last executing test programs: 5.789391273s ago: executing program 2 (id=3567): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x7ffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) (fail_nth: 5) 5.304129601s ago: executing program 2 (id=3576): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000100037040100"/20, @ANYRES32=r2, @ANYBLOB="83400100012c07001c001280a405525067726574617000000c0002804003000000000000f98eb1c07ebfbbbad7905023d383102fabfb4147516d4e0728fbb4cedf45123ba64331c2e29a8658d0fa300002fcdca12712ef0fb3d1871a5e28522758c99b0e6d56ca5283c2"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) (async) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @local}}}], 0x20}}], 0x1, 0x4880) 5.036360278s ago: executing program 2 (id=3579): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5001", @ANYRES64=r2], 0x14) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, 0x0, 0x20028804) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x2fd, 0x101daf6}, 0x10) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f00000003c0), 0x4) 4.860729333s ago: executing program 4 (id=3583): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0c921a1ff38818eeff1829", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006772657461700000140002800800040008000000060003008100000050001980070002005bc900000500060006000000090002002e267d2f000000000500ef3db5324d1ce4c63fac5b9c5a3ead1314000500754d6fbc0a7cf61d9d9125c1deb31a8d"], 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.655845836s ago: executing program 4 (id=3586): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x18, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)={0x430, 0x3f3, 0x400, 0x70bd25, 0x25dfdbfb, {0x4, 0x1, 0x1d, [0x5a4, 0xffffb817, 0x1000, 0x4, 0x9, 0x7, 0x2, 0x1, 0x9, 0x7, 0x8001, 0xf76bef5, 0x7, 0x200, 0x100, 0x1, 0x5, 0xfffffff8, 0x7, 0xffffffff, 0x0, 0x82de, 0x648, 0x1, 0x1000, 0xc, 0x0, 0x400, 0xa, 0xb5, 0x5c69ef88, 0x6, 0x2, 0x251c302, 0x8, 0x3, 0x3, 0xfffffffa, 0x0, 0xd, 0x200, 0x7, 0x6, 0x1000, 0x8ab, 0x2, 0x7fff, 0x6, 0x40000000, 0x2, 0x3, 0x10, 0x8, 0x3, 0x3c, 0x2, 0x3, 0x0, 0x1ff, 0x0, 0x2, 0x3, 0x5, 0x3], [0x5, 0xc, 0x5, 0x3, 0x9, 0x81, 0x5f106cfa, 0x7fff, 0xf, 0x8, 0x0, 0x2, 0x4, 0x10000, 0x7, 0x6, 0x800, 0x2778, 0x7, 0x2, 0xfffffffc, 0x1, 0x1, 0x3, 0x1, 0xf, 0x8, 0x8, 0x7fffffff, 0xc79, 0x1, 0xe, 0xaf16, 0x6, 0x40, 0x7, 0x2, 0x5, 0xa, 0x1453, 0x1d2, 0xffffff09, 0x262, 0xb82b, 0x0, 0x6, 0xcac, 0xbd7c, 0x4, 0x3, 0x6, 0x40, 0x7cb, 0x10001, 0xa, 0xfffffff8, 0x7, 0x2, 0xfffff000, 0xdb4, 0xffffff00, 0x2d, 0x8, 0x40], [0x80000000, 0xc46, 0x0, 0x5, 0x8001, 0xa, 0x80, 0x2, 0x9, 0x8, 0x0, 0x8, 0x4, 0x7fffffff, 0x7fff, 0xb, 0x8001, 0x2, 0x6ce, 0x4, 0x2, 0x5, 0x5, 0x9, 0xfffffff7, 0x2, 0x1800, 0x0, 0x1c0, 0xf00, 0xfffffffb, 0x8, 0x4, 0x0, 0x5, 0x4e, 0x5, 0x8000, 0x7, 0x3, 0x6, 0x100, 0x1, 0x1ff, 0x8, 0x9, 0x2, 0xe70f, 0x81, 0x3fc, 0x4, 0x1, 0x1, 0xffffff00, 0xca79, 0xf, 0xf8b, 0x7fffffff, 0x10000, 0x0, 0x4, 0x3, 0x40c7, 0x8], [0x5, 0x5, 0x10001, 0x0, 0x8, 0x400, 0x348f, 0x1000, 0x4, 0x8, 0x1, 0x1, 0x400, 0x2, 0x400, 0x2, 0x8, 0x0, 0x7, 0x4, 0x3, 0x1ff, 0xaee, 0x7, 0x6, 0x80, 0x9, 0x8, 0x8, 0x4c0, 0x6, 0x7fff, 0x0, 0x8, 0xffff, 0x9, 0x3, 0xe6, 0x2, 0x9, 0x7, 0x7, 0xf, 0x214, 0x80, 0x9, 0x6, 0x2, 0xa1ff, 0x8, 0x5, 0x9, 0x7, 0x10, 0x8, 0x95b, 0x3, 0x4, 0x3, 0x4, 0x4, 0xfffffffc, 0x10, 0xff], 0xd, ['/dev/net/tun\x00']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x10044001}, 0x20008004) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000018c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x40, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x67}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x33, 0x1, @loopback, @loopback, [], "ab0924172f9c2a1d"}}}}}}, 0x76) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xf}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xfffe}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x84, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0xc}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}]]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x1) 4.512177316s ago: executing program 4 (id=3587): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x908, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0x0, 0x9}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket(0x1, 0x2, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040140) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000680)) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0xc, 0x80000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'geneve0\x00', 0x0}) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x3889, 0x0, 0xffffffffffffffff, 0xc0, '\x00', r10, r4, 0x1, 0x1, 0x5}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0x12, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_emit_ethernet(0xe, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@generic={0x8863}}}, 0x0) sendmsg$can_bcm(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r10}, 0x10, &(0x7f0000000140)={&(0x7f0000000440)={0x6, 0x140, 0xc6a, {}, {0x77359400}, {0x1, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x1}, 0x37, 0x1, 0x0, 0x0, "6fb56c38364ff979caaf9d642019f6f69792d7b99d5675de21b86fcaf9f8be2888091f1a73a81bef0aa479ae715352c7995e367da629ffa8c7a156861ac90344"}}, 0x80}}, 0x20000841) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180008002e00090027bd7000000000000600000004001200"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r13 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x2000000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) 1.851879499s ago: executing program 4 (id=3589): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000070000001802"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.81836439s ago: executing program 2 (id=3592): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 1.705015024s ago: executing program 1 (id=3593): r0 = socket(0xa, 0x3, 0x87) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x10000004, @mcast1, 0x7, 0x1}, 0x80, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000000)="ad", 0x1}], 0x2}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x304) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) 1.682425872s ago: executing program 0 (id=3594): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @mcast2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.632129305s ago: executing program 4 (id=3595): r0 = socket(0x1e, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}}, 0x802) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x3c00, 0x10000000, 0x7b3, 0x7, 0x2, 0x10000, 0x400}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x1400, 0x61, 0x11, 0x7c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'netpci0\x00'}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYRES8=r5], 0x340a) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, 0xfffffffffffffffe) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) 1.521142763s ago: executing program 0 (id=3596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x8942, &(0x7f00000001c0)={'pim6reg0\x00', @ifru_names='vlan0\x00'}) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x28}, @private0, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xff000000, 0xff000000], 'veth1_to_batadv\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x5, 0x5}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x7fff, 0x8, 0x1ff, 'syz1\x00', 'syz1\x00', {0x4ef0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4d, 0x0, 0x1, 0x80000001}, {0x35}, {0x6, 0x0, 0x0, 0x1}]}, 0x10) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000200)={'ah\x00'}, &(0x7f0000000340)=0x1e) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a4000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4008000) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180)=r5) 1.506138377s ago: executing program 3 (id=3597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES32=r3], 0x20}}, 0x4000) 1.296234463s ago: executing program 1 (id=3598): r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x0, 0x4, 0x43, @mcast1, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x8, 0x0, 0x0, 0x6}}) 1.262410331s ago: executing program 3 (id=3599): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f00000002c0)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f00000058c0)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xae00000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x1, 0x5) (async) listen(r1, 0x3) (async, rerun: 32) r4 = socket$inet(0xa, 0x801, 0x84) (rerun: 32) listen(r4, 0xfffffffd) (async, rerun: 64) r5 = socket(0xa, 0x5, 0x0) (rerun: 64) listen(r5, 0x100) (async) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r7, 0xfff) (async) r8 = socket$netlink(0x10, 0x3, 0x4) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r9, 0x3) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r8) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002bbd70000000f12909f3000008000300", @ANYRES32=r13, @ANYBLOB="0c0099000900000044000000080002002f000000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x10e, 0x0, &(0x7f0000000f40)="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", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (rerun: 64) 1.177786248s ago: executing program 0 (id=3600): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000182102800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x403, 0x70bd29, 0x2, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.083920073s ago: executing program 1 (id=3601): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000080)=0x100f) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1.070301278s ago: executing program 3 (id=3602): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="45238b4c8a33eac85cdd8c4f48c528a117cb0cef42f75bbbe131867f6748ef8bd8050c1254eec7f2dfc42531b43f0d631f8b955ba61b1115e9b5dd23927a207c4335534cc62620d5ea8070fb9df0e49bcc70b4d8169c01d0099b216b7082cd68ad80eaa76f5c1be554516229357d13554afab4ddafd734592e1d2e98bf6f40a402a8b0a3aac7e44a3b519e2c53f71d7d83eb62fff4", 0x95) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e24, 0x3000000, @mcast2, 0x4}, 0x1c) write(r2, &(0x7f00000000c0)="8f2a0a65bd8c", 0x6) r3 = accept4(r1, 0x0, 0x0, 0x800) socket(0x1, 0x2, 0x3ff) (async) socket(0x28, 0x5, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x7}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x2c, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000700000000000000860080001811f134e4755174d6c4a6da8a0000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b70800007f0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000184b000001000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000002f33060008000000181b0000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000018320000020000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5], &(0x7f0000000c80)=[{0x4, 0x4, 0x0, 0xc}, {0x4, 0x2, 0x2, 0x8}, {0x5, 0x5, 0x3, 0x5}, {0x2, 0x4, 0xa, 0xc}, {0x5, 0x3, 0xf, 0x8}, {0x4, 0x4, 0xb, 0xc}], 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) (async) sendmmsg$alg(r3, &(0x7f0000000140), 0x0, 0x40800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="94c37fd0bbff60570000", @ANYRES32=r7, @ANYBLOB="0500540001000000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f0000000680), &(0x7f00000006c0)=0xc) (async) bind$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0xda, @none, 0x3, 0x2}, 0xe) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000180001002cbd70000000000080"], 0x1c}}, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="b1a150d96876e3d7237407000000000000008d3da66e1bd8649c8745739419e4bc1b9cd5de55ad87b22ac4d7e666830b8287f419db789b7523c0736ae44daf58d15a132b9b202aed0920a9ededa8bb5fbd383ae0dcb3b003e8a16ba832ab434113e6ebe1a9b0d1f196585ed815acb22949e534aa0c8b4a3bad388bc6bf2ed1550a43888b130ed1adff92fa4323626cc1b712d34605d69d78da87ec63c3dadd3db2c9a27084000000", @ANYRES16=r9, @ANYBLOB="04002bbd7000fcdbdf251b00000008009a00000000000400cc000400cc00"], 0x24}, 0x1, 0x0, 0x0, 0x44081}, 0x44) (async) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 964.553344ms ago: executing program 4 (id=3603): r0 = socket$can_j1939(0x1d, 0x2, 0x7) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f00000016c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x42000000) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r6, @ANYBLOB="0b12050081010000240012800b00010069703667726500001400020008000100", @ANYRES32=r6, @ANYBLOB="0800050003"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x1c010) unshare(0x22020400) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) writev(r0, &(0x7f000000b740)=[{0x0}, {&(0x7f000000a500)="d6c86ed22b7e1f1ca18219cc01a4b2f3893092c0ecf0a309db3ec927e6e18db3f2fc6e72ce4eaa07592cc0df01fddcab800a2df3265b06403e43b597c3d4254fcacec9c4ceedeb8c40dd768c982f8b7fceed3f904068b6640e6c29c389e2596c44e7f6d3c60add94c0a14fbaeb9b3916f8a55ac4f60eaf735dcf3a41a9b95685b559c15806078dce425cfa7e5e", 0x8d}, {0x0, 0xee}, {&(0x7f000000a700)="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", 0xdbd}, {&(0x7f000000b700)}], 0x5) 947.488074ms ago: executing program 0 (id=3604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa2600, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x1}, {{0x4, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x1, 0x1, 0x8}, {0x4, 0x6, 0x9, 0x6, 0xf, 0x0, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x881}, 0x0) 818.579916ms ago: executing program 3 (id=3605): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000080000001802"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 772.093397ms ago: executing program 2 (id=3606): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfd6d}, 0x48) close(r1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f00000002c0)="df5facceb94981aa27f6be0aa0cdf6bff2965a83863365652d85b9f10e82fde93b460ec6b4afc88acae237545d7e34488866dad5393d09c8b16306465c3619f6b1d562749fbda2ffce0df562205636a6d0d7409b831d25e07c0f77e950a311c7efa22c070630", &(0x7f0000000380)=""/244}, 0x20) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002800)=ANY=[@ANYBLOB="c41500001e002102000000000000000007000000a4151980a015f3809c152880040042"], 0x15c4}}, 0x0) 748.503918ms ago: executing program 1 (id=3607): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x100}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES8=r2, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001300)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000ff0300000000000014000600766972745f7769666930000000000000"], 0x28}}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x43, 0x4}}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYBLOB='w'], 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES32=r4], 0x48) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0100000042560c52a68b5bc8dfc68690b15ff58f35b1b700a74e060c209ab800e9fefd9f4d9ad07ee2a268304d405dd57c05dcda0f68558a867238b18c53221490678577eb6439d2d8814d80ae162d9a0c2ebf16220ffe93bfb68b3a709240455aa27355aa47a159da97172002000000000000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf250b00000008000300000000000500050006000000080002000700000004000680"], 0x30}, 0x1, 0x0, 0x0, 0x5565555e496a666c}, 0x41) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x6, 0x12) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x8d38}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000340)={0x2, 0x1, 0x8008, 0x5, 0x1ff, 0x9995, 0x4, 0x9, r8}, 0x20) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) 732.969982ms ago: executing program 3 (id=3608): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000002, 0x11, r0, 0xaef000) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r2, 0x891a, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200)=0xfffff40e, 0xfffffd65) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xac2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c896}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001dc0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040000) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 531.415764ms ago: executing program 2 (id=3609): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX=r4, @ANYRES16=r1, @ANYBLOB="9ab11528ac9b2ba0f97bba236ecaacd6bf328c080ac67c4acbbbf51419e32c8ac76c5bbb64e36e5126b14daf344335c45b51bd41f57d8637bbff853e487cc42ff7b76d83addcf6cff99a08d4afa2a31ed2abbceb0ae3b4", @ANYRESOCT=r2, @ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r5}, 0xc) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r13, {0x5}, {0x4}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x24040040) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r5, r6}, 0xc) 448.519381ms ago: executing program 0 (id=3610): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth1_macvtap\x00', 0xc201}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000000b40)=[{{&(0x7f0000000580)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @loopback}}}], 0x20}}], 0x1, 0x200000d4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x500, 0x29, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xfce) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x10, 0x8000, 0x0, 0x5, {{0x16, 0x4, 0x3, 0x2, 0x58, 0x68, 0x0, 0x4, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x41}, {[@timestamp_prespec={0x44, 0x34, 0xc2, 0x3, 0x5, [{@local, 0x4}, {@local, 0x5}, {@loopback, 0x6}, {@private=0xa010100, 0x7c69}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast1, 0xf}]}, @timestamp_prespec={0x44, 0xc, 0x8, 0x3, 0x6, [{@broadcast, 0x6}]}, @noop]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xfff1}, {0x0, 0x7}, {0xfff2, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x5}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "72ff7acefd9de42ffe3a34495dc90586"}]}}, @filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x4}, @TCA_FW_MASK={0x8, 0x5, 0x80}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xc8}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8094}, 