last executing test programs: 7.867375608s ago: executing program 2 (id=3227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x800}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}}, 0x4000040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) r1 = socket$inet6(0xa, 0x805, 0xfffffffe) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f0000002640)=0xfdc) 7.584503422s ago: executing program 2 (id=3230): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}, 0x19}], 0x3, 0x0, 0x0) 7.376728226s ago: executing program 2 (id=3231): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x2, 0x80805, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x8, 0x80000, 0x0, &(0x7f0000000280)) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000640)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000427bd7000fddbdf250200685046000018000180140002006e657464657673696d30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44019}, 0x4000005) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x8000000, 0x0, 0x2, 0x1, 0xbfec, 0xb6}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x3, 0x0, 0x0, 0x600}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4050}, 0x20000800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000240)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) sendmsg$unix(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r8, r10}}}], 0x20}, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000cc0)=@newtfilter={0x418, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x3e8, 0x2, [@TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x991c}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x8}}, @TCA_FLOW_ACT={0x3cc, 0x9, 0x0, 0x1, [@m_ife={0x12c, 0x3, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7ff}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x8, 0xc3c2, 0x1aa8}, 0x1}}]}, {0xb3, 0x6, "e86c3b76a055943d6cc513fea3207166016a78e4339dcd9fcdffc388f43a2a109a1624838de086dd8bfe933a5acb9a9358c59d0c40336dd77fda9b316353362376ee1fab06a2f2dec8b72be4a19b164664ee901a53699aed5a447a32e3f86d08000000000000009d18d8f9acf20be3884cab6d419a2a4cbd887c54a38ece3f85b0d42a6cd448c884bf064f1d408fdd16190cbb88587e260e4249c9b83ce9e03886f332c3bdd17488cfc2d2d4beb713"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x110, 0x16, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x6}]}, {0xda, 0x6, "757c62d0a1fa3fc5201ef01f03c43811f302dcb7ba02239d943c48d9d8fc5e49dcfa04e8f08818d919d2e949359f8309b211db7cd087dcb851966403d9b1f5816bb57f85330d2719c96468f7d1300fb1f4ce2bdbbe6daf109279eae4d7d88f0b114bc0764b6186f32b2f8033cb1dead193585905051c084dbf42cc753976b887ade9ce17b769a2134de5c71104000f3150b9d8f39e0a8d64ab620c752228c03aadcb6f3785bf192e71c1eb141b47df143602ed3ee82a3916a335a2fd626d45cb2be889758184567fac29730ec73c64bd96eb138e3fd6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x64, 0x9, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}]}, {0x17, 0x6, "0ddd222c9cac4b7677b7652139326c78720e85"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x128, 0x1b, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x7, 0xffffffffffffffff, 0x2, 0xfffffff9}, 0xf}}]}, {0xd9, 0x6, "da15018323691abd8f2d2137d88ed67a17aec003b231b2ed96eebf606670615ef9166e4c08194160b732a584abf2da2e27ca916554b6aa0198d117d9739e7f90bcd64f597d42bc55c57e8a0a065a40cbf9f71ef82cb2634c9bcd8162a03ae3f49df2cf9767710baefd0bb800432d0dde46712d2096a0c3ab73aeb74e693b09fea426be03a1f7bfb422b94e3608379e9cc7de78bc506c19184cba2f302701f9c5818c1f016f6309b14f06b2679dea0dcaac9246396e93232d2150d9ec389fc6e5e4164c6330645d817607c29376ed7f830ae494bcb9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x418}, 0x1, 0x0, 0x0, 0x2400400c}, 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x34, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xfffffff9}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x90000}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.47449204s ago: executing program 2 (id=3233): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x1}, 0x0, 0x0, 0xa, 0x9, 0x80, 0x9, 0x4, 0x41}}], 0xa0}, 0x0) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0xeaa, 0x7ffe, &(0x7f00000003c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r4}, 0x38) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000d80)={'ip6gre0\x00', &(0x7f0000000d00)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x8c, 0x17, 0xd, @private0, @loopback, 0x10, 0x700, 0x3, 0x36}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{r6, 0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)=r6}, 0x20) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, 0x0, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000002000081e2db0ff7def5ab457a125d9879c72e020400"/44], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x11, 0x15, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800000000100000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x3, 0xfc, &(0x7f0000000b80)=""/252, 0x40f00, 0x44, '\x00', r7, 0x0, r6, 0x8, &(0x7f0000000dc0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000e00)={0x1, 0xd, 0x3, 0xfff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000f80)=[r6, r8, r10, r6, r6, r0], &(0x7f0000000fc0)=[{0x2, 0x1, 0x10, 0x8}], 0x10, 0x7fff}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000240)=@ethtool_sset_info={0x4a, 0x7, 0x3}}) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x9800}, 0x4011) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001000010828bd7000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000420040008001b000000000024002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x60}}, 0x20004004) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x4) 5.736661392s ago: executing program 2 (id=3239): r0 = socket$pppl2tp(0x18, 0x1, 0x1) accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0xec, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff75, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4720}, 0x37) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) 5.09675471s ago: executing program 2 (id=3243): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r2, 0x2}, 0x8) pipe(&(0x7f0000000340)) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) socket(0x28, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000009d98231f89277e001000ffff25bd7000fb", @ANYRES32=0x0, @ANYBLOB="420000002120000004003480"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4c014) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000001500)={0x28, 0x0, 0x2710, @host}, 0x10) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x92}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xa40}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xf2}]}}]}, 0x48}}, 0x20008090) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 4.120243305s ago: executing program 4 (id=3254): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000062000002000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff2, 0x10, &(0x7f0000000000), 0x4e, 0x0, 0xffffffffffffffff, 0x3000000}, 0x48) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x2e}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket$inet(0x2, 0x2, 0x1) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c000280bc00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001000000000000000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x4000040) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$inet(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000005c0)='\b\x005-K', 0x5}, {&(0x7f0000000040)="96bc37", 0x3}], 0x2}, 0x24008004) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r2, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) r6 = socket(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e40), 0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000f40), &(0x7f0000000f80)=0xc) sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f0000000f00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x1d4718c9684c9800) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x4}]}}}]}, 0x3c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20048081) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6020400) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) 3.26883624s ago: executing program 1 (id=3264): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000002}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040021) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 3.181329229s ago: executing program 4 (id=3266): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) syz_emit_ethernet(0x34e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 2.8991614s ago: executing program 1 (id=3267): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e69518e03b5ce67f7308515e21ee2d9a221658eda52b462cba9c87101382f1fc285084a45f005faf7e7545c8f70c301a2ee39383a63c8b", 0xa5}], 0x1}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.839709272s ago: executing program 4 (id=3268): socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) unshare(0x6020400) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, 0x0, 0x0, 0x100, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000810) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180104}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c0c4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="adea08c7beef905d069c564c90c2000000", 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@empty, @broadcast}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000200), 0x12) bind$x25(r4, &(0x7f0000000080), 0x12) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r0, 0x2f, 0x1, 0x34, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x40, 0x700, 0x505c, 0xfffffc00, {{0x13, 0x4, 0x2, 0x4, 0x4c, 0x64, 0x0, 0xc, 0x2f, 0x0, @multicast1, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0x29, 0x3, 0x8, [{@loopback, 0x9}, {@multicast2, 0x81}, {@private=0xa010102, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xdaf4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0x7, 0x1c, [@dev={0xac, 0x14, 0x14, 0x18}]}, @rr={0x7, 0x3, 0x98}]}}}}}) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, r0, 0x34, 0x0, @val=@iter={&(0x7f0000000400)=@task={0xffffffffffffffff, 0xffffffffffffffff}, 0x10}}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@ifindex=r7, r0, 0x26, 0x2000, r2, @value=r8, @void, @void, @void, r6}, 0x20) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), 0x4) 2.787959688s ago: executing program 1 (id=3269): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec", 0x58}], 0x1}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.586556842s ago: executing program 1 (id=3271): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5}]}]}, 0x58}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) (fail_nth: 1) 2.508931492s ago: executing program 4 (id=3272): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e69518e03b5ce67f7308515e21ee2d9a221658eda52b462cba9c87101382f1fc285084a45f005faf7e7545c8f70c301a2ee39383a63c8bcbba1925ac63053c22d520", 0xb0}, {&(0x7f00000002c0)="3c205b072336bce6ff13a65e159454de32ebdcbc4731acffd34e211c584048de1c7bcbe3d078fc02a51e5db635eec4e205f69b90cace8bb4d2da8a78b8d943e7217619c89d28fca63b956fd6e231e732d628ced4c78d9b5c1ccd2d96def83371b57cca466809f3d18f2f89d2143f6f299a66199559bf226314c0afdd622ed4bdc24c62ec00063477ae87a942c5760b768eb7d7960b1e7f98b48a4edb606df447aeeea5341a88d4c6347a1f45610e3602fc776a53b1204588e2b9830970", 0xbd}, {&(0x7f0000000380)="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", 0xf37}], 0x3}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.21407082s ago: executing program 1 (id=3274): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x19, 0x0, &(0x7f0000000140)) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000006ac0)=[{&(0x7f0000000380)=""/165, 0x4f}], 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58000000020601e18200000600000000000000000000020073797a32000000000000040000bb7dfc3683f8f700000000000300686173683a69702c6d61630000002a5e3cd18ebd8f5800000000018000000148ac1414bb000003006269546d61"], 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r4, &(0x7f0000001300)=[{&(0x7f0000001340)=""/4097, 0x1001}], 0x1) close(0x3) write$cgroup_int(r5, &(0x7f0000000140), 0xfffffdef) close(0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000280)={r3, &(0x7f0000000000)='bitmap:ip\x00', 0xaaa4fe258bf9a3eb, &(0x7f00000000c0)={@align=0x80000001, {0x9, 0xd28d, 0x6, 0x4}}, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x9}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x140f, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1}, {0x0, 0x3}]}]}}, &(0x7f0000000f40)=""/4089, 0x36, 0xff9, 0x4, 0x10}, 0x28) bind$bt_l2cap(r8, &(0x7f00000005c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x16, 0x10, 0x2, 0x4, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_x_sec_ctx={0x1, 0x18, 0x5}, @sadb_key={0x1, 0x9}]}, 0x20}}, 0x40800) connect$bt_l2cap(r8, &(0x7f0000000240)={0x1f, 0x0, @none, 0x11, 0x2}, 0xe) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4001000) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 2.212738957s ago: executing program 3 (id=3275): socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 2.028532213s ago: executing program 4 (id=3276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='R', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40014) 1.985190278s ago: executing program 3 (id=3277): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e69518e03b5ce67f7308515e21ee2d9a221658eda52b462cba9c87101382f1fc285084a45f005faf7e7545c8f70c301a2ee39383a63c8bcbba1925ac63053c22d520", 0xb0}], 0x1}, 0x8841) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.921907462s ago: executing program 4 (id=3278): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x2, 0x80805, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x8, 0x80000, 0x0, &(0x7f0000000280)) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000640)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000427bd7000fddbdf250200685046000018000180140002006e657464657673696d30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44019}, 0x4000005) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x8000000, 0x0, 0x2, 0x1, 0xbfec, 0xb6}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x3, 0x0, 0x0, 0x600}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1400000000000000000001000000", @ANYRES32=r5], 0x18, 0x4050}, 0x20000800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000240)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) sendmsg$unix(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r8, r10}}}], 0x20}, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000cc0)=@newtfilter={0x418, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x3e8, 0x2, [@TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x991c}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x8}}, @TCA_FLOW_ACT={0x3cc, 0x9, 0x0, 0x1, [@m_ife={0x12c, 0x3, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7ff}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x8, 0xc3c2, 0x1aa8}, 0x1}}]}, {0xb3, 0x6, "e86c3b76a055943d6cc513fea3207166016a78e4339dcd9fcdffc388f43a2a109a1624838de086dd8bfe933a5acb9a9358c59d0c40336dd77fda9b316353362376ee1fab06a2f2dec8b72be4a19b164664ee901a53699aed5a447a32e3f86d08000000000000009d18d8f9acf20be3884cab6d419a2a4cbd887c54a38ece3f85b0d42a6cd448c884bf064f1d408fdd16190cbb88587e260e4249c9b83ce9e03886f332c3bdd17488cfc2d2d4beb713"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x110, 0x16, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x6}]}, {0xda, 0x6, "757c62d0a1fa3fc5201ef01f03c43811f302dcb7ba02239d943c48d9d8fc5e49dcfa04e8f08818d919d2e949359f8309b211db7cd087dcb851966403d9b1f5816bb57f85330d2719c96468f7d1300fb1f4ce2bdbbe6daf109279eae4d7d88f0b114bc0764b6186f32b2f8033cb1dead193585905051c084dbf42cc753976b887ade9ce17b769a2134de5c71104000f3150b9d8f39e0a8d64ab620c752228c03aadcb6f3785bf192e71c1eb141b47df143602ed3ee82a3916a335a2fd626d45cb2be889758184567fac29730ec73c64bd96eb138e3fd6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x64, 0x9, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}]}, {0x17, 0x6, "0ddd222c9cac4b7677b7652139326c78720e85"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x128, 0x1b, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x7, 0xffffffffffffffff, 0x2, 0xfffffff9}, 0xf}}]}, {0xd9, 0x6, "da15018323691abd8f2d2137d88ed67a17aec003b231b2ed96eebf606670615ef9166e4c08194160b732a584abf2da2e27ca916554b6aa0198d117d9739e7f90bcd64f597d42bc55c57e8a0a065a40cbf9f71ef82cb2634c9bcd8162a03ae3f49df2cf9767710baefd0bb800432d0dde46712d2096a0c3ab73aeb74e693b09fea426be03a1f7bfb422b94e3608379e9cc7de78bc506c19184cba2f302701f9c5818c1f016f6309b14f06b2679dea0dcaac9246396e93232d2150d9ec389fc6e5e4164c6330645d817607c29376ed7f830ae494bcb9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x418}, 