last executing test programs: 5.217356833s ago: executing program 0 (id=4884): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000006, 0x42073, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002000732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x22020600) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000032c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000400)={r3, &(0x7f00000001c0)='-#,%-!]\x00', 0x2a2103, &(0x7f0000000300)={@_ha_fsid={[0x9, 0x9]}, {0x0, 0x81, 0x2}}, 0x4, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0xfffffffe, 0x8, 0x5}, 0x50) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000580)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r5, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffc, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140036268000001000d5010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) 4.670959886s ago: executing program 0 (id=4894): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x401, 0x9bc, 0x0, 0x1}, 0xfffffeef) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="e0000000120001ff"], 0xe0}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sendto(r1, &(0x7f00000004c0)="41c4c983803d2298b620959258ec8c9c044e41a144b7e27e25792743222e0b0cd620109c0c1cf9b17d95a36933948bae65215eec959bfad59ea1edb74276", 0x3e, 0x4014, &(0x7f0000000500)=@in={0x2, 0x4e22, @private=0xa010102}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000001bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001c00)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB='\x00'], 0x1198}, 0x1, 0x0, 0x0, 0x40000}, 0x42880) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = getpid() write$cgroup_pid(r3, &(0x7f0000000180)=r4, 0x12) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000b00)="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", 0xffffffffffffff63) accept4(r1, 0x0, 0x0, 0x80800) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0xfffd, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x40) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000380)={0x2, 0x6e22, @multicast1}, 0x10) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r8 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=r4, @ANYRESOCT=r0, @ANYRES32, @ANYRES64=r7, @ANYRES16=r8], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x8, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}}}, 0x108) 2.586434872s ago: executing program 0 (id=4905): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000080)={'bond0\x00', 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x9, 0x6, 0x402, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x80}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x50}}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x1024}}, 0x20040841) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000b4b2000000000000000000008510000001000000950000000000000085000000ad00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x2a, &(0x7f0000001300)=""/156, 0x41000, 0xa}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000080)={'bond0\x00', 0x0}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x9, 0x6, 0x402, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x80}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x50}}, 0x0) (async) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x1024}}, 0x20040841) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000b4b2000000000000000000008510000001000000950000000000000085000000ad00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x2a, &(0x7f0000001300)=""/156, 0x41000, 0xa}, 0x94) (async) 2.29758811s ago: executing program 0 (id=4912): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) r1 = socket(0x400000000010, 0x3, 0x0) socket$inet(0x2, 0x0, 0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delqdisc={0x98, 0x25, 0x20, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xa, 0x1}, {0x5, 0xffff}, {0xf, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x7ff}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff3}, @TCA_RATE={0x6, 0x5, {0xe, 0x3}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x101}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @TCA_EGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8001}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xe00}]}, 0x98}, 0x1, 0x0, 0x0, 0x20041091}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000080)=0x2) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000100", @ANYRES16=r6, @ANYBLOB="01002fbd7040fbdbdf250f00000008000300", @ANYRES32=r7, @ANYBLOB="05002f0000000000"], 0x24}}, 0x8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9ed}]}, 0x24}}, 0x20040080) socket$inet6_tcp(0xa, 0x1, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="e600001000"/20, @ANYRES32=0x0, @ANYBLOB="20020000004000002400128009000100766c616e00000000140002800400038004000480060001000800000008000500", @ANYRES32=r10, @ANYBLOB], 0x4c}}, 0x20000090) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xb, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000013c0)=0xc7f) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) 1.502626563s ago: executing program 2 (id=4929): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback={0x1000000}, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0x6, 0xfa}, 0x9c) 1.288845392s ago: executing program 3 (id=4932): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x401, 0x9bc, 0x0, 0x1}, 0xfffffeef) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="e0000000120001ff"], 0xe0}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sendto(r1, &(0x7f00000004c0)="41c4c983803d2298b620959258ec8c9c044e41a144b7e27e25792743222e0b0cd620109c0c1cf9b17d95a36933948bae65215eec959bfad59ea1edb74276", 0x3e, 0x4014, &(0x7f0000000500)=@in={0x2, 0x4e22, @private=0xa010102}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000001bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001c00)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB='\x00'], 0x1198}, 0x1, 0x0, 0x0, 0x40000}, 0x42880) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = getpid() r5 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000b00)="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", 0xffffffffffffff63) accept4(r1, 0x0, 0x0, 0x80800) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0xfffd, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x40) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000380)={0x2, 0x6e22, @multicast1}, 0x10) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r9 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=r4, @ANYRESOCT=r0, @ANYRES32, @ANYRES64=r8, @ANYRES16=r9], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x8, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}}}, 0x108) 1.288466154s ago: executing program 2 (id=4933): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pK \x00'}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000140)="00ad262c6a942519b1575e8537ba2b3b4dda46e2788aaf27b19b7770ad6337049a9dd87040f52b2d765f89263fd79e5237f6e1319e9578c8b877ed19c270504027f905f227e3dd3faef89542e7e4c0a337cf7604ea994156b394429a5aa1252e4488eaf14283c164570bdbeb2f2064c2139187caf414074fcb19a9423f7b4549b31066db9d1efe09ef76ccd2c7fd9943c84711b38df525eaed6f2af21ed0daa738cca2940374cd9cd1a922", &(0x7f0000000240)=@tcp6=r2, 0x4}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)="7009b7101a", 0x0, 0x4, 0xffffffffffffffff, 0x4}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r5, &(0x7f00000001c0), 0x0}, 0x20) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000340)={0x5, 0xfdf, 0x1, 0x0, 0x7, 0xc9, 0xe53}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0x6, 0xfa}, 0x9c) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000bc0)={0xb, 0x2, {0x2, @struct={0x3, 0x629}, 0x0, 0x80000000, 0x8, 0xe286, 0x3, 0x4, 0x10, @struct={0x2, 0x941}, 0x6, 0x1, [0x6c044393, 0x9, 0x0, 0x358, 0x222, 0x8]}, {0x3, @usage=0x3, 0x0, 0x2, 0x8, 0x51, 0x8, 0x3310, 0x8, @struct={0xfffff000, 0x5}, 0xd0, 0x4, [0x100, 0xb, 0x80000001, 0x200000000000000, 0x8000000000000001, 0x2c50]}, {0x101, @struct={0x8, 0x1}, 0x0, 0x3, 0xfba, 0x7f, 0xc8f, 0x10, 0x88, @struct={0x1, 0x4}, 0x7, 0x3, [0x4, 0x8444, 0xc000000000000, 0x5c, 0x80000001, 0x33b]}, {0xffff, 0xffff, 0x5d}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000012c0)={0x0, 0x7fffffff, 0x1, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000016c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000001ac0)={0x0, 0x6, {0x0, @struct={0xff, 0x1af}, r7, 0x86e, 0xea5, 0x0, 0x3, 0x0, 0x80, @usage=0x5, 0x1ff, 0x7f, [0x2000000000000000, 0x4, 0x8, 0x100, 0x7, 0x6]}, {0x9, @usage=0x32, r8, 0x7fff, 0x4, 0x0, 0x3, 0x3, 0x4, @usage=0xfffffffffffeffff, 0x8001, 0x8000, [0xe, 0x2886c0f4, 0x10000000, 0x5, 0x8, 0xfffffffeffffffff]}, {0x5, @usage=0x1ce2, r9, 0x7fffffffffffffff, 0x6, 0x22, 0x8, 0x9, 0x10, @struct={0x40, 0x7}, 0x2443ea47, 0x4, [0x4, 0x6, 0x3, 0x0, 0xff, 0xffffffff80000001]}, {0x5, 0x1, 0x7}}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.288253351s ago: executing program 0 (id=4934): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000540)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=@gettaction={0x18, 0x32, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000}, 0x40041) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%pS \x00'}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff000005000300000000000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r3) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x2000000000000140, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf7}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4699}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x19f7, 0x0, 0x0, 0x0, 0x40}, @jmp={0x5, 0x0, 0x1, 0x2, 0xa, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x5, '\x00', 0x0, r0, 0x4, 0x4, 0x2}, 0x50) 1.148407169s ago: executing program 1 (id=4935): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r3, 0x1, 0x8, 0x0, &(0x7f0000000380)) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)="bd52", 0x2}], 0x1}}], 0x1, 0x4400c800) r4 = accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c, 0xc7cf3747cf2a88b4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x78, 0x30, 0x9, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbedit={0x60, 0x1, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x8}, {0xc, 0x9}}}]}]}, 0x78}}, 0x0) sendto$inet6(r4, &(0x7f0000000300), 0x0, 0x2000b340, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000100)={0x0, 0x6, 0x1, 0x2, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @empty]}, 0x38) 1.147972854s ago: executing program 4 (id=4936): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@gettaction={0xd4, 0x32, 0xe72c5f922f23ccf3, 0x70bd27, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x35b}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffff9}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x28, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40008c4}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000180)=0x9f7, 0x4) getsockopt$inet_opts(r3, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000140)=0x50) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r6, 0x0) (async) listen(r6, 0x0) connect$vsock_stream(r6, &(0x7f0000000100), 0x10) (async) connect$vsock_stream(r6, &(0x7f0000000100), 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000140)="24000000010006", 0x7) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}]}, 0x3c}}, 0x20000000) 946.724419ms ago: executing program 2 (id=4937): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000ffff00000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) socket(0x2, 0x2, 0x2) (async) socket(0x2, 0x2, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x704) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc0000", 0x3) splice(r4, 0x0, r3, 0x0, 0x1100000000f336, 0x8) (async) splice(r4, 0x0, r3, 0x0, 0x1100000000f336, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 945.28107ms ago: executing program 3 (id=4938): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINK={0x8, 0x5, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) 869.369304ms ago: executing program 4 (id=4939): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xb08f, 0x5, 0x3, 0x40000, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4624, @local}}, 0x0, 0x0, 0x4f, 0x0, "023d9f9842360fd6efdad82a610a0c4996ec3f91ef1e30c2a7f7f9cdf978cefc34f4d0a02ca0585556b03580f09a14fe5fa56785ae9fda917b42837b6ad2191f8d3618ba00"}, 0xd8) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 868.963678ms ago: executing program 0 (id=4940): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x8005, @loopback, 0xbffffffc}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e22, 0x0, @empty, 0x3}}, 0x208001, 0x848, 0x0, 0x0, 0xb3550aa4ba87834d, 0x80000}, 0x9c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0xfffffffffffffe95) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000080)={0x800, 0x43c, 0x0, 0xffff0001, 0x7a21, 0xfffffff8, 0x6, 0x2831}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4090) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x8400}, 0x20040000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="130000001000000000000000b79827cf2eced63a3b7f5a34fd148914df3d0d6ae32bce930435e9d8f918cc57b7185e0741ce569c145d8bf9834019b5658efff1cde2e02b08000000e664d6713747f3ec9b79c8810244a238356d19b4578fe695ca3b6d88cda4a767fb1469922a3736053b3c61e0cb4a6c49a11400d5a425dd856e3824d12edd0770b1f7a29c3f7aa2b031f7a365404d3f210f6b9db427828a3a70889a50f3fdd8228dd67ee096a5065545706442918608a3a42774989a65af6098096c374b8f1dc77d6fdfb78f27642d03e492702859167b56745e9906123f435b3dfe585737e90acb3db0218f3057abed", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socket(0x6, 0x6, 0xa) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000000)={0x783a0ef, [0x9d82, 0x800]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x3f}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 860.929986ms ago: executing program 1 (id=4941): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x14) 853.026921ms ago: executing program 3 (id=4942): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0xa, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) unshare(0x26020480) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xee, 0x4000004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', r1, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000002800128009000100766c616e00000000180002800c0002001e0000001f00000006000100fc0f000008000500", @ANYRES32=r4, @ANYBLOB="08213cd1", @ANYRES32=r4, @ANYBLOB], 0x58}}, 0x8000) 654.491612ms ago: executing program 2 (id=4943): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback={0x3000000}, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0x6, 0xfa}, 0x9c) 654.199558ms ago: executing program 4 (id=4944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x1f, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x6, 0x12, r1, 0xfffff000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2ac, 0x2, [@TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xffffff10, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x2000) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)=0x8) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000308010100000000000000000a0000060c000480080007400000000605000300060000000f7e06ad1719256e41e0436566296ce5ffe054dbe8bbcf170d8604150ed0"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 648.395888ms ago: executing program 3 (id=4945): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000eef76415faff00000000000000", @ANYRESOCT=0x0], 0x24}, 0x1, 0x5502000000000000}, 0x890) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 629.899927ms ago: executing program 1 (id=4946): r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000227bd7000fedbdf250600000008000c000300000006000b002b000000080002000300000006000b002a00000008000800e000000130fe003b700b6a8fd0c6565271d50948898bda27f12305e0a498208335e9b5d3e201080d2e6ba442e0550c9f970eb1bfcf2abc5cd126f60aec22afa5067206004d26095bc247d9a69ca241528e8af4b18d6c28d4"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x2010044) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan4\x00'}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x110, r3, 0xee2c2000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, &(0x7f0000002280)={&(0x7f0000000340)={0xa, 0x4e24, 0x0, @mcast1, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r2], 0x5b0}, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20028810, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x0, 0x20, 0x3, 0x2, {{0x21, 0x4, 0x1, 0x9, 0x84, 0x64, 0x0, 0xf7, 0x4, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xa5, 0x3, 0x5, [{@multicast1, 0xfc26}, {@multicast2, 0xfffffff8}, {@rand_addr=0x64010102, 0x1}, {@loopback, 0x5cd}]}, @cipso={0x86, 0x15, 0x1, [{0x2, 0xf, "f29e4efade86a7f8c3581f648e"}]}, @end, @ssrr={0x89, 0x17, 0xea, [@dev={0xac, 0x14, 0x14, 0x10}, @private=0x8, @dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x6, 0xf, "7618f8b4c08082bb497a370865"}, {0x0, 0x2}]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@ipv6_getroute={0x44, 0x1a, 0x400, 0x70bd27, 0x25dfdbfd, {0xa, 0x10, 0x0, 0x7, 0xfc, 0x2, 0xff, 0x2}, [@RTA_GATEWAY={0x14, 0x5, @local}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_MULTIPATH={0xc, 