 85 c0 74 18 5b 41 5e e9 41 48 [ 1802.868837][ C0] RSP: 0018:ffffc90003bc7298 EFLAGS: 00000206 [ 1802.874915][ C0] RAX: 0000000000000006 RBX: 0000000000000296 RCX: 0000000080000001 [ 1802.882889][ C0] RDX: 0000000000000006 RSI: ffffffff8dfd8f45 RDI: 0000000000000001 [ 1802.890841][ C0] RBP: 0000000000000000 R08: ffffffff903386f7 R09: 1ffffffff20670de [ 1802.898791][ C0] R10: dffffc0000000000 R11: fffffbfff20670df R12: ffff88807bb03eb8 [ 1802.906739][ C0] R13: ffff88807bb03ea8 R14: ffffffff9a774cf0 R15: 1ffff1100f7607d7 [ 1802.914702][ C0] debug_object_activate+0x320/0x580 [ 1802.919975][ C0] ? __pfx_inode_free_by_rcu+0x10/0x10 [ 1802.925411][ C0] call_rcu+0x43/0x890 [ 1802.929457][ C0] ? preempt_count_add+0x91/0x190 [ 1802.934459][ C0] ? bpf_inode_storage_free+0x3f3/0x5b0 [ 1802.939988][ C0] __destroy_inode+0x2b2/0x640 [ 1802.944735][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1802.949916][ C0] evict+0x8a7/0xb10 [ 1802.953795][ C0] ? __pfx_evict+0x10/0x10 [ 1802.958189][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1802.963280][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1802.968106][ C0] ? iput+0xb25/0xe80 [ 1802.972072][ C0] __dentry_kill+0x1a2/0x690 [ 1802.976654][ C0] ? finish_dput+0xad/0x480 [ 1802.981154][ C0] finish_dput+0xc9/0x480 [ 1802.985496][ C0] find_next_child+0x1e5/0x250 [ 1802.990275][ C0] __simple_recursive_removal+0x10b/0x520 [ 1802.995983][ C0] ? __pfx_remove_one+0x10/0x10 [ 1803.000818][ C0] debugfs_remove+0x5b/0x70 [ 1803.005301][ C0] __nsim_dev_port_del+0x174/0x200 [ 1803.010397][ C0] nsim_dev_reload_destroy+0x288/0x490 [ 1803.015839][ C0] nsim_dev_reload_down+0x8a/0xc0 [ 1803.020845][ C0] devlink_reload+0x1eb/0x8c0 [ 1803.025511][ C0] ? __pfx_devlink_reload+0x10/0x10 [ 1803.030695][ C0] ? xa_get_mark+0x6fc/0x7b0 [ 1803.035274][ C0] devlink_pernet_pre_exit+0x1ff/0x420 [ 1803.040713][ C0] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1803.046678][ C0] ? class_remove_file_ns+0x121/0x160 [ 1803.052031][ C0] ops_undo_list+0x187/0x940 [ 1803.056601][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 1803.061688][ C0] ? idr_destroy+0x218/0x290 [ 1803.066254][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1803.071348][ C0] cleanup_net+0x56b/0x800 [ 1803.075758][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 1803.080673][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1803.086383][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1803.092120][ C0] process_scheduled_works+0xb5d/0x1860 [ 1803.097696][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1803.103672][ C0] ? assign_work+0x3d5/0x5e0 [ 1803.108245][ C0] worker_thread+0xa53/0xfc0 [ 1803.112832][ C0] kthread+0x388/0x470 [ 1803.116882][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1803.121974][ C0] ? __pfx_kthread+0x10/0x10 [ 1803.126539][ C0] ret_from_fork+0x514/0xb70 [ 1803.131202][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1803.136295][ C0] ? __switch_to+0xc79/0x1410 [ 1803.140968][ C0] ? __pfx_kthread+0x10/0x10 [ 1803.145538][ C0] ret_from_fork_asm+0x1a/0x30 [ 1803.150294][ C0] [ 1803.153787][ C0] Kernel Offset: disabled [ 1803.158100][ C0] Rebooting in 86400 seconds..