0x1, 0x0, 0x0, 0x2400400c}, 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x34, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xfffffff9}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x90000}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.855787724s ago: executing program 0 (id=3279): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e69518e03b5ce67f7308515e21ee2d9a221658eda52b462cba9c87101382f1fc285084a45f005faf7e7545c8f70c301a2ee39383a63c8bcbba1925ac63053c22d520", 0xb0}, {&(0x7f00000002c0)="3c205b072336bce6ff13a65e159454de32ebdcbc4731acffd34e211c584048de1c7bcbe3d078fc02a51e5db635eec4e205f69b90cace8bb4d2da8a78b8d943e7217619c89d28fca63b956fd6e231e732d628ced4c78d9b5c1ccd2d96def83371b57cca466809f3d18f2f89d2143f6f299a66199559bf226314c0afdd622ed4bdc24c62ec00063477ae87a942c5760b768eb7d7960b1e7f98b48a4edb606df447aeeea5341a88d4c6347a1f45610e3602fc776a53b1204588e2b9830970", 0xbd}, {&(0x7f0000000380)="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", 0xebd}, {&(0x7f0000001380)="90bab347948aec312e17f5e932e3a61084388195f364", 0x16}], 0x4}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.855101883s ago: executing program 3 (id=3280): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.712869317s ago: executing program 0 (id=3281): socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) unshare(0x6020400) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, 0x0, 0x0, 0x100, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000810) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180104}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c0c4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="adea08c7beef905d069c564c90c2000000", 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@empty, @broadcast}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000200), 0x12) bind$x25(r4, &(0x7f0000000080), 0x12) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r0, 0x2f, 0x1, 0x34, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x40, 0x700, 0x505c, 0xfffffc00, {{0x13, 0x4, 0x2, 0x4, 0x4c, 0x64, 0x0, 0xc, 0x2f, 0x0, @multicast1, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0x29, 0x3, 0x8, [{@loopback, 0x9}, {@multicast2, 0x81}, {@private=0xa010102, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xdaf4}, {@broadcast, 0x3}]}, @ssrr={0x89, 0x7, 0x1c, [@dev={0xac, 0x14, 0x14, 0x18}]}, @rr={0x7, 0x3, 0x98}]}}}}}) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, r0, 0x34, 0x0, @val=@iter={&(0x7f0000000400)=@task={0xffffffffffffffff, 0xffffffffffffffff}, 0x10}}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@ifindex=r7, r0, 0x26, 0x2000, r2, @value=r8, @void, @void, @void, r6}, 0x20) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), 0x4) 1.697138065s ago: executing program 3 (id=3282): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x1, 0x4, 0x4}}, 0x2e) (async) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000440)="5f021ac44acfd596924ab3ec135c27686e69fb31aafe0d6323cf2d0f9e3379796f4282e7b565ba9ed251a2dba7438ba447cf274def311590cbb3e9c0e5846f904b5d6ed27d4e996f7936eab4dcf4457d6d15e2fe2e4c2fde52bbcc9b3c1e602a217f4c1f946e1a75e31c34ed1c6dd8fe02e938f6f4a7105d652f2934bfc94d76e00e2f6ff8c0c13b0f382ab00a62efa102d47726427df06dc9b6188ffd53edcd49157bf18c0a023f77d54f3f0ab3") sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES8=r0, @ANYRESHEX=r1], 0xa0}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_buf(r3, 0x0, 0x4, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) unshare(0x22020600) r6 = epoll_create(0x2040) epoll_pwait(r6, &(0x7f0000000240), 0x0, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) (async) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x49670a525eb729e, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYRES8=0x0], 0x128}, 0x0) (async) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r13}, 0x38) (async) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/4096, 0xffffffffffffffae}, 0x0) 1.064842566s ago: executing program 1 (id=3283): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002080)={@map, 0xffffffffffffffff, 0x1f, 0x28}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r6}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.064666679s ago: executing program 3 (id=3284): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x14, 0x37, 0x107, 0xfffffff3, 0x25d7dbfe, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x37, 0x1, 0x7fffc, 0x4, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) (fail_nth: 1) 984.346332ms ago: executing program 0 (id=3285): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e69518e03b5ce67f7308515e21ee2d9a221658eda52b462cba9c87101382f1fc285084a45f005faf7e7545c8f70c301a2ee39383a63c8bcbba1925ac63053c22d520", 0xb0}, {&(0x7f00000002c0)="3c205b072336bce6ff13a65e159454de32ebdcbc4731acffd34e211c584048de1c7bcbe3d078fc02a51e5db635eec4e205f69b90cace8bb4d2da8a78b8d943e7217619c89d28fca63b956fd6e231e732d628ced4c78d9b5c1ccd2d96def83371b57cca466809f3d18f2f89d2143f6f299a66199559bf226314c0afdd622ed4bdc24c62ec00063477ae87a942c5760b768eb7d7960b1e7f98b48a4edb606df447aeeea5341a88d4c6347a1f45610e3602fc776a53b1204588e2b9830970", 0xbd}, {&(0x7f0000000380)="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", 0xf2c}], 0x3}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 945.068467ms ago: executing program 3 (id=3286): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbfe, {0x3}}, 0x14}}, 0x4004804) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x0, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x114, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xb}, {0x5, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x43, 0x4, 0xc53a, 0x1d, 0xfff, 0xfffffffa, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x8890) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r12, 0x3c}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000001080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01001000f0004d5bf37b679d00000c00990001"], 0x20}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) 437.640006ms ago: executing program 0 (id=3287): socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 232.300347ms ago: executing program 0 (id=3288): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e69518e03b5ce67f7308515e21ee2d9a221658eda52b462cba9c87101382f1fc285084a45f005faf7e7545c8f70c301a2ee39383a63c8bcbba1925ac63053c22d520", 0xb0}, {0x0}], 0x2}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 0 (id=3289): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000800)=ANY=[@ANYBLOB="68020000000501040000000000000000010000065402010003000000000000b00d0b0400010005"], 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0xa0, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21ac6, 0x71a07}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x70, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x457}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MACADDR_DATA={0x4c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0x1d, 0x4, @random="2686fb5c7e08"}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @link_local}, {0xa, 0x4, @broadcast}, {0xa}]}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a"], 0x38}}, 0x0) kernel console output (not intermixed with test programs): .1.1527'. [ 232.473642][T10211] netlink: 'syz.1.1536': attribute type 39 has an invalid length. [ 232.691361][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1539'. [ 232.732214][T10221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1540'. [ 232.796299][T10225] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1541'. [ 233.181513][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1548'. [ 233.347687][T10243] netlink: 'syz.3.1549': attribute type 39 has an invalid length. [ 233.398632][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1552'. [ 233.682962][T10254] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1555'. [ 233.710281][T10255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1554'. [ 234.054677][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1563'. [ 234.090634][T10274] netlink: 'syz.2.1564': attribute type 1 has an invalid length. [ 234.188152][T10274] macvtap5: entered allmulticast mode [ 234.195202][T10277] netlink: 'syz.1.1565': attribute type 39 has an invalid length. [ 234.209870][T10274] macvtap6: entered allmulticast mode [ 234.229259][T10274] bond5: (slave bridge4): making interface the new active one [ 234.240672][T10274] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 234.472890][T10285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1568'. [ 234.533303][T10289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1571'. [ 234.852042][T10300] netlink: 'syz.3.1576': attribute type 39 has an invalid length. [ 234.912654][T10301] syzkaller0: entered promiscuous mode [ 234.920268][T10301] syzkaller0: entered allmulticast mode [ 235.312842][T10311] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.533221][T10311] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.702603][T10311] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.897437][T10311] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.923479][T10348] syzkaller0: entered promiscuous mode [ 235.929211][T10348] syzkaller0: entered allmulticast mode [ 236.061805][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.157564][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.174250][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.197976][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.838721][T10388] netlink: 'syz.4.1613': attribute type 39 has an invalid length. [ 237.031510][T10393] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.046059][T10393] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.145664][T10393] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.156100][T10393] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.228283][T10393] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.239416][T10393] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.342583][T10393] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.356191][T10393] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.733817][ T1106] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.766324][ T1106] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.790602][ T1106] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.792181][T10421] netlink: 'syz.3.1625': attribute type 1 has an invalid length. [ 237.816283][ T1106] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.842627][T10424] netlink: 'syz.2.1626': attribute type 39 has an invalid length. [ 237.883975][T10425] macvtap3: entered allmulticast mode [ 237.901361][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.913756][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.932870][ T3353] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.963583][ T3353] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.036409][T10421] macvtap4: entered allmulticast mode [ 238.067143][T10434] __nla_validate_parse: 13 callbacks suppressed [ 238.067159][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 238.109586][T10425] bond3: (slave bridge1): making interface the new active one [ 238.137301][T10425] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 238.358705][T10447] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1636'. [ 238.423529][T10451] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1637'. [ 238.624536][T10459] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.651439][T10459] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.704488][T10463] netlink: 'syz.1.1642': attribute type 39 has an invalid length. [ 238.760224][T10459] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.797337][T10459] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.824426][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1645'. [ 238.883181][T10459] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.913545][T10459] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.991037][T10459] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.003717][T10459] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.054579][T10479] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1648'. [ 239.160785][T10484] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1650'. [ 239.172683][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1649'. [ 239.468575][T10496] netlink: 'syz.1.1655': attribute type 39 has an invalid length. [ 239.551089][T10500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1657'. [ 239.634816][T10504] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1659'. [ 240.283281][T10535] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1671'. [ 240.740471][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.770945][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.799981][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.823506][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.838384][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.848776][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.866799][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.875040][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.529210][T10574] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.816082][T10574] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.949247][T10574] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.116347][T10574] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.387314][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.407424][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.457110][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.478922][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.383780][T10656] openvswitch: netlink: IP tunnel dst address not specified [ 243.411429][T10658] __nla_validate_parse: 3 callbacks suppressed [ 243.411444][T10658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1715'. [ 243.588031][T10667] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1718'. [ 243.608290][T10663] vxcan3: entered promiscuous mode [ 244.024481][T10683] netlink: 'syz.2.1723': attribute type 39 has an invalid length. [ 244.463367][T10701] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1729'. [ 244.503786][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1728'. [ 244.939146][T10719] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.946332][T10719] bridge0: port 2(bridge_slave_1) entered listening state [ 244.953811][T10719] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.961016][T10719] bridge0: port 1(bridge_slave_0) entered listening state [ 245.014577][T10720] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1734'. [ 245.067405][T10719] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 245.251338][T10730] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1738'. [ 245.335562][T10730] syzkaller0: entered promiscuous mode [ 245.364945][T10730] syzkaller0: entered allmulticast mode [ 245.742120][T10742] netlink: 'syz.1.1742': attribute type 39 has an invalid length. [ 245.917574][T10752] netlink: 'syz.2.1747': attribute type 1 has an invalid length. [ 246.035585][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1750'. [ 246.064103][T10760] macvtap7: entered allmulticast mode [ 246.087645][T10752] macvtap8: entered allmulticast mode [ 246.198792][T10752] bond6: (slave bridge5): making interface the new active one [ 246.240070][T10752] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 246.571028][T10778] netlink: 'syz.0.1758': attribute type 39 has an invalid length. [ 246.742297][T10790] openvswitch: netlink: IP tunnel dst address not specified [ 246.751742][T10786] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.765935][T10791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'. [ 246.780496][T10786] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.906655][T10794] vxcan3: entered promiscuous mode [ 247.043762][T10786] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.054074][T10786] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.278994][T10786] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.297183][T10803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1770'. [ 247.320022][T10786] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.358212][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 247.380350][T10803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.567640][T10786] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.595799][T10786] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.914104][T10827] set match dimension is