last executing test programs: 2m12.166530851s ago: executing program 1 (id=2257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2m12.066823767s ago: executing program 4 (id=2258): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x103, 0x1}, 0x20) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000001f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x800003, 0x3, 0x400}}, @restrict={0x8, 0x0, 0x0, 0xb, 0x1}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x4, 0x4}, {0x2}, {0xa}, {0xb}]}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x17, 0x0, 0x29, 0x1}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x5, 0xa}]}, {0x0, [0x61, 0x20]}}, &(0x7f0000000480)=""/217, 0x8c, 0xd9, 0x1, 0x5, 0x10000}, 0x28) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000880)={0x0, 0x6, 0xffffffffffff8919, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000c80)={{r2}, 0x0, 0x0, @inherit={0x88, &(0x7f00000005c0)={0x0, 0x8, 0x8, 0x8, {0x20, 0xfffffffffffffffa, 0x80000001, 0x81, 0x7}, [0x4, 0x2, 0xa0000000, 0x9, 0x9, 0x0, 0x80000000, 0x4]}}, @devid=r3}) close(r0) 2m12.044460586s ago: executing program 1 (id=2259): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x1400000000000000, 0x0, 0x24040084}, 0x0) 2m11.909130926s ago: executing program 1 (id=2261): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001380)=[{{&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000880)="723aa5669d6534e4069306556265a52d7b4979d14adbb3c76ab355fedcc87612f0f5", 0x25}, {&(0x7f00000008c0)="c23c31cc005949df9c3658d49469a5d9f7b75e57db1dd8e048dc77391e6f98f12d2ae5086ab922aa99faa10ab8c63a35cc1fcd2a91f1b5decaaae47dd93840897b55e1b7fc26f8dcec7273b7ef83a79295149a8a86df3b96136aa682dca6eb6d374e2f3f89566de2e177430bc165f6a00ea69cb9", 0x74}, {&(0x7f0000000940)="9ef74240a0e15251771c6030011864e9be14f804b512ac5a70158b1f144755b19c9f249b59d8e99cea6177b28d0cf7", 0xffffffb3}], 0x3, 0x0, 0x0, 0x20084044}}, {{&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a40)="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", 0xfd}], 0x1}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000e40)="00a52754418d60845891f171de02b260178bb1c8bed61cf7d7c45894fed6c5128fb7860bdc03c3276d902a20fc0ff4796350bf2edbcf50c91ffc791b9588e666998c52ef9c0af37edd10731a1696e4f7a2955f25516f5012335c768acd9a9ee23898ed09cdb1abbd37c658e058f7c8", 0x6f}], 0x1, &(0x7f0000000d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="dc5aa9bcbf900b50b49e70a29077f17300a74f1d185d09941f2e48690bd59f9a13dfe5925e763c6d6cf4dbc2dab1dbb08f6ab89c843b7f633364ca0ee12ccb26f93ae74cc85f72c5f15ecbe413bfc2745e0127dcf44628d27d7d1b5b0b3459cfb79e2583be041efd9ce2afb953813cbf2f29", 0x72}], 0x1, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xb8}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001100)="21abb9324d4bb0e142c60944b8f4722af52b9ab909390262a5d6c32aba6fe9eee6016da156e93e257e23ece67f6e74b254c75e76a74a", 0x36}, {&(0x7f0000001140)="d92a4161e20fd18389f3347fc4a8db3900829b87945e91344d0c440a63262e30f6c1e1e39a527d22abceb7b783c115533e68681ca0ffbcfe4d04f890394456034e2f0f5e6259bc1119aceb1d2e079b8da4510a797c07685febda2c69cbc5533e701b1c5df2835bbb0e49697f72c19937f703fe94ae6ff9eb2ed9cb6d6e7fa72e64a6d4745413a1905f24acfeaeaf02a2f61575f13a824fbdfb1f15dd6563ff0971a07850a71f758f764333fc4a935df29c81f8f75bb9ae3a10d11e9e860b79d246866ee467fbbcaf52ce94aff48eed0b25357a507547b7949a6ab041764d3962878bbf66864d53560492cbd40c9d4ab0f450", 0xf2}, {&(0x7f0000001240)="81c1cb152774ad5120d3269d2a892740ccc92b0f67e099aa80e62e5c0d7e3da5d7fa714dce56bcc5cd", 0x29}], 0x3, &(0x7f00000012c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x600, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}], 0x5, 0x10) 2m11.895450598s ago: executing program 4 (id=2262): socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=@getstat={0xe0, 0x15, 0x8, 0x70bd2c, 0x25dfdbfe, {{'drbg_nopr_hmac_sha384\x00'}, '\x00', '\x00', 0x400}, [""]}, 0xe0}, 0x1, 0x0, 0x0, 0x4008808}, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3ff, @default, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket$inet6(0xa, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0xffffffff, 0x1, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffe0}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x24000084) 2m11.772969627s ago: executing program 1 (id=2264): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xda01}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000041}, 0x200088d0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0xffffffff, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x7, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x5, 0x58b, 0x85a, 0x1003ff, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xfffffffb, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x103, 0x100006, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x4, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x4, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x5, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x9, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x3e, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xfffffffd, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x9, 0x10001, 0x7, 0x7f, 0x5, 0x3, 0x200000a, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0xa, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x4, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x6, 0x80000008, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x3, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x46, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x5, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xfdc4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x2, 0x365, 0x8, 0x8, 0x4000000f, 0x8, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x1000092, 0x0, 0x7, 0x1, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x200101, 0xadd9, 0x1, 0x4, 0x7, 0x7fffffff, 0x319, 0x4, 0x0, 0x9, 0x4, 0x3, 0x40008, 0x7, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x8d7, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x9, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x5, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x5, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x5, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x4000003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xffffffec, 0x5, 0x0, 0xb9a6, 0x522, 0x101, 0x2, 0x900, 0x6, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xffe, 0x1, 0x89d, 0x8, 0x3, 0x710, 0xe, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x1, 0x5, 0x1, 0xdbec, {0x8, 0x1, 0x8001, 0x5, 0x7, 0x9}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x8, 0xffffffff, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r6, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x10) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r14, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$nl_crypto(0x10, 0x3, 0x15) write$bt_hci(r14, &(0x7f00000000c0)=ANY=[@ANYRES64=r14], 0x6) 2m11.771058739s ago: executing program 4 (id=2265): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd01400010000100080c10000000000000000000", 0x58}], 0x1) 2m11.647698745s ago: executing program 4 (id=2268): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000000010000108fdff763f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001a800400"], 0x30}}, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x600, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000180)={{0xff, @remote, 0x4e20, 0x2, 'dh\x00', 0x13, 0x8, 0x1f}, {@multicast2, 0x4e20, 0x10000, 0x4, 0x10000}}, 0x44) 2m11.586985209s ago: executing program 1 (id=2269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2m11.434185985s ago: executing program 4 (id=2270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0xa, @local, 0xfffffe4a}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4aef6a06}, [@call={0x85, 0x0, 0x0, 0x43}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0xfffffffffffffc8d}, 0x4c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) socket$netlink(0x10, 0x3, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000140)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@private1, @in=@multicast1, 0x4e22, 0x6, 0x4e20, 0x4, 0xa, 0x80, 0xa0, 0x73, r3, r4}, {0x9, 0x6, 0x7, 0x6e03, 0x0, 0x10001, 0x9, 0x3}, {0x100000001, 0x1, 0x5, 0x5}, 0x3, 0x6e6bb5, 0x2, 0x1, 0x1, 0x1}, {{@in=@broadcast, 0x4d2, 0xff}, 0x2, @in=@remote, 0x3503, 0x0, 0x2, 0x4, 0x5, 0x5, 0x63}}, 0xe8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x48, 0x2e, 0x9, 0x70bd26, 0x0, {0x4}, [@nested={0x32, 0x11, 0x0, 0x1, [@generic="9326988d2516e0eff7e551cd3040c3a66adbc8caab96d3061d1fe91ff4f07d0c8ee6fde0c509b8de1c7db307a32f"]}]}, 0x48}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) 2m11.138484446s ago: executing program 4 (id=2273): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010027bd7004ffdbdf2500000000", @ANYRES32, @ANYBLOB="104e0600"], 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="00010000160001000000000000000000fe88"], 0x100}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x46, 0x0, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x1, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x8}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000001701000003"], 0x18, 0x40045}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000e0ff60145c0000000000050000fff9000000950000000000000017494040f23c3db0dbafe6b32e285578adaf7d01a1d4e0e2fb62886b4e52bcffc8a42f7f310cc06073cccf3dd23b92c42854e11eefebda053ec111ddf3396834075fbe067e662f1be3fcfca972b4b17088e94208a26729075e044803db83a485adb1c0a95177c48d794a6a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d030000bb86267c4c8db51aa99882339500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18}], 0x18, 0x890}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000000000000080000000100000080008002", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="030000000300"/28], 0x50) 2m11.138265202s ago: executing program 1 (id=2274): r0 = socket(0x1d, 0x3, 0x1) getpeername$packet(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x78, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5f2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff505}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x78}}, 0x8000) r2 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x4, 0x1}, 0x48) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3}, 0x20) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.events\x00', 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01070000adccb234f6e93d"], 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newtclass={0x2c, 0x28, 0x20, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0xe}, {0xffe0}, {0xfff1, 0xc}}, [@TCA_RATE={0x6, 0x5, {0xb5, 0xba}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="14000000100001000000000000020a03020000000000000000030000080c0001000000000000000002140000001100010000000000000000000a00000a"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44) (async, rerun: 64) sendto(r5, &(0x7f0000000380)="30c0a935fc04e1e58edd6fc8516988f7c7af3c83849af34796856a5f41c805e8eff4d6f536262715f31b463d09d5f9b7", 0x30, 0x4004080, &(0x7f00000003c0)=@ethernet={0x6, @link_local}, 0x80) 2m10.878265042s ago: executing program 32 (id=2273): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010027bd7004ffdbdf2500000000", @ANYRES32, @ANYBLOB="104e0600"], 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="00010000160001000000000000000000fe88"], 0x100}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x46, 0x0, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x1, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x8}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000001701000003"], 0x18, 0x40045}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000e0ff60145c0000000000050000fff9000000950000000000000017494040f23c3db0dbafe6b32e285578adaf7d01a1d4e0e2fb62886b4e52bcffc8a42f7f310cc06073cccf3dd23b92c42854e11eefebda053ec111ddf3396834075fbe067e662f1be3fcfca972b4b17088e94208a26729075e044803db83a485adb1c0a95177c48d794a6a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d030000bb86267c4c8db51aa99882339500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18}], 0x18, 0x890}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000000000000080000000100000080008002", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="030000000300"/28], 0x50) 2m10.694773886s ago: executing program 33 (id=2274): r0 = socket(0x1d, 0x3, 0x1) getpeername$packet(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x78, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5f2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff505}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x78}}, 0x8000) r2 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x4, 0x1}, 0x48) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3}, 0x20) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.events\x00', 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01070000adccb234f6e93d"], 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newtclass={0x2c, 0x28, 0x20, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0xe}, {0xffe0}, {0xfff1, 0xc}}, [@TCA_RATE={0x6, 0x5, {0xb5, 0xba}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="14000000100001000000000000020a03020000000000000000030000080c0001000000000000000002140000001100010000000000000000000a00000a"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44) (async, rerun: 64) sendto(r5, &(0x7f0000000380)="30c0a935fc04e1e58edd6fc8516988f7c7af3c83849af34796856a5f41c805e8eff4d6f536262715f31b463d09d5f9b7", 0x30, 0x4004080, &(0x7f00000003c0)=@ethernet={0x6, @link_local}, 0x80) 1.658338473s ago: executing program 5 (id=4419): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x3b23, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f00000003c0)="d3", 0x1, 0x80, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1.574896158s ago: executing program 5 (id=4421): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x3b23, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000003c0)="d3", 0x1, 0x80, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 1.565535588s ago: executing program 3 (id=4423): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x1e, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 1.464344503s ago: executing program 6 (id=4424): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) 1.463389415s ago: executing program 5 (id=4426): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040850}, 0x20040880) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x80000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 1.403463402s ago: executing program 3 (id=4428): r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 1.320583981s ago: executing program 6 (id=4430): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0", 0x19}, {&(0x7f0000000fc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d04", 0xc2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000001c0)="ff", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="050843cb10087b3d2217d4", 0xb}, {&(0x7f0000000380)="f742c97e8353ef9d8afd344747fb058fea97deff79dbb8e7b56b20a2d430240bf6d32e802d80bb22b247cbad7cbbc4ec0293eb6e0c35c044ad426db18e9403dc1b6b93bfb0ea8f4cb3f3f9cf3a2379cbb191560885ad9a829313c85064a06bc36da8d9a89b20656f349ba2f202c322bd93c50ad4a2d407383bfb6bef053dbb620324f60dfce9383279f82f5e7148e317cfa432eb7d7d38db6d1c70af445a17b02ad505e48cde584306", 0xa9}, {&(0x7f0000000640)="9502d92394027a53ed87f498965b73000000c3d35fdef593e6b27023c930b5128b33fc6c3176978e6d62", 0x2a}], 0x3}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)='*', 0x1}], 0x1}}], 0x4, 0x40408e0) 1.288995968s ago: executing program 3 (id=4431): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x32, 0x0, 0x0) 1.247488874s ago: executing program 5 (id=4434): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x4c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x10}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x7fffffff}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x8000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)="7016d4e124c4ccc88db54e49592f869659da96436053c995cae45e63b766d73a2f72cee0393ddc", 0x27}], 0x1}}], 0x1, 0x20000048) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.170710519s ago: executing program 6 (id=4435): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0", 0x19}, {&(0x7f0000000fc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d04", 0xc2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000001c0)="ff", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="050843cb10087b3d2217d4", 0xb}, {&(0x7f0000000380)="f742c97e8353ef9d8afd344747fb058fea97deff79dbb8e7b56b20a2d430240bf6d32e802d80bb22b247cbad7cbbc4ec0293eb6e0c35c044ad426db18e9403dc1b6b93bfb0ea8f4cb3f3f9cf3a2379cbb191560885ad9a829313c85064a06bc36da8d9a89b20656f349ba2f202c322bd93c50ad4a2d407383bfb6bef053dbb620324f60dfce9383279f82f5e7148e317cfa432eb7d7d38db6d1c70af445a17b02ad505e48cde584306", 0xa9}, {&(0x7f0000000640)="9502d92394027a53ed87f498965b73000000c3d35fdef593e6b27023c930b5128b33fc6c3176978e6d6236fd33d41b30c3ba02f9ced9d3b0885326b4465606c6d4bd89c93c", 0x45}], 0x3}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)='*', 0x1}], 0x1}}], 0x4, 0x40408e0) 1.134138899s ago: executing program 3 (id=4436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@private2}, 0x14) 1.127098463s ago: executing program 2 (id=4437): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[], 0x32) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 1.074625845s ago: executing program 6 (id=4438): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 1.073032107s ago: executing program 5 (id=4439): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000380)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @v={0x4, 0x2, 0x5, 0x6, 0x3, 0xac, 0x4, {0x8, 0x2, "5d9ac5613540eda5"}, 0x7, 0x4, 0x6, 0xf8}}, 0x19) 1.012945683s ago: executing program 6 (id=4440): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) 1.005303432s ago: executing program 3 (id=4441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRES32, @ANYBLOB="0000000000000000280012000c"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[], 0x6c}}, 0x20000841) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb800007a}, 0x70) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000056000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="100001"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r4, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8844) 427.879225ms ago: executing program 2 (id=4442): r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 364.204267ms ago: executing program 2 (id=4443): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) 363.998235ms ago: executing program 0 (id=4444): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) 325.527198ms ago: executing program 2 (id=4445): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x3b23, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7) sendto$inet(r0, &(0x7f00000003c0)="d3", 0x1, 0x80, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 315.994956ms ago: executing program 0 (id=4446): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x32, 0x0, 0x0) 269.443901ms ago: executing program 2 (id=4447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private2, 0x2, r1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000040)={@private2, r1}, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) socket$inet6(0xa, 0x1, 0x0) close(r4) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 254.517914ms ago: executing program 0 (id=4448): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 179.46151ms ago: executing program 0 (id=4449): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x4c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x10}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x7fffffff}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x8000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)="7016d4e124c4ccc88db54e49592f869659da96436053c995cae45e63b766d73a2f72cee0393ddc", 0x27}], 0x1}}], 0x1, 0x20000048) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 178.81563ms ago: executing program 0 (id=4450): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 115.126586ms ago: executing program 2 (id=4451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@private2}, 0x14) 58.703583ms ago: executing program 3 (id=4452): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[], 0x32) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 58.54648ms ago: executing program 5 (id=4453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}}, 0x0) 50.59773ms ago: executing program 6 (id=4454): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 0s ago: executing program 0 (id=4455): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0208ee090a00020001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x24040040) kernel console output (not intermixed with test programs): attributes in process `syz.0.2192'. [ 221.081774][T12449] sctp: [Deprecated]: syz.3.2196 (pid 12449) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.081774][T12449] Use struct sctp_sack_info instead [ 221.143953][T12457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2199'. [ 221.179755][T12457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2199'. [ 221.395043][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2203'. [ 221.418885][T12470] netlink: 'syz.4.2203': attribute type 5 has an invalid length. [ 221.438876][T12470] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2203'. [ 221.474092][T12470] geneve3: entered promiscuous mode [ 221.513995][T12470] geneve3: entered allmulticast mode [ 221.520931][T12437] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 221.525411][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2202'. [ 221.529711][T12437] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 221.580089][T12437] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 221.605381][T12437] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 221.657992][T12475] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20004 [ 221.690201][T12486] IPVS: nq: FWM 3 0x00000003 - no destination available [ 221.858183][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2213'. [ 222.230927][T12520] tipc: Enabling of bearer rejected, already enabled [ 222.264968][T12525] netlink: 'syz.4.2225': attribute type 11 has an invalid length. [ 222.276410][T12520] tipc: Resetting bearer [ 222.284536][T12526] netlink: 'syz.4.2225': attribute type 11 has an invalid length. [ 222.604484][T12539] lo speed is unknown, defaulting to 1000 [ 223.052955][T12551] tipc: Enabled bearer , priority 0 [ 223.063591][T12559] tipc: Enabling of bearer rejected, already enabled [ 223.086270][T12551] syzkaller0: entered promiscuous mode [ 223.091776][T12551] syzkaller0: entered allmulticast mode [ 223.356262][T12551] tipc: Resetting bearer [ 223.401997][T12549] tipc: Resetting bearer [ 223.471263][T12549] tipc: Disabling bearer [ 223.535117][T12579] lo speed is unknown, defaulting to 1000 [ 223.714041][T12593] IPVS: nq: FWM 3 0x00000003 - no destination available [ 223.950712][T12610] bond5: Removing last ns target with arp_interval on [ 223.964331][T12615] syzkaller0: entered promiscuous mode [ 223.969940][T12615] syzkaller0: entered allmulticast mode [ 224.457461][T12633] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 224.464785][T12633] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 224.511773][T12635] tipc: Enabled bearer , priority 0 [ 224.528298][T12635] syzkaller0: entered promiscuous mode [ 224.574623][T12635] syzkaller0: entered allmulticast mode [ 224.680626][T12639] dvmrp0: entered allmulticast mode [ 224.691478][T12635] tipc: Resetting bearer [ 224.710319][T12634] tipc: Resetting bearer [ 224.780282][T12634] tipc: Disabling bearer [ 224.842200][ T5833] bridge0: port 3(syz_tun) entered disabled state [ 224.874733][ T5833] bridge0: port 3(syz_tun) entered disabled state [ 224.999256][T12413] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.041495][T12413] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 225.137218][T12413] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.165700][T12413] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 225.279322][T12413] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.303775][T12413] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 225.381947][T12413] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.394751][T12413] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 225.486015][T12665] __nla_validate_parse: 16 callbacks suppressed [ 225.486035][T12665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2280'. [ 225.614906][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2281'. [ 225.642654][T12667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2281'. [ 225.762440][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.783938][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.792211][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.803857][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.818710][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.821398][T12667] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.978389][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.988071][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 226.005800][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 226.018586][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 226.027865][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 226.289219][T12698] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2288'. [ 226.448213][T12413] dvmrp0 (unregistering): left allmulticast mode [ 226.495955][T12413] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 226.782501][T12413] bond0 (unregistering): Released all slaves [ 226.878811][T12413] bond1 (unregistering): Released all slaves [ 226.898264][T12413] bond2 (unregistering): Released all slaves [ 226.962909][T12708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2290'. [ 227.008987][T12413] bond3 (unregistering): Released all slaves [ 227.098208][T12413] bond4 (unregistering): Released all slaves [ 227.110608][T12413] bond5 (unregistering): Released all slaves [ 227.124915][T12674] lo speed is unknown, defaulting to 1000 [ 227.297630][T12413] tipc: Left network mode [ 227.429759][T12718] IPv6: sit2: Disabled Multicast RS [ 227.495511][T12680] lo speed is unknown, defaulting to 1000 [ 227.889999][ T5150] Bluetooth: hci1: command tx timeout [ 227.969190][T12741] netlink: 'syz.2.2298': attribute type 29 has an invalid length. [ 228.125124][ T5150] Bluetooth: hci3: command tx timeout [ 228.143154][T12735] netlink: 'syz.2.2298': attribute type 29 has an invalid length. [ 228.503733][T12674] chnl_net:caif_netlink_parms(): no params data found [ 229.047975][T12413] vlan0: left allmulticast mode [ 229.053197][T12413] veth0_vlan: left allmulticast mode [ 229.059086][T12413] vlan0: left promiscuous mode [ 229.065554][T12413] veth1_macvtap: left promiscuous mode [ 229.071594][T12413] veth0_macvtap: left promiscuous mode [ 229.078821][T12413] veth1_vlan: left promiscuous mode [ 229.084410][T12413] veth0_vlan: left promiscuous mode [ 229.828365][T12803] : renamed from lo (while UP) [ 229.963621][ T5150] Bluetooth: hci1: command tx timeout [ 230.206664][ T5150] Bluetooth: hci3: command tx timeout [ 230.999127][T12813] netlink: 'syz.2.2316': attribute type 29 has an invalid length. [ 231.070806][T12674] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.092279][T12674] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.133629][T12674] bridge_slave_0: entered allmulticast mode [ 231.141284][T12674] bridge_slave_0: entered promiscuous mode [ 231.177885][T12823] netlink: zone id is out of range [ 231.183041][T12823] netlink: zone id is out of range [ 231.185965][T12674] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.195874][T12823] netlink: zone id is out of range [ 231.201247][T12823] netlink: zone id is out of range [ 231.214283][T12674] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.217125][T12823] netlink: zone id is out of range [ 231.221667][T12674] bridge_slave_1: entered allmulticast mode [ 231.238337][T12823] netlink: zone id is out of range [ 231.253744][T12823] netlink: zone id is out of range [ 231.273664][T12823] netlink: zone id is out of range [ 231.275149][T12674] bridge_slave_1: entered promiscuous mode [ 231.303937][T12823] netlink: zone id is out of range [ 231.312059][T12823] netlink: zone id is out of range [ 231.384363][T12827] syzkaller1: entered allmulticast mode [ 231.512769][T12674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.681824][T12674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.696986][T12846] netlink: 'syz.2.2323': attribute type 29 has an invalid length. [ 231.721289][T12846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2323'. [ 231.881326][T12674] team0: Port device team_slave_0 added [ 231.907864][T12674] team0: Port device team_slave_1 added [ 231.929370][T12680] chnl_net:caif_netlink_parms(): no params data found [ 231.986594][T12869] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 232.001942][T12413] IPVS: stop unused estimator thread 0... [ 232.043750][ T5150] Bluetooth: hci1: command tx timeout [ 232.050372][T12674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.057987][T12674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.084752][T12674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.120342][T12674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.135056][T12674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.161473][T12674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.244180][T12413] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.255656][T12413] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.283604][ T5150] Bluetooth: hci3: command tx timeout [ 232.411502][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2332'. [ 232.467507][T12886] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2332'. [ 232.478117][T12886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2332'. [ 232.593730][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2334'. [ 232.630577][T12413] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.640980][T12413] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.666053][T12674] hsr_slave_0: entered promiscuous mode [ 232.672482][T12674] hsr_slave_1: entered promiscuous mode [ 232.678847][T12674] debugfs: 'hsr0' already exists in 'hsr' [ 232.685199][T12674] Cannot create hsr debugfs directory [ 232.691892][T12680] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.699160][T12680] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.707615][T12680] bridge_slave_0: entered allmulticast mode [ 232.715013][T12680] bridge_slave_0: entered promiscuous mode [ 232.737248][T12892] bond0: (slave bridge_slave_1): Releasing backup interface [ 232.804801][T12413] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.815602][T12413] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.867906][T12680] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.889618][T12680] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.907698][T12680] bridge_slave_1: entered allmulticast mode [ 232.916092][T12680] bridge_slave_1: entered promiscuous mode [ 233.047428][T12413] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.069474][T12413] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.158486][T12680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.177408][T12680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.420725][T12680] team0: Port device team_slave_0 added [ 233.431595][T12680] team0: Port device team_slave_1 added [ 233.608975][T12680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.624547][T12680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.676166][T12680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.730534][T12936] netlink: 'syz.2.2348': attribute type 29 has an invalid length. [ 233.741240][T12936] netlink: 'syz.2.2348': attribute type 29 has an invalid length. [ 233.753805][T12680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.760853][T12680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.790527][T12680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.963318][T12680] hsr_slave_0: entered promiscuous mode [ 233.971337][T12680] hsr_slave_1: entered promiscuous mode [ 233.978285][T12680] debugfs: 'hsr0' already exists in 'hsr' [ 233.984780][T12680] Cannot create hsr debugfs directory [ 234.075428][T12413] team0: left allmulticast mode [ 234.080407][T12413] team_slave_0: left allmulticast mode [ 234.086683][T12413] team_slave_1: left allmulticast mode [ 234.092316][T12413] team0: left promiscuous mode [ 234.099959][T12413] team_slave_0: left promiscuous mode [ 234.109727][T12413] team_slave_1: left promiscuous mode [ 234.117612][T12413] bridge0: port 4(team0) entered disabled state [ 234.129777][T12413] bridge_slave_1: left allmulticast mode [ 234.135725][ T5150] Bluetooth: hci1: command tx timeout [ 234.142063][T12413] bridge_slave_1: left promiscuous mode [ 234.151011][T12413] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.162908][T12413] bridge_slave_0: left allmulticast mode [ 234.168974][T12413] bridge_slave_0: left promiscuous mode [ 234.175583][T12413] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.199123][T12413] veth5: left allmulticast mode [ 234.207565][T12413] veth5: left promiscuous mode [ 234.213014][T12413] bridge4: port 2(veth5) entered disabled state [ 234.226067][T12413] veth3: left allmulticast mode [ 234.231043][T12413] veth3: left promiscuous mode [ 234.236814][T12413] bridge4: port 1(veth3) entered disabled state [ 234.262566][T12413] veth9: left allmulticast mode [ 234.273561][T12413] veth9: left promiscuous mode [ 234.278550][T12413] bridge5: port 2(veth9) entered disabled state [ 234.307480][T12413] veth7: left allmulticast mode [ 234.312377][T12413] veth7: left promiscuous mode [ 234.326055][T12413] bridge5: port 1(veth7) entered disabled state [ 234.335447][T12413] veth11: left allmulticast mode [ 234.340390][T12413] veth11: left promiscuous mode [ 234.348020][T12413] bridge6: port 1(veth11) entered disabled state [ 234.363896][ T5150] Bluetooth: hci3: command tx timeout [ 234.696725][T12413] dvmrp0 (unregistering): left allmulticast mode [ 235.285194][T12413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.296033][T12413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.307373][T12413] bond0 (unregistering): Released all slaves [ 235.319560][T12413] bond1 (unregistering): Released all slaves [ 235.332545][T12413] bond2 (unregistering): Released all slaves [ 235.446348][T12413] : left promiscuous mode [ 235.564197][T12413] tipc: Disabling bearer [ 235.598569][T12413] tipc: Left network mode [ 235.635159][T12982] netlink: 'syz.2.2358': attribute type 29 has an invalid length. [ 235.683893][T12982] netlink: 'syz.2.2358': attribute type 29 has an invalid length. [ 235.744498][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2358'. [ 235.871336][T12994] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2360'. [ 235.882433][T12674] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.930404][T12994] bridge0: port 3(batadv1) entered blocking state [ 235.937431][T12994] bridge0: port 3(batadv1) entered disabled state [ 235.946018][T12994] batadv1: entered allmulticast mode [ 235.954361][T12994] batadv1: entered promiscuous mode [ 235.971362][T12674] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 236.003121][T12674] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 236.118105][T12674] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 236.145915][T12999] netlink: 'syz.2.2361': attribute type 4 has an invalid length. [ 236.424687][T12438] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 236.434901][T12438] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 236.559663][T13030] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2368'. [ 236.641661][T13024] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 