last executing test programs: 2.330141798s ago: executing program 1 (id=7962): socket$kcm(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0) 2.18150167s ago: executing program 1 (id=7965): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000801480018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.099701098s ago: executing program 2 (id=7966): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r4], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2000cc0, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x1, r5}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) syz_80211_join_ibss(0x0, &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYBLOB, @ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x240000c5}, 0x440c3) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_join_ibss(&(0x7f0000000240)='wlan1\x00', &(0x7f00000002c0)=@random="85a0ae51", 0x4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c8"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="08000500030000007aa21d1ced1a5b1c43ee7f210984c0a0d3655ffa46fe4b939f30186c45e0915ae4b57b66107c8d9362bae7f5043757c4d6a20d54ff4ec2c8daae2d5034536f5a920bbe0cde0e8f6733e2cc2bd5d89a6e5ee1bb60c4c55785bb4110f176379c772b47187d1574568065932e634721b35b287d5cde657b3f1b503a2b6bd0ec5513d74787c5800da4d6f5d150b0a33a5fb3e0b2e7aa"], 0x24}}, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 1.950486505s ago: executing program 1 (id=7968): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000840)=""/259, 0x103}], 0x1, 0x0, 0x0, 0x200000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x24000881) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001c0000012cbd7000fedbdf250a000000", @ANYRES32=0x0, @ANYBLOB="400000020005000100000003000400020004000200050001000600000004000200"], 0x40}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x1e01, 0x48a, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000280)=""/96, 0x60, 0x12020, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x1, 0x0) close(r6) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r9) getsockopt$inet_int(r5, 0x0, 0x21, 0x0, &(0x7f00000001c0)=0x2) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000003140)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @multicast2}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000080)={r12, 0x0, 0x7, 0x27}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000740)={r12, @in6={{0xa, 0x4e22, 0x0, @empty, 0x10001}}, [0x8000000000000000, 0x8, 0x1000, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2000000009, 0x80, 0xffffffffffffffff, 0x3c, 0x8fca, 0xb, 0x7]}, &(0x7f0000000480)=0x100) 1.858719341s ago: executing program 0 (id=7969): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000180)={0x7, 'dvmrp0\x00', {0x6}, 0x6}) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getnetconf={0x14, 0x52, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x2000c000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(r5, &(0x7f0000000300)='memory.swap.current\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r4, 0x20, &(0x7f0000000480)={&(0x7f0000000340)=""/179, 0xb3, 0x0, &(0x7f0000000400)=""/110, 0x6e}}, 0x10) getsockopt$IP_SET_OP_GET_BYINDEX(r6, 0x1, 0x53, &(0x7f0000000500)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000540)=0x28) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r8, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000881}, 0x14) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xb8, r9, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x26}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "77c65af8f9827f932b93e2e46b9432e639ec04d14ae642e1"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4556db7a92a9c36dfc4dc6ab7e255deb57fd400ad968060c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0xb8}}, 0x8005) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000900)={0x6430, 0x80000001}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x64, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x104}]}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x51}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xc}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x1) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000ac0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r12, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, r8, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8091}, 0x8004) r14 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r14, 0x10e, 0x2, &(0x7f0000000c00)=0x11, 0x4) r15 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), r12) sendmsg$NLBL_MGMT_C_REMOVE(r12, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r15, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x36}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000000dc0)) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x66a03bab2a878758}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000f00)=""/58, &(0x7f0000000f40)=0x3a) 1.716348624s ago: executing program 2 (id=7971): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0131010000000000400012800e00010069703665727370616e0000002c0002801400050100000000000000000000ffff7f00ec01040012000500160001000000080015"], 0x60}}, 0x0) socketpair(0x11, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x3, 0x3) sendmsg$inet(r3, &(0x7f00000005c0)={&(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x34}}], 0x18}, 0x200000b0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000600000008000000080000000000003d388aa91500000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r4, &(0x7f00000017c0), &(0x7f0000001480)=""/93}, 0x20) ioctl$int_out(r2, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8b2b, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42680, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r2, 0x10000, 0x3b, 0xb}) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0) 1.480520302s ago: executing program 2 (id=7975): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-arm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)={0x14, 0x0, 0x5, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8084) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x3, 0x3, 0x9, 0x81, r3}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x7, @broadcast}}, 0x5cd8, 0xab56, 0x1, 0x4a1d4cad, 0x1da, 0x9ae7, 0x1}, &(0x7f0000000180)=0x9c) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r4}, 0x8) 1.469244883s ago: executing program 0 (id=7976): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x8000000, 0x4, 0x3a8, 0xffffffff, 0x108, 0x108, 0x108, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x3c}, 0x2f2, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0xb}, [0xff000000, 0xffffffff, 0xff, 0xffffffff], 0x4e24, 0x4e24, 0x5e21, 0x4e22, 0x2, 0x0, 0x6, 0x100, 0xd}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x4, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xe4, 0x0, 0x1, 0x80000000, 0x5, 0x6, 0x839, 0x1]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000001d4, &(0x7f0000000440)=@raw=[@jmp={0x5, 0x1, 0xb, 0x0, 0x3, 0xc, 0x8}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.400488123s ago: executing program 4 (id=7977): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xcc, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1c03}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4c844}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x2, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x4004) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x85}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40001) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20008015) socketpair(0x6, 0xe, 0x80000000, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r5) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r6, 0x800, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24044054) socket$inet_icmp(0x2, 0x2, 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c40)={&(0x7f0000000900), 0xc, &(0x7f0000000c00)={&(0x7f0000000980)={0x254, r7, 0xb0a, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x240, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x25}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x72}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xce}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x64}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xf4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4a}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x48, 0x18, 0x60, 0x5, 0x36, 0x30, 0xc, 0x9, 0x1, 0x4, 0x3, 0x30, 0x48, 0x4, 0x12, 0x6c, 0x30, 0x30, 0x30, 0x36, 0x9, 0x4, 0x2, 0x24, 0x36, 0xb, 0x3, 0x4, 0x4]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x10, 0x534, 0xcf1, 0x1, 0x1, 0x6]}}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0x1}, {0x2, 0x3}, {0x4, 0x4}, {0x3, 0x6}, {0x2, 0x1}, {0x4, 0x8}, {0x7, 0x5}, {0x2, 0x8}, {0x5, 0x8}, {0x4, 0x5}, {0x0, 0x9}, {0x5, 0x1}, {0x2, 0x6}, {0x0, 0x7}, {0x4, 0x6}, {0x6, 0x8}, {0x2, 0x5}, {0x1, 0x2}, {0x6, 0x6}, {0x2, 0x3}, {0x0, 0x9}, {0x5, 0x3}, {0x2, 0x1}, {0x1, 0xa}, {0x1, 0x4}, {0x2, 0x9}, {0x3, 0x9}, {0x5, 0x2}, {0x2}, {0x5, 0x7}, {0x4}, {0x4, 0xa}, {0x5}, {0x3, 0x5}, {0x2, 0x4}, {0x5, 0x1}, {0x6, 0x7}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0x9}, {0x7, 0x3}, {0x5, 0xa}, {0x6, 0x1}, {0x4, 0x7}, {0x4}, {0x7, 0x6}, {0x1, 0x2}, {0x0, 0x8}, {0x0, 0x8}, {0x3, 0x6}, {0x2, 0x3}, {0x2, 0x2}, {0x1, 0x18}, {0x5, 0xa}, {0x4, 0x5}, {0x6, 0x6}, {0x5}, {0x3, 0xa}, {0x7, 0x1}, {0x4, 0x1}, {0x0, 0x8}, {0x7, 0x7}, {0x4, 0x5}, {0x6, 0x4}, {0x5}, {0x0, 0x6}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x7, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfa}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x45}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7f}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x56}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6a}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x51}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x48000}, 0x44000) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000c80)={r0}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000cc0)={0x0, 0x57, "f7f4ee62df97667053a3c4e815aaa5c751b3fb980a99c33a04d3089823de95cb91ed85bd95f841fdc4284b032e6290c2b0aa6aa89d32106537d2924a4fd5b46e20db4aaee238dc3439e6d9584199c4c682d48d35cdf1b3"}, &(0x7f0000000d40)=0x5f) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000d80)={r9, @in6={{0xa, 0x4e23, 0x9, @mcast2, 0x9}}, 0x7fffffff, 0x102, 0x1, 0xbe6, 0x82, 0x5fe, 0x2}, 0x9c) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000e40), &(0x7f0000000e80)=0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f00), r4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000f40)={@broadcast, @multicast1, 0x0}, &(0x7f0000000f80)=0xc) getsockname$packet(r4, &(0x7f0000000fc0)={0x11, 0x0, 0x0}, &(0x7f0000001000)=0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000001140)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0xa0, r10, 0xb3a, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8015269c6aa547c2}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001380)={'syztnl0\x00', &(0x7f0000001300)={'ip6gre0\x00', r11, 0x4, 0x9, 0x7, 0xfffffff7, 0x2, @private2, @private2, 0x7800, 0x40, 0xe78, 0x5}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r0, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000001440)=[0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0], 0x0, 0x6f, &(0x7f00000014c0)=[{}], 0x8, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_lsm={0x1d, 0x24, &(0x7f0000001180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xe757}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x44}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000012c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', r13, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0)={0x2, 0xe, 0x0, 0x101}, 0x10, r14, 0x0, 0x2, 0x0, &(0x7f0000001700)=[{0x1, 0x3, 0xe, 0xea422b3321806f7f}, {0x0, 0x2, 0x8, 0x4}], 0x10, 0x200}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001900)={r0, &(0x7f0000001800)="7934bd172a92f153494f5ef9ade0210ba16d50b5231a192ef1a578105aff2f8179b880512a26c87a67a50301e93e6f8400b162cd048b3db4f2e52a890d79f50c99ff2ee4a414968a3c447cc80e939aab559e7f1459c2cc5851948677bc46bdfe7371c6ea04aab03a6bcf884aae37f9063bf8c0c9865201c897eac25c627750a6d1b6b72e716dd1aabd11cc99896904bbc9154f8457fe43933ef67f063aa3f56d7f64e7ea8d6f0d80a6256af6a6625e0bc00c474e95891729fb5f8659c8a387738391663d396a2f9615abe2a07d1e8fe2e7a470011c5d1b986df5d85c40e436fb7c8305014998772e96badd83246136b82ff8"}, 0x20) 1.278905175s ago: executing program 4 (id=7979): socket(0x11, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001e00)={0x28, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff, "", [@nested={0x18, 0x33, 0x0, 0x1, [@typed={0x14, 0x50, 0x0, 0x0, @ipv6=@private0}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x10000050}, 0xc000) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r3, 0xe01, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b760fd18", 0x4}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) socket(0x11, 0x3, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001e00)={0x28, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff, "", [@nested={0x18, 0x33, 0x0, 0x1, [@typed={0x14, 0x50, 0x0, 0x0, @ipv6=@private0}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x10000050}, 0xc000) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r3, 0xe01, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r4, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r5, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b760fd18", 0x4}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) (async) 1.259718905s ago: executing program 0 (id=7980): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r3, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0xa6a}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf42ccb624e5159a58257c6e1aed068f52", 0x50}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c731961e6d1d07d4bc0a9699ac13447f29c363112c8", 0x2c}, {0x0}], 0x6}, 0x800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 1.071849589s ago: executing program 0 (id=7982): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xfff) accept(r0, 0xfffffffffffffffd, &(0x7f0000000040)=0x1f) 1.054814075s ago: executing program 1 (id=7983): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0x4, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) sendmsg$xdp(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 977.493006ms ago: executing program 4 (id=7984): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000380), &(0x7f0000000580)=r3}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @random="f59c09c55f10", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0xb}}}}}}, 0x0) 812.599002ms ago: executing program 3 (id=7985): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x48010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 731.319773ms ago: executing program 3 (id=7986): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x11, &(0x7f0000000000), 0x8) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) 721.752735ms ago: executing program 4 (id=7987): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f00000008c0)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff92f16a38f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e07473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bd25a62c560cb63836556c63de020000000000000013af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc00"/252, 0xfc}, {&(0x7f00000006c0)="1d4ac370cf8c47025bd7a6546c8bd229bbf8fa504cc3774c0f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0f50aa794861c0296ca92cb6c2ef9", 0x47}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6", 0x46}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec624728200000000000000", 0xd5}, {&(0x7f0000004480)="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", 0xd93}], 0x5) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 630.801172ms ago: executing program 3 (id=7988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0xf8ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 583.707087ms ago: executing program 4 (id=7989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c001680"], 0x38}}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r6 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x1}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x6e20, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x2b}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000001c0)={r4, 0x60, 0x6, 0x1}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000840)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000300)=0xe8) sendmsg$nl_xfrm(r7, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=@expire={0x2f0, 0x18, 0x1, 0x70bd2c, 0x25dfdbfe, {{{@in6=@private1, @in6=@empty, 0x4e21, 0x1, 0x4e23, 0x2, 0x2, 0x80, 0x20, 0xff, r3, r9}, {@in=@local, 0x4d5, 0x2b}, @in6=@dev={0xfe, 0x80, '\x00', 0x11}, {0xdc, 0xa00000, 0x400, 0x9, 0xfff, 0x3dd, 0x5c7, 0xe}, {0x8, 0xe7, 0x100000000}, {0x8, 0x5, 0xc}, 0x70bd2d, 0x34ff, 0xa, 0x4, 0xf6, 0x2}, 0x40}, [@tmpl={0x144, 0x5, [{{@in=@remote, 0x4d2}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x6, 0x3ff, 0x4, 0x400}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d3, 0x33}, 0x0, @in=@multicast1, 0x3506, 0x4, 0x0, 0x9, 0x2, 0x4, 0x8e2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x0, 0x0, 0xb, 0x6, 0x4, 0xd851}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x3501, 0x2, 0x1, 0x2, 0xbf64b2e, 0x3, 0xafc}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@remote, 0x3504, 0x0, 0x0, 0x0, 0x7, 0x80000001, 0x8000}]}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29, 0x4}}, @coaddr={0x14, 0xe, @in6=@private2}, @lifetime_val={0x24, 0x9, {0x3ff, 0x3d3, 0x5, 0xffffffffffffff81}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x38}, @in=@rand_addr=0x64010102, 0x0, 0x14}}, @sec_ctx={0x3e, 0x8, {0x3a, 0x8, 0x1, 0x7f, 0x32, "8636b60ddcf20f5db2e8c66bfdbe24eba0a6527a9b718066d95e83cfa674cacfb11d7a79799d481dabab2ae1976e9d392ab6"}}]}, 0x33d}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@ipv6_getroute={0x8c, 0x1a, 0x20, 0x70bd2a, 0x25dfdbfb, {0xa, 0x80, 0x80, 0xfa, 0xfc, 0x1, 0xfe, 0x3, 0x800}, [@RTA_GATEWAY={0x14, 0x5, @mcast2}, @RTA_EXPIRES={0x8, 0x17, 0x4}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x1c, 0x6, r8}}, @RTA_PRIORITY={0x8, 0x6, 0x1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @empty}}, @RTA_MARK={0x8, 0x10, 0x204}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_IIF={0x8, 0x3, r10}, @RTA_IIF={0x8, 0x3, r11}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x8c}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9a000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fbdbdf2505000000280001800d0001007564703a73797a320000000014000280080003008a0000000800010002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f00000006c0)={0x10c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x890}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "152814b7ca7ef8c2dabd03a7c4d4a29997032be10f"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x626}]}]}, 