0x9, {0xa, 0x10, 0x69, r5}}]}, 0x44}}, 0x40000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={0x200000000000000, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @private=0xa010101}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x101}) write$tcp_congestion(r3, 0x0, 0x37) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f00000002c0)=0x4, 0x4) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r7, &(0x7f00000012c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="59b6c909", 0x4}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000200)="f87be602784b", 0x6}]}}], 0x2, 0x4c040) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9, 0x1}, 0x8) unshare(0x40600) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$alg(r9, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-neon\x00'}, 0x58) pwritev(r2, &(0x7f0000000180)=[{&(0x7f00000007c0)="00214717a70700", 0x7}], 0x1, 0x803, 0x0) 489.76938ms ago: executing program 3 (id=4947): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380200001600010127bd7000fedbdf250a010100000000000000000000000000fc0100000000000000000000000000014e2480014e244de20a0080802c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x80}, 0x0) 250.762853ms ago: executing program 2 (id=4948): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x401, 0x9bc, 0x0, 0x1}, 0xfffffeef) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="e0000000120001ff"], 0xe0}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sendto(r1, &(0x7f00000004c0)="41c4c983803d2298b620959258ec8c9c044e41a144b7e27e25792743222e0b0cd620109c0c1cf9b17d95a36933948bae65215eec959bfad59ea1edb74276", 0x3e, 0x4014, &(0x7f0000000500)=@in={0x2, 0x4e22, @private=0xa010102}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000001bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001c00)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB='\x00'], 0x1198}, 0x1, 0x0, 0x0, 0x40000}, 0x42880) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = getpid() r5 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000b00)="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", 0xffffffffffffff63) accept4(r1, 0x0, 0x0, 0x80800) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0xfffd, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x40) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000380)={0x2, 0x6e22, @multicast1}, 0x10) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r9 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=r4, @ANYRESOCT=r0, @ANYRES32, @ANYRES64=r8, @ANYRES16=r9], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x8, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}}}, 0x108) 250.617012ms ago: executing program 4 (id=4949): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0d00000500002133aeaa00000000000000c0c200006e97336fc0210a2e78000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000040001901feffffff00000000017c0000340041802d000a000229a2517945a71f852b20c694feb2c60d660ade200fff9c5408fbd224968e91f66612039a7624b7b50000000c0001800600060065310000040002"], 0x58}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) pipe(&(0x7f0000000040)) 249.123923ms ago: executing program 3 (id=4950): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf25030000000c0003000e00000006000100"/38], 0x34}, 0x1, 0x0, 0x0, 0x10000}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400000058f82ecd4315e31da62e6870b439ddd6ded7f0eb0f1fc4dc27eb4434df457737193b2ed37d7d2192786cc25d9f6bf4796b37bbfb5f5fae2e6708b82512f87ae9825d40967306fc09f6f0a2e92123a730455a8811d258", @ANYRES16=r6, @ANYBLOB="01002fbd7000fddbdf2514000000180001801400020073797a5f74756e000000000000000000080003006a180000"], 0x34}, 0x1, 0x0, 0x0, 0x40104}, 0x0) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000780)=0x3, 0x4) r7 = socket(0x10, 0x803, 0x3) sendmsg$nl_route(r7, 0x0, 0x4000010) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC(r10, 0x0, 0xcc, &(0x7f0000000100)={@private=0xa010101, @private=0xa010101, 0x1, "7d1f88f80bbe8d286c57f04c843abbec3737db4a9d77a557438242a50a4dad20", 0xaa4, 0x3, 0x3, 0x1}, 0x3c) bind(r2, &(0x7f00000002c0)=@un=@abs={0x0, 0x0, 0x4e21}, 0xfffffffffffffd2c) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r9, 0x800442d2, &(0x7f0000000080)={0x4, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @remote}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getchain={0x34, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {}, {0xfff3, 0x7}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x0) socket$netlink(0x10, 0x3, 0x5) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) pselect6(0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0xffffffffffff004f, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 248.522726ms ago: executing program 1 (id=4951): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) (async) unshare(0x20040000) (async) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000040)={0x5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'syztnl1\x00', r1, 0x1, 0x7, 0x2, 0x6, {{0xa, 0x4, 0x3, 0x7, 0x28, 0x65, 0x0, 0x48, 0x29, 0x0, @empty, @loopback, {[@end, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x9c, [@dev={0xac, 0x14, 0x14, 0x2f}, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000180)=0x8) unshare(0x2000000) (async, rerun: 64) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f00000001c0)) (async, rerun: 64) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x8, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000010}, 0x800) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000300)) (async) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000340)={@mcast2, r3}, 0x14) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x48880) (async, rerun: 32) r5 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f00000004c0)=0x5, 0x4) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000500)) (async) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000540)=0x3, 0x4) unshare(0x4040200) (async) socketpair(0x2, 0x1, 0x4, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r4, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r8}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6b}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x43}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008005}, 0x4004041) (async, rerun: 32) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000700)) (async, rerun: 32) r9 = accept4(r5, &(0x7f0000000740)=@sco={0x1f, @none}, &(0x7f00000007c0)=0x80, 0x80800) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000840)={'bond_slave_0\x00', &(0x7f0000000800)=@ethtool_cmd={0x28, 0x10, 0x9, 0x2, 0x5, 0x9, 0x0, 0x0, 0xce, 0x5, 0x8, 0xd, 0x1000, 0x3, 0x4, 0x1, [0xf, 0x3]}}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), r9) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r10, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r11, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000055}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xa6e, 0x2]}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0x9010}, 0x4811) 233.027231ms ago: executing program 4 (id=4952): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINK={0x8, 0x5, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) 121.888873ms ago: executing program 1 (id=4953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) 92.665582ms ago: executing program 2 (id=4954): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0x6, 0xfa}, 0x9c) (fail_nth: 4) 70.352175ms ago: executing program 4 (id=4955): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xbae}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x8001) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2c}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x24040001) r2 = socket(0xf, 0x2, 0x40) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x101, 0x9, 0x1, 0xffff, 0x400, 0x1, 0x2}, &(0x7f0000000300)={0xdc, 0xea, 0x9, 0x6, 0x8c, 0x3, 0x400, 0x101}, &(0x7f0000000340)={0x0, 0x8, 0x8, 0xa, 0x0, 0x75c7, 0x0, 0x3}, &(0x7f00000003c0)={r3, r4+60000000}, &(0x7f0000000440)={&(0x7f0000000400)={[0x1]}, 0x8}) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x12c, 0x17, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xdc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2, 0x6, 0x1, 0x7, 0x2c, @mcast2, @local, 0x7, 0x88, 0x400, 0x8}}) sendmsg$nl_route(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newneigh={0x30, 0x1c, 0x4, 0x70bd2c, 0x25dfdbfb, {0x2, 0x0, 0x0, r5, 0x80, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @NDA_PORT={0x6, 0x6, 0x4e20}]}, 0x30}, 0x1, 0x0, 0x0, 0x6c881}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000009c0), 0x3) r9 = accept$inet6(r2, &(0x7f0000000a00)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000a40)=0x1c) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000a80)) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000ac0)={0x29, 0x6, 0x0, 0x40, 0x0, [@remote, @loopback, @local]}, 0x38) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), r9) r10 = socket$kcm(0x29, 0x2, 0x0) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x4b}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r11, &(0x7f0000000fc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x2c0, r12, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xd4, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7cf1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8993}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d3e1754}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6eac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6fb8}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6116f932}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf100}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x53e8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2fee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6cc0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x198dc2e1}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5594a63d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b5e8279}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67c2532d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x82ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e8a6a22}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5295407d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21410483}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x954b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf440}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f2469}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8245}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23eb236c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3682}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc1ec}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f373800}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x618a6b5b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x446b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67fb0c95}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bf12a46}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fcf2a28}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f11357c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x512bf786}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75fc64c2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc67}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2be2df1e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x440f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x51}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d13}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe00}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a60f06f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47b88540}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x251ee5fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3604c00}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d7d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb9f2}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x80}, 0x8884) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, &(0x7f0000001000)={0x0, 0x5}, 0x8) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000001140)={r10, &(0x7f0000001040)='\x00', 0x418840, &(0x7f0000001080)={@align=0x5, {0x80, 0xfffc, 0x7f, 0x49e}}, 0x401, &(0x7f00000010c0)={@_ha_fsid}, &(0x7f0000001100)=0x2}) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f00000011c0), r2) sendmsg$IPVS_CMD_SET_SERVICE(r13, &(0x7f0000001300)={&(0x7f0000001180), 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0x84, r14, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x84}}, 0x62fb4622e1de5440) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xf0, r14, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4da}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3c}}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4815}, 0x24002895) 0s ago: executing program 1 (id=4956): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x40, 0x1}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x28, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x9, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c010}, 0xc010) kernel console output (not intermixed with test programs): tover after parsing attributes in process `syz.2.3085'. [ 381.687213][T16054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3086'. [ 381.696713][T16054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3086'. [ 381.960147][ T7271] hsr_slave_1: left promiscuous mode [ 381.997408][ T7271] veth1_macvtap: left promiscuous mode [ 382.010034][ T7271] veth1_vlan: left promiscuous mode [ 382.019925][ T7271] veth0_vlan: left promiscuous mode [ 382.452607][T16068] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3089'. [ 382.663491][ T5828] Bluetooth: hci1: command tx timeout [ 382.778494][T16054] syz_tun: entered promiscuous mode [ 382.785732][T16054] erspan0: entered promiscuous mode [ 382.792277][T16054] debugfs: 'hsr1' already exists in 'hsr' [ 382.798157][T16054] Cannot create hsr debugfs directory [ 382.803669][T16054] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 382.928128][T16071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3090'. [ 383.076160][T16073] syzkaller0: entered promiscuous mode [ 383.081879][T16073] syzkaller0: entered allmulticast mode [ 383.366794][T16091] xt_CT: You must specify a L4 protocol and not use inversions on it [ 383.710618][ T7271] IPVS: stop unused estimator thread 0... [ 383.832993][T16108] lo speed is unknown, defaulting to 1000 [ 384.185802][T16121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3105'. [ 384.309339][T16121] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3105'. [ 384.382888][T16127] xt_CT: You must specify a L4 protocol and not use inversions on it [ 384.399786][T16121] bond7: entered promiscuous mode [ 384.514703][T15854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.542799][T15854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.591256][T15854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 384.636149][T15854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 384.739210][ T5828] Bluetooth: hci1: command tx timeout [ 385.028998][T16153] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 385.048339][T16138] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3110'. [ 385.251099][T16169] xt_CT: You must specify a L4 protocol and not use inversions on it [ 385.328936][T16156] lo speed is unknown, defaulting to 1000 [ 385.525123][T16171] syzkaller0: entered promiscuous mode [ 385.552741][T16171] syzkaller0: entered allmulticast mode [ 385.661736][T16191] openvswitch: netlink: Message has 2 unknown bytes. [ 386.024992][T15854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.115152][T16215] xt_CT: You must specify a L4 protocol and not use inversions on it [ 386.124966][T15854] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.177789][ T7264] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.185029][ T7264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.241992][ T7264] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.249260][ T7264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.703778][T16232] pimreg: entered allmulticast mode [ 386.840483][T16236] syzkaller0: entered promiscuous mode [ 386.850250][T16236] syzkaller0: entered allmulticast mode [ 387.106916][T15854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.287342][T16253] __nla_validate_parse: 2 callbacks suppressed [ 387.287363][T16253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3137'. [ 387.303416][T15854] veth0_vlan: entered promiscuous mode [ 387.342561][T15854] veth1_vlan: entered promiscuous mode [ 387.349044][T16259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3138'. [ 387.358893][T16259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3138'. [ 387.369486][T16253] netlink: 'syz.2.3137': attribute type 20 has an invalid length. [ 387.448035][T16253] netlink: 'syz.2.3137': attribute type 21 has an invalid length. [ 387.472457][T15854] veth0_macvtap: entered promiscuous mode [ 387.526345][T15854] veth1_macvtap: entered promiscuous mode [ 387.536046][T16262] netlink: 'syz.4.3140': attribute type 4 has an invalid length. [ 387.549715][T16266] netlink: 'syz.3.3141': attribute