last executing test programs: 5.390945569s ago: executing program 4 (id=4162): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0xa) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000340)={0x0, 0x1000, "ec4f9c18eda2496eab4845f32e4f838e1b99f65423e900c97c3a816f877445d6e48a59f97bd9b0d2f97cb323b7290d7b80d545d3c454535f3d429f16a6bf21a7dc5a26195fe4091e5f8bbc6721de87e597c6fbd64c9fe770def6567b472f537f8e42a6d88869159ab901e30440f1b07592031ec1492740373f5162f8a223bbda238ded51d6dcbc2152c92841ce6d4c2966d2e321d32fb15dd81ba22ffc34ebf96e77370d6af8c8359a0baaceb0e0553725c06781596848147c00083e7e2c97c57e12c316a47e0b6a66c01252e92a76f87532b305409d04d1bf080a4c221b099b2cc2b7e105dae8ab71d2013cdcb561bdae00eae5ee54987dad432bab787771aae82e35b352570dd0c092e737d9a7e3242e73bf33e405496fd1885b6cfc55dc670713e68da4d12dbcaa1fa95cecc4ac7d70f8411cbb0d5a2908b90ac67fbc6bd497cdc25c4374e798b74f78cb1f6646771a23aa07afcfa08a7f63440c1a9f93552ed488ff370ccae010053bf5c5a4856c38617963d5f7bf062359a5edd05cf9a0f750a290a73999dc09947050b6c337e7b489d9e5c5c88243843869d471982cbf749dcd1908b3c0eb01f5403b6337d6fbd501c1f167d8c7b6a853fd8178e0410b0f7accd2bb141a6f67b79086817927bfa9c2acfae543a4b09214063a22cf7e9881ce3d751c167462571ccf9f9f1ae01b9fa3975353ade4bc9da449978286a9d2ba366a650c61ed513f3111f9f726ac151566ad187939b50e93b458d0f17660b6244515f729ba5e62c22ac7f3fbc01233b369dddfbcf52ba0d19fd071ffdcafbccd173ec7aeeb132207b5a3c25e634bc3bedbe5603a90146436da278c894f9a33c6b73b98a9f93e4cd3c556735c9e2dafef2529abe838d6471a9174c26a0b7b6af7925af43d85c9b882d77d5d17ddd77a753c2467e4fa99d71ea9aa170fd76b1442dba239cacee6e2ce41a08bb2f97ec386707319b9ef239ee25770886ab7b7653d7bd9495a7c7381b78b583e732955d40e2d3b15f9fc4c59c0c9af32a93d544a4c971382d7a265f679ba55d4a86ff8e46a65f010a5cd734d7ef94bcbd48b144f93d7b1024c1be27ec84773f978d8bece9322b7c4ce5576695147708f268eeb2a28d97c519685a31ccea60742fa686fd5e9d84b55952e8b1e6bcd76e90f045c3ff56b4be2baa4a09c73d2dcac27609a5dbdb7fc2d1c4768c16632601c39d00d33f2f38f37b74860d5f61e1201336c74c9a686ea209df3680fd42e3152c9390635c3d6b2cd7d15f48166c4ee61871688eb6338ae160197aed2728d9efc1a82b16f47389867dccb9350269674ca7d564f8638ede252086a596646124eba2b464fac980e6fab2584d033a41d4d362cf024efc6b6deaf411a8397da5d79299a6cc94d24b1bde34f93d956ee301a66f6e12408d3267cd84a5ae5ea2fe38fc76cd52e6d82377ef8c365b97542be34af03aa86e95054c919da14d18bd2c5c9ebd9b9e3cd485ff573d9e9c4dd21e1cef1094d4d94edd4d462943a363531d4e129117900f0a4264d676c0991e23b3a6c1604ef20fce38dbf9e8f9e613d41bc6a5e33d0335494271d098f0998a8f2772c5842e5e5239a9f0c09706d56f48a4fef04789423980fbc7d14dbfc552b3a9b222d12dc6cba9fa0b66ec3a8b6c5213635ed3e37d25602a2005d0115bab687154ffd5f6545704b2d98d2f8f130ca2b4e22fe191889153d74858c4b47b72c2b9c86aa5858f53fd1c2ba57e3fccbeac419e0b741a75b1b8221ab1b350bd2066e58ba900671e73e894819a2dee86af7ff98472a3d61f667e3765f46a7313db32bcf6e41c1eb98b4ddf65038e8e7049bccb3469f66ba0fc4642a9d24964d9589172b033d142f8ef1fb8475ef70254284a7d114782e5d989a2b0056ab05fa31aff086a88a980a5e6a569537f234e05610dc870541a1183fb3d3948f0bb9721c2985b4b6e236f19fc6764cecec5e0573e9f0630753e62d100efc16f0a28e138a259b9191ea6ce7690c715a121343661bc0f9b18531326f1b6225ea82701363452998fde35d4ed8948f0effcf1da46ad720e9e83288cd6d983764da64501b59c627e93d4f566b8de2309c2895237fb4578b5b5def4fe35f8eb9158490376dd77d32aeb27a67ceca93be543037adb3e4dd44930d54d413b8e12f7721b0f56e7139918e7362c5818ce72e54c6c868b1019883c6798a9988109731c34da176bcb81aa9b91ae973908aaad67b43dadf3e1ae470e691549daadd7cb2a2b967c482497b30b5c2370a5a53666cc0a8d8a106ebe461927f4e155fc778e1a2d58dfb58ee5599ce113609eb28018f079cae6a208afdefee4fa0909c1abfe7256bbfc5d522e394cbbe5410a134c2fde2d07985ddc449bbf97cbaa2646cd80e32bec17e1cd54956fa66c78921526bfeefe488110f74a187e6025b172d812c29b72c085e273d13c9971540746eb39032d770e3d4bd724e5176d841c8ea8e26f1ec1a3d7020d5df92277e8b022b50192d59cbf253e0249d9e68e4a0b99ea1209660558e39c36d9a645ae20ab43959292c5c0ff4a8e79e3c64dfb1727cde0ba225a2d95313b0682ec3204c24e3f27d4f69f37ea4857387a3dfc299d22b1beba62cf7265e0fea112053c8a0225b0f911c06fabb5b45aded417bc9fded756c50ba4ae220ef80d3449e0f3101c10f00f87b56d7f20d76e25c8a224c15b09cc3fbec66baa5c144b8b513151af28cb4c02a0bba6b9b5a2feb18a78a65e037836e39ceeefe397c7e800f743941a20653adc2d72ea36ab1f65e73e525dd00a769a160053e937ff042842b9e263c9de49209cc47a375a31866649a27032c9f6927a27fc18c49c81272e84797e9e208c2adaf549a974bfe2d80d63b95d943acafbd7147b23e17dc3c06b6264d359c4c41ee9133302f95307233a49a8e834d8c6bd821d2918d06c15f1001aec625a22e07dd0ac03b3f4d37fdd3c807f489210f9c0842803665ed84b6125df0b952923d00a0f6afa9fa5d2fd411f3c756b4611c753513f0c09328aab1c9b7e67ecfef2bc26e01547f0e10aa88a0816bc76589bb9b492098293fa37969c92efc05433c368940276ed267a99484ff5e9d25faa66e9036923ddcae74d35fdd7967495d4d9cea91d6d5a68f96d7db826a647007b990b8651a25a47904316509e4b30cb43714099391a3f00ddb41ea10cd821b8d75dc2d81acc8b46d0f3568ed89472ff2c181af0a5c647ca45dc34eef37310391669daa271a8763cd560c7d4a552092903f0a35d10fdc45a223a0ed4b7b58ad3437f8646f6fbe5ce85b9d8f9a71b76425998e01da8bb10568feea951d824fff3cfee4f7f26b30b127598ba71da8a7991c08ac12c8585bad9031e0d79736fa8f223632f69f4117450a4fec68977f8d2cb0976bd0ae8f3d1c1da31c539868f34b5e8061a8a179a47922e864be3809af2fe7b2ad9f8ec770011dbd47fedc51d2dcc8dc0f62a52ccd9bc98e08a46e117ff1ee9ac9c9a0c8ae43d76acf190dcbbae2125a3a1157e2911f88af8557aec60873a1087aa0b95d967b7b6c11a747666ed659cae7b0cd8e7d09abb29d85a2c5e197357f0290eeabb88320086a64540631d295d2f8041e432b527addd942cefeab6b44336df158eaf1b606370702dbbd3a466f91e674d731151bd82113e27277197ee9d11c8a6d3cb761d28c7404f33598ba91c502b5a3594d3e4f30105c7e651939e144c192a64706c8fc26870b7e583e81dcc8b76a830f0b9ac56c6ee68ebd832f2b6f782087d27246db3ac21f0c320d11793d0243f28120cb23de032c54462e19ed8d883eb261b4e3c759e637863ffd3951f74fb5e10ffed6eea173595bcd0a246e05ddb05854d5c7f9f8621a97366733520a0ffedd9088426b811b99d1f34989d13e1da813ab61a030333826d81a8e6efc5da4c4c15187d51ef4d5dad6446cb1138f5328d83c60e5b340369ce440ebdb3ea31038222b8866f7f36848debb4f8e1f32bd8adbf3eabae951b95cac326fb324d5ecd30b7d8e6aba389c11e78fcaee7d849b79057b2222f61a0c23b0f492a7f4c5ff9e3735f0257107f5628e3a648b7c12750c1107d6f19b137f0094af68aa9f7fefe8ac2eaad41f09a3d1619eeacfc0e7fe89795f55adbd655ab962e66ab86723d3e88f462f5ba279c95c91c39633aa083fddcfa38788c90d7421afa4456b17d2847baae312dc3d520103df2ed91a41fe09170e3dbc8e07ce790b8f555d2d5ba0fc7cf16f9ae017e561fa99256218cabedbbe8d1aada6e588d4b402c53fa80a32e6be22b825838894f2702f884a7620aafd328b3152a59266f2b22ca820348e22f1f954a5d72a73bbe4a5ad6331d976076cb000d06e5fd0c70d7513989d61e85a44156c6c13726a6ea96723b5a611bb9f75a531a1f809d6cce0e478556524b9643569088384cdd4939fafe9918bc826f656ed49f0b9102edb6c4968bf0cfa5d751793503d5a51cf75554dff401aadde0c7047d29de5b10b260b7f8f9be45a61a65bd6ba8f7b2dcfd048cc317b65548a84ae402447a802e7167dbd91297e28f8adbde2361ce2d7b9da6af287c9dd27b0d8642ac2b0ab0f02c45e805c1eafb6e2f9688c2719d782fa75b507c81385899dd4c0844f64b5751ad9056e2da637dc55cd02cd40ade5d184e9b529fa31de2c3593709820d69ceddd6ecb79b02dc29b6d6f5fdf418907414706c04e8036cd8e3a6bd24a4d2a6dd023d6d57bdc159784e485064a408913dae1ec61de695d226e9f060358c1ce0c43a6a2958281b123a26f5f6336f7b97717feaca7b628e40779b40c8d0da56868380d0b3084efd46cca6b372f7819d156b00496234a04b74d2c2c1bfff2873af843a388d1027f6ff33e83cbe07cc560089fe9a838f20e598a62defc206151ddb17147dbf3f9c0c4235a1a8a22e676156c1909dc790bf7f6b4fa3a6db9cfea0c0e7dea39dafea2f0737da79fc111596c84ca18a695bf1e46ed709ee182e1ec7cc695e8552f17ee33ccedac70bc50ca7fbf58eee4359631c4d9e1e495aad171c836aedff90a64ce409cf6ffb90e1a7b33b3d940df72aba88947049977876e1cfe180f0fc01150a3dd64282e36e8c4b9e80a84b584d06fa13f2d6142c0449364ee30f863b5a063a3a8052ca185c52510e65295d79812c50bcc28444d6c92ef684a5e0a7df05ed35f4819969ba505e1b27c93dbf3f2b1dee721aee2d1d8e7304987302778110c37e2a119368670306c5f9aad62b24cf0f4b72580aedef871111ebe6adf6cca8cb048747e43c6136628e4d6ab8605e78add8a4c8c4a5170776cd62f259af57625e1ca04f0126f52000a0c445ddef24086da3fbc9d528a17e793af3e1e90f12425245b03a14f16f9b73d7067a9966531216193538856715bb1e0977281a76f6ca1c7bfb0ecd28ea277e0ee549ff08849eb912dac684dce63e3d1cb2742b69d9f5fceca58402afe0104ae87f4801385c4c7da64296602fceeba38296e5d255ebbf2fe15d81c832f458e85414abfb4e118df9b9582d53ac0121ee5fcacd42f04a311c3f3cd6796b4ac4bd378708ba5113d3fde0a2cd654026ef0530b204db6b1c96e8df37fa59268d82228ba5c621113d9f075940410b83d89c8f13a6cdd530547ce72a6dbc8f00e412f68ca95d5688b1381b49450ee325053210b914c0eb991356b7ab1f716f88180e8903d2de02a3118c12a9918301c2e6f45884504870067c442064932fb201e6a94adf4b7de08382917347ee665804b375b091b22d9f171592ae225b6ada2e0944228f6048b8b83"}, &(0x7f0000001380)=0x1008) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x28, 0x0, 0x10007, 0x40b, r1}, 0x8) sendto$inet6(r0, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) 5.248497844s ago: executing program 4 (id=4163): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000002060108000000000000000001000004050005000100000013000300686173683a6e65742c6966696365000005000500020000000500050003000000"], 0x40}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000400000014000500fc0000000000000000000000000000010800020005000000070006"], 0x44}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0x5}, {0xffff, 0xb}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x54815}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000b40)={r2, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="2e9b5b00ace03dd65193dfb6c5619a3d86dd6067060000140654034d069cdb99b4dcf74b5c85cd6db0c10000000000000000", 0x32}, {&(0x7f0000000100)="0400e4eda7f6c173b552572f13f823c1", 0x10}, {&(0x7f0000002480)="37bcb3983785779df7392b7dca", 0xd}], 0x3) (async) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="2e9b5b00ace03dd65193dfb6c5619a3d86dd6067060000140654034d069cdb99b4dcf74b5c85cd6db0c10000000000000000", 0x32}, {&(0x7f0000000100)="0400e4eda7f6c173b552572f13f823c1", 0x10}, {&(0x7f0000002480)="37bcb3983785779df7392b7dca", 0xd}], 0x3) 4.472300897s ago: executing program 4 (id=4172): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001800110101000000000000000a3f0000000300080000000008000600ffffff7f080017"], 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) socket(0x10, 0x3, 0x800000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070600000000000000f3bdd36345d1cd6908002f00050000000a0001007770166e30000000000000000000"], 0x38}}, 0x20048840) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000480), 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x0, 0x0, 0xffffffff, 0x0, 0x210, 0x570, 0x570, 0xffffffff, 0x570, 0x570, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x5, @ipv4=@multicast1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @icmp_id=0x64, @port=0x4e22}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x34}, @dev={0xfe, 0x80, '\x00', 0x39}, [0xff000000, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00], 'bond_slave_0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0xc65ec123d57cf83, 0x7, 0x8, 0x12}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x11, @ipv4=@multicast1, @ipv4=@private=0xa010101, @port=0x4e20, @gre_key=0xabfc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff000000, 0xffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'nicvf0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x3c, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @icmp_id=0x64, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv4=@rand_addr=0x64010101, @ipv6=@mcast1, @port=0x4e21, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x26}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) socket(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000000c0)={r8, 0x7fff, 0x10, 0xb8, 0x2, 0xfffffffe}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040ead008001d00c3"], 0x28}}, 0x0) 3.481855421s ago: executing program 0 (id=4176): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff00000000711089000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xe, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000000800000000000e821a434379482bb9b84d1bd20b5bb372d", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000100"/28], 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000004c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x8, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="58000000106fae156ebe0000000000228497f47517c5f5f308fd37fac6ce10c330ecec", @ANYRES32=0x0, @ANYBLOB="00800000180a04002400128009000100766c616e000000001400028006000100040000000600050088a8000008000500", @ANYRES32=r12, @ANYBLOB="0a000200bbbbbbbbbbbb0000"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33) r13 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r14 = socket$inet6(0xa, 0x2, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xa}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x44001) bind$inet6(r14, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r15 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r14, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="414458d79d7f"}) write$tun(r13, &(0x7f0000000200)={@void, @void, @eth={@random="7de102ec8729", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x18, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xfffffffc, 0x5}}}}}}}}, 0x52) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0xffffffffffffffff, 0xff, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x13, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0xa, 0x9, 0x9, 0x50, 0x4}, @generic={0xca, 0x3, 0x9, 0x0, 0xf}, @alu={0x4, 0x1, 0x0, 0x6, 0x9, 0x40, 0x10}, @jmp={0x5, 0x0, 0x2, 0xb, 0xa, 0x6, 0x10}]}, &(0x7f0000000180)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x1a, r2, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x1, 0x8000, 0x13eb}, 0x10, 0x2b669, 0xffffffffffffffff, 0x7, &(0x7f0000000700)=[r3, r4, r5, r6, r7, r8, r9, r16], &(0x7f0000000740)=[{0x2, 0x3, 0x1, 0x6}, {0x4, 0x1, 0x9, 0x3}, {0x5, 0x3, 0x10, 0xc}, {0x3, 0x1, 0xa, 0x3}, {0x4, 0x1, 0x10, 0x8}, {0x1, 0x4, 0x9, 0x8}, {0x0, 0x2, 0xe, 0xb}], 0x10, 0xd}, 0x94) 3.361240474s ago: executing program 1 (id=4179): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r0, &(0x7f00000006c0)="600000000014334000e4331e26bff073b302d6b8b34123ca000000000000000000000b00000001000013099acf00000000000000", 0x34, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 3.160818126s ago: executing program 2 (id=4181): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000005000000020000000700000042"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x50) 3.143749083s ago: executing program 2 (id=4182): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) (async, rerun: 64) socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) r0 = socket$can_raw(0x1d, 0x3, 0x1) getpeername$packet(0xffffffffffffffff, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001180)=0x14) bind$can_raw(r0, &(0x7f00000011c0)={0x1d, r1}, 0x10) (async, rerun: 64) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x1}, {0x2, 0x1}}, {{0x4, 0x1}, {0x1}}, {{0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x3}, {0x0, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1}}], 0x40) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000013c0)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000001400)={0x1d, r2}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x80002, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) socket$netlink(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) 3.110457696s ago: executing program 1 (id=4183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000080)=[{r2, 0x2000}], 0x1, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x3, &(0x7f0000000040)="4fa4a999db01f70ed92c2960fc71abd13093e94f3143e6224073a1e2de183d755378cf0d34b36df519d62a19bae9f90912") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000301010200e3e000000000000200000808000840"], 0x34}, 0x1, 0x0, 0x0, 0x2000}, 0x840) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0x3, 0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x5}, 0x8) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000100)) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2e) 2.936594315s ago: executing program 3 (id=4184): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb200400f100000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xfe5, &(0x7f0000001840)=""/4069}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x52, 0x1, 0xfffffffc, 0x0, {0xa}}, 0x14}}, 0xc804) 2.748190059s ago: executing program 2 (id=4185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0500560008004400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000040000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c757eb2278a273c1b80029442911892704", @ANYRESOCT], 0xfdef) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000040)='/dev/net/tun\x00', 0x8000, &(0x7f00000000c0)={@_ha_fsid={[0x3cf, 0x8]}, {0x1, 0x5, 0x6, 0xa}}, 0x81, &(0x7f0000000100)={@_ha_fsid}, &(0x7f00000001c0)=0x6}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xc}, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4440}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000000)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 2.538472184s ago: executing program 0 (id=4186): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000008300)={0x0, 0x0, &(0x7f00000082c0)={&(0x7f0000001300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xfff3, 0x8}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x26000084) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000100039040200943d5ce0fb6e3d65f608e0e4355d6100"/35, @ANYRES32=r1, @ANYBLOB="01980000200800001800128008000100677265000c00028008000700ac141429"], 0x38}}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x439, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0xfc}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200040d0}, 0x4004000) 2.404619886s ago: executing program 3 (id=4187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x5, 0x9}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4004) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) 2.159465064s ago: executing program 0 (id=4188): unshare(0x22020400) pselect6(0xfe41, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000008, 0x8c4b815a5465c2b2, r0, 0x3000) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081780000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103b00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afc0513466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea01d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a07f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a126a1bdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0d5d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f10bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d00b07862c4fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52c094016406cdd32abf77fea373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515dca8811922929e08538fab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f57cbc05cd897f40693ec427ea71578130cde48de3b4dda0c7b615b57ccd4f8ac729a80f891d91a89d967948b9d95b1f22480ab48969e86b854a8c17f3e264ce11f9f63552364e759eec94572f2f7b0e2f293573d0b80709815f4344f908c00"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.04186904s ago: executing program 3 (id=4189): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0xfff3, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @empty, 0x9}}}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x6, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0xe0) 1.900601414s ago: executing program 1 (id=4190): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000014011a80400002803c00018022002100"], 0x134}}, 0x0) (rerun: 32) 1.89642664s ago: executing program 4 (id=4191): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000040)={r1, 0x5, 0x11, "a05cd8666767d8c90d05363b646f5ffd72"}, 0x19) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x40080) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xe, 0x4}, {0xc, 0xfff3}, {0xfff1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv4_delrule={0x1c, 0x21, 0x100, 0x70bd2b, 0x25dfdbfc, {0x2, 0xa0, 0x14, 0x7, 0x2, 0x0, 0x0, 0x0, 0x14}}, 0x1c}, 0x1, 0x0, 0x0, 0x80050}, 