0x840) 355.529251ms ago: executing program 1 (id=3611): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x14, &(0x7f0000000380)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, 0x0, &(0x7f0000000780)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f00000017c0), &(0x7f0000001480)=""/93}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYBLOB="aaea7c623ad8dd6f46979df141aef68e25d67610bd5151dd7cb16ad50c1bbad858b7fda46229002e85429f739b95f27e12cf3f9def27bd233716c6b58a4030248b7780a950abf268d4011f2a3f39e7089f97ac95e571ba7323b2419e280a746a24e16b4cb386bea1923851c2010bd122b33fd55abd9bf36233caea55696b9b44571aa6bdf3fafa7869aaa59395009ca4b4f69bc2d04f320132fadd6e0c0dba33ddf049", @ANYRES8=r0, @ANYRES32=r0], 0x40}, 0x13, 0x0, 0x0, 0x20004880}, 0x40040) socket$nl_generic(0x10, 0x3, 0x10) 148.558925ms ago: executing program 0 (id=3612): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) (async) syz_emit_ethernet(0x1284, &(0x7f0000004c00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x124e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [{0x1, 0x1e, "7d6d4bf2974c6759083989ea66f00b3536cb7c115d8fb3ba17db1a509f738c610a6a8bcd2531752a44c569c06fdd1319b3ef17c2dc70a06efba54ee6b24869a0eaad90e85676d848d41a868bba0065086ba25a07b91de066157d5a101ca2f8ce51eb1609c2efb575ad2f87172615afce6a1ede2ad48f2f2b46f68ada50414ef9da55d84da2082510cbcbc9f12b46dff5e15915552cfb4bae01ebd26efe48549b5fd3bd453a4ca83bf5a2754c287be350aa511ca3737c5d1aa1afe46a0f3aa1103e5ebe4bae176b938bdf138651d161ecaab7fbf50429719e1c6a233e361c92ac4dc4ce43ca6bc01f43428378e929"}, {0x18, 0x200, "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"}, {0x3, 0xb, "5d28c0e5abda51a54ceda535e2aba2dc67b267e1f3a360f3b913c7ed2aa2d935786a4bef5efa0fbd993c132681ad97c91ffeacf994a505094f50526a74219f927321d6413e42690ab3e581bc8976e6882aa0a7947ff065"}, {0x1e, 0xc, "ee7663e73efaeef24ca801ab6486c8a9de221efae2ef95109b996638d30a77575a45bb4bce189c99c58a4655ca84464869c60a5f3934906393d0dd0c9069539386e49dc0e93bba97b8f71fb141afe2e0f5a8f109df69b150b776cacc0867c912"}, {0x1f, 0xf, "3bf0bd2272ad2f7e5a27de859601582ec95dd24c5c1efc59edbe1bf1e694e60d914c843f3ceb71a549a1fe980dd4825d529c8f4125c88f6b27fb5283e02cb07fa4649c6dc9514fc49d0ea31fa8a629e82003af78443972da1af23777de62729af33c0451dd83f7b2ddbb910d2882b51905a8d0eeb325ef"}]}}}}}}, 0x0) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 64) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3, &(0x7f0000000140)=""/167, &(0x7f0000000000)=0xa7) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) (async, rerun: 64) close(0x3) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105}, 0x48) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r3}, 0xc) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) r6 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0x6, 0xb}, {0x9, 0xa}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24024890}, 0x44000) (async, rerun: 64) r9 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict, @func_proto={0x0, 0x300}]}}, &(0x7f0000001b80)=""/4090, 0x32, 0xffa, 0xa}, 0x28) (async, rerun: 64) writev(r9, &(0x7f0000001300)=[{&(0x7f0000000300)="5e274ae5784da82ebd324b8a2a65e6c88cf76102e993bf1b460900000000000000774445481097481bab8785672c12a47da370fdf6162bf0e8365b78d8723df014187795166875d198bde4048e96d1f639d046121e931593269beb9a39463b4c3c5f579b13dc01807fcb1c848bfe730f7156228bc93fb8af3571e7de6ebd11a86b2758f78b35", 0x86}, {&(0x7f0000003bc0)="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", 0x100c}], 0x2) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2e8881, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) 402.464µs ago: executing program 3 (id=3613): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000001000000000040000000180100002020642500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b7030000910e000085000000060000009500000000000000ab15cbd5b0aafae7fc69942ddbe030feae4101446c445fd8f58a7e27147b8224"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x1}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000980)={'ip_vti0\x00', &(0x7f00000008c0)={'tunl0\x00', 0x0, 0x10, 0x7, 0x2e6de671, 0x1, {{0x26, 0x4, 0x1, 0x26, 0x98, 0x67, 0x0, 0x1, 0x4, 0x0, @loopback, @remote, {[@timestamp_prespec={0x44, 0x54, 0x92, 0x3, 0x5, [{@broadcast, 0xff}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0x9}, {@rand_addr=0x64010101, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe0000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast1, 0x1}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4}]}, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x27, 0x6b, [@empty, @dev={0xac, 0x14, 0x14, 0x34}, @loopback, @private=0xa010101, @remote, @local, @loopback, @local, @multicast2]}, @end, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'ip6_vti0\x00', 0x0, 0x0, 0xfc, 0x9, 0x6, 0x64, @loopback, @mcast1, 0x0, 0x7801, 0x772a, 0x80}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xc3, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r9, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r11, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r0, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000ac0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000b00)=[0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x48, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}, {}], 0xfffffffffffffed3, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000e40)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0xcb, 0x2, 0x20, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x700, 0x800}}) r12 = socket$igmp(0x2, 0x3, 0x2) r13 = socket(0x25, 0x4, 0x0) sendmmsg$alg(r13, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r12, 0x40046721, &(0x7f00000001c0)={r13}) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x8, 0xbc, 0x0, @vifc_lcl_ifindex=r15, @remote}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b40)={&(0x7f00000001c0)=ANY=[], 0xc80}, 0x1, 0x0, 0x0, 0x8011}, 0x20041190) 0s ago: executing program 1 (id=3614): sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0xe, &(0x7f0000002140)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x200688c0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4010744d, &(0x7f0000000080)=0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x0, [0x4, 0x7, 0x1]}, &(0x7f00000005c0)=0x44) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="0000c49b76fcb4", @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e2100000000fc"], 0x6c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071121d00006f067d5b776d1f083c833c98bfeb64181d1bcba06bf11408c6bdf4743db9372595"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x20008814}, 0x2400c080) kernel console output (not intermixed with test programs): REEMPT(full) [ 342.444149][T14615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 342.444163][T14615] Call Trace: [ 342.444171][T14615] [ 342.444180][T14615] dump_stack_lvl+0xe8/0x150 [ 342.444217][T14615] should_fail_ex+0x412/0x560 [ 342.444255][T14615] _copy_from_user+0x2d/0xb0 [ 342.444289][T14615] ___sys_sendmsg+0x1c6/0x360 [ 342.444324][T14615] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.444390][T14615] ? __fget_files+0x2a/0x420 [ 342.444422][T14615] ? __fget_files+0x3a0/0x420 [ 342.444465][T14615] __x64_sys_sendmsg+0x1bd/0x2a0 [ 342.444494][T14615] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.444533][T14615] ? __pfx_ksys_write+0x10/0x10 [ 342.444572][T14615] do_syscall_64+0x14d/0xf80 [ 342.444597][T14615] ? trace_irq_disable+0x3b/0x150 [ 342.444628][T14615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.444650][T14615] ? clear_bhb_loop+0x40/0x90 [ 342.444677][T14615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.444698][T14615] RIP: 0033:0x7f066279c799 [ 342.444720][T14615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.444738][T14615] RSP: 002b:00007f0663573028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.444760][T14615] RAX: ffffffffffffffda RBX: 00007f0662a15fa0 RCX: 00007f066279c799 [ 342.444776][T14615] RDX: 0000000004000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 342.444790][T14615] RBP: 00007f0663573090 R08: 0000000000000000 R09: 0000000000000000 [ 342.444803][T14615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.444815][T14615] R13: 00007f0662a16038 R14: 00007f0662a15fa0 R15: 00007ffe2384ff08 [ 342.444849][T14615] [ 342.695272][T14618] vlan0: entered promiscuous mode [ 342.700789][T14618] geneve1: entered promiscuous mode [ 342.706239][T14618] vlan0: entered allmulticast mode [ 342.714273][T14618] geneve1: entered allmulticast mode [ 343.026348][T14639] dvmrp0: entered allmulticast mode [ 343.305571][T14653] syzkaller1: entered promiscuous mode [ 343.331348][T14653] syzkaller1: entered allmulticast mode [ 343.468915][T14664] siw: device registration error -23 [ 343.511671][T14671] bond0: Caught tx_queue_len zero misconfig [ 343.557470][T14671] siw: device registration error -23 [ 343.633469][T14675] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 343.641606][T14675] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 343.981609][T14684] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.036678][T14686] netlink: Unknown conntrack attr (0) [ 344.137793][T14684] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.251351][T14684] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.348158][T14693] lo speed is unknown, defaulting to 1000 [ 344.362263][T14684] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.375724][T14698] netlink: 'syz.3.2253': attribute type 1 has an invalid length. [ 344.406416][T14693] lo speed is unknown, defaulting to 1000 [ 344.546053][T14707] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 344.587676][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.648009][T14502] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.680117][T14502] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.722348][T14502] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.269173][T14734] __nla_validate_parse: 19 callbacks suppressed [ 345.269199][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2266'. [ 345.410650][T14736] netlink: 'syz.0.2267': attribute type 7 has an invalid length. [ 345.431262][T14693] virt_wifi0 speed is unknown, defaulting to 1000 [ 345.450359][T14736] syz0: rxe_newlink: already configured on lo [ 345.768434][T14750] can: request_module (can-proto-0) failed. [ 345.986909][T14769] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2276'. [ 346.006122][T14773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2278'. [ 346.037387][T14773] tipc: Enabling of bearer rejected, failed to enable media [ 346.449835][T14796] FAULT_INJECTION: forcing a failure. [ 346.449835][T14796] name failslab, interval 1, probability 0, space 0, times 0 [ 346.485621][T14796] CPU: 1 UID: 0 PID: 14796 Comm: syz.0.2284 Not tainted syzkaller #0 PREEMPT(full) [ 346.485652][T14796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 346.485665][T14796] Call Trace: [ 346.485673][T14796] [ 346.485683][T14796] dump_stack_lvl+0xe8/0x150 [ 346.485720][T14796] should_fail_ex+0x412/0x560 [ 346.485757][T14796] should_failslab+0xa8/0x100 [ 346.485787][T14796] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 346.485812][T14796] ? __alloc_skb+0x186/0x7d0 [ 346.485835][T14796] ? __alloc_skb+0x1d0/0x7d0 [ 346.485855][T14796] ? __local_bh_enable_ip+0xd0/0x130 [ 346.485890][T14796] __alloc_skb+0x1d0/0x7d0 [ 346.485913][T14796] ? netlink_ack_tlv_len+0x6c/0x210 [ 346.485939][T14796] netlink_ack+0x146/0xa50 [ 346.485958][T14796] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 346.485985][T14796] ? __lock_acquire+0x6b5/0x2cf0 [ 346.486025][T14796] netlink_rcv_skb+0x2b6/0x4b0 [ 346.486047][T14796] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 346.486069][T14796] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.486102][T14796] ? netlink_deliver_tap+0x2e/0x1b0 [ 346.486131][T14796] netlink_unicast+0x80f/0x9b0 [ 346.486179][T14796] ? __pfx_netlink_unicast+0x10/0x10 [ 346.486215][T14796] ? netlink_sendmsg+0x650/0xb40 [ 346.486236][T14796] ? skb_put+0x11b/0x210 [ 346.486264][T14796] netlink_sendmsg+0x813/0xb40 [ 346.486298][T14796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.486325][T14796] ? aa_sock_msg_perm+0xf1/0x1b0 [ 346.486359][T14796] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 346.486387][T14796] ____sys_sendmsg+0x972/0x9f0 [ 346.486424][T14796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.486460][T14796] ? import_iovec+0x73/0xa0 [ 346.486488][T14796] ___sys_sendmsg+0x2a5/0x360 [ 346.486520][T14796] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.486586][T14796] ? __fget_files+0x2a/0x420 [ 346.486617][T14796] ? __fget_files+0x3a0/0x420 [ 346.486659][T14796] __x64_sys_sendmsg+0x1bd/0x2a0 [ 346.486689][T14796] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.486728][T14796] ? __pfx_ksys_write+0x10/0x10 [ 346.486765][T14796] do_syscall_64+0x14d/0xf80 [ 346.486790][T14796] ? trace_irq_disable+0x3b/0x150 [ 346.486822][T14796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.486844][T14796] ? clear_bhb_loop+0x40/0x90 [ 346.486870][T14796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.486892][T14796] RIP: 0033:0x7f07bb19c799 [ 346.486912][T14796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.486931][T14796] RSP: 002b:00007f07bc074028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.486954][T14796] RAX: ffffffffffffffda RBX: 00007f07bb415fa0 RCX: 00007f07bb19c799 [ 346.486970][T14796] RDX: 0000000004000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 346.486984][T14796] RBP: 00007f07bc074090 R08: 0000000000000000 R09: 0000000000000000 [ 346.486997][T14796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.487010][T14796] R13: 00007f07bb416038 R14: 00007f07bb415fa0 R15: 00007fffc78e9be8 [ 346.487044][T14796] [ 347.049884][T14818] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 347.318066][T14838] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2299'. [ 347.352190][T14839] bond7: option lacp_active: invalid value (8) [ 347.370196][T14839] bond7 (unregistering): Released all slaves [ 347.455044][T14838] : renamed from bond_slave_0 [ 347.551666][T14851] lo speed is unknown, defaulting to 1000 [ 347.566476][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2302'. [ 347.576944][T14851] lo speed is unknown, defaulting to 1000 [ 347.781662][T14859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2307'. [ 347.833839][T14859] No such timeout policy "syz0" [ 347.962514][T14865] netlink: 'syz.0.2309': attribute type 1 has an invalid length. [ 347.999210][T14865] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 348.098030][T14867] lo speed is unknown, defaulting to 1000 [ 348.299725][T14877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2310'. [ 348.333619][ T8108] IPVS: starting estimator thread 0... [ 348.379719][T14877] lo speed is unknown, defaulting to 1000 [ 348.428812][T14887] IPVS: using max 26 ests per chain, 62400 per kthread [ 348.544385][T14867] lo speed is unknown, defaulting to 1000 [ 348.984370][T14877] lo speed is unknown, defaulting to 1000 [ 349.103166][T14851] virt_wifi0 speed is unknown, defaulting to 1000 [ 349.199034][T14904] Unsupported ieee802154 address type: 0 [ 349.912304][T14867] virt_wifi0 speed is unknown, defaulting to 1000 [ 349.938454][ T1155] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.959312][ T1155] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.988231][ T1155] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.042618][ T1155] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.515110][T14877] virt_wifi0 speed is unknown, defaulting to 1000 [ 350.956111][T14941] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2327'. [ 351.019572][T14942] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2327'. [ 351.327721][T14945] lo speed is unknown, defaulting to 1000 [ 351.396730][T14945] lo speed is unknown, defaulting to 1000 [ 351.927339][T14957] netlink: 'syz.3.2331': attribute type 4 has an invalid length. [ 351.958889][T14957] netlink: 'syz.3.2331': attribute type 4 has an invalid length. [ 352.172120][T14962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2332'. [ 352.191807][T14966] tipc: New replicast peer: 255.255.255.255 [ 352.208823][T14966] tipc: Enabled bearer , priority 10 [ 352.302370][T14969] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2334'. [ 352.767798][T14985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2338'. [ 353.366070][T14945] virt_wifi0 speed is unknown, defaulting to 1000 [ 353.414132][T14996] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2342'. [ 353.703093][T15000] bond0: entered promiscuous mode [ 353.708204][T15000] batadv1: entered promiscuous mode [ 353.715518][T15000] batadv0: entered promiscuous mode [ 353.726793][T15000] debugfs: 'hsr0' already exists in 'hsr' [ 353.760844][T15007] nbd: must specify at least one socket [ 353.804840][T15000] Cannot create hsr debugfs directory [ 353.814556][T15000] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 353.845030][T15000] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 354.232686][T15032] tipc: Enabling of bearer rejected, already enabled [ 354.263879][T15032] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 354.282224][T15032] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 354.373829][T15032] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2355'. [ 354.389739][T15034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2357'. [ 354.441041][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2358'. [ 354.671699][T15049] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2361'. [ 355.193708][T15076] tipc: Can't bind to reserved service type 0 [ 355.271420][T15075] netlink: 'syz.2.2370': attribute type 1 has an invalid length. [ 355.360271][T15075] 8021q: adding VLAN 0 to HW filter on device bond10 [ 355.367893][T15079] lo speed is unknown, defaulting to 1000 [ 355.522518][T15079] lo speed is unknown, defaulting to 1000 [ 356.135726][T15117] __nla_validate_parse: 1 callbacks suppressed [ 356.135747][T15117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2384'. [ 356.261790][T15127] bridge0: port 2(syz_tun) entered blocking state [ 356.308575][T15127] bridge0: port 2(syz_tun) entered disabled state [ 356.332331][T15127] syz_tun: entered allmulticast mode [ 356.340643][T15127] syz_tun: entered promiscuous mode [ 356.384655][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2388'. [ 356.406614][T15132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2388'. [ 356.512444][T15079] virt_wifi0 speed is unknown, defaulting to 1000 [ 356.628720][T15142] pim6reg1: entered promiscuous mode [ 356.637931][T15142] pim6reg1: entered allmulticast mode [ 356.648224][T15148] tipc: Enabling of bearer rejected, already enabled [ 356.660082][T15148] netlink: 1040 bytes leftover after parsing attributes in process `syz.1.2393'. [ 357.097604][T15164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2397'. [ 357.116368][T15167] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2396'. [ 357.592253][T15178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2401'. [ 358.165218][T15210] netlink: 'syz.0.2412': attribute type 1 has an invalid length. [ 358.253071][T15213] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2408'. [ 358.285618][T15214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2412'. [ 358.304381][T15214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2412'. [ 358.667396][T15236] netlink: 'syz.4.2418': attribute type 5 has an invalid length. [ 359.124787][T15252] netlink: 'syz.1.2424': attribute type 2 has an invalid length. [ 359.252686][T15254] netlink: 'syz.1.2424': attribute type 2 has an invalid length. [ 359.288983][T15254] !