0x10c}}, 0x4000) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002dbd7000fcdbdf254f00000008000300", @ANYRES32=r14, @ANYBLOB="40007a80140002"], 0x5c}, 0x1, 0x0, 0x0, 0x4001840}, 0x4) r15 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r16, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e22, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4000000}], 0x58) r17 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r15, &(0x7f0000000880)={0x0, 0x23, &(0x7f0000000840)={&(0x7f00000002c0)={0x2c, 0x140f, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x0, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 573.314498ms ago: executing program 2 (id=7990): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYBLOB="030f00000000000000000700000030000280080002000000000007000400"], 0x44}, 0x1, 0x0, 0x0, 0x4040c40}, 0x44) 506.772976ms ago: executing program 4 (id=7991): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)=""/177, 0xb1}], 0x1}, 0xcce1}], 0x1, 0x20, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 459.83143ms ago: executing program 3 (id=7992): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x400003, &(0x7f00000000c0)={@align=0x2, {0x2, 0x0, 0x8, 0x3}}, 0x3, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x4}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES64=r0, @ANYRES64], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f300b704000000000000850000005700000095"], 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000000000000808"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f0000000480)=0x1) close(r6) r7 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000200)=0xa1) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)="c495", 0x2}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, 0xee01}}}], 0x20, 0x10}, 0xa8d1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000400007012dbd7000ffdbff25017c0000040042800c00018006000600800a000008001b8004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write$cgroup_pid(r6, &(0x7f0000000400), 0x12) r10 = openat$cgroup_ro(r6, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r10) r11 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000780)=[{r5, 0x10}, {r9, 0x100}, {r11, 0x4}, {0xffffffffffffffff, 0x14}, {0xffffffffffffffff, 0x1402}, {r1, 0x408}, {r6, 0x90}], 0x7, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r11, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r11, 0x0) shutdown(r11, 0x0) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6064"], 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000110f00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04600000000000002400128009000100626f6e74000000001400028008000880ac1414310800070004000000e59cc729d8a4d4b22390d574ed4426da797e77114f09083c08b8dcec5dc28ae0936c5b93de3671b6d2bee567b4433e8239e683d912ffa9d257598fec5d18c7c35261b601f74200d75ad12b8d6cda75a4eb3e9540faea82c461388dfad57094e572610ac6d2b888ae6cfc95a6a7deae45554938cc503e23f5d0acb7171e25f7a4874d"], 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r10, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) 459.51871ms ago: executing program 2 (id=7993): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911060000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 383.06896ms ago: executing program 2 (id=7994): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=[@rdma_args={0x48, 0x114, 0x1, {{0x7fffffff, 0xf5}, {&(0x7f0000000200)=""/76, 0x4c}, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/4, 0x4}], 0x1, 0xc, 0x7f}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xffffff09}, @cswp={0x58, 0x114, 0x7, {{0x62, 0xb}, &(0x7f0000000400)=0xffffffffffff0001, &(0x7f0000000700)=0x80000001, 0x5, 0x4, 0x80000000, 0x1, 0x10, 0x5}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000740)=""/142, 0x8e}, &(0x7f00000008c0), 0x69}}, @fadd={0x58, 0x114, 0x6, {{0x7, 0x2}, &(0x7f0000000380)=0x6, &(0x7f00000009c0)=0x2, 0x3, 0x7fff, 0x2, 0x8, 0x64}}, @rdma_dest={0x18, 0x114, 0x2, {0x5, 0x6}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xffff}, @zcopy_cookie={0x18, 0x114, 0xc, 0x81}], 0x188}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a00000004000000040000000cb16a8a149954996abe25d9343d9509de823c0ec164fd7a0b6c402dcba9dfd0bc847cdfb5989a4a2aae17c1dc07593a7ea9254965b174ac81ec4057c36c31497ee366287cbbeac9a5fa14d7a66fbc14e22345f4b8bf2d355d615f859220ede9ae627391ed275c0e2ad97ad1b551e3ee314e4d16a108bcabeda45b90421feb5f398e6840bbdeee1bf1e58202c816280dae699b6286276fcec028e085727584810ede1fa7d0c96a589b637a01c1aa329d0659aeffdaeb418db0bfdaad0b23f59eec25d13fcfcb679258a7fd9c06b4190df83d4da86efc152875d4aa609a"], 0x50) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xe22, 0xd99, @private0, 0x4}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0xfffffffffffffffe, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x7e, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000580)={'gretap0\x00', r5, 0x40, 0x7800, 0x0, 0x7, {{0x6, 0x4, 0x1, 0x5, 0x18, 0x68, 0x0, 0x5, 0x2f, 0x0, @broadcast, @remote, {[@rr={0x7, 0x3, 0xad}, @end]}}}}}) recvfrom$packet(r2, &(0x7f0000000540)=""/12, 0xc, 0x2, &(0x7f00000006c0)={0x11, 0x2, r6, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000024000000000000000a0000008500000027000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000120000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x40}, 0x94) 315.210826ms ago: executing program 3 (id=7995): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x52, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x1c, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x7, 0x10, 0x7, 0x0, 0x3, {[@sack={0x5, 0x2}, @fastopen={0x22, 0x3, "99"}]}}}}}}}}, 0x0) 131.852532ms ago: executing program 0 (id=7996): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c001480080015"], 0x34}}, 0xc000) 130.484139ms ago: executing program 1 (id=7997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000380), &(0x7f0000000580)=r3}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @random="f59c09c55f10", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0xb}}}}}}, 0x0) 120.541361ms ago: executing program 3 (id=7998): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000006c0)={{r0, &(0x7f0000000000)='-\x00', 0x224d00, &(0x7f0000000040)={@_ha_fsid={[0x10000, 0x1ff]}, {0x6, 0x9, 0x1, 0x9}}, 0xffffffff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x5}, 0x4, &(0x7f0000000640)=[{0x1, 0x200, &(0x7f0000000140)='$%\x00', &(0x7f0000000300)="496af7f205a72e822d4c4bb6af3113d21587e2ab35419e11ff00e4fc785afbe0b212cfb94e4e8c85b89db4656f50d47487649671a4d2b0990eac5d17f874ab5a49f584be4f18c4f8c8ab451b83d16e264c252577f5559c38c7e0dc830ef235ff9fefa56954b8806c033d5537d9b72e9f8f35e2f12697977971e0040baa0fbd58ced31e77d73ca5af9340c25370fbbf827bad9a7079944d5559a8c6d33a0df1f95543163558dd026a5b397471a15e119bdbfd11a8632464e79fc5d72383d7b031355afebc2247b047cf51172cf236c7d55cbb5f48f5fcb236d85383f1595982db3e", 0xe1, 0x2}, {0x3, 0x7fff, &(0x7f0000000180)='/}\x00', &(0x7f0000000400)="0040b46b804f1162fa8cf10c47b7e606d0a612568ea1855595b3ed5072f17977c3b3375ce675d85b03454351e02491d14ea9b8b714bbccf725b8ff31a7f25dd1f9009ba6a97c892677adaca1c242d9e37efef25d0c93ad2aa89856189d5664bcffa248e87966ddf322cf5613fa885a6f46804e979dece1bc0d6880c5a0d4e9710a769e1942626ff16e17092d5da8479860490d4a7a79c32fed9403d124849bb9dbec11bc412e3d264fb69ead42a334f9af0361aded120d02ebc38b321d9bba1c0c3aacec3301f292ff2a21764ff14be9b4e1592d06a949", 0xd7, 0x8}, {0x3, 0x6, &(0x7f00000001c0)='\x00', &(0x7f0000000240)="4dc0b119ad2704939e4c4285383bc0c9a77efcae0e2d7ea84a485efd327590efcb06b60fcb831c26f7ebf9f32c1eefca50cef36ac209fcbac3417acd915e7973efd1001e382d84f8cc0105acdc1e3b2ff997d7214851", 0x56, 0x22}, {0x3, 0x7, &(0x7f0000000500)='{$\x00', &(0x7f0000000540)="9702cdfea22ce5f2c0d9d4d4e225cd49d6e7f4fe1e03fc0d3db63094cc163645a69a0a1823fb303ad71b4cb80d8decacc00c9129f45265fe4b315539ba29491ada38f2a2cced3f4f217226efa64316965bb566b240b7e5c6ca3ba27bf86e24443252967d1bb1f8dd11afebcdfe40ed272ef19847221c8077a409ef85894fcb4e837eb774be5e8326389b2959c705b400fc9cb5e0ddb31a01c59927c0559b1aba712599b873fe271775fc73ba933a7cecef2f447d6045aa9a810f3459eed5d9e4c8b8ede71e060d7f516dd5322eb3869f7f44", 0xd2, 0x20}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r2, 0x2f, 0x14, 0x4, @void, @value=r2}, 0x20) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000740)={0x7, {{0x2, 0x4e22, @rand_addr=0x64010100}}}, 0x88) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e24}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24000084, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) 44.076796ms ago: executing program 1 (id=7999): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) socket(0x10, 0x80002, 0x0) (rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) socket$netlink(0x10, 0x3, 0xc) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) (async) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000c00), &(0x7f0000002000)=0x4) (async, rerun: 32) epoll_create(0x400) (async, rerun: 32) pipe(&(0x7f0000000180)) (async) socket(0x10, 0x803, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 0s ago: executing program 0 (id=8000): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r3, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000000206010400000000000000000000000905000100070000000900020073797ae51611a5000c0007800800120000050005000a00000005000400010000002c6d6163004de3dc554c369dd5d95aaeee6c489d1a42304e1148e93a00000080a4d6d27944a01a39546b1604497ab97ee7b228eb0b5a6b014dd52a"], 0x54}, 0x1, 0x0, 0x0, 0x24004004}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="900000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c0000a28000005400128009000100766c616e0000000044000280400004800c00010001000080050000000c00010005000000ff4000000c0001004aed0000050000000c00010004000c000100f80a00000000003008000500000000000000", @ANYRES32=r1, @ANYBLOB="08001c00", @ANYRES32, @ANYBLOB="0a000200ffffffffffff0000"], 0x90}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) kernel console output (not intermixed with test programs): 345404][ T2911] team_slave_1 (unregistering): left allmulticast mode [ 655.353290][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 655.373817][ T2911] team_slave_0 (unregistering): left allmulticast mode [ 655.381636][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 655.601891][T32242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6224'. [ 655.824735][ T5825] Bluetooth: hci1: command tx timeout [ 656.551359][T32253] xt_bpf: check failed: parse error [ 656.663269][T32255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6226'. [ 656.718259][T32260] bridge0: port 4(ip6gretap0) entered blocking state [ 656.739854][T32260] bridge0: port 4(ip6gretap0) entered disabled state [ 656.774926][T32260] ip6gretap0: entered allmulticast mode [ 656.796861][T32260] ip6gretap0: entered promiscuous mode [ 656.805054][T32251] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 656.841536][T32266] erspan1: entered promiscuous mode [ 656.847976][T32266] erspan1: entered allmulticast mode [ 656.917247][ T2911] IPVS: stop unused estimator thread 0... [ 657.128078][T32283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6236'. [ 657.140480][T32276] syzkaller0: entered promiscuous mode [ 657.152528][T32276] syzkaller0: entered allmulticast mode [ 657.796289][T31975] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 658.196581][T31975] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 658.460215][T31975] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 658.498581][T31975] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 658.522293][T32316] bond0: (slave rose0): Releasing backup interface [ 658.822072][T32357] IPv6: addrconf: prefix option has invalid lifetime [ 658.828851][T32357] IPv6: addrconf: prefix option has invalid lifetime [ 658.887397][T31975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.949727][T31975] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.984533][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.991731][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.016719][T32366] netlink: 312 bytes leftover after parsing attributes in process `syz.4.6246'. [ 659.030092][T32364] wg1 speed is unknown, defaulting to 1000 [ 659.065142][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.072314][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.090980][T32371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6248'. [ 659.152238][T32364] lo speed is unknown, defaulting to 1000 [ 659.223332][T32363] wg1 speed is unknown, defaulting to 1000 [ 659.223561][T30859] lo speed is unknown, defaulting to 1000 [ 659.242269][T32363] lo speed is unknown, defaulting to 1000 [ 659.799720][T31975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.900233][T31975] veth0_vlan: entered promiscuous mode [ 659.930223][T31975] veth1_vlan: entered promiscuous mode [ 660.202850][T31975] veth0_macvtap: entered promiscuous mode [ 660.227030][T31975] veth1_macvtap: entered promiscuous mode [ 660.288497][T31975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.325056][T32402] wg1 speed is unknown, defaulting to 1000 [ 660.354889][T31975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.403714][T32402] lo speed is unknown, defaulting to 1000 [ 660.418317][T23851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.434814][T23851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.489850][T23851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.512957][T23851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.657475][T32430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6259'. [ 660.700746][T32432] RDS: rds_bind could not find a transport for fc02::21, load rds_tcp or rds_rdma? [ 660.763058][T32436] RDS: rds_bind could not find a transport for fc02::21, load rds_tcp or rds_rdma? [ 660.798726][T32430] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 660.826668][T32430] team0: Port device batadv4 added [ 661.034270][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.075546][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.191900][T32454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6264'. [ 661.206971][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.216125][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.405223][T32464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6266'. [ 662.237885][T32487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6267'. [ 662.782636][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 662.835368][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 662.847998][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 662.897541][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 662.906205][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 662.954500][T32532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6278'. [ 662.961723][T32523] wg1 speed is unknown, defaulting to 1000 [ 662.975565][T32523] lo speed is unknown, defaulting to 1000 [ 664.029627][T32523] chnl_net:caif_netlink_parms(): no params data found [ 664.145368][T32564] netlink: 'syz.4.6286': attribute type 12 has an invalid length. [ 664.170653][T32564] netlink: 'syz.4.6286': attribute type 5 has an invalid length. [ 664.181661][T32564] netlink: 'syz.4.6286': attribute type 2 has an invalid length. [ 664.194804][T32564] netlink: 204 bytes leftover after parsing attributes in process `syz.4.6286'. [ 664.197229][T32568] delete_channel: no stack [ 664.343231][T32575] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6289'. [ 664.413490][T32586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6292'. [ 664.509133][T32523] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.518383][T32523] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.526305][T32523] bridge_slave_0: entered allmulticast mode [ 664.534171][T32523] bridge_slave_0: entered promiscuous mode [ 664.544414][T32523] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.551868][T32523] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.559624][T32523] bridge_slave_1: entered allmulticast mode [ 664.567564][T32523] bridge_slave_1: entered promiscuous mode [ 664.633561][T32523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.648025][T32597] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6293'. [ 664.679545][T32592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6293'. [ 664.934882][ T51] Bluetooth: hci3: command tx timeout [ 665.408999][T32523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.554010][T32523] team0: Port device team_slave_0 added [ 665.607127][T32523] team0: Port device team_slave_1 added [ 665.805828][T32523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.833885][T32523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.900673][T32523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.943262][T32646] netlink: 'syz.2.6302': attribute type 1 has an invalid length. [ 665.978317][T32523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.989059][T32523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.018002][T32523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.114980][T23851] ip6gretap0: left allmulticast mode [ 666.120308][T23851] ip6gretap0: left promiscuous mode [ 666.151743][T23851] bridge0: port 4(ip6gretap0) entered disabled state [ 666.186560][T23851] batadv0: left allmulticast mode [ 666.191848][T23851] batadv0: left promiscuous mode [ 666.199834][T23851] bridge0: port 3(batadv0) entered disabled state [ 666.220480][T23851] bridge_slave_1: left allmulticast mode [ 666.229963][T23851] bridge_slave_1: left promiscuous mode [ 666.238191][T23851] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.249307][T23851] bridge_slave_0: left promiscuous mode [ 666.257240][T23851] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.354172][T32657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6306'. [ 667.014806][ T51] Bluetooth: hci3: command tx timeout [ 667.297703][T32678] netlink: 'syz.4.6309': attribute type 1 has an invalid length. [ 667.554419][T23851] bond4 (unregistering): (slave gretap1): Releasing active interface [ 667.573844][T32684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6311'. [ 667.588739][T32684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6311'. [ 667.599271][T23851] bond3 (unregistering): (slave geneve2): Releasing active interface [ 667.694473][T32686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.759972][T32686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.770797][T23851] bond7 (unregistering): (slave bridge3): Releasing active interface [ 667.939136][T23851] bond1 (unregistering): Released all slaves [ 667.951594][T23851] bond2 (unregistering): Released all slaves [ 667.964306][T23851] bond3 (unregistering): Released all slaves [ 667.977427][T23851] bond4 (unregistering): Released all slaves [ 667.990254][T23851] bond0 (unregistering): Released all slaves [ 668.009663][T23851] bond5 (unregistering): Released all slaves [ 668.023587][T23851] bond6 (unregistering): Released all slaves [ 668.037174][T23851] bond7 (unregistering): Released all slaves [ 668.049905][T23851] bond8 (unregistering): Released all slaves [ 668.065377][T23851] bond9 (unregistering): Released all slaves [ 668.082377][T23851] bond10 (unregistering): Released all slaves [ 668.103165][T23851] bond11 (unregistering): Released all slaves [ 668.120846][T32523] hsr_slave_0: entered promiscuous mode [ 668.127877][T32523] hsr_slave_1: entered promiscuous mode [ 668.134494][T32523] debugfs: 'hsr0' already exists in 'hsr' [ 668.141163][T32523] Cannot create hsr debugfs directory [ 668.147034][T32648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6304'. [ 668.292017][T32685] wg1 speed is unknown, defaulting to 1000 [ 668.353172][T32685] lo speed is unknown, defaulting to 1000 [ 668.361444][T23851] tipc: Left network mode [ 668.412219][T32693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6313'. [ 668.479164][T32699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6313'. [ 668.607283][T32704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6315'. [ 668.661093][T32710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.916398][T32719] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 669.094976][ T51] Bluetooth: hci3: command tx timeout [ 669.292944][T32736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6319'. [ 669.371501][T32739] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6321'. [ 670.160036][T32747] netlink: 'syz.1.6321': attribute type 3 has an invalid length. [ 670.171939][T32747] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6321'. [ 670.291490][T32753] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 670.534220][T23851] hsr_slave_0: left promiscuous mode [ 670.571064][T23851] hsr_slave_1: left promiscuous mode [ 670.646050][ T313] atomic_op ffff8880421b3998 conn xmit_atomic 0000000000000000 [ 671.175308][ T51] Bluetooth: hci3: command tx timeout [ 671.553210][ T338] __nla_validate_parse: 2 callbacks suppressed [ 671.553232][ T338] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6334'. [ 671.750017][T23851] team0 (unregistering): Port device team_slave_1 removed [ 671.780222][T23851] team0 (unregistering): Port device team_slave_0 removed [ 671.944033][ T313] bridge0: port 3(syz_tun) entered blocking state [ 671.953420][ T313] bridge0: port 3(syz_tun) entered disabled state [ 671.963745][ T313] syz_tun: entered allmulticast mode [ 671.970311][ T313] syz_tun: entered promiscuous mode [ 671.976581][ T313] bridge0: port 3(syz_tun) entered blocking state [ 671.983050][ T313] bridge0: port 3(syz_tun) entered forwarding state [ 671.990811][ T316] syzkaller0: entered promiscuous mode [ 671.996621][ T316] syzkaller0: entered allmulticast mode [ 672.330815][T32523] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 672.354311][T32523] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 672.383945][T32523] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 672.412069][T32523] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 672.494265][ T388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6344'. [ 672.744459][T32523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.808682][T32523] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.840665][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.847868][ T5909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.891579][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.898808][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.297676][ T407] syzkaller0: entered promiscuous mode [ 673.303186][ T407] syzkaller0: entered allmulticast mode [ 673.494468][ T407] netlink: 'syz.1.6346': attribute type 15 has an invalid length. [ 673.531766][T23851] IPVS: stop unused estimator thread 0... [ 673.700664][ T418] wg1 speed is unknown, defaulting to 1000 [ 673.853133][ T427] sctp: [Deprecated]: syz.1.6349 (pid 427) Use of int in max_burst socket option deprecated. [ 673.853133][ T427] Use struct sctp_assoc_value instead [ 674.011572][T32523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.233525][T32523] veth0_vlan: entered promiscuous mode [ 674.316497][ T452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6354'. [ 674.338188][ T452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6354'. [ 674.358770][T32523] veth1_vlan: entered promiscuous mode [ 674.431714][ T461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6357'. [ 674.582099][ T471] netlink: 'syz.2.6360': attribute type 5 has an invalid length. [ 675.320361][ T465] sch_tbf: burst 0 is lower than device ip6gre0 mtu (65485) ! [ 675.360652][ T486] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6361'. [ 675.448928][T32523] veth0_macvtap: entered promiscuous mode [ 675.492121][T32523] veth1_macvtap: entered promiscuous mode [ 675.649779][T32523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.743289][ T506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6365'. [ 675.768084][ T506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6365'. [ 675.982379][ T497] tipc: Resetting bearer [ 676.195082][ T497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.434435][ T499] wg1 speed is unknown, defaulting to 1000 [ 676.438584][T32523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.452424][ T495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6365'. [ 676.463797][ T502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 676.526273][ T509] tipc: Started in network mode [ 676.531183][ T509] tipc: Node identity 92dfed0064b7, cluster identity 4711 [ 676.548354][ T509] tipc: Enabled bearer , priority 0 [ 676.563142][ T515] netlink: 'syz.1.6369': attribute type 7 has an invalid length. [ 676.585227][ T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 676.593617][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.607310][ T517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6370'. [ 676.618312][ T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 676.628400][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.443906][ T509] tipc: Disabling bearer [ 677.514653][ T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.529935][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.538822][ T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.547726][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.608683][ T543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6372'. [ 677.640190][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.653871][ T547] ieee802154 phy0 wpan0: encryption failed: -126 [ 677.683712][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.693609][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.755803][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.006520][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.035423][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.090843][ T5909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.123833][ T5909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.403906][ T574] tipc: Enabling of bearer rejected, failed to enable media [ 678.681063][ T586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6381'. [ 679.015221][ T595] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6383'. [ 679.115726][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 679.126181][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 679.138708][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 679.167736][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 679.177015][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 679.356671][ T598] wg1 speed is unknown, defaulting to 1000 [ 680.013968][ T631] netlink: 'syz.4.6388': attribute type 1 has an invalid length. [ 680.113072][ T631] bond1: entered promiscuous mode [ 680.118213][ T631] bond1: entered allmulticast mode [ 680.123723][ T631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 680.147940][ T598] chnl_net:caif_netlink_parms(): no params data found [ 680.238427][ T644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6392'. [ 680.291718][ T644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6392'. [ 680.391556][ T644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6392'. [ 680.442102][ T598] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.475878][ T598] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.504110][ T598] bridge_slave_0: entered allmulticast mode [ 680.533168][ T598] bridge_slave_0: entered promiscuous mode [ 680.564452][ T598] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.579853][ T598] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.590987][ T669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6395'. [ 680.600725][ T598] bridge_slave_1: entered allmulticast mode [ 680.613819][ T598] bridge_slave_1: entered promiscuous mode [ 680.639778][ T668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6396'. [ 680.718301][ T598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.869220][ T598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.058383][ T598] team0: Port device team_slave_0 added [ 681.067314][ T598] team0: Port device team_slave_1 added [ 681.168968][ T598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.179321][ T598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.214676][ T598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.252006][ T598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.259782][ T5825] Bluetooth: hci2: command tx timeout [ 681.274850][ T598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.301527][ T598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.390997][ T598] hsr_slave_0: entered promiscuous mode [ 681.408949][ T598] hsr_slave_1: entered promiscuous mode [ 681.425571][ T598] debugfs: 'hsr0' already exists in 'hsr' [ 681.434625][ T598] Cannot create hsr debugfs directory [ 681.440363][ T699] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 681.557893][ T702] syzkaller0: entered promiscuous mode [ 681.563416][ T702] syzkaller0: entered allmulticast mode [ 681.724478][ T706] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.774018][ T717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6407'. [ 681.879389][ T706] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.004137][ T706] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.102624][ T706] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.146816][ T736] wg1 speed is unknown, defaulting to 1000 [ 682.339080][ T5909] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.383870][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.429163][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.556146][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.873244][ T598] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 682.977390][ T765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6415'. [ 683.334865][ T5825] Bluetooth: hci2: command tx timeout [ 683.348383][ T758] : entered promiscuous mode [ 683.353269][ T598] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 683.865177][ T773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6414'. [ 683.883885][ T779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6416'. [ 683.894318][ T598] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 683.951271][ T598] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 684.178591][ T785] syzkaller0: entered promiscuous mode [ 684.184264][ T785] syzkaller0: entered allmulticast mode [ 684.201195][ T805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6421'. [ 684.218464][ T805] netlink: 'syz.0.6421': attribute type 22 has an invalid length. [ 684.231441][ T805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6421'. [ 684.290191][ T805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6421'. [ 684.336419][ T805] netlink: 'syz.0.6421': attribute type 22 has an invalid length. [ 684.349495][ T805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6421'. [ 684.361199][ T811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6423'. [ 684.475837][ T816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6425'. [ 685.422243][ T5825] Bluetooth: hci2: command tx timeout [ 685.660581][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.843882][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.867703][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.968112][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.987568][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.018451][ T842] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6433'. [ 687.059400][ T847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6435'. [ 687.149313][ T598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.232216][ T598] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.299195][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.306378][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.361683][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.368891][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.494800][ T5825] Bluetooth: hci2: command tx timeout [ 688.044295][ T5825] block nbd2: Receive control failed (result -32) [ 688.169910][ T598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.322331][ T598] veth0_vlan: entered promiscuous mode [ 688.405747][ T598] veth1_vlan: entered promiscuous mode [ 688.487960][ T598] veth0_macvtap: entered promiscuous mode [ 688.521044][ T598] veth1_macvtap: entered promiscuous mode [ 688.602569][ T598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.651982][ T898] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6445'. [ 688.662703][ T598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.717523][T20005] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.757830][T20005] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.824477][T20005] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.870607][T20005] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.035565][ T917] gtp0: entered promiscuous mode [ 689.051014][ T917] gtp0: entered allmulticast mode [ 689.176085][ T939] netlink: 'syz.3.6453': attribute type 1 has an invalid length. [ 689.345740][ T952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6453'. [ 690.022205][ T965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6457'. [ 690.032600][ T965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6457'. [ 690.190048][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.223386][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.293638][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.314959][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.421801][ T982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6461'. [ 690.430539][ T987] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6462'. [ 690.460380][ T987] tipc: Invalid UDP bearer configuration [ 690.460435][ T987] tipc: Enabling of bearer rejected, failed to enable media [ 690.650419][ T1002] atomic_op ffff88802b15b198 conn xmit_atomic 0000000000000000 [ 690.813272][ T1020] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6469'. [ 690.813733][ T1012] netlink: 'syz.1.6468': attribute type 3 has an invalid length. [ 690.832574][ T1021] netlink: 'syz.2.6470': attribute type 6 has an invalid length. [ 690.840678][ T1012] netlink: 'syz.1.6468': attribute type 3 has an invalid length. [ 690.867058][ T1021] netlink: 'syz.2.6470': attribute type 7 has an invalid length. [ 690.889396][ T1029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6468'. [ 690.891838][ T1021] netlink: 'syz.2.6470': attribute type 8 has an invalid length. [ 690.954167][ T1029] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 691.630536][ T1089] lo: entered allmulticast mode [ 691.660330][ T1089] lo: left allmulticast mode [ 691.810829][ T1100] wg1 speed is unknown, defaulting to 1000 [ 691.847560][ T1105] netlink: 'syz.2.6490': attribute type 8 has an invalid length. [ 692.169146][ T1114] netlink: 'syz.0.6492': attribute type 7 has an invalid length. [ 692.263728][ T1114] netlink: 'syz.0.6492': attribute type 5 has an invalid length. [ 692.304416][ T1114] __nla_validate_parse: 7 callbacks suppressed [ 692.304433][ T1114] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6492'. [ 693.145098][ T1169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6499'. [ 693.791402][ T1181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6503'. [ 695.025862][ T1192] netlink: zone id is out of range [ 695.044128][ T1192] netlink: zone id is out of range [ 695.045081][ T1195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6507'. [ 695.058631][ T1192] netlink: zone id is out of range [ 695.058654][ T1192] netlink: zone id is out of range [ 695.058664][ T1192] netlink: zone id is out of range [ 695.058672][ T1192] netlink: zone id is out of range [ 695.058682][ T1192] netlink: zone id is out of range [ 695.058691][ T1192] netlink: zone id is out of range [ 695.058700][ T1192] netlink: zone id is out of range [ 695.058709][ T1192] netlink: zone id is out of range [ 696.122299][ T1255] wg1 speed is unknown, defaulting to 1000 [ 696.410891][ T1288] netlink: 348 bytes leftover after parsing attributes in process `syz.4.6523'. [ 696.938049][T30870] IPVS: starting estimator thread 0... [ 697.060077][ T1329] IPVS: using max 31 ests per chain, 74400 per kthread [ 697.565797][ T1356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6540'. [ 697.640194][ T1367] wg1 speed is unknown, defaulting to 1000 [ 697.876584][ T1378] tipc: Started in network mode [ 697.882994][ T1378] tipc: Node identity ac14140f, cluster identity 4711 [ 697.914015][ T1378] tipc: Enabled bearer , priority 10 [ 698.130123][ T1386] netlink: 'syz.1.6545': attribute type 3 has an invalid length. [ 698.180313][ T1385] netlink: 'syz.1.6545': attribute type 3 has an invalid length. [ 698.180698][ T1387] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6545'. [ 698.318804][ T1396] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 698.734291][ T1418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6551'. [ 698.762026][ T1418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6551'. [ 698.894652][T30861] tipc: Node number set to 2886997007 [ 698.982088][ T1429] netlink: 'syz.4.6555': attribute type 3 has an invalid length. [ 699.124948][ T1435] syz_tun: entered allmulticast mode [ 699.164929][ T1429] rdma_rxe: rxe_newlink: failed to add team0 [ 699.284943][ T1427] syz_tun: left allmulticast mode [ 699.329123][ T1437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6557'. [ 699.408924][ T1444] netlink: 'syz.2.6559': attribute type 1 has an invalid length. [ 699.566361][ T1444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6559'. [ 699.659475][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.681463][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.421067][ T1496] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6575'. [ 700.458644][ T1496] 0X: renamed from caif0 [ 700.493559][ T1496] 0X: entered allmulticast mode [ 700.500461][ T1496] net_ratelimit: 392 callbacks suppressed [ 700.500478][ T1496] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 700.552726][ T1503] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.6576'. [ 700.726906][ T1512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6579'. [ 