over the limit! [ 248.097025][ T3353] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.117088][ T3353] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.135551][ T3353] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.154337][ T3353] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.326879][ T76] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.351808][ T76] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.441434][T10857] __nla_validate_parse: 1 callbacks suppressed [ 248.441450][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1786'. [ 248.540925][ T1106] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.588053][ T1106] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.904194][T10871] openvswitch: netlink: IP tunnel dst address not specified [ 249.184766][T10883] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1796'. [ 249.195449][T10876] vxcan5: entered promiscuous mode [ 249.241822][T10885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1797'. [ 249.603324][T10897] set match dimension is over the limit! [ 249.780447][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1802'. [ 250.316649][T10920] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.351517][T10920] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.408612][T10929] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1809'. [ 250.583769][T10920] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.631510][T10920] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.682650][T10938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1811'. [ 250.773513][T10920] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.805962][T10920] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.981494][T10920] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.000175][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1814'. [ 251.027159][T10920] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.259668][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1816'. [ 251.582713][T10966] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.618917][T10966] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.731027][T10976] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1822'. [ 251.761940][T10966] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.806282][T10966] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.813310][T10980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1824'. [ 251.880748][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.904360][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.018941][ T3353] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.039327][ T3353] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.073059][ T3353] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.096086][ T3353] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.118967][T10966] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.146385][T10966] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.216985][ T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.252977][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.272051][T10993] syzkaller0: entered promiscuous mode [ 252.281904][T11002] openvswitch: netlink: IP tunnel dst address not specified [ 252.289902][T10993] syzkaller0: entered allmulticast mode [ 252.331130][T10966] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.351239][T10966] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.608171][T11006] vxcan5: entered promiscuous mode [ 252.807457][ T76] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.837280][ T76] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.899258][ T76] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.933592][ T76] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.049899][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.072208][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.111346][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.152355][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.537429][T11050] __nla_validate_parse: 6 callbacks suppressed [ 253.537451][T11050] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1842'. [ 253.803152][T11062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1843'. [ 254.291809][T11078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1848'. [ 254.376038][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1850'. [ 254.782718][T11098] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.793197][T11098] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.817860][T11100] openvswitch: netlink: IP tunnel dst address not specified [ 254.928601][T11096] netlink: 'syz.2.1855': attribute type 1 has an invalid length. [ 254.930095][T11098] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.952719][T11098] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.011694][T11104] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1858'. [ 255.071846][T11101] vxcan7: entered promiscuous mode [ 255.101206][T11105] macvtap9: entered allmulticast mode [ 255.114190][T11098] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.124081][T11098] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.166013][T11096] macvtap10: entered allmulticast mode [ 255.232666][T11105] bond7: (slave bridge6): making interface the new active one [ 255.255458][T11105] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 255.295019][T11098] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.321774][T11098] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.404851][T11109] netlink: 'syz.1.1859': attribute type 1 has an invalid length. [ 255.485907][T11109] macvtap1: entered allmulticast mode [ 255.526490][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1860'. [ 255.547032][T11109] macvtap2: entered allmulticast mode [ 255.662771][T11109] bond3: (slave bridge2): making interface the new active one [ 255.672009][T11109] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 255.706929][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.722345][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.729059][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 255.743259][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.749585][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.946909][ T76] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.965494][ T76] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.988401][ T76] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.997794][ T76] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.021787][ T76] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.035813][ T76] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.195832][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1869'. [ 256.600726][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1871'. [ 256.731927][T11157] netlink: 'syz.0.1874': attribute type 1 has an invalid length. [ 256.946053][T11160] macvtap1: entered allmulticast mode [ 257.025927][T11163] macvtap2: entered allmulticast mode [ 257.074570][T11157] bond2: (slave bridge2): making interface the new active one [ 257.105338][T11157] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 257.201274][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1880'. [ 257.446230][T11187] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1885'. [ 257.489079][T11189] openvswitch: netlink: IP tunnel dst address not specified [ 257.542446][T11187] syzkaller0: entered promiscuous mode [ 257.558786][T11187] syzkaller0: entered allmulticast mode [ 257.849317][T11200] vxcan9: entered promiscuous mode [ 258.044892][T11204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.101552][T11204] 8021q: adding VLAN 0 to HW filter on device eth0 [ 258.188107][T11204] 8021q: adding VLAN 0 to HW filter on device eth1 [ 258.248746][T11204] 8021q: adding VLAN 0 to HW filter on device eth2 [ 258.330135][T11204] 8021q: adding VLAN 0 to HW filter on device eth3 [ 258.371728][T11204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.379544][T11204] bond2: entered allmulticast mode [ 258.384692][T11204] bridge2: entered allmulticast mode [ 258.392842][T11204] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 258.444375][T11204] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 258.477998][T11204] bridge2: entered promiscuous mode [ 258.564074][T11215] __nla_validate_parse: 2 callbacks suppressed [ 258.564093][T11215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1893'. [ 258.635780][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1893'. [ 258.659871][T11215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.842806][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1895'. [ 259.210209][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1901'. [ 259.612940][T11256] netlink: 'syz.2.1907': attribute type 1 has an invalid length. [ 259.852520][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1913'. [ 259.880445][T11261] macvtap11: entered allmulticast mode [ 259.929020][T11265] macvtap12: entered allmulticast mode [ 259.977812][T11270] bond8: (slave bridge7): making interface the new active one [ 259.988521][T11270] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 260.014349][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'. [ 260.112357][T11278] netlink: 'syz.1.1916': attribute type 39 has an invalid length. [ 260.208308][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 260.216031][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 260.495071][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 260.678850][T11308] set match dimension is over the limit! [ 261.193418][T11309] netlink: 'syz.1.1929': attribute type 1 has an invalid length. [ 261.268787][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1935'. [ 261.504125][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1938'. [ 261.556501][T11346] bond4: (slave bridge3): making interface the new active one [ 261.586373][T11346] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 261.623458][T11332] macvtap3: entered allmulticast mode [ 261.709837][T11337] macvtap4: entered allmulticast mode [ 261.978004][T11350] syzkaller0: entered promiscuous mode [ 262.002389][T11350] syzkaller0: entered allmulticast mode [ 262.215241][T11382] set match dimension is over the limit! [ 263.923791][T11409] netlink: 'syz.0.1949': attribute type 39 has an invalid length. [ 264.048408][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1950'. [ 264.885406][T11465] netlink: 'syz.1.1963': attribute type 39 has an invalid length. [ 265.725603][T11497] netlink: 'syz.4.1975': attribute type 39 has an invalid length. [ 266.357442][T11517] netlink: 'syz.1.1984': attribute type 63 has an invalid length. [ 266.377592][T11517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1984'. [ 266.525107][T11509] netlink: 'syz.0.1980': attribute type 1 has an invalid length. [ 266.541711][T11519] netlink: 'syz.1.1986': attribute type 39 has an invalid length. [ 266.639137][T11523] macvtap3: entered allmulticast mode [ 266.684549][T11509] macvtap4: entered allmulticast mode [ 266.738046][T11509] bond3: (slave bridge3): making interface the new active one [ 266.774063][T11509] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 266.816148][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1988'. [ 267.328588][T11556] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1994'. [ 267.367545][T11558] netlink: 'syz.4.1996': attribute type 63 has an invalid length. [ 267.393341][T11558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1996'. [ 267.499421][T11564] netlink: 'syz.2.1997': attribute type 39 has an invalid length. [ 267.642423][T11571] Cannot find set identified by id 1 to match [ 267.808987][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2004'. [ 267.972845][T11573] netlink: 'syz.0.2002': attribute type 1 has an invalid length. [ 268.000602][T11587] netlink: 'syz.2.2005': attribute type 39 has an invalid length. [ 268.255834][T11599] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2006'. [ 268.288996][T11592] macvtap5: entered allmulticast mode [ 268.367737][T11595] macvtap6: entered allmulticast mode [ 268.445270][T11573] bond4: (slave bridge4): making interface the new active one [ 268.456931][T11573] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 268.659831][T11604] syzkaller0: entered promiscuous mode [ 268.671876][T11604] syzkaller0: entered allmulticast mode [ 268.690441][T11620] netlink: 'syz.1.2010': attribute type 63 has an invalid length. [ 268.709625][T11620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2010'. [ 268.912719][T11629] netlink: 'syz.1.2013': attribute type 39 has an invalid length. [ 269.103538][T11637] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2014'. [ 269.521022][T11644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2016'. [ 270.764542][T11636] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.773269][T11636] bond3: entered allmulticast mode [ 270.780189][T11636] bridge3: entered allmulticast mode [ 270.788215][T11636] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 270.797936][T11636] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 270.812986][T11636] bridge3: entered promiscuous mode [ 270.819837][T11636] 8021q: adding VLAN 0 to HW filter on device bond4 [ 270.828697][T11636] bond4: entered allmulticast mode [ 270.833952][T11636] bridge4: entered allmulticast mode [ 270.840217][T11636] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 270.869309][T11636] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 270.883205][T11636] bridge4: entered promiscuous mode [ 270.900455][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2016'. [ 270.917800][T11644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.396161][T11676] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2026'. [ 271.444238][T11681] netlink: 'syz.3.2027': attribute type 39 has an invalid length. [ 271.742575][T11691] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2029'. [ 271.990711][T11689] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 272.800500][T11724] netlink: 'syz.3.2041': attribute type 39 has an invalid length. [ 272.819238][T11726] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2043'. [ 273.215045][T11735] syzkaller0: entered promiscuous mode [ 273.236951][T11735] syzkaller0: entered allmulticast mode [ 273.685464][T11752] netlink: 'syz.4.2057': attribute type 39 has an invalid length. [ 273.941671][T11764] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2061'. [ 274.237108][T11758] netlink: 'syz.2.2058': attribute type 1 has an invalid length. [ 274.375275][T11776] Cannot find set identified by id 1 to match [ 274.472736][T11758] macvtap13: entered allmulticast mode [ 274.561673][T11774] macvtap14: entered allmulticast mode [ 274.668788][T11781] bond9: (slave bridge8): making interface the new active one [ 274.747185][T11781] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 275.244415][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2076'. [ 275.438225][T11825] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2081'. [ 275.512868][T11831] netlink: 'syz.2.2083': attribute type 1 has an invalid length. [ 275.568970][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.576249][ C0] bridge0: topology change detected, propagating [ 275.582985][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.590279][ C0] bridge0: topology change detected, propagating [ 275.720802][T11836] macvtap15: entered allmulticast mode [ 275.817537][T11831] macvtap16: entered allmulticast mode [ 275.890235][T11836] bond10: (slave bridge9): making interface the new active one [ 275.929798][T11836] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 276.720922][T11890] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2102'. [ 276.850687][T11897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2106'. [ 277.405337][T11917] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2109'. [ 277.584119][T11911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.616169][T11911] bond1: entered allmulticast mode [ 277.645375][T11911] bridge0: entered allmulticast mode [ 277.684264][T11911] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 277.750639][T11911] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 277.812161][T11911] bridge0: entered promiscuous mode [ 277.861461][T11911] 8021q: adding VLAN 0 to HW filter on device bond2 [ 277.972189][T11911] 8021q: adding VLAN 0 to HW filter on device bond3 [ 277.993277][T11934] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2119'. [ 278.026588][T11911] bond3: entered allmulticast mode [ 278.060778][T11911] bridge1: entered allmulticast mode [ 