©9: left promiscuous mode [ 359.303060][T15253] netlink: 'syz.0.2426': attribute type 13 has an invalid length. [ 360.056443][T15289] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 360.274139][T15295] x_tables: duplicate underflow at hook 3 [ 360.283254][T15295] siw: device registration error -23 [ 360.528574][T15310] x_tables: unsorted entry at hook 1 [ 360.624463][T15314] IPVS: set_ctl: invalid protocol: 135 172.30.0.1:20001 [ 361.114177][T15342] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 361.173739][T15342] bond7 (unregistering): Released all slaves [ 361.200113][T15351] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 361.299353][T15357] __nla_validate_parse: 2 callbacks suppressed [ 361.299374][T15357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2459'. [ 361.711317][T15377] lo speed is unknown, defaulting to 1000 [ 361.731443][T15377] lo speed is unknown, defaulting to 1000 [ 361.772484][T15370] geneve0: entered promiscuous mode [ 362.156370][T15395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2470'. [ 362.524264][T15415] netlink: 'syz.4.2471': attribute type 1 has an invalid length. [ 362.578003][ T7460] lo speed is unknown, defaulting to 1000 [ 362.594627][ T7460] syz2: Port: 1 Link ACTIVE [ 363.191348][T15447] FAULT_INJECTION: forcing a failure. [ 363.191348][T15447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.266568][T15447] CPU: 0 UID: 0 PID: 15447 Comm: syz.1.2482 Not tainted syzkaller #0 PREEMPT(full) [ 363.266599][T15447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.266617][T15447] Call Trace: [ 363.266626][T15447] [ 363.266636][T15447] dump_stack_lvl+0xe8/0x150 [ 363.266673][T15447] should_fail_ex+0x412/0x560 [ 363.266719][T15447] _copy_from_user+0x2d/0xb0 [ 363.266745][T15447] kstrtouint_from_user+0xd6/0x180 [ 363.266781][T15447] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 363.266833][T15447] proc_fail_nth_write+0x8e/0x210 [ 363.266865][T15447] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 363.266904][T15447] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 363.266937][T15447] vfs_write+0x29a/0xb90 [ 363.266972][T15447] ? __pfx_vfs_write+0x10/0x10 [ 363.266999][T15447] ? __fget_files+0x2a/0x420 [ 363.267036][T15447] ? __fget_files+0x3a0/0x420 [ 363.267067][T15447] ? __fget_files+0x2a/0x420 [ 363.267110][T15447] ksys_write+0x150/0x270 [ 363.267137][T15447] ? __pfx_ksys_write+0x10/0x10 [ 363.267175][T15447] do_syscall_64+0x14d/0xf80 [ 363.267200][T15447] ? trace_irq_disable+0x3b/0x150 [ 363.267232][T15447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.267253][T15447] ? clear_bhb_loop+0x40/0x90 [ 363.267281][T15447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.267307][T15447] RIP: 0033:0x7f88d635cfce [ 363.267328][T15447] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 363.267347][T15447] RSP: 002b:00007f88d72d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 363.267370][T15447] RAX: ffffffffffffffda RBX: 00007f88d72d46c0 RCX: 00007f88d635cfce [ 363.267385][T15447] RDX: 0000000000000001 RSI: 00007f88d72d40a0 RDI: 0000000000000005 [ 363.267399][T15447] RBP: 00007f88d72d4090 R08: 0000000000000000 R09: 0000000000000000 [ 363.267412][T15447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.267425][T15447] R13: 00007f88d6616128 R14: 00007f88d6616090 R15: 00007ffe403fc9c8 [ 363.267462][T15447] [ 363.461990][T15377] virt_wifi0 speed is unknown, defaulting to 1000 [ 363.835857][T15465] sctp: [Deprecated]: syz.3.2487 (pid 15465) Use of int in max_burst socket option. [ 363.835857][T15465] Use struct sctp_assoc_value instead [ 364.082951][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2490'. [ 364.647513][T15511] netlink: 'syz.0.2498': attribute type 1 has an invalid length. [ 364.822350][T15514] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2497'. [ 364.978878][T15519] netlink: 'syz.0.2501': attribute type 1 has an invalid length. [ 364.987741][T15519] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2501'. [ 365.247234][T15532] netlink: 'syz.1.2504': attribute type 3 has an invalid length. [ 365.362209][T15532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2504'. [ 365.410557][T15532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2504'. [ 365.442541][T15532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.459646][T15546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2508'. [ 365.470264][T15546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2508'. [ 365.479806][T15546] netlink: 'syz.2.2508': attribute type 1 has an invalid length. [ 365.487655][T15546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2508'. [ 366.951790][T15616] __nla_validate_parse: 226 callbacks suppressed [ 366.951810][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2527'. [ 367.339161][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2529'. [ 367.357047][T15634] lo speed is unknown, defaulting to 1000 [ 367.385417][T15634] lo speed is unknown, defaulting to 1000 [ 367.464819][T15626] lo speed is unknown, defaulting to 1000 [ 367.736015][T15647] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2535'. [ 367.767004][T15649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2534'. [ 368.183321][T15626] lo speed is unknown, defaulting to 1000 [ 368.347349][T15662] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 368.361889][T15667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2539'. [ 368.373863][T15667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2539'. [ 368.585313][T15662] bond7 (unregistering): Released all slaves [ 368.605698][T15671] netlink: 'syz.3.2540': attribute type 1 has an invalid length. [ 368.841724][T15634] virt_wifi0 speed is unknown, defaulting to 1000 [ 369.340017][T15626] virt_wifi0 speed is unknown, defaulting to 1000 [ 369.453830][T15695] lo speed is unknown, defaulting to 1000 [ 369.532887][T15695] lo speed is unknown, defaulting to 1000 [ 369.932202][T15711] ip6tnl0: entered promiscuous mode [ 369.958469][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2551'. [ 370.063782][T15708] lo speed is unknown, defaulting to 1000 [ 370.264993][T15708] lo speed is unknown, defaulting to 1000 [ 370.590137][T15728] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2556'. [ 370.609605][T15725] lo speed is unknown, defaulting to 1000 [ 370.623251][T15728] sctp: [Deprecated]: syz.2.2556 (pid 15728) Use of int in maxseg socket option. [ 370.623251][T15728] Use struct sctp_assoc_value instead [ 370.650097][T15695] virt_wifi0 speed is unknown, defaulting to 1000 [ 370.713744][T15725] lo speed is unknown, defaulting to 1000 [ 371.213108][T15740] netlink: 'syz.0.2561': attribute type 1 has an invalid length. [ 371.221141][T15740] netlink: 'syz.0.2561': attribute type 1 has an invalid length. [ 371.614843][T15741] lo speed is unknown, defaulting to 1000 [ 371.621486][T15725] virt_wifi0 speed is unknown, defaulting to 1000 [ 371.642266][T15708] virt_wifi0 speed is unknown, defaulting to 1000 [ 371.659593][T15740] lo speed is unknown, defaulting to 1000 [ 371.659621][T15741] lo speed is unknown, defaulting to 1000 [ 371.972418][T15740] lo speed is unknown, defaulting to 1000 [ 372.119454][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2564'. [ 372.151555][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2564'. [ 372.556467][T15740] virt_wifi0 speed is unknown, defaulting to 1000 [ 373.308550][T15741] virt_wifi0 speed is unknown, defaulting to 1000 [ 373.502022][T15772] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2568'. [ 373.535549][T15773] netlink: 'syz.4.2569': attribute type 1 has an invalid length. [ 373.783202][T15777] sctp: [Deprecated]: syz.4.2571 (pid 15777) Use of int in max_burst socket option deprecated. [ 373.783202][T15777] Use struct sctp_assoc_value instead [ 374.044261][T15777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2571'. [ 374.875025][T15818] netlink: 'syz.1.2582': attribute type 10 has an invalid length. [ 374.929251][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2581'. [ 375.051617][T15826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2581'. [ 375.101038][T15831] Cannot find del_set index 1536 as target [ 375.119753][T15831] x_tables: duplicate underflow at hook 2 [ 375.194683][T15818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2582'. [ 375.263691][T15818] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 375.370245][T15844] netlink: 'syz.2.2587': attribute type 16 has an invalid length. [ 375.402708][T15844] netlink: 'syz.2.2587': attribute type 17 has an invalid length. [ 375.521489][T15844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.552691][T15853] netlink: 'syz.3.2590': attribute type 1 has an invalid length. [ 375.562768][T15844] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.685810][T15844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.777104][T15866] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2591'. [ 375.850167][T15853] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 376.110403][T15888] netlink: 'syz.1.2598': attribute type 11 has an invalid length. [ 376.134245][T15886] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2600'. [ 376.144752][T15892] sctp: [Deprecated]: syz.2.2597 (pid 15892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.144752][T15892] Use struct sctp_sack_info instead [ 376.146051][T15888] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2598'. [ 376.233429][T15886] netlink: 'syz.4.2600': attribute type 1 has an invalid length. [ 376.385037][T15902] netlink: 'syz.4.2603': attribute type 1 has an invalid length. [ 376.512814][T15902] bond11: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 376.523417][T15902] bond11: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 376.538150][T15902] bond11: (slave ip6gre1): making interface the new active one [ 376.547313][T15902] bond11: (slave ip6gre1): Enslaving as an active interface with an up link [ 376.617578][T15918] FAULT_INJECTION: forcing a failure. [ 376.617578][T15918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.660977][T15918] CPU: 1 UID: 0 PID: 15918 Comm: syz.3.2608 Not tainted syzkaller #0 PREEMPT(full) [ 376.661008][T15918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 376.661021][T15918] Call Trace: [ 376.661030][T15918] [ 376.661039][T15918] dump_stack_lvl+0xe8/0x150 [ 376.661076][T15918] should_fail_ex+0x412/0x560 [ 376.661114][T15918] _copy_from_iter+0x1d3/0x1670 [ 376.661146][T15918] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 376.661180][T15918] ? __pfx_policy_nodemask+0x10/0x10 [ 376.661213][T15918] ? __pfx__copy_from_iter+0x10/0x10 [ 376.661267][T15918] ? set_page_refcounted+0xa0/0x1e0 [ 376.661295][T15918] ? page_copy_sane+0x4e/0x270 [ 376.661332][T15918] copy_page_from_iter+0xdd/0x170 [ 376.661358][T15918] tun_get_user+0x1d4b/0x3dd0 [ 376.661381][T15918] ? tun_get_user+0x6ff/0x3dd0 [ 376.661423][T15918] ? aa_file_perm+0x50e/0x15e0 [ 376.661444][T15918] ? __pfx_tun_get_user+0x10/0x10 [ 376.661465][T15918] ? aa_file_perm+0x192/0x15e0 [ 376.661506][T15918] ? ref_tracker_alloc+0x35c/0x4c0 [ 376.661542][T15918] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 376.661582][T15918] ? tun_get+0x1c/0x2f0 [ 376.661610][T15918] ? tun_get+0x1c/0x2f0 [ 376.661632][T15918] ? tun_get+0x1c/0x2f0 [ 376.661659][T15918] tun_chr_write_iter+0x113/0x200 [ 376.661686][T15918] vfs_write+0x61d/0xb90 [ 376.661724][T15918] ? __pfx_vfs_write+0x10/0x10 [ 376.661758][T15918] ? __fget_files+0x2a/0x420 [ 376.661800][T15918] ksys_write+0x150/0x270 [ 376.661827][T15918] ? __pfx_ksys_write+0x10/0x10 [ 376.661863][T15918] do_syscall_64+0x14d/0xf80 [ 376.661887][T15918] ? trace_irq_disable+0x3b/0x150 [ 376.661918][T15918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.661941][T15918] ? clear_bhb_loop+0x40/0x90 [ 376.661967][T15918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.661988][T15918] RIP: 0033:0x7fa78415cfce [ 376.662009][T15918] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 376.662028][T15918] RSP: 002b:00007fa78509efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 376.662051][T15918] RAX: ffffffffffffffda RBX: 00007fa78509f6c0 RCX: 00007fa78415cfce [ 376.662067][T15918] RDX: 0000000000000036 RSI: 0000200000000180 RDI: 00000000000000c8 [ 376.662079][T15918] RBP: 00007fa78509f090 R08: 0000000000000000 R09: 0000000000000000 [ 376.662092][T15918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.662105][T15918] R13: 00007fa784416038 R14: 00007fa784415fa0 R15: 00007ffc59d13ad8 [ 376.662138][T15918] [ 377.001807][T15928] netlink: 'syz.4.2610': attribute type 4 has an invalid length. [ 377.218173][T15943] FAULT_INJECTION: forcing a failure. [ 377.218173][T15943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.233606][T15943] CPU: 1 UID: 0 PID: 15943 Comm: syz.3.2616 Not tainted syzkaller #0 PREEMPT(full) [ 377.233636][T15943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 377.233649][T15943] Call Trace: [ 377.233657][T15943] [ 377.233666][T15943] dump_stack_lvl+0xe8/0x150 [ 377.233703][T15943] should_fail_ex+0x412/0x560 [ 377.233741][T15943] _copy_from_user+0x2d/0xb0 [ 377.233767][T15943] __sys_bpf+0x229/0x950 [ 377.233803][T15943] ? __pfx___sys_bpf+0x10/0x10 [ 377.233853][T15943] ? ksys_write+0x242/0x270 [ 377.233881][T15943] ? __pfx_ksys_write+0x10/0x10 [ 377.233912][T15943] __x64_sys_bpf+0x7c/0x90 [ 377.233943][T15943] do_syscall_64+0x14d/0xf80 [ 377.233968][T15943] ? trace_irq_disable+0x3b/0x150 [ 377.234001][T15943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.234024][T15943] ? clear_bhb_loop+0x40/0x90 [ 377.234051][T15943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.234072][T15943] RIP: 0033:0x7fa78419c799 [ 377.234092][T15943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.234111][T15943] RSP: 002b:00007fa78509f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.234134][T15943] RAX: ffffffffffffffda RBX: 00007fa784415fa0 RCX: 00007fa78419c799 [ 377.234149][T15943] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 377.234163][T15943] RBP: 00007fa78509f090 R08: 0000000000000000 R09: 0000000000000000 [ 377.234177][T15943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.234190][T15943] R13: 00007fa784416038 R14: 00007fa784415fa0 R15: 00007ffc59d13ad8 [ 377.234225][T15943] [ 377.474415][T15949] netlink: 'syz.1.2619': attribute type 1 has an invalid length. [ 377.482309][T15949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.554566][T15958] netlink: 'syz.1.2619': attribute type 1 has an invalid length. [ 377.573817][T15958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.590712][T15960] __nla_validate_parse: 2 callbacks suppressed [ 377.590732][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2621'. [ 377.630953][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2621'. [ 377.680068][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2621'. [ 377.844822][T15971] bond0: (slave wlan1): Opening slave failed [ 377.977533][T15977] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 378.009092][T15981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2627'. [ 378.176374][T15994] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2628'. [ 378.224377][T15999] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2631'. [ 378.290680][T15999] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2631'. [ 378.510090][T16011] bond5: entered allmulticast mode [ 378.731165][T16021] lo speed is unknown, defaulting to 1000 [ 378.746157][T16021] lo speed is unknown, defaulting to 1000 [ 379.259926][T16049] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2643'. [ 379.646170][T16072] sock: sock_set_timeout: `syz.0.2647' (pid 16072) tries to set negative timeout [ 379.863142][T16087] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20000 [ 379.899138][T16090] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2650'. [ 380.131940][T16103] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2652'. [ 380.255749][T16097] lo speed is unknown, defaulting to 1000 [ 380.270629][T16095] lo speed is unknown, defaulting to 1000 [ 380.278291][T16095] lo speed is unknown, defaulting to 1000 [ 380.296153][T16110] validate_nla: 1 callbacks suppressed [ 380.296174][T16110] netlink: 'syz.0.2656': attribute type 1 has an invalid length. [ 380.507739][T16110] tipc: Enabling of bearer rejected, media not registered [ 380.901277][T16129] Unsupported ieee802154 address type: 0 [ 380.908643][T16132] Unsupported ieee802154 address type: 0 [ 380.976989][T16021] virt_wifi0 speed is unknown, defaulting to 1000 [ 381.022750][T16097] lo speed is unknown, defaulting to 1000 [ 381.126476][T16138] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 381.441473][T16145] syzkaller0: entered promiscuous mode [ 381.448799][T16145] syzkaller0: entered allmulticast mode [ 381.795702][T16161] FAULT_INJECTION: forcing a failure. [ 381.795702][T16161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.819302][T16161] CPU: 0 UID: 0 PID: 16161 Comm: syz.1.2672 Not tainted syzkaller #0 PREEMPT(full) [ 381.819329][T16161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.819340][T16161] Call Trace: [ 381.819347][T16161] [ 381.819355][T16161] dump_stack_lvl+0xe8/0x150 [ 381.819387][T16161] should_fail_ex+0x412/0x560 [ 381.819420][T16161] _copy_to_user+0x31/0xb0 [ 381.819443][T16161] bpf_test_finish+0x22c/0x6b0 [ 381.819466][T16161] ? trace_kmem_cache_alloc+0x29/0xf0 [ 381.819485][T16161] ? slab_build_skb+0x52/0x410 [ 381.819507][T16161] ? __pfx_bpf_test_finish+0x10/0x10 [ 381.819525][T16161] ? eth_type_trans+0x35e/0x6d0 [ 381.819558][T16161] bpf_prog_test_run_skb+0x10c6/0x1c90 [ 381.819598][T16161] ? __fget_files+0x2a/0x420 [ 381.819630][T16161] ? __fget_files+0x3a0/0x420 [ 381.819656][T16161] ? __fget_files+0x2a/0x420 [ 381.819687][T16161] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 381.819707][T16161] bpf_prog_test_run+0x2c7/0x340 [ 381.819730][T16161] __sys_bpf+0x643/0x950 [ 381.819760][T16161] ? __pfx___sys_bpf+0x10/0x10 [ 381.819804][T16161] ? ksys_write+0x242/0x270 [ 381.819827][T16161] ? __pfx_ksys_write+0x10/0x10 [ 381.819855][T16161] __x64_sys_bpf+0x7c/0x90 [ 381.819882][T16161] do_syscall_64+0x14d/0xf80 [ 381.819904][T16161] ? trace_irq_disable+0x3b/0x150 [ 381.819930][T16161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.819949][T16161] ? clear_bhb_loop+0x40/0x90 [ 381.819972][T16161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.819990][T16161] RIP: 0033:0x7f88d639c799 [ 381.820009][T16161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.820024][T16161] RSP: 002b:00007f88d72f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 381.820044][T16161] RAX: ffffffffffffffda RBX: 00007f88d6615fa0 RCX: 00007f88d639c799 [ 381.820058][T16161] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 381.820077][T16161] RBP: 00007f88d72f5090 R08: 0000000000000000 R09: 0000000000000000 [ 381.820088][T16161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.820098][T16161] R13: 00007f88d6616038 R14: 00007f88d6615fa0 R15: 00007ffe403fc9c8 [ 381.820128][T16161] [ 382.281612][T16172] No such timeout policy "syz1" [ 382.699685][T16186] __nla_validate_parse: 11 callbacks suppressed [ 382.699706][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2679'. [ 383.630789][T16163] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 383.632031][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2673'. [ 383.650010][T16095] virt_wifi0 speed is unknown, defaulting to 1000 [ 384.059781][T16211] FAULT_INJECTION: forcing a failure. [ 384.059781][T16211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.073623][T16211] CPU: 1 UID: 0 PID: 16211 Comm: syz.3.2686 Not tainted syzkaller #0 PREEMPT(full) [ 384.073653][T16211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 384.073667][T16211] Call Trace: [ 384.073675][T16211] [ 384.073684][T16211] dump_stack_lvl+0xe8/0x150 [ 384.073722][T16211] should_fail_ex+0x412/0x560 [ 384.073760][T16211] _copy_to_user+0x31/0xb0 [ 384.073787][T16211] simple_read_from_buffer+0xe1/0x170 [ 384.073826][T16211] proc_fail_nth_read+0x1bb/0x230 [ 384.073859][T16211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 384.073898][T16211] ? rw_verify_area+0x2a6/0x4d0 [ 384.073920][T16211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 384.073952][T16211] vfs_read+0x20c/0xa70 [ 384.073973][T16211] ? fdget_pos+0x246/0x320 [ 384.073998][T16211] ? __pfx___mutex_lock+0x10/0x10 [ 384.074027][T16211] ? __pfx_vfs_read+0x10/0x10 [ 384.074051][T16211] ? __fget_files+0x2a/0x420 [ 384.074088][T16211] ? __fget_files+0x3a0/0x420 [ 384.074118][T16211] ? __fget_files+0x2a/0x420 [ 384.074158][T16211] ksys_read+0x150/0x270 [ 384.074183][T16211] ? __pfx_ksys_read+0x10/0x10 [ 384.074217][T16211] do_syscall_64+0x14d/0xf80 [ 384.074241][T16211] ? trace_irq_disable+0x3b/0x150 [ 384.074272][T16211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.074294][T16211] ? clear_bhb_loop+0x40/0x90 [ 384.074321][T16211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.074343][T16211] RIP: 0033:0x7fa78415cfce [ 384.074363][T16211] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 384.074381][T16211] RSP: 002b:00007fa78509efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 384.074404][T16211] RAX: ffffffffffffffda RBX: 00007fa78509f6c0 RCX: 00007fa78415cfce [ 384.074420][T16211] RDX: 000000000000000f RSI: 00007fa78509f0a0 RDI: 0000000000000004 [ 384.074434][T16211] RBP: 00007fa78509f090 R08: 0000000000000000 R09: 0000000000000000 [ 384.074447][T16211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.074459][T16211] R13: 00007fa784416038 R14: 00007fa784415fa0 R15: 00007ffc59d13ad8 [ 384.074496][T16211] [ 384.338865][T16208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2685'. [ 384.348084][T16208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2685'. [ 384.410421][T16097] virt_wifi0 speed is unknown, defaulting to 1000 [ 384.431677][T16216] nbd: must specify at least one socket [ 384.533282][T16219] netlink: 'syz.3.2689': attribute type 32 has an invalid length. [ 384.741227][T16226] netlink: 572 bytes leftover after parsing attributes in process `syz.1.2690'. [ 384.961881][T16233] netlink: 'syz.1.2692': attribute type 2 has an invalid length. [ 384.990188][T16233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2692'. [ 385.449611][T16249] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 385.689249][T16257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2699'. [ 385.938071][T16273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2704'. [ 386.067308][T16269] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 386.074662][T16269] IPv6: NLM_F_CREATE should be set when creating new route [ 386.117278][T16278] tipc: Started in network mode [ 386.129860][T16278] tipc: Node identity 62fcfc5b6cee, cluster identity 4711 [ 386.142097][T16278] tipc: Enabled bearer , priority 0 [ 386.151842][T16278] syzkaller0: entered promiscuous mode [ 386.166294][T16278] syzkaller0: entered allmulticast mode [ 386.233171][T16278] tipc: Resetting bearer [ 386.243538][T16278] tipc: Resetting bearer [ 386.323735][T16278] tipc: Disabling bearer [ 386.641916][T16300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2711'. [ 386.779482][T16309] lo speed is unknown, defaulting to 1000 [ 386.812943][T16309] lo speed is unknown, defaulting to 1000 [ 386.863486][T16312] syzkaller1: entered allmulticast mode [ 386.883564][T16312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2714'. [ 387.411079][T16327] netlink: 'syz.2.2718': attribute type 1 has an invalid length. [ 387.674678][T16333] lo speed is unknown, defaulting to 1000 [ 387.684829][T16309] virt_wifi0 speed is unknown, defaulting to 1000 [ 387.734653][T16333] lo speed is unknown, defaulting to 1000 [ 388.221278][T16358] __nla_validate_parse: 2 callbacks suppressed [ 388.221299][T16358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2724'. [ 388.617730][T16368] lo speed is unknown, defaulting to 1000 [ 388.731004][T16368] lo speed is unknown, defaulting to 1000 [ 388.963292][T16380] ip6gretap1: entered allmulticast mode [ 389.308504][T16333] virt_wifi0 speed is unknown, defaulting to 1000 [ 389.430197][T16390] xt_CT: You must specify a L4 protocol and not use inversions on it [ 389.765110][T16368] virt_wifi0 speed is unknown, defaulting to 1000 [ 390.047264][T16402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2738'. [ 390.058098][T16402] nbd: must specify a size in bytes for the device [ 390.327876][T16418] netlink: 'syz.3.2742': attribute type 10 has an invalid length. [ 390.550738][T16424] sctp: [Deprecated]: syz.0.2744 (pid 16424) Use of int in max_burst socket option. [ 390.550738][T16424] Use struct sctp_assoc_value instead [ 390.634950][ T30] audit: type=1107 audit(1774442174.728:13): pid=16425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 390.824733][T16431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2747'. [ 390.883346][T16434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2747'. [ 390.952025][T16434] bridge7: entered promiscuous mode [ 390.962206][T16434] bridge7: port 1(macsec3) entered blocking state [ 390.969208][T16434] bridge7: port 1(macsec3) entered disabled state [ 390.976091][T16434] macsec3: entered allmulticast mode [ 390.982746][T16434] bridge7: entered allmulticast mode [ 391.010618][T16434] macsec3: left allmulticast mode [ 391.018089][T16434] bridge7: left allmulticast mode [ 391.037423][T16434] bridge7: left promiscuous mode [ 391.357308][T16452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2754'. [ 391.487695][T16461] tipc: Enabling of bearer rejected, already enabled [ 391.552962][T16465] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2759'. [ 391.859132][T16481] bond0: Device is already in use. [ 392.079368][T16500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2769'. [ 392.107234][T16500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.635757][T16535] tipc: Enabling of bearer rejected, already enabled [ 392.755983][T16542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2780'. [ 392.853457][T16546] netlink: 'syz.3.2781': attribute type 83 has an invalid length. [ 392.973982][T16554] syzkaller1: entered promiscuous mode [ 393.002043][T16554] syzkaller1: entered allmulticast mode [ 393.354579][T16575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2788'. [ 393.393311][T16575] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2788'. [ 393.423576][T16575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2788'. [ 393.693870][T16583] bond12: entered allmulticast mode [ 393.724815][T16583] 8021q: adding VLAN 0 to HW filter on device bond12 [ 394.169021][T16611] mac80211_hwsim hwsim7 wlan1: Caught tx_queue_len zero misconfig [ 394.207291][T16611] netlink: 'syz.1.2798': attribute type 83 has an invalid length. [ 394.561847][T16628] netlink: 'syz.3.2805': attribute type 1 has an invalid length. [ 394.569885][T16628] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2805'. [ 394.579107][T16628] netlink: 'syz.3.2805': attribute type 1 has an invalid length. [ 394.586871][T16628] netlink: 'syz.3.2805': attribute type 8 has an invalid length. [ 394.635349][T16628] netlink: 606 bytes leftover after parsing attributes in process `syz.3.2805'. [ 394.840838][T16642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2810'. [ 395.447704][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2815'. [ 395.687627][T16670] netlink: 181328 bytes leftover after parsing attributes in process `syz.0.2817'. [ 395.724760][T16670] netlink: 181328 bytes leftover after parsing attributes in process `syz.0.2817'. [ 395.754383][T16670] netlink: 181328 bytes leftover after parsing attributes in process `syz.0.2817'. [ 396.175039][T16707] pimreg: tun_chr_ioctl cmd 2147767520 [ 396.215160][T16707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.076138][T16752] netlink: 'syz.2.2842': attribute type 1 has an invalid length. [ 397.230650][T16752] 8021q: adding VLAN 0 to HW filter on device bond11 [ 397.258512][T16759] bond11: entered promiscuous mode [ 397.266431][T16759] bond11: entered allmulticast mode [ 397.297175][T16762] veth5: entered promiscuous mode [ 397.385458][T16746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.460624][T16768] xt_hashlimit: size too large, truncated to 1048576 [ 397.816874][T16784] vlan2: entered promiscuous mode [ 397.843594][T16784] bridge0: entered promiscuous mode [ 398.067348][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 398.103237][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 398.112117][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 398.121918][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 398.129819][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 398.147545][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 398.170172][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 398.180735][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 398.189786][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 398.198823][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 398.296160][T16793] lo speed is unknown, defaulting to 1000 [ 398.354704][T16793] lo speed is unknown, defaulting to 1000 [ 398.502456][T16807] __nla_validate_parse: 73 callbacks suppressed [ 398.502477][T16807] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2858'. [ 398.566083][ T5833] bond2: (slave syz_tun): Releasing backup interface [ 398.822182][T16819] tipc: Enabled bearer , priority 0 [ 398.831965][T16819] syzkaller0: entered promiscuous mode [ 398.837504][T16819] syzkaller0: entered allmulticast mode [ 398.879743][T16818] tipc: Resetting bearer [ 398.937820][T16818] tipc: Disabling bearer [ 399.012912][T16826] tipc: Enabling of bearer rejected, already enabled [ 399.219809][T16843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2869'. [ 399.276633][T16843] 8021q: adding VLAN 0 to HW filter on device bond7 [ 399.294120][T16793] virt_wifi0 speed is unknown, defaulting to 1000 [ 399.337563][T16843] macsec1: entered promiscuous mode [ 399.350124][T16843] bond7: entered promiscuous mode [ 399.387305][T16843] bond7: left promiscuous mode [ 399.541911][T16853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2873'. [ 399.586432][T16853] netlink: 'syz.4.2873': attribute type 2 has an invalid length. [ 399.594666][T16853] netlink: 'syz.4.2873': attribute type 1 has an invalid length. [ 399.603532][T16853] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2873'. [ 399.754087][T16793] chnl_net:caif_netlink_parms(): no params data found [ 399.799950][T16869] xt_hashlimit: size too large, truncated to 1048576 [ 399.838798][T16867] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 399.951611][T16870] –: renamed from vxcan1 [ 400.183259][T16793] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.201172][T16793] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.229880][T16793] bridge_slave_0: entered allmulticast mode [ 400.252166][T16793] bridge_slave_0: entered promiscuous mode [ 400.293309][T16793] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.301823][ T5844] Bluetooth: hci5: command tx timeout [ 400.310728][T16793] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.318060][T16793] bridge_slave_1: entered allmulticast mode [ 400.358240][T16793] bridge_slave_1: entered promiscuous mode [ 400.504893][T16793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.544227][T16793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.657687][T16793] team0: Port device team_slave_0 added [ 400.683405][T16793] team0: Port device team_slave_1 added [ 400.792953][T16793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.811121][T16793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.841056][T16906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.866147][T16793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.890418][T16793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.897531][T16793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.960169][T16793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.040663][T16793] hsr_slave_0: entered promiscuous mode [ 401.051927][T16793] hsr_slave_1: entered promiscuous mode [ 401.065271][T16793] debugfs: 'hsr0' already exists in 'hsr' [ 401.084354][T16793] Cannot create hsr debugfs directory [ 401.252840][T16915] netlink: 'syz.1.2890': attribute type 10 has an invalid length. [ 401.288913][T16915] team0: Port device dummy0 added [ 401.385592][T16793] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.397662][T16793] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 401.478071][T16919] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2891'. [ 401.497959][T16793] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.509378][T16793] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 401.577073][T16793] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.587457][T16793] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 401.700184][T16925] lo speed is unknown, defaulting to 1000 [ 401.707278][T16925] lo speed is unknown, defaulting to 1000 [ 401.725634][T16793] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.736183][T16793] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 401.965339][T16793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 401.992878][T16793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 402.018627][T16793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 402.066269][T16793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 402.178165][T16945] No such timeout policy "syz0" [ 402.272274][T16793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.296376][T16793] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.321207][T14502] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.328542][T14502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.377585][T14502] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.384826][T14502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.397331][ T5844] Bluetooth: hci5: command tx timeout [ 402.796754][T16973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2904'. [ 404.010157][T16925] virt_wifi0 speed is unknown, defaulting to 1000 [ 404.292617][T16793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.410878][T16793] veth0_vlan: entered promiscuous mode [ 404.451600][T16793] veth1_vlan: entered promiscuous mode [ 404.458930][ T5844] Bluetooth: hci5: command tx timeout [ 404.543810][T16793] veth0_macvtap: entered promiscuous mode [ 404.583375][T16793] veth1_macvtap: entered promiscuous mode [ 404.592770][T16994] lo speed is unknown, defaulting to 1000 [ 404.610941][T16994] lo speed is unknown, defaulting to 1000 [ 404.634063][T16793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.655031][T16793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.672409][ T1155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.690506][ T1155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.735138][ T1155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.745365][ T1155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.853923][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.883016][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.930017][ T443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.939130][ T443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.199900][T16998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2910'. [ 405.523721][T17012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2915'. [ 405.603997][T17010] veth1: entered promiscuous mode [ 405.624772][T17010] veth1: entered allmulticast mode [ 405.740572][T17021] netlink: 'syz.4.2918': attribute type 13 has an invalid length. [ 405.954388][T17030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'. [ 406.047572][T16994] virt_wifi0 speed is unknown, defaulting to 1000 [ 406.494870][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 406.506278][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.515598][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.524225][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.532175][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 406.539524][ T5840] Bluetooth: hci5: command tx timeout [ 407.020210][T17063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2930'. [ 407.080785][T17054] lo speed is unknown, defaulting to 1000 [ 407.090131][T17059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2928'. [ 407.120859][T17054] lo speed is unknown, defaulting to 1000 [ 407.646960][T14502] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 407.747708][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 407.801902][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 407.895241][T14502] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 407.970524][T17086] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 407.988812][ T1006] bridge_slave_1: left allmulticast mode [ 407.998884][T17086] netlink: 'syz.3.2937': attribute type 3 has an invalid length. [ 408.016920][ T1006] bridge_slave_1: left promiscuous mode [ 408.039061][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.071577][ T1006] ¾x9ÿ: left allmulticast mode [ 408.077184][ T1006] ¾x9ÿ: left promiscuous mode [ 408.113802][ T1006] bridge0: port 1(1¾x9ÿ) entered disabled state [ 408.206907][ T1006] dvmrp0: left allmulticast mode [ 408.325440][ T1006] ip6gretap0 (unregistering): left promiscuous mode [ 408.363351][ T1006] bond4 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 408.373484][ T1006] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 408.395754][ T1006] bond11 (unregistering): (slave ip6gre1): Releasing backup interface [ 408.573837][ T1006] gretap0 (unregistering): left promiscuous mode [ 408.605122][ T1006] bond6 (unregistering): (slave gretap1): Releasing active interface [ 408.613395][ T1006] bond6 (unregistering): (slave gretap1): the permanent HWaddr of slave - ca:a3:38:16:92:9a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 408.632061][ T5844] Bluetooth: hci2: command tx timeout [ 409.172814][ T1006] bond1 (unregistering): Released all slaves [ 409.189385][ T1006] bond2 (unregistering): Released all slaves [ 409.206428][ T1006] bond3 (unregistering): Released all slaves [ 409.222980][ T1006] bond4 (unregistering): Released all slaves [ 409.237413][ T1006] bond5 (unregistering): Released all slaves [ 409.261532][ T1006] bond6 (unregistering): (slave veth15): Releasing active interface [ 409.279021][ T1006] bond6 (unregistering): Released all slaves [ 409.293693][ T1006] bond7 (unregistering): Released all slaves [ 409.309271][ T1006] bond8 (unregistering): Released all slaves [ 409.324554][ T1006] bond0 (unregistering): left promiscuous mode [ 409.334035][ T1006] batadv1: left promiscuous mode [ 409.341950][ T1006] bond0 (unregistering): (slave batadv1): Releasing active interface [ 409.353272][ T1006] bond0 (unregistering): Released all slaves [ 409.369825][ T1006] bond9 (unregistering): Released all slaves [ 409.384539][ T1006] bond10 (unregistering): Released all slaves [ 409.398802][ T1006] bond11 (unregistering): Released all slaves [ 409.415667][ T1006] bond12 (unregistering): Released all slaves [ 409.435573][T17094] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2939'. [ 409.734467][ T1006] tipc: Disabling bearer [ 409.751028][ T1006] tipc: Disabling bearer [ 409.847980][ T1006] tipc: Left network mode [ 410.076227][T17054] virt_wifi0 speed is unknown, defaulting to 1000 [ 410.698784][ T5844] Bluetooth: hci2: command tx timeout [ 410.775581][T17162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2952'. [ 410.793013][T17162] tipc: Invalid UDP bearer configuration [ 410.793068][T17162] tipc: Enabling of bearer rejected, failed to enable media [ 410.817938][T17168] netlink: 'syz.0.2952': attribute type 1 has an invalid length. [ 410.831562][T17168] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2952'. [ 411.086147][T17054] chnl_net:caif_netlink_parms(): no params data found [ 411.457382][T17186] netlink: 'syz.0.2955': attribute type 1 has an invalid length. [ 411.488531][T17186] netlink: 280 bytes leftover after parsing attributes in process `syz.0.2955'. [ 411.693313][T17194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2956'. [ 411.758554][T17054] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.798531][T17054] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.805862][T17054] bridge_slave_0: entered allmulticast mode [ 411.880454][T17054] bridge_slave_0: entered promiscuous mode [ 411.928926][T17054] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.936109][T17054] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.953855][T17054] bridge_slave_1: entered allmulticast mode [ 412.010135][T17054] bridge_slave_1: entered promiscuous mode [ 412.272116][T17054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.336479][T17054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.521479][ T1006] batadv0: left promiscuous mode [ 412.554802][ T1006] macsec0: left allmulticast mode [ 412.560329][ T1006] veth1_macvtap: left allmulticast mode [ 412.778755][ T5850] Bluetooth: hci2: command tx timeout [ 412.864102][ T1006] team0 (unregistering): Port device team_slave_1 removed [ 412.885579][ T1006] team0 (unregistering): Port device team_slave_0 removed [ 413.029449][T17222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2961'. [ 413.090330][ T1006] team0 (unregistering): Port device dummy0 removed [ 413.135579][T17054] team0: Port device team_slave_0 added [ 413.216571][ T7462] lo speed is unknown, defaulting to 1000 [ 413.236373][T17054] team0: Port device team_slave_1 added [ 413.242293][ T7462] infiniband syz2: ib_query_port failed (-19) [ 413.371732][T17054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.390573][T17054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.439651][T17054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.470909][T17054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.477910][T17054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.547748][T17054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.585715][T17241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2966'. [ 413.769162][T17054] hsr_slave_0: entered promiscuous mode [ 413.785112][T17054] hsr_slave_1: entered promiscuous mode [ 413.807042][T17054] debugfs: 'hsr0' already exists in 'hsr' [ 413.822470][T17054] Cannot create hsr debugfs directory [ 413.903763][T17251] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2967'. [ 414.085501][T17259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.256643][T17264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2971'. [ 414.434992][T17054] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 414.586596][T17054] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 414.762666][T17054] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 414.794934][T17287] macvtap0: entered promiscuous mode [ 414.801844][T17287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2978'. [ 414.860146][ T5850] Bluetooth: hci2: command tx timeout [ 414.882121][T17287] macvtap0 (unregistering): left promiscuous mode [ 414.989926][T17054] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 415.029683][T17298] netlink: 'syz.3.2980': attribute type 5 has an invalid length. [ 415.344930][T17054] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 415.403252][T17054] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 415.424819][T17054] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 415.546252][T17318] netlink: 'syz.3.2984': attribute type 16 has an invalid length. [ 415.566458][T17318] netlink: 'syz.3.2984': attribute type 17 has an invalid length. [ 415.819930][T17318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.858628][T17054] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 416.042283][T17345] bridge0: port 1(veth0_to_bridge) entered blocking state [ 416.058827][T17345] bridge0: port 1(veth0_to_bridge) entered disabled state [ 416.076395][T17345] veth0_to_bridge: entered allmulticast mode [ 416.088268][T17345] veth0_to_bridge: entered promiscuous mode [ 416.156085][T17054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.222293][T17054] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.255247][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.262479][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.279483][T17356] netlink: 'syz.1.2993': attribute type 6 has an invalid length. [ 416.290524][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.297755][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.431377][T17054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 416.569973][T17370] lo speed is unknown, defaulting to 1000 [ 416.940962][T17054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.537220][T17406] syzkaller1: entered promiscuous mode [ 417.557292][T17406] syzkaller1: entered allmulticast mode [ 417.712657][T17054] veth0_vlan: entered promiscuous mode [ 417.730046][T17370] virt_wifi0 speed is unknown, defaulting to 1000 [ 417.853627][T17054] veth1_vlan: entered promiscuous mode [ 417.873377][T17414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'. [ 417.897763][T17414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'. [ 417.943960][T17414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'. [ 417.998877][T17414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'. [ 418.008272][T17414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'. [ 418.070996][T17054] veth0_macvtap: entered promiscuous mode [ 418.171571][T17054] veth1_macvtap: entered promiscuous mode [ 418.282350][T17054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.327349][T17426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.372309][T17054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.455218][T14502] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.510991][T14502] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.551729][T14502] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.596065][T17434] netlink: 'syz.2.3005': attribute type 1 has an invalid length. [ 418.628556][T14502] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.791191][T17434] 8021q: adding VLAN 0 to HW filter on device bond13 [ 418.943301][T17443] bond13: (slave veth11): Enslaving as an active interface with a down link [ 419.005341][T17453] FAULT_INJECTION: forcing a failure. [ 419.005341][T17453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.043988][T17453] CPU: 0 UID: 0 PID: 17453 Comm: syz.1.3008 Not tainted syzkaller #0 PREEMPT(full) [ 419.044017][T17453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.044031][T17453] Call Trace: [ 419.044039][T17453] [ 419.044048][T17453] dump_stack_lvl+0xe8/0x150 [ 419.044085][T17453] should_fail_ex+0x412/0x560 [ 419.044122][T17453] _copy_to_user+0x31/0xb0 [ 419.044150][T17453] put_timespec64+0xc8/0x130 [ 419.044179][T17453] ? __pfx_put_timespec64+0x10/0x10 [ 419.044218][T17453] poll_select_finish+0x4b5/0x630 [ 419.044253][T17453] ? __pfx_poll_select_finish+0x10/0x10 [ 419.044291][T17453] ? __pfx_set_user_sigmask+0x10/0x10 [ 419.044331][T17453] __se_sys_pselect6+0x27e/0x320 [ 419.044368][T17453] ? __pfx___se_sys_pselect6+0x10/0x10 [ 419.044397][T17453] ? __pfx_ksys_write+0x10/0x10 [ 419.044428][T17453] ? __x64_sys_pselect6+0x21/0xf0 [ 419.044460][T17453] do_syscall_64+0x14d/0xf80 [ 419.044485][T17453] ? trace_irq_disable+0x3b/0x150 [ 419.044515][T17453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.044537][T17453] ? clear_bhb_loop+0x40/0x90 [ 419.044564][T17453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.044586][T17453] RIP: 0033:0x7f88d639c799 [ 419.044612][T17453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.044630][T17453] RSP: 002b:00007f88d72f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 419.044652][T17453] RAX: ffffffffffffffda RBX: 00007f88d6615fa0 RCX: 00007f88d639c799 [ 419.044668][T17453] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 419.044682][T17453] RBP: 00007f88d72f5090 R08: 0000200000000280 R09: 0000000000000000 [ 419.044695][T17453] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 419.044708][T17453] R13: 00007f88d6616038 R14: 00007f88d6615fa0 R15: 00007ffe403fc9c8 [ 419.044740][T17453] [ 419.058214][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.287812][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.315274][T17456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3009'. [ 419.362008][T17456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3009'. [ 419.417806][T17457] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 419.425161][T17460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3010'. [ 419.443718][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.458474][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.573018][T17470] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 419.844113][T17487] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3016'. [ 420.306947][T17509] nftables ruleset with unbound set [ 420.324594][T17511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3023'. [ 420.370628][T17511] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 420.741993][T17533] netlink: 'syz.2.3029': attribute type 10 has an invalid length. [ 420.779645][T17534] netlink: 'syz.2.3029': attribute type 10 has an invalid length. [ 420.883504][T17533] bond0: (slave ): Releasing backup interface [ 420.990464][T17533] team0: Port device  added [ 421.048523][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 421.090921][T17528] lo speed is unknown, defaulting to 1000 [ 421.149238][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 421.165061][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 421.200028][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 421.218585][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 421.726883][ T5838] syz_tun (unregistering): left allmulticast mode [ 421.757127][ T5838] syz_tun (unregistering): left promiscuous mode [ 421.796696][ T5838] bridge0: port 2(syz_tun) entered disabled state [ 422.029744][T17547] lo speed is unknown, defaulting to 1000 [ 422.387733][T17586] netlink: 'syz.3.3039': attribute type 4 has an invalid length. [ 422.404601][T17585] netlink: 'syz.3.3039': attribute type 4 has an invalid length. [ 422.572791][T17528] virt_wifi0 speed is unknown, defaulting to 1000 [ 422.677489][T17595] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 422.687560][T17595] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 422.997888][T17547] virt_wifi0 speed is unknown, defaulting to 1000 [ 423.011365][T17611] __nla_validate_parse: 7 callbacks suppressed [ 423.011386][T17611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3047'. [ 423.028999][T17611] openvswitch: netlink: Message has 2 unknown bytes. [ 423.258792][ T5850] Bluetooth: hci3: command tx timeout [ 423.369499][T17611] lo speed is unknown, defaulting to 1000 [ 423.732861][T17622] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 423.855406][T17622] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 423.960029][T17622] tipc: Resetting bearer [ 423.992579][T17656] IPVS: sync thread started: state = MASTER, mcast_ifn = ip_vti0, syncid = 4, id = 0 [ 424.225014][T17662] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3051'. [ 424.259396][T17662] netlink: 732 bytes leftover after parsing attributes in process `syz.1.3051'. [ 424.282693][T17547] chnl_net:caif_netlink_parms(): no params data found [ 424.292742][T17662] netlink: 732 bytes leftover after parsing attributes in process `syz.1.3051'. [ 424.421789][T17667] sctp: [Deprecated]: syz.2.3052 (pid 17667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.421789][T17667] Use struct sctp_sack_info instead [ 