0x20000000) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x44}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd"], 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x20, 0x0, 0xfffff034}, {0x50, 0x1, 0x0, 0x80000000}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x4000006}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={r6, 0xd8, "3d0cf54f47f359490b5523be180b3ea2140b08bad61175dfa80d01cab3b7fa8be827383c554bdf91d3818dc90dcc9511d777ccfa2873b7ddb950141584a18add016391447ff9d85b015ca6a5644ee80759ef8de910ab86d2e60484fac050c5cbf8d08555bce29b3c293f33c8557b9b2ea7df2ce7b6a5702bfb27d4a5159b4da627c0c34a450f462ce938a246880ae2f95709f466607c7a3a010c03d77b9268ec1910081b1eb663517f2c4db2177190982667cc834afd3e8fb9ae9994af5cf5b41fa5b63506fbbec8d3d7c58e830f7d2f823be6433f652779"}, &(0x7f0000000180)=0xe0) 1.895420393s ago: executing program 0 (id=4192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000005000000020000000700000042"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x50) 1.7119958s ago: executing program 0 (id=4193): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r0, &(0x7f00000006c0)="600000000014334000e4331e26bff073b302d6b8b34123ca000000000000000000000c00000001000013099acf00000000000000", 0x34, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.557464802s ago: executing program 0 (id=4194): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000410007012dbd7000fedbdf25047c000014002d800d000980e59b06f6f04405821500000061160df4887707121fb78821264ecddad3c032eabfffd6386da75e4f82fd9d5aa1d478ae93a495a48f1daf603935200ea08322cd2893c8ec1422d99a43edf87c6502aa6dae056fa21448f8c0cf871475f8b74200bb17482bc068d64f389476a93b4dff6893c5a872b59c86bd75c81d756b40d5c115570b28cb71c3a76d378b8eeb7989be264c8ca1765bf2045f1d47b226a6a3a6f938fec57256535fda24cd9e79ab7aefa1812cbccb72f7debc49a046aa9ffbaa3a6f365606e06e539fa28116007120b80b8a07283b9136a604aee226d2eac3dc9ca5152b2f84004ca29b6fdbefac19e549ab3670e9023e3bf445d009"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x400, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x48, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2000000}, 0x10}, 0x94) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={0x0, 0x0, 0x28, 0x0, 0x1, 0x1}, 0x28) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r5, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20008050}, 0x40480d4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000540)=0x189d, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x80, 0x4) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x8, 0x0, 0x0, 0x5, 0xfff]}, &(0x7f0000000140)=0x54) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x14) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000004c0)={{0xffffffffffffffff, &(0x7f0000000080)='GPL\x00', 0x40000, &(0x7f00000001c0)={@_ha_fsid={[0x2, 0x6]}, {0x1, 0x8, 0x5, 0x9}}, 0x0, &(0x7f00000002c0), &(0x7f0000000440)=0x7}, {[0x6, 0xb, 0x8, 0x1]}, 0x8, 0x0, 0x0}) socket$alg(0x26, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x1d, 0x2, 0x6) unshare(0x600) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000060601080000000000000000010000050900020073797a3000000000050001"], 0x34}, 0x1, 0x0, 0x0, 0x140}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000, 0x0, 0x3ff, 0x4, 0x100000000, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)={0x1f, 0x4, 0x7, 0x0, 0x229c, 0x1, 0x800000000000004, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.30866612s ago: executing program 3 (id=4195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000080000000000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fc000000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x4, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="b026ea79fd4d039a217674f3adbf", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.27677286s ago: executing program 2 (id=4196): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x2, @mcast1, 0x1}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000000040)="1859d42a2b9c33ce", 0x8}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="bab709e51d275240a817aac1a407e6f19de4d4f683b123d3a0b7b70d2a88ecb03a3da41dceb3b170b14f5cd17b088392a881d7c2f8cf6f842f63ea89e466289389e3acc9128072de4f0bfb101de21e125009418375914bc84e6878bb655c1a45de09b23c944a459dce8ee81266157ac51e00af7728f4a464f720f734b1d8a4328088ed79025ac4f9f3e7535a9bc09501e487d893d7fdc72d47bf44746dcca3d23a1528a87af36dce7751df4877b5538a122aa9d250efc51a492add1e529ac62f15615cc900745c4bfcbe942e9511b6a8cdce300d08b6895e4f3bf9a0827bd756066c9906dbd87ae706ac404afef66cb466fe1932574d8ce3", 0xf8}, {&(0x7f0000001540)="3949f3051d44e9ce7792", 0xa}], 0x4, &(0x7f00000015c0)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @dstaddrv6={0x20, 0x84, 0x8, @empty}], 0x90, 0x20000040}, 0x48c0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x100, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x4040000) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32, @ANYBLOB="06001100259b"], 0x24}, 0x1, 0x0, 0x0, 0x40488d0}, 0x20040880) 1.008695761s ago: executing program 2 (id=4197): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000100000000000000008000000911167000000000095"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x80}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 940.451477ms ago: executing program 1 (id=4198): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) socket(0x200000000000011, 0x2, 0xff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004090) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00'}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001000010000000000fcfade734570b5aaa92500000000", @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x28}, 0x1, 0x0, 0x0, 0xd504ca060492460}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0x300, 0x70bd26, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x41) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="58000000020605000000000000000000070000050500040003000000140007800557ce0100010000000000e10015000000000008001240000000000500050002000000050001000600000015000300686173683a69702c706f72000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)=ANY=[@ANYBLOB="89c62ed7", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf250100000005000600020000000500050004000000080003000700000004000400"], 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r2, @ANYRES32=r1, @ANYBLOB="07300000090400000a000100aaaaaaaaaa1b0000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3daa000000000000711013000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x10, 0x7f}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="c6", 0x1}], 0x1}, 0x11) (async) ioctl$SIOCSIFHWADDR(r5, 0x8905, &(0x7f0000000340)={'syzkaller1\x00', @remote}) socket$l2tp6(0xa, 0x2, 0x73) socket$packet(0x11, 0x3, 0x300) 873.231234ms ago: executing program 4 (id=4199): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604, 0x4, 0x0, 0x1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) 836.648633ms ago: executing program 1 (id=4200): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0xffffff45) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r4 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f0000000200)={0x4, 0xe7, 0x59ba, 0x4, 0x29, 0x10, 0x8}) splice(r4, 0x0, r6, 0x0, 0xf3c, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) close(r7) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f00000000c0)=0x4, 0x4) read(r2, &(0x7f0000000680)=""/228, 0x12d) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e24, 0x3, @mcast1, 0x402}, 0x1c) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r9, 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x1}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x10) readv(r7, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/63, 0x3f}], 0x1) pipe(&(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x1c, &(0x7f00000002c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @ldst={0x3, 0x0, 0x4, 0x4, 0x7, 0xffffffffffffffe0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @alu={0x4, 0x0, 0x2, 0x4, 0x2, 0x18, 0x8}, @map_val={0x18, 0xb, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x18e7}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xc8}, @jmp={0x5, 0x0, 0xd, 0x5, 0x5, 0x30, 0xffffffffffffffff}], 0x0}, 0x94) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r8, 0x8040942d, &(0x7f0000000480)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r12}, 0x38) 668.573674ms ago: executing program 3 (id=4201): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 64) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events.local\x00', 0x75324cc7ada9, 0x0) (rerun: 64) 489.470328ms ago: executing program 2 (id=4202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f0000000740)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) sendfile(r6, r5, 0x0, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e24, 0x1, @private0, 0x20}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@rthdr={{0xb8, 0x29, 0x39, {0x6c, 0x14, 0x2, 0xb, 0x0, [@private0, @remote, @dev={0xfe, 0x80, '\x00', 0x36}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private0]}}}], 0xb8}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000000000", @ANYRES16=r4, @ANYBLOB="000129bd7000fcdbdf255100000008000300", @ANYRES32=r8, @ANYBLOB="0c00990004000000550000000a000600080211000001000005008a00030000000a000600080211000000000005008a0002000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000844}, 0x20040840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffa1, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 370.896773ms ago: executing program 3 (id=4203): syz_emit_ethernet(0xca, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000bc0000000000019078ac1e0001ac1414bb0c00907800000000480000000000000000110000e0000002ac1414aa01000dee0dd9de36ed4bcc5b4e23440c00030000000000000000890f0000004000ffffffffffffffff444c0001ac1e00010000000000000000000000000000000000000000ac1414aafffffffe7f000001000000000016000000000000ac1e000100000000ffffffff00000000ffffffff00000000441400"/202], 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='nv', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000340)={@rand_addr=' \x01\x00', 0x33, r4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbf", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0xec, 0x8, 0x2}, 0x50) socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf253a00000008000300", @ANYRES32=0x0, @ANYBLOB="5b9d0353cc70fd5fd7331f3ff74d966c8de75f1a16684e0679659b78ffe651f972d27a6d73d3bd5199b41f666ea77df74ea897dd288c03"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x5b05383a345356d) r9 = socket(0x1, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r9}, 0x20) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x14, 0x3c, 0x1, 0x70bd27, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r8, &(0x7f0000000380), 0x0}, 0x20) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00>', @ANYRES16=r12, @ANYBLOB="20002cbd7000fedbdf250300000008000700ffffffff080002000500000008000200070000000500010000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r5, 0xfffff000, 0x1b, 0x0, &(0x7f0000000380)="61df712bc88efed5ecc03234ad139064f57d9a689e722780b605a7", 0x0, 0x3, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 245.120164ms ago: executing program 1 (id=4204): r0 = socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010300000000000000000500000008000200", @ANYRES32=r5, @ANYBLOB="164e1c11953b808756616ad0bc8031"], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r6 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x48, &(0x7f0000000140)=0x9, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00000001c0)=0x40, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114700000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r7, @ANYRES32, @ANYRESHEX=r2], 0x38}}, 0x4000055) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001600ff03000000000000df2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r8) 0s ago: executing program 4 (id=4205): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r1) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f0000000600)=""/192, 0xc0}, {&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f0000001a40)=""/222, 0xde}, {&(0x7f0000002f40)=""/4018, 0xfb2}, {&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000280)=""/155, 0x9b}], 0x7}, 0x2}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="134cb3f600000000140012800b000100626174606413a33e20db2391bc0a760000040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x20000840) kernel console output (not intermixed with test programs): mode [ 650.181843][ T5628] Bluetooth: hci5: command tx timeout [ 650.211912][T17920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.275301][T17920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.449977][T17920] team0: Port device team_slave_0 added [ 650.486259][T17920] team0: Port device team_slave_1 added [ 650.576017][T18106] netlink: 'syz.3.2974': attribute type 6 has an invalid length. [ 650.652251][T18106] netlink: 'syz.3.2974': attribute type 6 has an invalid length. [ 650.662091][T17920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.694461][T17920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.799564][T17920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.858404][T17920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.885269][T17920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.945473][T17920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.058411][T18121] netlink: 'syz.3.2975': attribute type 30 has an invalid length. [ 651.058719][T18123] netlink: 'syz.3.2975': attribute type 30 has an invalid length. [ 651.067786][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 651.067829][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 651.150411][T17920] hsr_slave_0: entered promiscuous mode [ 651.157398][T17920] hsr_slave_1: entered promiscuous mode [ 651.616294][T18146] __nla_validate_parse: 8 callbacks suppressed [ 651.616315][T18146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2982'. [ 652.261122][ T5628] Bluetooth: hci5: command tx timeout [ 652.398440][T18183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2989'. [ 652.411049][T18184] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2988'. [ 652.445221][T17920] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.462316][T17920] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.473395][T17920] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 652.521481][T18184] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2988'. [ 652.724571][T18186] bond15: entered promiscuous mode [ 652.754726][T18186] bond15: entered allmulticast mode [ 652.964821][T17920] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.004200][T17920] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.040343][T17920] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 653.100407][T18207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2993'. [ 653.137942][T18213] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 653.174693][T18210] xt_hashlimit: size too large, truncated to 1048576 [ 653.298577][T17920] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.359651][T17920] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.397008][T17920] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 653.725114][T17920] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.762339][T17920] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.801153][T17920] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 654.733425][T18258] vxcan2: entered allmulticast mode [ 655.048977][T17920] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 655.084248][T17920] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 655.105871][T17920] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 655.177593][T17920] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 655.187168][T17920] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 655.236184][T17920] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 655.272050][T17920] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 655.330675][T17920] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 655.361957][T18297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3011'. [ 655.733675][T18313] Cannot find del_set index 4 as target [ 655.764108][T18313] syzkaller0: entered promiscuous mode [ 655.769775][T18313] syzkaller0: entered allmulticast mode [ 655.915466][T18320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3015'. [ 656.035109][T18333] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3018'. [ 656.045927][T17920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.191314][T17920] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.411893][T18344] kthread_run failed with err -4 [ 656.582613][T14749] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.589878][T14749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.784298][T18373] IPVS: set_ctl: invalid protocol: 0 172.30.0.4:20002 [ 656.804077][T18374] IPVS: set_ctl: invalid protocol: 0 172.30.0.4:20002 [ 656.821852][T18356] syzkaller0: entered promiscuous mode [ 656.827637][T18356] syzkaller0: entered allmulticast mode [ 656.885979][T18360] syzkaller1: entered promiscuous mode [ 656.909423][T18360] syzkaller1: entered allmulticast mode [ 656.938987][T14750] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.946241][T14750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.176837][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3026'. [ 659.780736][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 659.781424][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 659.969149][T18391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3028'. [ 659.993587][T18391] netlink: 'syz.1.3028': attribute type 2 has an invalid length. [ 660.583229][T18413] pimreg: entered allmulticast mode [ 660.974952][T18435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3034'. [ 661.009669][T18435] netlink: 356 bytes leftover after parsing attributes in process `syz.2.3034'. [ 661.047134][T18435] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3034'. [ 661.316120][T18436] syzkaller0: entered promiscuous mode [ 661.336643][T18436] syzkaller0: entered allmulticast mode [ 665.145339][T17920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.289802][T18496] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3042'. [ 665.472979][T18507] ipt_REJECT: ECHOREPLY no longer supported. [ 665.517311][T18510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3047'. [ 665.550062][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 665.569094][T18514] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3046'. [ 665.619006][T17920] veth0_vlan: entered promiscuous mode [ 665.697245][T17920] veth1_vlan: entered promiscuous mode [ 665.832400][T17920] veth0_macvtap: entered promiscuous mode [ 665.870741][T18517] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3048'. [ 665.912041][T18517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 665.948486][T17920] veth1_macvtap: entered promiscuous mode [ 665.967979][T18523] xt_hashlimit: max too large, truncated to 1048576 [ 665.988950][T18523] xt_hashlimit: overflow, try lower: 2/0 [ 666.048216][T17920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.097423][T17920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.217761][T14750] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.256152][T14750] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.302480][T14750] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.337969][T14750] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.455142][T18544] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3056'. [ 666.538744][T18544] netlink: 'syz.4.3056': attribute type 2 has an invalid length. [ 666.790916][ T8949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.828185][ T8949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.969569][T18565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3060'. [ 