278.082422][T11911] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 278.123833][T11939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2121'. [ 278.195097][T11911] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 278.262236][T11911] bridge1: entered promiscuous mode [ 278.276598][T11911] 8021q: adding VLAN 0 to HW filter on device eth0 [ 278.287935][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2122'. [ 278.307883][T11911] 8021q: adding VLAN 0 to HW filter on device eth1 [ 278.319188][T11911] 8021q: adding VLAN 0 to HW filter on device eth2 [ 278.351072][T11911] 8021q: adding VLAN 0 to HW filter on device eth3 [ 278.394471][T11911] vxcan3: left promiscuous mode [ 278.402796][T11911] vxcan5: left promiscuous mode [ 278.413051][T11911] vxcan7: left promiscuous mode [ 278.422188][T11911] vxcan9: left promiscuous mode [ 278.585792][T11936] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 279.070044][T11974] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2132'. [ 279.217582][T11981] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2135'. [ 280.550861][T12050] __nla_validate_parse: 1 callbacks suppressed [ 280.550917][T12050] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2157'. [ 280.585763][T12052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2159'. [ 280.711087][T12041] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 280.890538][T12061] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2162'. [ 281.141392][T12070] netlink: 'syz.3.2168': attribute type 1 has an invalid length. [ 281.400345][T12077] macvtap5: entered allmulticast mode [ 281.430987][T12082] macvtap6: entered allmulticast mode [ 281.552837][T12070] bond5: (slave bridge2): making interface the new active one [ 281.569224][T12070] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 281.590560][T12091] netlink: 'syz.0.2172': attribute type 39 has an invalid length. [ 281.618077][T12086] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.757313][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2175'. [ 281.797827][T12086] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.895519][T12086] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.928116][T12107] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2177'. [ 282.028020][T12086] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.132708][T12115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2181'. [ 282.498844][T12131] netlink: 'syz.1.2187': attribute type 39 has an invalid length. [ 282.526902][ T1116] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.561013][ T1116] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.618745][ T1116] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.646967][ T1116] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.690068][T12135] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2188'. [ 282.907452][T12153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2193'. [ 283.295889][T12166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2199'. [ 283.478057][T12175] netlink: 'syz.2.2201': attribute type 39 has an invalid length. [ 283.496449][T12177] openvswitch: netlink: IP tunnel dst address not specified [ 284.160205][T12206] netlink: 'syz.1.2212': attribute type 63 has an invalid length. [ 284.185852][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2210'. [ 284.521536][T12217] netlink: 'syz.2.2216': attribute type 39 has an invalid length. [ 284.778582][T12225] openvswitch: netlink: IP tunnel dst address not specified [ 285.159907][T12240] Cannot find set identified by id 1 to match [ 285.597685][T12257] __nla_validate_parse: 4 callbacks suppressed [ 285.597770][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2229'. [ 285.921378][T12265] netlink: 'syz.2.2232': attribute type 39 has an invalid length. [ 286.245698][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2235'. [ 286.519301][T12286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2238'. [ 286.896245][T12300] netlink: 'syz.0.2242': attribute type 39 has an invalid length. [ 287.244757][T12318] netlink: 'syz.0.2245': attribute type 39 has an invalid length. [ 287.329960][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2244'. [ 288.379625][T12362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2259'. [ 288.586069][T12376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2262'. [ 289.299198][T12404] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2275'. [ 289.451487][T12412] openvswitch: netlink: IP tunnel dst address not specified [ 289.474120][T12413] netlink: 'syz.3.2279': attribute type 1 has an invalid length. [ 289.633143][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2280'. [ 289.719460][T12418] macvtap7: entered allmulticast mode [ 289.811781][T12413] macvtap8: entered allmulticast mode [ 289.866075][T12431] bond6: (slave bridge3): making interface the new active one [ 289.893417][T12431] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 290.008845][T12437] netlink: 'syz.1.2286': attribute type 1 has an invalid length. [ 290.141401][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2287'. [ 290.166463][T12446] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2288'. [ 290.230264][T12443] macvtap5: entered allmulticast mode [ 290.341284][T12447] macvtap6: entered allmulticast mode [ 290.470197][T12437] bond5: (slave bridge4): making interface the new active one [ 290.484474][T12437] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 290.782756][T12464] __nla_validate_parse: 2 callbacks suppressed [ 290.782804][T12464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2291'. [ 290.838285][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2291'. [ 290.852012][T12464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.889016][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2295'. [ 291.360401][T12484] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2300'. [ 291.403162][T12484] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2300'. [ 291.526884][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2301'. [ 291.543942][T12487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2302'. [ 291.803181][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2303'. [ 291.831833][T12495] netlink: 'syz.3.2305': attribute type 39 has an invalid length. [ 292.197424][T12504] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2308'. [ 292.234301][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2308'. [ 292.256088][T12504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.395343][T12511] syzkaller0: entered promiscuous mode [ 292.404647][T12511] syzkaller0: entered allmulticast mode [ 292.682690][T12525] netlink: 'syz.2.2317': attribute type 39 has an invalid length. [ 295.263102][T12565] netlink: 'syz.1.2330': attribute type 39 has an invalid length. [ 295.312603][T12562] syzkaller0: entered promiscuous mode [ 295.318531][T12562] syzkaller0: entered allmulticast mode [ 295.815202][T12590] __nla_validate_parse: 4 callbacks suppressed [ 295.815221][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2335'. [ 297.747279][T12613] netlink: 'syz.2.2342': attribute type 39 has an invalid length. [ 297.969084][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2345'. [ 298.172157][T12625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2346'. [ 298.565757][T12623] syzkaller0: entered promiscuous mode [ 298.571285][T12623] syzkaller0: entered allmulticast mode [ 298.932310][T12647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2351'. [ 300.363838][T12636] syzkaller0: entered promiscuous mode [ 300.369409][T12636] syzkaller0: entered allmulticast mode [ 300.384066][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2351'. [ 300.399834][T12647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.633467][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2353'. [ 302.669525][T12687] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2363'. [ 302.823537][T12694] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2362'. [ 303.193896][T12692] 8021q: adding VLAN 0 to HW filter on device bond4 [ 303.306281][T12692] 8021q: adding VLAN 0 to HW filter on device bond5 [ 303.354041][T12692] bond5: entered allmulticast mode [ 303.386688][T12692] bridge2: entered allmulticast mode [ 303.431172][T12692] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 303.454676][T12692] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 303.500343][T12692] bridge2: entered promiscuous mode [ 303.541186][T12692] 8021q: adding VLAN 0 to HW filter on device bond6 [ 303.558647][T12692] bond6: entered allmulticast mode [ 303.564154][T12692] bridge3: entered allmulticast mode [ 303.570121][T12692] 8021q: adding VLAN 0 to HW filter on device macvtap7 [ 303.602588][T12692] 8021q: adding VLAN 0 to HW filter on device macvtap8 [ 303.629260][T12692] bridge3: entered promiscuous mode [ 303.908989][T12734] netlink: 'syz.3.2371': attribute type 1 has an invalid length. [ 303.964489][T12738] Cannot find set identified by id 1 to match [ 304.068560][T12739] macvtap9: entered allmulticast mode [ 304.114902][T12743] macvtap10: entered allmulticast mode [ 304.290694][T12734] bond7: (slave bridge4): making interface the new active one [ 304.325820][T12734] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 305.476647][T12786] syzkaller0: entered promiscuous mode [ 305.510109][T12786] syzkaller0: entered allmulticast mode [ 305.698943][T12800] netlink: 'syz.2.2390': attribute type 1 has an invalid length. [ 306.145745][T12807] macvtap17: entered allmulticast mode [ 306.204013][T12811] macvtap18: entered allmulticast mode [ 306.299117][T12816] bond11: (slave bridge10): making interface the new active one [ 306.354593][T12816] bond11: (slave bridge10): Enslaving as an active interface with an up link [ 306.582088][T12839] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2398'. [ 306.797244][T12847] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2401'. [ 307.082049][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2405'. [ 307.155267][T12864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2406'. [ 307.218290][T12853] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.507745][T12853] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.524134][T12877] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2409'. [ 307.945805][T12853] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.170575][T12853] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.568898][T12911] set match dimension is over the limit! [ 308.650993][ T76] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.681375][ T76] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.748122][T12917] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2421'. [ 308.779710][T12919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2422'. [ 308.797047][ T76] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.824469][ T76] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.897513][T12923] syzkaller0: entered promiscuous mode [ 308.903133][T12923] syzkaller0: entered allmulticast mode [ 309.773214][T12960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2436'. [ 310.173590][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'. [ 310.194462][T12978] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2440'. [ 310.326499][T12988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2441'. [ 310.413565][T12972] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 310.972404][T13011] netlink: 'syz.4.2449': attribute type 39 has an invalid length. [ 311.059162][T13015] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2450'. [ 311.227371][T13017] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2451'. [ 311.819857][T13043] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2458'. [ 311.837819][T13045] netlink: 'syz.0.2463': attribute type 39 has an invalid length. [ 312.041464][T13040] 8021q: adding VLAN 0 to HW filter on device bond7 [ 312.054490][T13053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2464'. [ 312.084842][T13040] bond7: entered allmulticast mode [ 312.094384][T13040] bridge4: entered allmulticast mode [ 312.107916][T13040] 8021q: adding VLAN 0 to HW filter on device macvtap9 [ 312.179146][T13040] 8021q: adding VLAN 0 to HW filter on device macvtap10 [ 312.234292][T13040] bridge4: entered promiscuous mode [ 312.242766][T13040] 8021q: adding VLAN 0 to HW filter on device eth0 [ 312.268586][T13040] 8021q: adding VLAN 0 to HW filter on device eth1 [ 312.284735][T13040] 8021q: adding VLAN 0 to HW filter on device eth2 [ 312.299547][T13040] 8021q: adding VLAN 0 to HW filter on device eth3 [ 312.357642][T13051] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 313.031684][T13080] netlink: 'syz.3.2475': attribute type 39 has an invalid length. [ 313.287993][T13081] syzkaller0: entered promiscuous mode [ 313.301584][T13081] syzkaller0: entered allmulticast mode [ 315.629824][T13118] netlink: 'syz.3.2488': attribute type 39 has an invalid length. [ 315.870557][T13126] Cannot find set identified by id 1 to match [ 315.981986][T13136] __nla_validate_parse: 2 callbacks suppressed [ 315.982006][T13136] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2494'. [ 316.350393][T13134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.386833][T13134] 8021q: adding VLAN 0 to HW filter on device eth0 [ 316.399395][T13134] 8021q: adding VLAN 0 to HW filter on device eth1 [ 316.430443][T13134] 8021q: adding VLAN 0 to HW filter on device eth2 [ 316.441092][T13134] 8021q: adding VLAN 0 to HW filter on device eth3 [ 317.190044][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.200503][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.670199][T13194] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.704756][T13194] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.921596][T13206] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2514'. [ 318.072826][T13194] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.125351][T13194] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.282637][T13194] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.295051][T13194] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.438429][T13194] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.469827][T13194] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.757332][ T48] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.786008][ T48] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.857145][ T48] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.878415][ T48] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.068970][ T48] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.100445][ T48] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.138282][ T48] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.173331][ T48] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.443098][T13253] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2531'. [ 319.626279][T13263] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2530'. [ 320.114789][T13278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2539'. [ 320.169994][T13279] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2538'. [ 320.655443][T13288] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.666271][T13288] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.721762][T13299] openvswitch: netlink: IP tunnel dst address not specified [ 320.879689][T13288] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.890195][T13288] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.021084][T13306] vxcan7: entered promiscuous mode [ 321.118328][T13288] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.145712][T13288] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.338222][T13288] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.349899][T13288] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.524886][T13321] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2553'. [ 321.533990][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2553'. [ 321.583372][T13321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.667058][ T76] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.695244][ T76] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.719655][ T76] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.754294][ T76] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.007572][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.032621][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.066352][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.113189][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.457238][T13352] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2565'. [ 