424.512964][T17547] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.529265][T17547] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.539982][T17547] bridge_slave_0: entered allmulticast mode [ 424.571678][T17547] bridge_slave_0: entered promiscuous mode [ 424.589590][T17547] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.603120][T17547] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.614029][T17547] bridge_slave_1: entered allmulticast mode [ 424.626669][T17547] bridge_slave_1: entered promiscuous mode [ 424.699715][T17547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.726646][T17547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.814952][T17547] team0: Port device team_slave_0 added [ 424.827078][T17611] virt_wifi0 speed is unknown, defaulting to 1000 [ 424.838913][T17547] team0: Port device team_slave_1 added [ 424.917092][T17547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.924276][T17547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.952194][T17547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.966749][T17677] Cannot find set identified by id 0 to match [ 424.992784][T17547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.999990][T17547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.028592][T17680] nbd1: detected capacity change from 0 to 63 [ 425.035466][T17677] netlink: 'syz.4.3056': attribute type 1 has an invalid length. [ 425.046992][T17677] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3056'. [ 425.056694][T17547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.070633][ T5850] block nbd1: Receive control failed (result -104) [ 425.208114][T17547] hsr_slave_0: entered promiscuous mode [ 425.214940][T17547] hsr_slave_1: entered promiscuous mode [ 425.222735][T17547] debugfs: 'hsr0' already exists in 'hsr' [ 425.230048][T17547] Cannot create hsr debugfs directory [ 425.348553][ T5850] Bluetooth: hci3: command tx timeout [ 425.521756][T17697] openvswitch: netlink: Invalid VLAN frame [ 425.551369][ T30] audit: type=1107 audit(1774442209.648:14): pid=17698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 426.157047][T17547] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 426.264982][T17547] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 426.276377][T17547] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 426.289515][T17547] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 426.442643][T17547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.488162][T17723] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3063'. [ 426.513527][T17723] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 426.536550][T17547] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.550841][T17645] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.558003][T17645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.600235][T17724] syzkaller0: entered promiscuous mode [ 426.606517][T17724] syzkaller0: entered allmulticast mode [ 426.650618][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.657804][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.878201][T17735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.966227][T17733] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 426.997827][T17733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3066'. [ 427.009585][T17733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3066'. [ 427.067658][T17547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.163268][T17547] veth0_vlan: entered promiscuous mode [ 427.193369][T17547] veth1_vlan: entered promiscuous mode [ 427.295861][T17547] veth0_macvtap: entered promiscuous mode [ 427.310022][T17547] veth1_macvtap: entered promiscuous mode [ 427.335384][T17547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.351828][T17547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.371914][ T106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.399262][ T106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.418791][ T5850] Bluetooth: hci3: command tx timeout [ 427.433468][ T106] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.446724][T17751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3071'. [ 427.464365][ T106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.587615][T17754] tipc: Resetting bearer [ 427.899624][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.909855][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.994065][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.003362][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.016508][T17765] team_slave_0: entered promiscuous mode [ 428.022253][T17765] team_slave_1: entered promiscuous mode [ 428.060695][T17765] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 428.081450][T17768] openvswitch: netlink: IP tunnel dst address not specified [ 428.267072][T17772] pim6reg: entered allmulticast mode [ 428.292790][T17772] pim6reg: left allmulticast mode [ 428.717810][T17800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3083'. [ 429.017296][T17807] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3087'. [ 429.268225][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 429.277060][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 429.289570][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 429.297622][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 429.305699][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 429.487288][T17810] lo speed is unknown, defaulting to 1000 [ 429.498922][ T5850] Bluetooth: hci3: command tx timeout [ 429.856417][T17827] syzkaller0: entered promiscuous mode [ 429.880902][T17827] syzkaller0: entered allmulticast mode [ 430.170063][T17845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3099'. [ 430.185835][T17645] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 430.221420][T17645] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 430.323793][T17853] netlink: 'syz.3.3101': attribute type 30 has an invalid length. [ 430.336649][T17645] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 430.382862][ T1155] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 430.432495][T17845] veth3: entered promiscuous mode [ 430.527661][T17853] bond1: option arp_missed_max: invalid value (0) [ 430.534517][T17853] bond1: option arp_missed_max: allowed values 1 - 255 [ 430.550899][T17853] bond1 (unregistering): Released all slaves [ 430.582924][ T106] veth0_to_bridge: left allmulticast mode [ 430.589301][ T106] veth0_to_bridge: left promiscuous mode [ 430.595392][ T106] bridge0: port 1(veth0_to_bridge) entered disabled state [ 430.696423][ T106] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 430.962433][ T106] bond0 (unregistering): (slave 30): Releasing backup interface [ 430.972761][ T106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.982524][ T106] bond0 (unregistering): Released all slaves [ 430.996177][ T106] bond1 (unregistering): Released all slaves [ 431.011501][ T106] bond2 (unregistering): Released all slaves [ 431.027265][ T106] bond3 (unregistering): Released all slaves [ 431.045913][ T106] bond4 (unregistering): (slave macvlan3): Releasing backup interface [ 431.065440][ T106] bond4 (unregistering): Released all slaves [ 431.081109][ T106] bond5 (unregistering): Released all slaves [ 431.096009][ T106] bond6 (unregistering): Released all slaves [ 431.114149][T17810] virt_wifi0 speed is unknown, defaulting to 1000 [ 431.258131][ T106] l24): left promiscuous mode [ 431.339863][ T5850] Bluetooth: hci4: command tx timeout [ 431.361450][T17870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3106'. [ 431.413679][ T106] tipc: Disabling bearer [ 431.477433][ T106] tipc: Disabling bearer [ 431.504647][ T106] tipc: Disabling bearer [ 431.529356][ T106] tipc: Left network mode [ 431.542714][T17877] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3110'. [ 431.591338][T17877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3110'. [ 431.652249][T17877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3110'. [ 432.662678][T17943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3121'. [ 432.907470][T17943] geneve2: entered promiscuous mode [ 432.969512][T17912] delete_channel: no stack [ 433.002726][T17810] chnl_net:caif_netlink_parms(): no params data found [ 433.176429][T17948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3124'. [ 433.187124][T17953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3122'. [ 433.403598][T17969] x_tables: duplicate underflow at hook 1 [ 433.418818][ T5850] Bluetooth: hci4: command tx timeout [ 433.531658][T17810] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.559556][T17810] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.577934][T17810] bridge_slave_0: entered allmulticast mode [ 433.586414][T17810] bridge_slave_0: entered promiscuous mode [ 433.607879][T17965] vcan1: entered promiscuous mode [ 433.613067][T17965] vcan1: entered allmulticast mode [ 433.626598][T17979] netlink: 'syz.3.3127': attribute type 11 has an invalid length. [ 433.746611][T17810] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.788935][T17810] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.803448][T17810] bridge_slave_1: entered allmulticast mode [ 433.829198][T17810] bridge_slave_1: entered promiscuous mode [ 434.010739][T17987] veth2: entered allmulticast mode [ 434.070334][T18001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3134'. [ 434.136576][T17810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.228883][T17810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.503622][T17810] team0: Port device team_slave_0 added [ 434.511351][T18004] lo speed is unknown, defaulting to 1000 [ 434.532887][T17810] team0: Port device team_slave_1 added [ 434.751260][T17810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.758746][T17810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.805377][T17810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.880633][T17810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.890927][T17810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.964810][T17810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.026686][T18032] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3140'. [ 435.120046][T17810] hsr_slave_0: entered promiscuous mode [ 435.142602][T17810] hsr_slave_1: entered promiscuous mode [ 435.166939][T17810] debugfs: 'hsr0' already exists in 'hsr' [ 435.172901][T17810] Cannot create hsr debugfs directory [ 435.219916][T18040] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3141'. [ 435.508412][ T5850] Bluetooth: hci4: command tx timeout [ 435.554545][T17810] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 435.617995][T18053] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3143'. [ 435.656057][T18053] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3143'. [ 435.753276][T17810] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 435.786371][T18056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3144'. [ 435.848001][T18004] virt_wifi0 speed is unknown, defaulting to 1000 [ 435.871051][T17810] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 436.066248][T17810] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 436.156542][T18062] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 436.557102][ T106] hsr_slave_0: left promiscuous mode [ 436.576852][ T106] hsr_slave_1: left promiscuous mode [ 436.981351][ T106] team0 (unregistering): Port device team_slave_1 removed [ 437.036351][ T106] team0 (unregistering): Port device team_slave_0 removed [ 437.293699][ T106] team0 (unregistering): Port device dummy0 removed [ 437.445439][T18108] netlink: 1084 bytes leftover after parsing attributes in process `syz.3.3155'. [ 437.546090][T18114] netlink: 'syz.2.3156': attribute type 28 has an invalid length. [ 437.579280][ T5850] Bluetooth: hci4: command tx timeout [ 437.681107][T17810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 437.816652][T17810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 437.909551][T17810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 438.011057][T17810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 438.312229][ T106] IPVS: stop unused estimator thread 0... [ 438.362239][T18155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3161'. [ 438.389875][T17810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.485107][T17810] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.559817][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.567036][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.692891][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.700134][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.739676][T18171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3164'. [ 438.843871][T18175] netlink: 'syz.3.3165': attribute type 1 has an invalid length. [ 438.942768][T18173] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 439.006840][T18184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3167'. [ 439.016269][T18183] netlink: 'syz.4.3166': attribute type 2 has an invalid length. [ 439.044769][T18173] bond1 (unregistering): Released all slaves [ 439.197631][T18180] __nla_validate_parse: 1 callbacks suppressed [ 439.197654][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3166'. [ 439.572845][T18204] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3171'. [ 439.639289][T18205] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 439.672576][T18205] syzkaller1: Linktype set failed because interface is up [ 439.728670][ T5841] syzkaller1: tun_net_xmit 90 [ 439.953065][T18216] lo speed is unknown, defaulting to 1000 [ 439.987830][T18223] netlink: 'syz.2.3175': attribute type 10 has an invalid length. [ 440.036277][T18223] team0: Device – is of different type [ 440.285376][T17810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.611058][T18243] bond14: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 440.652301][T18243] bond14 (unregistering): Released all slaves [ 440.797507][T17810] veth0_vlan: entered promiscuous mode [ 441.034868][T18259] lo speed is unknown, defaulting to 1000 [ 441.082462][T18256] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3179'. [ 441.124653][T17810] veth1_vlan: entered promiscuous mode [ 441.285579][T17810] veth0_macvtap: entered promiscuous mode [ 441.318034][T17810] veth1_macvtap: entered promiscuous mode [ 441.397067][T17810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.409990][T18263] Cannot find set identified by id 0 to match [ 441.449867][T18273] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3181'. [ 441.470053][T17810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.521087][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.547895][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.616069][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.636611][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.686271][T18276] netlink: 'syz.2.3182': attribute type 1 has an invalid length. [ 441.707457][T18276] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3182'. [ 442.109369][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.132587][T18216] virt_wifi0 speed is unknown, defaulting to 1000 [ 442.151915][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.352677][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.381002][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.818595][T18313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3189'. [ 443.151050][T18323] netlink: 'syz.1.3192': attribute type 11 has an invalid length. [ 443.178088][T18323] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 443.192622][T18259] virt_wifi0 speed is unknown, defaulting to 1000 [ 443.212242][T18324] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 443.453360][T18332] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3194'. [ 443.467295][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 443.477577][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 443.496251][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 443.517315][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 443.528956][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 444.348069][T18331] lo speed is unknown, defaulting to 1000 [ 445.661499][ T5850] Bluetooth: hci1: command tx timeout [ 447.740502][ T5850] Bluetooth: hci1: command tx timeout [ 447.767658][T18331] virt_wifi0 speed is unknown, defaulting to 1000 [ 447.827647][T18425] syzkaller0: entered promiscuous mode [ 447.855354][T18425] syzkaller0: entered allmulticast mode [ 447.943394][T18439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3207'. [ 448.001220][T18438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3207'. [ 448.308144][T18451] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3210'. [ 448.707879][T18331] chnl_net:caif_netlink_parms(): no params data found [ 448.832936][T18475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3214'. [ 449.146884][T18486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3214'. [ 449.433941][T18497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3217'. [ 449.449607][T18331] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.484063][T18331] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.529885][T18331] bridge_slave_0: entered allmulticast mode [ 449.564053][T18331] bridge_slave_0: entered promiscuous mode [ 449.597862][T18331] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.659602][T18331] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.690356][T18331] bridge_slave_1: entered allmulticast mode [ 449.707731][T18331] bridge_slave_1: entered promiscuous mode [ 449.732544][T18505] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3219'. [ 449.805395][T18331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.821145][ T5850] Bluetooth: hci1: command tx timeout [ 449.842937][T18331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.954428][T18331] team0: Port device team_slave_0 added [ 449.965765][T18511] netlink: 'syz.1.3223': attribute type 16 has an invalid length. [ 449.981895][T18331] team0: Port device team_slave_1 added [ 449.987618][T18511] netlink: 'syz.1.3223': attribute type 17 has an invalid length. [ 449.996095][T18512] netlink: 'syz.4.3220': attribute type 2 has an invalid length. [ 450.010781][T18515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3222'. [ 450.219913][T18331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.226930][T18331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.257277][T18331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.273191][T18331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.280389][T18331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.307272][T18331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.394136][T18331] hsr_slave_0: entered promiscuous mode [ 450.453127][T18331] hsr_slave_1: entered promiscuous mode [ 450.474091][T18331] debugfs: 'hsr0' already exists in 'hsr' [ 450.498566][T18331] Cannot create hsr debugfs directory [ 450.745231][T18535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3229'. [ 450.785065][T18535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3229'. [ 451.113834][T18547] netlink: 'syz.3.3234': attribute type 8 has an invalid length. [ 451.321189][T18560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.570392][T18570] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 451.721941][T18331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 451.751374][T18331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 451.782346][T18331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 451.898694][ T5850] Bluetooth: hci1: command tx timeout [ 451.984602][T18331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 452.100090][ T10] IPVS: starting estimator thread 0... [ 452.209007][T18600] IPVS: using max 27 ests per chain, 64800 per kthread [ 452.499803][T18331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.526799][T18616] syzkaller0: entered promiscuous mode [ 452.548966][T18616] syzkaller0: entered allmulticast mode [ 452.592577][T18616] bond0: entered promiscuous mode [ 452.597702][T18616] bond_slave_0: entered promiscuous mode [ 452.604052][T18616] bond_slave_1: entered promiscuous mode [ 452.639265][T18616] ipvlan1: entered promiscuous mode [ 452.645930][T18616] ipvlan1: left promiscuous mode [ 452.673449][T18616] bond0: left promiscuous mode [ 452.689138][T18616] bond_slave_0: left promiscuous mode [ 452.694778][T18616] bond_slave_1: left promiscuous mode [ 452.743079][T18331] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.788122][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.795454][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.951605][T18641] __nla_validate_parse: 8 callbacks suppressed [ 452.951624][T18641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3260'. [ 452.967985][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.975198][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.008477][T18640] netlink: 'syz.0.3259': attribute type 3 has an invalid length. [ 453.036869][T18640] netlink: 'syz.0.3259': attribute type 3 has an invalid length. [ 453.553839][T18668] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3269'. [ 453.705193][T18670] 8021q: VLANs not supported on bond0 [ 453.721932][T18668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3269'. [ 453.748847][T18672] vlan3: entered promiscuous mode [ 453.758809][T18672] vlan3: entered allmulticast mode [ 453.763967][T18672] hsr_slave_1: entered allmulticast mode [ 453.803247][T18668] veth1_vlan: Device is already in use. [ 453.865852][T18331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.014240][T18331] veth0_vlan: entered promiscuous mode [ 454.055266][T18331] veth1_vlan: entered promiscuous mode [ 454.147627][T18331] veth0_macvtap: entered promiscuous mode [ 454.189442][T18331] veth1_macvtap: entered promiscuous mode [ 454.214380][T18331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.238104][T18331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.278970][T18690] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 454.285753][T18690] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 454.314199][ T1155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.354390][ T1155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.424663][ T1155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.443900][ T1155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.644317][T18703] syzkaller0: entered promiscuous mode [ 454.645896][T18702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3280'. [ 454.668397][T18703] syzkaller0: entered allmulticast mode [ 454.718794][T18698] veth0: entered promiscuous mode [ 454.744258][T17641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.777630][T17641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.827935][T18712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3280'. [ 454.889632][T18700] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3280'. [ 454.914571][T18700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3280'. [ 454.924281][T18715] IPVS: set_ctl: invalid protocol: 1 172.30.1.5:20001 [ 454.934067][T18700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3280'. [ 454.960607][T18697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 455.055215][T18696] veth0: left promiscuous mode [ 455.153840][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.175352][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.502675][ T5160] block nbd1: Possible stuck request ffff8880267f8000: control (read@0,1024B). Runtime 30 seconds [ 455.514899][ T5160] block nbd1: Possible stuck request ffff8880267f8200: control (read@1024,1024B). Runtime 30 seconds [ 455.526181][ T5160] block nbd1: Possible stuck request ffff8880267f8400: control (read@2048,1024B). Runtime 30 seconds [ 455.537837][ T5160] block nbd1: Possible stuck request ffff8880267f8600: control (read@3072,1024B). Runtime 30 seconds [ 455.859677][T18741] lo speed is unknown, defaulting to 1000 [ 456.125388][T18748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3289'. [ 457.177986][T18741] virt_wifi0 speed is unknown, defaulting to 1000 [ 458.145880][T18719] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.402260][T18765] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3292'. [ 458.952553][T18796] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3300'. [ 458.996714][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3300'. [ 459.017694][T18793] lo speed is unknown, defaulting to 1000 [ 459.060904][T18776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3297'. [ 459.163905][T18801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3303'. [ 459.291676][T18803] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20000 [ 459.653108][T18812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3305'. [ 459.692094][T18812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3305'. [ 459.717694][T18812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3305'. [ 460.180644][T18836] netlink: 'syz.2.3312': attribute type 6 has an invalid length. [ 460.193863][T18833] netlink: 'syz.3.3310': attribute type 1 has an invalid length. [ 460.233311][T18838] geneve2: entered promiscuous mode [ 460.253318][T18838] geneve2: entered allmulticast mode [ 460.425211][T18840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.519235][T18833] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 460.521249][T18848] FAULT_INJECTION: forcing a failure. [ 460.521249][T18848] name failslab, interval 1, probability 0, space 0, times 0 [ 460.553902][T18793] virt_wifi0 speed is unknown, defaulting to 1000 [ 460.618580][T18848] CPU: 1 UID: 0 PID: 18848 Comm: syz.1.3314 Not tainted syzkaller #0 PREEMPT(full) [ 460.618611][T18848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 460.618624][T18848] Call Trace: [ 460.618633][T18848] [ 460.618642][T18848] dump_stack_lvl+0xe8/0x150 [ 460.618678][T18848] should_fail_ex+0x412/0x560 [ 460.618715][T18848] should_failslab+0xa8/0x100 [ 460.618743][T18848] ? skb_clone+0x212/0x3a0 [ 460.618771][T18848] kmem_cache_alloc_noprof+0x87/0x650 [ 460.618793][T18848] ? __netlink_lookup+0xc6/0x8b0 [ 460.618825][T18848] skb_clone+0x212/0x3a0 [ 460.618857][T18848] __netlink_deliver_tap+0x404/0x850 [ 460.618892][T18848] ? netlink_deliver_tap+0x2e/0x1b0 [ 460.618917][T18848] netlink_deliver_tap+0x19c/0x1b0 [ 460.618950][T18848] netlink_unicast+0x7e3/0x9b0 [ 460.618993][T18848] ? __pfx_netlink_unicast+0x10/0x10 [ 460.619027][T18848] ? netlink_sendmsg+0x650/0xb40 [ 460.619046][T18848] ? skb_put+0x11b/0x210 [ 460.619075][T18848] netlink_sendmsg+0x813/0xb40 [ 460.619107][T18848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.619132][T18848] ? __fget_files+0x2a/0x420 [ 460.619163][T18848] ? aa_sock_msg_perm+0xf1/0x1b0 [ 460.619198][T18848] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 460.619224][T18848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.619248][T18848] __sys_sendto+0x672/0x710 [ 460.619275][T18848] ? __pfx___sys_sendto+0x10/0x10 [ 460.619296][T18848] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 460.619335][T18848] ? __fget_files+0x3a0/0x420 [ 460.619377][T18848] ? ksys_write+0x242/0x270 [ 460.619404][T18848] ? __pfx_ksys_write+0x10/0x10 [ 460.619433][T18848] __x64_sys_sendto+0xde/0x100 [ 460.619462][T18848] do_syscall_64+0x14d/0xf80 [ 460.619486][T18848] ? trace_irq_disable+0x3b/0x150 [ 460.619516][T18848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.619539][T18848] ? clear_bhb_loop+0x40/0x90 [ 460.619565][T18848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.619587][T18848] RIP: 0033:0x7f645619c799 [ 460.619608][T18848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.619625][T18848] RSP: 002b:00007f6457096028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 460.619647][T18848] RAX: ffffffffffffffda RBX: 00007f6456416090 RCX: 00007f645619c799 [ 460.619661][T18848] RDX: 000000000000004c RSI: 0000200000000080 RDI: 0000000000000004 [ 460.619674][T18848] RBP: 00007f6457096090 R08: 0000000000000000 R09: 0000000000000000 [ 460.619686][T18848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.619698][T18848] R13: 00007f6456416128 R14: 00007f6456416090 R15: 00007ffd1aa089b8 [ 460.619732][T18848] [ 461.532366][T18857] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3319'. [ 461.889855][T18878] Bluetooth: MGMT ver 1.23 [ 462.109358][T18889] netlink: 308 bytes leftover after parsing attributes in process `syz.1.3326'. [ 462.757781][T18921] sctp: [Deprecated]: syz.4.3335 (pid 18921) Use of struct sctp_assoc_value in delayed_ack socket option. [ 462.757781][T18921] Use struct sctp_sack_info instead [ 463.615277][T18963] netlink: 'syz.3.3345': attribute type 4 has an invalid length. [ 463.656908][T18969] __nla_validate_parse: 4 callbacks suppressed [ 463.656938][T18969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3347'. [ 463.725492][T18973] SET target dimension over the limit! [ 464.034415][T18945] scsi_nl_rcv_msg: discarding partial skb [ 464.918175][T19021] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3359'. [ 464.970498][T19024] netlink: 'syz.0.3361': attribute type 1 has an invalid length. [ 464.981007][T19027] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3360'. [ 464.995321][T19021] ksmbd: Unknown IPC event: 1, ignore. [ 465.230671][T19038] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3363'. [ 465.265758][T19030] 8021q: adding VLAN 0 to HW filter on device bond2 [ 465.276702][T19030] bond1: (slave bond2): making interface the new active one [ 465.287832][T19030] bond1: (slave bond2): Enslaving as an active interface with an up link [ 465.333673][T19024] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 465.536332][T19054] veth0: entered promiscuous mode [ 465.685079][T19063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3367'. [ 465.725283][T19058] bond0: entered promiscuous mode [ 465.741038][T19058] bond_slave_0: entered promiscuous mode [ 465.754834][T19058] bond_slave_1: entered promiscuous mode [ 465.868841][T19053] bond0: left promiscuous mode [ 465.879622][T19053] bond_slave_0: left promiscuous mode [ 465.889230][T19053] bond_slave_1: left promiscuous mode [ 465.907092][T19053] veth0: left promiscuous mode [ 466.190416][T19081] netlink: 'syz.1.3373': attribute type 1 has an invalid length. [ 466.343863][T19094] : renamed from veth0_to_bond (while UP) [ 466.704620][T19106] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3380'. [ 466.842387][T19116] syzkaller1: entered promiscuous mode [ 466.892661][T19116] syzkaller1: entered allmulticast mode [ 467.365824][T19152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3387'. [ 467.407001][T19152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3387'. [ 467.456947][T19152] netlink: 'syz.0.3387': attribute type 18 has an invalid length. [ 467.774786][T19165] netlink: 'syz.1.3392': attribute type 58 has an invalid length. [ 468.574081][T19193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3401'. [ 469.033738][T19227] macsec1: entered promiscuous mode [ 469.053161][T19227] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 469.777961][T19257] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 469.873687][T19265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3421'. [ 469.911959][T19267] delete_channel: no stack [ 469.930987][T19268] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3422'. [ 470.171323][T19277] netlink: 'syz.4.3424': attribute type 2 has an invalid length. [ 470.239897][T19277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3424'. [ 470.550420][T19288] syzkaller0: entered promiscuous mode [ 470.564250][T19301] netlink: 'syz.4.3429': attribute type 4 has an invalid length. [ 470.566248][T19288] syzkaller0: entered allmulticast mode [ 470.593063][T19299] tipc: Started in network mode [ 470.605359][T19299] tipc: Node identity e289aca22057, cluster identity 4711 [ 470.635189][T19297] netlink: 'syz.4.3429': attribute type 4 has an invalid length. [ 470.658238][T19299] tipc: Enabled bearer , priority 0 [ 470.744973][T19302] syzkaller0: entered promiscuous mode [ 470.751088][T19302] syzkaller0: entered allmulticast mode [ 470.757574][T19302] tipc: Resetting bearer [ 470.915367][T19307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.991445][T19310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3432'. [ 471.005098][T19310] openvswitch: netlink: Flow actions attr not present in new flow. [ 473.294246][T19289] tipc: Resetting bearer [ 475.084178][T19289] tipc: Disabling bearer [ 475.102534][T19313] FAULT_INJECTION: forcing a failure. [ 475.102534][T19313] name failslab, interval 1, probability 0, space 0, times 0 [ 475.118079][ T5913] tipc: Node number set to 3269373090 [ 475.125603][T19313] CPU: 0 UID: 0 PID: 19313 Comm: syz.3.3433 Not tainted syzkaller #0 PREEMPT(full) [ 475.125631][T19313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 475.125645][T19313] Call Trace: [ 475.125654][T19313] [ 475.125663][T19313] dump_stack_lvl+0xe8/0x150 [ 475.125708][T19313] should_fail_ex+0x412/0x560 [ 475.125745][T19313] should_failslab+0xa8/0x100 [ 475.125772][T19313] ? skb_clone+0x212/0x3a0 [ 475.125800][T19313] kmem_cache_alloc_noprof+0x87/0x650 [ 475.125833][T19313] skb_clone+0x212/0x3a0 [ 475.125864][T19313] __netlink_deliver_tap+0x404/0x850 [ 475.125900][T19313] ? netlink_deliver_tap+0x2e/0x1b0 [ 475.125925][T19313] netlink_deliver_tap+0x19c/0x1b0 [ 475.125949][T19313] netlink_sendskb+0x68/0x140 [ 475.125984][T19313] netlink_unicast+0x3a3/0x9b0 [ 475.126024][T19313] ? __pfx_netlink_unicast+0x10/0x10 [ 475.126066][T19313] netlink_rcv_skb+0x2b6/0x4b0 [ 475.126089][T19313] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 475.126113][T19313] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 475.126147][T19313] ? netlink_deliver_tap+0x2e/0x1b0 [ 475.126177][T19313] netlink_unicast+0x80f/0x9b0 [ 475.126218][T19313] ? __pfx_netlink_unicast+0x10/0x10 [ 475.126251][T19313] ? netlink_sendmsg+0x650/0xb40 [ 475.126271][T19313] ? skb_put+0x11b/0x210 [ 475.126299][T19313] netlink_sendmsg+0x813/0xb40 [ 475.126331][T19313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.126358][T19313] ? aa_sock_msg_perm+0xf1/0x1b0 [ 475.126410][T19313] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 475.126439][T19313] ____sys_sendmsg+0x972/0x9f0 [ 475.126476][T19313] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.126514][T19313] ? import_iovec+0x73/0xa0 [ 475.126541][T19313] ___sys_sendmsg+0x2a5/0x360 [ 475.126575][T19313] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.126642][T19313] ? __fget_files+0x2a/0x420 [ 475.126672][T19313] ? __fget_files+0x3a0/0x420 [ 475.126722][T19313] __x64_sys_sendmsg+0x1bd/0x2a0 [ 475.126753][T19313] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 475.126791][T19313] ? __pfx_ksys_write+0x10/0x10 [ 475.126829][T19313] do_syscall_64+0x14d/0xf80 [ 475.126854][T19313] ? trace_irq_disable+0x3b/0x150 [ 475.126885][T19313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.126908][T19313] ? clear_bhb_loop+0x40/0x90 [ 475.126934][T19313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.126957][T19313] RIP: 0033:0x7f15a7b9c799 [ 475.126978][T19313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.126998][T19313] RSP: 002b:00007f15a8a71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.127021][T19313] RAX: ffffffffffffffda RBX: 00007f15a7e16090 RCX: 00007f15a7b9c799 [ 475.127037][T19313] RDX: 0000000004008040 RSI: 0000200000000280 RDI: 0000000000000003 [ 475.127051][T19313] RBP: 00007f15a8a71090 R08: 0000000000000000 R09: 0000000000000000 [ 475.127064][T19313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.127077][T19313] R13: 00007f15a7e16128 R14: 00007f15a7e16090 