666.973124][T14749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.030876][T14749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.213676][T18565] netlink: 'syz.1.3060': attribute type 2 has an invalid length. [ 667.237394][T18561] syzkaller0: entered promiscuous mode [ 667.253158][T18561] syzkaller0: entered allmulticast mode [ 667.274899][T18561] tipc: Resetting bearer [ 667.288045][T18571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3059'. [ 667.349570][T18571] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3059'. [ 667.464899][T18586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3063'. [ 667.579293][T18587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3064'. [ 668.409148][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 668.423494][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 668.438032][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 668.455813][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 668.466907][ T5640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 669.347931][ T5622] bond0: (slave syz_tun): Releasing backup interface [ 669.512478][T18607] wlan0 speed is unknown, defaulting to 1000 [ 670.506115][ T5640] Bluetooth: hci4: command tx timeout [ 671.055415][T18600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 671.284890][T18664] __nla_validate_parse: 1 callbacks suppressed [ 671.284912][T18664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3077'. [ 671.337633][T18665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3077'. [ 671.367946][T18671] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3078'. [ 671.422475][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3078'. [ 672.582926][ T5640] Bluetooth: hci4: command tx timeout [ 673.074803][T18676] netlink: 'syz.4.3078': attribute type 4 has an invalid length. [ 673.384217][T18607] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.414605][T18607] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.443524][T18607] bridge_slave_0: entered allmulticast mode [ 673.482044][T18607] bridge_slave_0: entered promiscuous mode [ 673.529859][T18711] syzkaller0: entered promiscuous mode [ 673.566487][T18711] syzkaller0: entered allmulticast mode [ 673.611166][T18607] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.619066][T18607] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.652471][T18607] bridge_slave_1: entered allmulticast mode [ 673.692134][T18607] bridge_slave_1: entered promiscuous mode [ 673.845558][T18607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.978624][T18725] netlink: 'syz.4.3086': attribute type 2 has an invalid length. [ 673.998470][T18607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.249280][T18607] team0: Port device team_slave_0 added [ 674.299755][T18607] team0: Port device team_slave_1 added [ 674.479932][T18607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.518877][T18607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.591318][T18743] netlink: 'syz.3.3089': attribute type 1 has an invalid length. [ 674.633797][T18607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.660666][ T5640] Bluetooth: hci4: command tx timeout [ 674.778416][T18743] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 674.787723][T18607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.861754][T18607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.929738][T18607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.308649][T18607] hsr_slave_0: entered promiscuous mode [ 675.324563][T18607] hsr_slave_1: entered promiscuous mode [ 675.357054][T18607] debugfs: 'hsr0' already exists in 'hsr' [ 675.381560][T18607] Cannot create hsr debugfs directory [ 675.537992][T18790] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 675.560425][T18788] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 675.585425][T18788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3098'. [ 675.632508][T18793] IPVS: set_ctl: invalid protocol: 41 172.20.20.62:20001 [ 676.024299][T18800] can: request_module (can-proto-0) failed. [ 676.043406][T18806] can: request_module (can-proto-0) failed. [ 676.055997][T18810] 8021q: VLANs not supported on vcan0 [ 676.431331][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 676.608027][T18607] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 676.615659][T18833] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3109'. [ 676.643039][T18607] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 676.685953][T18607] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.731919][T18607] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 676.744294][ T5640] Bluetooth: hci4: command tx timeout [ 676.781894][T18841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3112'. [ 676.908344][T18837] syzkaller1: entered promiscuous mode [ 676.919905][T18837] syzkaller1: entered allmulticast mode [ 677.024018][T18607] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 677.058624][T18849] Cannot find add_set index 2 as target [ 677.069890][T18607] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 677.090733][T18607] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.107169][T18855] netlink: 'syz.0.3113': attribute type 61 has an invalid length. [ 677.121420][T18607] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 677.267587][T18858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3113'. [ 677.308185][T18858] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 677.354231][T18855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3113'. [ 677.459206][T18607] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 677.493476][T18607] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 677.524322][T18607] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.568213][T18607] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 677.693795][T18875] syzkaller0: entered promiscuous mode [ 677.699494][T18875] syzkaller0: entered allmulticast mode [ 677.782587][T18880] netlink: 412 bytes leftover after parsing attributes in process `syz.1.3120'. [ 677.801856][T18880] netlink: 125 bytes leftover after parsing attributes in process `syz.1.3120'. [ 677.942858][T18607] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 677.958610][T18607] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 677.974108][T18607] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.988693][T18607] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 678.547288][T18902] netlink: 179624 bytes leftover after parsing attributes in process `syz.0.3124'. [ 679.020910][T18607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 679.150557][T18607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 679.179559][T18607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 679.223917][T18607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 679.274962][T18607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 679.326796][T18607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 679.364614][T18607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 679.434825][T18607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 679.676374][T18953] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3135'. [ 679.919046][T18956] veth1_macvtap: left promiscuous mode [ 679.927532][T18956] veth0_macvtap: left promiscuous mode [ 679.964128][T18956] veth0_macvtap: entered promiscuous mode [ 679.972076][T18956] veth1_macvtap: entered promiscuous mode [ 680.026273][T18956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 680.081519][T18956] 8021q: adding VLAN 0 to HW filter on device bond2 [ 680.106511][T18956] 8021q: adding VLAN 0 to HW filter on device team1 [ 680.117250][T18956] 8021q: adding VLAN 0 to HW filter on device team2 [ 680.127327][T18956] 8021q: adding VLAN 0 to HW filter on device bond3 [ 680.144470][T18956] 8021q: adding VLAN 0 to HW filter on device bond4 [ 680.185568][T18956] 8021q: adding VLAN 0 to HW filter on device bond5 [ 680.218023][T18956] 8021q: adding VLAN 0 to HW filter on device bond6 [ 680.245879][T18956] geneve0: entered promiscuous mode [ 680.275359][T18956] 8021q: adding VLAN 0 to HW filter on device eth0 [ 680.294513][T18956] 8021q: adding VLAN 0 to HW filter on device eth1 [ 680.309205][T18956] 8021q: adding VLAN 0 to HW filter on device eth2 [ 680.318785][T18956] 8021q: adding VLAN 0 to HW filter on device eth3 [ 680.328653][T18956] tipc: Resetting bearer [ 680.426358][ T5284] veth0_macvtap: left promiscuous mode [ 680.519846][ T8970] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.536116][ T8970] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.564237][ T8970] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.590010][ T8970] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.739763][T14750] bond4: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 680.781139][T14750] bond4: (slave veth3): making interface the new active one [ 680.835353][T14750] bond4: active interface up! [ 680.850972][T14749] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 680.939742][T14749] bond9: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 681.066073][ T8125] bond7: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 681.114993][ T8125] bond7: (slave veth5): making interface the new active one [ 681.152580][ T8125] bond7: active interface up! [ 681.347309][T18607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.427319][T18991] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 681.461726][T18607] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.498046][ T8972] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.505315][ T8972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.584016][ T8972] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.591285][ T8972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.099720][T19018] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3149'. [ 682.139774][T19018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3149'. [ 682.367650][T19023] xfrm1: entered allmulticast mode [ 682.958317][T19049] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3156'. [ 683.005526][T19049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3156'. [ 683.317739][T19059] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.3159'. [ 683.346145][T19064] netlink: 'syz.1.3158': attribute type 23 has an invalid length. [ 683.388815][T19065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3158'. [ 683.451404][T19065] netlink: 'syz.1.3158': attribute type 7 has an invalid length. [ 683.493264][T19065] netlink: 'syz.1.3158': attribute type 8 has an invalid length. [ 683.559276][T19065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3158'. [ 683.583851][T19069] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3159'. [ 684.068749][T18607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.307530][T19087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3161'. [ 684.675546][T18607] veth0_vlan: entered promiscuous mode [ 684.742011][T18607] veth1_vlan: entered promiscuous mode [ 684.897837][T18607] veth0_macvtap: entered promiscuous mode [ 684.984136][ T8970] nci: nci_rsp_packet: unknown rsp opcode 0x7 [ 685.033101][T18607] veth1_macvtap: entered promiscuous mode [ 685.140775][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 685.317738][T18607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.574546][T18607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.596300][T19131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3171'. [ 685.632611][ T8966] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.664259][T19101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 685.674889][ T8966] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.692559][T19132] netlink: 'syz.3.3171': attribute type 10 has an invalid length. [ 685.706541][ T8966] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.778627][ T8966] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.025461][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.099866][T19138] openvswitch: netlink: Message has 16 unknown bytes. [ 686.178577][T19142] bond13 (unregistering): Released all slaves [ 686.209854][T14749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.225427][T14749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.413563][ T8125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.466702][ T8125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.778514][ T8125] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 686.875819][T19179] netlink: 'syz.2.3068': attribute type 15 has an invalid length. [ 686.942815][T19181] FAULT_INJECTION: forcing a failure. [ 686.942815][T19181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.970377][T19181] CPU: 1 UID: 0 PID: 19181 Comm: syz.0.3180 Not tainted syzkaller #0 PREEMPT(full) [ 686.970410][T19181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 686.970424][T19181] Call Trace: [ 686.970434][T19181] [ 686.970443][T19181] dump_stack_lvl+0xe8/0x150 [ 686.970482][T19181] should_fail_ex+0x40c/0x560 [ 686.970517][T19181] _copy_from_user+0x2d/0xb0 [ 686.970541][T19181] ___sys_recvmsg+0x173/0x5a0 [ 686.970577][T19181] ? __pfx____sys_recvmsg+0x10/0x10 [ 686.970610][T19181] ? __fget_files+0x2a/0x420 [ 686.970661][T19181] ? __fget_files+0x3a2/0x420 [ 686.970705][T19181] __x64_sys_recvmsg+0x1ae/0x290 [ 686.970736][T19181] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 686.970784][T19181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.970809][T19181] do_syscall_64+0x174/0x580 [ 686.970836][T19181] ? trace_irq_disable+0x3b/0x140 [ 686.970865][T19181] ? clear_bhb_loop+0x40/0x90 [ 686.970894][T19181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.970925][T19181] RIP: 0033:0x7f244239de99 [ 686.970947][T19181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.970968][T19181] RSP: 002b:00007f2443207028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 686.970992][T19181] RAX: ffffffffffffffda RBX: 00007f2442625fa0 RCX: 00007f244239de99 [ 686.971008][T19181] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000003 [ 686.971024][T19181] RBP: 00007f2443207090 R08: 0000000000000000 R09: 0000000000000000 [ 686.971038][T19181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.971052][T19181] R13: 00007f2442626038 R14: 00007f2442625fa0 R15: 00007ffcd77cb518 [ 686.971087][T19181] [ 687.362441][T19188] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 687.371819][T19155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 687.645771][T19195] __nla_validate_parse: 3 callbacks suppressed [ 687.645798][T19195] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3184'. [ 687.866022][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 687.884216][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 687.894250][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 687.908915][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 687.919169][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 688.118931][T19205] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3186'. [ 688.156544][T19205] openvswitch: netlink: Flow actions attr not present in new flow. [ 688.738871][T19238] netlink: 420 bytes leftover after parsing attributes in process `syz.0.3191'. [ 689.156803][T19255] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3194'. [ 689.203810][T19255] netlink: 'syz.1.3194': attribute type 2 has an invalid length. [ 689.262420][T19255] netlink: 103 bytes leftover after parsing attributes in process `syz.1.3194'. [ 689.561713][T19201] wlan0 speed is unknown, defaulting to 1000 [ 689.861056][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 690.021187][ T5628] Bluetooth: hci2: command tx timeout [ 690.111563][T19285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.217015][T19298] pimreg: left allmulticast mode [ 690.410014][T19305] netlink: 'syz.1.3200': attribute type 1 has an invalid length. [ 690.423598][T19306] netlink: 'syz.2.3203': attribute type 1 has an invalid length. [ 690.447826][T19305] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3200'. [ 690.458026][T19306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3203'. [ 690.879769][T19201] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.887209][T19201] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.895221][T19201] bridge_slave_0: entered allmulticast mode [ 690.905486][T19201] bridge_slave_0: entered promiscuous mode [ 690.918153][T19201] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.925931][T19201] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.933820][T19201] bridge_slave_1: entered allmulticast mode [ 690.942980][T19201] bridge_slave_1: entered promiscuous mode [ 691.085503][T19201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.179152][T19329] bond11: entered allmulticast mode [ 691.198891][T19201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.466918][T19333] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3208'. [ 691.593178][T19201] team0: Port device team_slave_0 added [ 691.616081][T19201] team0: Port device team_slave_1 added [ 691.779784][T19201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.830673][T19201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.917219][T19353] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3213'. [ 691.942400][T19201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.003430][T19201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.036369][T19353] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 692.052062][T19201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.101086][ T5628] Bluetooth: hci2: command tx timeout [ 692.149104][T19201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.276722][T19201] hsr_slave_0: entered promiscuous mode [ 692.286600][T19201] hsr_slave_1: entered promiscuous mode [ 692.296630][T19201] debugfs: 'hsr0' already exists in 'hsr' [ 692.303417][T19201] Cannot create hsr debugfs directory [ 693.061705][T19379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3219'. [ 693.161378][T19381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3221'. [ 693.700384][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 694.181353][ T5628] Bluetooth: hci2: command tx timeout [ 695.405248][T19201] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 695.503301][T19201] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 695.521875][T19201] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 695.571172][T19201] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 695.589291][T19461] syzkaller0: entered promiscuous mode [ 695.609083][T19461] syzkaller0: entered allmulticast mode [ 695.635229][T19460] tipc: Started in network mode [ 695.654369][T19460] tipc: Node identity 1a56edbc00f5, cluster identity 4711 [ 695.678856][T19460] tipc: Enabled bearer , priority 0 [ 695.705523][T19201] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 695.717790][T19471] workqueue: name exceeds WQ_NAME_LEN. Truncating to: B€ÃŠU¼5‹ä§bZ0Î%ûÿMpÑZ'RH [ 695.765070][T19201] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 695.817974][T19201] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 695.844416][T19201] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 695.884737][T19460] tipc: Resetting bearer [ 695.955064][T19460] tipc: Disabling bearer [ 696.077047][T19458] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 696.268028][ T5628] Bluetooth: hci2: command tx timeout [ 696.395162][T19495] syzkaller0: entered promiscuous mode [ 696.411506][T19495] syzkaller0: entered allmulticast mode [ 696.465948][T19201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.166518][T19201] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.245964][ T8949] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.253273][ T8949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.334944][ T8949] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.342294][ T8949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.360797][T19528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3247'. [ 