type 4 has an invalid length. [ 387.562399][T16266] netlink: 'syz.3.3141': attribute type 8 has an invalid length. [ 387.578045][T16266] netlink: 'syz.3.3141': attribute type 1 has an invalid length. [ 387.585938][T16266] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3141'. [ 387.598176][T16272] netlink: 'syz.4.3140': attribute type 4 has an invalid length. [ 387.607407][T16266] NCSI netlink: No device for ifindex 0 [ 387.753389][T15854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.791279][T15854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.486439][ T7271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.511991][ T7271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.560329][ T7271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.581374][ T7271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.794912][ T7264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.823626][ T7264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.904204][ T7246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.918401][ T7246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.952248][T16305] siw: device registration error -23 [ 389.472348][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 389.486650][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 389.498732][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 389.520901][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 389.536267][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 389.660995][T16335] lo speed is unknown, defaulting to 1000 [ 390.145906][T16351] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 390.162081][T16351] bond1 (unregistering): Released all slaves [ 390.225396][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3161'. [ 390.441186][T16335] chnl_net:caif_netlink_parms(): no params data found [ 390.474515][T16357] lo speed is unknown, defaulting to 1000 [ 390.554753][T16378] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3163'. [ 390.794069][T16335] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.802080][T16335] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.809692][T16335] bridge_slave_0: entered allmulticast mode [ 390.818633][T16335] bridge_slave_0: entered promiscuous mode [ 390.849856][T16335] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.866822][T16335] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.874743][T16335] bridge_slave_1: entered allmulticast mode [ 390.884880][T16335] bridge_slave_1: entered promiscuous mode [ 390.981165][T16335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.994786][T16335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.228415][T16335] team0: Port device team_slave_0 added [ 391.241431][T16335] team0: Port device team_slave_1 added [ 391.305815][T16335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.313668][T16335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.340958][T16335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.378809][T16406] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3169'. [ 391.379770][T16335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.404455][T16335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.437992][T16335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.483775][T16409] netlink: 'syz.1.3171': attribute type 1 has an invalid length. [ 391.610032][T16335] hsr_slave_0: entered promiscuous mode [ 391.617936][ T5828] Bluetooth: hci0: command tx timeout [ 391.629546][T16335] hsr_slave_1: entered promiscuous mode [ 391.643422][T16335] debugfs: 'hsr0' already exists in 'hsr' [ 391.662544][T16335] Cannot create hsr debugfs directory [ 392.040606][T16429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3177'. [ 392.311421][T16434] lo speed is unknown, defaulting to 1000 [ 392.402750][T16453] netlink: 'syz.1.3182': attribute type 1 has an invalid length. [ 392.488813][T16453] 8021q: adding VLAN 0 to HW filter on device bond4 [ 392.613707][T16461] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3182'. [ 392.649456][T16455] bond4: (slave veth15): Enslaving as an active interface with a down link [ 392.662566][T16458] syzkaller0: entered promiscuous mode [ 392.713603][T16453] bond4: (slave dummy0): making interface the new active one [ 392.739885][T16453] dummy0: entered promiscuous mode [ 392.745625][T16453] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 392.780625][T16461] bond4: (slave dummy0): Releasing active interface [ 392.795295][T16461] dummy0 (unregistering): left promiscuous mode [ 392.901624][T16465] tipc: Started in network mode [ 392.906667][T16465] tipc: Node identity 00000000000000000000000300000001, cluster identity 4711 [ 392.929371][T16465] tipc: Enabling of bearer rejected, failed to enable media [ 393.151944][T16476] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3188'. [ 393.332642][T16489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3191'. [ 393.361882][T16335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 393.370212][ T29] IPVS: starting estimator thread 0... [ 393.390589][T16335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 393.411998][T16335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 393.423659][T16491] netlink: 'syz.3.3192': attribute type 1 has an invalid length. [ 393.442584][T16335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 393.444383][T16493] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3190'. [ 393.467755][T16492] IPVS: using max 28 ests per chain, 67200 per kthread [ 393.525659][T16497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 393.541897][T16494] bond2: (slave bridge1): making interface the new active one [ 393.553996][T16494] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 393.697707][ T5828] Bluetooth: hci0: command tx timeout [ 393.736464][T16335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.759962][T16335] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.775735][ T481] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.782973][ T481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.803601][ T7271] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.810864][ T7271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.017940][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 394.066496][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3198'. [ 394.296259][T16521] lo speed is unknown, defaulting to 1000 [ 394.497065][T16335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.404526][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3209'. [ 395.593798][T16563] netlink: 'syz.0.3210': attribute type 1 has an invalid length. [ 395.611099][T16335] veth0_vlan: entered promiscuous mode [ 395.617784][T16565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3211'. [ 395.653769][T16335] veth1_vlan: entered promiscuous mode [ 395.685123][T16565] lo speed is unknown, defaulting to 1000 [ 395.778085][ T5828] Bluetooth: hci0: command tx timeout [ 395.884438][T16335] veth0_macvtap: entered promiscuous mode [ 395.925527][T16335] veth1_macvtap: entered promiscuous mode [ 395.981709][T16581] netlink: 'syz.3.3215': attribute type 13 has an invalid length. [ 396.002477][T16335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.366439][T16335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.418768][ T7249] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.449204][ T7249] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.479365][ T7249] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.508825][T16599] sctp: [Deprecated]: syz.0.3220 (pid 16599) Use of struct sctp_assoc_value in delayed_ack socket option. [ 396.508825][T16599] Use struct sctp_sack_info instead [ 396.537652][ T7249] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.632921][T16603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3224'. [ 396.730774][T16606] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3223'. [ 396.800763][ T7264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.812431][ T7264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.867633][T16603] lo speed is unknown, defaulting to 1000 [ 396.901461][T16608] syzkaller0: entered promiscuous mode [ 396.912037][T16608] syzkaller0: entered allmulticast mode [ 397.011631][ T7264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.039578][ T7264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.699846][T16639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 397.710907][T16639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 397.728097][T16639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 397.741755][T16639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 397.749645][T16639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 397.858884][ T5828] Bluetooth: hci0: command tx timeout [ 398.051643][T16640] syzkaller0: entered promiscuous mode [ 398.057194][T16640] syzkaller0: entered allmulticast mode [ 398.121408][T16637] lo speed is unknown, defaulting to 1000 [ 398.704123][T16674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3242'. [ 398.800622][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3245'. [ 399.786864][ T5828] Bluetooth: hci4: command tx timeout [ 400.126894][T16637] chnl_net:caif_netlink_parms(): no params data found [ 400.271834][T16685] tipc: Enabling of bearer rejected, failed to enable media [ 400.315693][T16678] lo speed is unknown, defaulting to 1000 [ 400.329601][ T7249] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.359514][ T7249] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.437599][T16674] lo speed is unknown, defaulting to 1000 [ 400.516556][ T7249] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.526615][ T7249] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.693968][ T7249] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.706866][ T7249] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.794346][ T7249] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.814478][ T7249] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.855681][T16637] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.872447][T16637] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.887793][T16637] bridge_slave_0: entered allmulticast mode [ 400.897152][T16637] bridge_slave_0: entered promiscuous mode [ 400.910055][T16706] netlink: 'syz.3.3251': attribute type 5 has an invalid length. [ 401.041608][T16637] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.062119][T16637] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.081039][T16637] bridge_slave_1: entered allmulticast mode [ 401.100263][T16637] bridge_slave_1: entered promiscuous mode [ 401.219652][T16637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.241174][T16637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.488250][T16637] team0: Port device team_slave_0 added [ 401.554017][T16637] team0: Port device team_slave_1 added [ 401.665077][T16715] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3253'. [ 401.703039][T16637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.728600][T16637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.804082][T16637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.843243][T16719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3255'. [ 401.850830][T16637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.859945][ T5828] Bluetooth: hci4: command tx timeout [ 401.873740][T16637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.929500][T16637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.141483][ T7249] veth0_to_bridge: left allmulticast mode [ 402.147363][ T7249] veth0_to_bridge: left promiscuous mode [ 402.153557][ T7249] bridge0: port 3(veth0_to_bridge) entered disabled state [ 402.374485][ T7249] bridge_slave_0: left allmulticast mode [ 402.391163][ T7249] bridge_slave_0: left promiscuous mode [ 402.403185][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.786778][ T7249] ip6gretap0 (unregistering): left promiscuous mode [ 403.173908][ T7249] bridge0 (unregistering): left promiscuous mode [ 403.386579][ T7249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.407004][ T7249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.419951][ T7249] bond0 (unregistering): Released all slaves [ 403.442430][ T7249] bond1 (unregistering): (slave veth5): Releasing backup interface [ 403.451635][ T7249] veth5: left promiscuous mode [ 403.459252][ T7249] bond1 (unregistering): Released all slaves [ 403.480817][ T7249] bond2 (unregistering): Released all slaves [ 403.502952][ T7249] bond3 (unregistering): Released all slaves [ 403.532437][ T7249] bond4 (unregistering): (slave veth15): Releasing active interface [ 403.544325][ T7249] bond4 (unregistering): Released all slaves [ 403.567215][T16723] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3256'. [ 403.594738][T16637] hsr_slave_0: entered promiscuous mode [ 403.605463][T16637] hsr_slave_1: entered promiscuous mode [ 403.628530][T16637] debugfs: 'hsr0' already exists in 'hsr' [ 403.652499][T16637] Cannot create hsr debugfs directory [ 403.850238][ T7249] tipc: Disabling bearer [ 403.865148][ T7249] tipc: Left network mode [ 403.914575][T16761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.951588][ T5828] Bluetooth: hci4: command tx timeout [ 404.090238][T16767] Bluetooth: MGMT ver 1.23 [ 404.119912][T16768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3263'. [ 404.650592][T16763] lo speed is unknown, defaulting to 1000 [ 405.635032][T16801] netlink: 'syz.4.3270': attribute type 1 has an invalid length. [ 405.685205][T16801] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3270'. [ 406.018669][ T5828] Bluetooth: hci4: command tx timeout [ 406.086015][T16810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3272'. [ 406.168778][ T7249] hsr_slave_0: left promiscuous mode [ 406.175156][ T7249] hsr_slave_1: left promiscuous mode [ 406.186962][ T7249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.203735][ T7249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.216333][ T7249] batman_adv: batadv0: Removing interface: virt_wifi0 [ 406.241917][ T7249] veth1_macvtap: left promiscuous mode [ 406.256040][ T7249] veth1_vlan: left promiscuous mode [ 406.279737][ T7249] veth0_vlan: left promiscuous mode [ 406.305341][T16814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3274'. [ 406.998740][T16637] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 407.051309][T16637] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 407.099463][T16637] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 407.142117][T16637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 407.249168][T16842] vlan2: entered allmulticast mode [ 407.492328][ T7249] IPVS: stop unused estimator thread 0... [ 407.602459][T16637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.724312][T16637] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.771588][ T7268] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.778815][ T7268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.825096][T16868] netlink: 'syz.4.3282': attribute type 2 has an invalid length. [ 407.872820][ T7249] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.878450][T16867] Bluetooth: MGMT ver 1.23 [ 407.880297][ T7249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.884482][T16867] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 407.923079][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3283'. [ 407.980456][T16867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3283'. [ 408.060503][T16867] netlink: 'syz.3.3283': attribute type 18 has an invalid length. [ 408.325815][T16874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3284'. [ 408.540297][T16879] lo speed is unknown, defaulting to 1000 [ 408.848956][T16637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.934768][T16896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3289'. [ 409.246066][T16637] veth0_vlan: entered promiscuous mode [ 409.281595][T16637] veth1_vlan: entered promiscuous mode [ 409.426374][T16637] veth0_macvtap: entered promiscuous mode [ 409.498144][T16637] veth1_macvtap: entered promiscuous mode [ 409.570783][T16637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.627780][T16936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3296'. [ 409.649575][T16637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.695004][ T1003] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.737827][ T1003] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.746647][ T1003] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.800642][T16941] netlink: 'syz.3.3298': attribute type 2 has an invalid length. [ 409.827669][T16941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3298'. [ 409.916963][T16941] bond3: (slave bond_slave_1): Device is not our slave [ 409.950651][T16941] bond3: option active_slave: invalid value (bond_slave_1) [ 410.013103][T16941] bond3 (unregistering): Released all slaves [ 410.128705][ T1003] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.183447][T16967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3301'. [ 410.200580][T16961] syz_tun: entered allmulticast mode [ 410.875355][T16962] lo speed is unknown, defaulting to 1000 [ 410.956933][T16955] syz_tun: left allmulticast mode [ 411.177398][T16985] netlink: 'syz.3.3304': attribute