236.659832][T13024] bond5 (unregistering): Released all slaves [ 236.747373][T12413] hsr_slave_0: left promiscuous mode [ 236.760921][T12413] hsr_slave_1: left promiscuous mode [ 236.785138][T12413] veth1_macvtap: left promiscuous mode [ 236.790857][T12413] veth0_macvtap: left promiscuous mode [ 236.798807][T12413] veth1_vlan: left allmulticast mode [ 236.804512][T12413] veth1_vlan: left promiscuous mode [ 236.809845][T12413] veth0_vlan: left promiscuous mode [ 236.943239][T12413] pim6reg (unregistering): left allmulticast mode [ 237.219142][T12413] team0 (unregistering): Port device team_slave_1 removed [ 237.255128][T12413] team0 (unregistering): Port device team_slave_0 removed [ 237.551836][T12411] smc: removing ib device syz0 [ 237.582904][T10616] lo speed is unknown, defaulting to 1000 [ 237.589732][T12680] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 237.600391][T10616] syz0: Port: 1 Link DOWN [ 237.623233][T12680] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 237.746970][T12680] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 237.792913][T12680] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 237.824363][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2373'. [ 237.925795][T13043] bridge3: entered promiscuous mode [ 237.931043][T13043] bridge3: entered allmulticast mode [ 238.004449][T13043] team0: Port device bridge3 added [ 238.324827][T12674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.528480][T13076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2379'. [ 238.555797][T12674] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.636170][T12430] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.643471][T12430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.740141][T12438] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.747400][T12438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.918988][T12680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.005153][T12680] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.032372][T13094] net_ratelimit: 16 callbacks suppressed [ 239.032390][T13094] netlink: zone id is out of range [ 239.075552][T12430] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.082710][T12430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.105718][T12430] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.112886][T12430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.154748][T13094] netlink: set zone limit has 8 unknown bytes [ 239.295213][T12680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.734098][T12674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.826890][T13139] pim6reg: left allmulticast mode [ 240.131191][T12680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.757472][T12413] IPVS: stop unused estimator thread 0... [ 240.776310][T12674] veth0_vlan: entered promiscuous mode [ 240.841192][T12674] veth1_vlan: entered promiscuous mode [ 240.952849][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2406'. [ 241.030501][T12674] veth0_macvtap: entered promiscuous mode [ 241.073092][T12674] veth1_macvtap: entered promiscuous mode [ 241.132110][T13197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2407'. [ 241.158468][T13197] bridge_slave_0: default FDB implementation only supports local addresses [ 241.192243][T12680] veth0_vlan: entered promiscuous mode [ 241.208629][T12680] veth1_vlan: entered promiscuous mode [ 241.258842][T12674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.306022][T12674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.315128][T13203] netlink: 'syz.2.2409': attribute type 9 has an invalid length. [ 241.322982][T13203] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2409'. [ 241.363587][T12408] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.372689][T12408] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.374231][T13203] netlink: 'syz.2.2409': attribute type 9 has an invalid length. [ 241.388726][T12408] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.424154][T13203] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2409'. [ 241.450791][T12408] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.609331][T12680] veth0_macvtap: entered promiscuous mode [ 241.652533][T12680] veth1_macvtap: entered promiscuous mode [ 241.729410][T12680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.764390][T12680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.778250][T12405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.805675][T12405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.865116][T12405] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.878563][T12405] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.972032][T12405] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.033802][T12405] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.100328][T12430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.135011][T12430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.347857][T13247] syzkaller0: entered promiscuous mode [ 242.352315][T12413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.372450][T12413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.374673][T13247] syzkaller0: entered allmulticast mode [ 242.509035][T13250] tipc: Enabled bearer , priority 0 [ 242.522228][T13250] syzkaller0: entered promiscuous mode [ 242.531502][T13250] syzkaller0: entered allmulticast mode [ 242.542281][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2421'. [ 242.554665][T12437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.573867][T12437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.656999][T13250] syzkaller0: mtu greater than device maximum [ 242.709344][T13248] tipc: Resetting bearer [ 242.779139][T13248] tipc: Disabling bearer [ 242.809413][T13268] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.817742][T13268] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.096704][T13285] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 243.117359][T13286] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 243.396558][T13298] netlink: 208 bytes leftover after parsing attributes in process `syz.6.2435'. [ 243.435438][T13300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2436'. [ 243.584963][T13314] netlink: zone id is out of range [ 243.600997][T13314] netlink: set zone limit has 8 unknown bytes [ 243.923626][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2441'. [ 244.062628][T13333] Cannot find add_set index 0 as target [ 244.225290][T13329] hsr_slave_0 (unregistering): left promiscuous mode [ 244.547454][T13363] netlink: zone id is out of range [ 244.553076][T13363] netlink: set zone limit has 8 unknown bytes [ 244.672788][T13370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2457'. [ 244.881653][T13379] FAULT_INJECTION: forcing a failure. [ 244.881653][T13379] name failslab, interval 1, probability 0, space 0, times 0 [ 244.902596][T13379] CPU: 1 UID: 0 PID: 13379 Comm: syz.6.2459 Not tainted syzkaller #0 PREEMPT(full) [ 244.902627][T13379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 244.902637][T13379] Call Trace: [ 244.902643][T13379] [ 244.902651][T13379] dump_stack_lvl+0x189/0x250 [ 244.902679][T13379] ? __pfx____ratelimit+0x10/0x10 [ 244.902702][T13379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.902725][T13379] ? __pfx__printk+0x10/0x10 [ 244.902746][T13379] ? __pfx___might_resched+0x10/0x10 [ 244.902763][T13379] ? fs_reclaim_acquire+0x7d/0x100 [ 244.902792][T13379] should_fail_ex+0x414/0x560 [ 244.902822][T13379] should_failslab+0xa8/0x100 [ 244.902841][T13379] kmem_cache_alloc_node_noprof+0x77/0x710 [ 244.902864][T13379] ? __alloc_skb+0x112/0x2d0 [ 244.902886][T13379] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 244.902913][T13379] __alloc_skb+0x112/0x2d0 [ 244.902940][T13379] rtmsg_ifinfo_build_skb+0x84/0x260 [ 244.902969][T13379] rtmsg_ifinfo+0x8c/0x1a0 [ 244.902994][T13379] netif_state_change+0x29e/0x3a0 [ 244.903018][T13379] ? __pfx_netif_state_change+0x10/0x10 [ 244.903040][T13379] ? make_kuid+0x1d9/0x680 [ 244.903056][T13379] ? __pfx_make_kuid+0x10/0x10 [ 244.903070][T13379] ? tun_get+0x1c/0x2f0 [ 244.903091][T13379] netdev_state_change+0x10a/0x220 [ 244.903113][T13379] __tun_chr_ioctl+0x1774/0x1df0 [ 244.903139][T13379] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 244.903166][T13379] ? __fget_files+0x3a0/0x420 [ 244.903182][T13379] ? __fget_files+0x2a/0x420 [ 244.903202][T13379] ? bpf_lsm_file_ioctl+0x9/0x20 [ 244.903221][T13379] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 244.903241][T13379] __se_sys_ioctl+0xfc/0x170 [ 244.903265][T13379] do_syscall_64+0xfa/0xfa0 [ 244.903284][T13379] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.903306][T13379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.903324][T13379] ? clear_bhb_loop+0x60/0xb0 [ 244.903347][T13379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.903363][T13379] RIP: 0033:0x7f3362b8f6c9 [ 244.903379][T13379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.903393][T13379] RSP: 002b:00007f3363ab9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.903411][T13379] RAX: ffffffffffffffda RBX: 00007f3362de5fa0 RCX: 00007f3362b8f6c9 [ 244.903423][T13379] RDX: 0000000000000000 RSI: 00000000400454cc RDI: 0000000000000003 [ 244.903434][T13379] RBP: 00007f3363ab9090 R08: 0000000000000000 R09: 0000000000000000 [ 244.903443][T13379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.903453][T13379] R13: 00007f3362de6038 R14: 00007f3362de5fa0 R15: 00007ffe8991f418 [ 244.903483][T13379] [ 245.209035][T13385] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 245.234474][T13390] netlink: 'syz.0.2463': attribute type 29 has an invalid length. [ 245.250666][T13390] netlink: 'syz.0.2463': attribute type 29 has an invalid length. [ 245.333072][T13390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2463'. [ 245.503591][T13399] "syz.3.2466" (13399) uses obsolete ecb(arc4) skcipher [ 245.632209][T13418] netlink: zone id is out of range [ 245.638746][T13418] netlink: set zone limit has 8 unknown bytes [ 245.801662][T13426] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.808864][T13426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.849014][T13429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2476'. [ 245.866430][T13433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2477'. [ 245.941166][T13435] netlink: 'syz.2.2478': attribute type 29 has an invalid length. [ 245.981426][T13435] netlink: 'syz.2.2478': attribute type 29 has an invalid length. [ 245.982307][T13429] tipc: Can't bind to reserved service type 0 [ 246.046027][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2478'. [ 246.217861][T13440] netlink: 'syz.5.2479': attribute type 29 has an invalid length. [ 246.251833][T13450] tipc: Enabled bearer , priority 0 [ 246.259104][T13440] netlink: 'syz.5.2479': attribute type 29 has an invalid length. [ 246.336063][T13457] x_tables: duplicate underflow at hook 1 [ 246.360747][T13450] syzkaller0: entered promiscuous mode [ 246.378969][T13450] syzkaller0: entered allmulticast mode [ 246.391630][T13450] tipc: Resetting bearer [ 246.403142][T13456] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.445692][T13460] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2486'. [ 246.455943][T13448] tipc: Resetting bearer [ 246.514322][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2486'. [ 246.550496][T13465] netlink: zone id is out of range [ 246.556471][T13465] netlink: set zone limit has 8 unknown bytes [ 247.293481][ T5889] tipc: Node number set to 170544367 [ 247.837563][T13448] tipc: Disabling bearer [ 248.207145][T13495] netlink: zone id is out of range [ 248.238521][T13495] netlink: set zone limit has 8 unknown bytes [ 248.919088][T13532] __nla_validate_parse: 2 callbacks suppressed [ 248.919105][T13532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2507'. [ 249.241719][T13547] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2509'. [ 249.259331][T13548] netlink: zone id is out of range [ 249.400862][T13556] netlink: 'syz.6.2513': attribute type 1 has an invalid length. [ 249.425665][T13556] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2513'. [ 249.641353][T13569] netlink: 'syz.6.2518': attribute type 2 has an invalid length. [ 249.974004][T13589] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2524'. [ 250.008891][T13589] netlink: 'syz.2.2524': attribute type 1 has an invalid length. [ 250.038140][T13589] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2524'. [ 250.113423][T13592] net_ratelimit: 1 callbacks suppressed [ 250.113440][T13592] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 250.131279][T13596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.173842][T13592] netlink: 'syz.6.2527': attribute type 3 has an invalid length. [ 250.289017][T13606] FAULT_INJECTION: forcing a failure. [ 250.289017][T13606] name failslab, interval 1, probability 0, space 0, times 0 [ 250.315858][T13606] CPU: 1 UID: 0 PID: 13606 Comm: syz.0.2529 Not tainted syzkaller #0 PREEMPT(full) [ 250.315882][T13606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 250.315893][T13606] Call Trace: [ 250.315900][T13606] [ 250.315907][T13606] dump_stack_lvl+0x189/0x250 [ 250.315935][T13606] ? __pfx____ratelimit+0x10/0x10 [ 250.315959][T13606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.315981][T13606] ? __pfx__printk+0x10/0x10 [ 250.316005][T13606] ? __lock_acquire+0xab9/0xd20 [ 250.316030][T13606] should_fail_ex+0x414/0x560 [ 250.316061][T13606] should_failslab+0xa8/0x100 [ 250.316080][T13606] kmem_cache_alloc_noprof+0x74/0x6e0 [ 250.316103][T13606] ? skb_clone+0x212/0x3a0 [ 250.316126][T13606] skb_clone+0x212/0x3a0 [ 250.316149][T13606] __netlink_deliver_tap+0x404/0x850 [ 250.316180][T13606] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.316198][T13606] netlink_deliver_tap+0x19c/0x1b0 [ 250.316216][T13606] netlink_unicast+0x7fa/0x9e0 [ 250.316248][T13606] ? __pfx_netlink_unicast+0x10/0x10 [ 250.316273][T13606] ? netlink_sendmsg+0x642/0xb30 [ 250.316287][T13606] ? skb_put+0x11b/0x210 [ 250.316308][T13606] netlink_sendmsg+0x805/0xb30 [ 250.316342][T13606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.316363][T13606] ? aa_sock_msg_perm+0xf1/0x1d0 [ 250.316389][T13606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 250.316406][T13606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.316425][T13606] __sock_sendmsg+0x21c/0x270 [ 250.316450][T13606] ____sys_sendmsg+0x505/0x830 [ 250.316475][T13606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.316504][T13606] ? import_iovec+0x74/0xa0 [ 250.316529][T13606] ___sys_sendmsg+0x21f/0x2a0 [ 250.316551][T13606] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.316608][T13606] ? __fget_files+0x2a/0x420 [ 250.316623][T13606] ? __fget_files+0x3a0/0x420 [ 250.316651][T13606] __x64_sys_sendmsg+0x19b/0x260 [ 250.316673][T13606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.316701][T13606] ? __pfx_ksys_write+0x10/0x10 [ 250.316728][T13606] ? do_syscall_64+0xbe/0xfa0 [ 250.316755][T13606] do_syscall_64+0xfa/0xfa0 [ 250.316776][T13606] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.316799][T13606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.316816][T13606] ? clear_bhb_loop+0x60/0xb0 [ 250.316838][T13606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.316855][T13606] RIP: 0033:0x7eff6fb8f6c9 [ 250.316871][T13606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.316886][T13606] RSP: 002b:00007eff70a16038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.316905][T13606] RAX: ffffffffffffffda RBX: 00007eff6fde5fa0 RCX: 00007eff6fb8f6c9 [ 250.316917][T13606] RDX: 0000000020000084 RSI: 0000200000000140 RDI: 0000000000000005 [ 250.316928][T13606] RBP: 00007eff70a16090 R08: 0000000000000000 R09: 0000000000000000 [ 250.316938][T13606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.316948][T13606] R13: 00007eff6fde6038 R14: 00007eff6fde5fa0 R15: 00007ffc9a68d428 [ 250.316979][T13606] [ 250.459385][T13617] netlink: zone id is out of range [ 250.655759][T13617] netlink: set zone limit has 8 unknown bytes [ 250.722409][T13623] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2535'. [ 250.749326][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2534'. [ 250.764718][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2534'. [ 250.923234][T13638] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2539'. [ 251.195861][T13650] FAULT_INJECTION: forcing a failure. [ 251.195861][T13650] name failslab, interval 1, probability 0, space 0, times 0 [ 251.263835][T13650] CPU: 1 UID: 0 PID: 13650 Comm: syz.3.2545 Not tainted syzkaller #0 PREEMPT(full) [ 251.263861][T13650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 251.263872][T13650] Call Trace: [ 251.263880][T13650] [ 251.263889][T13650] dump_stack_lvl+0x189/0x250 [ 251.263917][T13650] ? __pfx____ratelimit+0x10/0x10 [ 251.263939][T13650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.263962][T13650] ? __pfx__printk+0x10/0x10 [ 251.263988][T13650] ? __pfx___might_resched+0x10/0x10 [ 251.264006][T13650] ? fs_reclaim_acquire+0x7d/0x100 [ 251.264035][T13650] should_fail_ex+0x414/0x560 [ 251.264066][T13650] should_failslab+0xa8/0x100 [ 251.264087][T13650] __kmalloc_noprof+0xcb/0x7f0 [ 251.264109][T13650] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 251.264132][T13650] ? rcu_is_watching+0x15/0xb0 [ 251.264156][T13650] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 251.264187][T13650] genl_family_rcv_msg_doit+0xb8/0x300 [ 251.264216][T13650] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 251.264246][T13650] ? apparmor_capable+0x137/0x1b0 [ 251.264274][T13650] ? bpf_lsm_capable+0x9/0x20 [ 251.264294][T13650] ? security_capable+0x7e/0x2e0 [ 251.264327][T13650] genl_rcv_msg+0x60e/0x790 [ 251.264356][T13650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.264376][T13650] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 251.264402][T13650] ? __asan_memcpy+0x40/0x70 [ 251.264424][T13650] ? __pfx_ref_tracker_free+0x10/0x10 [ 251.264450][T13650] netlink_rcv_skb+0x208/0x470 [ 251.264474][T13650] ? __lock_acquire+0xab9/0xd20 [ 251.264493][T13650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.264515][T13650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.264561][T13650] ? down_read+0x1ad/0x2e0 [ 251.264581][T13650] genl_rcv+0x28/0x40 [ 251.264600][T13650] netlink_unicast+0x82f/0x9e0 [ 251.264634][T13650] ? __pfx_netlink_unicast+0x10/0x10 [ 251.264660][T13650] ? netlink_sendmsg+0x642/0xb30 [ 251.264675][T13650] ? skb_put+0x11b/0x210 [ 251.264697][T13650] netlink_sendmsg+0x805/0xb30 [ 251.264725][T13650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.264746][T13650] ? aa_sock_msg_perm+0xf1/0x1d0 [ 251.264772][T13650] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 251.264790][T13650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.264808][T13650] __sock_sendmsg+0x21c/0x270 [ 251.264835][T13650] ____sys_sendmsg+0x505/0x830 [ 251.264861][T13650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.264890][T13650] ? import_iovec+0x74/0xa0 [ 251.264916][T13650] ___sys_sendmsg+0x21f/0x2a0 [ 251.264938][T13650] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.264997][T13650] ? __fget_files+0x2a/0x420 [ 251.265013][T13650] ? __fget_files+0x3a0/0x420 [ 251.265042][T13650] __x64_sys_sendmsg+0x19b/0x260 [ 251.265064][T13650] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.265094][T13650] ? __pfx_ksys_write+0x10/0x10 [ 251.265120][T13650] ? do_syscall_64+0xbe/0xfa0 [ 251.265147][T13650] do_syscall_64+0xfa/0xfa0 [ 251.265168][T13650] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.265190][T13650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.265208][T13650] ? clear_bhb_loop+0x60/0xb0 [ 251.265230][T13650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.265247][T13650] RIP: 0033:0x7f4297f8f6c9 [ 251.265268][T13650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.265283][T13650] RSP: 002b:00007f4298e5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.265303][T13650] RAX: ffffffffffffffda RBX: 00007f42981e5fa0 RCX: 00007f4297f8f6c9 [ 251.265316][T13650] RDX: 0000000020000084 RSI: 0000200000000140 RDI: 0000000000000005 [ 251.265328][T13650] RBP: 00007f4298e5a090 R08: 0000000000000000 R09: 0000000000000000 [ 251.265340][T13650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.265350][T13650] R13: 00007f42981e6038 R14: 00007f42981e5fa0 R15: 00007fff7e745ae8 [ 251.265384][T13650] [ 251.671036][T13657] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2547'. [ 252.123113][T13671] netlink: 'syz.6.2551': attribute type 12 has an invalid length. [ 252.144737][T13671] netlink: 'syz.6.2551': attribute type 11 has an invalid length. [ 252.234956][T13686] FAULT_INJECTION: forcing a failure. [ 252.234956][T13686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.248674][T13686] CPU: 1 UID: 0 PID: 13686 Comm: syz.0.2560 Not tainted syzkaller #0 PREEMPT(full) [ 252.248697][T13686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 252.248707][T13686] Call Trace: [ 252.248714][T13686] [ 252.248721][T13686] dump_stack_lvl+0x189/0x250 [ 252.248749][T13686] ? __pfx____ratelimit+0x10/0x10 [ 252.248772][T13686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.248794][T13686] ? __pfx__printk+0x10/0x10 [ 252.248812][T13686] ? __might_fault+0xb0/0x130 [ 252.248855][T13686] should_fail_ex+0x414/0x560 [ 252.248885][T13686] _copy_from_iter+0x1de/0x1790 [ 252.248911][T13686] ? rcu_is_watching+0x15/0xb0 [ 252.248934][T13686] ? kmalloc_reserve+0xbd/0x290 [ 252.248952][T13686] ? __pfx__copy_from_iter+0x10/0x10 [ 252.248973][T13686] ? __build_skb_around+0x262/0x3f0 [ 252.249001][T13686] ? netlink_sendmsg+0x642/0xb30 [ 252.249017][T13686] ? skb_put+0x11b/0x210 [ 252.249037][T13686] netlink_sendmsg+0x6b2/0xb30 [ 252.249064][T13686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.249084][T13686] ? aa_sock_msg_perm+0xf1/0x1d0 [ 252.249111][T13686] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.249128][T13686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.249146][T13686] __sock_sendmsg+0x21c/0x270 [ 252.249171][T13686] ____sys_sendmsg+0x505/0x830 [ 252.249196][T13686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.249224][T13686] ? import_iovec+0x74/0xa0 [ 252.249248][T13686] ___sys_sendmsg+0x21f/0x2a0 [ 252.249269][T13686] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.249323][T13686] ? __fget_files+0x2a/0x420 [ 252.249338][T13686] ? __fget_files+0x3a0/0x420 [ 252.249365][T13686] __x64_sys_sendmsg+0x19b/0x260 [ 252.249386][T13686] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.249414][T13686] ? __pfx_ksys_write+0x10/0x10 [ 252.249435][T13686] ? do_syscall_64+0xbe/0xfa0 [ 252.249460][T13686] do_syscall_64+0xfa/0xfa0 [ 252.249479][T13686] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.249501][T13686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.249517][T13686] ? clear_bhb_loop+0x60/0xb0 [ 252.249536][T13686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.249550][T13686] RIP: 0033:0x7eff6fb8f6c9 [ 252.249568][T13686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.249581][T13686] RSP: 002b:00007eff70a16038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.249599][T13686] RAX: ffffffffffffffda RBX: 00007eff6fde5fa0 RCX: 00007eff6fb8f6c9 [ 252.249610][T13686] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 252.249620][T13686] RBP: 00007eff70a16090 R08: 0000000000000000 R09: 0000000000000000 [ 252.249631][T13686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.249640][T13686] R13: 00007eff6fde6038 R14: 00007eff6fde5fa0 R15: 00007ffc9a68d428 [ 252.249667][T13686] [ 252.798355][T13706] FAULT_INJECTION: forcing a failure. [ 252.798355][T13706] name failslab, interval 1, probability 0, space 0, times 0 [ 252.864330][T13706] CPU: 1 UID: 0 PID: 13706 Comm: syz.6.2563 Not tainted syzkaller #0 PREEMPT(full) [ 252.864355][T13706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 252.864366][T13706] Call Trace: [ 252.864373][T13706] [ 252.864381][T13706] dump_stack_lvl+0x189/0x250 [ 252.864410][T13706] ? __pfx____ratelimit+0x10/0x10 [ 252.864433][T13706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.864456][T13706] ? __pfx__printk+0x10/0x10 [ 252.864481][T13706] ? __pfx___might_resched+0x10/0x10 [ 252.864499][T13706] ? fs_reclaim_acquire+0x7d/0x100 [ 252.864529][T13706] should_fail_ex+0x414/0x560 [ 252.864560][T13706] should_failslab+0xa8/0x100 [ 252.864581][T13706] __kmalloc_noprof+0xcb/0x7f0 [ 252.864603][T13706] ? l2tp_session_create+0x44/0xd60 [ 252.864636][T13706] l2tp_session_create+0x44/0xd60 [ 252.864660][T13706] ? __local_bh_enable_ip+0x12d/0x1c0 [ 252.864679][T13706] ? l2tp_eth_create+0x153/0xbd0 [ 252.864707][T13706] l2tp_eth_create+0x172/0xbd0 [ 252.864728][T13706] ? l2tp_tunnel_get+0x8d/0x400 [ 252.864753][T13706] ? l2tp_tunnel_get+0x365/0x400 [ 252.864774][T13706] ? l2tp_tunnel_get+0x8d/0x400 [ 252.864797][T13706] ? __pfx_l2tp_eth_create+0x10/0x10 [ 252.864830][T13706] l2tp_nl_cmd_session_create+0x733/0xc20 [ 252.864864][T13706] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 252.864895][T13706] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 252.864927][T13706] genl_family_rcv_msg_doit+0x215/0x300 [ 252.864956][T13706] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 252.864992][T13706] ? bpf_lsm_capable+0x9/0x20 [ 252.865019][T13706] ? security_capable+0x7e/0x2e0 [ 252.865050][T13706] genl_rcv_msg+0x60e/0x790 [ 252.865079][T13706] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.865099][T13706] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 252.865124][T13706] ? __asan_memcpy+0x40/0x70 [ 252.865145][T13706] ? __pfx_ref_tracker_free+0x10/0x10 [ 252.865171][T13706] netlink_rcv_skb+0x208/0x470 [ 252.865195][T13706] ? __lock_acquire+0xab9/0xd20 [ 252.865212][T13706] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.865232][T13706] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.865277][T13706] ? down_read+0x1ad/0x2e0 [ 252.865297][T13706] genl_rcv+0x28/0x40 [ 252.865315][T13706] netlink_unicast+0x82f/0x9e0 [ 252.865349][T13706] ? __pfx_netlink_unicast+0x10/0x10 [ 252.865374][T13706] ? netlink_sendmsg+0x642/0xb30 [ 252.865390][T13706] ? skb_put+0x11b/0x210 [ 252.865411][T13706] netlink_sendmsg+0x805/0xb30 [ 252.865439][T13706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.865461][T13706] ? aa_sock_msg_perm+0xf1/0x1d0 [ 252.865486][T13706] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.865503][T13706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.865522][T13706] __sock_sendmsg+0x21c/0x270 [ 252.865548][T13706] ____sys_sendmsg+0x505/0x830 [ 252.865573][T13706] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.865602][T13706] ? import_iovec+0x74/0xa0 [ 252.865628][T13706] ___sys_sendmsg+0x21f/0x2a0 [ 252.865650][T13706] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.865709][T13706] ? __fget_files+0x2a/0x420 [ 252.865725][T13706] ? __fget_files+0x3a0/0x420 [ 252.865753][T13706] __x64_sys_sendmsg+0x19b/0x260 [ 252.865774][T13706] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.865804][T13706] ? __pfx_ksys_write+0x10/0x10 [ 252.865832][T13706] ? do_syscall_64+0xbe/0xfa0 [ 252.865859][T13706] do_syscall_64+0xfa/0xfa0 [ 252.865879][T13706] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.865901][T13706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.865919][T13706] ? clear_bhb_loop+0x60/0xb0 [ 252.865941][T13706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.865956][T13706] RIP: 0033:0x7f3362b8f6c9 [ 252.865973][T13706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.865988][T13706] RSP: 002b:00007f3363ab9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.866006][T13706] RAX: ffffffffffffffda RBX: 00007f3362de5fa0 RCX: 00007f3362b8f6c9 [ 252.866025][T13706] RDX: 0000000020000084 RSI: 0000200000000140 RDI: 0000000000000005 [ 252.866037][T13706] RBP: 00007f3363ab9090 R08: 0000000000000000 R09: 0000000000000000 [ 252.866048][T13706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.866058][T13706] R13: 00007f3362de6038 R14: 00007f3362de5fa0 R15: 00007ffe8991f418 [ 252.866091][T13706] [ 253.398239][T13713] syzkaller0: entered promiscuous mode [ 253.458637][T13713] syzkaller0: entered allmulticast mode [ 253.580159][T13713] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 253.648636][T13729] netlink: 'syz.5.2569': attribute type 4 has an invalid length. [ 253.704947][T13735] netlink: zone id is out of range [ 253.748665][T13735] netlink: set zone limit has 8 unknown bytes [ 253.878171][T12408] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.903569][T12408] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.914261][T12408] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.947213][T12408] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.966734][T12408] netdevsim netdevsim1 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.983035][T12408] netdevsim netdevsim1 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.025654][T12408] netdevsim netdevsim1 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.089118][T12408] netdevsim netdevsim1 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.211006][T13753] __nla_validate_parse: 7 callbacks suppressed [ 254.211024][T13753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2576'. [ 254.235689][T13753] bridge_slave_0: default FDB implementation only supports local addresses [ 254.432125][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2576'. [ 254.937506][T13790] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2587'. [ 255.158319][T13803] netlink: 'syz.3.2591': attribute type 2 has an invalid length. [ 255.180175][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2591'. [ 255.223609][T13804] netlink: 'syz.6.2592': attribute type 4 has an invalid length. [ 255.649942][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.656408][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.669541][T13829] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 255.698878][T13829] bond5 (unregistering): Released all slaves [ 255.730339][T13837] netlink: zone id is out of range [ 255.774358][T13837] netlink: set zone limit has 8 unknown bytes [ 256.473124][T13870] netlink: 'syz.0.2606': attribute type 8 has an invalid length. [ 256.493241][T13872] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2608'. [ 256.520138][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2609'. [ 256.547259][T13870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2606'. [ 256.557322][T13870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2606'. [ 257.440295][T13914] vlan2: entered promiscuous mode [ 257.471350][T13914] vlan2: entered allmulticast mode [ 257.509639][T13914] hsr_slave_1: entered allmulticast mode [ 257.927374][T13951] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2629'. [ 258.908327][T13997] FAULT_INJECTION: forcing a failure. [ 258.908327][T13997] name failslab, interval 1, probability 0, space 0, times 0 [ 258.967143][T13997] CPU: 1 UID: 0 PID: 13997 Comm: syz.3.2642 Not tainted syzkaller #0 PREEMPT(full) [ 258.967169][T13997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 258.967180][T13997] Call Trace: [ 258.967187][T13997] [ 258.967195][T13997] dump_stack_lvl+0x189/0x250 [ 258.967224][T13997] ? __pfx____ratelimit+0x10/0x10 [ 258.967247][T13997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.967270][T13997] ? __pfx__printk+0x10/0x10 [ 258.967294][T13997] ? __pfx___might_resched+0x10/0x10 [ 258.967318][T13997] should_fail_ex+0x414/0x560 [ 258.967349][T13997] should_failslab+0xa8/0x100 [ 258.967368][T13997] kmem_cache_alloc_node_noprof+0x77/0x710 [ 258.967393][T13997] ? __alloc_skb+0x112/0x2d0 [ 258.967424][T13997] __alloc_skb+0x112/0x2d0 [ 258.967459][T13997] netlink_ack+0x146/0xa50 [ 258.967481][T13997] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 258.967503][T13997] ? ref_tracker_free+0x63a/0x7d0 [ 258.967520][T13997] ? __asan_memcpy+0x40/0x70 [ 258.967541][T13997] ? __pfx_ref_tracker_free+0x10/0x10 [ 258.967566][T13997] netlink_rcv_skb+0x28c/0x470 [ 258.967594][T13997] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 258.967620][T13997] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 258.967654][T13997] ? netlink_deliver_tap+0x2e/0x1b0 [ 258.967679][T13997] netlink_unicast+0x82f/0x9e0 [ 258.967712][T13997] ? __pfx_netlink_unicast+0x10/0x10 [ 258.967737][T13997] ? netlink_sendmsg+0x642/0xb30 [ 258.967752][T13997] ? skb_put+0x11b/0x210 [ 258.967772][T13997] netlink_sendmsg+0x805/0xb30 [ 258.967799][T13997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.967819][T13997] ? aa_sock_msg_perm+0xf1/0x1d0 [ 258.967846][T13997] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 258.967863][T13997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.967881][T13997] __sock_sendmsg+0x21c/0x270 [ 258.967907][T13997] ____sys_sendmsg+0x505/0x830 [ 258.967931][T13997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.967959][T13997] ? import_iovec+0x74/0xa0 [ 258.967984][T13997] ___sys_sendmsg+0x21f/0x2a0 [ 258.968005][T13997] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.968060][T13997] ? __fget_files+0x2a/0x420 [ 258.968075][T13997] ? __fget_files+0x3a0/0x420 [ 258.968102][T13997] __x64_sys_sendmsg+0x19b/0x260 [ 258.968124][T13997] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 258.968152][T13997] ? __pfx_ksys_write+0x10/0x10 [ 258.968182][T13997] ? do_syscall_64+0xbe/0xfa0 [ 258.968208][T13997] do_syscall_64+0xfa/0xfa0 [ 258.968230][T13997] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.968252][T13997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.968270][T13997] ? clear_bhb_loop+0x60/0xb0 [ 258.968291][T13997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.968308][T13997] RIP: 0033:0x7f4297f8f6c9 [ 258.968324][T13997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.968339][T13997] RSP: 002b:00007f4298e5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.968359][T13997] RAX: ffffffffffffffda RBX: 00007f42981e5fa0 RCX: 00007f4297f8f6c9 [ 258.968372][T13997] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000003 [ 258.968383][T13997] RBP: 00007f4298e5a090 R08: 0000000000000000 R09: 0000000000000000 [ 258.968394][T13997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.968405][T13997] R13: 00007f42981e6038 R14: 00007f42981e5fa0 R15: 00007fff7e745ae8 [ 258.968436][T13997] [ 260.106820][T14008] xt_nat: multiple ranges no longer supported [ 260.134298][T14008] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2646'. [ 260.177643][T14008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.185293][T14008] IPv6: NLM_F_CREATE should be set when creating new route [ 260.205430][T14012] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2647'. [ 260.283747][T14013] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2647'. [ 260.481746][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2648'. [ 260.567261][T14030] netlink: 'syz.2.2652': attribute type 29 has an invalid length. [ 260.596344][T14030] netlink: 'syz.2.2652': attribute type 29 has an invalid length. [ 260.649037][T14030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2652'. [ 260.975013][T14052] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 261.326335][T14071] FAULT_INJECTION: forcing a failure. [ 261.326335][T14071] name failslab, interval 1, probability 0, space 0, times 0 [ 261.376631][T14071] CPU: 0 UID: 0 PID: 14071 Comm: syz.2.2668 Not tainted syzkaller #0 PREEMPT(full) [ 261.376656][T14071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 261.376667][T14071] Call Trace: [ 261.376674][T14071] [ 261.376682][T14071] dump_stack_lvl+0x189/0x250 [ 261.376710][T14071] ? __pfx____ratelimit+0x10/0x10 [ 261.376732][T14071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.376755][T14071] ? __pfx__printk+0x10/0x10 [ 261.376777][T14071] ? __pfx___might_resched+0x10/0x10 [ 261.376797][T14071] ? fs_reclaim_acquire+0x7d/0x100 [ 261.376829][T14071] should_fail_ex+0x414/0x560 [ 261.376860][T14071] should_failslab+0xa8/0x100 [ 261.376880][T14071] __kmalloc_cache_noprof+0x6f/0x6f0 [ 261.376904][T14071] ? fl_change+0x19e/0x3a80 [ 261.376928][T14071] fl_change+0x19e/0x3a80 [ 261.376953][T14071] ? fl_get+0x9a/0x380 [ 261.376985][T14071] ? fl_get+0x9a/0x380 [ 261.377003][T14071] ? fl_get+0x9a/0x380 [ 261.377017][T14071] ? fl_get+0x9a/0x380 [ 261.377034][T14071] ? fl_get+0x2f1/0x380 [ 261.377051][T14071] ? __pfx_fl_change+0x10/0x10 [ 261.377069][T14071] ? __pfx_fl_get+0x10/0x10 [ 261.377096][T14071] tc_new_tfilter+0xdca/0x15b0 [ 261.377145][T14071] ? __pfx_tc_new_tfilter+0x10/0x10 [ 261.377161][T14071] ? __dev_queue_xmit+0x1d79/0x3b50 [ 261.377216][T14071] ? __pfx_tc_new_tfilter+0x10/0x10 [ 261.377234][T14071] rtnetlink_rcv_msg+0x7cf/0xb70 [ 261.377264][T14071] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 261.377287][T14071] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 261.377308][T14071] ? ref_tracker_free+0x63a/0x7d0 [ 261.377326][T14071] ? __asan_memcpy+0x40/0x70 [ 261.377347][T14071] ? __pfx_ref_tracker_free+0x10/0x10 [ 261.377374][T14071] netlink_rcv_skb+0x208/0x470 [ 261.377401][T14071] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 261.377427][T14071] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.377464][T14071] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.377490][T14071] netlink_unicast+0x82f/0x9e0 [ 261.377523][T14071] ? __pfx_netlink_unicast+0x10/0x10 [ 261.377550][T14071] ? netlink_sendmsg+0x642/0xb30 [ 261.377564][T14071] ? skb_put+0x11b/0x210 [ 261.377586][T14071] netlink_sendmsg+0x805/0xb30 [ 261.377617][T14071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.377638][T14071] ? aa_sock_msg_perm+0xf1/0x1d0 [ 261.377668][T14071] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.377685][T14071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.377703][T14071] __sock_sendmsg+0x21c/0x270 [ 261.377729][T14071] ____sys_sendmsg+0x505/0x830 [ 261.377754][T14071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.377783][T14071] ? import_iovec+0x74/0xa0 [ 261.377808][T14071] ___sys_sendmsg+0x21f/0x2a0 [ 261.377830][T14071] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.377885][T14071] ? __fget_files+0x2a/0x420 [ 261.377901][T14071] ? __fget_files+0x3a0/0x420 [ 261.377928][T14071] __x64_sys_sendmsg+0x19b/0x260 [ 261.377949][T14071] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.377984][T14071] ? __pfx_ksys_write+0x10/0x10 [ 261.378012][T14071] ? do_syscall_64+0xbe/0xfa0 [ 261.378039][T14071] do_syscall_64+0xfa/0xfa0 [ 261.378060][T14071] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.378083][T14071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.378101][T14071] ? clear_bhb_loop+0x60/0xb0 [ 261.378123][T14071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.378140][T14071] RIP: 0033:0x7f6a4f18f6c9 [ 261.378157][T14071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.378172][T14071] RSP: 002b:00007f6a50038038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.378192][T14071] RAX: ffffffffffffffda RBX: 00007f6a4f3e5fa0 RCX: 00007f6a4f18f6c9 [ 261.378205][T14071] RDX: 0000000024000084 RSI: 0000200000000080 RDI: 0000000000000005 [ 261.378217][T14071] RBP: 00007f6a50038090 R08: 0000000000000000 R09: 0000000000000000 [ 261.378227][T14071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.378234][T14071] R13: 00007f6a4f3e6038 R14: 00007f6a4f3e5fa0 R15: 00007ffc12669888 [ 261.378265][T14071] [ 261.991831][T14092] FAULT_INJECTION: forcing a failure. [ 261.991831][T14092] name failslab, interval 1, probability 0, space 0, times 0 [ 262.051098][T14092] CPU: 0 UID: 0 PID: 14092 Comm: syz.2.2673 Not tainted syzkaller #0 PREEMPT(full) [ 262.051124][T14092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.051135][T14092] Call Trace: [ 262.051151][T14092] [ 262.051158][T14092] dump_stack_lvl+0x189/0x250 [ 262.051184][T14092] ? __pfx____ratelimit+0x10/0x10 [ 262.051207][T14092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.051229][T14092] ? __pfx__printk+0x10/0x10 [ 262.051244][T14092] ? __sock_sendmsg+0x21c/0x270 [ 262.051265][T14092] ? do_syscall_64+0xfa/0xfa0 [ 262.051297][T14092] should_fail_ex+0x414/0x560 [ 262.051327][T14092] should_failslab+0xa8/0x100 [ 262.051348][T14092] kmem_cache_alloc_noprof+0x74/0x6e0 [ 262.051370][T14092] ? skb_clone+0x212/0x3a0 [ 262.051395][T14092] skb_clone+0x212/0x3a0 [ 262.051417][T14092] __netlink_deliver_tap+0x404/0x850 [ 262.051447][T14092] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.051464][T14092] netlink_deliver_tap+0x19c/0x1b0 [ 262.051481][T14092] netlink_sendskb+0x68/0x140 [ 262.051507][T14092] netlink_unicast+0x397/0x9e0 [ 262.051527][T14092] ? __asan_memcpy+0x40/0x70 [ 262.051556][T14092] ? __pfx_netlink_unicast+0x10/0x10 [ 262.051590][T14092] netlink_rcv_skb+0x28c/0x470 [ 262.051617][T14092] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 262.051643][T14092] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 262.051680][T14092] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.051706][T14092] netlink_unicast+0x82f/0x9e0 [ 262.051739][T14092] ? __pfx_netlink_unicast+0x10/0x10 [ 262.051764][T14092] ? netlink_sendmsg+0x642/0xb30 [ 262.051778][T14092] ? skb_put+0x11b/0x210 [ 262.051800][T14092] netlink_sendmsg+0x805/0xb30 [ 262.051826][T14092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.051847][T14092] ? aa_sock_msg_perm+0xf1/0x1d0 [ 262.051873][T14092] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.051889][T14092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.051906][T14092] __sock_sendmsg+0x21c/0x270 [ 262.051930][T14092] ____sys_sendmsg+0x505/0x830 [ 262.051955][T14092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.051982][T14092] ? import_iovec+0x74/0xa0 [ 262.052004][T14092] ___sys_sendmsg+0x21f/0x2a0 [ 262.052023][T14092] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.052073][T14092] ? __fget_files+0x2a/0x420 [ 262.052087][T14092] ? __fget_files+0x3a0/0x420 [ 262.052113][T14092] __x64_sys_sendmsg+0x19b/0x260 [ 262.052135][T14092] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.052171][T14092] ? __pfx_ksys_write+0x10/0x10 [ 262.052199][T14092] ? do_syscall_64+0xbe/0xfa0 [ 262.052226][T14092] do_syscall_64+0xfa/0xfa0 [ 262.052248][T14092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.052264][T14092] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 262.052281][T14092] ? clear_bhb_loop+0x60/0xb0 [ 262.052302][T14092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.052319][T14092] RIP: 0033:0x7f6a4f18f6c9 [ 262.052334][T14092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.052349][T14092] RSP: 002b:00007f6a50038038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.052368][T14092] RAX: ffffffffffffffda RBX: 00007f6a4f3e5fa0 RCX: 00007f6a4f18f6c9 [ 262.052379][T14092] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000003 [ 262.052390][T14092] RBP: 00007f6a50038090 R08: 0000000000000000 R09: 0000000000000000 [ 262.052401][T14092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.052410][T14092] R13: 00007f6a4f3e6038 R14: 00007f6a4f3e5fa0 R15: 00007ffc12669888 [ 262.052441][T14092] [ 262.428027][T14097] xt_hashlimit: invalid interval [ 262.958896][T14119] syzkaller0: entered promiscuous mode [ 262.974688][T14119] syzkaller0: entered allmulticast mode [ 263.038284][T14119] netlink: 'syz.0.2680': attribute type 10 has an invalid length. [ 264.455102][T14119] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.463009][T14119] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.472955][T14119] bridge0: left promiscuous mode [ 264.478060][T14119] bridge0: left allmulticast mode [ 264.495641][T14119] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.502804][T14119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.510434][T14119] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.517630][T14119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.546284][T14119] bridge0: entered promiscuous mode [ 264.551758][T14119] bridge0: entered allmulticast mode [ 264.557977][T14119] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 265.134864][T14186] netlink: zone id is out of range [ 265.154058][T14186] netlink: set zone limit has 8 unknown bytes [ 265.234306][T14193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2702'. [ 265.400600][T14201] batadv0: entered promiscuous mode [ 265.405943][T14201] batadv0: entered allmulticast mode [ 265.412004][T14201] veth0: entered promiscuous mode [ 265.418306][T14201] veth0: entered allmulticast mode [ 265.424842][T14201] veth1: entered promiscuous mode [ 265.429954][T14201] veth1: entered allmulticast mode [ 265.437549][T14201] wg0: entered promiscuous mode [ 265.451665][T14201] wg0: entered allmulticast mode [ 265.479015][T14201] wg1: entered promiscuous mode [ 265.494723][T14201] wg1: entered allmulticast mode [ 265.514761][T14201] wg2: entered promiscuous mode [ 265.570095][T14201] wg2: entered allmulticast mode [ 265.585930][T14201] veth0_to_bridge: entered promiscuous mode [ 265.591869][T14201] veth0_to_bridge: entered allmulticast mode [ 265.627815][T14201] veth1_to_bridge: entered promiscuous mode [ 265.650773][T14201] veth1_to_bridge: entered allmulticast mode [ 265.695950][T14201] veth0_to_bond: entered promiscuous mode [ 265.720574][T14201] veth0_to_bond: entered allmulticast mode [ 265.728700][T14201] veth1_to_bond: entered promiscuous mode [ 265.742392][T14201] veth1_to_bond: entered allmulticast mode [ 265.751854][T14201] veth0_to_team: entered promiscuous mode [ 265.759554][T14201] veth0_to_team: entered allmulticast mode [ 265.779711][T14201] veth1_to_team: entered promiscuous mode [ 265.787127][T14201] veth1_to_team: entered allmulticast mode [ 265.811910][T14201] veth0_to_batadv: entered promiscuous mode [ 265.820991][T14201] veth0_to_batadv: entered allmulticast mode [ 265.830419][T14201] batadv_slave_0: entered promiscuous mode [ 265.836951][T14201] batadv_slave_0: entered allmulticast mode [ 265.845866][T14201] veth1_to_batadv: entered promiscuous mode [ 265.853019][T14201] veth1_to_batadv: entered allmulticast mode [ 265.862950][T14201] batadv_slave_1: entered promiscuous mode [ 265.892374][T14201] batadv_slave_1: entered allmulticast mode [ 265.921670][T14201] xfrm0: entered promiscuous mode [ 265.934661][T14201] xfrm0: entered allmulticast mode [ 265.947699][T14201] veth0_to_hsr: entered promiscuous mode [ 265.970514][T14201] veth0_to_hsr: entered allmulticast mode [ 265.991475][T14201] hsr_slave_0: entered allmulticast mode [ 265.999136][T14201] veth1_to_hsr: entered promiscuous mode [ 266.007986][T14201] veth1_to_hsr: entered allmulticast mode [ 266.036193][T14221] tipc: Enabling of bearer rejected, failed to enable media [ 266.488530][T14255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2719'. [ 266.644900][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2721'. [ 266.655855][T14257] netlink: 'syz.0.2720': attribute type 29 has an invalid length. [ 266.709606][T14263] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2721'. [ 266.719125][T14264] netlink: 'syz.0.2720': attribute type 29 has an invalid length. [ 266.746181][T14257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2720'. [ 267.125396][T14290] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2728'. [ 267.149493][T14294] netlink: zone id is out of range [ 267.156909][T14290] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2728'. [ 267.171549][T14293] tipc: Enabled bearer , priority 0 [ 267.179125][T14294] netlink: set zone limit has 8 unknown bytes [ 267.191685][T14290] gretap0: entered promiscuous mode [ 267.199438][T14290] gretap0: left promiscuous mode [ 267.244441][T14293] syzkaller0: entered promiscuous mode [ 267.252285][T14293] syzkaller0: entered allmulticast mode [ 267.361978][T14305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2733'. [ 267.410241][T14309] netlink: 'syz.6.2735': attribute type 1 has an invalid length. [ 267.417874][T14297] smc: adding net device geneve0 with user defined pnetid SYZ0 [ 267.430222][T14297] smc: removing net device geneve0 with user defined pnetid SYZ0 [ 267.479633][T14309] bond1: entered promiscuous mode [ 267.493987][T14309] bond1: entered allmulticast mode [ 267.500140][T14309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.512794][T14300] tipc: Resetting bearer [ 267.528153][T14313] macvlan2: entered promiscuous mode [ 267.557127][T14313] macvlan2: entered allmulticast mode [ 267.592206][T14313] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 267.646279][T14320] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2736'. [ 267.657603][T14293] tunl0: left allmulticast mode [ 267.669171][T14293] netlink: 'syz.3.2731': attribute type 3 has an invalid length. [ 267.678091][T14293] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2731'. [ 267.752029][T14291] tipc: Resetting bearer [ 267.822785][T14291] tipc: Disabling bearer [ 267.964840][T14333] syzkaller1: entered promiscuous mode [ 268.013248][T14333] syzkaller1: entered allmulticast mode [ 268.072637][T14338] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 268.435392][T14362] netlink: 'syz.0.2747': attribute type 11 has an invalid length. [ 268.582760][T14369] syzkaller0: entered promiscuous mode [ 268.602043][T14369] syzkaller0: entered allmulticast mode [ 269.183692][T14400] tipc: Started in network mode [ 269.188609][T14400] tipc: Node identity 7a4057cb8de7, cluster identity 4711 [ 269.234201][T14400] tipc: Enabled bearer , priority 0 [ 269.267915][T14409] syzkaller0: entered promiscuous mode [ 269.277270][T14409] syzkaller0: entered allmulticast mode [ 269.370123][T14407] syz_tun: left promiscuous mode [ 269.389653][T14407] syz_tun: left allmulticast mode [ 269.430947][T14407] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 269.453671][T14400] tipc: Resetting bearer [ 269.460643][T14407] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 269.478757][T14409] lo speed is unknown, defaulting to 1000 [ 269.487856][T14409] lo speed is unknown, defaulting to 1000 [ 269.506870][T14409] lo speed is unknown, defaulting to 1000 [ 269.534273][T14407] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 269.601416][T14407] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 269.680582][T14428] syzkaller0: entered promiscuous mode [ 269.704564][T14428] syzkaller0: entered allmulticast mode [ 269.730171][T14407] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 269.770828][T14407] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 269.800773][T14407] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 269.938120][T14409] infiniband syz0: set down [ 269.942979][T14409] infiniband syz0: added lo [ 269.990375][T14409] RDS/IB: syz0: added [ 269.994592][T14409] smc: adding ib device syz0 with port count 1 [ 270.004546][T14409] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 270.317198][ T5957] tipc: Node number set to 4154939339 [ 271.113568][T14407] __nla_validate_parse: 18 callbacks suppressed [ 271.113586][T14407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2764'. [ 271.134647][T14407] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 271.152641][T10602] lo speed is unknown, defaulting to 1000 [ 271.161629][T10616] lo speed is unknown, defaulting to 1000 [ 271.195099][T14398] tipc: Resetting bearer [ 271.240548][T14398] tipc: Disabling bearer [ 271.324454][T14409] lo speed is unknown, defaulting to 1000 [ 271.336108][T14444] syz.2.2775: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 271.396609][T14444] CPU: 1 UID: 0 PID: 14444 Comm: syz.2.2775 Not tainted syzkaller #0 PREEMPT(full) [ 271.396642][T14444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 271.396654][T14444] Call Trace: [ 271.396661][T14444] [ 271.396670][T14444] dump_stack_lvl+0x189/0x250 [ 271.396703][T14444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.396727][T14444] ? __pfx__printk+0x10/0x10 [ 271.396747][T14444] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 271.396771][T14444] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 271.396795][T14444] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 271.396822][T14444] warn_alloc+0x214/0x310 [ 271.396849][T14444] ? stack_depot_save_flags+0x40/0x860 [ 271.396880][T14444] ? __pfx_warn_alloc+0x10/0x10 [ 271.396906][T14444] ? kasan_save_track+0x3e/0x80 [ 271.396928][T14444] ? __kasan_kmalloc+0x93/0xb0 [ 271.396952][T14444] ? xsk_setsockopt+0x4dc/0x8d0 [ 271.396973][T14444] ? do_sock_setsockopt+0x17c/0x1b0 [ 271.396998][T14444] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 271.397016][T14444] ? do_syscall_64+0xfa/0xfa0 [ 271.397038][T14444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.397066][T14444] __vmalloc_node_range_noprof+0x125/0x12d0 [ 271.397122][T14444] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 271.397149][T14444] ? __kasan_kmalloc+0x93/0xb0 [ 271.397181][T14444] vmalloc_user_noprof+0xad/0xf0 [ 271.397205][T14444] ? xskq_create+0xbf/0x170 [ 271.397228][T14444] xskq_create+0xbf/0x170 [ 271.397253][T14444] xsk_init_queue+0xb0/0x110 [ 271.397277][T14444] xsk_setsockopt+0x4dc/0x8d0 [ 271.397302][T14444] ? __pfx_xsk_setsockopt+0x10/0x10 [ 271.397325][T14444] ? __pfx_aa_sk_perm+0x10/0x10 [ 271.397352][T14444] ? aa_sock_opt_perm+0xff/0x1b0 [ 271.397379][T14444] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 271.397397][T14444] ? __pfx_xsk_setsockopt+0x10/0x10 [ 271.397420][T14444] do_sock_setsockopt+0x17c/0x1b0 [ 271.397443][T14444] __x64_sys_setsockopt+0x13f/0x1b0 [ 271.397466][T14444] do_syscall_64+0xfa/0xfa0 [ 271.397488][T14444] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.397512][T14444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.397530][T14444] ? clear_bhb_loop+0x60/0xb0 [ 271.397553][T14444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.397570][T14444] RIP: 0033:0x7f6a4f18f6c9 [ 271.397593][T14444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.397611][T14444] RSP: 002b:00007f6a50038038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 271.397631][T14444] RAX: ffffffffffffffda RBX: 00007f6a4f3e5fa0 RCX: 00007f6a4f18f6c9 [ 271.397645][T14444] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 