697.361948][T19531] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3246'. [ 697.456561][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3247'. [ 697.958025][T19543] syzkaller0: entered promiscuous mode [ 697.975783][T19543] syzkaller0: entered allmulticast mode [ 698.097734][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_2 [ 698.105344][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_4 [ 698.110340][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_6 [ 698.115273][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_8 [ 698.120206][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_10 [ 698.125188][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_12 [ 698.130296][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_14 [ 698.135281][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_16 [ 698.140294][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_18 [ 698.145276][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_20 [ 698.150334][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_22 [ 698.155347][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_24 [ 698.160367][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_26 [ 698.165358][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_28 [ 698.170374][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_30 [ 698.175367][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_32 [ 698.180539][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_34 [ 698.185654][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_36 [ 698.190675][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_38 [ 698.195655][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_40 [ 698.200922][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_42 [ 698.206728][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_44 [ 698.211748][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_46 [ 698.216731][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_48 [ 698.221795][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_50 [ 698.226823][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_52 [ 698.231859][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_54 [ 698.236927][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_56 [ 698.242381][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_58 [ 698.247374][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_60 [ 698.252409][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_62 [ 698.257395][T19543] simple: bas]£ª9oÏ‚>âüÑQ/ic_64 [ 698.262413][T19543] TC_ACT_REPEAT abuse ? [ 698.509251][T19554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3250'. [ 698.695732][T19552] wlan0 speed is unknown, defaulting to 1000 [ 699.302696][T19564] wlan0 speed is unknown, defaulting to 1000 [ 699.674072][T19588] sctp: [Deprecated]: syz.1.3256 (pid 19588) Use of int in max_burst socket option deprecated. [ 699.674072][T19588] Use struct sctp_assoc_value instead [ 699.992732][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3251'. [ 700.002648][T19201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.011490][T19552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3251'. [ 700.057686][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3251'. [ 700.113249][T19552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3251'. [ 701.066710][T19620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3261'. [ 701.155783][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3262'. [ 701.231002][T19622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3262'. [ 701.278443][T19622] netlink: 'syz.1.3262': attribute type 18 has an invalid length. [ 701.287244][T19201] veth0_vlan: entered promiscuous mode [ 701.361401][T19201] veth1_vlan: entered promiscuous mode [ 701.497969][T19639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3265'. [ 701.608191][T19639] geneve0: entered promiscuous mode [ 701.627105][T19639] geneve0: left promiscuous mode [ 701.724416][T19201] veth0_macvtap: entered promiscuous mode [ 701.788380][T19201] veth1_macvtap: entered promiscuous mode [ 701.883659][T19201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.937545][T19201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.074845][T14750] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.121636][T14749] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.167311][T14749] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.213477][T14749] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.660871][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 702.966611][ T8973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.043023][ T8973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.189804][ T8970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.190593][T19680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3273'. [ 703.222107][ T8970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.668578][T19689] can: request_module (can-proto-0) failed. [ 703.715222][T19706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3276'. [ 705.146718][T19742] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3283'. [ 705.194240][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 705.212073][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 705.225733][T19745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 705.241245][T19745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 705.250890][T19745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 706.054627][ T8125] tipc: Subscription rejected, illegal request [ 706.725113][T19779] syzkaller0: entered promiscuous mode [ 706.768565][T19779] syzkaller0: entered allmulticast mode [ 707.075985][T19797] syzkaller0: entered promiscuous mode [ 707.090223][T19797] syzkaller0: entered allmulticast mode [ 707.145808][T19817] geneve2: entered promiscuous mode [ 707.300803][T19745] Bluetooth: hci3: command tx timeout [ 707.330328][T19828] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3297'. [ 707.456745][T19830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3297'. [ 707.521864][T19830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3297'. [ 707.608212][T19839] netlink: 'syz.0.3299': attribute type 7 has an invalid length. [ 707.634308][T19839] netlink: 'syz.0.3299': attribute type 3 has an invalid length. [ 707.652184][T19839] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3299'. [ 709.068608][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 709.390344][T19745] Bluetooth: hci3: command tx timeout [ 710.559591][T19741] wlan0 speed is unknown, defaulting to 1000 [ 710.888317][T19858] wlan0 speed is unknown, defaulting to 1000 [ 710.991574][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 711.020463][T19870] IPv6: NLM_F_CREATE should be specified when creating new route [ 711.289407][T19874] FAULT_INJECTION: forcing a failure. [ 711.289407][T19874] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 711.373885][T19874] CPU: 1 UID: 0 PID: 19874 Comm: syz.3.3305 Not tainted syzkaller #0 PREEMPT(full) [ 711.373917][T19874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 711.373931][T19874] Call Trace: [ 711.373939][T19874] [ 711.373949][T19874] dump_stack_lvl+0xe8/0x150 [ 711.373989][T19874] should_fail_ex+0x40c/0x560 [ 711.374024][T19874] prepare_alloc_pages+0x230/0x650 [ 711.374065][T19874] __alloc_frozen_pages_noprof+0x12f/0x380 [ 711.374104][T19874] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 711.374145][T19874] ? __pfx_policy_nodemask+0x10/0x10 [ 711.374178][T19874] ? __folio_batch_add_and_move+0x11a/0xc50 [ 711.374204][T19874] ? lock_acquire+0x106/0x350 [ 711.374245][T19874] alloc_pages_mpol+0x212/0x380 [ 711.374294][T19874] folio_alloc_mpol_noprof+0x39/0x160 [ 711.374332][T19874] vma_alloc_folio_noprof+0xe1/0x1e0 [ 711.374370][T19874] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 711.374418][T19874] do_wp_page+0x1163/0x4c70 [ 711.374465][T19874] ? __pfx_do_wp_page+0x10/0x10 [ 711.374488][T19874] ? do_raw_spin_lock+0x12b/0x2f0 [ 711.374518][T19874] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 711.374556][T19874] handle_mm_fault+0x1490/0x3080 [ 711.374596][T19874] ? handle_mm_fault+0xec/0x3080 [ 711.374633][T19874] ? __pfx_handle_mm_fault+0x10/0x10 [ 711.374675][T19874] ? __pfx___up_read+0x10/0x10 [ 711.374706][T19874] ? lock_mm_and_find_vma+0xa7/0x340 [ 711.374740][T19874] do_user_addr_fault+0x744/0x1340 [ 711.374794][T19874] exc_page_fault+0x6a/0xc0 [ 711.374824][T19874] asm_exc_page_fault+0x26/0x30 [ 711.374847][T19874] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 711.374882][T19874] Code: 61 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 711.374901][T19874] RSP: 0018:ffffc900032ef698 EFLAGS: 00050206 [ 711.374921][T19874] RAX: ffffffff84d13501 RBX: ffff88804eac00e8 RCX: 00000000000095d0 [ 711.374939][T19874] RDX: 0000000000000000 RSI: ffff88804eac6ce8 RDI: 0000200000007000 [ 711.374954][T19874] RBP: ffffc900032ef818 R08: ffff88804ead02b7 R09: 1ffff11009d5a056 [ 711.374971][T19874] R10: dffffc0000000000 R11: ffffed1009d5a057 R12: 1ffff9200065dfc3 [ 711.374986][T19874] R13: 0000200000000400 R14: ffffc900032efe28 R15: 00000000000101d0 [ 711.375011][T19874] ? _copy_to_iter+0x191/0x1810 [ 711.375051][T19874] _copy_to_iter+0x255/0x1810 [ 711.375082][T19874] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 711.375109][T19874] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 711.375147][T19874] ? __pfx__copy_to_iter+0x10/0x10 [ 711.375177][T19874] ? lockdep_hardirqs_on+0x7a/0x110 [ 711.375203][T19874] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 711.375228][T19874] ? tipc_wait_for_rcvmsg+0x4f3/0x640 [ 711.375384][T19874] __skb_datagram_iter+0xf8/0x980 [ 711.375464][T19874] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 711.375492][T19874] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 711.375522][T19874] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 711.375556][T19874] skb_copy_datagram_iter+0xb5/0x240 [ 711.375591][T19874] tipc_recvstream+0x732/0xe90 [ 711.375638][T19874] ? __pfx_tipc_recvstream+0x10/0x10 [ 711.375663][T19874] sock_recvmsg+0x196/0x1e0 [ 711.375724][T19874] ____sys_recvmsg+0x1e6/0x4a0 [ 711.375761][T19874] ? __pfx_____sys_recvmsg+0x10/0x10 [ 711.375807][T19874] ? import_iovec+0x73/0xa0 [ 711.375846][T19874] ___sys_recvmsg+0x213/0x5a0 [ 711.375880][T19874] ? __pfx____sys_recvmsg+0x10/0x10 [ 711.375913][T19874] ? __fget_files+0x2a/0x420 [ 711.375965][T19874] ? __fget_files+0x3a2/0x420 [ 711.376009][T19874] __x64_sys_recvmsg+0x1ae/0x290 [ 711.376041][T19874] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 711.376090][T19874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.376116][T19874] do_syscall_64+0x174/0x580 [ 711.376143][T19874] ? trace_irq_disable+0x3b/0x140 [ 711.376173][T19874] ? clear_bhb_loop+0x40/0x90 [ 711.376202][T19874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.376224][T19874] RIP: 0033:0x7f1e5279de99 [ 711.376246][T19874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.376274][T19874] RSP: 002b:00007f1e536c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 711.376298][T19874] RAX: ffffffffffffffda RBX: 00007f1e52a25fa0 RCX: 00007f1e5279de99 [ 711.376315][T19874] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000003 [ 711.376330][T19874] RBP: 00007f1e536c8090 R08: 0000000000000000 R09: 0000000000000000 [ 711.376345][T19874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.376359][T19874] R13: 00007f1e52a26038 R14: 00007f1e52a25fa0 R15: 00007ffda590a1e8 [ 711.376397][T19874] [ 711.872381][T19745] Bluetooth: hci3: command tx timeout [ 712.307772][T19890] netlink: 'syz.4.3306': attribute type 12 has an invalid length. [ 712.317315][T19890] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3306'. [ 712.337052][T19886] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3306'. [ 712.375985][T19858] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3302'. [ 712.470048][T19898] netlink: 'syz.3.3308': attribute type 1 has an invalid length. [ 712.478206][T19898] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3308'. [ 712.687640][T19907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3309'. [ 713.321801][T19741] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.363495][T19741] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.402783][T19741] bridge_slave_0: entered allmulticast mode [ 713.424805][T19741] bridge_slave_0: entered promiscuous mode [ 713.453530][T19741] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.489120][T19741] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.510052][T19741] bridge_slave_1: entered allmulticast mode [ 713.529085][T19741] bridge_slave_1: entered promiscuous mode [ 713.943828][T19745] Bluetooth: hci3: command tx timeout [ 713.986670][T19741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.043396][T19741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.299884][T19741] team0: Port device team_slave_0 added [ 714.367705][T19741] team0: Port device team_slave_1 added [ 714.731571][T19741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.744590][T19741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.807824][T19741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.863331][T19741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.880708][T19979] netlink: 'syz.2.3324': attribute type 1 has an invalid length. [ 714.907856][T19741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.966363][T19983] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3327'. [ 714.967177][T19741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.053748][T19988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3324'. [ 715.179517][T19982] bond1 (unregistering): Released all slaves [ 715.332638][T19984] bond1: (slave gretap1): making interface the new active one [ 715.341030][T19984] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 715.359194][T19988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 715.610932][T19741] hsr_slave_0: entered promiscuous mode [ 715.633263][T19741] hsr_slave_1: entered promiscuous mode [ 715.649901][T19741] debugfs: 'hsr0' already exists in 'hsr' [ 715.673234][T19741] Cannot create hsr debugfs directory [ 715.783282][T20018] netlink: 'syz.2.3333': attribute type 13 has an invalid length. [ 715.814658][T20018] netlink: 'syz.2.3333': attribute type 17 has an invalid length. [ 715.835346][T20016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3333'. [ 715.859351][T20009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3331'. [ 715.869947][T20009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3331'. [ 716.279698][T20018] erspan0: entered promiscuous mode [ 716.516968][ T8973] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 716.617634][ T8973] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 717.006504][T20058] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 717.553900][T19741] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.611531][T19741] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.650783][T20083] netlink: 'syz.2.3345': attribute type 1 has an invalid length. [ 717.661912][T19741] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 717.789101][T20090] __nla_validate_parse: 1 callbacks suppressed [ 717.789128][T20090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3345'. [ 717.824482][T20091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 717.877883][T20093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.112552][T20076] syzkaller0: entered promiscuous mode [ 718.137875][T20076] syzkaller0: entered allmulticast mode [ 718.332481][T20083] 8021q: adding VLAN 0 to HW filter on device bond2 [ 718.478876][T20085] bond2: (slave veth3): Enslaving as an active interface with a down link [ 720.340504][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 720.420554][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 721.754912][T20090] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 721.764360][T20090] bond2: (slave batadv1): making interface the new active one [ 721.773671][T20090] batadv1: entered promiscuous mode [ 721.779800][T20090] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 721.989079][T19741] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.040797][T19741] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.051658][T19741] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 722.093230][T20136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3353'. [ 722.124691][T20136] openvswitch: netlink: Missing key (keys=40, expected=80) [ 722.318764][T20144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3354'. [ 722.396325][T19741] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.451048][T19741] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.515800][T19741] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 723.078640][T19741] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.136337][T19741] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.186586][T19741] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 723.388572][T20178] syzkaller0: entered promiscuous mode [ 723.413450][T20178] syzkaller0: entered allmulticast mode [ 723.799764][T20185] pimreg9: entered allmulticast mode [ 723.936778][T20191] netlink: 'syz.4.3360': attribute type 23 has an invalid length. [ 724.173243][T20196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3357'. [ 724.563996][T20212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.995067][T20201] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.002907][T20201] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.768548][T20201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.819610][T20201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.028050][T20201] xfrm1: left allmulticast mode [ 726.068092][T20203] vlan2: entered promiscuous mode [ 726.074905][T20203] hsr0: entered promiscuous mode [ 726.081595][T20203] vlan2: entered allmulticast mode [ 726.086990][T20203] hsr0: entered allmulticast mode [ 726.092663][T20203] hsr_slave_0: entered allmulticast mode [ 726.098544][T20203] hsr_slave_1: entered allmulticast mode [ 726.137182][ T8966] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.158458][ T8966] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.189688][ T8966] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.315136][ T8966] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.525444][T20225] sch_tbf: burst 0 is lower than device veth0_to_hsr mtu (1514) ! [ 726.571919][T19741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 726.611255][T19741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 726.639201][T19741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 726.686410][T19741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 726.746559][T19741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 726.787314][T19741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 726.817007][T19741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 726.854032][T19741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 727.015443][T20234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 727.035638][T20247] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3366'. [ 727.620507][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 728.260957][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 730.123031][T20250] tipc: Resetting bearer [ 730.896070][T20258] syzkaller0: entered promiscuous mode [ 730.911060][T20258] syzkaller0: entered allmulticast mode [ 731.018221][T20311] netlink: 339 bytes leftover after parsing attributes in process `syz.4.3370'. [ 732.913012][T20302] Set syz1 is full, maxelem 65536 reached [ 734.674655][T14749] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.684738][T14749] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.713992][T14749] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.754495][T14749] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.796033][T14749] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.823924][T14749] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.873928][T14749] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.918248][T14749] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.933628][T20317] netlink: 