type 2 has an invalid length. [ 411.295282][T16994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3304'. [ 411.308710][T16994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3304'. [ 411.329669][T16985] l24): entered promiscuous mode [ 411.344024][ T7246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.366963][ T7246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.417188][T16997] xt_limit: Overflow, try lower: 268435456/134217728 [ 411.452646][T16992] team0 (unregistering): Port device team_slave_0 removed [ 411.530864][T16992] team0 (unregistering): Port device team_slave_1 removed [ 411.693823][T17007] IPv6: NLM_F_CREATE should be specified when creating new route [ 411.707657][ T7239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.727630][ T7239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.138246][T17030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3312'. [ 412.651418][T17047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3320'. [ 412.741222][T17055] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3321'. [ 412.890383][T17057] lo speed is unknown, defaulting to 1000 [ 412.991413][T17064] xt_CT: You must specify a L4 protocol and not use inversions on it [ 413.310336][T17082] xt_TPROXY: Can be used only with -p tcp or -p udp [ 413.435581][T17090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3331'. [ 413.525639][T17099] netlink: 'syz.0.3332': attribute type 1 has an invalid length. [ 413.547210][T17090] Bluetooth: MGMT ver 1.23 [ 413.814597][T17108] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.825990][T17108] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.038833][T17116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3339'. [ 414.311959][T17118] lo speed is unknown, defaulting to 1000 [ 414.622840][T17127] syzkaller0: entered promiscuous mode [ 414.629936][T17127] syzkaller0: entered allmulticast mode [ 414.799852][T17143] netlink: 'syz.1.3349': attribute type 10 has an invalid length. [ 414.880240][T17143] veth0_vlan: left promiscuous mode [ 414.888076][T17143] veth0_vlan: entered promiscuous mode [ 414.899593][T17143] team0: Device veth0_vlan failed to register rx_handler [ 415.156843][T17159] __nla_validate_parse: 1 callbacks suppressed [ 415.156865][T17159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3352'. [ 415.177033][T17159] netlink: 'syz.1.3352': attribute type 10 has an invalid length. [ 415.235154][T17159] team0: Port device dummy0 added [ 415.249579][T17161] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 415.467321][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3356'. [ 415.477654][T17173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3357'. [ 415.563598][T17179] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.3359'. [ 415.640508][T17180] lo speed is unknown, defaulting to 1000 [ 415.860102][T17190] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3362'. [ 416.073064][T17190] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.263119][T17190] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.514143][T17210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3369'. [ 416.536919][T17190] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.668307][T17212] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.675634][T17212] IPv6: NLM_F_CREATE should be set when creating new route [ 416.682966][T17212] IPv6: NLM_F_CREATE should be set when creating new route [ 416.690377][T17212] IPv6: NLM_F_CREATE should be set when creating new route [ 416.722050][T17215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3371'. [ 416.755883][T17190] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.003582][T17223] ip6tnl1: entered allmulticast mode [ 417.044358][ T7239] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.087690][ T1003] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.137640][ T1003] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.181666][ T1003] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.244232][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3378'. [ 417.372837][T17234] lo speed is unknown, defaulting to 1000 [ 417.743745][T17263] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3387'. [ 417.775632][T17263] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3387'. [ 418.024331][T17285] nbd: couldn't find device at index 0 [ 418.214785][T17294] netlink: 'syz.3.3396': attribute type 2 has an invalid length. [ 418.299851][T17299] netlink: 'syz.2.3397': attribute type 1 has an invalid length. [ 418.538956][T17312] lo speed is unknown, defaulting to 1000 [ 418.592904][T17315] : entered promiscuous mode [ 418.805908][ T1003] tipc: Subscription rejected, illegal request [ 418.903071][T17329] lo speed is unknown, defaulting to 1000 [ 419.566681][T17371] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 419.580242][T17370] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 419.857233][T17381] lo speed is unknown, defaulting to 1000 [ 419.977565][T17386] lo speed is unknown, defaulting to 1000 [ 420.767168][T17423] __nla_validate_parse: 36 callbacks suppressed [ 420.767216][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3440'. [ 420.868529][T17438] netlink: 'syz.2.3445': attribute type 4 has an invalid length. [ 420.888840][T17438] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3445'. [ 420.931740][T17431] lo speed is unknown, defaulting to 1000 [ 422.070080][T17470] sctp: [Deprecated]: syz.1.3456 (pid 17470) Use of int in max_burst socket option. [ 422.070080][T17470] Use struct sctp_assoc_value instead [ 422.225610][T17480] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20002 [ 422.266742][T17465] syzkaller1: entered promiscuous mode [ 422.277420][T17465] syzkaller1: entered allmulticast mode [ 422.699998][T17488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3462'. [ 422.918895][T17496] xt_CT: You must specify a L4 protocol and not use inversions on it [ 423.085976][T17491] lo speed is unknown, defaulting to 1000 [ 423.151921][T17501] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 423.304164][T17510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3470'. [ 423.316411][T17508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3469'. [ 423.347645][T17513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3470'. [ 423.528149][T17523] netlink: 'syz.2.3472': attribute type 1 has an invalid length. [ 423.644592][T17532] xt_connbytes: Forcing CT accounting to be enabled [ 423.656629][T17532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3474'. [ 423.715502][T17532] netlink: 'syz.0.3474': attribute type 11 has an invalid length. [ 423.893136][T17541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 423.950742][T17545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3480'. [ 423.984676][ T5887] IPVS: starting estimator thread 0... [ 424.029002][T17543] xt_CT: No such helper "netbios-ns" [ 424.078042][T17547] IPVS: using max 26 ests per chain, 62400 per kthread [ 424.087869][T17551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3481'. [ 424.172547][T17553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3482'. [ 424.293791][T17563] lo speed is unknown, defaulting to 1000 [ 424.323416][T17564] xt_TCPMSS: Only works on TCP SYN packets [ 424.593251][T17570] lo speed is unknown, defaulting to 1000 [ 424.767063][ T30] audit: type=1800 audit(1772860832.893:9): pid=17579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3490" name="memory.events" dev="tmpfs" ino=326 res=0 errno=0 [ 424.953893][T17587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 425.585903][T17605] netlink: 'syz.3.3497': attribute type 1 has an invalid length. [ 425.625969][T17601] lo speed is unknown, defaulting to 1000 [ 425.701075][T17605] bond3: entered promiscuous mode [ 425.706712][T17605] 8021q: adding VLAN 0 to HW filter on device bond3 [ 425.895379][T17617] __nla_validate_parse: 5 callbacks suppressed [ 425.895402][T17617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3501'. [ 425.974046][T17621] FAULT_INJECTION: forcing a failure. [ 425.974046][T17621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.988299][T17621] CPU: 0 UID: 0 PID: 17621 Comm: syz.4.3499 Not tainted syzkaller #0 PREEMPT(full) [ 425.988330][T17621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.988344][T17621] Call Trace: [ 425.988352][T17621] [ 425.988362][T17621] dump_stack_lvl+0xe8/0x150 [ 425.988400][T17621] should_fail_ex+0x412/0x560 [ 425.988436][T17621] _copy_from_user+0x2d/0xb0 [ 425.988549][T17621] __sys_sendto+0x2b0/0x710 [ 425.988617][T17621] ? __pfx___sys_sendto+0x10/0x10 [ 425.988646][T17621] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 425.988684][T17621] ? __fget_files+0x3a0/0x420 [ 425.988729][T17621] ? ksys_write+0x242/0x270 [ 425.988778][T17621] ? __pfx_ksys_write+0x10/0x10 [ 425.988826][T17621] __x64_sys_sendto+0xde/0x100 [ 425.988880][T17621] do_syscall_64+0x14d/0xf80 [ 425.988900][T17621] ? trace_irq_disable+0x3b/0x150 [ 425.988934][T17621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.988957][T17621] ? clear_bhb_loop+0x40/0x90 [ 425.988984][T17621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.989005][T17621] RIP: 0033:0x7f5115f9c799 [ 425.989024][T17621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.989042][T17621] RSP: 002b:00007f5116ee0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 425.989064][T17621] RAX: ffffffffffffffda RBX: 00007f5116215fa0 RCX: 00007f5115f9c799 [ 425.989080][T17621] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000003 [ 425.989092][T17621] RBP: 00007f5116ee0090 R08: 00002000000001c0 R09: 000000000000005d [ 425.989106][T17621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.989118][T17621] R13: 00007f5116216038 R14: 00007f5116215fa0 R15: 00007fff24b2ad78 [ 425.989153][T17621] [ 426.241062][T17623] lo speed is unknown, defaulting to 1000 [ 426.486318][T17631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3504'. [ 426.621652][T17647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3509'. [ 426.660022][T17639] bond0: option arp_validate: invalid value (55553) [ 426.667204][ T7271] bond0: (slave bond_slave_0): interface is now down [ 426.687638][ T7271] bond0: (slave bond_slave_1): interface is now down [ 426.717258][ T7249] bond0: (slave bond_slave_0): interface is now down [ 426.732387][T17647] xfrm1: entered promiscuous mode [ 426.757065][T17647] xfrm1: entered allmulticast mode [ 426.768551][ T7249] bond0: (slave bond_slave_1): interface is now down [ 426.791873][T17647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3509'. [ 426.818555][ T7249] bond0: (slave bond_slave_0): interface is now down [ 426.838927][T17656] xt_CT: You must specify a L4 protocol and not use inversions on it [ 426.875119][ T7249] bond0: (slave bond_slave_1): interface is now down [ 426.891495][ T7249] bond0: now running without any active interface! [ 426.981615][T17664] xt_socket: unknown flags 0xfc [ 427.098517][T17669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3516'. [ 427.268808][T17676] netlink: 34 bytes leftover after parsing attributes in process `syz.3.3517'. [ 427.306448][T17676] netlink: 34 bytes leftover after parsing attributes in process `syz.3.3517'. [ 427.421180][T17667] lo speed is unknown, defaulting to 1000 [ 427.748853][T17688] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3521'. [ 427.758353][T17688] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3521'. [ 427.772238][T17688] netlink: 'syz.2.3521': attribute type 61 has an invalid length. [ 427.781048][T17688] netlink: 'syz.2.3521': attribute type 62 has an invalid length. [ 427.967861][T17701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3525'. [ 427.993909][T17703] xt_ecn: cannot match TCP bits for non-tcp packets [ 428.158070][T17708] ip6tnl2: entered allmulticast mode [ 428.295079][T17718] netlink: 'syz.0.3528': attribute type 2 has an invalid length. [ 428.578765][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 428.597429][T17736] lo speed is unknown, defaulting to 1000 [ 428.681189][T17744] netlink: 'syz.0.3537': attribute type 1 has an invalid length. [ 429.523449][T17784] xt_CT: You must specify a L4 protocol and not use inversions on it [ 429.581153][T17785] lo speed is unknown, defaulting to 1000 [ 429.695574][T17791] bond1 (unregistering): Released all slaves [ 430.490511][T17827] lo speed is unknown, defaulting to 1000 [ 430.715019][T17845] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 430.895214][T17854] tipc: Started in network mode [ 430.915425][T17854] tipc: Node identity ac14140f, cluster identity 4711 [ 430.937058][T17854] tipc: New replicast peer: 255.255.255.255 [ 430.968203][T17854] tipc: Enabled bearer , priority 26 [ 431.176601][T17861] __nla_validate_parse: 9 callbacks suppressed [ 431.176692][T17861] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3580'. [ 431.290917][T17872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3585'. [ 431.458813][T17878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3587'. [ 431.649668][T17889] lo speed is unknown, defaulting to 1000 [ 431.890140][T17892] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 432.088540][ T5894] tipc: Node number set to 2886997007 [ 432.600863][T17903] lo speed is unknown, defaulting to 1000 [ 433.015842][T17920] pim6reg1: entered promiscuous mode [ 433.032046][T17920] pim6reg1: entered allmulticast mode [ 433.084484][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3602'. [ 433.238860][T17935] lo speed is unknown, defaulting to 1000 [ 433.720011][T17955] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 433.977306][T17955] bond4 (unregistering): Released all slaves [ 434.384012][T17985] netlink: 'syz.3.3619': attribute type 1 has an invalid length. [ 434.430967][T17987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3620'. [ 434.550576][T17989] lo speed is unknown, defaulting to 1000 [ 434.871062][T17996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.030393][T18024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3634'. [ 436.145982][T18034] lo speed is unknown, defaulting to 1000 [ 436.948892][T18065] ieee802154 phy1 wpan1: encryption failed: -22 [ 437.877052][T18089] tipc: Started in network mode [ 437.892261][T18089] tipc: Node identity 46b76892323f, cluster identity 4711 [ 437.912804][T18089] tipc: Enabled bearer , priority 0 [ 437.950886][T18093] syzkaller0: entered promiscuous mode [ 437.966713][T18093] syzkaller0: entered allmulticast mode [ 438.034577][T18088] tipc: Resetting bearer [ 438.113998][T18088] tipc: Disabling bearer [ 438.168787][T18100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3655'. [ 438.347389][T18103] lo speed is unknown, defaulting to 1000 [ 438.356877][T18107] pim6reg: tun_chr_ioctl cmd 1074812117 [ 438.494982][T18107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3660'. [ 438.504870][T18107] nbd: must specify a size in bytes for the device [ 438.588305][T18123] netlink: 'syz.3.3664': attribute type 11 has an invalid length. [ 438.596169][T18123] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3664'. [ 438.625802][T18125] IPv6: addrconf: prefix option has invalid lifetime [ 438.967269][T18141] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3668'. [ 439.221866][T18154] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 439.295564][T18160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3676'. [ 439.309360][T18160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3676'. [ 439.440906][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3678'. [ 439.565963][T18171] lo speed is unknown, defaulting to 1000 [ 439.598103][T18172] lo speed is unknown, defaulting to 1000 [ 439.995194][T18192] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3687'. [ 440.102793][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.466069][T18215] xt_CT: You must specify a L4 protocol and not use inversions on it [ 440.785209][T18225] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 440.912635][T18225] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 440.940511][T18225] team0 (unregistering): Port device team_slave_0 removed [ 440.973068][T18225] team0 (unregistering): Failed to send options change via netlink (err -105) [ 441.003144][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3700'. [ 441.027847][T18225] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 441.039059][T18225] team0 (unregistering): Port device team_slave_1 removed [ 441.050413][T18225] team0 (unregistering): Failed to send options change via netlink (err -105) [ 441.059952][T18225] team0 (unregistering): Failed to send port change of device dummy0 via netlink (err -105) [ 441.071099][T18225] team0 (unregistering): Port device dummy0 removed [ 441.195927][T18227] lo speed is unknown, defaulting to 1000 [ 441.325551][T18242] netdevsim netdevsim1: Direct firmware load for & failed with error -2 [ 441.350848][T18242] netdevsim netdevsim1: Falling back to sysfs fallback for: & [ 441.427927][T18246] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3704'. [ 442.738342][T18285] lo speed is unknown, defaulting to 1000 [ 442.759292][T18291] rdma_rxe: rxe_newlink: failed to add lo [ 442.783156][T18285] lo speed is unknown, defaulting to 1000 [ 442.796308][T18285] lo speed is unknown, defaulting to 1000 [ 