271.397657][T14444] RBP: 00007f6a4f211f91 R08: 0000000000000004 R09: 0000000000000000 [ 271.397669][T14444] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.397681][T14444] R13: 00007f6a4f3e6038 R14: 00007f6a4f3e5fa0 R15: 00007ffc12669888 [ 271.397714][T14444] [ 271.724338][T14444] Mem-Info: [ 271.727491][T14444] active_anon:6650 inactive_anon:0 isolated_anon:0 [ 271.727491][T14444] active_file:3668 inactive_file:39964 isolated_file:0 [ 271.727491][T14444] unevictable:768 dirty:190 writeback:0 [ 271.727491][T14444] slab_reclaimable:11367 slab_unreclaimable:116365 [ 271.727491][T14444] mapped:29700 shmem:1373 pagetables:1409 [ 271.727491][T14444] sec_pagetables:0 bounce:0 [ 271.727491][T14444] kernel_misc_reclaimable:0 [ 271.727491][T14444] free:1307227 free_pcp:14834 free_cma:0 [ 271.851551][T14444] Node 0 active_anon:26880kB inactive_anon:0kB active_file:14672kB inactive_file:159652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118804kB dirty:768kB writeback:0kB shmem:4160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13968kB pagetables:5616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 271.887725][T14409] lo speed is unknown, defaulting to 1000 [ 271.929427][T14444] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 271.960516][T14444] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 271.991534][T14444] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 271.997462][T14444] Node 0 DMA32 free:1328756kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26744kB inactive_anon:0kB active_file:14672kB inactive_file:159652kB unevictable:1536kB writepending:768kB zspages:0kB present:3129332kB managed:2565168kB mlocked:0kB bounce:0kB free_pcp:36496kB local_pcp:19816kB free_cma:0kB [ 272.033757][T14444] lowmem_reserve[]: 0 0 0 0 0 [ 272.038539][T14444] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 272.129462][T14444] lowmem_reserve[]: 0 0 0 0 0 [ 272.136869][T14444] Node 1 Normal free:3884144kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21632kB local_pcp:10112kB free_cma:0kB [ 272.217186][T14461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2781'. [ 272.230495][T14444] lowmem_reserve[]: 0 0 0 0 0 [ 272.247993][T14444] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 272.281398][T14444] Node 0 DMA32: 842*4kB (UE) 89*8kB (UE) 69*16kB (UE) 121*32kB (UME) 70*64kB (UME) 35*128kB (M) 9*256kB (ME) 71*512kB (UM) 40*1024kB (UME) 17*2048kB (UM) 292*4096kB (UM) = 1328480kB [ 272.341088][T14444] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 272.375291][T14444] Node 1 Normal: 220*4kB (UME) 62*8kB (UME) 53*16kB (UME) 102*32kB (UME) 34*64kB (UME) 9*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3884144kB [ 272.401737][T14465] bridge7: entered promiscuous mode [ 272.409889][T14465] bridge7: entered allmulticast mode [ 272.473504][T14444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 272.483134][T14444] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 272.529136][T14444] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 272.556493][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2786'. [ 272.564163][T14444] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 272.590648][T14444] 45002 total pagecache pages [ 272.596894][T14409] lo speed is unknown, defaulting to 1000 [ 272.598522][T14444] 0 pages in swap cache [ 272.627940][T14444] Free swap = 124996kB [ 272.637506][T14472] 8021q: adding VLAN 0 to HW filter on device bond5 [ 272.651212][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2787'. [ 272.677367][T14444] Total swap = 124996kB [ 272.681553][T14444] 2097051 pages RAM [ 272.698134][T14444] 0 pages HighMem/MovableOnly [ 272.702853][T14444] 424117 pages reserved [ 272.707152][T14444] 0 pages cma reserved [ 273.183049][T14409] lo speed is unknown, defaulting to 1000 [ 273.291620][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2799'. [ 273.360282][T14510] syzkaller0: entered promiscuous mode [ 273.408548][T14510] syzkaller0: entered allmulticast mode [ 273.472918][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2805'. [ 273.532110][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2806'. [ 273.759912][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2810'. [ 273.887551][T14409] lo speed is unknown, defaulting to 1000 [ 273.957496][T14524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.730924][T14574] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2832'. [ 274.733671][T14572] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 274.833856][T14581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.863018][T14570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.927723][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2835'. [ 274.961153][T14583] bridge_slave_1: left allmulticast mode [ 274.980202][T14583] bridge_slave_1: left promiscuous mode [ 274.988590][T14583] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.046760][T14583] bridge_slave_0: left allmulticast mode [ 275.052453][T14583] bridge_slave_0: left promiscuous mode [ 275.122274][T14583] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.222807][T14583] bond0: (slave bridge0): Releasing backup interface [ 275.238782][T14583] bridge0 (unregistering): left promiscuous mode [ 275.262030][T14583] bridge0 (unregistering): left allmulticast mode [ 275.459574][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.473636][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.482720][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.492301][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.500179][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.620903][T14599] lo speed is unknown, defaulting to 1000 [ 276.062436][T14610] syzkaller0: entered promiscuous mode [ 276.081676][T14610] syzkaller0: entered allmulticast mode [ 276.098888][T14625] syzkaller0: entered promiscuous mode [ 276.129679][T14625] syzkaller0: entered allmulticast mode [ 276.195453][T14630] __nla_validate_parse: 1 callbacks suppressed [ 276.195470][T14630] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2852'. [ 277.564061][ T5150] Bluetooth: hci5: command tx timeout [ 278.151563][T14656] syzkaller0: entered promiscuous mode [ 278.161173][T14656] syzkaller0: entered allmulticast mode [ 278.184013][T14599] chnl_net:caif_netlink_parms(): no params data found [ 278.258386][T14670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2867'. [ 279.643558][ T5150] Bluetooth: hci5: command tx timeout [ 279.911237][T14599] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.950407][T14599] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.972974][T14599] bridge_slave_0: entered allmulticast mode [ 279.983962][T14599] bridge_slave_0: entered promiscuous mode [ 280.023633][T14599] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.047263][T14599] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.081363][T14599] bridge_slave_1: entered allmulticast mode [ 280.106103][T14599] bridge_slave_1: entered promiscuous mode [ 280.248598][T14599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.306470][T14599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.415886][T14722] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2882'. [ 280.496093][T14599] team0: Port device team_slave_0 added [ 280.539817][T14599] team0: Port device team_slave_1 added [ 280.722012][T14599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.760212][T14599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.826317][T14599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.886668][T14599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.918225][T14599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.004802][T14754] netlink: 'syz.6.2894': attribute type 8 has an invalid length. [ 281.011855][T14599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.302966][T14599] hsr_slave_0: entered promiscuous mode [ 281.321773][T14599] hsr_slave_1: entered promiscuous mode [ 281.332572][T14599] debugfs: 'hsr0' already exists in 'hsr' [ 281.354304][T14599] Cannot create hsr debugfs directory [ 281.724786][ T5150] Bluetooth: hci5: command tx timeout [ 282.108510][T14599] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.143413][T14599] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.254623][T14599] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.286225][T14599] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.436677][T14599] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.449956][T14599] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.481724][T14829] netlink: 'syz.6.2921': attribute type 3 has an invalid length. [ 282.533284][T14599] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.553959][T14599] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.968233][T14599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 283.038079][T14599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 283.069597][T14599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 283.100677][T14848] batadv_slave_1: entered promiscuous mode [ 283.116903][T14848] batadv_slave_1: entered allmulticast mode [ 283.131506][T14599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 283.345154][T14599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.379487][T14599] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.404374][T12413] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.411530][T12413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.435034][T12411] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.442221][T12411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.768304][T14599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.804034][ T5150] Bluetooth: hci5: command tx timeout [ 283.860431][T14599] veth0_vlan: entered promiscuous mode [ 283.872802][T14599] veth1_vlan: entered promiscuous mode [ 283.902957][T14599] veth0_macvtap: entered promiscuous mode [ 283.919300][T14599] veth1_macvtap: entered promiscuous mode [ 283.946990][T14599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.968951][T14599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.989083][T12409] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.021350][T12409] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.045227][T12411] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.068593][T12411] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.197955][T12411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.227836][T12411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.290557][T14888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2944'. [ 284.310816][T12438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.328248][T12438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.505295][T14896] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 284.912988][T14911] netlink: 'syz.6.2954': attribute type 3 has an invalid length. [ 285.374286][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.392086][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.401390][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.411769][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.430106][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.465975][T14925] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 285.578932][T12408] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.614061][T12408] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 285.634020][T12408] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 285.791186][T12408] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.858167][T12408] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 285.963709][T12408] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 286.077735][T14926] lo speed is unknown, defaulting to 1000 [ 286.221576][ C1] net_ratelimit: 2 callbacks suppressed [ 286.221594][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 286.248742][T12408] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.295996][T12408] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 286.335852][T12408] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 286.528144][T12408] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.558038][T12408] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 286.589100][T12408] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 286.612058][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2980'. [ 286.827469][T14976] syzkaller1: entered promiscuous mode [ 286.837852][T14976] syzkaller1: entered allmulticast mode [ 286.954366][T14983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2987'. [ 287.023943][T14987] netlink: 51 bytes leftover after parsing attributes in process `syz.6.2989'. [ 287.060866][T12411] netdevsim netdevsim3 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.149007][T12411] netdevsim netdevsim3 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.277042][T12438] netdevsim netdevsim3 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.486925][ T5150] Bluetooth: hci2: command tx timeout [ 287.509493][T15004] bridge0: port 3(dummy0) entered blocking state [ 287.527826][T15004] bridge0: port 3(dummy0) entered disabled state [ 287.546859][T15004] dummy0: entered allmulticast mode [ 287.565690][T15004] dummy0: entered promiscuous mode [ 287.586414][T12411] netdevsim netdevsim3 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.602706][T12408] bridge_slave_0: left allmulticast mode [ 287.609211][T12408] bridge_slave_0: left promiscuous mode [ 287.632890][T12408] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.951155][T12408] dvmrp0 (unregistering): left allmulticast mode [ 287.970353][T12408] bond1 (unregistering): (slave geneve2): Releasing active interface [ 288.015089][T12408] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 288.394498][T12408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.409888][T12408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.449103][T12408] bond0 (unregistering): Released all slaves [ 288.607007][T12408] bond1 (unregistering): Released all slaves [ 288.695676][T12408] bond2 (unregistering): Released all slaves [ 288.782590][T12408] bond3 (unregistering): Released all slaves [ 288.873247][T12408] bond4 (unregistering): Released all slaves [ 288.966495][T12408] bond5 (unregistering): Released all slaves [ 289.021469][T14926] chnl_net:caif_netlink_parms(): no params data found [ 289.289693][T12408] : left promiscuous mode [ 289.395109][T12408] tipc: Left network mode [ 289.564017][ T5150] Bluetooth: hci2: command tx timeout [ 289.585350][T12408] IPVS: stopping master sync thread 13285 ... [ 289.787920][T14926] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.805794][T14926] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.837353][T14926] bridge_slave_0: entered allmulticast mode [ 289.856751][T14926] bridge_slave_0: entered promiscuous mode [ 289.939232][T14926] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.983870][T14926] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.014488][T14926] bridge_slave_1: entered allmulticast mode [ 290.037577][T15080] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 290.054960][T14926] bridge_slave_1: entered promiscuous mode [ 290.088054][T15081] syz_tun: entered allmulticast mode [ 290.306132][T15087] syz_tun: left allmulticast mode [ 290.318634][T14926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.350548][T14926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.529787][T15100] netlink: get zone limit has 4 unknown bytes [ 290.717994][T10602] IPVS: starting estimator thread 0... [ 290.799280][T14926] team0: Port device team_slave_0 added [ 290.813438][T15113] IPVS: using max 34 ests per chain, 81600 per kthread [ 290.846195][T14926] team0: Port device team_slave_1 added [ 291.108444][T14926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.116915][T14926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.145818][T14926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.167406][T14926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.174554][T14926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.202030][T14926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.233726][T15127] syzkaller0: entered promiscuous mode [ 291.247674][T15127] syzkaller0: entered allmulticast mode [ 291.390194][T12408] hsr_slave_0: left promiscuous mode [ 291.418576][T12408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.443900][T12408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.464583][T12408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.477404][T12408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.540501][T12408] veth1_macvtap: left promiscuous mode [ 291.556959][T12408] veth0_macvtap: left promiscuous mode [ 291.565087][T12408] veth1_vlan: left promiscuous mode [ 291.570794][T12408] veth0_vlan: left promiscuous mode [ 291.646038][ T5150] Bluetooth: hci2: command tx timeout [ 292.505892][T12408] team0 (unregistering): Port device team_slave_1 removed [ 292.541933][T12408] team0 (unregistering): Port device team_slave_0 removed [ 292.809263][T14926] hsr_slave_0: entered promiscuous mode [ 292.816038][T14926] hsr_slave_1: entered promiscuous mode [ 292.822424][T14926] debugfs: 'hsr0' already exists in 'hsr' [ 292.829190][T14926] Cannot create hsr debugfs directory [ 292.846618][T15134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.363541][T15191] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3058'. [ 293.466560][T14926] netdevsim netdevsim3 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.591816][T12408] IPVS: stop unused estimator thread 0... [ 293.634104][T15203] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3063'. [ 293.679943][T14926] netdevsim netdevsim3 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.723914][ T5150] Bluetooth: hci2: command tx timeout [ 293.937830][T14926] netdevsim netdevsim3 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.183304][T14926] netdevsim netdevsim3 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.597512][T14926] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 