'syz.4.3372': attribute type 4 has an invalid length. [ 734.967617][T20317] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3372'. [ 735.003744][ T8973] batadv1: left promiscuous mode [ 735.219426][T19741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.335258][T19741] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.385604][T14747] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.392855][T14747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.464026][T14747] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.471271][T14747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.710330][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3381'. [ 735.789203][T20365] tipc: Enabling not permitted [ 735.803295][T20365] tipc: Enabling of bearer rejected, failed to enable media [ 735.848824][T20365] netlink: 272 bytes leftover after parsing attributes in process `syz.3.3382'. [ 736.005604][T20365] netlink: 'syz.3.3382': attribute type 11 has an invalid length. [ 736.069345][T20377] netlink: 4412 bytes leftover after parsing attributes in process `syz.2.3385'. [ 736.193626][T20377] ip6gre1: entered promiscuous mode [ 736.217353][T20377] ip6gre1: entered allmulticast mode [ 736.478260][T20395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3389'. [ 736.759264][T20404] netlink: 'syz.4.3390': attribute type 1 has an invalid length. [ 736.786607][T20404] netlink: 'syz.4.3390': attribute type 1 has an invalid length. [ 736.986038][T14750] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.020719][T14750] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.028543][ T5758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.458980][T19741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.555757][T20432] syzkaller0: entered promiscuous mode [ 737.584377][T20432] syzkaller0: entered allmulticast mode [ 737.699049][ T5737] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.818125][T19741] veth0_vlan: entered promiscuous mode [ 737.849647][T19741] veth1_vlan: entered promiscuous mode [ 737.860455][ T5737] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 738.036041][T19741] veth0_macvtap: entered promiscuous mode [ 738.047793][T20452] SET target dimension over the limit! [ 738.063359][T20447] syzkaller1: entered promiscuous mode [ 738.087915][T20447] syzkaller1: entered allmulticast mode [ 738.157085][T19741] veth1_macvtap: entered promiscuous mode [ 738.207468][T20452] netlink: 320 bytes leftover after parsing attributes in process `syz.2.3399'. [ 738.236376][T19741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.250500][T19741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.298174][ T8125] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.348023][ T8125] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.613036][T20475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3401'. [ 738.622354][ T8125] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.635994][ T8125] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.722034][ T6859] IPVS: starting estimator thread 0... [ 738.861076][T20482] IPVS: using max 24 ests per chain, 57600 per kthread [ 739.058179][T20485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3403'. [ 739.098448][T14747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.118863][T20485] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3403'. [ 739.137324][T14747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.376549][ T8973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.410393][ T8973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.432579][T20498] syzkaller0: entered promiscuous mode [ 739.453920][T20498] syzkaller0: entered allmulticast mode [ 739.546939][T20504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3409'. [ 739.884019][T20512] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.922823][T20512] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.936062][T20525] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3412'. [ 740.285211][T20534] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3416'. [ 740.320566][T20534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3416'. [ 740.485638][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 740.525462][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 740.535806][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 740.553417][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 740.568703][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 740.990342][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 741.089135][T20564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.384443][T20579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3423'. [ 741.703231][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 741.766499][T20588] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 742.091677][T20596] openvswitch: netlink: IPv4 tunnel dst address is zero [ 742.124515][T20596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.289103][T20600] netlink: 'syz.0.3425': attribute type 15 has an invalid length. [ 742.301350][T20605] netlink: 'syz.1.3427': attribute type 3 has an invalid length. [ 742.332968][T20605] netlink: 'syz.1.3427': attribute type 3 has an invalid length. [ 742.364202][T20605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3427'. [ 742.663210][T19745] Bluetooth: hci1: command tx timeout [ 742.723980][T20539] wlan0 speed is unknown, defaulting to 1000 [ 742.969884][T20636] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3432'. [ 743.345517][T20636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.402986][T20636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.442339][T20658] openvswitch: netlink: Missing key (keys=40, expected=100) [ 743.452198][T20636] bond0 (unregistering): Released all slaves [ 743.502427][T20658] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 744.621183][T20696] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3441'. [ 744.717440][ T8121] vlan2: left allmulticast mode [ 744.739237][ T8121] geneve0: left allmulticast mode [ 744.744494][T19745] Bluetooth: hci1: command tx timeout [ 744.770064][ T8121] bridge0: port 1(vlan2) entered disabled state [ 744.900749][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 745.573975][ T8121] bond10 (unregistering): (slave erspan1): Releasing active interface [ 745.590541][ T8121] erspan1 (unregistering): left promiscuous mode [ 745.979158][ T8121] bond0 (unregistering): Released all slaves [ 745.990994][ T8121] bond1 (unregistering): Released all slaves [ 746.011365][ T8121] bond2 (unregistering): Released all slaves [ 746.033689][ T8121] bond3 (unregistering): Released all slaves [ 746.055552][ T8121] bond4 (unregistering): (slave veth3): Releasing active interface [ 746.065220][ T8121] bond4 (unregistering): Released all slaves [ 746.085043][ T8121] bond5 (unregistering): Released all slaves [ 746.104675][ T8121] bond6 (unregistering): Released all slaves [ 746.122860][ T8121] bond7 (unregistering): (slave veth5): Releasing active interface [ 746.132730][ T8121] bond7 (unregistering): Released all slaves [ 746.158932][ T8121] bond8 (unregistering): Released all slaves [ 746.179434][ T8121] bond9 (unregistering): (slave veth15): Releasing active interface [ 746.188695][ T8121] batadv0: entered promiscuous mode [ 746.196330][ T8121] bond9 (unregistering): (slave batadv0): Releasing active interface [ 746.205743][ T8121] bond9 (unregistering): Released all slaves [ 746.224706][ T8121] bond10 (unregistering): Released all slaves [ 746.241632][ T8121] bond11 (unregistering): Released all slaves [ 746.314967][T20714] syzkaller1: entered promiscuous mode [ 746.329768][T20714] syzkaller1: entered allmulticast mode [ 746.657097][ T8121] : left promiscuous mode [ 746.831607][T19745] Bluetooth: hci1: command tx timeout [ 746.974863][ T8121] tipc: Disabling bearer [ 746.991043][ T8121] tipc: Left network mode [ 747.038402][T20539] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.046152][T20539] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.053586][T20539] bridge_slave_0: entered allmulticast mode [ 747.062996][T20539] bridge_slave_0: entered promiscuous mode [ 747.073941][T20539] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.081342][T20539] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.088611][T20539] bridge_slave_1: entered allmulticast mode [ 747.104302][T20539] bridge_slave_1: entered promiscuous mode [ 747.297120][T20539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.333516][T20539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.470970][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.523245][T20539] team0: Port device team_slave_0 added [ 747.556027][T20539] team0: Port device team_slave_1 added [ 747.781875][T20539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.796619][T20539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.874482][T20539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.078323][T20797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.095679][T20797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.105249][ T6866] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 748.172643][T20797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.241496][T20797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.337449][T20539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.365626][T20539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.465700][T20539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.546460][T20812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3464'. [ 748.710386][ T6866] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 748.784013][ T8121] IPVS: stopping backup sync thread 12323 ... [ 748.846441][T20539] hsr_slave_0: entered promiscuous mode [ 748.863538][T20826] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3468'. [ 748.900957][T19745] Bluetooth: hci1: command tx timeout [ 748.902482][T20539] hsr_slave_1: entered promiscuous mode [ 748.951710][T20539] debugfs: 'hsr0' already exists in 'hsr' [ 748.975950][T20539] Cannot create hsr debugfs directory [ 749.234324][T20845] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3473'. [ 749.297164][T20845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3473'. [ 749.380484][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 749.552549][T20857] netlink: 'syz.0.3475': attribute type 1 has an invalid length. [ 749.947504][T20857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 750.096129][T20866] bond1: (slave veth3): Enslaving as an active interface with a down link [ 750.129629][T20871] bond1: (slave dummy0): making interface the new active one [ 750.166760][T20871] dummy0: entered promiscuous mode [ 750.175694][T20871] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 750.657479][T20886] wlan0 speed is unknown, defaulting to 1000 [ 750.880005][T20919] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3486'. [ 751.148719][T20929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 751.276494][T20938] syzkaller0: entered promiscuous mode [ 751.290932][T20938] syzkaller0: entered allmulticast mode [ 751.402443][T20942] netlink: 'syz.1.3490': attribute type 1 has an invalid length. [ 751.412401][T20942] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3490'. [ 751.434625][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 751.765676][T20952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3494'. [ 751.797318][T20952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3494'. [ 752.002624][T20962] syzkaller1: entered promiscuous mode [ 752.012821][T20962] syzkaller1: entered allmulticast mode [ 752.084725][T20952] "syz.2.3494" (20952) uses obsolete ecb(arc4) skcipher [ 752.580678][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 752.792812][T20985] x_tables: duplicate underflow at hook 3 [ 753.026431][T20983] wlan0 speed is unknown, defaulting to 1000 [ 753.040421][T20539] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 753.070863][T20539] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 753.112429][T20539] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 753.161178][T20539] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 753.227409][T20539] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 753.257574][T20539] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 753.359045][T20539] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 753.434593][T20539] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 753.511911][T21003] syzkaller0: entered promiscuous mode [ 753.517519][T21003] syzkaller0: entered allmulticast mode [ 753.961976][T21037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3508'. [ 754.015959][T21038] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3508'. [ 754.082008][T21029] syzkaller0: entered promiscuous mode [ 754.093494][T21029] syzkaller0: entered allmulticast mode [ 754.366228][ T8121] hsr_slave_0: left promiscuous mode [ 754.381498][ T8121] hsr_slave_1: left promiscuous mode [ 754.466430][T21050] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3511'. [ 754.899238][T21063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3514'. [ 754.922916][T21063] atomic_op ffff88804abbc998 conn xmit_atomic 0000000000000000 [ 756.047231][T21074] syz_tun: entered allmulticast mode [ 756.060632][T21074] syz_tun: left allmulticast mode [ 756.062028][ T809] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 756.095440][ T8949] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 756.239676][T20539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.261141][ T5626] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 756.376058][T21115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3521'. [ 756.418338][T20539] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.499572][T14749] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.506840][T14749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.597309][ T8949] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.604571][ T8949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.158363][T21139] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3526'. [ 757.246319][T21144] syzkaller0: entered promiscuous mode [ 757.258310][ T8121] IPVS: stop unused estimator thread 0... [ 757.272720][T21144] syzkaller0: entered allmulticast mode [ 757.315599][T21144] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3526'. [ 757.355685][T21146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3527'. [ 757.491797][T21146] tipc: Started in network mode [ 757.527481][T21146] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 757.549476][T21146] tipc: Enabling of bearer rejected, failed to enable media [ 757.590058][T21157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3530'. [ 758.597791][T21201] tc_dump_action: action bad kind [ 759.126501][T20539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.218557][T21215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3538'. [ 759.518321][T21235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3542'. [ 759.546748][T21238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3543'. [ 759.568275][T21235] l2tp_ppp: sess 2/0: no socket in recv [ 759.578354][T21238] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 759.614942][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3544'. [ 759.652981][T21243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3544'. [ 759.686255][T21243] netlink: 'syz.1.3544': attribute type 14 has an invalid length. [ 759.752911][T21250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3544'. [ 759.793414][T21250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3544'. [ 759.811940][T21250] netlink: 'syz.1.3544': attribute type 14 has an invalid length. [ 759.838030][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3544'. [ 759.847241][T21243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3544'. [ 759.856278][T21243] netlink: 'syz.1.3544': attribute type 14 has an invalid length. [ 760.132318][T20539] veth0_vlan: entered promiscuous mode [ 760.164910][T20539] veth1_vlan: entered promiscuous mode [ 760.272295][T20539] veth0_macvtap: entered promiscuous mode [ 760.288899][T21277] netlink: 'syz.2.3550': attribute type 1 has an invalid length. [ 760.298827][T20539] veth1_macvtap: entered promiscuous mode [ 760.402621][T21277] 8021q: adding VLAN 0 to HW filter on device bond3 [ 760.577630][T20539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.621122][T20539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.631304][T21289] netlink: 'syz.1.3552': attribute type 1 has an invalid length. [ 760.721762][ T8972] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.754462][ T8972] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.829935][T21291] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 760.865154][T21289] macvlan2: entered promiscuous mode [ 760.889960][T21289] macvlan2: entered allmulticast mode [ 760.907974][T21289] bond1: entered promiscuous mode [ 760.915622][T21289] bridge1: entered promiscuous mode [ 760.929332][T21289] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 760.969779][T21289] bond1: left promiscuous mode [ 760.979464][T21289] bridge1: left promiscuous mode [ 761.053992][ T8972] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.087918][ T8972] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.354781][ T8972] dummy0: left promiscuous mode [ 761.552778][ T8949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.589122][ T8949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.753774][T14747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.774080][T14747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.814115][T21323] syzkaller1: entered promiscuous mode [ 761.830697][T21323] syzkaller1: entered allmulticast mode [ 761.852941][T21323] xt_socket: unknown flags 0x4c [ 761.922515][T21335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3563'. [ 762.167091][T21343] netlink: 'syz.0.3565': attribute type 13 has an invalid length. [ 762.324820][T21356] openvswitch: netlink: Unknown key attributes 20 [ 762.684164][T21359] team_slave_0: entered promiscuous mode [ 762.763407][T21364] bond0: entered promiscuous mode [ 762.774550][T21364] bond_slave_0: entered promiscuous mode [ 762.793370][T21364] bond_slave_1: entered promiscuous mode [ 762.839871][T21364] batadv0: entered promiscuous mode [ 762.880697][T21364] debugfs: 'hsr1' already exists in 'hsr' [ 762.899183][T21364] Cannot create hsr debugfs directory [ 762.919050][T21364] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 763.064798][T21364] bond0: left promiscuous mode [ 763.078528][T21364] bond_slave_0: left promiscuous mode [ 763.096389][T21364] bond_slave_1: left promiscuous mode [ 763.136917][T21364] batadv0: left promiscuous mode [ 763.264886][T21367] bond0: entered promiscuous mode [ 763.304388][T21367] bond_slave_0: entered promiscuous mode [ 763.322193][T21367] bond_slave_1: entered promiscuous mode [ 763.344951][T21367] batadv0: entered promiscuous mode [ 763.363240][T21367] debugfs: 'hsr1' already exists in 'hsr' [ 763.369044][T21367] Cannot create hsr debugfs directory [ 763.392683][T21367] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 763.412803][T21367] bond0: left promiscuous mode [ 763.421169][T21367] bond_slave_0: left promiscuous mode [ 763.442896][T21367] bond_slave_1: left promiscuous mode [ 763.465241][T21367] batadv0: left promiscuous mode [ 763.842892][T21405] bond0: entered promiscuous mode [ 763.863324][T21405] bond_slave_0: entered promiscuous mode [ 763.888841][T21405] bond_slave_1: entered promiscuous mode [ 763.896756][T21415] netlink: 'syz.1.3576': attribute type 