701.124276][ T1539] syzkaller1: entered promiscuous mode [ 701.144796][ T1539] syzkaller1: entered allmulticast mode [ 701.509825][ T1568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6594'. [ 701.549561][ T1571] syzkaller1: entered promiscuous mode [ 701.555337][ T1571] syzkaller1: entered allmulticast mode [ 702.109940][ T1568] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.117623][ T1568] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.429079][ T1568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.462015][ T1568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.951091][ T1610] __nla_validate_parse: 1 callbacks suppressed [ 702.951109][ T1610] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6603'. [ 702.973876][ T58] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.988153][ T58] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.015766][ T58] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.058533][ T58] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.136935][ T1619] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6606'. [ 703.148768][ T1622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6608'. [ 703.166959][ T1623] netlink: 'syz.0.6607': attribute type 1 has an invalid length. [ 703.174742][ T1619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6606'. [ 703.199140][ T1622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 703.200113][ T1623] netlink: 'syz.0.6607': attribute type 11 has an invalid length. [ 703.217906][ T1623] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6607'. [ 703.383117][ T1632] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6612'. [ 703.495587][ T1639] xt_CONNSECMARK: invalid mode: 0 [ 703.620183][ T1643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6616'. [ 703.787499][ T1657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6622'. [ 703.856554][ T1659] wg1 speed is unknown, defaulting to 1000 [ 703.896067][ T1663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6623'. [ 704.017624][ T1675] netlink: 'syz.3.6625': attribute type 1 has an invalid length. [ 704.106976][ T1678] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6626'. [ 704.513728][ T1690] syzkaller0: entered promiscuous mode [ 704.535446][ T1690] syzkaller0: entered allmulticast mode [ 706.131252][ T1761] syzkaller1: entered promiscuous mode [ 706.138160][ T1761] syzkaller1: entered allmulticast mode [ 706.156895][ T1761] netlink: 'syz.2.6640': attribute type 1 has an invalid length. [ 706.165019][ T1762] netlink: 'syz.2.6640': attribute type 1 has an invalid length. [ 706.174330][ T1764] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 706.350884][ T1772] xt_CT: No such helper "pptp" [ 706.546655][ T1782] wg1 speed is unknown, defaulting to 1000 [ 706.675998][ T1788] 0X: left allmulticast mode [ 706.689688][ T1788] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 707.006655][ T1807] netlink: 'syz.4.6651': attribute type 1 has an invalid length. [ 709.453657][ T1892] __nla_validate_parse: 7 callbacks suppressed [ 709.453676][ T1892] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6667'. [ 709.514738][ T1892] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6667'. [ 709.794915][ T1915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6672'. [ 710.100504][ T1932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6675'. [ 710.209201][ T1937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6676'. [ 710.667385][ T1967] netlink: 'syz.1.6682': attribute type 29 has an invalid length. [ 711.547080][ T1996] syzkaller0: entered promiscuous mode [ 711.552762][ T1996] syzkaller0: entered allmulticast mode [ 711.675416][ T2003] netlink: 'syz.0.6688': attribute type 1 has an invalid length. [ 711.862067][ T2003] bond1: (slave geneve2): making interface the new active one [ 711.873500][ T2003] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 711.880745][ T2012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6688'. [ 711.903909][T23850] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 711.935716][T23850] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 711.944024][T23850] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 712.011953][ T2012] bond1 (unregistering): (slave geneve2): Releasing active interface [ 712.060337][ T2012] bond1 (unregistering): Released all slaves [ 712.095332][T23850] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 712.124771][T23850] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 712.172171][T23850] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 712.419681][ T2030] tipc: Enabling of bearer rejected, failed to enable media [ 713.935662][ T2066] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.010268][ T2066] team_slave_0: left promiscuous mode [ 714.026237][ T2066] team_slave_1: left promiscuous mode [ 714.033980][ T2066] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 714.303968][ T2066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.341169][ T2066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.785623][ T2109] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6712'. [ 714.803009][ T2109] netlink: 'syz.2.6712': attribute type 7 has an invalid length. [ 715.636770][ T2911] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.655664][ T2911] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.669851][ T2115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6714'. [ 715.723549][ T2911] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.918318][ T2129] FAULT_INJECTION: forcing a failure. [ 715.918318][ T2129] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 715.969287][ T2129] CPU: 0 UID: 0 PID: 2129 Comm: syz.2.6719 Not tainted syzkaller #0 PREEMPT(full) [ 715.969323][ T2129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 715.969334][ T2129] Call Trace: [ 715.969341][ T2129] [ 715.969350][ T2129] dump_stack_lvl+0xe8/0x150 [ 715.969377][ T2129] should_fail_ex+0x412/0x560 [ 715.969405][ T2129] prepare_alloc_pages+0x22a/0x650 [ 715.969437][ T2129] __alloc_frozen_pages_noprof+0x12f/0x380 [ 715.969463][ T2129] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 715.969491][ T2129] ? __pfx_policy_nodemask+0x10/0x10 [ 715.969514][ T2129] ? __lock_acquire+0x6b5/0x2cf0 [ 715.969541][ T2129] alloc_pages_mpol+0x232/0x4a0 [ 715.969576][ T2129] vma_alloc_folio_noprof+0xea/0x210 [ 715.969602][ T2129] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 715.969623][ T2129] ? __pte_offset_map+0x29/0x240 [ 715.969643][ T2129] ? __pte_offset_map+0x29/0x240 [ 715.969666][ T2129] do_pte_missing+0x15a4/0x37a0 [ 715.969698][ T2129] ? handle_mm_fault+0xee/0x32a0 [ 715.969722][ T2129] handle_mm_fault+0x1b8c/0x32a0 [ 715.969759][ T2129] ? handle_mm_fault+0xee/0x32a0 [ 715.969785][ T2129] ? __pfx_handle_mm_fault+0x10/0x10 [ 715.969805][ T2129] ? follow_page_pte+0x825/0x1460 [ 715.969833][ T2129] ? __pfx_follow_page_pte+0x10/0x10 [ 715.969864][ T2129] __get_user_pages+0x165b/0x29d0 [ 715.969910][ T2129] __gup_longterm_locked+0xdcf/0x1630 [ 715.969940][ T2129] ? sanity_check_pinned_pages+0x1212/0x12d0 [ 715.969965][ T2129] gup_fast_fallback+0x1d82/0x22e0 [ 715.970009][ T2129] ? __pfx_gup_fast_fallback+0x10/0x10 [ 715.970030][ T2129] ? is_valid_gup_args+0x11f/0x200 [ 715.970049][ T2129] ? pin_user_pages_fast+0x4d/0xb0 [ 715.970069][ T2129] rds_info_getsockopt+0x20e/0x4a0 [ 715.970091][ T2129] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 715.970110][ T2129] ? __might_fault+0xaf/0x130 [ 715.970149][ T2129] ? rds_getsockopt+0x2e6/0x500 [ 715.970170][ T2129] ? __pfx_rds_getsockopt+0x10/0x10 [ 715.970192][ T2129] do_sock_getsockopt+0x2d3/0x3f0 [ 715.970215][ T2129] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 715.970235][ T2129] ? __fget_files+0x3a0/0x420 [ 715.970252][ T2129] ? __fget_files+0x2a/0x420 [ 715.970276][ T2129] __x64_sys_getsockopt+0x1a4/0x240 [ 715.970302][ T2129] do_syscall_64+0x14d/0xf80 [ 715.970321][ T2129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.970335][ T2129] ? trace_irq_disable+0x37/0x100 [ 715.970353][ T2129] ? clear_bhb_loop+0x40/0x90 [ 715.970373][ T2129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.970389][ T2129] RIP: 0033:0x7fb5d419c629 [ 715.970405][ T2129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.970419][ T2129] RSP: 002b:00007fb5d5085028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 715.970440][ T2129] RAX: ffffffffffffffda RBX: 00007fb5d4415fa0 RCX: 00007fb5d419c629 [ 715.970453][ T2129] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000009 [ 715.970464][ T2129] RBP: 00007fb5d5085090 R08: 0000200000000000 R09: 0000000000000000 [ 715.970476][ T2129] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000002 [ 715.970487][ T2129] R13: 00007fb5d4416038 R14: 00007fb5d4415fa0 R15: 00007ffe8c488c98 [ 715.970516][ T2129] [ 716.322833][ T2141] netlink: 'syz.0.6724': attribute type 1 has an invalid length. [ 716.346089][ T2129] bond3: option packets_per_slave: invalid value (1048582) [ 716.353704][ T2129] bond3: option packets_per_slave: allowed values 0 - 65535 [ 716.365432][ T2139] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6722'. [ 716.380936][ T2144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6724'. [ 716.389267][ T2129] bond3 (unregistering): Released all slaves [ 716.435219][ T2150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6724'. [ 716.450921][ T2150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6724'. [ 716.562204][ T2141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 716.595269][ T2144] bond1 (unregistering): Released all slaves [ 716.937001][ T2133] syzkaller0: entered promiscuous mode [ 716.942643][ T2133] syzkaller0: entered allmulticast mode [ 717.190679][ T2145] tipc: Enabled bearer , priority 0 [ 717.365283][ T2176] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6728'. [ 717.416080][ T2130] tipc: Resetting bearer [ 717.428893][ T2177] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6728'. [ 717.449690][ T2130] tipc: Disabling bearer [ 717.484102][ T2179] netlink: 252 bytes leftover after parsing attributes in process `syz.1.6728'. [ 717.519290][ T2180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6729'. [ 717.854261][ T2200] netlink: 'syz.3.6734': attribute type 1 has an invalid length. [ 717.892385][ T2204] openvswitch: netlink: Flow actions attr not present in new flow. [ 718.031164][ T2207] bond1: (slave bridge1): making interface the new active one [ 718.040443][ T2207] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 718.051111][ T2212] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 719.291540][ T2277] xt_CT: You must specify a L4 protocol and not use inversions on it [ 719.458956][ T2286] wg1 speed is unknown, defaulting to 1000 [ 719.854762][ T2317] geneve1: entered promiscuous mode [ 720.142390][ T2330] __nla_validate_parse: 7 callbacks suppressed [ 720.142409][ T2330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6764'. [ 720.196692][ T2330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6764'. [ 720.408798][ T2346] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6768'. [ 720.666693][ T2350] wg1 speed is unknown, defaulting to 1000 [ 720.742541][ T2370] pim6reg: entered allmulticast mode [ 720.811259][ T2370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6769'. [ 720.826014][ T2372] wg1 speed is unknown, defaulting to 1000 [ 720.922942][ T2374] wg1 speed is unknown, defaulting to 1000 [ 721.078234][ T2386] xt_hashlimit: size too large, truncated to 1048576 [ 721.289107][ T2399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.290591][ T2389] x9: renamed from bridge_slave_0 (while UP) [ 721.396103][ T2396] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 721.520656][ T2396] bond1 (unregistering): Released all slaves [ 721.868798][ T2430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6783'. [ 722.122723][ T2444] FAULT_INJECTION: forcing a failure. [ 722.122723][ T2444] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 722.266105][ T2444] CPU: 0 UID: 0 PID: 2444 Comm: syz.0.6786 Not tainted syzkaller #0 PREEMPT(full) [ 722.266132][ T2444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 722.266143][ T2444] Call Trace: [ 722.266150][ T2444] [ 722.266158][ T2444] dump_stack_lvl+0xe8/0x150 [ 722.266186][ T2444] should_fail_ex+0x412/0x560 [ 722.266216][ T2444] prepare_alloc_pages+0x22a/0x650 [ 722.266246][ T2444] __alloc_frozen_pages_noprof+0x12f/0x380 [ 722.266272][ T2444] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 722.266299][ T2444] ? __pfx_policy_nodemask+0x10/0x10 [ 722.266333][ T2444] ? __lock_acquire+0x6b5/0x2cf0 [ 722.266359][ T2444] alloc_pages_mpol+0x232/0x4a0 [ 722.266385][ T2444] vma_alloc_folio_noprof+0xea/0x210 [ 722.266409][ T2444] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 722.266433][ T2444] ? __pte_offset_map+0x29/0x240 [ 722.266453][ T2444] ? __pte_offset_map+0x29/0x240 [ 722.266475][ T2444] do_pte_missing+0x15a4/0x37a0 [ 722.266513][ T2444] ? handle_mm_fault+0xee/0x32a0 [ 722.266536][ T2444] handle_mm_fault+0x1b8c/0x32a0 [ 722.266569][ T2444] ? handle_mm_fault+0xee/0x32a0 [ 722.266596][ T2444] ? __pfx_handle_mm_fault+0x10/0x10 [ 722.266616][ T2444] ? follow_page_pte+0x825/0x1460 [ 722.266644][ T2444] ? __pfx_follow_page_pte+0x10/0x10 [ 722.266675][ T2444] __get_user_pages+0x165b/0x29d0 [ 722.266725][ T2444] __gup_longterm_locked+0xdcf/0x1630 [ 722.266756][ T2444] ? sanity_check_pinned_pages+0x1212/0x12d0 [ 722.266783][ T2444] gup_fast_fallback+0x1d82/0x22e0 [ 722.266834][ T2444] ? __pfx_gup_fast_fallback+0x10/0x10 [ 722.266854][ T2444] ? is_valid_gup_args+0x11f/0x200 [ 722.266875][ T2444] ? pin_user_pages_fast+0x4d/0xb0 [ 722.266896][ T2444] rds_info_getsockopt+0x20e/0x4a0 [ 722.266921][ T2444] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 722.266942][ T2444] ? __might_fault+0xaf/0x130 [ 722.266964][ T2444] ? rds_getsockopt+0x2e6/0x500 [ 722.266991][ T2444] ? __pfx_rds_getsockopt+0x10/0x10 [ 722.267014][ T2444] do_sock_getsockopt+0x2d3/0x3f0 [ 722.267039][ T2444] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 722.267060][ T2444] ? __fget_files+0x3a0/0x420 [ 722.267082][ T2444] ? __fget_files+0x2a/0x420 [ 722.267106][ T2444] __x64_sys_getsockopt+0x1a4/0x240 [ 722.267135][ T2444] do_syscall_64+0x14d/0xf80 [ 722.267156][ T2444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.267173][ T2444] ? trace_irq_disable+0x37/0x100 [ 722.267191][ T2444] ? clear_bhb_loop+0x40/0x90 [ 722.267214][ T2444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.267231][ T2444] RIP: 0033:0x7f4c89f9c629 [ 722.267249][ T2444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.267264][ T2444] RSP: 002b:00007f4c8af08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 722.267284][ T2444] RAX: ffffffffffffffda RBX: 00007f4c8a215fa0 RCX: 00007f4c89f9c629 [ 722.267297][ T2444] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000009 [ 722.267309][ T2444] RBP: 00007f4c8af08090 R08: 0000200000000000 R09: 0000000000000000 [ 722.267320][ T2444] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000002 [ 722.267330][ T2444] R13: 00007f4c8a216038 R14: 00007f4c8a215fa0 R15: 00007ffecca8eb18 [ 722.267359][ T2444] [ 722.982532][ T2444] bond1: option packets_per_slave: invalid value (1048582) [ 723.003133][ T2470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6789'. [ 723.025331][ T2444] bond1: option packets_per_slave: allowed values 0 - 65535 [ 723.060267][ T2470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6789'. [ 723.077202][ T2444] bond1 (unregistering): Released all slaves [ 723.175423][ T2470] geneve1: entered promiscuous mode [ 723.180675][ T2470] geneve1: entered allmulticast mode [ 723.246959][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.295584][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.333217][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.771329][ T2498] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 723.879248][ T2498] bond1 (unregistering): Released all slaves [ 723.994994][ T2504] tipc: Started in network mode [ 723.999916][ T2504] tipc: Node identity 3a534e59c7cf, cluster identity 4711 [ 724.013088][ T2504] tipc: Enabled bearer , priority 0 [ 724.057075][ T2510] syzkaller0: entered promiscuous mode [ 724.075431][ T2510] syzkaller0: entered allmulticast mode [ 724.127484][ T2503] tipc: Resetting bearer [ 724.212463][ T2503] tipc: Disabling bearer [ 724.231004][ T2520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6798'. [ 724.653779][ T2546] netlink: 'syz.3.6802': attribute type 29 has an invalid length. [ 724.683135][ T2546] netlink: 'syz.3.6802': attribute type 29 has an invalid length. [ 724.713989][ T2546] netlink: 500 bytes leftover after parsing attributes in process `syz.3.6802'. [ 724.929396][ T2564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6805'. [ 725.448230][ T2588] bond4 (unregistering): Released all slaves [ 725.470592][ T2597] x_tables: duplicate underflow at hook 3 [ 725.489133][ T2598] __nla_validate_parse: 1 callbacks suppressed [ 725.489152][ T2598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6809'. [ 725.517273][ T2594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6808'. [ 725.531427][ T2593] batman_adv: batadv0: Adding interface: dummy0 [ 725.538019][ T2593] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.578344][ T2594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6808'. [ 725.590377][ T2593] batman_adv: batadv0: Interface activated: dummy0 [ 725.756350][ T2614] netlink: 'syz.3.6812': attribute type 32 has an invalid length. [ 725.773597][ T2620] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6814'. [ 725.804745][ T2614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6812'. [ 725.852139][ T2614] bond2: option coupled_control: invalid value (12) [ 725.866765][ T2614] bond2 (unregistering): Released all slaves [ 726.132044][ T2639] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6816'. [ 726.351989][ T2644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6817'. [ 726.378738][ T2644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6817'. [ 726.601900][ T2659] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 726.833359][ T2677] pim6reg: entered allmulticast mode [ 727.418538][ T2678] bridge0: port 3(syz_tun) entered disabled state [ 727.451913][ T2678] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.459699][ T2678] bridge0: port 1(1x9) entered disabled state [ 727.523535][ T2678] batman_adv: batadv0: Interface deactivated: dummy0 [ 727.949666][ T2678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.994076][ T2678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.517569][ T2671] pim6reg: left allmulticast mode [ 728.543018][ T2695] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6824'. [ 728.562623][ T2695] netlink: 170 bytes leftover after parsing attributes in process `syz.2.6824'. [ 728.703308][ T2911] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.724805][ T2911] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.738408][ T2911] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.763428][ T2717] netlink: 