R15: 00007ffdc91a8b88 [ 475.127112][T19313] [ 475.437465][T19328] vlan2: entered promiscuous mode [ 475.442753][T19328] vlan0: entered promiscuous mode [ 475.769282][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3439'. [ 475.830574][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3439'. [ 475.913509][ T1155] tipc: Subscription rejected, illegal request [ 476.032001][T19346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3443'. [ 476.112804][T19346] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 476.306313][ T30] audit: type=1804 audit(1774442260.398:15): pid=19361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3446" name="/newroot/101/memory.events" dev="tmpfs" ino=532 res=1 errno=0 [ 476.336964][T19355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3445'. [ 476.361457][T19355] netlink: 'syz.0.3445': attribute type 20 has an invalid length. [ 476.381122][T19355] netlink: 'syz.0.3445': attribute type 21 has an invalid length. [ 476.641588][T19379] netlink: 'syz.2.3449': attribute type 13 has an invalid length. [ 476.649177][T19380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3450'. [ 476.665063][T19381] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3451'. [ 476.705606][T19383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3449'. [ 476.727959][T19385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3452'. [ 476.891492][T19385] bond3: entered promiscuous mode [ 476.918166][T19385] 8021q: adding VLAN 0 to HW filter on device bond3 [ 477.001499][T19385] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3452'. [ 477.443931][T19389] 8021q: adding VLAN 0 to HW filter on device bond3 [ 477.451332][T19389] bond3: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 477.463570][T19389] bond3: (slave ip6tnl1): Error -95 calling set_mac_address [ 477.712111][T19407] dummy0: entered promiscuous mode [ 477.717426][T19407] vlan4: entered promiscuous mode [ 477.864163][T19413] Cannot find set identified by id 65534 to match [ 478.604355][T19411] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 478.784204][T19433] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20003 [ 480.144324][T19398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.158678][T19422] netlink: 'syz.3.3461': attribute type 1 has an invalid length. [ 480.391713][ T5841] IPVS: starting estimator thread 0... [ 480.397738][T19449] IPVS: ip_vs_edit_dest(): server weight less than zero [ 480.489180][T19450] IPVS: using max 28 ests per chain, 67200 per kthread [ 480.574190][T19452] tipc: Enabling of bearer rejected, failed to enable media [ 480.714890][T19463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3471'. [ 481.132122][T19483] __nla_validate_parse: 2 callbacks suppressed [ 481.132143][T19483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3477'. [ 481.272822][T19487] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 481.410845][T19491] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3480'. [ 481.634223][T19491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3480'. [ 481.762006][T19499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.897447][T19503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.952187][T19499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.101444][T19499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.203436][T19499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.248240][T19514] lo speed is unknown, defaulting to 1000 [ 482.419092][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3488'. [ 482.436454][ T1006] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.462240][ T1006] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.507026][ T1006] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.573540][ T1006] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.896280][T19533] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3493'. [ 483.043632][T19537] netlink: 'syz.0.3495': attribute type 11 has an invalid length. [ 483.053675][T19537] netlink: 'syz.0.3495': attribute type 4 has an invalid length. [ 483.062874][T19540] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3497'. [ 483.078459][T19537] netlink: 'syz.0.3495': attribute type 5 has an invalid length. [ 483.093264][T19537] netlink: 'syz.0.3495': attribute type 6 has an invalid length. [ 483.117044][T19537] netlink: 199748 bytes leftover after parsing attributes in process `syz.0.3495'. [ 483.144584][T19540] netlink: 'syz.2.3497': attribute type 11 has an invalid length. [ 483.169263][T19540] netlink: 'syz.2.3497': attribute type 23 has an invalid length. [ 483.182897][T19540] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3497'. [ 483.320329][T19547] bridge0: entered promiscuous mode [ 483.330260][ T10] IPVS: starting estimator thread 0... [ 483.336172][T19540] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 483.390571][T19549] gretap1: entered promiscuous mode [ 483.430117][T19550] IPVS: using max 28 ests per chain, 67200 per kthread [ 483.574477][T19514] virt_wifi0 speed is unknown, defaulting to 1000 [ 483.676222][T19555] netlink: 'syz.0.3501': attribute type 1 has an invalid length. [ 483.709670][T19555] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3501'. [ 484.765774][T19590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3511'. [ 484.810796][T19590] bond1: entered promiscuous mode [ 484.816386][T19590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 485.130709][T19605] netlink: 'syz.1.3514': attribute type 10 has an invalid length. [ 485.219298][T19605] veth0_vlan: left promiscuous mode [ 485.228007][T19605] veth0_vlan: entered promiscuous mode [ 485.260963][T19605] team0: Device veth0_vlan failed to register rx_handler [ 485.267591][T19611] xt_hashlimit: overflow, try lower: 18446744073709551615/0 [ 485.302363][T19609] wg1: entered promiscuous mode [ 485.308354][T19609] wg1: entered allmulticast mode [ 485.359089][T19615] tipc: Started in network mode [ 485.364535][T19615] tipc: Node identity ceb4e9e1646a, cluster identity 4711 [ 485.381021][T19615] tipc: Enabled bearer , priority 0 [ 485.460266][T19615] syzkaller0: entered promiscuous mode [ 485.465805][T19615] syzkaller0: entered allmulticast mode [ 485.575678][T19628] macvlan3: entered promiscuous mode [ 485.588587][ T5160] block nbd1: Possible stuck request ffff8880267f8000: control (read@0,1024B). Runtime 60 seconds [ 485.599368][ T5160] block nbd1: Possible stuck request ffff8880267f8200: control (read@1024,1024B). Runtime 60 seconds [ 485.610607][ T5160] block nbd1: Possible stuck request ffff8880267f8400: control (read@2048,1024B). Runtime 60 seconds [ 485.621578][ T5160] block nbd1: Possible stuck request ffff8880267f8600: control (read@3072,1024B). Runtime 60 seconds [ 485.667394][T19628] macvlan3: entered allmulticast mode [ 485.691949][T19628] veth1_to_batadv: entered allmulticast mode [ 485.861358][T19614] tipc: Resetting bearer [ 485.896042][T19614] tipc: Disabling bearer [ 485.943773][T19627] lo speed is unknown, defaulting to 1000 [ 486.326760][T19654] __nla_validate_parse: 4 callbacks suppressed [ 486.326783][T19654] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3524'. [ 487.427290][T19658] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.435249][T19658] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.549654][T19658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.565483][T19658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.845584][T17641] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.880855][T17641] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.910320][T17641] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.930572][T17641] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.036284][T19685] syz_tun: entered allmulticast mode [ 488.072696][T19685] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3530'. [ 488.083338][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3532'. [ 488.092899][T19686] lo speed is unknown, defaulting to 1000 [ 488.129225][T19690] netlink: 'syz.3.3532': attribute type 2 has an invalid length. [ 488.561257][T19703] Cannot find add_set index 1 as target [ 488.830319][T19627] virt_wifi0 speed is unknown, defaulting to 1000 [ 489.185248][T19708] lo speed is unknown, defaulting to 1000 [ 489.382376][T19730] xt_TCPMSS: Only works on TCP SYN packets [ 489.584069][T19734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3542'. [ 490.310242][T19749] tipc: New replicast peer: 255.255.255.255 [ 490.327324][T19749] tipc: Enabled bearer , priority 10 [ 490.396571][T19708] virt_wifi0 speed is unknown, defaulting to 1000 [ 490.900150][T19764] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 490.943789][T19686] virt_wifi0 speed is unknown, defaulting to 1000 [ 491.527386][T19787] xt_hashlimit: size too large, truncated to 1048576 [ 491.641862][T19794] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.649567][T19794] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.673379][T19794] bridge0: entered allmulticast mode [ 491.829931][T19794] bridge_slave_1: left allmulticast mode [ 491.861637][T19794] bridge_slave_1: left promiscuous mode [ 491.878834][T19794] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.918610][T19794] bridge_slave_0: left allmulticast mode [ 491.945036][T19794] bridge_slave_0: left promiscuous mode [ 491.979155][T19794] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.260380][T19803] lo: Caught tx_queue_len zero misconfig [ 492.381317][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.691556][T19820] xt_ipcomp: unknown flags 1D [ 492.781032][ T7460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.005051][T19840] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 493.066144][T19845] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3577'. [ 493.080692][T19841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3576'. [ 493.096429][T19845] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3577'. [ 493.121209][T19845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3577'. [ 493.419250][ T8106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.507215][T19869] veth3: left promiscuous mode [ 493.514774][T19869] geneve2: left promiscuous mode [ 493.545905][T19869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3582'. [ 493.556408][T19869] hsr_slave_0: left promiscuous mode [ 493.567780][T19869] hsr_slave_1: left promiscuous mode [ 493.602801][T19876] xt_hashlimit: size too large, truncated to 1048576 [ 493.642696][T19876] xt_hashlimit: max too large, truncated to 1048576 [ 493.899049][ T8106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.920314][T19882] dvmrp1: entered allmulticast mode [ 494.459464][ T8106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.538844][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.499932][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.278344][T19855] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 496.550091][ T8106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.845079][T19905] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3597'. [ 496.895227][T19909] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3596'. [ 496.939237][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.175485][T19918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3600'. [ 497.274301][T19923] IPVS: length: 528 != 944 [ 497.580604][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.616862][T19946] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3607'. [ 497.661224][T19946] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3607'. [ 497.677985][T19935] lo speed is unknown, defaulting to 1000 [ 497.715995][T19946] netlink: 'syz.1.3607': attribute type 5 has an invalid length. [ 498.353440][ T106] ------------[ cut here ]------------ [ 498.359127][ T106] conntrack cleanup blocked for 60s [ 498.359154][ T106] WARNING: net/netfilter/nf_conntrack_core.c:2512 at nf_conntrack_cleanup_net_list+0x234/0x340, CPU#1: kworker/u8:5/106 [ 498.377336][ T106] Modules linked in: [ 498.382237][ T106] CPU: 1 UID: 0 PID: 106 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 498.391722][ T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 498.401889][ T106] Workqueue: netns cleanup_net [ 498.406711][ T106] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 498.413595][ T106] Code: 08 48 89 df e8 9d ed 64 f8 4c 8b 3b 49 39 df 74 69 e8 60 ab fa f7 45 31 e4 e9 8e fe ff ff e8 53 ab fa f7 48 8d 3d bc 82 55 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 498.433370][ T106] RSP: 0018:ffffc900024b78b0 EFLAGS: 00010293 [ 498.439625][ T106] RAX: ffffffff89caf5ad RBX: ffffc900024b7a50 RCX: ffff88801df60000 [ 498.447653][ T106] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: ffffffff90207870 [ 498.455748][ T106] RBP: 0000000000000001 R08: ffff88807da7b803 R09: 1ffff1100fb4f700 [ 498.463852][ T106] R10: dffffc0000000000 R11: ffffed100fb4f701 R12: 0000000000000001 [ 498.471918][ T106] R13: dffffc0000000000 R14: 0000000100004cbb R15: 0000000100004cbd [ 498.480009][ T106] FS: 0000000000000000(0000) GS:ffff888125561000(0000) knlGS:0000000000000000 [ 498.489069][ T106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.495688][ T106] CR2: 000000110c32e429 CR3: 000000005e94c000 CR4: 00000000003526f0 [ 498.503837][ T106] Call Trace: [ 498.507155][ T106] [ 498.510321][ T106] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 498.516433][ T106] ops_undo_list+0x52b/0x940 [ 498.521203][ T106] ? __pfx_ops_undo_list+0x10/0x10 [ 498.526365][ T106] ? idr_destroy+0x227/0x290 [ 498.531057][ T106] cleanup_net+0x56b/0x800 [ 498.535527][ T106] ? __pfx_cleanup_net+0x10/0x10 [ 498.541109][ T106] ? process_scheduled_works+0xa8d/0x18c0 [ 498.546899][ T106] ? process_scheduled_works+0xa8d/0x18c0 [ 498.552852][ T106] process_scheduled_works+0xb6e/0x18c0 [ 498.558552][ T106] ? __pfx_process_scheduled_works+0x10/0x10 [ 498.564590][ T106] ? assign_work+0x3d5/0x5e0 [ 498.569271][ T106] worker_thread+0xa53/0xfc0 [ 498.573932][ T106] kthread+0x388/0x470 [ 498.578040][ T106] ? __pfx_worker_thread+0x10/0x10 [ 498.583281][ T106] ? __pfx_kthread+0x10/0x10 [ 498.587918][ T106] ret_from_fork+0x51e/0xb90 [ 498.592687][ T106] ? __pfx_ret_from_fork+0x10/0x10 [ 498.598340][ T106] ? __switch_to+0xc7d/0x1450 [ 498.603064][ T106] ? __pfx_kthread+0x10/0x10 [ 498.607699][ T106] ret_from_fork_asm+0x1a/0x30 [ 498.612615][ T106] [ 498.615687][ T106] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 498.622998][ T106] CPU: 1 UID: 0 PID: 106 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 498.632397][ T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 498.642491][ T106] Workqueue: netns cleanup_net [ 498.647309][ T106] Call Trace: [ 498.650622][ T106] [ 498.653590][ T106] vpanic+0x56c/0xa60 [ 498.657627][ T106] ? __pfx__printk+0x10/0x10 [ 498.662255][ T106] ? __pfx_vpanic+0x10/0x10 [ 498.666814][ T106] ? is_bpf_text_address+0x292/0x2b0 [ 498.672134][ T106] ? is_bpf_text_address+0x26/0x2b0 [ 498.677387][ T106] panic+0xc5/0xd0 [ 498.681155][ T106] ? __pfx_panic+0x10/0x10 [ 498.685628][ T106] ? ret_from_fork_asm+0x1a/0x30 [ 498.690628][ T106] __warn+0x315/0x4f0 [ 498.694665][ T106] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 498.700873][ T106] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 498.707077][ T106] __report_bug+0x29a/0x540 [ 498.711798][ T106] ? __lock_acquire+0x6b5/0x2cf0 [ 498.716787][ T106] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 498.722992][ T106] ? __pfx___report_bug+0x10/0x10 [ 498.728089][ T106] ? nf_conntrack_cleanup_net_list+0x13e/0x340 [ 498.734385][ T106] report_bug_entry+0x19a/0x290 [ 498.739282][ T106] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 498.745481][ T106] ? nf_conntrack_cleanup_net_list+0x239/0x340 [ 498.751684][ T106] handle_bug+0xce/0x200 [ 498.756011][ T106] exc_invalid_op+0x1a/0x50 [ 498.760568][ T106] asm_exc_invalid_op+0x1a/0x20 [ 498.765490][ T106] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 498.772295][ T106] Code: 08 48 89 df e8 9d ed 64 f8 4c 8b 3b 49 39 df 74 69 e8 60 ab fa f7 45 31 e4 e9 8e fe ff ff e8 53 ab fa f7 48 8d 3d bc 82 55 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 498.792020][ T106] RSP: 0018:ffffc900024b78b0 EFLAGS: 00010293 [ 498.798134][ T106] RAX: ffffffff89caf5ad RBX: ffffc900024b7a50 RCX: ffff88801df60000 [ 498.806146][ T106] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: ffffffff90207870 [ 498.814150][ T106] RBP: 0000000000000001 R08: ffff88807da7b803 R09: 1ffff1100fb4f700 [ 498.822155][ T106] R10: dffffc0000000000 R11: ffffed100fb4f701 R12: 0000000000000001 [ 498.830175][ T106] R13: dffffc0000000000 R14: 0000000100004cbb R15: 0000000100004cbd [ 498.838193][ T106] ? nf_conntrack_cleanup_net_list+0x22d/0x340 [ 498.844421][ T106] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 498.850526][ T106] ops_undo_list+0x52b/0x940 [ 498.855171][ T106] ? __pfx_ops_undo_list+0x10/0x10 [ 498.860362][ T106] ? idr_destroy+0x227/0x290 [ 498.864999][ T106] cleanup_net+0x56b/0x800 [ 498.869461][ T106] ? __pfx_cleanup_net+0x10/0x10 [ 498.874466][ T106] ? process_scheduled_works+0xa8d/0x18c0 [ 498.880234][ T106] ? process_scheduled_works+0xa8d/0x18c0 [ 498.886005][ T106] process_scheduled_works+0xb6e/0x18c0 [ 498.891642][ T106] ? __pfx_process_scheduled_works+0x10/0x10 [ 498.897675][ T106] ? assign_work+0x3d5/0x5e0 [ 498.902317][ T106] worker_thread+0xa53/0xfc0 [ 498.906985][ T106] kthread+0x388/0x470 [ 498.911092][ T106] ? __pfx_worker_thread+0x10/0x10 [ 498.916247][ T106] ? __pfx_kthread+0x10/0x10 [ 498.920877][ T106] ret_from_fork+0x51e/0xb90 [ 498.925513][ T106] ? __pfx_ret_from_fork+0x10/0x10 [ 498.930666][ T106] ? __switch_to+0xc7d/0x1450 [ 498.935403][ T106] ? __pfx_kthread+0x10/0x10 [ 498.940022][ T106] ret_from_fork_asm+0x1a/0x30 [ 498.944845][ T106] [ 498.948483][ T106] Kernel Offset: disabled [ 498.952815][ T106] Rebooting in 86400 seconds..