24 has an invalid length. [ 763.937009][T21405] batadv0: entered promiscuous mode [ 763.973530][T21405] debugfs: 'hsr1' already exists in 'hsr' [ 763.989001][T21405] Cannot create hsr debugfs directory [ 764.008786][T21415] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 764.204870][T21425] netlink: 'syz.3.3578': attribute type 9 has an invalid length. [ 764.237956][T21429] __nla_validate_parse: 2 callbacks suppressed [ 764.237977][T21429] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3580'. [ 764.258103][T21431] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3579'. [ 764.418782][T21438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3581'. [ 764.480832][T21446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3580'. [ 764.481516][T21438] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 764.879227][T21466] netlink: 'syz.2.3587': attribute type 2 has an invalid length. [ 764.915333][T21466] netlink: 'syz.2.3587': attribute type 21 has an invalid length. [ 764.932080][T21466] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3587'. [ 764.949302][T21466] netlink: 'syz.2.3587': attribute type 5 has an invalid length. [ 764.969239][T21466] netlink: 'syz.2.3587': attribute type 6 has an invalid length. [ 764.990595][T21466] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3587'. [ 765.487032][T21498] FAULT_INJECTION: forcing a failure. [ 765.487032][T21498] name failslab, interval 1, probability 0, space 0, times 0 [ 765.500599][T21498] CPU: 0 UID: 0 PID: 21498 Comm: syz.1.3595 Not tainted syzkaller #0 PREEMPT(full) [ 765.500630][T21498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 765.500643][T21498] Call Trace: [ 765.500652][T21498] [ 765.500661][T21498] dump_stack_lvl+0xe8/0x150 [ 765.500702][T21498] should_fail_ex+0x40c/0x560 [ 765.500737][T21498] should_failslab+0xa8/0x100 [ 765.500772][T21498] __kmalloc_noprof+0xfe/0x720 [ 765.500804][T21498] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 765.500840][T21498] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 765.500891][T21498] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 765.500933][T21498] genl_family_rcv_msg_doit+0xda/0x340 [ 765.500973][T21498] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 765.501013][T21498] ? apparmor_capable+0x126/0x170 [ 765.501127][T21498] ? bpf_lsm_capable+0x9/0x20 [ 765.501155][T21498] ? security_capable+0x7e/0x2c0 [ 765.501185][T21498] genl_rcv_msg+0x614/0x7a0 [ 765.501226][T21498] ? __pfx_genl_rcv_msg+0x10/0x10 [ 765.501259][T21498] ? __pfx_ieee802154_llsec_add_dev+0x10/0x10 [ 765.501344][T21498] netlink_rcv_skb+0x226/0x4a0 [ 765.501373][T21498] ? __pfx_genl_rcv_msg+0x10/0x10 [ 765.501408][T21498] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 765.501456][T21498] ? down_read+0x2be/0x330 [ 765.501491][T21498] genl_rcv+0x28/0x40 [ 765.501521][T21498] netlink_unicast+0x7bb/0x940 [ 765.501558][T21498] netlink_sendmsg+0x813/0xb40 [ 765.501597][T21498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 765.501630][T21498] ? aa_sock_msg_perm+0xf1/0x1b0 [ 765.501661][T21498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 765.501688][T21498] sock_sendmsg_nosec+0x13a/0x180 [ 765.501724][T21498] ____sys_sendmsg+0x54e/0x850 [ 765.501757][T21498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 765.501795][T21498] ? import_iovec+0x73/0xa0 [ 765.501833][T21498] ___sys_sendmsg+0x2a5/0x360 [ 765.501865][T21498] ? __lock_acquire+0x683/0x2cf0 [ 765.501902][T21498] ? __pfx____sys_sendmsg+0x10/0x10 [ 765.501970][T21498] ? __fget_files+0x2a/0x420 [ 765.501999][T21498] ? __fget_files+0x3a2/0x420 [ 765.502041][T21498] __x64_sys_sendmsg+0x1b1/0x290 [ 765.502072][T21498] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 765.502119][T21498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.502144][T21498] do_syscall_64+0x174/0x580 [ 765.502170][T21498] ? trace_irq_disable+0x3b/0x140 [ 765.502200][T21498] ? clear_bhb_loop+0x40/0x90 [ 765.502228][T21498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.502251][T21498] RIP: 0033:0x7f1a0999de99 [ 765.502273][T21498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.502314][T21498] RSP: 002b:00007f1a0a801028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.502338][T21498] RAX: ffffffffffffffda RBX: 00007f1a09c25fa0 RCX: 00007f1a0999de99 [ 765.502355][T21498] RDX: 0000000004040814 RSI: 0000200000000000 RDI: 0000000000000004 [ 765.502371][T21498] RBP: 00007f1a0a801090 R08: 0000000000000000 R09: 0000000000000000 [ 765.502386][T21498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.502400][T21498] R13: 00007f1a09c26038 R14: 00007f1a09c25fa0 R15: 00007ffc275a3188 [ 765.502437][T21498] [ 766.020462][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 766.975316][T21540] FAULT_INJECTION: forcing a failure. [ 766.975316][T21540] name failslab, interval 1, probability 0, space 0, times 0 [ 767.025193][T21540] CPU: 0 UID: 0 PID: 21540 Comm: syz.4.3606 Not tainted syzkaller #0 PREEMPT(full) [ 767.025226][T21540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 767.025240][T21540] Call Trace: [ 767.025248][T21540] [ 767.025258][T21540] dump_stack_lvl+0xe8/0x150 [ 767.025297][T21540] should_fail_ex+0x40c/0x560 [ 767.025332][T21540] should_failslab+0xa8/0x100 [ 767.025369][T21540] __kmalloc_noprof+0xfe/0x720 [ 767.025402][T21540] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 767.025436][T21540] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 767.025479][T21540] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 767.025524][T21540] genl_family_rcv_msg_doit+0xda/0x340 [ 767.025565][T21540] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 767.025608][T21540] ? apparmor_capable+0x126/0x170 [ 767.025646][T21540] ? bpf_lsm_capable+0x9/0x20 [ 767.025676][T21540] ? security_capable+0x7e/0x2c0 [ 767.025707][T21540] genl_rcv_msg+0x614/0x7a0 [ 767.025755][T21540] ? __pfx_genl_rcv_msg+0x10/0x10 [ 767.025787][T21540] ? __pfx_ieee802154_llsec_add_dev+0x10/0x10 [ 767.025843][T21540] netlink_rcv_skb+0x226/0x4a0 [ 767.025870][T21540] ? __pfx_genl_rcv_msg+0x10/0x10 [ 767.025905][T21540] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 767.025951][T21540] ? down_read+0x2be/0x330 [ 767.025986][T21540] genl_rcv+0x28/0x40 [ 767.026015][T21540] netlink_unicast+0x7bb/0x940 [ 767.026053][T21540] netlink_sendmsg+0x813/0xb40 [ 767.026092][T21540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 767.026126][T21540] ? aa_sock_msg_perm+0xf1/0x1b0 [ 767.026157][T21540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 767.026184][T21540] sock_sendmsg_nosec+0x13a/0x180 [ 767.026221][T21540] ____sys_sendmsg+0x54e/0x850 [ 767.026255][T21540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 767.026292][T21540] ? import_iovec+0x73/0xa0 [ 767.026332][T21540] ___sys_sendmsg+0x2a5/0x360 [ 767.026357][T21540] ? __lock_acquire+0x683/0x2cf0 [ 767.026395][T21540] ? __pfx____sys_sendmsg+0x10/0x10 [ 767.026464][T21540] ? __fget_files+0x2a/0x420 [ 767.026495][T21540] ? __fget_files+0x3a2/0x420 [ 767.026539][T21540] __x64_sys_sendmsg+0x1b1/0x290 [ 767.026570][T21540] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 767.026616][T21540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.026641][T21540] do_syscall_64+0x174/0x580 [ 767.026668][T21540] ? trace_irq_disable+0x3b/0x140 [ 767.026698][T21540] ? clear_bhb_loop+0x40/0x90 [ 767.026726][T21540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.026759][T21540] RIP: 0033:0x7f3bb879de99 [ 767.026780][T21540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.026799][T21540] RSP: 002b:00007f3bb95db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 767.026823][T21540] RAX: ffffffffffffffda RBX: 00007f3bb8a25fa0 RCX: 00007f3bb879de99 [ 767.026839][T21540] RDX: 0000000004040814 RSI: 0000200000000000 RDI: 0000000000000004 [ 767.026854][T21540] RBP: 00007f3bb95db090 R08: 0000000000000000 R09: 0000000000000000 [ 767.026869][T21540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.026882][T21540] R13: 00007f3bb8a26038 R14: 00007f3bb8a25fa0 R15: 00007ffc5a2ea248 [ 767.026920][T21540] [ 767.198410][T21545] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 767.421361][T21558] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3609'. [ 767.522842][T21561] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3609'. [ 767.826628][T21580] netlink: 296 bytes leftover after parsing attributes in process `syz.4.3614'. [ 768.208843][T21585] netlink: 'syz.2.3616': attribute type 5 has an invalid length. [ 768.308843][T21591] tipc: Enabled bearer , priority 0 [ 768.523557][T21609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3619'. [ 768.624386][T21593] tipc: Disabling bearer [ 769.222313][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 769.291884][T21646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3627'. [ 769.620536][T21616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 769.786219][T14747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.848513][T14747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.023306][ T5628] Bluetooth: hci5: command 0x0406 tx timeout [ 770.137224][T21683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3638'. [ 770.235138][T21691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3637'. [ 770.284929][T21691] sctp: [Deprecated]: syz.1.3637 (pid 21691) Use of struct sctp_assoc_value in delayed_ack socket option. [ 770.284929][T21691] Use struct sctp_sack_info instead [ 770.345260][T21694] netlink: 'syz.4.3636': attribute type 21 has an invalid length. [ 770.367445][T21694] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3636'. [ 770.408502][T21700] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3636'. [ 770.598972][T21707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3641'. [ 770.604607][T21710] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3642'. [ 770.631078][T21710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3642'. [ 770.737095][T21707] hsr_slave_1 (unregistering): left promiscuous mode [ 770.999015][T21732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3646'. [ 771.035412][T21735] netlink: 'syz.2.3647': attribute type 6 has an invalid length. [ 771.058060][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3647'. [ 771.122875][T21737] netlink: 'syz.0.3646': attribute type 1 has an invalid length. [ 771.214798][T21736] veth5: entered promiscuous mode [ 771.394150][T21753] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 771.414850][T21730] veth5: left promiscuous mode [ 771.530703][T21753] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 771.835882][T21772] netlink: 'syz.1.3654': attribute type 4 has an invalid length. [ 771.908923][T21772] netlink: 'syz.1.3654': attribute type 1 has an invalid length. [ 772.271536][T21798] block nbd4: Unsupported socket: should be TCP or UNIX. [ 772.726090][T21819] netlink: 'syz.0.3664': attribute type 6 has an invalid length. [ 772.734355][T21819] netlink: 'syz.0.3664': attribute type 5 has an invalid length. [ 773.060581][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 773.908619][T21884] netlink: zone id is out of range [ 773.928879][T21884] netlink: zone id is out of range [ 773.955877][T21884] netlink: zone id is out of range [ 773.976063][T21884] netlink: zone id is out of range [ 773.983655][T21884] netlink: zone id is out of range [ 773.988957][T21884] netlink: zone id is out of range [ 773.998757][T21886] C: renamed from veth1_to_team (while UP) [ 774.009975][T21884] netlink: zone id is out of range [ 774.042762][T21884] netlink: zone id is out of range [ 774.063270][T21884] netlink: zone id is out of range [ 774.070542][T21886] netlink: 'syz.2.3678': attribute type 8 has an invalid length. [ 774.154239][T21892] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 774.433967][T21900] __nla_validate_parse: 10 callbacks suppressed [ 774.433993][T21900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3681'. [ 774.530906][T21899] syzkaller0: entered promiscuous mode [ 774.554103][T21899] syzkaller0: entered allmulticast mode [ 774.586470][T21900] netlink: 'syz.0.3681': attribute type 1 has an invalid length. [ 775.102746][T21921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3687'. [ 775.255446][T21921] pim6reg1: entered promiscuous mode [ 775.269009][T21921] pim6reg1: entered allmulticast mode [ 775.520975][T21945] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 775.549433][T21948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3687'. [ 775.685732][T21950] netlink: 'syz.0.3693': attribute type 13 has an invalid length. [ 776.368689][T21968] syzkaller0: entered promiscuous mode [ 776.387718][T21968] syzkaller0: entered allmulticast mode [ 776.458262][T21968] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.3695'. [ 776.489084][T21968] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3695'. [ 776.523740][T21968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3695'. [ 777.047813][T22003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3705'. [ 777.230781][T22011] net_ratelimit: 95 callbacks suppressed [ 777.230803][T22011] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 777.307218][T22013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3707'. [ 777.318015][T22013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 777.339683][T22013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 777.353244][T22013] batadv0 (unregistering): left promiscuous mode [ 777.697188][T22024] netlink: 'syz.0.3710': attribute type 21 has an invalid length. [ 777.739556][T22024] IPv6: NLM_F_CREATE should be specified when creating new route [ 777.769582][T22029] bridge0: port 3(macvtap1) entered blocking state [ 777.810028][T22029] bridge0: port 3(macvtap1) entered disabled state [ 777.841249][T22029] macvtap1: entered allmulticast mode [ 777.880667][T22029] macvtap1: left allmulticast mode [ 777.983603][T22041] macvlan0: entered promiscuous mode [ 778.030765][T22040] macvlan0: entered allmulticast mode [ 778.062742][T22040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3712'. [ 778.094940][T22040] macvlan0 (unregistering): left promiscuous mode [ 778.104982][T22040] macvlan0 (unregistering): left allmulticast mode [ 778.129074][T22042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3712'. [ 778.180354][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 778.820701][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 778.839491][T22079] netlink: 'syz.2.3719': attribute type 10 has an invalid length. [ 778.899590][T22079] syz_tun: entered promiscuous mode [ 779.600002][T22109] netlink: 'syz.2.3726': attribute type 1 has an invalid length. [ 779.619588][T22109] netlink: 'syz.2.3726': attribute type 6 has an invalid length. [ 779.643142][T22109] netlink: 'syz.2.3726': attribute type 3 has an invalid length. [ 779.857401][T22121] __nla_validate_parse: 1 callbacks suppressed [ 779.857423][T22121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3729'. [ 779.912754][T22121] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3729'. [ 780.601080][T22145] netlink: 'syz.4.3735': attribute type 1 has an invalid length. [ 780.725039][T22145] bond1: entered promiscuous mode [ 780.731044][T22145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 780.797956][T22151] syzkaller0: entered promiscuous mode [ 780.821066][T22151] syzkaller0: entered allmulticast mode [ 781.041337][T22164] netlink: 'syz.0.3739': attribute type 1 has an invalid length. [ 781.188242][T22163] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3739'. [ 781.224631][T22164] 8021q: adding VLAN 0 to HW filter on device bond2 [ 781.312444][T22163] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 781.673965][T22187] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 781.716550][T22191] x_tables: duplicate underflow at hook 2 [ 781.718145][T22189] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3746'. [ 781.754234][T22187] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3746'. [ 781.985854][T22200] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3748'. [ 782.390587][T22226] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3752'. [ 782.549851][ T5737] IPVS: starting estimator thread 0... [ 782.661386][T22238] IPVS: using max 25 ests per chain, 60000 per kthread [ 782.818213][T22251] 8021q: VLANs not supported on wg1 [ 783.438870][T22285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3767'. [ 783.491016][T22289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3768'. [ 783.539707][T22285] 8021q: adding VLAN 0 to HW filter on device bond2 [ 783.572165][T22290] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 783.582854][T22289] bond0: Caught tx_queue_len zero misconfig [ 783.662591][T22293] macvlan0: entered promiscuous mode [ 783.697807][T22293] netlink: 'syz.1.3769': attribute type 1 has an invalid length. [ 783.718031][T22293] netlink: 'syz.1.3769': attribute type 2 has an invalid length. [ 783.846550][T22298] netlink: 'syz.3.3770': attribute type 1 has an invalid length. [ 784.092519][T22327] netlink: 'syz.2.3774': attribute type 83 has an invalid length. [ 784.347700][T22339] tipc: Failed to remove unknown binding: 66,1,1/0:3721364026/3721364028 [ 784.369417][T22339] tipc: Failed to remove unknown binding: 66,1,1/0:3721364026/3721364028 [ 784.532847][T22344] netlink: 47 bytes leftover after parsing attributes in process `syz.0.3777'. [ 784.696312][T22346] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.727326][T22346] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.594176][T22396] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3787'. [ 785.894005][T22414] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3788'. [ 786.240996][T22398] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3788'. [ 786.622936][T22441] vlan2: left promiscuous mode [ 786.640825][T22441] hsr0: left promiscuous mode [ 786.707234][T22441] vlan2: left allmulticast mode [ 786.721218][T22441] hsr0: left allmulticast mode [ 786.726215][T22441] hsr_slave_0: left allmulticast mode [ 786.737169][T22441] hsr_slave_1: left allmulticast mode [ 787.244891][T22475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 787.448886][T22480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3803'. [ 787.545513][T22483] netlink: 'syz.3.3803': attribute type 1 has an invalid length. [ 787.767630][T22490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3804'. [ 787.804329][T22488] wlan0 speed is unknown, defaulting to 1000 [ 788.149238][T22500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3799'. [ 789.427192][T22536] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3812'. [ 789.563484][T22536] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 789.577208][T22536] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 789.588474][T22536] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 789.832454][T22546] netlink: 'syz.4.3815': attribute type 4 has an invalid length. [ 789.850883][T22543] netlink: 'syz.0.3814': attribute type 2 has an invalid length. [ 789.864039][T22546] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3815'. [ 789.956845][T22543] : entered promiscuous mode [ 790.856648][T22571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3819'. [ 791.029715][T22577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3821'. [ 791.070681][T22577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3821'. [ 791.462171][T22608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3827'. [ 791.506757][T22610] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3826'. [ 791.517998][T22610] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3826'. [ 791.666395][T22615] xt_ecn: cannot match TCP bits for non-tcp packets [ 791.685033][T22618] xt_ecn: cannot match TCP bits for non-tcp packets [ 792.031006][T22362] Set syz0 is full, maxelem 65536 reached [ 792.112286][T22637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3833'. [ 792.333256][T22647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3836'. [ 