'syz.0.6827': attribute type 1 has an invalid length. [ 728.784763][ T2911] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.008903][ T2911] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.022989][ T2911] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.099096][ T2722] gretap1: entered allmulticast mode [ 729.111910][ T2722] bond1: (slave gretap1): making interface the new active one [ 729.122021][ T2722] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 729.139548][ T2727] tipc: Started in network mode [ 729.145632][ T2727] tipc: Node identity b6ccb1e26812, cluster identity 4711 [ 729.153619][ T2727] tipc: Enabled bearer , priority 0 [ 729.182356][ T2911] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.194666][ T2911] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.207838][ T2727] tipc: Disabling bearer [ 729.432329][ T2771] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 730.210825][ T2831] wg1 speed is unknown, defaulting to 1000 [ 730.396217][ T2841] netlink: 'syz.2.6841': attribute type 4 has an invalid length. [ 730.610353][ T2855] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 730.887425][ T2874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.092054][ T5909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.111816][ T2884] tipc: Enabled bearer , priority 0 [ 731.128673][ T2881] syzkaller0: entered promiscuous mode [ 731.136903][ T5909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.138130][ T2881] syzkaller0: entered allmulticast mode [ 731.169175][ T2888] tipc: Enabled bearer , priority 0 [ 731.181724][ T2888] syzkaller0: entered promiscuous mode [ 731.187543][ T2888] syzkaller0: entered allmulticast mode [ 731.286234][ T2896] tipc: Resetting bearer [ 731.322979][ T2881] tipc: Resetting bearer [ 731.334237][ T2880] tipc: Resetting bearer [ 731.413446][ T2880] tipc: Disabling bearer [ 731.452465][ T2901] __nla_validate_parse: 5 callbacks suppressed [ 731.452486][ T2901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6856'. [ 731.460688][ T2905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.534845][ T2886] tipc: Resetting bearer [ 731.742101][ T2886] tipc: Disabling bearer [ 731.782999][ T2917] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 731.989339][ T2923] syzkaller0: entered promiscuous mode [ 732.017959][ T2923] syzkaller0: entered allmulticast mode [ 732.166706][ T2923] tipc: Started in network mode [ 732.177433][ T2923] tipc: Node identity 1ed361589bf6, cluster identity 4711 [ 732.198523][ T2923] tipc: Enabled bearer , priority 0 [ 732.246699][ T2924] ip6gretap2: entered allmulticast mode [ 732.288730][ T2922] tipc: Resetting bearer [ 732.330357][ T2922] tipc: Disabling bearer [ 732.490700][ T2952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6869'. [ 732.775526][ T2968] tipc: Enabling of bearer rejected, failed to enable media [ 732.950910][ T2972] wg1 speed is unknown, defaulting to 1000 [ 733.119085][ T2982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6875'. [ 733.239581][ T2985] vlan0: entered promiscuous mode [ 733.268324][ T2985] vlan0: entered allmulticast mode [ 733.434753][ T2995] netlink: 'syz.3.6880': attribute type 1 has an invalid length. [ 733.462462][ T2997] tipc: Enabled bearer , priority 0 [ 733.470679][ T2998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6881'. [ 733.482232][ T2995] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6880'. [ 733.508258][ T2990] syzkaller0: entered promiscuous mode [ 733.513776][ T2990] syzkaller0: entered allmulticast mode [ 733.624890][ T2990] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 733.697665][ T2990] tipc: Resetting bearer [ 733.743782][ T2989] tipc: Resetting bearer [ 733.804951][ T2989] tipc: Disabling bearer [ 734.077885][ T3031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6889'. [ 734.335583][ T3044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6894'. [ 734.550558][ T3052] xt_TCPMSS: Only works on TCP SYN packets [ 734.849916][ T3075] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6900'. [ 734.892440][ T3075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6900'. [ 734.926809][ T3075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6900'. [ 735.466368][ T3105] netlink: 'syz.2.6906': attribute type 2 has an invalid length. [ 735.573661][ T3107] wg1 speed is unknown, defaulting to 1000 [ 735.580688][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 735.822514][ T3115] syz_tun: entered allmulticast mode [ 736.376586][ T3134] xt_hashlimit: size too large, truncated to 1048576 [ 736.419975][ T3137] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 736.519969][ T3110] syz_tun: left allmulticast mode [ 736.961536][T20005] bridge_slave_1: left allmulticast mode [ 736.983609][T20005] bridge_slave_1: left promiscuous mode [ 737.005108][T20005] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.042711][T20005] x9: left allmulticast mode [ 737.074724][T20005] x9: left promiscuous mode [ 737.083150][T20005] bridge0: port 1(1x9) entered disabled state [ 738.169362][T20005] team0: Port device erspan0 removed [ 738.263463][T20005] bond6 (unregistering): (slave geneve4): Releasing active interface [ 738.322373][ T3206] __nla_validate_parse: 3 callbacks suppressed [ 738.322387][ T3206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6919'. [ 738.658857][T20005] bond1 (unregistering): Released all slaves [ 738.671322][T20005] bond2 (unregistering): Released all slaves [ 738.685235][T20005] bond3 (unregistering): Released all slaves [ 738.701127][T20005] bond4 (unregistering): Released all slaves [ 738.722650][T20005] bond5 (unregistering): Released all slaves [ 738.737469][T20005] bond6 (unregistering): Released all slaves [ 738.749940][T20005] bond7 (unregistering): Released all slaves [ 738.762280][T20005] bond8 (unregistering): Released all slaves [ 738.786588][T20005] bond9 (unregistering): Released all slaves [ 738.801662][T20005] bond10 (unregistering): Released all slaves [ 738.942211][ T3216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6921'. [ 738.959300][ T3207] syzkaller1: entered promiscuous mode [ 738.975406][ T3207] syzkaller1: entered allmulticast mode [ 739.022282][ T3218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6921'. [ 739.209779][ T3225] wg1 speed is unknown, defaulting to 1000 [ 739.444614][ T3239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6927'. [ 739.453506][ T3239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6927'. [ 739.468910][ T3244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6929'. [ 739.520096][ T3244] netlink: 'syz.0.6929': attribute type 6 has an invalid length. [ 739.528792][ T3244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6929'. [ 739.540964][ T3244] netlink: 'syz.0.6929': attribute type 6 has an invalid length. [ 739.592042][ T3252] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6931'. [ 739.606060][ T3246] bridge0: entered allmulticast mode [ 739.613493][ T3248] tipc: Enabled bearer , priority 0 [ 739.658910][ T3248] syzkaller0: entered promiscuous mode [ 739.664428][ T3248] syzkaller0: entered allmulticast mode [ 739.716000][ T3248] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 739.958466][ T3270] netlink: 'syz.4.6930': attribute type 1 has an invalid length. [ 740.423220][ T3274] tipc: Resetting bearer [ 740.473466][ T3247] tipc: Resetting bearer [ 740.496441][ T3247] tipc: Disabling bearer [ 740.614039][ T3288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6937'. [ 740.914054][T20005] tipc: Left network mode [ 740.977722][ T3319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6944'. [ 741.235247][ T3336] x_tables: duplicate underflow at hook 1 [ 741.974141][ T3347] wg1 speed is unknown, defaulting to 1000 [ 741.992516][ T3347] wg1 speed is unknown, defaulting to 1000 [ 741.999637][ T3347] wg1 speed is unknown, defaulting to 1000 [ 742.026144][ T3347] infiniband sy+: RDMA CMA: cma_listen_on_dev, error -98 [ 742.117290][ T3347] wg1 speed is unknown, defaulting to 1000 [ 742.190336][ T3361] syzkaller1: entered promiscuous mode [ 742.215131][ T3361] syzkaller1: entered allmulticast mode [ 742.232430][ T3347] wg1 speed is unknown, defaulting to 1000 [ 742.368311][ T3347] wg1 speed is unknown, defaulting to 1000 [ 742.447266][ T3347] wg1 speed is unknown, defaulting to 1000 [ 742.488427][ T3347] wg1 speed is unknown, defaulting to 1000 [ 742.549980][ T3347] wg1 speed is unknown, defaulting to 1000 [ 742.576505][ T3347] wg1 speed is unknown, defaulting to 1000 [ 742.626344][ T3347] wg1 speed is unknown, defaulting to 1000 [ 742.655736][ T3347] wg1 speed is unknown, defaulting to 1000 [ 742.678163][ T3347] wg1 speed is unknown, defaulting to 1000 [ 742.738953][ T3347] wg1 speed is unknown, defaulting to 1000 [ 742.777270][ T3347] wg1 speed is unknown, defaulting to 1000 [ 742.924914][T20005] hsr_slave_0: left promiscuous mode [ 742.953459][T20005] hsr_slave_1: left promiscuous mode [ 742.974313][T20005] batman_adv: 10: Removing interface: batadv_slave_0 [ 743.051315][T20005] batman_adv: 10: Removing interface: batadv_slave_1 [ 743.844683][T20005] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 743.903058][ T3426] __nla_validate_parse: 5 callbacks suppressed [ 743.903079][ T3426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6965'. [ 744.112357][T20005] team0 (unregistering): Port device team_slave_1 removed [ 744.150116][T20005] team0 (unregistering): Port device team_slave_0 removed [ 746.098036][T20005] IPVS: stop unused estimator thread 0... [ 746.119580][ T3508] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6984'. [ 746.183726][ T3511] netlink: 'syz.1.6986': attribute type 21 has an invalid length. [ 746.213141][ T3511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6986'. [ 746.233489][ T3511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6986'. [ 746.308056][ T3511] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 746.323350][ T3511] erspan1: entered allmulticast mode [ 746.368397][ T3515] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 746.406713][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.433665][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.560637][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.580640][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.884060][ T3541] sch_tbf: peakrate 4294967283 is lower than or equals to rate 6829859379779001161 ! [ 746.947848][ T3541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6992'. [ 747.101572][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.115798][ T3554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6995'. [ 747.187405][ T3560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6994'. [ 747.269216][ T3560] syzkaller1: entered promiscuous mode [ 747.275790][ T3560] syzkaller1: entered allmulticast mode [ 747.319839][ T3567] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 747.598214][ T3583] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7001'. [ 747.884145][ T3595] vlan0: entered allmulticast mode [ 747.925364][ T3602] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7004'. [ 747.934435][ T3595] bond0: entered allmulticast mode [ 747.964646][ T3595] bond_slave_0: entered allmulticast mode [ 747.970413][ T3595] bond_slave_1: entered allmulticast mode [ 747.996568][ T3604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.103036][ T3602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.173238][ T3602] bond_slave_0: left allmulticast mode [ 750.188842][ T3602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.207090][ T3602] bond_slave_1: left allmulticast mode [ 750.218661][ T3602] bond0 (unregistering): Released all slaves [ 750.230339][ T3604] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 750.316734][ T3616] syzkaller0: entered promiscuous mode [ 750.331576][ T3616] syzkaller0: entered allmulticast mode [ 750.488321][ T3642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7010'. [ 751.949118][ T3626] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7009'. [ 752.132584][ T3652] netlink: 'syz.2.7012': attribute type 13 has an invalid length. [ 752.205954][ T3663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7014'. [ 752.240989][ T3663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7014'. [ 752.290841][ T3670] netlink: 'syz.2.7012': attribute type 1 has an invalid length. [ 752.301930][ T3671] veth0: entered promiscuous mode [ 752.351814][ T3669] veth0: left promiscuous mode [ 752.388713][ T3676] IPVS: Error connecting to the multicast addr [ 752.545081][ T3685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 752.590183][ T3689] hsr0: entered promiscuous mode [ 752.604998][ T3689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7022'. [ 752.650636][ T3685] bond3: Removing last arp target with arp_interval on [ 752.961050][ T3708] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 752.968883][ T3708] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 753.007511][ T3710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7026'. [ 753.094803][ T3710] macvtap0: entered promiscuous mode [ 753.111391][ T3710] bridge0: entered promiscuous mode [ 753.124933][ T3710] macvtap0: entered allmulticast mode [ 753.137173][ T3710] bridge0: port 4(macvtap0) entered blocking state [ 753.164835][ T3710] bridge0: port 4(macvtap0) entered disabled state [ 753.199319][ T3710] bridge0: left promiscuous mode [ 753.223357][ T3721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7029'. [ 753.317650][ T3726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7029'. [ 753.581355][ T3744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7035'. [ 753.623107][ T3745] wg1 speed is unknown, defaulting to 1000 [ 753.845177][ T3755] netlink: 'syz.4.7037': attribute type 22 has an invalid length. [ 754.227391][ T3778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7040'. [ 754.781942][ T3806] wg1 speed is unknown, defaulting to 1000 [ 755.567764][ T3843] 8021q: adding VLAN 0 to HW filter on device bond4 [ 755.570111][ T3855] __nla_validate_parse: 9 callbacks suppressed [ 755.570129][ T3855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7056'. [ 755.604764][ T3852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 755.632076][ T3843] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 755.701965][ T3847] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 755.737510][ T3847] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 755.787332][ T3852] bond4: Removing last arp target with arp_interval on [ 755.958547][ T3855] bond4 (unregistering): (slave batadv1): Releasing backup interface [ 756.028456][ T3855] bond4 (unregistering): Released all slaves [ 756.471037][ T3893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7068'. [ 756.498807][ T3895] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7070'. [ 756.638083][ T3900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7071'. [ 756.695503][ T3911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7071'. [ 756.732241][ T3902] wg1 speed is unknown, defaulting to 1000 [ 756.774407][ T3912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7073'. [ 756.822445][ T3900] netlink: 'syz.2.7071': attribute type 11 has an invalid length. [ 757.019127][ T3928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7076'. [ 757.748951][ T3925] infiniband syz1: set down [ 757.766031][ T3925] infiniband syz1: added bond_slave_0 [ 757.876818][ T3925] RDS/IB: syz1: added [ 757.888284][ T3925] smc: adding ib device syz1 with port count 1 [ 757.895611][ T3925] smc: ib device syz1 port 1 has no pnetid [ 757.928419][ T3948] mac80211_hwsim hwsim52 ;: renamed from wlan0 [ 758.270146][ T3961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7082'. [ 758.362562][ T3968] vlan1: entered allmulticast mode [ 758.384599][ T3961] openvswitch: netlink: Flow key attr not present in new flow. [ 758.415388][ T3968] veth0_to_bond: entered allmulticast mode [ 758.472083][ T3961] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7082'. [ 761.352287][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7085'. [ 761.487873][ T9] IPVS: starting estimator thread 0... [ 761.507139][ T3989] tipc: New replicast peer: 10.1.1.2 [ 761.534909][ T3989] tipc: Enabled bearer , priority 10 [ 761.567662][ T3994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7089'. [ 761.594985][ T3990] IPVS: using max 38 ests per chain, 91200 per kthread [ 761.700031][ T4001] netlink: 'syz.4.7092': attribute type 10 has an invalid length. [ 761.792019][ T4010] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.800874][ T4010] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.877372][ T4006] netlink: 'syz.1.7091': attribute type 3 has an invalid length. [ 762.032993][ T4022] syzkaller1: entered promiscuous mode [ 762.047541][ T4022] syzkaller1: entered allmulticast mode [ 762.048315][ T4024] netlink: 'syz.1.7095': attribute type 2 has an invalid length. [ 762.214146][ T4035] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 762.283170][ T4037] syzkaller1: entered promiscuous mode [ 762.299743][ T4037] syzkaller1: entered allmulticast mode [ 762.396629][ T4040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7097'. [ 762.576136][T30857] tipc: Node number set to 2233819480 [ 762.784800][ T4046] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 763.676271][ T5909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.692844][ T5909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.816104][ T4097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7113'. [ 764.018418][ T4112] syzkaller1: entered promiscuous mode [ 764.024138][ T4112] syzkaller1: entered allmulticast mode [ 764.107859][ T4116] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7118'. [ 764.496248][ T4133] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7122'. [ 764.535985][ T4041] Bluetooth: hci5: command 0x0406 tx timeout [ 764.668504][ T4135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7121'. [ 765.392161][ T4154] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7126'. [ 765.424454][ T4155] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7126'. [ 765.591277][ T4162] xt_bpf: check failed: parse error [ 765.767762][ T4166] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7130'. [ 766.458140][ T4197] __nla_validate_parse: 1 callbacks suppressed [ 766.458162][ T4197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7130'. [ 767.096313][ T4219] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 767.108607][ T4018] wg1 speed is unknown, defaulting to 1000 [ 767.829159][ T4266] netlink: 'syz.3.7152': attribute type 4 has an invalid length. [ 767.928364][ T4272] netlink: 'syz.3.7152': attribute type 3 has an invalid length. [ 767.986639][ T4272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7152'. [ 768.448416][ T4311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7158'. [ 768.557326][ T4315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7160'. [ 768.630270][ T4317] batman_adv: batadv0: Adding interface: dummy0 [ 768.636976][ T4317] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.664660][ T4317] batman_adv: batadv0: Interface activated: dummy0 [ 768.705029][ T4318] batadv0: mtu less than device minimum [ 768.729881][ T4318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 768.741654][ T4318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 768.753446][ T4318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 768.764824][ T4318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 768.776569][ T4318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 768.788262][ T4318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 768.800012][ T4318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 768.811191][ T4318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 768.822842][ T4318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 768.853445][ T4315] netlink: 'syz.1.7160': attribute type 30 has an invalid length. [ 768.940240][ T4334] xt_hashlimit: size too large, truncated to 1048576 [ 768.993990][ T4337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7165'. [ 769.104282][ T4348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7167'. [ 769.251700][ T4355] netlink: 'syz.1.7168': attribute type 1 has an invalid length. [ 769.259610][ T4352] bond1: entered promiscuous mode [ 769.259635][ T4352] bond1: entered allmulticast mode [ 769.259984][ T4352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 769.580459][ T4370] netlink: 'syz.1.7173': attribute type 1 has an invalid length. [ 769.655446][ T4041] Bluetooth: hci1: command 0x0406 tx timeout [ 769.770356][ T4388] IPVS: length: 94 != 24 [ 769.814164][ T4389] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7173'. [ 770.171551][ T4413] Cannot find del_set index 2 as target [ 770.422626][ T4423] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 770.623529][ T4435] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7189'. [ 770.912606][ T4453] netlink: 'syz.0.7191': attribute type 4 has an invalid length. [ 770.957829][ T4457] xt_bpf: check failed: parse error [ 770.978661][ T4458] FAULT_INJECTION: forcing a failure. [ 770.978661][ T4458] name failslab, interval 1, probability 0, space 0, times 0 [ 771.013727][ T4458] CPU: 1 UID: 0 PID: 4458 Comm: syz.2.7192 Not tainted syzkaller #0 PREEMPT(full) [ 771.013753][ T4458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 771.013762][ T4458] Call Trace: [ 771.013770][ T4458] [ 771.013786][ T4458] dump_stack_lvl+0xe8/0x150 [ 771.013813][ T4458] should_fail_ex+0x412/0x560 [ 771.013841][ T4458] should_failslab+0xa8/0x100 [ 771.013869][ T4458] ? create_new_namespaces+0x33/0x6a0 [ 771.013887][ T4458] kmem_cache_alloc_noprof+0x87/0x650 [ 771.013916][ T4458] create_new_namespaces+0x33/0x6a0 [ 771.013938][ T4458] ? bpf_lsm_capable+0x9/0x20 [ 771.013954][ T4458] ? security_capable+0x7e/0x2c0 [ 771.013979][ T4458] unshare_nsproxy_namespaces+0x11a/0x160 [ 771.013999][ T4458] ksys_unshare+0x4f4/0x900 [ 771.014028][ T4458] ? __pfx_ksys_unshare+0x10/0x10 [ 771.014049][ T4458] ? __pfx_ksys_write+0x10/0x10 [ 771.014078][ T4458] __x64_sys_unshare+0x38/0x50 [ 771.014099][ T4458] do_syscall_64+0x14d/0xf80 [ 771.014120][ T4458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.014136][ T4458] ? trace_irq_disable+0x37/0x100 [ 771.014153][ T4458] ? clear_bhb_loop+0x40/0x90 [ 771.014172][ T4458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.014188][ T4458] RIP: 0033:0x7fb5d419c629 [ 771.014205][ T4458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.014218][ T4458] RSP: 002b:00007fb5d5064028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 771.014236][ T4458] RAX: ffffffffffffffda RBX: 00007fb5d4416090 RCX: 00007fb5d419c629 [ 771.014249][ T4458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 771.014260][ T4458] RBP: 00007fb5d5064090 R08: 0000000000000000 R09: 0000000000000000 [ 771.014271][ T4458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.014282][ T4458] R13: 00007fb5d4416128 R14: 00007fb5d4416090 R15: 00007ffe8c488c98 [ 771.014312][ T4458] [ 771.702887][ T4482] syzkaller0: entered promiscuous mode [ 771.722796][ T4482] syzkaller0: entered allmulticast mode [ 771.895544][ T4501] netlink: 428 bytes leftover after parsing attributes in process `syz.1.7202'. [ 771.931079][ T4501] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7202'. [ 772.264812][ T4515] xt_hashlimit: size too large, truncated to 1048576 [ 772.355610][ T4519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7203'. [ 772.413131][ T4528] FAULT_INJECTION: forcing a failure. [ 772.413131][ T4528] name failslab, interval 1, probability 0, space 0, times 0 [ 772.474668][ T4528] CPU: 1 UID: 0 PID: 4528 Comm: syz.4.7207 Not tainted syzkaller #0 PREEMPT(full) [ 772.474704][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 772.474715][ T4528] Call Trace: [ 772.474722][ T4528] [ 772.474730][ T4528] dump_stack_lvl+0xe8/0x150 [ 772.474758][ T4528] should_fail_ex+0x412/0x560 [ 772.474791][ T4528] should_failslab+0xa8/0x100 [ 772.474817][ T4528] __kmalloc_cache_noprof+0x88/0x660 [ 772.474840][ T4528] ? copy_ipcs+0x1f9/0x6c0 [ 772.474865][ T4528] copy_ipcs+0x1f9/0x6c0 [ 772.474883][ T4528] ? copy_utsname+0x184/0x620 [ 772.474906][ T4528] create_new_namespaces+0x210/0x6a0 [ 772.474929][ T4528] ? bpf_lsm_capable+0x9/0x20 [ 772.474945][ T4528] ? security_capable+0x7e/0x2c0 [ 772.474973][ T4528] unshare_nsproxy_namespaces+0x11a/0x160 [ 772.474996][ T4528] ksys_unshare+0x4f4/0x900 [ 772.475031][ T4528] ? __pfx_ksys_unshare+0x10/0x10 [ 772.475052][ T4528] ? __pfx_ksys_write+0x10/0x10 [ 772.475083][ T4528] __x64_sys_unshare+0x38/0x50 [ 772.475103][ T4528] do_syscall_64+0x14d/0xf80 [ 772.475125][ T4528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.475141][ T4528] ? trace_irq_disable+0x37/0x100 [ 772.475160][ T4528] ? clear_bhb_loop+0x40/0x90 [ 772.475181][ T4528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.475198][ T4528] RIP: 0033:0x7f0e9b39c629 [ 772.475214][ T4528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.475231][ T4528] RSP: 002b:00007f0e995d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 772.475250][ T4528] RAX: ffffffffffffffda RBX: 00007f0e9b616090 RCX: 00007f0e9b39c629 [ 772.475262][ T4528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 772.475273][ T4528] RBP: 00007f0e995d5090 R08: 0000000000000000 R09: 0000000000000000 [ 772.475284][ T4528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.475294][ T4528] R13: 00007f0e9b616128 R14: 00007f0e9b616090 R15: 00007ffd39f1f578 [ 772.475324][ T4528] [ 772.817890][ T4519] bridge_slave_0 (unregistering): left allmulticast mode [ 772.825219][ T4519] bridge_slave_0 (unregistering): left promiscuous mode [ 772.832309][ T4519] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.199846][ T4556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7213'. [ 773.208987][ T4556] netlink: 'syz.4.7213': attribute type 1 has an invalid length. [ 773.768073][ T4589] wg1 speed is unknown, defaulting to 1000 [ 773.815906][ T4597] FAULT_INJECTION: forcing a failure. [ 773.815906][ T4597] name failslab, interval 1, probability 0, space 0, times 0 [ 773.854692][ T4597] CPU: 0 UID: 0 PID: 4597 Comm: syz.1.7220 Not tainted syzkaller #0 PREEMPT(full) [ 773.854718][ T4597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 773.854729][ T4597] Call Trace: [ 773.854736][ T4597] [ 773.854743][ T4597] dump_stack_lvl+0xe8/0x150 [ 773.854768][ T4597] should_fail_ex+0x412/0x560 [ 773.854795][ T4597] should_failslab+0xa8/0x100 [ 773.854819][ T4597] __kmalloc_cache_noprof+0x88/0x660 [ 773.854842][ T4597] ? alloc_fs_context+0x64/0xd50 [ 773.854866][ T4597] alloc_fs_context+0x64/0xd50 [ 773.854894][ T4597] mq_init_ns+0x110/0x760 [ 773.854919][ T4597] copy_ipcs+0x460/0x6c0 [ 773.854945][ T4597] create_new_namespaces+0x210/0x6a0 [ 773.854968][ T4597] ? bpf_lsm_capable+0x9/0x20 [ 773.854986][ T4597] ? security_capable+0x7e/0x2c0 [ 773.855015][ T4597] unshare_nsproxy_namespaces+0x11a/0x160 [ 773.855038][ T4597] ksys_unshare+0x4f4/0x900 [ 773.855068][ T4597] ? __pfx_ksys_unshare+0x10/0x10 [ 773.855090][ T4597] ? __pfx_ksys_write+0x10/0x10 [ 773.855120][ T4597] __x64_sys_unshare+0x38/0x50 [ 773.855140][ T4597] do_syscall_64+0x14d/0xf80 [ 773.855161][ T4597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.855178][ T4597] ? trace_irq_disable+0x37/0x100 [ 773.855197][ T4597] ? clear_bhb_loop+0x40/0x90 [ 773.855218][ T4597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.855234][ T4597] RIP: 0033:0x7f980939c629 [ 773.855251][ T4597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.855265][ T4597] RSP: 002b:00007f98075d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 773.855284][ T4597] RAX: ffffffffffffffda RBX: 00007f9809616090 RCX: 00007f980939c629 [ 773.855297][ T4597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 773.855307][ T4597] RBP: 00007f98075d5090 R08: 0000000000000000 R09: 0000000000000000 [ 773.855317][ T4597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.855327][ T4597] R13: 00007f9809616128 R14: 00007f9809616090 R15: 00007fffab277d88 [ 773.855354][ T4597] [ 774.284148][ T4609] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.7225'. [ 774.355440][ T4617] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7226'. [ 774.432002][ T4621] ieee802154 phy0 wpan0: encryption failed: -90 [ 774.451258][ T4621] netlink: 'syz.4.7228': attribute type 1 has an invalid length. [ 774.462020][ T4621] netlink: 'syz.4.7228': attribute type 2 has an invalid length. [ 774.533424][ T4628] netlink: 'syz.4.7228': attribute type 1 has an invalid length. [ 774.548427][ T4628] netlink: 'syz.4.7228': attribute type 2 has an invalid length. [ 774.569655][ T4617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.602708][ T4618] wg1 speed is unknown, defaulting to 1000 [ 774.610799][ T4631] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7228'. [ 774.811977][ T4629] syzkaller1: entered promiscuous mode [ 774.821397][ T4641] net_ratelimit: 11 callbacks suppressed [ 774.821418][ T4641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 774.840305][ T4629] syzkaller1: entered allmulticast mode [ 774.964321][ T4641] bond0: Removing last arp target with arp_interval on [ 775.282914][ T4661] tipc: Enabled bearer , priority 0 [ 775.298061][ T4661] syzkaller0: entered promiscuous mode [ 775.313070][ T4661] syzkaller0: entered allmulticast mode [ 775.351344][ T4661] tipc: Resetting bearer [ 775.536711][ T4660] tipc: Resetting bearer [ 775.669822][ T4660] tipc: Disabling bearer [ 775.844446][ T4606] wg1 speed is unknown, defaulting to 1000 [ 776.184915][ T4692] openvswitch: netlink: Message has 19 unknown bytes. [ 776.276723][ T4686] wg1 speed is unknown, defaulting to 1000 [ 776.364075][ T4697] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7242'. [ 776.376016][ T4697] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7242'. [ 776.400255][ T4700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 776.568890][ T4700] bond2: Removing last arp target with arp_interval on [ 776.684153][ T4704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7244'. [ 776.934121][ T4715] __nla_validate_parse: 1 callbacks suppressed [ 776.934137][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7245'. [ 777.216490][ T4707] wg1 speed is unknown, defaulting to 1000 [ 778.425897][ T4740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7248'. [ 779.109566][ T4744] wg1 speed is unknown, defaulting to 1000 [ 779.329915][ T4756] netlink: 'syz.2.7250': attribute type 2 has an invalid length. [ 779.393489][ T4756] !9: entered promiscuous mode [ 779.407215][ T4757] netlink: 'syz.2.7250': attribute type 2 has an invalid length. [ 779.436243][ T4757] !9: left promiscuous mode [ 779.495765][ T4763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 779.657956][ T4763] bond2: Removing last arp target with arp_interval on [ 779.800106][ T4775] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7254'. [ 779.852052][ T4779] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7254'. [ 779.859811][ T4775] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7254'. [ 779.863752][ T4777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.172418][ T4777] bond3: Removing last arp target with arp_interval on [ 780.422965][ T4800] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7260'. [ 780.689591][ T4812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.717163][ T4812] netlink: 'syz.1.7264': attribute type 10 has an invalid length. [ 780.733118][ T4812] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.749206][ T4815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7265'. [ 780.761050][ T4812] bond0: (slave team0): Enslaving as an active interface with an up link [ 780.796142][ T4817] netlink: 'syz.3.7266': attribute type 1 has an invalid length. [ 780.888362][ T4817] 8021q: adding VLAN 0 to HW filter on device bond3 [ 780.909574][ T4815] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7265'. [ 780.986447][ T4828] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7266'. [ 781.022499][ T4822] bond3: (slave veth5): Enslaving as an active interface with a down link [ 781.072248][ T4834] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7268'. [ 781.084350][ T4817] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 781.104933][ T4817] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 781.318073][ T4841] xt_bpf: check failed: parse error [ 781.365383][ T4844] sctp: [Deprecated]: syz.4.7270 (pid 4844) Use of int in max_burst socket option deprecated. [ 781.365383][ T4844] Use struct sctp_assoc_value instead [ 781.404704][ T4843] sctp: [Deprecated]: syz.4.7270 (pid 4843) Use of int in max_burst socket option deprecated. [ 781.404704][ T4843] Use struct sctp_assoc_value instead [ 781.515725][ T4850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.675074][ T4850] bond4: Removing last arp target with arp_interval on [ 781.776531][ T4862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.939381][ T4874] __nla_validate_parse: 4 callbacks suppressed [ 781.939401][ T4874] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7279'. [ 781.977988][ T4874] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7279'. [ 781.987047][ T4880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7280'. [ 781.987068][ T4880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7280'. [ 782.160069][ T4888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7281'. [ 782.247858][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7284'. [ 782.442828][ T4906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.543975][ T4906] bond2: Removing last arp target with arp_interval on [ 782.860940][ T4925] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7289'. [ 782.871886][ T4921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7289'. [ 782.903485][ T4932] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 783.192881][ T4949] netlink: 'syz.0.7297': attribute type 1 has an invalid length. [ 783.291028][ T4960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 783.341849][ T4959] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 783.353243][ T4949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7297'. [ 783.368516][ T4959] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 783.414281][ T4964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7297'. [ 783.474367][ T4960] bond5: Removing last arp target with arp_interval on [ 783.500507][ T4949] bond5: (slave bridge2): Enslaving as an active interface with a down link [ 783.544258][ T4959] macvlan6: entered promiscuous mode [ 783.596918][ T4959] macvlan6: entered allmulticast mode [ 783.927665][ T4986] netlink: 'syz.0.7303': attribute type 4 has an invalid length. [ 783.955664][ T4988] wg1 speed is unknown, defaulting to 1000 [ 784.702461][ T5038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 784.819542][ T5038] bond4: Removing last arp target with arp_interval on [ 784.907693][ T5017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.015739][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 785.140556][ T5055] syzkaller0: entered promiscuous mode [ 785.189730][ T5055] syzkaller0: entered allmulticast mode [ 785.423505][ T5068] wg1 speed is unknown, defaulting to 1000 [ 786.157575][ T5106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.357940][ T5106] bond6: Removing last arp target with arp_interval on [ 786.953667][ T5151] wg1 speed is unknown, defaulting to 1000 [ 787.099691][ T5163] netlink: 'syz.2.7336': attribute type 6 has an invalid length. [ 787.267353][ T5173] __nla_validate_parse: 4 callbacks suppressed [ 787.267372][ T5173] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7338'. [ 787.476893][ T5185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 787.621845][ T5185] bond3: Removing last arp target with arp_interval on [ 787.862168][ T5200] bridge0: port 4(batadv0) entered blocking state [ 787.871616][ T5200] bridge0: port 4(batadv0) entered disabled state [ 787.897892][ T5200] batadv0: entered allmulticast mode [ 787.933132][ T5200] batadv0: entered promiscuous mode [ 787.965752][ T5213] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7347'. [ 787.984482][ T5211] batadv0: left allmulticast mode [ 787.989615][ T5211] batadv0: left promiscuous mode [ 788.043653][ T5211] bridge0: port 4(batadv0) entered disabled state [ 788.071143][ T5214] tipc: Enabling of bearer rejected, failed to enable media [ 788.207023][ T5234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7349'. [ 788.361560][ T5238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 788.648769][ T5238] bond6: Removing last arp target with arp_interval on [ 788.700299][ T5254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7355'. [ 788.802877][ T5262] syzkaller0: entered promiscuous mode [ 788.809518][ T5262] syzkaller0: entered allmulticast mode [ 788.994370][ T5278] netlink: 'syz.4.7359': attribute type 10 has an invalid length. [ 789.006494][ T5262] tipc: Enabled bearer , priority 0 [ 789.059413][ T5261] tipc: Resetting bearer [ 789.118139][ T5261] tipc: Disabling bearer [ 789.235776][ T5286] netlink: zone id is out of range [ 789.245383][ T5286] netlink: zone id is out of range [ 789.250530][ T5286] netlink: zone id is out of range [ 789.281913][ T5286] netlink: zone id is out of range [ 789.287923][ T5286] netlink: zone id is out of range [ 789.302823][ T5286] netlink: zone id is out of range [ 789.314695][ T5286] netlink: zone id is out of range [ 789.397288][ T5295] xt_hashlimit: size too large, truncated to 1048576 [ 789.498926][ T5302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7365'. [ 789.600655][ T5300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7363'. [ 789.676899][ T5312] netlink: 240 bytes leftover after parsing attributes in process `syz.3.7366'. [ 789.732825][ T5312] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3 [ 789.966587][ T5330] bridge5: entered allmulticast mode [ 790.039268][ T5327] bond7: Removing last arp target with arp_interval on [ 790.242961][ T5344] syzkaller1: entered promiscuous mode [ 790.281792][ T5344] syzkaller1: entered allmulticast mode [ 790.474993][ T5369] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7374'. [ 790.563793][ T5344] wg1 speed is unknown, defaulting to 1000 [ 790.750491][ T5354] wg1 speed is unknown, defaulting to 1000 [ 790.849609][ T5380] wg1 speed is unknown, defaulting to 1000 [ 790.984035][ T5386] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7377'. [ 791.007374][ T5386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7377'. [ 791.052059][ T5386] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 791.423081][ T5404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 791.476134][ T5407] net_ratelimit: 137 callbacks suppressed [ 791.476152][ T5407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 792.313003][ T5435] __nla_validate_parse: 3 callbacks suppressed [ 792.313026][ T5435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7388'. [ 792.615756][ T5458] netlink: 'syz.0.7394': attribute type 1 has an invalid length. [ 792.895288][ T5464] macvlan7: entered promiscuous mode [ 792.902531][ T5464] macvlan7: entered allmulticast mode [ 792.929397][ T5464] bond7: entered promiscuous mode [ 792.941006][ T5464] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 792.957560][ T5464] bond7: left promiscuous mode [ 793.089410][T20005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.100057][T20005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.183780][ T5487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 793.460469][ T5505] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7400'. [ 793.894153][ T5526] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7405'. [ 794.116764][ T5527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7407'. [ 794.507399][ T5546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 794.774951][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7412'. [ 794.913169][ T5571] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7415'. [ 795.066849][ T5573] netlink: 'syz.1.7416': attribute type 29 has an invalid length. [ 795.085428][ T5573] netlink: 'syz.1.7416': attribute type 29 has an invalid length. [ 795.591441][ T5602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 795.869750][ T5579] dvmrp0: entered allmulticast mode [ 795.963337][ T5626] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7428'. [ 796.032166][ T5632] netlink: 'syz.3.7427': attribute type 21 has an invalid length. [ 796.111444][ T5630] bond8 (unregistering): Released all slaves [ 796.234063][ T5645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7430'. [ 796.555983][ T5655] ip6erspan0: entered promiscuous mode [ 796.570442][ T5663] bond0: Device is already in use. [ 796.585632][ T5665] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7436'. [ 796.634297][ T5668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 796.939395][ T5687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7444'. [ 797.025121][ T5687] netlink: 'syz.0.7444': attribute type 1 has an invalid length. [ 797.750237][ T5744] __nla_validate_parse: 2 callbacks suppressed [ 797.750259][ T5744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7465'. [ 798.598778][ T5802] lo: Caught tx_queue_len zero misconfig [ 799.238650][ T4041] Bluetooth: hci2: link tx timeout [ 799.244418][ T4041] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 799.620465][ T5917] netlink: 272 bytes leftover after parsing attributes in process `syz.1.7513'. [ 799.672414][ T5922] netlink: 'syz.0.7517': attribute type 16 has an invalid length. [ 799.688006][ T5922] netlink: 'syz.0.7517': attribute type 17 has an invalid length. [ 799.723825][ T5922] bridge0: left allmulticast mode [ 799.755433][ T5929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7519'. [ 799.757230][ T5922] geneve1: left promiscuous mode [ 799.809140][ T5922] gtp0: left promiscuous mode [ 799.816182][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7520'. [ 799.835178][ T5922] gtp0: left allmulticast mode [ 799.846322][ T5922] gretap1: left allmulticast mode [ 799.854343][ T5935] netlink: 'syz.1.7521': attribute type 3 has an invalid length. [ 799.872025][ T5922] macvlan6: left promiscuous mode [ 799.880640][ T5922] macvlan6: left allmulticast mode [ 800.562636][ T5968] tipc: Enabled bearer , priority 0 [ 800.605853][ T5968] syzkaller0: entered promiscuous mode [ 800.615939][ T5968] syzkaller0: entered allmulticast mode [ 800.628135][ T5976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7533'. [ 800.650406][ T5968] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 800.659262][ T5971] netlink: 712 bytes leftover after parsing attributes in process `syz.3.7533'. [ 800.669629][ T5971] netlink: 5504 bytes leftover after parsing attributes in process `syz.3.7533'. [ 800.679048][ T5971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7533'. [ 800.756302][ T5968] tipc: Resetting bearer [ 800.765434][ T5973] wg1 speed is unknown, defaulting to 1000 [ 800.788506][ T5979] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.811868][ T5981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7534'. [ 800.815476][ T5965] tipc: Resetting bearer [ 800.848290][ T5965] tipc: Disabling bearer [ 800.891673][ T5979] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.078631][ T5979] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.207548][ T5979] team0: Failed to send options change via netlink (err -105) [ 801.215938][ T5979] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 801.234403][ T6002] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:20001 [ 801.242769][ T5979] team0: Port device netdevsim0 removed [ 801.244454][ T2706] IPVS: starting estimator thread 0... [ 801.334657][ T4041] Bluetooth: hci2: command 0x0406 tx timeout [ 801.354611][ T6003] IPVS: using max 35 ests per chain, 84000 per kthread [ 801.452143][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7544'. [ 801.663821][T23850] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.737918][ T6033] openvswitch: netlink: Flow key attr not present in new flow. [ 801.794832][ T2911] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.965852][T23850] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.994115][T23850] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.255986][ T6055] netlink: 'syz.2.7554': attribute type 46 has an invalid length. [ 802.840506][ T6090] __nla_validate_parse: 8 callbacks suppressed [ 802.840527][ T6090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7564'. [ 802.863259][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7563'. [ 802.871688][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7564'. [ 802.943438][ T6089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7563'. [ 803.090203][ T794] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 803.115156][T23850] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 803.254255][ T6115] nbd: nbd2 already in use [ 803.471946][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.484298][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.506927][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7574'. [ 803.525795][T30857] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 803.557364][ T6134] ip6t_rpfilter: unknown options [ 803.810933][ T6150] netlink: 'syz.3.7583': attribute type 1 has an invalid length. [ 803.887119][ T6144] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7581'. [ 804.247326][T20005] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 804.274983][T20005] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 804.726511][ T6192] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7589'. [ 804.773476][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7589'. [ 804.973226][T23850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.989789][T23850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.181121][ T6223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7596'. [ 805.222373][ T6223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7596'. [ 805.254816][T30857] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 806.097750][ T6278] tipc: Enabled bearer , priority 0 [ 806.196840][ T6284] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 806.216647][ T6278] syzkaller0: entered promiscuous mode [ 806.224945][ T6278] syzkaller0: entered allmulticast mode [ 806.258112][ T6278] tipc: Resetting bearer [ 806.328526][ T6277] tipc: Resetting bearer [ 806.466054][ T6277] tipc: Disabling bearer [ 807.026153][ T6332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.061320][ T6335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.560820][ T6370] xt_bpf: check failed: parse error [ 807.749680][ T6374] bond0: (slave rose0): Enslaving as an active interface with an up link [ 807.974742][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 808.223658][ T6399] __nla_validate_parse: 9 callbacks suppressed [ 808.223677][ T6399] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7639'. [ 808.402375][ T6411] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7642'. [ 808.418688][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7642'. [ 808.439936][ T6413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7643'. [ 808.505076][ T6417] Bluetooth: MGMT ver 1.23 [ 808.537910][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.612387][ T6420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7644'. [ 809.375140][ T6455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7654'. [ 809.400826][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7654'. [ 809.545673][ T6460] syz_tun: entered promiscuous mode [ 809.605995][ T6460] syz_tun: refused to change device tx_queue_len [ 809.633343][ T6460] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 809.712292][ T6476] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 810.213305][ T6492] nbd: nbd0 already in use [ 810.633383][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7665'. [ 810.714831][ T6504] ip6gretap0: mtu less than device minimum [ 810.927723][ T6510] tipc: Enabled bearer , priority 0 [ 810.950509][ T6522] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7672'. [ 810.977263][ T6510] syzkaller0: entered promiscuous mode [ 810.982766][ T6510] syzkaller0: entered allmulticast mode [ 811.005730][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7672'. [ 811.117759][ T6510] tipc: Resetting bearer [ 811.382915][ T6506] tipc: Resetting bearer [ 811.449327][ T6506] tipc: Disabling bearer [ 812.348653][ T6589] netlink: 'syz.1.7689': attribute type 11 has an invalid length. [ 812.411154][ T6592] netlink: 'syz.3.7691': attribute type 1 has an invalid length. [ 812.777605][ T6601] sctp: [Deprecated]: syz.4.7693 (pid 6601) Use of struct sctp_assoc_value in delayed_ack socket option. [ 812.777605][ T6601] Use struct sctp_sack_info instead [ 813.128944][ T6633] netlink: 'syz.3.7700': attribute type 1 has an invalid length. [ 813.620132][ T6662] __nla_validate_parse: 6 callbacks suppressed [ 813.620153][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7711'. [ 813.747607][ T6666] syzkaller0: entered promiscuous mode [ 813.753126][ T6666] syzkaller0: entered allmulticast mode [ 813.784759][ T6673] netlink: 'syz.1.7714': attribute type 21 has an invalid length. [ 813.921037][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7716'. [ 813.982247][ T6681] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 814.016158][ T6681] syzkaller1: linktype set to 260 [ 814.207498][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7718'. [ 814.526274][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7719'. [ 814.564785][ T6702] hsr_slave_0: left promiscuous mode [ 814.578892][ T6702] hsr_slave_1: left promiscuous mode [ 814.741488][ T6722] netlink: 'syz.1.7725': attribute type 1 has an invalid length. [ 814.771896][ T6721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.839653][ T6722] 8021q: adding VLAN 0 to HW filter on device bond4 [ 815.088667][ T6746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7728'. [ 815.534248][ T6778] netlink: 'syz.3.7738': attribute type 1 has an invalid length. [ 815.567179][ T6778] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7738'. [ 815.580695][ T6747] udevd[6747]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 815.590489][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 815.614617][ T6778] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7738'. [ 815.623591][ T6778] netlink: 'syz.3.7738': attribute type 1 has an invalid length. [ 815.664885][ T6778] netlink: 634 bytes leftover after parsing attributes in process `syz.3.7738'. [ 816.296054][ T6810] netlink: 'syz.1.7745': attribute type 2 has an invalid length. [ 816.332649][ T6810] netlink: 1696 bytes leftover after parsing attributes in process `syz.1.7745'. [ 816.549269][ T6821] netlink: 'syz.0.7747': attribute type 10 has an invalid length. [ 816.994170][ T6841] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 817.022112][ T6848] netlink: 'syz.1.7755': attribute type 13 has an invalid length. [ 817.071440][ T6848] netlink: 'syz.1.7755': attribute type 17 has an invalid length. [ 817.228970][ T6848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.251056][ T6848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 818.069328][ T6887] syzkaller1: entered promiscuous mode [ 818.089509][ T6887] syzkaller1: entered allmulticast mode [ 818.403855][ T6903] lo speed is unknown, defaulting to 1000 [ 818.451447][ T6903] lo speed is unknown, defaulting to 1000 [ 818.484028][ T6903] lo speed is unknown, defaulting to 1000 [ 818.557775][ T6912] IPVS: stopping backup sync thread 4219 ... [ 818.568540][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.581696][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.619009][ T6912] Cannot find add_set index 2 as target [ 819.307897][ T6903] infiniband syz0: set active [ 819.312718][T30873] lo speed is unknown, defaulting to 1000 [ 819.324028][ T6903] infiniband syz0: added lo [ 819.345804][ T6948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7777'. [ 819.356987][ T6903] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 819.361249][ T6903] infiniband syz0: Couldn't open port 1 [ 819.430312][ T6903] RDS/IB: syz0: added [ 819.437489][ T6903] smc: adding ib device syz0 with port count 1 [ 819.454663][ T6903] smc: ib device syz0 port 1 has no pnetid [ 819.468637][T30873] lo speed is unknown, defaulting to 1000 [ 819.486004][ T6903] lo speed is unknown, defaulting to 1000 [ 820.417794][ T6903] lo speed is unknown, defaulting to 1000 [ 820.897434][ T7002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7787'. [ 821.142585][ T6903] lo speed is unknown, defaulting to 1000 [ 821.187809][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7792'. [ 821.289293][ T7015] team0: No ports can be present during mode change [ 821.387791][ T7019] ip6erspan1: entered allmulticast mode [ 821.408818][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7792'. [ 821.801729][ T6903] lo speed is unknown, defaulting to 1000 [ 821.817525][ T7035] x_tables: duplicate underflow at hook 2 [ 822.266389][ T7062] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 822.337906][ T7062] netlink: 'syz.4.7800': attribute type 13 has an invalid length. [ 822.624733][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 822.661638][ T6903] lo speed is unknown, defaulting to 1000 [ 822.814366][ T7086] xt_bpf: check failed: parse error [ 822.943688][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 822.952586][ T7090] netlink: 'syz.1.7807': attribute type 29 has an invalid length. [ 822.970180][ T7090] netlink: 'syz.1.7807': attribute type 29 has an invalid length. [ 823.200020][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7812'. [ 823.210874][ T7106] FAULT_INJECTION: forcing a failure. [ 823.210874][ T7106] name failslab, interval 1, probability 0, space 0, times 0 [ 823.247359][ T7106] CPU: 0 UID: 0 PID: 7106 Comm: syz.4.7813 Not tainted syzkaller #0 PREEMPT(full) [ 823.247408][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 823.247419][ T7106] Call Trace: [ 823.247428][ T7106] [ 823.247436][ T7106] dump_stack_lvl+0xe8/0x150 [ 823.247463][ T7106] should_fail_ex+0x412/0x560 [ 823.247491][ T7106] should_failslab+0xa8/0x100 [ 823.247539][ T7106] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 823.247561][ T7106] ? __alloc_skb+0x186/0x7d0 [ 823.247579][ T7106] ? __alloc_skb+0x1d0/0x7d0 [ 823.247593][ T7106] ? __local_bh_enable_ip+0xd0/0x130 [ 823.247615][ T7106] __alloc_skb+0x1d0/0x7d0 [ 823.247635][ T7106] netlink_sendmsg+0x5d4/0xb40 [ 823.247660][ T7106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.247681][ T7106] ? aa_sock_msg_perm+0xf1/0x1b0 [ 823.247703][ T7106] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 823.247726][ T7106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.247744][ T7106] ____sys_sendmsg+0xa68/0xad0 [ 823.247765][ T7106] ? __might_fault+0xaf/0x130 [ 823.247790][ T7106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 823.247819][ T7106] ? import_iovec+0x73/0xa0 [ 823.247841][ T7106] ___sys_sendmsg+0x2a5/0x360 [ 823.247861][ T7106] ? __lock_acquire+0x6b5/0x2cf0 [ 823.247884][ T7106] ? __pfx____sys_sendmsg+0x10/0x10 [ 823.247937][ T7106] ? __fget_files+0x2a/0x420 [ 823.247954][ T7106] ? __fget_files+0x3a0/0x420 [ 823.247981][ T7106] __x64_sys_sendmsg+0x1bd/0x2a0 [ 823.248004][ T7106] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 823.248033][ T7106] ? __pfx_ksys_write+0x10/0x10 [ 823.248064][ T7106] do_syscall_64+0x14d/0xf80 [ 823.248085][ T7106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.248102][ T7106] ? trace_irq_disable+0x37/0x100 [ 823.248121][ T7106] ? clear_bhb_loop+0x40/0x90 [ 823.248142][ T7106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.248160][ T7106] RIP: 0033:0x7f0e9b39c629 [ 823.248177][ T7106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.248192][ T7106] RSP: 002b:00007f0e995f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.248211][ T7106] RAX: ffffffffffffffda RBX: 00007f0e9b615fa0 RCX: 00007f0e9b39c629 [ 823.248225][ T7106] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000006 [ 823.248237][ T7106] RBP: 00007f0e995f6090 R08: 0000000000000000 R09: 0000000000000000 [ 823.248248][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.248259][ T7106] R13: 00007f0e9b616038 R14: 00007f0e9b615fa0 R15: 00007ffd39f1f578 [ 823.248288][ T7106] [ 823.623940][ T6903] lo speed is unknown, defaulting to 1000 [ 823.626252][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7812'. [ 823.648467][ T7127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7817'. [ 823.781081][ T7114] wg1 speed is unknown, defaulting to 1000 [ 824.141834][ T7145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 824.378308][ T7145] bond8: Removing last arp target with arp_interval on [ 824.488275][ T7153] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7821'. [ 824.631062][ T6903] lo speed is unknown, defaulting to 1000 [ 824.639175][ T7158] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7822'. [ 824.956380][ T7176] ip6gre0: Caught tx_queue_len zero misconfig [ 824.985005][ T7176] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 825.055756][ T7172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 825.239652][ T7185] geneve2: entered promiscuous mode [ 825.321998][ T6903] lo speed is unknown, defaulting to 1000 [ 825.529433][ T7200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 825.541468][ T7201] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7831'. [ 825.928469][ T6903] lo speed is unknown, defaulting to 1000 [ 825.943156][ T7220] netlink: 'syz.4.7835': attribute type 10 has an invalid length. [ 825.962585][ T7220] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7835'. [ 825.997835][ T7221] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7835'. [ 826.020278][ T7220] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7835'. [ 826.592408][ T6903] lo speed is unknown, defaulting to 1000 [ 827.215355][ T7283] pimreg: tun_chr_ioctl cmd 2147767520 [ 827.237171][ T6903] lo speed is unknown, defaulting to 1000 [ 827.350267][T20005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.371223][T20005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.852662][ T7324] netlink: 'syz.4.7863': attribute type 39 has an invalid length. [ 827.864727][ T7334] netlink: 'syz.4.7863': attribute type 39 has an invalid length. [ 828.711822][ T7345] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7867'. [ 829.099296][ T7361] bond8: Removing last arp target with arp_interval on [ 829.145312][ T7378] tipc: Enabling of bearer rejected, failed to enable media [ 829.153939][ T7384] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.7876'. [ 829.373516][ T7396] syzkaller0: entered promiscuous mode [ 829.389531][ T7396] syzkaller0: entered allmulticast mode [ 829.527289][ T7403] xt_bpf: check failed: parse error [ 829.645150][ T7412] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7883'. [ 830.113978][ T7444] netlink: 196 bytes leftover after parsing attributes in process `syz.2.7890'. [ 830.121770][ T7436] syzkaller0: entered promiscuous mode [ 830.149023][ T7436] syzkaller0: entered allmulticast mode [ 830.297449][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 830.544826][ T7459] xt_socket: unknown flags 0x50 [ 831.123110][ T7483] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7898'. [ 831.141545][ T7483] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.7898'. [ 832.221852][ T7440] tipc: Enabled bearer , priority 0 [ 832.229244][ T7447] syzkaller0: entered promiscuous mode [ 832.234856][ T7447] syzkaller0: entered allmulticast mode [ 832.247330][ T7454] tipc: Resetting bearer [ 832.282546][ T7438] tipc: Resetting bearer [ 832.346108][ T7438] tipc: Disabling bearer [ 832.511105][ T7501] : entered promiscuous mode [ 832.610955][ T7508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7905'. [ 832.644610][ T7508] nbd: must specify at least one socket [ 832.872379][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7910'. [ 833.488465][ T7559] xt_bpf: check failed: parse error [ 833.685210][ T7572] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7919'. [ 833.702405][ T7568] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7918'. [ 833.821986][ T7579] x_tables: duplicate underflow at hook 1 [ 833.903765][ T7587] GUP no longer grows the stack in syz.4.7924 (7587): 200000003000-20000000a000 (200000001000) [ 833.935734][ T7587] CPU: 1 UID: 0 PID: 7587 Comm: syz.4.7924 Not tainted syzkaller #0 PREEMPT(full) [ 833.935763][ T7587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 833.935776][ T7587] Call Trace: [ 833.935784][ T7587] [ 833.935793][ T7587] dump_stack_lvl+0xe8/0x150 [ 833.935822][ T7587] __get_user_pages+0x2453/0x29d0 [ 833.935866][ T7587] ? __gup_longterm_locked+0xc4e/0x1630 [ 833.935887][ T7587] ? down_read_killable+0x1bb/0x340 [ 833.935914][ T7587] ? try_get_folio+0xec/0x650 [ 833.935936][ T7587] __gup_longterm_locked+0xdcf/0x1630 [ 833.935977][ T7587] gup_fast_fallback+0x1d82/0x22e0 [ 833.936026][ T7587] ? __pfx_gup_fast_fallback+0x10/0x10 [ 833.936050][ T7587] ? is_valid_gup_args+0x11f/0x200 [ 833.936072][ T7587] ? get_user_pages_fast+0x4d/0xb0 [ 833.936094][ T7587] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 833.936118][ T7587] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 833.936144][ T7587] iov_iter_get_pages2+0x5e/0xa0 [ 833.936167][ T7587] __se_sys_vmsplice+0x7b3/0x1490 [ 833.936206][ T7587] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 833.936227][ T7587] ? __pfx_futex_wait+0x10/0x10 [ 833.936323][ T7587] do_syscall_64+0x14d/0xf80 [ 833.936347][ T7587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.936366][ T7587] ? trace_irq_disable+0x37/0x100 [ 833.936388][ T7587] ? clear_bhb_loop+0x40/0x90 [ 833.936411][ T7587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.936430][ T7587] RIP: 0033:0x7f0e9b39c629 [ 833.936448][ T7587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.936464][ T7587] RSP: 002b:00007f0e995f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 833.936487][ T7587] RAX: ffffffffffffffda RBX: 00007f0e9b615fa0 RCX: 00007f0e9b39c629 [ 833.936502][ T7587] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 833.936516][ T7587] RBP: 00007f0e9b432b39 R08: 0000000000000000 R09: 0000000000000000 [ 833.936529][ T7587] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 833.936541][ T7587] R13: 00007f0e9b616038 R14: 00007f0e9b615fa0 R15: 00007ffd39f1f578 [ 833.936571][ T7587] [ 834.161306][ T7588] wg1 speed is unknown, defaulting to 1000 [ 834.375216][ T7598] netlink: 'syz.0.7927': attribute type 11 has an invalid length. [ 834.433939][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7928'. [ 834.473664][ T7600] netlink: 'syz.3.7928': attribute type 1 has an invalid length. [ 834.500123][ T7609] xt_bpf: check failed: parse error [ 834.590065][ T7611] netlink: 'syz.0.7931': attribute type 3 has an invalid length. [ 834.760422][ T7624] sctp: [Deprecated]: syz.0.7935 (pid 7624) Use of int in max_burst socket option. [ 834.760422][ T7624] Use struct sctp_assoc_value instead [ 834.805024][ T7588] lo speed is unknown, defaulting to 1000 [ 834.907092][ T7633] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7936'. [ 835.244400][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7939'. [ 835.266915][ T7647] openvswitch: netlink: Flow actions attr not present in new flow. [ 835.512963][ T7663] xt_bpf: check failed: parse error [ 836.462313][ T7714] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7956'. [ 836.696232][ T7724] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7958'. [ 836.757988][ T7726] netdevsim netdevsim4: Direct firmware load for - [ 836.757988][ T7726] failed with error -2 [ 836.789714][ T7726] netdevsim netdevsim4: Falling back to sysfs fallback for: - [ 836.789714][ T7726] [ 837.575831][ T7768] veth0: entered promiscuous mode [ 837.582676][ T7767] veth0: left promiscuous mode [ 837.776291][ T7779] netlink: 'syz.3.7973': attribute type 1 has an invalid length. [ 837.802424][ T7779] netlink: 248 bytes leftover after parsing attributes in process `syz.3.7973'. [ 837.854354][ T7792] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 837.925815][ T7797] netlink: 'syz.4.7977': attribute type 2 has an invalid length. [ 838.058239][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7979'. [ 838.115767][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7979'. [ 838.302863][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7983'. [ 838.336804][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7983'. [ 838.360804][ T7824] netlink: 'syz.1.7983': attribute type 13 has an invalid length. [ 838.384575][ T7824] netlink: 'syz.1.7983': attribute type 11 has an invalid length. [ 838.691647][ T7846] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7989'. [ 838.829346][ T7855] openvswitch: netlink: Flow actions attr not present in new flow. [ 839.163661][ T7875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.255583][ C0] ------------[ cut here ]------------ [ 839.261529][ C0] ODEBUG: free active (active state 0) object: ffff88807b800490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 839.274493][ C0] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#0: syz.3.7998/7880 [ 839.285172][ C0] Modules linked in: [ 839.289515][ C0] CPU: 0 UID: 0 PID: 7880 Comm: syz.3.7998 Not tainted syzkaller #0 PREEMPT(full) [ 839.298881][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 839.308997][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 839.315409][ C0] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 839.335066][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 839.341163][ C0] RAX: ffffffff8a888d00 RBX: ffffffff9a4985a8 RCX: 0000000000000000 [ 839.349210][ C0] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 839.357223][ C0] RBP: ffffffff8bcf4a00 R08: ffff88807b800490 R09: ffffffff8bcf5d20 [ 839.365242][ C0] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff88807b800600 [ 839.373229][ C0] R13: ffffffff901b4570 R14: ffff88807b800000 R15: ffff88807b800490 [ 839.381255][ C0] FS: 00007f4069bac6c0(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 839.390242][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 839.396880][ C0] CR2: 0000200000001038 CR3: 0000000036b02000 CR4: 00000000003526f0 [ 839.404939][ C0] Call Trace: [ 839.408315][ C0] [ 839.411170][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 839.416872][ C0] kfree+0x13a/0x610 [ 839.420796][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 839.426058][ C0] rose_timer_expiry+0x4cb/0x600 [ 839.431015][ C0] ? call_timer_fn+0x178/0x5a0 [ 839.435832][ C0] call_timer_fn+0x192/0x5a0 [ 839.440438][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 839.445978][ C0] ? call_timer_fn+0xd4/0x5a0 [ 839.450669][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 839.455864][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 839.461082][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 839.466624][ C0] __run_timer_base+0x652/0x8b0 [ 839.471488][ C0] ? ktime_get+0x45/0x200 [ 839.475921][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 839.481315][ C0] ? sched_clock_cpu+0x74/0x440 [ 839.486246][ C0] run_timer_softirq+0xb7/0x170 [ 839.491113][ C0] handle_softirqs+0x22a/0x7c0 [ 839.495959][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 839.500751][ C0] __irq_exit_rcu+0x5f/0x150 [ 839.505411][ C0] irq_exit_rcu+0x9/0x30 [ 839.509669][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 839.515373][ C0] [ 839.518313][ C0] [ 839.521252][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 839.527283][ C0] RIP: 0010:skb_put+0x12a/0x210 [ 839.532147][ C0] Code: 00 00 00 45 8b 24 24 89 ef 44 89 e6 e8 6f ab 5c f8 44 39 e5 77 1f e8 a5 a9 5c f8 49 01 df 4c 89 f8 48 83 c4 10 5b 41 5c 41 5d <41> 5e 41 5f 5d c3 cc cc cc cc cc e8 86 a9 5c f8 4c 8b 7c 24 40 e8 [ 839.551837][ C0] RSP: 0018:ffffc9000efaf828 EFLAGS: 00000282 [ 839.557968][ C0] RAX: ffff88805ac1a0d6 RBX: ffff888057aecc18 RCX: 0000000000080000 [ 839.566025][ C0] RDX: ffffc9000c5e3000 RSI: 0000000000009d5c RDI: 0000000000009d5d [ 839.574009][ C0] RBP: 000000000000005a R08: ffff88805ccc90a7 R09: 1ffff1100b999214 [ 839.582054][ C0] R10: dffffc0000000000 R11: ffffed100b999215 R12: 0000000000000056 [ 839.590082][ C0] R13: ffff888057aecb40 R14: ffff888057aecb40 R15: ffff88805ac1a0d6 [ 839.598149][ C0] l2tp_ip_sendmsg+0x372/0x1620 [ 839.603023][ C0] ? count_memcg_event_mm+0x21/0x260 [ 839.608391][ C0] ____sys_sendmsg+0x894/0xad0 [ 839.613174][ C0] ? __might_fault+0xaf/0x130 [ 839.617938][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 839.623258][ C0] ? import_iovec+0x73/0xa0 [ 839.627849][ C0] ___sys_sendmsg+0x2a5/0x360 [ 839.632562][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 839.637844][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 839.642850][ C0] __sys_sendmmsg+0x27c/0x4e0 [ 839.647608][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 839.652826][ C0] ? do_futex+0x395/0x420 [ 839.657208][ C0] ? __sys_connect+0x39c/0x450 [ 839.662001][ C0] ? rcu_is_watching+0x15/0xb0 [ 839.666833][ C0] __x64_sys_sendmmsg+0xa0/0xc0 [ 839.671709][ C0] do_syscall_64+0x14d/0xf80 [ 839.676375][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.682456][ C0] ? trace_irq_disable+0x37/0x100 [ 839.687595][ C0] ? clear_bhb_loop+0x40/0x90 [ 839.692300][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.698268][ C0] RIP: 0033:0x7f4068d9c629 [ 839.702698][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.722373][ C0] RSP: 002b:00007f4069bac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 839.730839][ C0] RAX: ffffffffffffffda RBX: 00007f4069015fa0 RCX: 00007f4068d9c629 [ 839.738891][ C0] RDX: 00000000040000cf RSI: 0000200000000900 RDI: 0000000000000003 [ 839.746912][ C0] RBP: 00007f4068e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 839.754958][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.762939][ C0] R13: 00007f4069016038 R14: 00007f4069015fa0 R15: 00007fffdd4f0c78 [ 839.770994][ C0] [ 839.774041][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 839.781331][ C0] CPU: 0 UID: 0 PID: 7880 Comm: syz.3.7998 Not tainted syzkaller #0 PREEMPT(full) [ 839.790627][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 839.800696][ C0] Call Trace: [ 839.803988][ C0] [ 839.806836][ C0] vpanic+0x1e0/0x670 [ 839.810844][ C0] panic+0xc5/0xd0 [ 839.814620][ C0] ? __pfx_panic+0x10/0x10 [ 839.819067][ C0] __warn+0x315/0x4a0 [ 839.823068][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 839.828805][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 839.834526][ C0] __report_bug+0x29a/0x540 [ 839.839019][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 839.844821][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 839.850547][ C0] ? __pfx___report_bug+0x10/0x10 [ 839.855564][ C0] ? kfree+0x1c1/0x610 [ 839.859619][ C0] ? rose_timer_expiry+0x4c3/0x600 [ 839.864717][ C0] ? call_timer_fn+0x192/0x5a0 [ 839.869466][ C0] ? __run_timer_base+0x652/0x8b0 [ 839.874472][ C0] ? run_timer_softirq+0xb7/0x170 [ 839.879485][ C0] ? handle_softirqs+0x22a/0x7c0 [ 839.884408][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 839.889159][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 839.894952][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 839.901092][ C0] ? skb_put+0x12a/0x210 [ 839.905323][ C0] ? l2tp_ip_sendmsg+0x372/0x1620 [ 839.910337][ C0] ? ____sys_sendmsg+0x894/0xad0 [ 839.915265][ C0] report_bug_entry+0x19a/0x290 [ 839.920103][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 839.925809][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 839.931516][ C0] handle_bug+0xca/0x200 [ 839.935779][ C0] exc_invalid_op+0x1a/0x50 [ 839.940361][ C0] asm_exc_invalid_op+0x1a/0x20 [ 839.945194][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 839.951602][ C0] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 839.971283][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 839.977339][ C0] RAX: ffffffff8a888d00 RBX: ffffffff9a4985a8 RCX: 0000000000000000 [ 839.985298][ C0] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 839.993257][ C0] RBP: ffffffff8bcf4a00 R08: ffff88807b800490 R09: ffffffff8bcf5d20 [ 840.001216][ C0] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff88807b800600 [ 840.009174][ C0] R13: ffffffff901b4570 R14: ffff88807b800000 R15: ffff88807b800490 [ 840.017136][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 840.022500][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 840.028128][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 840.033757][ C0] kfree+0x13a/0x610 [ 840.037637][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 840.042741][ C0] rose_timer_expiry+0x4cb/0x600 [ 840.047671][ C0] ? call_timer_fn+0x178/0x5a0 [ 840.052509][ C0] call_timer_fn+0x192/0x5a0 [ 840.057086][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 840.062537][ C0] ? call_timer_fn+0xd4/0x5a0 [ 840.067199][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 840.072302][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 840.077486][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 840.082939][ C0] __run_timer_base+0x652/0x8b0 [ 840.087776][ C0] ? ktime_get+0x45/0x200 [ 840.092109][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 840.097475][ C0] ? sched_clock_cpu+0x74/0x440 [ 840.102316][ C0] run_timer_softirq+0xb7/0x170 [ 840.107150][ C0] handle_softirqs+0x22a/0x7c0 [ 840.111905][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 840.116661][ C0] __irq_exit_rcu+0x5f/0x150 [ 840.121238][ C0] irq_exit_rcu+0x9/0x30 [ 840.125465][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 840.131104][ C0] [ 840.134107][ C0] [ 840.137025][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 840.143001][ C0] RIP: 0010:skb_put+0x12a/0x210 [ 840.147853][ C0] Code: 00 00 00 45 8b 24 24 89 ef 44 89 e6 e8 6f ab 5c f8 44 39 e5 77 1f e8 a5 a9 5c f8 49 01 df 4c 89 f8 48 83 c4 10 5b 41 5c 41 5d <41> 5e 41 5f 5d c3 cc cc cc cc cc e8 86 a9 5c f8 4c 8b 7c 24 40 e8 [ 840.167449][ C0] RSP: 0018:ffffc9000efaf828 EFLAGS: 00000282 [ 840.173509][ C0] RAX: ffff88805ac1a0d6 RBX: ffff888057aecc18 RCX: 0000000000080000 [ 840.181465][ C0] RDX: ffffc9000c5e3000 RSI: 0000000000009d5c RDI: 0000000000009d5d [ 840.189454][ C0] RBP: 000000000000005a R08: ffff88805ccc90a7 R09: 1ffff1100b999214 [ 840.197411][ C0] R10: dffffc0000000000 R11: ffffed100b999215 R12: 0000000000000056 [ 840.205367][ C0] R13: ffff888057aecb40 R14: ffff888057aecb40 R15: ffff88805ac1a0d6 [ 840.213339][ C0] l2tp_ip_sendmsg+0x372/0x1620 [ 840.218182][ C0] ? count_memcg_event_mm+0x21/0x260 [ 840.223462][ C0] ____sys_sendmsg+0x894/0xad0 [ 840.228214][ C0] ? __might_fault+0xaf/0x130 [ 840.232883][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 840.238164][ C0] ? import_iovec+0x73/0xa0 [ 840.242661][ C0] ___sys_sendmsg+0x2a5/0x360 [ 840.247328][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.252511][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 840.257469][ C0] __sys_sendmmsg+0x27c/0x4e0 [ 840.262140][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 840.267322][ C0] ? do_futex+0x395/0x420 [ 840.271643][ C0] ? __sys_connect+0x39c/0x450 [ 840.276403][ C0] ? rcu_is_watching+0x15/0xb0 [ 840.281156][ C0] __x64_sys_sendmmsg+0xa0/0xc0 [ 840.285997][ C0] do_syscall_64+0x14d/0xf80 [ 840.290575][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.296623][ C0] ? trace_irq_disable+0x37/0x100 [ 840.301633][ C0] ? clear_bhb_loop+0x40/0x90 [ 840.306298][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.312172][ C0] RIP: 0033:0x7f4068d9c629 [ 840.316575][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.336168][ C0] RSP: 002b:00007f4069bac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 840.344572][ C0] RAX: ffffffffffffffda RBX: 00007f4069015fa0 RCX: 00007f4068d9c629 [ 840.352529][ C0] RDX: 00000000040000cf RSI: 0000200000000900 RDI: 0000000000000003 [ 840.360487][ C0] RBP: 00007f4068e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 840.368455][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.376428][ C0] R13: 00007f4069016038 R14: 00007f4069015fa0 R15: 00007fffdd4f0c78 [ 840.384416][ C0] [ 840.387582][ C0] Kernel Offset: disabled [ 840.391889][ C0] Rebooting in 86400 seconds..