294.636783][T14926] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 294.698389][T14926] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 294.731619][T14926] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 295.034623][T14926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.071552][T14926] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.116349][T12438] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.123578][T12438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.165722][T12438] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.172912][T12438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.633837][T15293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3091'. [ 295.754527][T15300] syzkaller0: entered promiscuous mode [ 295.770347][T15300] syzkaller0: entered allmulticast mode [ 295.888399][T15310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3094'. [ 295.921456][T14926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.146575][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3098'. [ 296.173757][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3098'. [ 296.185077][T14926] veth0_vlan: entered promiscuous mode [ 296.214493][T14926] veth1_vlan: entered promiscuous mode [ 296.310551][T14926] veth0_macvtap: entered promiscuous mode [ 296.349820][T14926] veth1_macvtap: entered promiscuous mode [ 296.391766][T15327] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3101'. [ 296.425316][T14926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.461167][T14926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.524967][T12405] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.545671][T12405] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.596082][T12405] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.663895][T12405] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.882567][T15346] batadv_slave_1: entered promiscuous mode [ 296.891432][T15346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3107'. [ 296.909455][T15346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.920177][T15346] batadv0: mtu less than device minimum [ 296.928181][T15346] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 296.940362][T15346] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 296.952270][T15346] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 296.964271][T15346] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 296.976119][T15346] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 296.987971][T15346] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 296.999835][T15346] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.011597][T15346] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.063285][T15352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3111'. [ 297.186225][T15346] batadv_slave_1 (unregistering): left promiscuous mode [ 297.198971][T15346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.296407][T12409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.313615][T12409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.362014][T12413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.380516][T12413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.713832][T15371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2949'. [ 298.065856][T10616] IPVS: starting estimator thread 0... [ 298.167443][T15391] IPVS: using max 30 ests per chain, 72000 per kthread [ 298.501525][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.511792][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.521831][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.537371][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.545787][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.602047][T15405] lo speed is unknown, defaulting to 1000 [ 299.231252][T15431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 299.251446][T15436] bond_slave_0: entered promiscuous mode [ 299.257482][T15436] bond_slave_1: entered promiscuous mode [ 299.266767][T15436] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 299.277140][T15436] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 299.398328][T15405] chnl_net:caif_netlink_parms(): no params data found [ 299.441626][T15444] __nla_validate_parse: 1 callbacks suppressed [ 299.441643][T15444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3135'. [ 299.714511][T15405] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.730804][T15405] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.748346][T15405] bridge_slave_0: entered allmulticast mode [ 299.760178][T15405] bridge_slave_0: entered promiscuous mode [ 299.782916][T15405] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.809349][T15405] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.823592][T15405] bridge_slave_1: entered allmulticast mode [ 299.831375][T15405] bridge_slave_1: entered promiscuous mode [ 299.959556][T15405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.986192][T15405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.128033][T15405] team0: Port device team_slave_0 added [ 300.140776][T15405] team0: Port device team_slave_1 added [ 300.184643][T15405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.191750][T15405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.218808][T15405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.232194][T15405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.239967][T15405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.266312][T15405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.345316][T15405] hsr_slave_0: entered promiscuous mode [ 300.352380][T15405] hsr_slave_1: entered promiscuous mode [ 300.360008][T15405] debugfs: 'hsr0' already exists in 'hsr' [ 300.366788][T15405] Cannot create hsr debugfs directory [ 300.539622][T15405] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.550814][T15405] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.594740][T15405] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.603761][ T52] Bluetooth: hci0: command tx timeout [ 300.608833][T15405] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.652582][T15405] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.665783][T15405] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.712406][T15405] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.724386][T15405] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.961241][T15405] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 301.013125][T15405] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 301.047059][T15405] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.112104][T15405] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.362390][T15405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.388393][T15534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3155'. [ 301.430628][T15536] netlink: 29868 bytes leftover after parsing attributes in process `syz.3.3157'. [ 301.443249][T15405] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.495521][T12411] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.502707][T12411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.545855][T12411] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.553055][T12411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.956932][T15405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.989109][T15563] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3166'. [ 302.017312][T15565] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3167'. [ 302.076531][T15405] veth0_vlan: entered promiscuous mode [ 302.080267][T15563] nbd: socks must be embedded in a SOCK_ITEM attr [ 302.104584][T15405] veth1_vlan: entered promiscuous mode [ 302.158482][ T5832] block nbd64: NBD_DISCONNECT [ 302.185216][T15405] veth0_macvtap: entered promiscuous mode [ 302.201828][T15405] veth1_macvtap: entered promiscuous mode [ 302.238278][T15405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.271168][T15405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.330621][T12408] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.386831][T12408] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.418981][T12408] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.447520][T12408] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.478415][ T5832] udevd[5832]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 302.508034][T15577] pim6reg1: entered promiscuous mode [ 302.523990][T15577] pim6reg1: entered allmulticast mode [ 302.683866][ T52] Bluetooth: hci0: command tx timeout [ 302.750003][T12409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.778530][T12409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.884451][T12438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.892308][T12438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.929765][T15591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3176'. [ 303.634526][T15598] net_ratelimit: 11 callbacks suppressed [ 303.634543][T15598] IPVS: nq: FWM 3 0x00000003 - no destination available [ 303.656670][ T855] IPVS: starting estimator thread 0... [ 303.775549][T15624] IPVS: using max 28 ests per chain, 67200 per kthread [ 303.839638][T15632] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3195'. [ 303.863689][T15632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3195'. [ 303.894588][T15632] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3195'. [ 304.106560][T15647] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3200'. [ 304.514403][T15666] macsec1: entered promiscuous mode [ 304.706240][T15678] __nla_validate_parse: 1 callbacks suppressed [ 304.706259][T15678] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3215'. [ 304.765142][ T52] Bluetooth: hci0: command tx timeout [ 305.149060][T15703] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 305.288512][T15706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.292753][T15685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.320968][T15706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.339605][T15713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3230'. [ 305.408061][T15714] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.500138][T15714] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.622663][T15714] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.731732][T15714] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.825404][T15739] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3242'. [ 305.919869][T12438] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.988843][T12409] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.085882][T12409] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.151483][T12411] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.323198][T15764] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3253'. [ 306.544459][T15776] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3259'. [ 306.757214][T15786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3266'. [ 306.793138][T15786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3266'. [ 306.875646][ T52] Bluetooth: hci0: command tx timeout [ 306.954718][T15796] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3269'. [ 307.142809][T15806] pim6reg1: tun_chr_ioctl cmd 1074025676 [ 307.162768][T15806] pim6reg1: owner set to 0 [ 307.184577][T15810] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 308.125868][T12408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.135421][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.144398][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.283755][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.292512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.350502][T15884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3311'. [ 309.164035][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.434771][T15957] netlink: zone id is out of range [ 309.444633][T15957] netlink: zone id is out of range [ 309.449770][T15957] netlink: zone id is out of range [ 309.463754][T15957] netlink: zone id is out of range [ 309.473892][T15957] netlink: zone id is out of range [ 309.496300][T15957] netlink: zone id is out of range [ 309.515215][T15957] netlink: zone id is out of range [ 309.532091][T15957] netlink: zone id is out of range [ 309.547491][T15957] netlink: zone id is out of range [ 309.688807][T15970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3349'. [ 310.061848][T15992] __nla_validate_parse: 1 callbacks suppressed [ 310.061865][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3360'. [ 310.072352][T15994] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3361'. [ 310.637235][T16029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3378'. [ 310.648993][T16031] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3379'. [ 310.881649][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3386'. [ 310.911061][T16045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3386'. [ 311.166309][T16059] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3394'. [ 311.217725][T16061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3393'. [ 311.423080][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3400'. [ 311.439508][T16074] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3400'. [ 311.949247][T16098] syzkaller0: entered promiscuous mode [ 311.957505][T16098] syzkaller0: entered allmulticast mode [ 312.715635][T16144] syzkaller0: entered promiscuous mode [ 312.744152][T16144] syzkaller0: entered allmulticast mode [ 312.921257][T16155] delete_channel: no stack [ 313.572451][T16196] syzkaller0: entered promiscuous mode [ 313.580338][T16196] syzkaller0: entered allmulticast mode [ 314.349645][T16229] syzkaller0: entered promiscuous mode [ 314.361268][T16229] syzkaller0: entered allmulticast mode [ 314.367626][ T1601] net_ratelimit: 21 callbacks suppressed [ 314.367642][ T1601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.515404][T16238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.526586][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.552736][T16238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.568938][T16238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.579291][T16244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.589045][T16244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.599172][T16238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.608493][T16238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.643727][T16238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.228587][T16276] __nla_validate_parse: 3 callbacks suppressed [ 315.228606][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3496'. [ 315.246399][T16276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3496'. [ 315.364057][T16280] syzkaller0: entered promiscuous mode [ 315.379841][T16280] syzkaller0: entered allmulticast mode [ 317.087711][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.094164][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.167233][T16374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3541'. [ 317.642475][T16406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3555'. [ 317.743030][T16413] syz_tun: entered allmulticast mode [ 317.751442][T16413] syz_tun: left allmulticast mode [ 318.504426][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3581'. [ 318.531532][T16463] netlink: 51 bytes leftover after parsing attributes in process `syz.3.3583'. [ 319.022806][T16490] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3596'. [ 319.810926][T16539] macsec1: entered promiscuous mode [ 322.982481][T16719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3703'. [ 323.684136][T16766] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3720'. [ 323.850977][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3727'. [ 323.884361][T16778] ip6gretap0: entered promiscuous mode [ 323.890644][T16778] macvtap1: entered promiscuous mode [ 323.897182][T16778] macvtap1: entered allmulticast mode [ 323.904028][T16778] ip6gretap0: entered allmulticast mode [ 323.907093][T16784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3727'. [ 323.930357][T16784] ip6gretap0: left allmulticast mode [ 323.941629][T16784] ip6gretap0: left promiscuous mode [ 324.073831][T16792] syz_tun: entered allmulticast mode [ 324.504579][T16818] syz_tun: entered allmulticast mode [ 327.684915][T16962] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3808'. [ 328.264621][T16991] syz_tun: entered allmulticast mode [ 328.306102][T16990] syz_tun: left allmulticast mode [ 328.375542][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3825'. [ 328.384609][T16996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.393088][T16996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.427874][T16996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.449053][T16996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.497344][T16997] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 328.513026][T16997] net_ratelimit: 3 callbacks suppressed [ 328.513042][T16997] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 328.582326][T17005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3830'. [ 328.821727][T17019] syz_tun: entered allmulticast mode [ 328.866660][T17018] syz_tun: left allmulticast mode [ 328.903651][T17026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3841'. [ 329.059692][T17034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3846'. [ 329.170666][T17041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3848'. [ 329.539602][T17064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3859'. [ 329.768238][T17073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3864'. [ 329.995571][T17083] syz_tun: entered allmulticast mode [ 330.230447][T17100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3874'. [ 330.557245][T17121] syz_tun: entered allmulticast mode [ 330.782352][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3889'. [ 331.401875][T17173] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3909'. [ 