792.859781][T22672] netlink: 'syz.1.3839': attribute type 58 has an invalid length. [ 792.898075][T22674] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3840'. [ 792.917323][T22672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3839'. [ 793.253804][T22688] xt_policy: output policy not valid in PREROUTING and INPUT [ 793.596454][T22707] bridge0: port 3(vlan3) entered blocking state [ 793.620381][T22707] bridge0: port 3(vlan3) entered disabled state [ 793.642488][T22707] vlan3: entered allmulticast mode [ 793.668694][T22707] geneve0: entered allmulticast mode [ 793.681125][T22707] vlan3: entered promiscuous mode [ 793.686370][T22707] geneve0: entered promiscuous mode [ 793.923803][T22727] netlink: 'syz.2.3852': attribute type 1 has an invalid length. [ 794.003820][T22732] batadv0: entered promiscuous mode [ 794.028312][T22732] macsec1: entered promiscuous mode [ 794.041851][T22732] macsec1: entered allmulticast mode [ 794.058647][T22732] batadv0: entered allmulticast mode [ 794.076676][T22732] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 794.114899][T22732] batadv0: left allmulticast mode [ 794.135542][T22732] batadv0: left promiscuous mode [ 795.002616][T22785] syzkaller0: entered promiscuous mode [ 795.018477][T22785] syzkaller0: entered allmulticast mode [ 795.154748][T22763] ip6gre1: entered promiscuous mode [ 795.194094][T22763] ip6gre1: entered allmulticast mode [ 795.620904][ T5628] Bluetooth: hci4: command 0x0406 tx timeout [ 798.719694][T22884] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 798.927594][T22893] __nla_validate_parse: 12 callbacks suppressed [ 798.927615][T22893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3885'. [ 798.953476][T22898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3879'. [ 799.141386][T22884] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3879'. [ 799.437904][T22927] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 799.940511][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 800.449024][T22971] netlink: 'syz.3.3901': attribute type 1 has an invalid length. [ 800.468756][T22976] netlink: 'syz.2.3900': attribute type 1 has an invalid length. [ 800.482331][T22971] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3901'. [ 800.494788][T22978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3902'. [ 800.533075][T22971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'. [ 800.560247][T22971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3901'. [ 800.723989][T22976] 8021q: adding VLAN 0 to HW filter on device bond5 [ 800.842971][T22980] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 800.889662][T22971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'. [ 800.926494][T22998] netlink: 'syz.1.3904': attribute type 3 has an invalid length. [ 800.941764][ T8972] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.965927][T22971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3901'. [ 800.973443][ T8972] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.011904][ T8972] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.062375][ T8972] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.112960][T22998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3904'. [ 801.576474][ T5758] IPVS: starting estimator thread 0... [ 801.681661][T23026] IPVS: using max 28 ests per chain, 67200 per kthread [ 802.157129][T23051] IPv6: Can't replace route, no match found [ 802.425405][T23048] wlan0 speed is unknown, defaulting to 1000 [ 803.816437][T23126] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 803.936087][T23130] __nla_validate_parse: 4 callbacks suppressed [ 803.936110][T23130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3929'. [ 804.261062][T23141] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 804.289323][T23141] syzkaller0: linktype set to 0 [ 804.368608][T23148] netlink: 'syz.0.3934': attribute type 11 has an invalid length. [ 804.382522][T23148] netlink: 'syz.0.3934': attribute type 4 has an invalid length. [ 804.392098][T23148] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3934'. [ 804.432803][T23152] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3935'. [ 805.146778][T23178] sctp: [Deprecated]: syz.1.3942 (pid 23178) Use of int in max_burst socket option. [ 805.146778][T23178] Use struct sctp_assoc_value instead [ 805.363076][T23181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3943'. [ 805.417126][T23181] netlink: 'syz.4.3943': attribute type 1 has an invalid length. [ 805.477651][T23181] gretap2: entered allmulticast mode [ 806.690156][T23220] syzkaller0: entered promiscuous mode [ 806.725755][T23220] syzkaller0: entered allmulticast mode [ 806.762828][T23222] netlink: 'syz.0.3949': attribute type 1 has an invalid length. [ 807.523239][T23251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3955'. [ 808.449068][T23293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 808.449608][T23288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3965'. [ 808.487746][T23294] x_tables: duplicate underflow at hook 3 [ 808.547736][T23293] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3967'. [ 808.929363][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.213855][ T5628] Bluetooth: hci1: link tx timeout [ 809.223799][ T5628] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 809.246388][ T5628] Bluetooth: hci1: link tx timeout [ 809.257029][ T5628] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 809.272599][ T5628] Bluetooth: hci1: link tx timeout [ 809.279415][ T5628] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 809.287365][ T5628] Bluetooth: hci1: link tx timeout [ 809.293311][ T5628] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 809.601596][T23333] netlink: 'syz.0.3973': attribute type 1 has an invalid length. [ 809.721266][T23333] 8021q: adding VLAN 0 to HW filter on device bond3 [ 809.821108][T23338] vlan4: entered promiscuous mode [ 809.863157][T23338] bond3: entered promiscuous mode [ 809.888560][T23338] vlan4: entered allmulticast mode [ 809.919254][T23338] bond3: entered allmulticast mode [ 810.019371][T23341] bond3: (slave bridge4): making interface the new active one [ 810.048871][T23341] bridge4: entered promiscuous mode [ 810.062378][T23341] bridge4: entered allmulticast mode [ 810.091411][T23341] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 810.152610][T23350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3975'. [ 810.334816][T23356] netlink: 'syz.4.3976': attribute type 1 has an invalid length. [ 810.477990][T23356] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 810.560440][T23363] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 810.602739][T23363] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 810.722225][T23366] x_tables: unsorted entry at hook 2 [ 810.756491][T23366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.799829][T23366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.887425][T23368] tipc: Started in network mode [ 810.906289][T23368] tipc: Node identity , cluster identity 4711 [ 810.920379][T23368] tipc: Failed to obtain node identity [ 810.936698][T23368] tipc: Enabling of bearer rejected, failed to enable media [ 810.980720][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 811.042361][T23368] ipip1: entered promiscuous mode [ 811.052469][T19745] Bluetooth: hci1: link tx timeout [ 811.057768][T19745] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 811.066271][T19745] Bluetooth: hci1: link tx timeout [ 811.072141][T19745] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 811.301369][T19745] Bluetooth: hci1: command 0x0406 tx timeout [ 811.813816][T23405] wlan0 speed is unknown, defaulting to 1000 [ 812.460898][T23427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3992'. [ 812.513385][T23427] netlink: 15 bytes leftover after parsing attributes in process `syz.3.3992'. [ 812.711940][T23427] 8021q: adding VLAN 0 to HW filter on device bond1 [ 812.727016][T23417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3989'. [ 812.808299][T23407] netlink: 'syz.4.3988': attribute type 3 has an invalid length. [ 812.841963][T23407] netlink: 'syz.4.3988': attribute type 3 has an invalid length. [ 812.877962][T23437] ipt_REJECT: TCP_RESET invalid for non-tcp [ 813.381198][T19745] Bluetooth: hci1: command 0x0406 tx timeout [ 813.879197][T23484] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 3, id = 0 [ 813.914160][T23477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4002'. [ 813.947387][T23477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4002'. [ 813.997034][T23477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4002'. [ 814.030826][T23477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4002'. [ 814.051752][T23477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4002'. [ 814.088739][T23487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4003'. [ 814.127858][T23487] tipc: Invalid UDP bearer configuration [ 814.127913][T23487] tipc: Enabling of bearer rejected, failed to enable media [ 814.166233][T23489] ip6tnl0: entered allmulticast mode [ 815.034383][ T30] audit: type=1804 audit(1785244766.180:10): pid=23529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4011" name="/newroot/124/cgroup.controllers" dev="tmpfs" ino=656 res=1 errno=0 [ 815.084672][ T30] audit: type=1800 audit(1785244766.210:11): pid=23529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4011" name="cgroup.controllers" dev="tmpfs" ino=656 res=0 errno=0 [ 815.355118][T23556] tipc: Started in network mode [ 815.375116][T23556] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 815.394523][T23559] netlink: 'syz.3.4019': attribute type 1 has an invalid length. [ 815.448543][T23556] tipc: Enabled bearer , priority 10 [ 815.568361][T23559] bond2: entered promiscuous mode [ 815.580523][T23559] 8021q: adding VLAN 0 to HW filter on device bond2 [ 815.810546][T23570] 8021q: adding VLAN 0 to HW filter on device bond6 [ 815.898097][T23581] netlink: 'syz.3.4023': attribute type 1 has an invalid length. [ 816.062036][T23581] 8021q: adding VLAN 0 to HW filter on device bond3 [ 816.182584][T23596] sctp: [Deprecated]: syz.0.4026 (pid 23596) Use of int in maxseg socket option. [ 816.182584][T23596] Use struct sctp_assoc_value instead [ 816.214790][T23585] bond3: (slave gretap1): making interface the new active one [ 816.245526][T23585] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 816.322331][T23592] bond3 (unregistering): (slave gretap1): Releasing active interface [ 816.363818][T23592] bond3 (unregistering): Released all slaves [ 816.457636][ T5758] tipc: Node number set to 4269801492 [ 816.470757][T23604] team_slave_1: Caught tx_queue_len zero misconfig [ 816.697456][T23613] __nla_validate_parse: 5 callbacks suppressed [ 816.697476][T23613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4032'. [ 816.793796][T23613] netlink: zone id is out of range [ 816.808208][T23613] netlink: zone id is out of range [ 816.825963][T23613] netlink: zone id is out of range [ 816.851193][T23616] netlink: 'syz.3.4032': attribute type 1 has an invalid length. [ 816.858379][T23613] netlink: zone id is out of range [ 816.893446][T23613] netlink: zone id is out of range [ 816.894210][T23616] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4032'. [ 816.926203][T23613] netlink: zone id is out of range [ 816.964865][T23613] netlink: zone id is out of range [ 816.983939][T23625] netlink: 'syz.2.4033': attribute type 24 has an invalid length. [ 817.013447][T23623] netlink: 'syz.2.4033': attribute type 24 has an invalid length. [ 817.034223][T23613] netlink: zone id is out of range [ 817.046854][T23625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4033'. [ 817.066550][T23629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4031'. [ 817.082158][T23613] netlink: zone id is out of range [ 817.088953][T23623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4033'. [ 817.116579][T23613] netlink: zone id is out of range [ 817.123304][T23623] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 817.158781][T23625] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 817.392975][T23640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4036'. [ 817.434683][T23640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4036'. [ 817.452437][T23643] 8021q: adding VLAN 0 to HW filter on device bond3 [ 817.461466][T23640] netlink: 'syz.2.4036': attribute type 20 has an invalid length. [ 817.470001][T23640] netlink: 'syz.2.4036': attribute type 21 has an invalid length. [ 818.098708][ T30] audit: type=1804 audit(1785244769.240:12): pid=23674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4042" name="/newroot/180/memory.events" dev="tmpfs" ino=946 res=1 errno=0 [ 818.175057][ T30] audit: type=1800 audit(1785244769.240:13): pid=23674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4042" name="memory.events" dev="tmpfs" ino=946 res=0 errno=0 [ 818.244288][ T30] audit: type=1804 audit(1785244769.240:14): pid=23676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4042" name="/newroot/180/memory.events" dev="tmpfs" ino=946 res=1 errno=0 [ 818.675755][T23697] vlan5: entered promiscuous mode [ 818.762118][T23697] syz_tun: entered promiscuous mode [ 818.792504][T23697] vlan5: entered allmulticast mode [ 818.820816][T23697] syz_tun: entered allmulticast mode [ 819.180974][T23719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4052'. [ 819.713154][T23736] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 820.282406][T23761] wlan0 speed is unknown, defaulting to 1000 [ 820.319363][T23769] lo speed is unknown, defaulting to 1000 [ 820.372686][T23769] lo speed is unknown, defaulting to 1000 [ 820.501354][T23769] lo speed is unknown, defaulting to 1000 [ 820.545744][T23769] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 820.581224][T23776] sit0: entered promiscuous mode [ 820.597787][T23776] netlink: 'syz.2.4064': attribute type 1 has an invalid length. [ 820.613107][T23769] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 820.633054][T23776] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4064'. [ 820.654778][T23769] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 820.723235][T23769] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 820.735491][T23779] gre0: entered promiscuous mode [ 820.766471][T23773] wlan0 speed is unknown, defaulting to 1000 [ 820.842363][T23773] lo speed is unknown, defaulting to 1000 [ 820.857615][T23769] lo speed is unknown, defaulting to 1000 [ 820.942851][T23769] lo speed is unknown, defaulting to 1000 [ 820.976562][T23785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4065'. [ 820.994392][T23769] lo speed is unknown, defaulting to 1000 [ 821.008611][T23785] netlink: 'syz.2.4065': attribute type 2 has an invalid length. [ 821.048067][T23769] lo speed is unknown, defaulting to 1000 [ 821.136933][T23769] lo speed is unknown, defaulting to 1000 [ 821.171987][T23769] lo speed is unknown, defaulting to 1000 [ 821.388215][T23769] lo speed is unknown, defaulting to 1000 [ 821.402691][T23769] lo speed is unknown, defaulting to 1000 [ 821.416767][T23769] lo speed is unknown, defaulting to 1000 [ 821.854811][T23808] syzkaller0: entered promiscuous mode [ 821.870299][T23808] syzkaller0: entered allmulticast mode [ 822.529573][T23829] net_ratelimit: 5 callbacks suppressed [ 822.529595][T23829] netlink: del zone limit has 8 unknown bytes [ 822.656645][T23831] tipc: Enabling of bearer rejected, failed to enable media [ 822.771689][T23834] netlink: 'syz.2.4075': attribute type 2 has an invalid length. [ 822.801862][T23835] netlink: 'syz.2.4075': attribute type 2 has an invalid length. [ 822.853581][T23841] netlink: 'syz.2.4075': attribute type 2 has an invalid length. [ 822.854338][T23834] netlink: 'syz.2.4075': attribute type 2 has an invalid length. [ 822.865573][T23838] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4076'. [ 822.900489][T23841] netlink: 67 bytes leftover after parsing attributes in process `syz.2.4075'. [ 822.940994][T23844] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 822.964612][T23834] netlink: 67 bytes leftover after parsing attributes in process `syz.2.4075'. [ 822.999048][T23849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4079'. [ 823.804085][T23894] bridge_slave_0: left allmulticast mode [ 823.845344][T23894] bridge_slave_0: left promiscuous mode [ 823.871629][T23894] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.926311][T23894] bridge_slave_1: left allmulticast mode [ 823.942492][T23894] bridge_slave_1: left promiscuous mode [ 823.960313][T23894] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.993149][T23911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4092'. [ 824.137998][T23894] bond0: (slave bond_slave_0): Releasing backup interface [ 824.188052][T23894] bond0: (slave bond_slave_1): Releasing backup interface [ 824.252360][T23894] team0: Port device team_slave_0 removed [ 824.326868][T23894] team0: Port device team_slave_1 removed [ 824.365933][T23894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.407776][T23894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.436865][T23894] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 824.462782][ T5745] lo speed is unknown, defaulting to 1000 [ 824.575257][T23908] team0: Port device xfrm0 added [ 824.969486][T23933] netlink: 'syz.4.4095': attribute type 13 has an invalid length. [ 825.009768][T23933] netlink: 'syz.4.4095': attribute type 12 has an invalid length. [ 825.023910][T23935] tipc: New replicast peer: 255.255.255.255 [ 825.045860][T23935] tipc: Enabled bearer , priority 10 [ 825.415866][T23953] netlink: 'syz.0.4099': attribute type 17 has an invalid length. [ 825.769519][T23961] netlink: 768 bytes leftover after parsing attributes in process `syz.3.4101'. [ 825.799885][T23961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4101'. [ 825.864036][T23966] netlink: 'syz.2.4102': attribute type 3 has an invalid length. [ 826.160734][ T6860] tipc: Node number set to 446950844 [ 826.182300][T23975] netlink: 'syz.2.4104': attribute type 21 has an invalid length. [ 826.207436][T23975] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4104'. [ 826.236203][T23975] netlink: 'syz.2.4104': attribute type 5 has an invalid length. [ 826.278360][T23975] netlink: 'syz.2.4104': attribute type 6 has an invalid length. [ 826.333355][T23975] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4104'. [ 826.892330][T24006] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4109'. [ 826.967076][T24003] syzkaller0: entered promiscuous mode [ 826.997398][T24003] syzkaller0: entered allmulticast mode [ 829.380382][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 830.950102][T23986] wlan0 speed is unknown, defaulting to 1000 [ 831.005741][T24012] tunl0: Caught tx_queue_len zero misconfig [ 831.023014][T23986] lo speed is unknown, defaulting to 1000 [ 831.340397][T24064] x_tables: duplicate underflow at hook 1 [ 831.376259][T24061] batman_adv: batadv0: Adding interface: dummy0 [ 831.404031][T24061] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.468671][T17922] Bluetooth: hci3: command 0x0406 tx timeout [ 831.501475][T24061] batman_adv: batadv0: Interface activated: dummy0 [ 831.578852][T24074] __nla_validate_parse: 1 callbacks suppressed [ 831.578871][T24074] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4121'. [ 831.766995][T24078] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4122'. [ 831.804481][T24079] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 831.831792][T24084] netlink: 'syz.1.4124': attribute type 1 has an invalid length. [ 831.863183][T24084] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4124'. [ 831.893169][T24084] netlink: 'syz.1.4124': attribute type 1 has an invalid length. [ 831.927793][T24088] netlink: 64467 bytes leftover after parsing attributes in process `syz.1.4124'. [ 831.962749][T24079] vlan4: left promiscuous mode [ 832.016930][T24079] bond3: left promiscuous mode [ 