323.141676][T13373] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2575'. [ 323.266258][T13379] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2577'. [ 323.875521][T13403] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2588'. [ 324.013144][T13411] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2590'. [ 324.303460][T13417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2593'. [ 324.322462][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2593'. [ 324.345063][T13417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.801866][T13445] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2600'. [ 325.331114][T13447] netlink: 'syz.4.2602': attribute type 1 has an invalid length. [ 326.754720][T13503] __nla_validate_parse: 1 callbacks suppressed [ 326.754741][T13503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2620'. [ 326.773165][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2620'. [ 326.784008][T13503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.844723][T13557] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2637'. [ 327.854444][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2636'. [ 327.889141][T13557] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2637'. [ 328.235658][T13564] netlink: 'syz.2.2640': attribute type 1 has an invalid length. [ 328.392349][T13575] openvswitch: netlink: IP tunnel dst address not specified [ 328.466318][T13569] macvtap19: entered allmulticast mode [ 328.619920][T13573] macvtap20: entered allmulticast mode [ 328.703176][T13576] bond12: (slave bridge11): making interface the new active one [ 328.735304][T13576] bond12: (slave bridge11): Enslaving as an active interface with an up link [ 328.767082][T13578] vxcan3: entered promiscuous mode [ 329.210872][T13587] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.438209][T13587] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.584668][T13587] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.687299][T13587] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.518916][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.541936][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.636979][ T1116] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.663380][ T1116] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.155324][T13665] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2670'. [ 332.168044][T13648] netlink: 'syz.2.2667': attribute type 1 has an invalid length. [ 332.425852][T13662] 8021q: adding VLAN 0 to HW filter on device eth0 [ 332.443097][T13662] 8021q: adding VLAN 0 to HW filter on device eth1 [ 332.495880][T13662] 8021q: adding VLAN 0 to HW filter on device eth2 [ 332.552862][T13662] 8021q: adding VLAN 0 to HW filter on device eth3 [ 332.626269][T13648] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 333.094633][T13690] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2675'. [ 333.353339][T13700] openvswitch: netlink: IP tunnel dst address not specified [ 333.529200][T13704] vxcan9: entered promiscuous mode [ 334.156375][T13720] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.172755][T13720] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.190477][T13723] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2689'. [ 334.290191][T13720] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.308046][T13720] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.446099][T13730] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2690'. [ 334.473573][T13720] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.495225][T13720] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.681248][T13720] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.726217][T13720] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.343310][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.376433][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.403008][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.419972][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.474103][ T1116] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.502391][ T1116] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.727594][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.740218][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.863461][T13761] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2701'. [ 336.401776][T13778] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 336.465648][T13778] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2708'. [ 336.690519][T13786] syzkaller0: entered promiscuous mode [ 336.701652][T13791] netlink: 'syz.1.2714': attribute type 1 has an invalid length. [ 336.709741][T13786] syzkaller0: entered allmulticast mode [ 336.938154][T13800] openvswitch: netlink: IP tunnel dst address not specified [ 337.129971][T13797] netlink: 'syz.4.2716': attribute type 1 has an invalid length. [ 338.544138][T13795] macvtap7: entered allmulticast mode [ 338.559532][T13791] macvtap8: entered allmulticast mode [ 338.588419][T13801] bond6: (slave bridge5): making interface the new active one [ 338.598518][T13801] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 338.670714][T13805] vxcan11: entered promiscuous mode [ 338.984416][T13819] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2720'. [ 339.010438][T13822] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2723'. [ 339.704384][T13831] syzkaller0: entered promiscuous mode [ 339.729126][T13831] syzkaller0: entered allmulticast mode [ 340.397508][T13856] netlink: 'syz.1.2736': attribute type 39 has an invalid length. [ 340.431835][T13858] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2737'. [ 340.494282][T13850] netlink: 'syz.4.2734': attribute type 1 has an invalid length. [ 340.655050][T13866] openvswitch: netlink: IP tunnel dst address not specified [ 340.708981][T13870] syzkaller0: entered promiscuous mode [ 340.714508][T13870] syzkaller0: entered allmulticast mode [ 340.866073][T13872] vxcan11: entered promiscuous mode [ 340.994186][T13877] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.034025][T13877] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.080434][T13880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2747'. [ 341.242688][T13877] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.264967][T13888] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2750'. [ 341.268535][T13877] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.499618][T13877] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.523593][T13877] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.686486][T13877] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.705515][T13877] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.905015][T13906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2759'. [ 341.930925][T13904] syzkaller0: entered promiscuous mode [ 341.945055][T13904] syzkaller0: entered allmulticast mode [ 342.211538][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.224184][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.266986][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.279392][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.307802][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.316014][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.367175][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.375485][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.512185][T13927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2769'. [ 342.603220][T13927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 342.624083][T13927] 8021q: adding VLAN 0 to HW filter on device eth0 [ 342.632059][T13931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2771'. [ 342.651652][T13927] 8021q: adding VLAN 0 to HW filter on device eth1 [ 342.670646][T13927] 8021q: adding VLAN 0 to HW filter on device eth2 [ 342.682897][T13927] 8021q: adding VLAN 0 to HW filter on device eth3 [ 342.934283][T13944] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2772'. [ 343.046348][T13938] syzkaller0: entered promiscuous mode [ 343.067172][T13938] syzkaller0: entered allmulticast mode [ 343.642622][T13961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2782'. [ 343.695494][T13964] netlink: 'syz.1.2781': attribute type 39 has an invalid length. [ 344.773586][T14007] openvswitch: netlink: IP tunnel dst address not specified [ 344.919406][T14009] vxcan13: entered promiscuous mode [ 345.118958][T14013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2804'. [ 345.149170][T14015] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2805'. [ 345.315412][T14021] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2805'. [ 345.695374][T14028] netlink: 'syz.1.2808': attribute type 39 has an invalid length. [ 345.999009][T14033] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.010739][T14033] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.146711][T14033] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.156524][T14033] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.327194][T14033] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.371387][T14033] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.513158][T14033] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.569634][T14033] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.648204][T14047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2817'. [ 346.886856][ T1116] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.905424][ T1116] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.987421][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.030859][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.049197][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.058276][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.107888][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.126253][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.352166][T14055] netlink: 'syz.3.2820': attribute type 1 has an invalid length. [ 347.371244][T14067] openvswitch: netlink: IP tunnel dst address not specified [ 347.426237][T14069] netlink: 'syz.2.2827': attribute type 39 has an invalid length. [ 347.570877][T14072] vxcan5: entered promiscuous mode [ 347.733688][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2829'. [ 347.758095][T14079] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2831'. [ 347.768602][T14081] openvswitch: netlink: IP tunnel dst address not specified [ 347.950897][T14086] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2831'. [ 348.032979][T14083] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 348.141701][T14081] vxcan13: entered promiscuous mode [ 348.485279][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.496540][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.504359][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.512729][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.574182][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 349.192562][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.229024][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.545407][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.562280][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.619296][T14128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2843'. [ 349.694218][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.704020][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.866969][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.880566][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.213313][T14139] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 350.360471][T14139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2849'. [ 350.661359][T14148] netlink: 'syz.3.2846': attribute type 1 has an invalid length. [ 350.687939][ T5627] Bluetooth: hci5: command tx timeout [ 350.850720][ T12] bridge_slave_1: left allmulticast mode [ 350.886813][ T12] bridge_slave_1: left promiscuous mode [ 350.913780][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.968931][ T12] bridge_slave_0: left allmulticast mode [ 350.983833][ T12] bridge_slave_0: left promiscuous mode [ 350.999646][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.530478][ T12] bond1 (unregistering): (slave vlan2): Releasing active interface [ 351.550033][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.564165][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.579828][ T12] bond0 (unregistering): Released all slaves [ 351.600182][ T12] bond1 (unregistering): Released all slaves [ 351.622023][ T12] bond2 (unregistering): Released all slaves [ 351.818512][ T12] : left promiscuous mode [ 351.993481][T14184] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2859'. [ 352.094772][T14184] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 352.168301][T14189] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2859'. [ 352.412432][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 352.770921][ T5627] Bluetooth: hci5: command tx timeout [ 352.974956][T14214] Unsupported ieee802154 address type: 0 [ 353.342675][T14223] bridge0: port 3(vlan4) entered blocking state [ 353.373455][T14223] bridge0: port 3(vlan4) entered disabled state [ 353.395530][T14223] vlan4: entered allmulticast mode [ 353.410413][T14223] geneve0: entered allmulticast mode [ 353.448799][T14223] vlan4: entered promiscuous mode [ 353.474146][T14223] geneve0: entered promiscuous mode [ 353.691582][ T12] hsr_slave_0: left promiscuous mode [ 353.721603][ T12] hsr_slave_1: left promiscuous mode [ 353.743702][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.765598][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.814027][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.848097][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.928446][ T12] veth1_macvtap: left promiscuous mode [ 353.953278][ T12] veth0_macvtap: left promiscuous mode [ 353.978719][ T12] veth1_vlan: left promiscuous mode [ 353.995527][ T12] veth0_vlan: left promiscuous mode [ 354.024354][T14257] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2873'. [ 354.851383][ T5627] Bluetooth: hci5: command tx timeout [ 355.265351][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 355.633311][T14285] sctp: [Deprecated]: syz.3.2880 (pid 14285) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.633311][T14285] Use struct sctp_sack_info instead [ 356.009084][T14306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2883'. [ 356.032138][ T12] IPVS: stop unused estimator thread 0... [ 356.255391][T14092] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.272643][T14092] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.281434][T14092] bridge_slave_0: entered allmulticast mode [ 356.289268][T14092] bridge_slave_0: entered promiscuous mode [ 356.297952][T14092] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.305149][T14092] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.321978][T14092] bridge_slave_1: entered allmulticast mode [ 356.329667][T14092] bridge_slave_1: entered promiscuous mode [ 356.745168][T14092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.798073][T14331] x_tables: duplicate entry at hook 1 [ 356.822201][T14092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.928780][ T5627] Bluetooth: hci5: command tx timeout [ 357.204065][T14339] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2892'. [ 357.247302][T14342] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2892'. [ 357.280053][T14092] team0: Port device team_slave_0 added [ 357.309857][T14092] team0: Port device team_slave_1 added [ 357.453833][T14361] tc_dump_action: action bad kind [ 357.460250][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 357.513914][T14364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2895'. [ 357.664978][T14092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.692731][T14092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.745480][T14092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.763248][T14092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.792324][T14092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.833382][T14092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.896354][T14372] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2899'. [ 357.946183][T14092] hsr_slave_0: entered promiscuous mode [ 357.967932][T14092] hsr_slave_1: entered promiscuous mode [ 357.993590][T14092] debugfs: 'hsr0' already exists in 'hsr' [ 358.009309][T14092] Cannot create hsr debugfs directory [ 358.034284][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2899'. [ 358.080379][T14372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.390097][T14395] FAULT_INJECTION: forcing a failure. [ 358.390097][T14395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.443638][T14395] CPU: 0 UID: 0 PID: 14395 Comm: syz.1.2906 Not tainted syzkaller #0 PREEMPT(full) [ 358.443670][T14395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.443694][T14395] Call Trace: [ 358.443701][T14395] [ 358.443710][T14395] dump_stack_lvl+0xe8/0x150 [ 358.443757][T14395] should_fail_ex+0x40c/0x560 [ 358.443782][T14395] _copy_from_user+0x2d/0xb0 [ 358.443809][T14395] do_sock_getsockopt+0x200/0x7e0 [ 358.443834][T14395] ? kvm_sched_clock_read+0x11/0x20 [ 358.443861][T14395] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 358.443886][T14395] ? __pfx_sched_clock_cpu+0x10/0x10 [ 358.443928][T14395] __x64_sys_getsockopt+0x1a4/0x240 [ 358.443955][T14395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.443976][T14395] do_syscall_64+0x174/0x580 [ 358.444003][T14395] ? clear_bhb_loop+0x70/0xc0 [ 358.444043][T14395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.444079][T14395] RIP: 0033:0x7f2572d9e0d9 [ 358.444099][T14395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.444117][T14395] RSP: 002b:00007f2573cd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 358.444139][T14395] RAX: ffffffffffffffda RBX: 00007f2573025fa0 RCX: 00007f2572d9e0d9 [ 358.444153][T14395] RDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000003 [ 358.444165][T14395] RBP: 00007f2573cd4090 R08: 0000200000000280 R09: 0000000000000000 [ 358.444178][T14395] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.444191][T14395] R13: 00007f2573026038 R14: 00007f2573025fa0 R15: 00007ffdacbe90a8 [ 358.444226][T14395] [ 358.930705][T14410] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2910'. [ 359.006562][T14414] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2911'. [ 359.177401][T14419] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2911'. [ 359.585184][T14426] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2915'. [ 359.702232][T14426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.744552][T14092] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 360.896254][T14092] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 360.924273][T14092] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 361.019170][T14092] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 361.057309][T14490] __nla_validate_parse: 3 callbacks suppressed [ 361.057344][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2930'. [ 361.101873][T14490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.125481][T14092] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 361.160830][T14092] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 361.163220][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2934'. [ 361.182000][T14092] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 361.215134][T14092] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 361.282147][T14504] x_tables: duplicate underflow at hook 2 [ 361.620523][T14092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.696376][T14092] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.735246][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.742510][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.787830][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.795029][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.984528][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2951'. [ 363.156162][T14575] FAULT_INJECTION: forcing a failure. [ 363.156162][T14575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.179952][T14575] CPU: 1 UID: 0 PID: 14575 Comm: syz.3.2952 Not tainted syzkaller #0 PREEMPT(full) [ 363.179981][T14575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 363.179997][T14575] Call Trace: [ 363.180004][T14575] [ 363.180012][T14575] dump_stack_lvl+0xe8/0x150 [ 363.180045][T14575] should_fail_ex+0x40c/0x560 [ 363.180070][T14575] _copy_from_user+0x2d/0xb0 [ 363.180099][T14575] do_sock_getsockopt+0x200/0x7e0 [ 363.180124][T14575] ? __pfx_vfs_write+0x10/0x10 [ 363.180154][T14575] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 363.180193][T14575] ? do_sys_openat2+0x14e/0x200 [ 363.180216][T14575] ? kmem_cache_free+0x182/0x650 [ 363.180270][T14575] ? fd_install+0x94/0x3d0 [ 363.180318][T14575] __x64_sys_getsockopt+0x1a4/0x240 [ 363.180346][T14575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.180370][T14575] do_syscall_64+0x174/0x580 [ 363.180399][T14575] ? clear_bhb_loop+0x70/0xc0 [ 363.180423][T14575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.180449][T14575] RIP: 0033:0x7f84fc59e0d9 [ 363.180468][T14575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.180485][T14575] RSP: 002b:00007f84fd49d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 363.180506][T14575] RAX: ffffffffffffffda RBX: 00007f84fc825fa0 RCX: 00007f84fc59e0d9 [ 363.180520][T14575] RDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000003 [ 363.180530][T14575] RBP: 00007f84fd49d090 R08: 0000000000000000 R09: 0000000000000000 [ 363.180540][T14575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.180551][T14575] R13: 00007f84fc826038 R14: 00007f84fc825fa0 R15: 00007ffd20cfbe78 [ 363.180577][T14575] [ 363.777964][T14092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.644462][T14092] veth0_vlan: entered promiscuous mode [ 364.678322][T14092] veth1_vlan: entered promiscuous mode [ 364.783423][T14092] veth0_macvtap: entered promiscuous mode [ 364.808030][T14092] veth1_macvtap: entered promiscuous mode [ 364.840745][T14625] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2962'. [ 364.902020][T14092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.954871][T14092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.079591][T14630] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2962'. [ 365.147771][ T76] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.340890][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.350787][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.463751][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.471639][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.587308][ T3353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.604898][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.615812][ T3353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.305879][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.334375][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.343414][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.389141][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.400032][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.455626][T14675] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2976'. [ 366.808959][T14677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2976'. [ 366.987446][T14683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2977'. [ 367.014589][T14683] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2977'. [ 367.031701][T14673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2975'. [ 367.472715][T14711] netlink: 'syz.2.2985': attribute type 12 has an invalid length. [ 367.517549][T14711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2985'. [ 367.780898][T14715] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2987'. [ 368.162703][T14733] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2988'. [ 368.314456][T14666] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.321734][T14666] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.328958][T14666] bridge_slave_0: entered allmulticast mode [ 368.336663][T14666] bridge_slave_0: entered promiscuous mode [ 368.345499][T14666] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.352654][T14666] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.359850][T14666] bridge_slave_1: entered allmulticast mode [ 368.390670][T14740] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2988'. [ 368.413591][T14666] bridge_slave_1: entered promiscuous mode [ 368.474475][T14739] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 368.527508][ T50] Bluetooth: hci2: command tx timeout [ 368.626711][T14666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.638907][T14666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.677357][T14666] team0: Port device team_slave_0 added [ 368.705351][T14752] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 368.746534][T14752] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode [ 368.763463][T14666] team0: Port device team_slave_1 added [ 368.807613][T14666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.814730][T14666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.841177][T14666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.887370][T14666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.894382][T14666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.947003][T14666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.055517][T14666] hsr_slave_0: entered promiscuous mode [ 369.062140][T14666] hsr_slave_1: entered promiscuous mode [ 369.068410][T14666] debugfs: 'hsr0' already exists in 'hsr' [ 369.100939][T14666] Cannot create hsr debugfs directory [ 369.110591][T14762] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3000'. [ 369.277814][T14666] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.287737][T14666] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.598506][T14783] syzkaller0: entered promiscuous mode [ 369.604002][T14783] syzkaller0: entered allmulticast mode [ 369.654900][T14666] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.665543][T14666] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.980163][T14666] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.990725][T14666] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.200747][T14666] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.210711][T14666] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.308924][T14795] vxcan11: left promiscuous mode [ 370.315788][T14795] vxcan13: left promiscuous mode [ 370.609794][ T50] Bluetooth: hci2: command tx timeout [ 370.758575][T14666] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 370.794913][T14666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 370.803030][T14666] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 370.813032][T14666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 370.820929][T14666] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 370.832104][T14666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 370.890306][T14666] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 370.916598][T14813] FAULT_INJECTION: forcing a failure. [ 370.916598][T14813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.948714][T14666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 370.955956][T14813] CPU: 0 UID: 0 PID: 14813 Comm: syz.0.3022 Not tainted syzkaller #0 PREEMPT(full) [ 370.955979][T14813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.955990][T14813] Call Trace: [ 370.955998][T14813] [ 370.956005][T14813] dump_stack_lvl+0xe8/0x150 [ 370.956035][T14813] should_fail_ex+0x40c/0x560 [ 370.956065][T14813] _copy_from_user+0x2d/0xb0 [ 370.956090][T14813] __sys_sendto+0x2a9/0x5a0 [ 370.956107][T14813] ? ksys_write+0x1e6/0x270 [ 370.956137][T14813] ? __pfx___sys_sendto+0x10/0x10 [ 370.956152][T14813] ? __mutex_unlock_slowpath+0x731/0x900 [ 370.956218][T14813] ? __pfx_ksys_write+0x10/0x10 [ 370.956251][T14813] __x64_sys_sendto+0xde/0x100 [ 370.956270][T14813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.956290][T14813] do_syscall_64+0x174/0x580 [ 370.956315][T14813] ? trace_irq_disable+0x3b/0x140 [ 370.956339][T14813] ? clear_bhb_loop+0x70/0xc0 [ 370.956362][T14813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.956381][T14813] RIP: 0033:0x7f186a79e0d9 [ 370.956398][T14813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.956415][T14813] RSP: 002b:00007f186b696028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 370.956435][T14813] RAX: ffffffffffffffda RBX: 00007f186aa25fa0 RCX: 00007f186a79e0d9 [ 370.956449][T14813] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000004 [ 370.956460][T14813] RBP: 00007f186b696090 R08: 0000200000000080 R09: 0000000000000014 [ 370.956473][T14813] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 370.956483][T14813] R13: 00007f186aa26038 R14: 00007f186aa25fa0 R15: 00007fff236a7ed8 [ 370.956513][T14813] [ 371.221998][T14666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.241883][T14666] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.270718][ T3353] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.277893][ T3353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.356233][ T3353] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.363433][ T3353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.690200][T14845] __nla_validate_parse: 4 callbacks suppressed [ 371.690221][T14845] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3031'. [ 372.150637][T14666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.273734][T14666] veth0_vlan: entered promiscuous mode [ 372.308821][T14666] veth1_vlan: entered promiscuous mode [ 372.398499][T14874] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3041'. [ 372.424884][T14666] veth0_macvtap: entered promiscuous mode [ 372.454769][T14666] veth1_macvtap: entered promiscuous mode [ 372.507939][T14666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.532681][T14666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.577326][ T3353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.590560][ T3353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.603681][ T3353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.686889][ T50] Bluetooth: hci2: command tx timeout [ 372.688803][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.893390][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.912637][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.968285][ T3353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.977380][ T3353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.222577][T14904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3052'. [ 374.013558][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.024177][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.033403][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.041294][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.050180][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.414446][ T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.785052][ T5627] Bluetooth: hci2: command tx timeout [ 375.057292][T14971] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3074'. [ 375.077648][ T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.269260][T14974] FAULT_INJECTION: forcing a failure. [ 375.269260][T14974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.321200][T14974] CPU: 0 UID: 0 PID: 14974 Comm: syz.0.3075 Not tainted syzkaller #0 PREEMPT(full) [ 375.321226][T14974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 375.321238][T14974] Call Trace: [ 375.321245][T14974] [ 375.321254][T14974] dump_stack_lvl+0xe8/0x150 [ 375.321303][T14974] should_fail_ex+0x40c/0x560 [ 375.321330][T14974] _copy_from_user+0x2d/0xb0 [ 375.321358][T14974] ___sys_sendmsg+0x1c6/0x360 [ 375.321380][T14974] ? __lock_acquire+0x683/0x2cf0 [ 375.321411][T14974] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.321469][T14974] ? __fget_files+0x2a/0x420 [ 375.321494][T14974] ? __fget_files+0x3a2/0x420 [ 375.321530][T14974] __x64_sys_sendmsg+0x1b1/0x290 [ 375.321556][T14974] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.321597][T14974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.321620][T14974] do_syscall_64+0x174/0x580 [ 375.321646][T14974] ? trace_irq_disable+0x3b/0x140 [ 375.321672][T14974] ? clear_bhb_loop+0x70/0xc0 [ 375.321698][T14974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.321718][T14974] RIP: 0033:0x7f186a79e0d9 [ 375.321737][T14974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.321755][T14974] RSP: 002b:00007f186b696028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.321776][T14974] RAX: ffffffffffffffda RBX: 00007f186aa25fa0 RCX: 00007f186a79e0d9 [ 375.321791][T14974] RDX: 0000000024080888 RSI: 0000200000001980 RDI: 0000000000000003 [ 375.321805][T14974] RBP: 00007f186b696090 R08: 0000000000000000 R09: 0000000000000000 [ 375.321818][T14974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.321830][T14974] R13: 00007f186aa26038 R14: 00007f186aa25fa0 R15: 00007fff236a7ed8 [ 375.321863][T14974] [ 375.771374][ T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.113583][T14928] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.121733][T14928] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.130043][T14928] bridge_slave_0: entered allmulticast mode [ 376.138588][ T5627] Bluetooth: hci4: command tx timeout [ 376.160739][T14928] bridge_slave_0: entered promiscuous mode [ 376.173421][T14928] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.180901][T14928] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.188545][T14928] bridge_slave_1: entered allmulticast mode [ 376.196458][T14928] bridge_slave_1: entered promiscuous mode [ 376.275226][ T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.351499][T14928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.385758][T14928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.446216][T14928] team0: Port device team_slave_0 added [ 376.455860][T14928] team0: Port device team_slave_1 added [ 376.554679][T14928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.570231][T14928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.631938][T14928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.651525][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3081'. [ 376.686085][T14928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.699085][T14928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.732903][T14928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.838213][ T76] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.867063][T15009] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3084'. [ 377.000418][T15014] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3087'. [ 377.365403][T15011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3085'. [ 377.449429][ T13] bond1 (unregistering): (slave bridge0): Releasing active interface [ 377.457576][ T13] bridge0 (unregistering): left allmulticast mode [ 377.487533][ T13] bond3 (unregistering): (slave bridge1): Releasing active interface [ 377.496203][ T13] bridge1 (unregistering): left allmulticast mode [ 377.578726][ T13] bond5 (unregistering): (slave bridge2): Releasing active interface [ 377.587487][ T13] bridge2 (unregistering): left allmulticast mode [ 377.611510][ T13] bond6 (unregistering): (slave bridge3): Releasing active interface [ 377.631625][ T13] bridge3 (unregistering): left allmulticast mode [ 377.653289][ T13] bond7 (unregistering): (slave bridge4): Releasing active interface [ 377.667024][ T13] bridge4 (unregistering): left allmulticast mode [ 377.722145][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.745300][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.764885][ T13] bond0 (unregistering): Released all slaves [ 377.783964][ T13] bond1 (unregistering): left allmulticast mode [ 377.852052][ T13] bond1 (unregistering): Released all slaves [ 377.924778][ T13] bond2 (unregistering): Released all slaves [ 377.961137][ T13] bond3 (unregistering): left allmulticast mode [ 378.004040][ T13] bond3 (unregistering): Released all slaves [ 378.029947][ T13] bond4 (unregistering): Released all slaves [ 378.046048][ T13] bond5 (unregistering): left allmulticast mode [ 378.113136][ T13] bond5 (unregistering): Released all slaves [ 378.130286][ T13] bond6 (unregistering): left allmulticast mode [ 378.161238][ T13] bond6 (unregistering): Released all slaves [ 378.184266][ T13] bond7 (unregistering): left allmulticast mode [ 378.209132][ T5627] Bluetooth: hci4: command tx timeout [ 378.229508][ T13] bond7 (unregistering): Released all slaves [ 378.264001][T14928] hsr_slave_0: entered promiscuous mode [ 378.270617][T14928] hsr_slave_1: entered promiscuous mode [ 378.276947][T14928] debugfs: 'hsr0' already exists in 'hsr' [ 378.306426][T14928] Cannot create hsr debugfs directory [ 378.355885][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 378.417463][ T1116] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.603381][ T13] tipc: Left network mode [ 378.660122][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.666479][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.718627][T15057] netlink: 'syz.2.3092': attribute type 32 has an invalid length. [ 378.745286][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.762223][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3092'. [ 378.787639][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.987058][T15057] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 379.424442][T15088] veth1_macvtap: entered promiscuous mode [ 379.431866][T15088] macsec0: entered promiscuous mode [ 379.439640][T15088] veth1_macvtap: left promiscuous mode [ 379.609152][T15093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3104'. [ 379.699264][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 380.081516][T15108] FAULT_INJECTION: forcing a failure. [ 380.081516][T15108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.095311][T15108] CPU: 1 UID: 0 PID: 15108 Comm: syz.4.3107 Not tainted syzkaller #0 PREEMPT(full) [ 380.095338][T15108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 380.095352][T15108] Call Trace: [ 380.095360][T15108] [ 380.095368][T15108] dump_stack_lvl+0xe8/0x150 [ 380.095401][T15108] should_fail_ex+0x40c/0x560 [ 380.095428][T15108] _copy_from_user+0x2d/0xb0 [ 380.095455][T15108] ___sys_sendmsg+0x1c6/0x360 [ 380.095478][T15108] ? __lock_acquire+0x683/0x2cf0 [ 380.095507][T15108] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.095565][T15108] ? __fget_files+0x2a/0x420 [ 380.095590][T15108] ? __fget_files+0x3a2/0x420 [ 380.095626][T15108] __x64_sys_sendmsg+0x1b1/0x290 [ 380.095651][T15108] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 380.095692][T15108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.095715][T15108] do_syscall_64+0x174/0x580 [ 380.095742][T15108] ? trace_irq_disable+0x3b/0x140 [ 380.095767][T15108] ? clear_bhb_loop+0x70/0xc0 [ 380.095792][T15108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.095831][T15108] RIP: 0033:0x7fc26739e0d9 [ 380.095849][T15108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.095868][T15108] RSP: 002b:00007fc26822d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.095890][T15108] RAX: ffffffffffffffda RBX: 00007fc267625fa0 RCX: 00007fc26739e0d9 [ 380.095906][T15108] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 380.095919][T15108] RBP: 00007fc26822d090 R08: 0000000000000000 R09: 0000000000000000 [ 380.095932][T15108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.095943][T15108] R13: 00007fc267626038 R14: 00007fc267625fa0 R15: 00007ffdcdf544e8 [ 380.095975][T15108] [ 380.107473][ T13] hsr_slave_0: left promiscuous mode [ 380.323329][ T5627] Bluetooth: hci4: command tx timeout [ 380.373536][ T13] hsr_slave_1: left promiscuous mode [ 380.393462][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.422164][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.443864][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.464226][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.492612][ T13] veth1_macvtap: left promiscuous mode [ 380.498373][ T13] veth0_macvtap: left promiscuous mode [ 380.891523][ T13] team0 (unregistering): Port device team_slave_1 removed [ 380.912185][ T13] team0 (unregistering): Port device team_slave_0 removed [ 381.924359][T14928] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 381.965894][T14928] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 381.996214][T14928] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 382.072715][T14928] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.089848][T15163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.131812][T14928] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 382.201939][T14928] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.216262][T14928] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 382.269525][T14928] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 382.318495][T15160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3124'. [ 382.455717][ T5627] Bluetooth: hci4: command tx timeout [ 382.505889][ T13] IPVS: stop unused estimator thread 0... [ 382.513957][T15182] vxcan3: entered promiscuous mode [ 382.859459][T14928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.933326][T14928] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.978159][ T3353] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.985407][ T3353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.022562][ T3353] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.029803][ T3353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.306056][T15217] syzkaller0: entered promiscuous mode [ 383.329245][T15217] syzkaller0: entered allmulticast mode [ 383.393665][T15218] tipc: Started in network mode [ 383.409770][T15218] tipc: Node identity 96bb53734d35, cluster identity 4711 [ 383.434345][T15218] tipc: Enabled bearer , priority 0 [ 383.491664][T15217] tipc: Resetting bearer [ 383.610978][T15214] tipc: Resetting bearer [ 383.650573][T15214] tipc: Disabling bearer [ 384.539663][T14928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.726656][T14928] veth0_vlan: entered promiscuous mode [ 384.742488][T14928] veth1_vlan: entered promiscuous mode [ 384.769525][T14928] veth0_macvtap: entered promiscuous mode [ 384.796017][T14928] veth1_macvtap: entered promiscuous mode [ 384.820527][T14928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.834022][T14928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.900467][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.914200][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.922985][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.954797][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.970051][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.003241][ T76] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.038344][T15280] FAULT_INJECTION: forcing a failure. [ 385.038344][T15280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.052564][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.054313][T15280] CPU: 0 UID: 0 PID: 15280 Comm: syz.0.3152 Not tainted syzkaller #0 PREEMPT(full) [ 385.054383][T15280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.054414][T15280] Call Trace: [ 385.054435][T15280] [ 385.054458][T15280] dump_stack_lvl+0xe8/0x150 [ 385.054549][T15280] should_fail_ex+0x40c/0x560 [ 385.054613][T15280] _copy_from_user+0x2d/0xb0 [ 385.054693][T15280] __sys_bpf+0x2e7/0xd90 [ 385.054798][T15280] ? __pfx___sys_bpf+0x10/0x10 [ 385.054898][T15280] ? __fget_files+0x2a/0x420 [ 385.055013][T15280] ? ksys_write+0x242/0x270 [ 385.055096][T15280] ? __pfx_ksys_write+0x10/0x10 [ 385.055189][T15280] __x64_sys_bpf+0xba/0xd0 [ 385.055252][T15280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.055273][T15280] do_syscall_64+0x174/0x580 [ 385.055357][T15280] ? trace_irq_disable+0x3b/0x140 [ 385.055418][T15280] ? clear_bhb_loop+0x70/0xc0 [ 385.055495][T15280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.055566][T15280] RIP: 0033:0x7f186a79e0d9 [ 385.055622][T15280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.055664][T15280] RSP: 002b:00007f186b696028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 385.055725][T15280] RAX: ffffffffffffffda RBX: 00007f186aa25fa0 RCX: 00007f186a79e0d9 [ 385.055767][T15280] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 385.055806][T15280] RBP: 00007f186b696090 R08: 0000000000000000 R09: 0000000000000000 [ 385.055837][T15280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.055867][T15280] R13: 00007f186aa26038 R14: 00007f186aa25fa0 R15: 00007fff236a7ed8 [ 385.055966][T15280] [ 385.190143][T15281] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3151'. [ 385.264942][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.848000][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 385.858435][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 385.866398][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 385.875091][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 385.882802][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 386.185675][T15309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3163'. [ 386.215277][ T76] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.226548][ T76] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.250149][T15315] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3160'. [ 386.365287][T15322] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3160'. [ 386.451135][T15315] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 386.489672][T15327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3165'. [ 386.598759][ T76] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.626558][ T76] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.793043][T15334] FAULT_INJECTION: forcing a failure. [ 386.793043][T15334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.833580][T15334] CPU: 1 UID: 0 PID: 15334 Comm: syz.4.3169 Not tainted syzkaller #0 PREEMPT(full) [ 386.833607][T15334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 386.833619][T15334] Call Trace: [ 386.833627][T15334] [ 386.833635][T15334] dump_stack_lvl+0xe8/0x150 [ 386.833666][T15334] should_fail_ex+0x40c/0x560 [ 386.833690][T15334] _copy_from_user+0x2d/0xb0 [ 386.833717][T15334] ___sys_sendmsg+0x1c6/0x360 [ 386.833738][T15334] ? __lock_acquire+0x683/0x2cf0 [ 386.833765][T15334] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.833816][T15334] ? __fget_files+0x2a/0x420 [ 386.833839][T15334] ? __fget_files+0x3a2/0x420 [ 386.833871][T15334] __x64_sys_sendmsg+0x1b1/0x290 [ 386.833893][T15334] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.833929][T15334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.833948][T15334] do_syscall_64+0x174/0x580 [ 386.833972][T15334] ? trace_irq_disable+0x3b/0x140 [ 386.833995][T15334] ? clear_bhb_loop+0x70/0xc0 [ 386.834017][T15334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.834042][T15334] RIP: 0033:0x7fc26739e0d9 [ 386.834058][T15334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.834093][T15334] RSP: 002b:00007fc26822d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.834121][T15334] RAX: ffffffffffffffda RBX: 00007fc267625fa0 RCX: 00007fc26739e0d9 [ 386.834136][T15334] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 386.834148][T15334] RBP: 00007fc26822d090 R08: 0000000000000000 R09: 0000000000000000 [ 386.834161][T15334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.834173][T15334] R13: 00007fc267626038 R14: 00007fc267625fa0 R15: 00007ffdcdf544e8 [ 386.834206][T15334] [ 387.178151][ T76] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.188048][ T76] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.350896][T15345] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20004 [ 387.440194][T15346] sit1: entered promiscuous mode [ 387.704104][T15355] syzkaller0: entered promiscuous mode [ 387.717440][T15355] syzkaller0: entered allmulticast mode [ 387.751077][ T76] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.762049][ T76] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.966784][ T50] Bluetooth: hci1: command tx timeout [ 388.430603][ T76] bridge_slave_1: left allmulticast mode [ 388.463465][ T76] bridge_slave_1: left promiscuous mode [ 388.469391][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.480882][ T76] bridge_slave_0: left allmulticast mode [ 388.486554][ T76] bridge_slave_0: left promiscuous mode [ 388.493886][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.253349][ T76] bond2 (unregistering): (slave bridge2): Releasing active interface [ 389.263417][ T76] bridge2 (unregistering): left allmulticast mode [ 389.279424][ T76] bond3 (unregistering): (slave bridge3): Releasing active interface [ 389.287578][ T76] bridge3 (unregistering): left allmulticast mode [ 389.300449][ T76] bond4 (unregistering): (slave bridge4): Releasing active interface [ 389.311054][ T76] bridge4 (unregistering): left allmulticast mode [ 389.329978][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.340592][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.350628][ T76] bond0 (unregistering): Released all slaves [ 389.367291][ T76] bond1 (unregistering): Released all slaves [ 389.388256][ T76] bond2 (unregistering): left allmulticast mode [ 389.418526][ T76] bond2 (unregistering): Released all slaves [ 389.444046][ T76] bond3 (unregistering): left allmulticast mode [ 389.493103][ T76] bond3 (unregistering): Released all slaves [ 389.508751][ T76] bond4 (unregistering): left allmulticast mode [ 389.543517][ T76] bond4 (unregistering): Released all slaves [ 389.668060][T15295] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.682307][T15295] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.694601][T15295] bridge_slave_0: entered allmulticast