442.813358][T18292] lo speed is unknown, defaulting to 1000 [ 442.874761][T18289] bridge_slave_0: left allmulticast mode [ 442.917674][T18289] bridge_slave_0: left promiscuous mode [ 442.937252][T18289] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.989383][T18289] bridge_slave_1: left allmulticast mode [ 443.017079][T18289] bridge_slave_1: left promiscuous mode [ 443.034929][T18289] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.077625][T18289] bond0: (slave bond_slave_0): Releasing backup interface [ 443.110361][T18289] bond0: (slave bond_slave_1): Releasing backup interface [ 443.134325][T18285] infiniband sqz0: set active [ 443.143379][T18289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.151137][T18285] infiniband sqz0: added lo [ 443.162570][T18289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.182921][T18289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.205316][T18289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.234458][T18289] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 443.246839][T18285] RDS/IB: sqz0: added [ 443.259237][T18285] smc: adding ib device sqz0 with port count 1 [ 443.276040][T18297] __nla_validate_parse: 2 callbacks suppressed [ 443.276060][T18297] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3725'. [ 443.280026][T18285] smc: ib device sqz0 port 1 has no pnetid [ 443.301607][ T5887] lo speed is unknown, defaulting to 1000 [ 443.325536][ T5894] lo speed is unknown, defaulting to 1000 [ 443.341936][T18285] lo speed is unknown, defaulting to 1000 [ 443.829660][T18285] lo speed is unknown, defaulting to 1000 [ 443.831686][T18307] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3728'. [ 443.985347][T18307] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3728'. [ 444.030675][T18318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3730'. [ 444.056769][T18318] syz_tun: Device is already in use. [ 444.115052][T18318] tun0: tun_chr_ioctl cmd 21731 [ 444.129137][T18318] tun0: tun_chr_ioctl cmd 1074025681 [ 444.172487][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3732'. [ 444.543425][T18285] lo speed is unknown, defaulting to 1000 [ 445.018505][T18285] lo speed is unknown, defaulting to 1000 [ 445.443110][T18285] lo speed is unknown, defaulting to 1000 [ 445.636583][T18355] x_tables: duplicate underflow at hook 1 [ 445.874109][T18364] tap0: tun_chr_ioctl cmd 1074025680 [ 445.916344][T18285] lo speed is unknown, defaulting to 1000 [ 446.275735][T18285] lo speed is unknown, defaulting to 1000 [ 446.550281][T18285] lo speed is unknown, defaulting to 1000 [ 446.806140][T18285] lo speed is unknown, defaulting to 1000 [ 447.067619][T18285] lo speed is unknown, defaulting to 1000 [ 447.332263][T18285] lo speed is unknown, defaulting to 1000 [ 447.604040][T18329] lo speed is unknown, defaulting to 1000 [ 447.612268][T18375] lo speed is unknown, defaulting to 1000 [ 447.621959][T18351] lo speed is unknown, defaulting to 1000 [ 448.465101][T18414] netlink: 'syz.3.3759': attribute type 10 has an invalid length. [ 448.506979][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3758'. [ 448.523019][T18414] team0: Device veth1_macvtap failed to register rx_handler [ 448.904068][T18425] netlink: 'syz.2.3763': attribute type 1 has an invalid length. [ 448.912177][T18426] netlink: 'syz.2.3763': attribute type 1 has an invalid length. [ 449.143824][T18425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.361278][T18443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3769'. [ 449.372551][T18443] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3769'. [ 449.402767][T18443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3769'. [ 449.415875][T18443] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3769'. [ 449.426750][T18436] tipc: Enabling of bearer rejected, failed to enable media [ 449.664320][T18462] xt_TPROXY: Can be used only with -p tcp or -p udp [ 450.072706][T18471] lo speed is unknown, defaulting to 1000 [ 450.114704][T18471] lo speed is unknown, defaulting to 1000 [ 450.808111][T18506] netlink: 'syz.0.3788': attribute type 1 has an invalid length. [ 451.122168][T18523] lo speed is unknown, defaulting to 1000 [ 451.131789][T18523] lo speed is unknown, defaulting to 1000 [ 452.990719][T18478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 453.131864][T18529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3795'. [ 453.619297][T18565] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 453.701133][T18576] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3807'. [ 454.193605][T18606] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20000 [ 454.570173][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3828'. [ 454.627338][T18639] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3829'. [ 454.769976][T18651] xt_connbytes: Forcing CT accounting to be enabled [ 455.015687][T18665] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3838'. [ 455.044910][T18665] netlink: 'syz.4.3838': attribute type 32 has an invalid length. [ 455.077792][T18665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3838'. [ 455.152699][T18665] bond1: Setting coupled_control to off (0) [ 455.266898][T18681] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3845'. [ 455.279873][T18682] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 455.293353][T18682] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 455.306783][T18682] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 455.479023][T18692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3849'. [ 455.517623][T18692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3849'. [ 455.739465][T18705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3853'. [ 455.769364][T18705] netlink: 91 bytes leftover after parsing attributes in process `syz.0.3853'. [ 455.873954][T18705] syzkaller1: entered promiscuous mode [ 455.893332][T18705] syzkaller1: entered allmulticast mode [ 455.943522][T18716] netlink: 'syz.4.3859': attribute type 3 has an invalid length. [ 456.696263][T18750] lo speed is unknown, defaulting to 1000 [ 456.727289][T18750] lo speed is unknown, defaulting to 1000 [ 456.963035][T18762] geneve2: entered promiscuous mode [ 456.968451][T18762] geneve2: entered allmulticast mode [ 457.012889][T18759] lo speed is unknown, defaulting to 1000 [ 457.028454][ T5942] IPVS: starting estimator thread 0... [ 457.131244][T18766] IPVS: using max 28 ests per chain, 67200 per kthread [ 457.415587][ T30] audit: type=1107 audit(1772860865.543:10): pid=18782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 457.651476][T18759] lo speed is unknown, defaulting to 1000 [ 458.434284][T18803] siw: device registration error -23 [ 458.460094][T18819] netlink: 'syz.3.3891': attribute type 21 has an invalid length. [ 458.484389][T18819] netlink: 'syz.3.3891': attribute type 1 has an invalid length. [ 459.032667][T18832] __nla_validate_parse: 5 callbacks suppressed [ 459.032687][T18832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3895'. [ 459.581540][T18854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3902'. [ 459.620271][T18854] netlink: 'syz.1.3902': attribute type 1 has an invalid length. [ 459.698010][T18862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3905'. [ 460.253694][T18881] tipc: Started in network mode [ 460.258796][T18881] tipc: Node identity 3242be76cf7c, cluster identity 4711 [ 460.266889][T18881] tipc: Enabled bearer , priority 0 [ 460.276154][T18881] syzkaller0: entered promiscuous mode [ 460.281776][T18881] syzkaller0: entered allmulticast mode [ 460.294717][T18881] tipc: Resetting bearer [ 460.305688][T18880] tipc: Resetting bearer [ 460.342388][T18880] tipc: Disabling bearer [ 460.538487][T18891] netlink: 'syz.4.3914': attribute type 11 has an invalid length. [ 460.556611][T18891] netlink: 'syz.4.3914': attribute type 4 has an invalid length. [ 460.573032][T18892] veth1_macvtap: left promiscuous mode [ 460.579310][T18891] netlink: 199768 bytes leftover after parsing attributes in process `syz.4.3914'. [ 460.587709][T18892] macsec0: entered allmulticast mode [ 460.618774][T18892] veth1_macvtap: entered promiscuous mode [ 460.624578][T18892] veth1_macvtap: entered allmulticast mode [ 460.651457][T18892] macsec0: left allmulticast mode [ 460.656550][T18892] veth1_macvtap: left allmulticast mode [ 460.688780][T18892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3915'. [ 460.851847][T18899] netlink: 'syz.4.3917': attribute type 21 has an invalid length. [ 460.952517][T18899] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3917'. [ 460.982958][T18899] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3917'. [ 461.123355][T11428] udevd[11428]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 461.164414][T10989] udevd[10989]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 461.177006][T18908] netlink: 'syz.1.3920': attribute type 1 has an invalid length. [ 461.255138][T18913] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 461.315449][T18913] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 461.332556][T18913] bond1: (slave ip6gre1): making interface the new active one [ 461.371866][T18922] netlink: 'syz.4.3925': attribute type 9 has an invalid length. [ 461.389928][T18913] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 461.411965][T18916] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 461.422941][T18916] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 461.506453][T18925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3926'. [ 461.761138][T18942] --map-set only usable from mangle table [ 461.809859][T18942] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 461.980599][T18948] geneve1: entered promiscuous mode [ 462.001917][T18953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3939'. [ 462.002548][T18948] macsec1: entered promiscuous mode [ 462.049328][T18948] macsec1: entered allmulticast mode [ 462.068143][T18948] geneve1: entered allmulticast mode [ 462.089001][T18960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3939'. [ 462.155495][T18959] pim6reg1: entered promiscuous mode [ 462.176896][T18959] pim6reg1: entered allmulticast mode [ 462.660232][T18980] hsr_slave_0: left promiscuous mode [ 462.687325][T18980] hsr_slave_1: left promiscuous mode [ 463.059435][T18998] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.692346][T19030] veth1_macvtap: left promiscuous mode [ 463.707621][T19030] macsec0: entered promiscuous mode [ 463.728862][T19030] veth1_macvtap: entered promiscuous mode [ 463.743591][T19030] macsec0: left promiscuous mode [ 463.919866][T19034] 8021q: VLANs not supported on gre0 [ 464.144673][T19054] pimreg3: entered allmulticast mode [ 464.229778][T19052] bond2: Unable to set down delay as MII monitoring is disabled [ 464.289093][T19052] bond2 (unregistering): Released all slaves [ 464.663494][T19084] __nla_validate_parse: 8 callbacks suppressed [ 464.663516][T19084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3980'. [ 465.780397][T19134] lo speed is unknown, defaulting to 1000 [ 465.800240][T19134] lo speed is unknown, defaulting to 1000 [ 466.019226][T19152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4004'. [ 466.538584][T19173] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4010'. [ 466.566381][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4012'. [ 466.575743][T19177] netlink: 'syz.3.4012': attribute type 30 has an invalid length. [ 466.584660][T19177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4012'. [ 466.754469][T19185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4015'. [ 466.873185][T19191] FAULT_INJECTION: forcing a failure. [ 466.873185][T19191] name failslab, interval 1, probability 0, space 0, times 0 [ 466.908893][T19191] CPU: 0 UID: 0 PID: 19191 Comm: syz.3.4017 Not tainted syzkaller #0 PREEMPT(full) [ 466.908924][T19191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 466.908938][T19191] Call Trace: [ 466.908947][T19191] [ 466.908956][T19191] dump_stack_lvl+0xe8/0x150 [ 466.908992][T19191] should_fail_ex+0x412/0x560 [ 466.909026][T19191] should_failslab+0xa8/0x100 [ 466.909086][T19191] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 466.909111][T19191] ? trace_kmalloc+0x2a/0x110 [ 466.909131][T19191] ? page_pool_create_percpu+0x76/0xb80 [ 466.909236][T19191] page_pool_create_percpu+0x76/0xb80 [ 466.909260][T19191] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 466.909290][T19191] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 466.909354][T19191] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 466.909410][T19191] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 466.909494][T19191] ? __pfx_autoremove_wake_function+0x10/0x10 [ 466.909530][T19191] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 466.909583][T19191] ? 0xffffffffa020180c [ 466.909631][T19191] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 466.909674][T19191] ? _copy_from_user+0x94/0xb0 [ 466.909707][T19191] ? bpf_test_init+0x113/0x150 [ 466.909732][T19191] ? xdp_convert_md_to_buff+0x5b/0x330 [ 466.909770][T19191] bpf_prog_test_run_xdp+0x81c/0x1160 [ 466.909817][T19191] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 466.909852][T19191] ? __fget_files+0x2a/0x420 [ 466.909890][T19191] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 466.909920][T19191] bpf_prog_test_run+0x2c7/0x340 [ 466.909946][T19191] __sys_bpf+0x643/0x950 [ 466.909981][T19191] ? __pfx___sys_bpf+0x10/0x10 [ 466.910031][T19191] ? ksys_write+0x242/0x270 [ 466.910056][T19191] ? __pfx_ksys_write+0x10/0x10 [ 466.910087][T19191] __x64_sys_bpf+0x7c/0x90 [ 466.910118][T19191] do_syscall_64+0x14d/0xf80 [ 466.910138][T19191] ? trace_irq_disable+0x3b/0x150 [ 466.910169][T19191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.910191][T19191] ? clear_bhb_loop+0x40/0x90 [ 466.910217][T19191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.910244][T19191] RIP: 0033:0x7f6bd8b9c799 [ 466.910265][T19191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.910284][T19191] RSP: 002b:00007f6bd9b0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 466.910306][T19191] RAX: ffffffffffffffda RBX: 00007f6bd8e15fa0 RCX: 00007f6bd8b9c799 [ 466.910322][T19191] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 466.910337][T19191] RBP: 00007f6bd9b0b090 R08: 0000000000000000 R09: 0000000000000000 [ 466.910350][T19191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.910363][T19191] R13: 00007f6bd8e16038 R14: 00007f6bd8e15fa0 R15: 00007ffec54c4f18 [ 466.910397][T19191] [ 467.599492][T19205] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.833942][T19205] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.999660][T19205] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.102753][T19205] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.190613][T19230] FAULT_INJECTION: forcing a failure. [ 468.190613][T19230] name failslab, interval 1, probability 0, space 0, times 0 [ 468.220739][T19230] CPU: 0 UID: 0 PID: 19230 Comm: syz.2.4031 Not tainted syzkaller #0 PREEMPT(full) [ 468.220770][T19230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.220784][T19230] Call Trace: [ 468.220792][T19230] [ 468.220801][T19230] dump_stack_lvl+0xe8/0x150 [ 468.220837][T19230] should_fail_ex+0x412/0x560 [ 468.220870][T19230] should_failslab+0xa8/0x100 [ 468.220900][T19230] __kvmalloc_node_noprof+0x178/0x8a0 [ 468.220927][T19230] ? page_pool_create_percpu+0x2dd/0xb80 [ 468.220952][T19230] ? page_pool_create_percpu+0xaf/0xb80 [ 468.220981][T19230] page_pool_create_percpu+0x2dd/0xb80 [ 468.221004][T19230] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 468.221035][T19230] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 468.221074][T19230] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 468.221118][T19230] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 468.221152][T19230] ? __pfx_autoremove_wake_function+0x10/0x10 [ 468.221180][T19230] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 468.221233][T19230] ? 