832.046737][T24096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4126'. [ 832.057045][T24079] bridge4: left promiscuous mode [ 832.088299][T24079] vlan4: left allmulticast mode [ 832.104001][T24096] netlink: 'syz.2.4126': attribute type 5 has an invalid length. [ 832.120982][T24100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4126'. [ 832.145017][T24079] bond3: left allmulticast mode [ 832.173910][T24096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4126'. [ 832.184608][T24079] bridge4: left allmulticast mode [ 832.225203][T24100] netlink: 'syz.2.4126': attribute type 2 has an invalid length. [ 832.238620][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4126'. [ 832.346955][T24096] geneve2: entered promiscuous mode [ 832.371246][T24096] geneve2: entered allmulticast mode [ 832.419638][ T8947] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 56507 - 0 [ 832.456655][T24119] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4130'. [ 832.467921][ T8947] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 56507 - 0 [ 832.521614][T24101] netlink: 'syz.2.4126': attribute type 2 has an invalid length. [ 832.541325][ T8947] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 56507 - 0 [ 832.571008][ T8947] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 56507 - 0 [ 832.859607][T24129] netlink: 'syz.2.4132': attribute type 15 has an invalid length. [ 833.410791][T24155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4138'. [ 833.432641][T24155] netlink: 'syz.0.4138': attribute type 30 has an invalid length. [ 833.455309][T24158] netlink: 'syz.2.4139': attribute type 30 has an invalid length. [ 833.519347][T24155] vxlan0: entered promiscuous mode [ 833.556378][T24155] vxlan0: entered allmulticast mode [ 833.612252][ T8947] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.639620][ T8947] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.659434][T24172] IPv6: NLM_F_CREATE should be specified when creating new route [ 833.786058][ T8947] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.811646][ T8947] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.929200][ T30] audit: type=1804 audit(1785244785.070:15): pid=24105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4128" name="/newroot/140/cgroup.controllers" dev="tmpfs" ino=740 res=1 errno=0 [ 833.984308][ T30] audit: type=1800 audit(1785244785.100:16): pid=24105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4128" name="cgroup.controllers" dev="tmpfs" ino=740 res=0 errno=0 [ 834.233272][T24191] netlink: 'syz.3.4144': attribute type 1 has an invalid length. [ 834.361836][T24191] 8021q: adding VLAN 0 to HW filter on device bond4 [ 834.507605][T24197] bond4: (slave geneve2): making interface the new active one [ 834.559001][T24197] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 835.071412][T24231] netlink: 'syz.2.4154': attribute type 1 has an invalid length. [ 835.257782][T24231] 8021q: adding VLAN 0 to HW filter on device bond7 [ 835.371396][T24238] bond0: mtu less than device minimum [ 835.603963][T24263] veth0_to_team: entered promiscuous mode [ 835.614766][T19745] block nbd0: Receive control failed (result -107) [ 835.625079][T24258] block nbd0: reconnected socket [ 835.640708][T24263] veth0_to_team: left promiscuous mode [ 835.833242][T24278] tipc: Started in network mode [ 835.838298][T24278] tipc: Node identity 6e4eaefc9181, cluster identity 4711 [ 835.846747][T24278] tipc: Enabled bearer , priority 0 [ 835.874289][T24279] syzkaller0: entered promiscuous mode [ 835.895722][T24279] syzkaller0: entered allmulticast mode [ 836.112669][T24278] tipc: Resetting bearer [ 836.186756][T24278] tipc: Disabling bearer [ 836.363372][T24289] 8021q: adding VLAN 0 to HW filter on device bond2 [ 836.483510][T24311] IPv6: Can't replace route, no match found [ 836.513516][T24308] gretap2: entered allmulticast mode [ 836.857782][T24328] __nla_validate_parse: 3 callbacks suppressed [ 836.857802][T24328] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4175'. [ 836.890788][T24328] 0ªX¹¦À: renamed from batadv0 (while UP) [ 836.959612][T24323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4174'. [ 837.276009][T24328] 0ªX¹¦À: entered allmulticast mode [ 837.318354][T24328] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 838.034408][T24372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4183'. [ 838.526176][T24389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4186'. [ 838.683233][T24375] syzkaller1: entered promiscuous mode [ 838.695402][T24375] syzkaller1: entered allmulticast mode [ 839.046392][T24407] validate_nla: 2 callbacks suppressed [ 839.046413][T24407] netlink: 'syz.1.4190': attribute type 33 has an invalid length. [ 839.097442][T24407] netlink: 'syz.1.4190': attribute type 33 has an invalid length. [ 839.123367][T24407] netlink: 'syz.1.4190': attribute type 33 has an invalid length. [ 839.153309][T24407] netlink: 'syz.1.4190': attribute type 33 has an invalid length. [ 839.249929][T24407] netlink: 'syz.1.4190': attribute type 33 has an invalid length. [ 839.268503][T24407] netlink: 'syz.1.4190': attribute type 33 has an invalid length. [ 839.288390][T24407] netlink: 'syz.1.4190': attribute type 33 has an invalid length. [ 839.306024][T24407] netlink: 'syz.1.4190': attribute type 33 has an invalid length. [ 839.334204][T24407] netlink: 'syz.1.4190': attribute type 33 has an invalid length. [ 839.358615][T24407] netlink: 'syz.1.4190': attribute type 33 has an invalid length. [ 839.593715][T24422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4194'. [ 839.608118][T24422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4194'. [ 840.059992][T24432] gre0: entered allmulticast mode [ 840.197244][T24432] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 840.553200][T24454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4202'. [ 840.766454][T24464] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4203'. [ 840.956243][T24464] [ 840.958629][T24464] ====================================================== [ 840.965687][T24464] WARNING: possible circular locking dependency detected [ 840.972855][T24464] syzkaller #0 Not tainted [ 840.977302][T24464] ------------------------------------------------------ [ 840.984331][T24464] syz.3.4203/24464 is trying to acquire lock: [ 840.990432][T24464] ffff88802078d898 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 840.999398][T24464] [ 840.999398][T24464] but task is already holding lock: [ 841.006829][T24464] ffff888029cc3418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 841.016362][T24464] [ 841.016362][T24464] which lock already depends on the new lock. [ 841.016362][T24464] [ 841.026783][T24464] [ 841.026783][T24464] the existing dependency chain (in reverse order) is: [ 841.035848][T24464] [ 841.035848][T24464] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 841.043690][T24464] __mutex_lock+0x19d/0x1550 [ 841.048825][T24464] elevator_change+0x1af/0x480 [ 841.054137][T24464] elevator_set_none+0xb5/0x140 [ 841.059530][T24464] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 841.066006][T24464] nbd_start_device+0x189/0xb30 [ 841.071484][T24464] nbd_genl_connect+0x1597/0x1c10 [ 841.077062][T24464] genl_family_rcv_msg_doit+0x233/0x340 [ 841.083166][T24464] genl_rcv_msg+0x614/0x7a0 [ 841.088226][T24464] netlink_rcv_skb+0x226/0x4a0 [ 841.093537][T24464] genl_rcv+0x28/0x40 [ 841.098064][T24464] netlink_unicast+0x7bb/0x940 [ 841.103382][T24464] netlink_sendmsg+0x813/0xb40 [ 841.108714][T24464] sock_sendmsg_nosec+0x13a/0x180 [ 841.114303][T24464] ____sys_sendmsg+0x54e/0x850 [ 841.119623][T24464] ___sys_sendmsg+0x2a5/0x360 [ 841.124848][T24464] __x64_sys_sendmsg+0x1b1/0x290 [ 841.130333][T24464] do_syscall_64+0x174/0x580 [ 841.135477][T24464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.141914][T24464] [ 841.141914][T24464] -> #5 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 841.150585][T24464] blk_alloc_queue+0x544/0x690 [ 841.155981][T24464] __blk_mq_alloc_disk+0x194/0x390 [ 841.161720][T24464] nbd_dev_add+0x494/0xb60 [ 841.166675][T24464] nbd_init+0x15f/0x1e0 [ 841.171372][T24464] do_one_initcall+0x250/0x870 [ 841.176685][T24464] do_initcall_level+0x10a/0x1a0 [ 841.182162][T24464] do_initcalls+0x59/0xa0 [ 841.187032][T24464] kernel_init_freeable+0x29d/0x3e0 [ 841.193078][T24464] kernel_init+0x1d/0x1d0 [ 841.197979][T24464] ret_from_fork+0x514/0xb70 [ 841.203125][T24464] ret_from_fork_asm+0x1a/0x30 [ 841.208463][T24464] [ 841.208463][T24464] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 841.215801][T24464] fs_reclaim_acquire+0x71/0x100 [ 841.221393][T24464] __kmalloc_cache_node_noprof+0x66/0x630 [ 841.227664][T24464] create_worker+0x112/0x7b0 [ 841.232787][T24464] workqueue_prepare_cpu+0xe4/0x170 [ 841.238525][T24464] cpuhp_invoke_callback+0x434/0x810 [ 841.244365][T24464] _cpu_up+0x2ce/0x5b0 [ 841.249002][T24464] cpu_up+0x1d2/0x220 [ 841.253537][T24464] cpuhp_bringup_mask+0xb2/0x1a0 [ 841.259026][T24464] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 841.265412][T24464] bringup_nonboot_cpus+0x17/0x30 [ 841.270996][T24464] smp_init+0x32/0x110 [ 841.275619][T24464] kernel_init_freeable+0x27f/0x3e0 [ 841.281373][T24464] kernel_init+0x1d/0x1d0 [ 841.286254][T24464] ret_from_fork+0x514/0xb70 [ 841.291391][T24464] ret_from_fork_asm+0x1a/0x30 [ 841.296700][T24464] [ 841.296700][T24464] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 841.304473][T24464] cpus_read_lock+0x42/0x160 [ 841.309624][T24464] static_key_slow_inc+0x12/0x30 [ 841.315125][T24464] nbd_genl_reconfigure+0x1301/0x1e80 [ 841.321049][T24464] genl_family_rcv_msg_doit+0x233/0x340 [ 841.327160][T24464] genl_rcv_msg+0x614/0x7a0 [ 841.332240][T24464] netlink_rcv_skb+0x226/0x4a0 [ 841.337560][T24464] genl_rcv+0x28/0x40 [ 841.342097][T24464] netlink_unicast+0x7bb/0x940 [ 841.347408][T24464] netlink_sendmsg+0x813/0xb40 [ 841.352719][T24464] sock_sendmsg_nosec+0x13a/0x180 [ 841.358293][T24464] ____sys_sendmsg+0x54e/0x850 [ 841.363598][T24464] ___sys_sendmsg+0x2a5/0x360 [ 841.368813][T24464] __x64_sys_sendmsg+0x1b1/0x290 [ 841.374296][T24464] do_syscall_64+0x174/0x580 [ 841.379430][T24464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.385868][T24464] [ 841.385868][T24464] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 841.393548][T24464] __mutex_lock+0x19d/0x1550 [ 841.398709][T24464] nbd_queue_rq+0x373/0x1150 [ 841.403840][T24464] blk_mq_dispatch_rq_list+0x499/0x1990 [ 841.410021][T24464] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 841.416922][T24464] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 841.423458][T24464] blk_mq_run_work_fn+0x16c/0x300 [ 841.429036][T24464] process_scheduled_works+0xa8e/0x14e0 [ 841.435145][T24464] worker_thread+0xa47/0xfb0 [ 841.440378][T24464] kthread+0x388/0x470 [ 841.445027][T24464] ret_from_fork+0x514/0xb70 [ 841.450211][T24464] ret_from_fork_asm+0x1a/0x30 [ 841.455546][T24464] [ 841.455546][T24464] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 841.462796][T24464] __mutex_lock+0x19d/0x1550 [ 841.467936][T24464] nbd_queue_rq+0xc1/0x1150 [ 841.473067][T24464] blk_mq_dispatch_rq_list+0x499/0x1990 [ 841.479165][T24464] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 841.486050][T24464] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 841.492584][T24464] blk_mq_run_work_fn+0x16c/0x300 [ 841.498162][T24464] process_scheduled_works+0xa8e/0x14e0 [ 841.504255][T24464] worker_thread+0xa47/0xfb0 [ 841.509411][T24464] kthread+0x388/0x470 [ 841.514031][T24464] ret_from_fork+0x514/0xb70 [ 841.519177][T24464] ret_from_fork_asm+0x1a/0x30 [ 841.524483][T24464] [ 841.524483][T24464] -> #0 (set->srcu){.+.+}-{0:0}: [ 841.531637][T24464] __lock_acquire+0x1520/0x2cf0 [ 841.537055][T24464] lock_sync+0x9d/0x120 [ 841.541767][T24464] __synchronize_srcu+0xc9/0x2f0 [ 841.547264][T24464] elevator_switch+0x1e8/0x7b0 [ 841.552577][T24464] elevator_change+0x2fa/0x480 [ 841.557890][T24464] elevator_set_default+0x375/0x440 [ 841.564157][T24464] blk_register_queue+0x3f3/0x4e0 [ 841.569721][T24464] __add_disk+0x6cb/0xe30 [ 841.574673][T24464] add_disk_fwnode+0x100/0x3a0 [ 841.579988][T24464] nbd_dev_add+0x733/0xb60 [ 841.584963][T24464] nbd_genl_connect+0x992/0x1c10 [ 841.590455][T24464] genl_family_rcv_msg_doit+0x233/0x340 [ 841.596600][T24464] genl_rcv_msg+0x614/0x7a0 [ 841.601663][T24464] netlink_rcv_skb+0x226/0x4a0 [ 841.606973][T24464] genl_rcv+0x28/0x40 [ 841.611688][T24464] netlink_unicast+0x7bb/0x940 [ 841.616994][T24464] netlink_sendmsg+0x813/0xb40 [ 841.622317][T24464] sock_sendmsg_nosec+0x13a/0x180 [ 841.627890][T24464] ____sys_sendmsg+0x54e/0x850 [ 841.633203][T24464] ___sys_sendmsg+0x2a5/0x360 [ 841.638429][T24464] __x64_sys_sendmsg+0x1b1/0x290 [ 841.643912][T24464] do_syscall_64+0x174/0x580 [ 841.649048][T24464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.655483][T24464] [ 841.655483][T24464] other info that might help us debug this: [ 841.655483][T24464] [ 841.665729][T24464] Chain exists of: [ 841.665729][T24464] set->srcu --> &q->q_usage_counter(io)#51 --> &q->elevator_lock [ 841.665729][T24464] [ 841.679501][T24464] Possible unsafe locking scenario: [ 841.679501][T24464] [ 841.686977][T24464] CPU0 CPU1 [ 841.692358][T24464] ---- ---- [ 841.697826][T24464] lock(&q->elevator_lock); [ 841.702542][T24464] lock(&q->q_usage_counter(io)#51); [ 841.710470][T24464] lock(&q->elevator_lock); [ 841.717619][T24464] sync(set->srcu); [ 841.721546][T24464] [ 841.721546][T24464] *** DEADLOCK *** [ 841.721546][T24464] [ 841.729723][T24464] 6 locks held by syz.3.4203/24464: [ 841.734953][T24464] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 841.743185][T24464] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 841.752188][T24464] #2: ffff88802b39a9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 841.762574][T24464] #3: ffff888029cc34a0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 841.772437][T24464] #4: ffff888029cc2f28 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 841.783367][T24464] #5: ffff888029cc3418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 841.793246][T24464] [ 841.793246][T24464] stack backtrace: [ 841.799163][T24464] CPU: 0 UID: 0 PID: 24464 Comm: syz.3.4203 Not tainted syzkaller #0 PREEMPT(full) [ 841.799191][T24464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 841.799203][T24464] Call Trace: [ 841.799211][T24464] [ 841.799220][T24464] dump_stack_lvl+0xe8/0x150 [ 841.799252][T24464] print_circular_bug+0x2e1/0x300 [ 841.799274][T24464] check_noncircular+0x12e/0x150 [ 841.799296][T24464] __lock_acquire+0x1520/0x2cf0 [ 841.799323][T24464] ? check_noncircular+0xda/0x150 [ 841.799346][T24464] ? lockdep_unlock+0x5d/0xd0 [ 841.799368][T24464] ? __lock_acquire+0x13e8/0x2cf0 [ 841.799395][T24464] ? __lock_acquire+0x13e8/0x2cf0 [ 841.799421][T24464] ? __synchronize_srcu+0xb5/0x2f0 [ 841.799446][T24464] lock_sync+0x9d/0x120 [ 841.799470][T24464] ? __synchronize_srcu+0xb5/0x2f0 [ 841.799499][T24464] __synchronize_srcu+0xc9/0x2f0 [ 841.799531][T24464] ? __pfx___synchronize_srcu+0x10/0x10 [ 841.799556][T24464] ? do_raw_spin_lock+0x12b/0x2f0 [ 841.799582][T24464] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 841.799602][T24464] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 841.799628][T24464] ? synchronize_srcu+0x20a/0x260 [ 841.799654][T24464] elevator_switch+0x1e8/0x7b0 [ 841.799680][T24464] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 841.799700][T24464] elevator_change+0x2fa/0x480 [ 841.799725][T24464] ? do_raw_spin_unlock+0xf5/0x210 [ 841.799748][T24464] elevator_set_default+0x375/0x440 [ 841.799775][T24464] ? __pfx_elevator_set_default+0x10/0x10 [ 841.799806][T24464] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 841.799901][T24464] ? blk_crypto_sysfs_register+0x11c/0x170 [ 841.799972][T24464] blk_register_queue+0x3f3/0x4e0 [ 841.799993][T24464] __add_disk+0x6cb/0xe30 [ 841.800017][T24464] add_disk_fwnode+0x100/0x3a0 [ 841.800043][T24464] nbd_dev_add+0x733/0xb60 [ 841.800066][T24464] ? __pfx_nbd_dev_add+0x10/0x10 [ 841.800097][T24464] ? bpf_lsm_capable+0x9/0x20 [ 841.800128][T24464] ? security_capable+0x7e/0x2c0 [ 841.800153][T24464] ? radix_tree_lookup+0x25c/0x290 [ 841.800207][T24464] nbd_genl_connect+0x992/0x1c10 [ 841.800235][T24464] ? __pfx_nbd_genl_connect+0x10/0x10 [ 841.800258][T24464] ? rcu_is_watching+0x15/0xb0 [ 841.800279][T24464] ? trace_kmalloc+0x2a/0xf0 [ 841.800309][T24464] ? __kmalloc_noprof+0x396/0x720 [ 841.800340][T24464] ? __nla_parse+0x40/0x60 [ 841.800374][T24464] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 841.800410][T24464] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 841.800444][T24464] genl_family_rcv_msg_doit+0x233/0x340 [ 841.800476][T24464] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 841.800508][T24464] ? __lock_acquire+0x683/0x2cf0 [ 841.800546][T24464] genl_rcv_msg+0x614/0x7a0 [ 841.800576][T24464] ? __pfx_genl_rcv_msg+0x10/0x10 [ 841.800603][T24464] ? __pfx_nbd_genl_connect+0x10/0x10 [ 841.800627][T24464] netlink_rcv_skb+0x226/0x4a0 [ 841.800649][T24464] ? __pfx_genl_rcv_msg+0x10/0x10 [ 841.800676][T24464] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 841.800704][T24464] ? down_read+0x2be/0x330 [ 841.800731][T24464] genl_rcv+0x28/0x40 [ 841.800756][T24464] netlink_unicast+0x7bb/0x940 [ 841.800781][T24464] netlink_sendmsg+0x813/0xb40 [ 841.800807][T24464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 841.800831][T24464] ? aa_sock_msg_perm+0xf1/0x1b0 [ 841.800853][T24464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 841.800876][T24464] sock_sendmsg_nosec+0x13a/0x180 [ 841.800904][T24464] ____sys_sendmsg+0x54e/0x850 [ 841.800929][T24464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 841.800954][T24464] ? import_iovec+0x73/0xa0 [ 841.800983][T24464] ___sys_sendmsg+0x2a5/0x360 [ 841.801004][T24464] ? __lock_acquire+0x683/0x2cf0 [ 841.801032][T24464] ? __pfx____sys_sendmsg+0x10/0x10 [ 841.801056][T24464] ? futex_wake+0x51b/0x5f0 [ 841.801090][T24464] ? __fget_files+0x2a/0x420 [ 841.801116][T24464] ? __fget_files+0x3a2/0x420 [ 841.801146][T24464] __x64_sys_sendmsg+0x1b1/0x290 [ 841.801168][T24464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 841.801197][T24464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.801217][T24464] do_syscall_64+0x174/0x580 [ 841.801239][T24464] ? trace_irq_disable+0x3b/0x140 [ 841.801264][T24464] ? clear_bhb_loop+0x40/0x90 [ 841.801285][T24464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.801303][T24464] RIP: 0033:0x7f1e5279de99 [ 841.801322][T24464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.801339][T24464] RSP: 002b:00007f1e53686028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.801359][T24464] RAX: ffffffffffffffda RBX: 00007f1e52a26180 RCX: 00007f1e5279de99 [ 841.801373][T24464] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 841.801386][T24464] RBP: 00007f1e52833eaf R08: 0000000000000000 R09: 0000000000000000 [ 841.801398][T24464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.801410][T24464] R13: 00007f1e52a26218 R14: 00007f1e52a26180 R15: 00007ffda590a1e8 [ 841.801432][T24464] [ 842.451355][T24072] udevd[24072]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 842.501186][ T6854] lo speed is unknown, defaulting to 1000 [ 842.507114][ T6854] syz2: Port: 1 Link DOWN [ 842.528232][T24454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4202'. [ 842.551599][T24381] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.571287][T24381] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.584309][T24381] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.594051][T24381] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.603106][T24381] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.612287][T24381] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.621274][T24381] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.634092][T24381] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.861132][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!