mode [ 389.702440][T15295] bridge_slave_0: entered promiscuous mode [ 389.714979][T15295] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.763720][T15295] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.780230][T15295] bridge_slave_1: entered allmulticast mode [ 389.790771][T15295] bridge_slave_1: entered promiscuous mode [ 389.890297][T15295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.046939][ T50] Bluetooth: hci1: command tx timeout [ 390.067427][T15295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.131902][T15411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3197'. [ 390.190505][T15295] team0: Port device team_slave_0 added [ 390.220512][T15295] team0: Port device team_slave_1 added [ 390.315557][T15295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.328242][T15295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.410337][T15295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.429993][T15295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.457728][T15295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.509187][T15295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.695297][T15295] hsr_slave_0: entered promiscuous mode [ 390.729481][T15295] hsr_slave_1: entered promiscuous mode [ 390.740503][T15295] debugfs: 'hsr0' already exists in 'hsr' [ 390.746378][T15295] Cannot create hsr debugfs directory [ 390.751991][T15436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3201'. [ 391.002906][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 391.389445][ T76] hsr_slave_0: left promiscuous mode [ 391.399535][ T76] hsr_slave_1: left promiscuous mode [ 391.416550][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.436859][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.452389][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.460645][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.483031][ T76] veth0_macvtap: left promiscuous mode [ 391.713144][ T76] team0 (unregistering): Port device team_slave_1 removed [ 391.744593][ T76] team0 (unregistering): Port device team_slave_0 removed [ 391.990254][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 392.141443][ T50] Bluetooth: hci1: command tx timeout [ 392.923306][T15512] netlink: 'syz.4.3224': attribute type 1 has an invalid length. [ 393.070345][T15512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.107504][T15515] bond1: (slave veth3): Enslaving as an active interface with a down link [ 393.290290][T15519] mac80211_hwsim hwsim29 wlan0: left promiscuous mode [ 393.297155][T15519] mac80211_hwsim hwsim29 wlan0: left allmulticast mode [ 393.314316][ T76] IPVS: stop unused estimator thread 0... [ 393.381887][ T1116] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 393.390845][ T1116] bond1: (slave veth3): making interface the new active one [ 393.400810][ T1116] bond1: active interface up! [ 393.659560][T15295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 393.675503][T15295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 393.696248][T15295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 393.732353][T15295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 393.757581][T15295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 393.777697][T15295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 393.791830][T15295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 393.820126][T15295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 394.050272][T15295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.154023][T15295] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.204652][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.211946][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.219699][ T50] Bluetooth: hci1: command tx timeout [ 394.249275][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.256501][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.620378][T15564] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3232'. [ 394.925413][T15581] syzkaller0: entered promiscuous mode [ 394.951476][T15581] syzkaller0: entered allmulticast mode [ 395.037747][T15568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3233'. [ 395.048192][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3233'. [ 395.073184][T15568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.397124][T15594] netlink: 'syz.2.3239': attribute type 1 has an invalid length. [ 395.551615][T15594] 8021q: adding VLAN 0 to HW filter on device bond13 [ 395.646045][T15603] bond13: (slave veth3): Enslaving as an active interface with a down link [ 395.764471][T15594] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 395.802568][T15295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.996248][T15295] veth0_vlan: entered promiscuous mode [ 396.049388][T15295] veth1_vlan: entered promiscuous mode [ 396.075388][T15295] veth0_macvtap: entered promiscuous mode [ 396.085206][T15295] veth1_macvtap: entered promiscuous mode [ 396.152818][T15295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.178220][T15295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.347968][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.375661][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.387366][ T76] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.399032][ T76] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.409315][ T76] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.419191][ T1116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.521450][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.539390][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.943581][T15652] netlink: 'syz.4.3254': attribute type 1 has an invalid length. [ 396.951375][T15652] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3254'. [ 396.964830][T15652] netlink: 'syz.4.3254': attribute type 1 has an invalid length. [ 397.641389][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 397.657328][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 397.665522][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 397.713679][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 397.714045][T15684] FAULT_INJECTION: forcing a failure. [ 397.714045][T15684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.738520][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 397.816220][T15684] CPU: 1 UID: 0 PID: 15684 Comm: syz.3.3263 Not tainted syzkaller #0 PREEMPT(full) [ 397.816250][T15684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.816263][T15684] Call Trace: [ 397.816271][T15684] [ 397.816279][T15684] dump_stack_lvl+0xe8/0x150 [ 397.816312][T15684] should_fail_ex+0x40c/0x560 [ 397.816339][T15684] _copy_from_user+0x2d/0xb0 [ 397.816368][T15684] __sys_bpf+0x2e7/0xd90 [ 397.816402][T15684] ? __pfx___sys_bpf+0x10/0x10 [ 397.816439][T15684] ? __fget_files+0x2a/0x420 [ 397.816482][T15684] ? ksys_write+0x242/0x270 [ 397.816515][T15684] ? __pfx_ksys_write+0x10/0x10 [ 397.816550][T15684] __x64_sys_bpf+0xba/0xd0 [ 397.816572][T15684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.816596][T15684] do_syscall_64+0x174/0x580 [ 397.816623][T15684] ? trace_irq_disable+0x3b/0x140 [ 397.816646][T15684] ? clear_bhb_loop+0x70/0xc0 [ 397.816670][T15684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.816690][T15684] RIP: 0033:0x7f0a58d9e0d9 [ 397.816708][T15684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.816725][T15684] RSP: 002b:00007f0a59cbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.816746][T15684] RAX: ffffffffffffffda RBX: 00007f0a59025fa0 RCX: 00007f0a58d9e0d9 [ 397.816760][T15684] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 397.816772][T15684] RBP: 00007f0a59cbd090 R08: 0000000000000000 R09: 0000000000000000 [ 397.816784][T15684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.816795][T15684] R13: 00007f0a59026038 R14: 00007f0a59025fa0 R15: 00007ffe93b592e8 [ 397.816827][T15684] [ 398.495666][T15706] FAULT_INJECTION: forcing a failure. [ 398.495666][T15706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.573306][T15706] CPU: 0 UID: 0 PID: 15706 Comm: syz.1.3271 Not tainted syzkaller #0 PREEMPT(full) [ 398.573331][T15706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.573343][T15706] Call Trace: [ 398.573351][T15706] [ 398.573358][T15706] dump_stack_lvl+0xe8/0x150 [ 398.573393][T15706] should_fail_ex+0x40c/0x560 [ 398.573418][T15706] _copy_from_user+0x2d/0xb0 [ 398.573443][T15706] ___sys_sendmsg+0x1c6/0x360 [ 398.573462][T15706] ? __lock_acquire+0x683/0x2cf0 [ 398.573490][T15706] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.573543][T15706] ? __fget_files+0x2a/0x420 [ 398.573566][T15706] ? __fget_files+0x3a2/0x420 [ 398.573599][T15706] __x64_sys_sendmsg+0x1b1/0x290 [ 398.573622][T15706] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.573659][T15706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.573680][T15706] do_syscall_64+0x174/0x580 [ 398.573706][T15706] ? trace_irq_disable+0x3b/0x140 [ 398.573727][T15706] ? clear_bhb_loop+0x70/0xc0 [ 398.573751][T15706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.573769][T15706] RIP: 0033:0x7f2a2159e0d9 [ 398.573786][T15706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.573803][T15706] RSP: 002b:00007f2a2241f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.573824][T15706] RAX: ffffffffffffffda RBX: 00007f2a21825fa0 RCX: 00007f2a2159e0d9 [ 398.573837][T15706] RDX: 0000000000040800 RSI: 0000200000000040 RDI: 0000000000000003 [ 398.573848][T15706] RBP: 00007f2a2241f090 R08: 0000000000000000 R09: 0000000000000000 [ 398.573859][T15706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.573869][T15706] R13: 00007f2a21826038 R14: 00007f2a21825fa0 R15: 00007fff758fc978 [ 398.573898][T15706] [ 398.853569][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.020540][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.131248][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3274'. [ 399.171741][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.397328][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.469408][T15733] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.826944][ T5627] Bluetooth: hci3: command tx timeout [ 399.972482][T15742] FAULT_INJECTION: forcing a failure. [ 399.972482][T15742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.002734][T15742] CPU: 1 UID: 0 PID: 15742 Comm: syz.3.3284 Not tainted syzkaller #0 PREEMPT(full) [ 400.002760][T15742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 400.002772][T15742] Call Trace: [ 400.002779][T15742] [ 400.002787][T15742] dump_stack_lvl+0xe8/0x150 [ 400.002819][T15742] should_fail_ex+0x40c/0x560 [ 400.002843][T15742] _copy_from_user+0x2d/0xb0 [ 400.002869][T15742] ___sys_sendmsg+0x1c6/0x360 [ 400.002898][T15742] ? __lock_acquire+0x683/0x2cf0 [ 400.002926][T15742] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.002979][T15742] ? __fget_files+0x2a/0x420 [ 400.003002][T15742] ? __fget_files+0x3a2/0x420 [ 400.003034][T15742] __x64_sys_sendmsg+0x1b1/0x290 [ 400.003057][T15742] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.003095][T15742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.003116][T15742] do_syscall_64+0x174/0x580 [ 400.003141][T15742] ? trace_irq_disable+0x3b/0x140 [ 400.003164][T15742] ? clear_bhb_loop+0x70/0xc0 [ 400.003187][T15742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.003205][T15742] RIP: 0033:0x7f0a58d9e0d9 [ 400.003222][T15742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.003239][T15742] RSP: 002b:00007f0a59cbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.003259][T15742] RAX: ffffffffffffffda RBX: 00007f0a59025fa0 RCX: 00007f0a58d9e0d9 [ 400.003273][T15742] RDX: 00000000200080c4 RSI: 0000200000000100 RDI: 0000000000000004 [ 400.003285][T15742] RBP: 00007f0a59cbd090 R08: 0000000000000000 R09: 0000000000000000 [ 400.003297][T15742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.003307][T15742] R13: 00007f0a59026038 R14: 00007f0a59025fa0 R15: 00007ffe93b592e8 [ 400.003334][T15742] [ 400.379553][T15751] netlink: 'syz.1.3283': attribute type 1 has an invalid length. [ 400.770310][T15753] syzkaller0: entered promiscuous mode [ 400.775845][T15753] syzkaller0: entered allmulticast mode [ 400.821183][T15753] netlink: 'syz.3.3286': attribute type 1 has an invalid length. [ 400.828966][T15753] netlink: 'syz.3.3286': attribute type 3 has an invalid length. [ 400.854331][T15753] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3286'. [ 400.945886][ T13] bridge_slave_1: left allmulticast mode [ 400.996774][ T13] bridge_slave_1: left promiscuous mode [ 401.002589][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.038558][ T13] bridge_slave_0: left allmulticast mode [ 401.044257][ T13] bridge_slave_0: left promiscuous mode [ 401.055604][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.063264][ T13] Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] SMP KASAN PTI [ 401.075186][ T13] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127] [ 401.084490][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 401.093797][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.103866][ T13] Workqueue: netns cleanup_net [ 401.108667][ T13] RIP: 0010:br_del_frame+0xd1/0x160 [ 401.113889][ T13] Code: f7 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 f9 17 94 f7 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d0 18 94 f7 4d 89 37 4d 85 f6 74 [ 401.133510][ T13] RSP: 0018:ffffc900001277e0 EFLAGS: 00010a06 [ 401.139600][ T13] RAX: 1bd5a00000000024 RBX: ffffffff905911d8 RCX: ffff88801deedd00 [ 401.147594][ T13] RDX: 0000000000000000 RSI: ffffffff905911c0 RDI: ffffffff905911d0 [ 401.155602][ T13] RBP: 000000000000001c R08: ffffffff8229047f R09: 0000000000000000 [ 401.163605][ T13] R10: 0000000000008000 R11: ffff8880b873fb28 R12: dffffc0000000000 [ 401.171617][ T13] R13: 1ffffffff20b223b R14: 0000000000000000 R15: dead000000000122 [ 401.179611][ T13] FS: 0000000000000000(0000) GS:ffff88812505b000(0000) knlGS:0000000000000000 [ 401.188582][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.195208][ T13] CR2: 00007f1ef9d5da08 CR3: 000000007753a000 CR4: 00000000003526f0 [ 401.203209][ T13] Call Trace: [ 401.206499][ T13] [ 401.209446][ T13] br_cfm_port_del+0x106/0x1a0 [ 401.214242][ T13] del_nbp+0x178/0x9f0 [ 401.218343][ T13] br_dev_delete+0x6e/0x130 [ 401.222871][ T13] br_net_exit_rtnl+0xb1/0x120 [ 401.227656][ T13] ? __pfx_br_net_exit_rtnl+0x10/0x10 [ 401.233088][ T13] ops_undo_list+0x319/0x8d0 [ 401.237720][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 401.242865][ T13] ? idr_destroy+0x227/0x290 [ 401.247507][ T13] cleanup_net+0x572/0x810 [ 401.251950][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 401.256917][ T13] ? rcu_is_watching+0x15/0xb0 [ 401.261702][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 401.267420][ T13] process_scheduled_works+0xa8e/0x14e0 [ 401.273002][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 401.279017][ T13] ? assign_work+0x3cf/0x5d0 [ 401.283630][ T13] worker_thread+0xa47/0xfb0 [ 401.288248][ T13] kthread+0x388/0x470 [ 401.292356][ T13] ? __pfx_worker_thread+0x10/0x10 [ 401.297487][ T13] ? __pfx_kthread+0x10/0x10 [ 401.302107][ T13] ret_from_fork+0x514/0xb70 [ 401.306727][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 401.311869][ T13] ? __switch_to+0xc89/0x1420 [ 401.316622][ T13] ? __pfx_kthread+0x10/0x10 [ 401.321248][ T13] ret_from_fork_asm+0x1a/0x30 [ 401.326048][ T13] [ 401.329091][ T13] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 401.354978][ T13] ---[ end trace 0000000000000000 ]--- [ 401.413870][ T13] RIP: 0010:br_del_frame+0xd1/0x160 [ 401.419131][ T13] Code: f7 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 f9 17 94 f7 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d0 18 94 f7 4d 89 37 4d 85 f6 74 [ 401.451571][ T13] RSP: 0018:ffffc900001277e0 EFLAGS: 00010a06 [ 401.472349][ T13] RAX: 1bd5a00000000024 RBX: ffffffff905911d8 RCX: ffff88801deedd00 [ 401.517835][ T13] RDX: 0000000000000000 RSI: ffffffff905911c0 RDI: ffffffff905911d0 [ 401.525880][ T13] RBP: 000000000000001c R08: ffffffff8229047f R09: 0000000000000000 [ 401.533866][ T13] R10: 0000000000008000 R11: ffff8880b873fb28 R12: dffffc0000000000 [ 401.541855][ T13] R13: 1ffffffff20b223b R14: 0000000000000000 R15: dead000000000122 [ 401.549841][ T13] FS: 0000000000000000(0000) GS:ffff88812505b000(0000) knlGS:0000000000000000 [ 401.558810][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.676912][ T13] CR2: 000055b9e9c05ee8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 401.696805][ T13] Kernel panic - not syncing: Fatal exception [ 401.703534][ T13] Kernel Offset: disabled [ 401.707859][ T13] Rebooting in 86400 seconds..