331.422375][T17173] macvtap1: entered promiscuous mode [ 331.428409][T17173] bridge0: entered promiscuous mode [ 331.435410][T17173] macvtap1: entered allmulticast mode [ 331.441484][T17173] bridge0: entered allmulticast mode [ 331.451662][T17173] bridge0: left allmulticast mode [ 331.456838][T17173] bridge0: left promiscuous mode [ 331.770312][T17195] netlink: 'syz.5.3920': attribute type 29 has an invalid length. [ 331.779877][T17195] netlink: 'syz.5.3920': attribute type 29 has an invalid length. [ 332.482095][T17238] netlink: 'syz.5.3940': attribute type 4 has an invalid length. [ 332.498137][T17238] netlink: 'syz.5.3940': attribute type 4 has an invalid length. [ 332.531381][ T1601] lo speed is unknown, defaulting to 1000 [ 332.539503][ T1601] syz0: Port: 1 Link ACTIVE [ 332.557867][T10616] lo speed is unknown, defaulting to 1000 [ 333.470779][T17283] __nla_validate_parse: 5 callbacks suppressed [ 333.470797][T17283] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3955'. [ 333.867116][T17301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3961'. [ 334.369815][T17329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3972'. [ 334.659319][T17347] syz_tun: entered allmulticast mode [ 334.666765][T17347] syz_tun: left allmulticast mode [ 334.804364][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3985'. [ 334.922850][T17364] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3986'. [ 335.379189][T17392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3999'. [ 335.850469][T17423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.880282][T17423] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4015'. [ 335.886104][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4016'. [ 335.930996][T17427] netlink: 312 bytes leftover after parsing attributes in process `syz.5.4017'. [ 336.030446][T17431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4019'. [ 336.235754][T17443] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.243469][T17443] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.280159][T17443] ieee802154 phy0 wpan0: encryption failed: -22 [ 337.327056][T17507] vlan0: entered promiscuous mode [ 338.723796][T17582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.749529][T17589] __nla_validate_parse: 11 callbacks suppressed [ 338.749547][T17589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4096'. [ 338.982894][T17603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4104'. [ 338.998808][T17603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4104'. [ 339.201062][T17616] netlink: 51 bytes leftover after parsing attributes in process `syz.6.4110'. [ 339.284049][T17620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4111'. [ 339.673870][T17643] netlink: 51 bytes leftover after parsing attributes in process `syz.2.4123'. [ 339.786089][T17649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4126'. [ 340.242752][T17674] netlink: 51 bytes leftover after parsing attributes in process `syz.2.4137'. [ 340.269952][T17677] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4139'. [ 340.327113][T17681] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4141'. [ 341.492389][T17734] syzkaller0: entered promiscuous mode [ 341.507970][T17734] syzkaller0: entered allmulticast mode [ 343.632323][T17787] syzkaller0: entered promiscuous mode [ 343.638536][T17787] syzkaller0: entered allmulticast mode [ 344.602591][T17822] __nla_validate_parse: 9 callbacks suppressed [ 344.602611][T17822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4205'. [ 344.627003][T17822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4205'. [ 345.411103][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4208'. [ 345.531070][T17838] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4213'. [ 345.745699][T17851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4219'. [ 345.849618][T17860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4223'. [ 346.017206][T17866] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4226'. [ 346.152111][T17876] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4231'. [ 346.209042][T17881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4232'. [ 346.333827][T17889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4237'. [ 347.264054][T17931] bridge: RTM_NEWNEIGH with invalid ether address [ 347.625458][T17949] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 347.863687][T17963] bridge: RTM_NEWNEIGH with invalid ether address [ 348.934313][T18024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.424013][T18040] syz_tun: entered allmulticast mode [ 349.456524][T18039] syz_tun: left allmulticast mode [ 349.885733][ T5150] Bluetooth: hci1: command 0x0406 tx timeout [ 349.927637][T18064] __nla_validate_parse: 16 callbacks suppressed [ 349.927655][T18064] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4316'. [ 349.932899][T18067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4317'. [ 350.330434][T18090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.383852][T18093] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4330'. [ 350.435038][T18090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4328'. [ 350.585912][T18106] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4335'. [ 350.835099][T18122] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4345'. [ 350.996367][T18130] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:9c75:77ff:fe9d:f7f1 error=-28 [ 351.105724][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4351'. [ 351.591808][T18130] infiniband syz1: set active [ 351.597564][T18130] infiniband syz1: added bond0 [ 351.666303][T18130] RDS/IB: syz1: added [ 351.670870][T18130] smc: adding ib device syz1 with port count 1 [ 351.691517][T18130] smc: ib device syz1 port 1 has no pnetid [ 352.088869][T18161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.248550][T18178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4367'. [ 352.721812][T18194] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4375'. [ 352.759806][T18200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4378'. [ 353.167598][T18217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.070750][T18257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.046719][T18321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.113080][T18321] __nla_validate_parse: 10 callbacks suppressed [ 355.113099][T18321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4437'. [ 355.734002][T18341] syz_tun: entered allmulticast mode [ 356.046612][T18357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.082306][T18357] ------------[ cut here ]------------ [ 356.088366][T18357] WARNING: CPU: 0 PID: 18357 at net/mac80211/offchannel.c:404 ieee80211_start_next_roc+0x1d5/0x240 [ 356.099595][T18357] Modules linked in: [ 356.104438][T18357] CPU: 0 UID: 0 PID: 18357 Comm: syz.3.4452 Not tainted syzkaller #0 PREEMPT(full) [ 356.114110][T18357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 356.125769][T18357] RIP: 0010:ieee80211_start_next_roc+0x1d5/0x240 [ 356.132346][T18357] Code: 4c 89 f7 48 89 de 48 89 c2 5b 41 5c 41 5e 41 5f 5d e9 6f a4 dc ff e8 0a 36 07 f7 90 0f 0b 90 e9 c4 fe ff ff e8 fc 35 07 f7 90 <0f> 0b 90 e9 01 ff ff ff 48 c7 c1 90 0c 7d 8f 80 e1 07 80 c1 03 38 [ 356.152262][T18357] RSP: 0018:ffffc9000dd46f10 EFLAGS: 00010283 [ 356.158428][T18357] RAX: ffffffff8ab8ce74 RBX: ffff88805ff20e80 RCX: 0000000000080000 [ 356.166489][T18357] RDX: ffffc90004e21000 RSI: 0000000000000475 RDI: 0000000000000476 [ 356.174598][T18357] RBP: 0000000000000001 R08: ffff8880539897c7 R09: 1ffff1100a7312f8 [ 356.182583][T18357] R10: dffffc0000000000 R11: ffffed100a7312f9 R12: dffffc0000000000 [ 356.191239][T18357] R13: dffffc0000000000 R14: ffff888075a14b20 R15: ffff88805ff21626 [ 356.201140][T18357] FS: 00007fab8de346c0(0000) GS:ffff88812613c000(0000) knlGS:0000000000000000 [ 356.210813][T18357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.218008][T18357] CR2: 0000001b30323ffc CR3: 0000000076ee2000 CR4: 00000000003526f0 [ 356.226445][T18357] Call Trace: [ 356.229740][T18357] [ 356.230167][T18366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4452'. [ 356.232677][T18357] ieee80211_do_stop+0x200/0x1f50 [ 356.246784][T18357] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.252008][T18357] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 356.257980][T18357] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 356.264383][T18357] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 356.269878][T18357] ? ieee80211_stop_queues_by_reason+0x149/0x1a0 [ 356.276287][T18357] ? ieee80211_check_concurrent_iface+0x6e7/0x7c0 [ 356.282732][T18357] ieee80211_if_change_type+0x459/0x990 [ 356.288451][T18357] ieee80211_change_iface+0xd5/0x510 [ 356.293802][T18357] cfg80211_change_iface+0x795/0xef0 [ 356.299087][T18357] nl80211_set_interface+0x773/0xaa0 [ 356.304436][T18357] ? __pfx_nl80211_set_interface+0x10/0x10 [ 356.310274][T18357] ? nl80211_pre_doit+0x4fb/0x930 [ 356.315371][T18357] genl_family_rcv_msg_doit+0x215/0x300 [ 356.320945][T18357] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 356.327259][T18357] ? bpf_lsm_capable+0x9/0x20 [ 356.331959][T18357] ? security_capable+0x7e/0x2e0 [ 356.336979][T18357] genl_rcv_msg+0x60e/0x790 [ 356.341506][T18357] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.346596][T18357] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 356.351980][T18357] ? __pfx_nl80211_set_interface+0x10/0x10 [ 356.357856][T18357] ? __pfx_nl80211_post_doit+0x10/0x10 [ 356.363486][T18357] ? __asan_memcpy+0x40/0x70 [ 356.368094][T18357] ? __pfx_ref_tracker_free+0x10/0x10 [ 356.373527][T18357] netlink_rcv_skb+0x208/0x470 [ 356.378314][T18357] ? __lock_acquire+0xab9/0xd20 [ 356.383161][T18357] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.388239][T18357] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 356.393601][T18357] ? down_read+0x1ad/0x2e0 [ 356.398035][T18357] genl_rcv+0x28/0x40 [ 356.402024][T18357] netlink_unicast+0x82f/0x9e0 [ 356.406860][T18357] ? __pfx_netlink_unicast+0x10/0x10 [ 356.412153][T18357] ? netlink_sendmsg+0x642/0xb30 [ 356.417138][T18357] ? skb_put+0x11b/0x210 [ 356.421391][T18357] netlink_sendmsg+0x805/0xb30 [ 356.426400][T18357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.431688][T18357] ? aa_sock_msg_perm+0xf1/0x1d0 [ 356.436680][T18357] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 356.441969][T18357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.447327][T18357] __sock_sendmsg+0x21c/0x270 [ 356.452023][T18357] ____sys_sendmsg+0x505/0x830 [ 356.456843][T18357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.462146][T18357] ? import_iovec+0x74/0xa0 [ 356.466729][T18357] ___sys_sendmsg+0x21f/0x2a0 [ 356.471426][T18357] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.476857][T18357] ? __fget_files+0x2a/0x420 [ 356.481453][T18357] ? __fget_files+0x3a0/0x420 [ 356.486288][T18357] __x64_sys_sendmsg+0x19b/0x260 [ 356.491239][T18357] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.496770][T18357] ? do_syscall_64+0xbe/0xfa0 [ 356.501460][T18357] do_syscall_64+0xfa/0xfa0 [ 356.506040][T18357] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.511253][T18357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.517364][T18357] ? clear_bhb_loop+0x60/0xb0 [ 356.522060][T18357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.528697][T18357] RIP: 0033:0x7fab8cf8f6c9 [ 356.533131][T18357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.552862][T18357] RSP: 002b:00007fab8de34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.561356][T18357] RAX: ffffffffffffffda RBX: 00007fab8d1e5fa0 RCX: 00007fab8cf8f6c9 [ 356.569396][T18357] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 356.577439][T18357] RBP: 00007fab8d011f91 R08: 0000000000000000 R09: 0000000000000000 [ 356.585453][T18357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.593487][T18357] R13: 00007fab8d1e6038 R14: 00007fab8d1e5fa0 R15: 00007fff1df39f18 [ 356.601485][T18357] [ 356.604614][T18357] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 356.611896][T18357] CPU: 0 UID: 0 PID: 18357 Comm: syz.3.4452 Not tainted syzkaller #0 PREEMPT(full) [ 356.621252][T18357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 356.631306][T18357] Call Trace: [ 356.634588][T18357] [ 356.637522][T18357] dump_stack_lvl+0x99/0x250 [ 356.642117][T18357] ? __asan_memcpy+0x40/0x70 [ 356.646712][T18357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.651899][T18357] ? __pfx__printk+0x10/0x10 [ 356.656487][T18357] vpanic+0x237/0x6d0 [ 356.660459][T18357] ? __pfx_vpanic+0x10/0x10 [ 356.664958][T18357] panic+0xb9/0xc0 [ 356.668667][T18357] ? __pfx_panic+0x10/0x10 [ 356.673093][T18357] __warn+0x31b/0x4b0 [ 356.677083][T18357] ? ieee80211_start_next_roc+0x1d5/0x240 [ 356.682792][T18357] ? ieee80211_start_next_roc+0x1d5/0x240 [ 356.688498][T18357] report_bug+0x2be/0x4f0 [ 356.692821][T18357] ? ieee80211_start_next_roc+0x1d5/0x240 [ 356.698530][T18357] ? ieee80211_start_next_roc+0x1d5/0x240 [ 356.704239][T18357] ? ieee80211_start_next_roc+0x1d7/0x240 [ 356.709949][T18357] handle_bug+0x84/0x160 [ 356.714190][T18357] exc_invalid_op+0x1a/0x50 [ 356.718703][T18357] asm_exc_invalid_op+0x1a/0x20 [ 356.723551][T18357] RIP: 0010:ieee80211_start_next_roc+0x1d5/0x240 [ 356.729879][T18357] Code: 4c 89 f7 48 89 de 48 89 c2 5b 41 5c 41 5e 41 5f 5d e9 6f a4 dc ff e8 0a 36 07 f7 90 0f 0b 90 e9 c4 fe ff ff e8 fc 35 07 f7 90 <0f> 0b 90 e9 01 ff ff ff 48 c7 c1 90 0c 7d 8f 80 e1 07 80 c1 03 38 [ 356.749491][T18357] RSP: 0018:ffffc9000dd46f10 EFLAGS: 00010283 [ 356.755558][T18357] RAX: ffffffff8ab8ce74 RBX: ffff88805ff20e80 RCX: 0000000000080000 [ 356.763525][T18357] RDX: ffffc90004e21000 RSI: 0000000000000475 RDI: 0000000000000476 [ 356.771506][T18357] RBP: 0000000000000001 R08: ffff8880539897c7 R09: 1ffff1100a7312f8 [ 356.779480][T18357] R10: dffffc0000000000 R11: ffffed100a7312f9 R12: dffffc0000000000 [ 356.787454][T18357] R13: dffffc0000000000 R14: ffff888075a14b20 R15: ffff88805ff21626 [ 356.795428][T18357] ? ieee80211_start_next_roc+0x1d4/0x240 [ 356.801154][T18357] ieee80211_do_stop+0x200/0x1f50 [ 356.806179][T18357] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.811372][T18357] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 356.817257][T18357] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 356.823577][T18357] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 356.829036][T18357] ? ieee80211_stop_queues_by_reason+0x149/0x1a0 [ 356.835357][T18357] ? ieee80211_check_concurrent_iface+0x6e7/0x7c0 [ 356.841773][T18357] ieee80211_if_change_type+0x459/0x990 [ 356.847324][T18357] ieee80211_change_iface+0xd5/0x510 [ 356.852603][T18357] cfg80211_change_iface+0x795/0xef0 [ 356.857882][T18357] nl80211_set_interface+0x773/0xaa0 [ 356.863164][T18357] ? __pfx_nl80211_set_interface+0x10/0x10 [ 356.868960][T18357] ? nl80211_pre_doit+0x4fb/0x930 [ 356.873979][T18357] genl_family_rcv_msg_doit+0x215/0x300 [ 356.879522][T18357] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 356.885586][T18357] ? bpf_lsm_capable+0x9/0x20 [ 356.890259][T18357] ? security_capable+0x7e/0x2e0 [ 356.895199][T18357] genl_rcv_msg+0x60e/0x790 [ 356.899701][T18357] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.904722][T18357] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 356.910098][T18357] ? __pfx_nl80211_set_interface+0x10/0x10 [ 356.915906][T18357] ? __pfx_nl80211_post_doit+0x10/0x10 [ 356.921363][T18357] ? __asan_memcpy+0x40/0x70 [ 356.925945][T18357] ? __pfx_ref_tracker_free+0x10/0x10 [ 356.931315][T18357] netlink_rcv_skb+0x208/0x470 [ 356.936077][T18357] ? __lock_acquire+0xab9/0xd20 [ 356.940922][T18357] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.945942][T18357] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 356.951234][T18357] ? down_read+0x1ad/0x2e0 [ 356.955639][T18357] genl_rcv+0x28/0x40 [ 356.959613][T18357] netlink_unicast+0x82f/0x9e0 [ 356.964382][T18357] ? __pfx_netlink_unicast+0x10/0x10 [ 356.969663][T18357] ? netlink_sendmsg+0x642/0xb30 [ 356.974586][T18357] ? skb_put+0x11b/0x210 [ 356.978824][T18357] netlink_sendmsg+0x805/0xb30 [ 356.983594][T18357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.988868][T18357] ? aa_sock_msg_perm+0xf1/0x1d0 [ 356.993803][T18357] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 356.999080][T18357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.004351][T18357] __sock_sendmsg+0x21c/0x270 [ 357.009026][T18357] ____sys_sendmsg+0x505/0x830 [ 357.013783][T18357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.019093][T18357] ? import_iovec+0x74/0xa0 [ 357.023599][T18357] ___sys_sendmsg+0x21f/0x2a0 [ 357.028270][T18357] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.033516][T18357] ? __fget_files+0x2a/0x420 [ 357.038120][T18357] ? __fget_files+0x3a0/0x420 [ 357.042807][T18357] __x64_sys_sendmsg+0x19b/0x260 [ 357.047758][T18357] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.053229][T18357] ? do_syscall_64+0xbe/0xfa0 [ 357.057933][T18357] do_syscall_64+0xfa/0xfa0 [ 357.062439][T18357] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.067634][T18357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.073692][T18357] ? clear_bhb_loop+0x60/0xb0 [ 357.078370][T18357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.084251][T18357] RIP: 0033:0x7fab8cf8f6c9 [ 357.088658][T18357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.108258][T18357] RSP: 002b:00007fab8de34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.116678][T18357] RAX: ffffffffffffffda RBX: 00007fab8d1e5fa0 RCX: 00007fab8cf8f6c9 [ 357.124639][T18357] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 357.132597][T18357] RBP: 00007fab8d011f91 R08: 0000000000000000 R09: 0000000000000000 [ 357.140629][T18357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.148605][T18357] R13: 00007fab8d1e6038 R14: 00007fab8d1e5fa0 R15: 00007fff1df39f18 [ 357.156589][T18357] [ 357.159871][T18357] Kernel Offset: disabled [ 357.164182][T18357] Rebooting in 86400 seconds..