0xffffffffa0201810 [ 468.221280][T19230] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 468.221322][T19230] ? _copy_from_user+0x94/0xb0 [ 468.221355][T19230] ? bpf_test_init+0x113/0x150 [ 468.221381][T19230] ? xdp_convert_md_to_buff+0x5b/0x330 [ 468.221414][T19230] bpf_prog_test_run_xdp+0x81c/0x1160 [ 468.221467][T19230] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 468.221502][T19230] ? __fget_files+0x2a/0x420 [ 468.221539][T19230] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 468.221574][T19230] bpf_prog_test_run+0x2c7/0x340 [ 468.221600][T19230] __sys_bpf+0x643/0x950 [ 468.221636][T19230] ? __pfx___sys_bpf+0x10/0x10 [ 468.221685][T19230] ? ksys_write+0x242/0x270 [ 468.221711][T19230] ? __pfx_ksys_write+0x10/0x10 [ 468.221742][T19230] __x64_sys_bpf+0x7c/0x90 [ 468.221773][T19230] do_syscall_64+0x14d/0xf80 [ 468.221794][T19230] ? trace_irq_disable+0x3b/0x150 [ 468.221824][T19230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.221847][T19230] ? clear_bhb_loop+0x40/0x90 [ 468.221873][T19230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.221895][T19230] RIP: 0033:0x7f070bb9c799 [ 468.221914][T19230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.221932][T19230] RSP: 002b:00007f070ca5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 468.221956][T19230] RAX: ffffffffffffffda RBX: 00007f070be15fa0 RCX: 00007f070bb9c799 [ 468.221972][T19230] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 468.221985][T19230] RBP: 00007f070ca5a090 R08: 0000000000000000 R09: 0000000000000000 [ 468.221998][T19230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.222011][T19230] R13: 00007f070be16038 R14: 00007f070be15fa0 R15: 00007ffd2c52adc8 [ 468.222045][T19230] [ 468.222130][T19230] page_pool_create_percpu() gave up with errno -12 [ 468.566580][ T7271] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.708607][ T1003] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.719696][ T7239] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.733518][ T7239] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.934475][T19241] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 469.267603][T19259] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4042'. [ 469.347990][T19258] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4042'. [ 469.495630][T19270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4046'. [ 469.566403][T19270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.651871][T19270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.671323][T19278] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4047'. [ 470.624562][T19310] FAULT_INJECTION: forcing a failure. [ 470.624562][T19310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.656229][T19310] CPU: 1 UID: 0 PID: 19310 Comm: syz.4.4058 Not tainted syzkaller #0 PREEMPT(full) [ 470.656261][T19310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 470.656274][T19310] Call Trace: [ 470.656283][T19310] [ 470.656292][T19310] dump_stack_lvl+0xe8/0x150 [ 470.656336][T19310] should_fail_ex+0x412/0x560 [ 470.656370][T19310] _copy_from_iter+0x1d3/0x1670 [ 470.656401][T19310] ? rcu_is_watching+0x15/0xb0 [ 470.656434][T19310] ? skb_ext_add+0x148/0x8f0 [ 470.656470][T19310] ? kmem_cache_alloc_noprof+0x307/0x650 [ 470.656490][T19310] ? skb_ext_add+0x148/0x8f0 [ 470.656522][T19310] ? __pfx__copy_from_iter+0x10/0x10 [ 470.656556][T19310] ? skb_ext_add+0x3b3/0x8f0 [ 470.656588][T19310] ? dev_get_by_index+0x22/0x2e0 [ 470.656732][T19310] ? skb_put+0x11b/0x210 [ 470.656767][T19310] raw_sendmsg+0x3db/0xf90 [ 470.656860][T19310] ? __pfx_raw_sendmsg+0x10/0x10 [ 470.656895][T19310] ? aa_sock_msg_perm+0xf1/0x1b0 [ 470.656927][T19310] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 470.656955][T19310] ____sys_sendmsg+0x972/0x9f0 [ 470.656987][T19310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.657018][T19310] ? import_iovec+0x73/0xa0 [ 470.657054][T19310] ___sys_sendmsg+0x2a5/0x360 [ 470.657081][T19310] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.657143][T19310] ? __fget_files+0x2a/0x420 [ 470.657174][T19310] ? __fget_files+0x3a0/0x420 [ 470.657216][T19310] __x64_sys_sendmsg+0x1bd/0x2a0 [ 470.657240][T19310] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 470.657272][T19310] ? __pfx_ksys_write+0x10/0x10 [ 470.657308][T19310] do_syscall_64+0x14d/0xf80 [ 470.657328][T19310] ? trace_irq_disable+0x3b/0x150 [ 470.657359][T19310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.657382][T19310] ? clear_bhb_loop+0x40/0x90 [ 470.657408][T19310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.657429][T19310] RIP: 0033:0x7f5115f9c799 [ 470.657449][T19310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.657467][T19310] RSP: 002b:00007f5116ee0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.657489][T19310] RAX: ffffffffffffffda RBX: 00007f5116215fa0 RCX: 00007f5115f9c799 [ 470.657504][T19310] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 470.657517][T19310] RBP: 00007f5116ee0090 R08: 0000000000000000 R09: 0000000000000000 [ 470.657530][T19310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.657543][T19310] R13: 00007f5116216038 R14: 00007f5116215fa0 R15: 00007fff24b2ad78 [ 470.657577][T19310] [ 471.092821][T19317] tipc: Enabled bearer , priority 0 [ 471.100668][T19317] syzkaller0: entered promiscuous mode [ 471.106183][T19317] syzkaller0: entered allmulticast mode [ 471.158298][T19317] tipc: Resetting bearer [ 471.190876][T19316] tipc: Resetting bearer [ 471.227129][T19316] tipc: Disabling bearer [ 472.205553][T19342] FAULT_INJECTION: forcing a failure. [ 472.205553][T19342] name failslab, interval 1, probability 0, space 0, times 0 [ 472.262909][T19347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.272041][T19342] CPU: 1 UID: 0 PID: 19342 Comm: syz.3.4070 Not tainted syzkaller #0 PREEMPT(full) [ 472.272071][T19342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 472.272085][T19342] Call Trace: [ 472.272093][T19342] [ 472.272102][T19342] dump_stack_lvl+0xe8/0x150 [ 472.272137][T19342] should_fail_ex+0x412/0x560 [ 472.272171][T19342] should_failslab+0xa8/0x100 [ 472.272199][T19342] ? skb_clone+0x212/0x3a0 [ 472.272221][T19342] kmem_cache_alloc_noprof+0x87/0x650 [ 472.272252][T19342] skb_clone+0x212/0x3a0 [ 472.272272][T19342] ? can_send+0x655/0xd20 [ 472.272299][T19342] can_send+0x673/0xd20 [ 472.272322][T19342] ? kmem_cache_alloc_noprof+0x307/0x650 [ 472.272352][T19342] ? __pfx_can_send+0x10/0x10 [ 472.272373][T19342] ? skb_ext_add+0x3b3/0x8f0 [ 472.272447][T19342] ? dev_get_by_index+0x22/0x2e0 [ 472.272525][T19342] ? skb_put+0x11b/0x210 [ 472.272624][T19342] ? skb_setup_tx_timestamp+0xab/0x200 [ 472.272710][T19342] raw_sendmsg+0xb8c/0xf90 [ 472.272799][T19342] ? __pfx_raw_sendmsg+0x10/0x10 [ 472.272887][T19342] ? aa_sock_msg_perm+0xf1/0x1b0 [ 472.272951][T19342] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 472.273026][T19342] ____sys_sendmsg+0x972/0x9f0 [ 472.273110][T19342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.273187][T19342] ? import_iovec+0x73/0xa0 [ 472.273284][T19342] ___sys_sendmsg+0x2a5/0x360 [ 472.273349][T19342] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.273506][T19342] ? __fget_files+0x2a/0x420 [ 472.273581][T19342] ? __fget_files+0x3a0/0x420 [ 472.273687][T19342] __x64_sys_sendmsg+0x1bd/0x2a0 [ 472.273751][T19342] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 472.273827][T19342] ? __pfx_ksys_write+0x10/0x10 [ 472.273946][T19342] do_syscall_64+0x14d/0xf80 [ 472.274014][T19342] ? trace_irq_disable+0x3b/0x150 [ 472.274090][T19342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.274152][T19342] ? clear_bhb_loop+0x40/0x90 [ 472.274218][T19342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.274273][T19342] RIP: 0033:0x7f6bd8b9c799 [ 472.274326][T19342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.274371][T19342] RSP: 002b:00007f6bd9b0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.274429][T19342] RAX: ffffffffffffffda RBX: 00007f6bd8e15fa0 RCX: 00007f6bd8b9c799 [ 472.274471][T19342] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 472.274504][T19342] RBP: 00007f6bd9b0b090 R08: 0000000000000000 R09: 0000000000000000 [ 472.274543][T19342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.274575][T19342] R13: 00007f6bd8e16038 R14: 00007f6bd8e15fa0 R15: 00007ffec54c4f18 [ 472.274653][T19342] [ 472.320653][T19346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.593377][T19353] tipc: Enabled bearer , priority 0 [ 472.622677][T19353] syzkaller0: entered promiscuous mode [ 472.638164][T19353] syzkaller0: entered allmulticast mode [ 472.683716][T19353] tipc: Resetting bearer [ 472.717744][T19351] tipc: Resetting bearer [ 472.768399][T19351] tipc: Disabling bearer [ 472.861900][T19361] pim6reg1: entered promiscuous mode [ 472.877603][T19361] pim6reg1: entered allmulticast mode [ 473.022414][T19377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.260463][T19391] FAULT_INJECTION: forcing a failure. [ 473.260463][T19391] name failslab, interval 1, probability 0, space 0, times 0 [ 473.273657][T19391] CPU: 0 UID: 0 PID: 19391 Comm: syz.3.4088 Not tainted syzkaller #0 PREEMPT(full) [ 473.273684][T19391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.273697][T19391] Call Trace: [ 473.273706][T19391] [ 473.273715][T19391] dump_stack_lvl+0xe8/0x150 [ 473.273749][T19391] should_fail_ex+0x412/0x560 [ 473.273784][T19391] should_failslab+0xa8/0x100 [ 473.273813][T19391] ? skb_clone+0x212/0x3a0 [ 473.273837][T19391] kmem_cache_alloc_noprof+0x87/0x650 [ 473.273859][T19391] ? lock_acquire+0xf0/0x2e0 [ 473.273891][T19391] skb_clone+0x212/0x3a0 [ 473.273911][T19391] ? vxcan_xmit+0x1d3/0x780 [ 473.274079][T19391] vxcan_xmit+0x1e0/0x780 [ 473.274105][T19391] ? vxcan_xmit+0x49/0x780 [ 473.274135][T19391] dev_hard_start_xmit+0x2d8/0x870 [ 473.274177][T19391] __dev_queue_xmit+0x17a7/0x38d0 [ 473.274199][T19391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.274227][T19391] ? __dev_queue_xmit+0x28d/0x38d0 [ 473.274268][T19391] ? __pfx___dev_queue_xmit+0x10/0x10 [ 473.274300][T19391] ? __copy_skb_header+0xa3/0x4a0 [ 473.274344][T19391] ? skb_clone+0x246/0x3a0 [ 473.274363][T19391] ? can_send+0x655/0xd20 [ 473.274389][T19391] can_send+0x921/0xd20 [ 473.274412][T19391] ? kmem_cache_alloc_noprof+0x307/0x650 [ 473.274442][T19391] ? __pfx_can_send+0x10/0x10 [ 473.274463][T19391] ? skb_ext_add+0x3b3/0x8f0 [ 473.274496][T19391] ? dev_get_by_index+0x22/0x2e0 [ 473.274520][T19391] ? skb_put+0x11b/0x210 [ 473.274548][T19391] ? skb_setup_tx_timestamp+0xab/0x200 [ 473.274583][T19391] raw_sendmsg+0xb8c/0xf90 [ 473.274621][T19391] ? __pfx_raw_sendmsg+0x10/0x10 [ 473.274656][T19391] ? aa_sock_msg_perm+0xf1/0x1b0 [ 473.274687][T19391] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 473.274716][T19391] ____sys_sendmsg+0x972/0x9f0 [ 473.274748][T19391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.274780][T19391] ? import_iovec+0x73/0xa0 [ 473.274818][T19391] ___sys_sendmsg+0x2a5/0x360 [ 473.274846][T19391] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.274909][T19391] ? __fget_files+0x2a/0x420 [ 473.274940][T19391] ? __fget_files+0x3a0/0x420 [ 473.274983][T19391] __x64_sys_sendmsg+0x1bd/0x2a0 [ 473.275008][T19391] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 473.275042][T19391] ? __pfx_ksys_write+0x10/0x10 [ 473.275089][T19391] do_syscall_64+0x14d/0xf80 [ 473.275110][T19391] ? trace_irq_disable+0x3b/0x150 [ 473.275142][T19391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.275164][T19391] ? clear_bhb_loop+0x40/0x90 [ 473.275191][T19391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.275213][T19391] RIP: 0033:0x7f6bd8b9c799 [ 473.275234][T19391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.275252][T19391] RSP: 002b:00007f6bd9b0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.275275][T19391] RAX: ffffffffffffffda RBX: 00007f6bd8e15fa0 RCX: 00007f6bd8b9c799 [ 473.275291][T19391] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 473.275305][T19391] RBP: 00007f6bd9b0b090 R08: 0000000000000000 R09: 0000000000000000 [ 473.275319][T19391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.275332][T19391] R13: 00007f6bd8e16038 R14: 00007f6bd8e15fa0 R15: 00007ffec54c4f18 [ 473.275367][T19391] [ 473.668744][T19395] lo speed is unknown, defaulting to 1000 [ 473.706978][T19395] lo speed is unknown, defaulting to 1000 [ 473.966481][T19399] vxcan2: entered allmulticast mode [ 475.662922][T19450] tipc: Enabled bearer , priority 0 [ 475.678690][T19450] syzkaller0: entered promiscuous mode [ 475.684242][T19450] syzkaller0: entered allmulticast mode [ 475.817814][T19458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4111'. [ 475.818146][T19450] tipc: Resetting bearer [ 475.829454][T19458] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4111'. [ 475.884993][T19448] tipc: Resetting bearer [ 475.966175][T19448] tipc: Disabling bearer [ 476.017244][T19465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4114'. [ 476.027586][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4112'. [ 476.042687][T19465] xfrm2: entered allmulticast mode [ 476.100444][T19466] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 476.316349][T19466] bond2 (unregistering): Released all slaves [ 476.531400][T19480] netlink: 'syz.4.4119': attribute type 8 has an invalid length. [ 477.035770][T19500] tipc: Enabled bearer , priority 0 [ 477.044317][T19500] syzkaller0: entered promiscuous mode [ 477.050210][T19500] syzkaller0: entered allmulticast mode [ 477.113195][T19500] tipc: Resetting bearer [ 477.210478][T19499] tipc: Resetting bearer [ 477.246157][T19499] tipc: Disabling bearer [ 477.266762][T19502] pim6reg1: entered promiscuous mode [ 477.272859][T19502] pim6reg1: entered allmulticast mode [ 478.021010][T16639] Bluetooth: hci4: command tx timeout [ 478.021995][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 478.135496][T19529] netlink: 'syz.2.4136': attribute type 3 has an invalid length. [ 478.267600][T19529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4136'. [ 479.427880][T19592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4151'. [ 479.735379][T19595] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4155'. [ 479.779304][ T5828] block nbd3: Receive control failed (result -32) [ 479.955133][T19595] ipvlan0: entered promiscuous mode [ 479.963673][T19595] bridge0: port 3(ipvlan0) entered blocking state [ 479.990541][T19595] bridge0: port 3(ipvlan0) entered disabled state [ 480.017929][T19595] ipvlan0: entered allmulticast mode [ 480.028535][T19595] bridge0: entered allmulticast mode [ 480.047662][T19595] ipvlan0: left allmulticast mode [ 480.052978][T19595] bridge0: left allmulticast mode [ 480.436300][T19614] tipc: Enabled bearer , priority 0 [ 480.452000][T19614] syzkaller0: entered promiscuous mode [ 480.464219][T19614] syzkaller0: entered allmulticast mode [ 480.614361][T19622] tipc: Resetting bearer [ 480.630997][T19614] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4162'. [ 480.658802][T19613] tipc: Resetting bearer [ 480.690207][T19613] tipc: Disabling bearer [ 480.864924][T19630] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 480.895836][T19632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4166'. [ 481.042320][T19639] lo speed is unknown, defaulting to 1000 [ 481.055580][T19639] lo speed is unknown, defaulting to 1000 [ 481.246698][T19646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4169'. [ 481.287667][T19646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4169'. [ 481.296874][T19646] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4169'. [ 481.443092][T19651] batadv0: entered promiscuous mode [ 481.460006][T19651] batadv0: entered allmulticast mode [ 481.480594][T19651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4171'. [ 481.506955][T19657] xt_TCPMSS: Only works on TCP SYN packets [ 481.516394][T19657] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4172'. [ 481.557037][T19652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4171'. [ 481.632657][T19655] lo speed is unknown, defaulting to 1000 [ 481.648818][T19655] lo speed is unknown, defaulting to 1000 [ 482.518945][T19696] netlink: 'syz.4.4184': attribute type 49 has an invalid length. [ 482.780705][T19707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4187'. [ 483.126699][T19709] lo speed is unknown, defaulting to 1000 [ 483.174535][T19709] lo speed is unknown, defaulting to 1000 [ 484.126586][T19736] lo speed is unknown, defaulting to 1000 [ 484.165519][T19740] xfrm1: entered allmulticast mode [ 484.269810][T19736] lo speed is unknown, defaulting to 1000 [ 484.279035][T19744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4197'. [ 484.290696][T19744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4197'. [ 484.572535][T19756] 0ªX¹¦À: renamed from caif0 [ 484.698209][T19756] 0ªX¹¦À: entered allmulticast mode [ 484.715556][T19756] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 484.986662][T19763] netlink: 'syz.2.4204': attribute type 1 has an invalid length. [ 485.911262][T19779] __nla_validate_parse: 21 callbacks suppressed [ 485.911285][T19779] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4206'. [ 485.950001][T19779] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4206'. [ 486.001576][T19779] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4206'. [ 486.088403][T19779] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4206'. [ 486.165109][T19779] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4206'. [ 486.188789][T19779] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4206'. [ 486.240881][T19779] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4206'. [ 486.272150][T19779] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4206'. [ 486.287883][T19779] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.295672][T19779] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.330325][T19779] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4206'. [ 486.357897][T19779] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4206'. [ 486.954709][T19779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.988641][T19779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.539521][T19779] geneve1: left allmulticast mode [ 487.692475][ T481] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.711972][ T481] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.736264][ T481] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.747131][ T481] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.122835][T19823] lo speed is unknown, defaulting to 1000 [ 488.151222][T19823] lo speed is unknown, defaulting to 1000 [ 488.254903][T19825] lo speed is unknown, defaulting to 1000 [ 488.450536][T19825] lo speed is unknown, defaulting to 1000 [ 488.729311][T19840] netlink: 'syz.4.4220': attribute type 1 has an invalid length. [ 490.032702][T19865] syzkaller0: entered promiscuous mode [ 490.040279][T19865] syzkaller0: entered allmulticast mode [ 490.827845][T19877] IPVS: set_ctl: invalid protocol: 12 172.20.20.48:20002 [ 491.995350][T19875] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 492.230749][T19892] __nla_validate_parse: 144 callbacks suppressed [ 492.230774][T19892] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4234'. [ 492.264172][T19885] lo speed is unknown, defaulting to 1000 [ 492.285181][T19885] lo speed is unknown, defaulting to 1000 [ 492.526890][T19902] FAULT_INJECTION: forcing a failure. [ 492.526890][T19902] name failslab, interval 1, probability 0, space 0, times 0 [ 492.554476][T19902] CPU: 0 UID: 0 PID: 19902 Comm: syz.4.4240 Not tainted syzkaller #0 PREEMPT(full) [ 492.554506][T19902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.554519][T19902] Call Trace: [ 492.554528][T19902] [ 492.554537][T19902] dump_stack_lvl+0xe8/0x150 [ 492.554572][T19902] should_fail_ex+0x412/0x560 [ 492.554616][T19902] should_failslab+0xa8/0x100 [ 492.554646][T19902] __kmalloc_noprof+0xe8/0x760 [ 492.554671][T19902] ? tomoyo_encode+0x28b/0x550 [ 492.554819][T19902] tomoyo_encode+0x28b/0x550 [ 492.554856][T19902] tomoyo_realpath_from_path+0x58d/0x5d0 [ 492.554899][T19902] ? tomoyo_path_number_perm+0x219/0x630 [ 492.554925][T19902] tomoyo_path_number_perm+0x246/0x630 [ 492.554954][T19902] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 492.554984][T19902] ? sb_end_write+0xe9/0x1c0 [ 492.555025][T19902] ? vfs_write+0x9bc/0xb90 [ 492.555084][T19902] ? ksys_write+0x1fc/0x270 [ 492.555114][T19902] security_file_ioctl+0xc3/0x2a0 [ 492.555176][T19902] __se_sys_ioctl+0x47/0x170 [ 492.555205][T19902] do_syscall_64+0x14d/0xf80 [ 492.555225][T19902] ? trace_irq_disable+0x3b/0x150 [ 492.555257][T19902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.555278][T19902] ? clear_bhb_loop+0x40/0x90 [ 492.555305][T19902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.555326][T19902] RIP: 0033:0x7f5115f9c799 [ 492.555347][T19902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.555366][T19902] RSP: 002b:00007f5116ee0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.555389][T19902] RAX: ffffffffffffffda RBX: 00007f5116215fa0 RCX: 00007f5115f9c799 [ 492.555405][T19902] RDX: 00002000000000c0 RSI: 00000000401054d5 RDI: 0000000000000003 [ 492.555419][T19902] RBP: 00007f5116ee0090 R08: 0000000000000000 R09: 0000000000000000 [ 492.555435][T19902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.555448][T19902] R13: 00007f5116216038 R14: 00007f5116215fa0 R15: 00007fff24b2ad78 [ 492.555483][T19902] [ 492.555623][T19902] ERROR: Out of memory at tomoyo_realpath_from_path. [ 492.610443][T19904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4241'. [ 492.835890][T19906] lo speed is unknown, defaulting to 1000 [ 492.895470][T19906] lo speed is unknown, defaulting to 1000 [ 493.387623][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 493.545514][T19927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4246'. [ 495.244776][T19965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4258'. [ 495.405729][T19972] lo speed is unknown, defaulting to 1000 [ 495.452015][T19972] lo speed is unknown, defaulting to 1000 [ 495.468794][T19975] pim6reg1: entered promiscuous mode [ 495.474160][T19975] pim6reg1: entered allmulticast mode [ 496.429840][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 496.524451][T20019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4277'. [ 496.873975][T20023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4279'. [ 496.941750][T20024] pim6reg1: entered promiscuous mode [ 496.953691][T20024] pim6reg1: entered allmulticast mode [ 497.257277][T20038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4284'. [ 497.287693][T20038] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4284'. [ 497.622934][T20055] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4288'. [ 498.561875][T20081] tipc: Enabled bearer , priority 0 [ 498.656877][T20081] tipc: Disabling bearer [ 498.836303][T20105] pim6reg1: entered promiscuous mode [ 498.841841][T20105] pim6reg1: entered allmulticast mode [ 499.288794][T20124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4302'. [ 499.316974][T20129] netlink: 8732 bytes leftover after parsing attributes in process `syz.0.4305'. [ 499.365546][T20129] openvswitch: netlink: Actions may not be safe on all matching packets [ 499.380804][T20124] vlan2: entered promiscuous mode [ 499.387159][T20124] veth0_to_team: entered promiscuous mode [ 499.406958][T20124] vlan2: entered allmulticast mode [ 499.421272][T20124] veth0_to_team: entered allmulticast mode [ 499.460569][T20131] vlan2: entered promiscuous mode [ 499.466311][T20131] macvtap0: entered promiscuous mode [ 499.643043][T20137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4307'. [ 499.912140][T20152] tipc: Enabled bearer , priority 0 [ 499.929664][T20152] syzkaller0: entered promiscuous mode [ 499.935243][T20152] syzkaller0: entered allmulticast mode [ 499.955085][T20145] pim6reg1: entered promiscuous mode [ 499.968953][T20145] pim6reg1: entered allmulticast mode [ 500.243580][T20166] tipc: Resetting bearer [ 500.273036][T20150] tipc: Resetting bearer [ 500.295159][T20150] tipc: Disabling bearer [ 500.563082][T20180] openvswitch: netlink: Key 4 has unexpected len 2 expected 12 [ 500.571018][T20139] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 500.580815][T20139] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 500.959014][T20187] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4324'. [ 500.969307][T20139] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 501.080916][T20139] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 501.396152][T20139] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 501.417078][T20201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4328'. [ 501.431905][T20139] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 501.452603][T20201] IPv6: NLM_F_CREATE should be specified when creating new route [ 501.544268][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.708270][T20139] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 501.713601][T20202] syzkaller0: entered promiscuous mode [ 501.714243][T20139] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 501.721625][T20202] syzkaller0: entered allmulticast mode [ 501.820418][T20215] pim6reg1: entered promiscuous mode [ 501.825786][T20215] pim6reg1: entered allmulticast mode [ 502.182089][T20139] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 502.197529][T20139] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 502.328689][T20222] netlink: 'syz.0.4331': attribute type 1 has an invalid length. [ 502.645126][T20240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4336'. [ 502.749524][T20246] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4337'. [ 502.772707][T20244] wlan1 speed is unknown, defaulting to 1000 [ 502.800761][T20244] wlan1 speed is unknown, defaulting to 1000 [ 502.823201][T20244] wlan1 speed is unknown, defaulting to 1000 [ 502.875229][T20244] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 502.884131][T20251] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4339'. [ 502.989646][T20244] wlan1 speed is unknown, defaulting to 1000 [ 503.003380][T20255] xt_connbytes: Forcing CT accounting to be enabled [ 503.031196][T20244] wlan1 speed is unknown, defaulting to 1000 [ 503.063737][T20244] wlan1 speed is unknown, defaulting to 1000 [ 503.086845][T20244] wlan1 speed is unknown, defaulting to 1000 [ 503.120247][T20244] wlan1 speed is unknown, defaulting to 1000 [ 503.146543][T20244] wlan1 speed is unknown, defaulting to 1000 [ 503.176921][T20244] wlan1 speed is unknown, defaulting to 1000 [ 503.748322][T20289] bridge0: entered promiscuous mode [ 503.863975][T20291] lo speed is unknown, defaulting to 1000 [ 503.892935][T20285] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4345'. [ 503.916807][T20291] lo speed is unknown, defaulting to 1000 [ 504.030150][T20283] pim6reg1: entered promiscuous mode [ 504.035632][T20283] pim6reg1: entered allmulticast mode [ 504.166253][T20298] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.369937][T20298] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.562511][T20298] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.831182][T20298] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.873667][T20291] wlan1 speed is unknown, defaulting to 1000 [ 504.981162][T20330] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4352'. [ 505.152801][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.285479][T20092] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.302667][T20092] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.394180][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.563893][T20341] sctp: [Deprecated]: syz.3.4355 (pid 20341) Use of int in max_burst socket option. [ 505.563893][T20341] Use struct sctp_assoc_value instead [ 506.061362][T20347] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4356'. [ 506.243366][T20346] syzkaller0: entered promiscuous mode [ 506.249124][T20346] syzkaller0: entered allmulticast mode [ 508.475463][T20383] netlink: 192 bytes leftover after parsing attributes in process `syz.4.4363'. [ 508.560727][T20388] tipc: Started in network mode [ 508.565683][T20388] tipc: Node identity 06d5d2d0792f, cluster identity 4711 [ 508.581997][T20388] tipc: Enabled bearer , priority 0 [ 508.598650][T20388] syzkaller0: entered promiscuous mode [ 508.604190][T20388] syzkaller0: entered allmulticast mode [ 508.667197][T20397] unsupported nlmsg_type 40 [ 508.735971][T20388] tipc: Resetting bearer [ 508.766354][T20387] tipc: Resetting bearer [ 508.801328][T20409] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4369'. [ 508.844835][T20387] tipc: Disabling bearer [ 509.164604][T20425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4374'. [ 509.186073][T20425] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4374'. [ 509.203631][T20428] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4376'. [ 509.214107][T20424] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4376'. [ 509.364464][T20431] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4377'. [ 509.481119][T20435] pim6reg1: entered promiscuous mode [ 509.507609][T20435] pim6reg1: entered allmulticast mode [ 509.680960][T20446] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 509.748313][T20092] ip6_tunnel: ip6tnl1 xmit: Routing loop! Remote address found on this node! [ 509.782579][ T9] ip6_tunnel: ip6tnl1 xmit: Routing loop! Remote address found on this node! [ 509.792114][T20092] ip6_tunnel: ip6tnl1 xmit: Routing loop! Remote address found on this node! [ 509.905490][T20453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4388'. [ 510.101856][ T9] ip6_tunnel: ip6tnl1 xmit: Routing loop! Remote address found on this node! [ 510.125325][T20472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4391'. [ 510.134808][T20471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4392'. [ 510.197740][ T9] ip6_tunnel: ip6tnl1 xmit: Routing loop! Remote address found on this node! [ 510.286209][T20483] netlink: 'syz.1.4387': attribute type 21 has an invalid length. [ 513.105840][T20482] bridge0: entered promiscuous mode [ 513.118801][T20482] erspan0: entered promiscuous mode [ 513.126053][T20482] debugfs: 'hsr1' already exists in 'hsr' [ 513.132410][T20482] Cannot create hsr debugfs directory [ 513.139330][T20482] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 513.315581][T20495] pim6reg1: entered promiscuous mode [ 513.343949][T20495] pim6reg1: entered allmulticast mode [ 513.527043][T20501] sctp: [Deprecated]: syz.0.4398 (pid 20501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 513.527043][T20501] Use struct sctp_sack_info instead [ 513.835243][T20517] __nla_validate_parse: 6 callbacks suppressed [ 513.835265][T20517] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4405'. [ 513.935908][T20523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4406'. [ 514.017654][ C0] ip6_tunnel: ip6tnl1 xmit: Routing loop! Remote address found on this node! [ 514.083983][T20527] netlink: 'syz.1.4404': attribute type 7 has an invalid length. [ 514.116788][T20527] netlink: 'syz.1.4404': attribute type 8 has an invalid length. [ 514.148056][T20527] netlink: 209828 bytes leftover after parsing attributes in process `syz.1.4404'. [ 514.263626][T20531] netlink: 'syz.3.4408': attribute type 13 has an invalid length. [ 514.291686][T20531] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4408'. [ 514.381306][T20537] batadv0: entered promiscuous mode [ 514.388552][T20537] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 514.397156][T20537] batadv0: left promiscuous mode [ 514.402236][T20535] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4408'. [ 514.402296][T20535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4408'. [ 514.424480][T20535] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4408'. [ 514.490350][T20535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4408'. [ 514.694642][T20539] lo speed is unknown, defaulting to 1000 [ 514.714713][T20539] lo speed is unknown, defaulting to 1000 [ 514.936586][T20539] wlan1 speed is unknown, defaulting to 1000 [ 515.164359][T20571] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 516.693508][T20634] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4435'. [ 516.820419][T20640] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 516.850133][T20644] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 516.936500][T20640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4437'. [ 517.178500][T20643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.206149][T20643] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.236081][T20643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 518.149287][T20699] netlink: 'syz.4.4452': attribute type 1 has an invalid length. [ 518.605431][T20721] netlink: 'syz.0.4459': attribute type 8 has an invalid length. [ 519.586073][T20736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.197388][ T24] wlan1 speed is unknown, defaulting to 1000 [ 521.385545][T20791] ip6gre2: entered promiscuous mode [ 521.582033][T20807] __nla_validate_parse: 2 callbacks suppressed [ 521.582054][T20807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4485'. [ 521.729326][T20815] netlink: 'syz.2.4488': attribute type 1 has an invalid length. [ 521.796507][T20823] netlink: 'syz.2.4488': attribute type 1 has an invalid length. [ 522.657748][ C0] ip6_tunnel: ip6tnl1 xmit: Routing loop! Remote address found on this node! [ 539.297778][ C0] ip6_tunnel: ip6tnl1 xmit: Routing loop! Remote address found on this node! [ 562.980814][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.710692][T20833] xt_bpf: check failed: parse error [ 568.728679][T20833] siw: device registration error -23 [ 568.750958][T20839] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 568.954425][T20854] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4497'. [ 568.975883][T20854] netlink: 'syz.4.4497': attribute type 2 has an invalid length. [ 568.994573][T20854] : entered promiscuous mode [ 569.012645][T20854] netlink: 'syz.4.4497': attribute type 2 has an invalid length. [ 569.021182][T20854] : left promiscuous mode [ 569.733429][T20888] FAULT_INJECTION: forcing a failure. [ 569.733429][T20888] name failslab, interval 1, probability 0, space 0, times 0 [ 569.809181][T20888] CPU: 1 UID: 0 PID: 20888 Comm: syz.3.4508 Not tainted syzkaller #0 PREEMPT(full) [ 569.809217][T20888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 569.809231][T20888] Call Trace: [ 569.809239][T20888] [ 569.809249][T20888] dump_stack_lvl+0xe8/0x150 [ 569.809289][T20888] should_fail_ex+0x412/0x560 [ 569.809325][T20888] should_failslab+0xa8/0x100 [ 569.809357][T20888] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 569.809383][T20888] ? __alloc_skb+0x1d0/0x7d0 [ 569.809414][T20888] ? __local_bh_enable_ip+0xd0/0x130 [ 569.809496][T20888] __alloc_skb+0x1d0/0x7d0 [ 569.809533][T20888] create_monitor_ctrl_event+0x38/0x480 [ 569.809631][T20888] ? skb_put+0x11b/0x210 [ 569.809667][T20888] mgmt_cmd_status+0x1cb/0x500 [ 569.809702][T20888] get_connections+0x19b/0x680 [ 569.809761][T20888] hci_mgmt_cmd+0xa14/0xfa0 [ 569.809826][T20888] hci_sock_sendmsg+0x6dd/0xf40 [ 569.809855][T20888] ? __pfx_aa_sk_perm+0x10/0x10 [ 569.809916][T20888] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 569.809945][T20888] ? aa_sock_msg_perm+0xf1/0x1b0 [ 569.809975][T20888] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 569.810003][T20888] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 569.810030][T20888] sock_write_iter+0x49b/0x4f0 [ 569.810058][T20888] ? __pfx_sock_write_iter+0x10/0x10 [ 569.810096][T20888] ? bpf_lsm_file_permission+0x9/0x20 [ 569.810121][T20888] ? security_file_permission+0x75/0x260 [ 569.810155][T20888] vfs_write+0x61d/0xb90 [ 569.810190][T20888] ? __pfx_vfs_write+0x10/0x10 [ 569.810226][T20888] ? __fget_files+0x2a/0x420 [ 569.810270][T20888] ksys_write+0x150/0x270 [ 569.810296][T20888] ? __pfx_ksys_write+0x10/0x10 [ 569.810334][T20888] do_syscall_64+0x14d/0xf80 [ 569.810355][T20888] ? trace_irq_disable+0x3b/0x150 [ 569.810386][T20888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.810409][T20888] ? clear_bhb_loop+0x40/0x90 [ 569.810437][T20888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.810459][T20888] RIP: 0033:0x7f6bd8b9c799 [ 569.810479][T20888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.810498][T20888] RSP: 002b:00007f6bd9b0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 569.810520][T20888] RAX: ffffffffffffffda RBX: 00007f6bd8e15fa0 RCX: 00007f6bd8b9c799 [ 569.810536][T20888] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000004 [ 569.810550][T20888] RBP: 00007f6bd9b0b090 R08: 0000000000000000 R09: 0000000000000000 [ 569.810563][T20888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.810575][T20888] R13: 00007f6bd8e16038 R14: 00007f6bd8e15fa0 R15: 00007ffec54c4f18 [ 569.810620][T20888] [ 570.378376][T20910] pimreg: tun_chr_ioctl cmd 2147767520 [ 570.636059][T20910] syzkaller0: entered promiscuous mode [ 570.648975][T20910] syzkaller0: entered allmulticast mode [ 570.714906][T20921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4520'. [ 571.297736][ C0] ip6_tunnel: ip6tnl1 xmit: Routing loop! Remote address found on this node! [ 571.759544][T20945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4527'. [ 573.413838][T20937] sit1: entered promiscuous mode [ 573.810170][T20967] netlink: 'syz.3.4533': attribute type 1 has an invalid length. [ 573.828726][T20967] netlink: 'syz.3.4533': attribute type 3 has an invalid length. [ 574.040521][T20973] pimreg: tun_chr_ioctl cmd 2147767520 [ 574.201479][T20985] raw_sendmsg: syz.0.4539 forgot to set AF_INET. Fix it! [ 574.309470][T20990] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4540'. [ 574.441125][T20994] netlink: 'syz.1.4542': attribute type 1 has an invalid length. [ 574.449373][T20994] netlink: 'syz.1.4542': attribute type 3 has an invalid length. [ 574.957969][T21023] pimreg: tun_chr_ioctl cmd 2147767520 [ 574.964188][T21014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4551'. [ 575.119187][T21030] syzkaller0: entered promiscuous mode [ 575.124773][T21030] syzkaller0: entered allmulticast mode [ 575.291800][ T5828] block nbd4: Receive control failed (result -32) [ 575.602187][T21052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4560'. [ 575.739231][T21059] wg1: Caught tx_queue_len zero misconfig [ 575.751425][T21059] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.062324][T21075] bond3: option lacp_active: invalid value (8) [ 576.073018][T21075] bond3 (unregistering): Released all slaves [ 576.198605][T21087] pimreg: tun_chr_ioctl cmd 2147767520 [ 576.360113][T21099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4575'. [ 576.387672][T21099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4575'. [ 576.443396][T21099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4575'. [ 576.809035][T21118] syzkaller0: entered promiscuous mode [ 576.814583][T21118] syzkaller0: entered allmulticast mode [ 576.899326][T21118] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 576.919366][T21128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 576.926636][T21128] IPv6: NLM_F_CREATE should be set when creating new route [ 576.933966][T21128] IPv6: NLM_F_CREATE should be set when creating new route [ 576.964947][T21118] bond4 (unregistering): Released all slaves [ 577.265435][T21136] netlink: 'syz.3.4589': attribute type 1 has an invalid length. [ 577.332623][T21148] bond4: (slave bridge3): making interface the new active one [ 577.348393][T21149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4590'. [ 577.358431][T21149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4590'. [ 577.374700][T21148] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 577.495560][T21151] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 577.516619][T21154] netlink: 'syz.1.4592': attribute type 10 has an invalid length. [ 577.638988][T21158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4595'. [ 577.792834][T21163] syzkaller0: entered promiscuous mode [ 577.804758][T21163] syzkaller0: entered allmulticast mode [ 578.125975][T21173] netlink: 616 bytes leftover after parsing attributes in process `syz.0.4600'. [ 578.156916][T21154] netlink: 'syz.1.4592': attribute type 4 has an invalid length. [ 578.263643][ T24] lo speed is unknown, defaulting to 1000 [ 578.277605][ T24] sqz0: Port: 1 Link DOWN [ 578.282685][ T24] lo speed is unknown, defaulting to 1000 [ 578.436237][T21182] netlink: 'syz.3.4604': attribute type 11 has an invalid length. [ 578.535910][T21180] syzkaller0: entered promiscuous mode [ 578.550826][T21180] syzkaller0: entered allmulticast mode [ 581.391705][T21268] __nla_validate_parse: 2 callbacks suppressed [ 581.391730][T21268] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4624'. [ 581.583490][T21281] syzkaller0: entered promiscuous mode [ 581.589627][T21281] syzkaller0: entered allmulticast mode [ 582.113382][T21310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4640'. [ 582.183609][T21311] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4637'. [ 582.279530][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4640'. [ 582.370074][T21318] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4643'. [ 583.062305][T21348] FAULT_INJECTION: forcing a failure. [ 583.062305][T21348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.141539][T21348] CPU: 0 UID: 0 PID: 21348 Comm: syz.3.4654 Not tainted syzkaller #0 PREEMPT(full) [ 583.141568][T21348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 583.141581][T21348] Call Trace: [ 583.141590][T21348] [ 583.141598][T21348] dump_stack_lvl+0xe8/0x150 [ 583.141632][T21348] should_fail_ex+0x412/0x560 [ 583.141664][T21348] _copy_from_user+0x2d/0xb0 [ 583.141706][T21348] __sys_connect+0x156/0x450 [ 583.141741][T21348] ? __pfx___sys_connect+0x10/0x10 [ 583.141783][T21348] ? __pfx_ksys_write+0x10/0x10 [ 583.141815][T21348] __x64_sys_connect+0x7a/0x90 [ 583.141847][T21348] do_syscall_64+0x14d/0xf80 [ 583.141867][T21348] ? trace_irq_disable+0x3b/0x150 [ 583.141898][T21348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.141920][T21348] ? clear_bhb_loop+0x40/0x90 [ 583.141944][T21348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.141967][T21348] RIP: 0033:0x7f6bd8b9c799 [ 583.141986][T21348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.142004][T21348] RSP: 002b:00007f6bd9b0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 583.142027][T21348] RAX: ffffffffffffffda RBX: 00007f6bd8e15fa0 RCX: 00007f6bd8b9c799 [ 583.142042][T21348] RDX: 000000000000001c RSI: 00002000000004c0 RDI: 0000000000000003 [ 583.142056][T21348] RBP: 00007f6bd9b0b090 R08: 0000000000000000 R09: 0000000000000000 [ 583.142069][T21348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.142081][T21348] R13: 00007f6bd8e16038 R14: 00007f6bd8e15fa0 R15: 00007ffec54c4f18 [ 583.142114][T21348] [ 583.451358][T21356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4657'. [ 583.468547][T21356] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4657'. [ 583.634391][T21364] lo speed is unknown, defaulting to 1000 [ 583.649935][T21371] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4660'. [ 583.670472][T21360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.697578][T21364] lo speed is unknown, defaulting to 1000 [ 583.993175][T21364] wlan1 speed is unknown, defaulting to 1000 [ 584.057485][T21365] lo speed is unknown, defaulting to 1000 [ 584.138343][T21365] lo speed is unknown, defaulting to 1000 [ 584.478013][T21391] FAULT_INJECTION: forcing a failure. [ 584.478013][T21391] name failslab, interval 1, probability 0, space 0, times 0 [ 584.491498][T21391] CPU: 1 UID: 0 PID: 21391 Comm: syz.4.4667 Not tainted syzkaller #0 PREEMPT(full) [ 584.491526][T21391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 584.491539][T21391] Call Trace: [ 584.491548][T21391] [ 584.491556][T21391] dump_stack_lvl+0xe8/0x150 [ 584.491587][T21391] should_fail_ex+0x412/0x560 [ 584.491618][T21391] should_failslab+0xa8/0x100 [ 584.491646][T21391] ? dst_alloc+0x105/0x170 [ 584.491754][T21391] kmem_cache_alloc_noprof+0x87/0x650 [ 584.491781][T21391] ? __pfx_ip6_dst_gc+0x10/0x10 [ 584.491860][T21391] dst_alloc+0x105/0x170 [ 584.491886][T21391] ip6_pol_route+0xafb/0x13d0 [ 584.491935][T21391] ? ip6_pol_route+0x160/0x13d0 [ 584.491962][T21391] ? __pfx_ip6_pol_route+0x10/0x10 [ 584.491992][T21391] ? __lock_acquire+0x6b5/0x2cf0 [ 584.492024][T21391] ? vsnprintf+0xe1a/0xee0 [ 584.492109][T21391] ? tomoyo_profile+0x11/0x50 [ 584.492144][T21391] fib6_rule_lookup+0x222/0x730 [ 584.492237][T21391] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 584.492265][T21391] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 584.492289][T21391] ? tomoyo_supervisor+0x4cb/0x1570 [ 584.492334][T21391] ? dev_get_by_index_rcu+0xf4/0x110 [ 584.492367][T21391] ip6_route_output_flags+0x364/0x5d0 [ 584.492394][T21391] ? ip6_route_output_flags+0x2e/0x5d0 [ 584.492425][T21391] ip6_dst_lookup_tail+0x1c3/0x15a0 [ 584.492494][T21391] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 584.492527][T21391] ? tomoyo_check_inet_address+0x289/0x950 [ 584.492558][T21391] ? tomoyo_check_inet_address+0x6d6/0x950 [ 584.492595][T21391] ? ip6_datagram_dst_update+0x512/0xd20 [ 584.492657][T21391] ip6_dst_lookup_flow+0x47/0xe0 [ 584.492690][T21391] ? ip6_datagram_dst_update+0x512/0xd20 [ 584.492719][T21391] ip6_datagram_dst_update+0x73a/0xd20 [ 584.492759][T21391] __ip6_datagram_connect+0xbd1/0x1150 [ 584.492802][T21391] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 584.492833][T21391] ? ip6_datagram_connect_v6_only+0x56/0xa0 [ 584.492867][T21391] ? __local_bh_enable_ip+0xd0/0x130 [ 584.492900][T21391] ip6_datagram_connect_v6_only+0x63/0xa0 [ 584.492934][T21391] __sys_connect+0x312/0x450 [ 584.492968][T21391] ? __pfx___sys_connect+0x10/0x10 [ 584.493013][T21391] ? __pfx_ksys_write+0x10/0x10 [ 584.493047][T21391] __x64_sys_connect+0x7a/0x90 [ 584.493079][T21391] do_syscall_64+0x14d/0xf80 [ 584.493099][T21391] ? trace_irq_disable+0x3b/0x150 [ 584.493130][T21391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.493153][T21391] ? clear_bhb_loop+0x40/0x90 [ 584.493186][T21391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.493208][T21391] RIP: 0033:0x7f5115f9c799 [ 584.493230][T21391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.493249][T21391] RSP: 002b:00007f5116ee0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 584.493273][T21391] RAX: ffffffffffffffda RBX: 00007f5116215fa0 RCX: 00007f5115f9c799 [ 584.493290][T21391] RDX: 000000000000001c RSI: 00002000000004c0 RDI: 0000000000000003 [ 584.493305][T21391] RBP: 00007f5116ee0090 R08: 0000000000000000 R09: 0000000000000000 [ 584.493319][T21391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.493332][T21391] R13: 00007f5116216038 R14: 00007f5116215fa0 R15: 00007fff24b2ad78 [ 584.493369][T21391] [ 585.012100][T21394] netlink: 'syz.0.4668': attribute type 13 has an invalid length. [ 585.077817][T21399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4668'. [ 585.095110][T21394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 585.116941][T21365] wlan1 speed is unknown, defaulting to 1000 [ 585.276963][T21401] netlink: set zone limit has 8 unknown bytes [ 585.671946][T21412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.764211][T21414] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20001 [ 585.782213][ T1924] IPVS: starting estimator thread 0... [ 585.842815][T21412] veth0_to_bond: entered promiscuous mode [ 585.848981][T21412] veth0_to_bond: entered allmulticast mode [ 585.860109][T21412] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 585.885562][T21415] IPVS: using max 26 ests per chain, 62400 per kthread [ 585.916424][T21410] lo speed is unknown, defaulting to 1000 [ 585.925567][T21412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4674'. [ 585.940314][T21410] lo speed is unknown, defaulting to 1000 [ 586.229239][T21410] wlan1 speed is unknown, defaulting to 1000 [ 586.796704][T21438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4680'. [ 586.837930][T21436] ip6tnl0: Caught tx_queue_len zero misconfig [ 587.263292][T21451] bond5: option resend_igmp: invalid value (2878) [ 587.272200][T21451] bond5: option resend_igmp: allowed values 0 - 255 [ 587.292531][T21451] bond5 (unregistering): Released all slaves [ 587.343359][T21459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4689'. [ 587.412950][T21459] bond2: entered promiscuous mode [ 587.418681][T21459] 8021q: adding VLAN 0 to HW filter on device bond2 [ 587.484105][T21462] 8021q: adding VLAN 0 to HW filter on device bond2 [ 587.503945][T21466] netlink: 'syz.0.4691': attribute type 2 has an invalid length. [ 587.515134][T21462] bond2: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 587.529855][T21462] bond2: (slave ip6tnl2): Error -95 calling set_mac_address [ 587.553313][T21432] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 587.629776][T21466] : entered promiscuous mode [ 588.162301][T21488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4697'. [ 588.188386][T21488] netlink: 580 bytes leftover after parsing attributes in process `syz.1.4697'. [ 588.347341][T21498] netlink: 'syz.0.4699': attribute type 1 has an invalid length. [ 588.355314][T21498] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4699'. [ 588.387497][T21498] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4699'. [ 588.396505][T21498] netlink: 658 bytes leftover after parsing attributes in process `syz.0.4699'. [ 588.858772][T21519] batadv_slave_0: Caught tx_queue_len zero misconfig [ 588.962907][T21532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4710'. [ 588.975472][T21528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4710'. [ 589.388403][T21559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4723'. [ 589.619380][ T30] audit: type=1800 audit(1772860997.743:11): pid=21576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4727" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1762 res=0 errno=0 [ 590.384502][T21611] tipc: Enabled bearer , priority 0 [ 590.565423][T21609] syzkaller0: entered promiscuous mode [ 590.579306][T21609] syzkaller0: entered allmulticast mode [ 590.591186][T21609] tipc: Resetting bearer [ 590.641479][T21608] tipc: Resetting bearer [ 592.368317][T21608] tipc: Disabling bearer [ 592.466977][T19800] tipc: Node number set to 1955096722 [ 592.627161][T21666] siw: device registration error -23 [ 592.720062][T21663] lo speed is unknown, defaulting to 1000 [ 592.730402][T21663] lo speed is unknown, defaulting to 1000 [ 593.106497][T21687] __nla_validate_parse: 6 callbacks suppressed [ 593.106519][T21687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4761'. [ 593.135236][T21663] wlan1 speed is unknown, defaulting to 1000 [ 593.211806][T21689] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4763'. [ 593.239155][T21689] Cannot find del_set index 1 as target [ 593.265051][T21689] rdma_rxe: rxe_newlink: failed to add wg1 [ 593.775235][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4766'. [ 593.932986][T21711] lo speed is unknown, defaulting to 1000 [ 593.978127][T21711] lo speed is unknown, defaulting to 1000 [ 594.178436][T21723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4771'. [ 594.362927][T21728] tipc: Cannot configure node identity twice [ 594.497366][T21733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4774'. [ 594.508469][T21733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4774'. [ 594.521559][T21711] wlan1 speed is unknown, defaulting to 1000 [ 594.527048][T21734] tipc: Enabling of bearer rejected, failed to enable media [ 594.539506][T21733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4774'. [ 594.551667][T21733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4774'. [ 594.561258][T21733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4774'. [ 594.570614][T21733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4774'. [ 594.587196][T21734] syzkaller0: entered promiscuous mode [ 594.594555][T21734] syzkaller0: entered allmulticast mode [ 594.759448][T21742] netlink: 'syz.2.4778': attribute type 2 has an invalid length. [ 594.846506][T21745] siw: device registration error -23 [ 595.310849][T21753] "syz.2.4781" (21753) uses obsolete ecb(arc4) skcipher [ 595.763078][T21783] dummy0: entered promiscuous mode [ 595.786896][T21783] dummy0: entered allmulticast mode [ 595.896473][T21799] sctp: [Deprecated]: syz.2.4793 (pid 21799) Use of int in maxseg socket option. [ 595.896473][T21799] Use struct sctp_assoc_value instead [ 596.106854][T21810] Timeout policy `syz1' can only be used by L3 protocol number 35006 [ 596.126617][T21806] 8021q: adding VLAN 0 to HW filter on device bond3 [ 596.138489][ T5828] block nbd5: Receive control failed (result -32) [ 596.249301][T21806] bond3: (slave batadv1): Opening slave failed [ 596.530673][T21833] nbd: illegal input index 38656 [ 596.643178][T21837] netlink: 'syz.1.4805': attribute type 11 has an invalid length. [ 596.651131][T21837] netlink: 'syz.1.4805': attribute type 23 has an invalid length. [ 596.727249][T21844] lo speed is unknown, defaulting to 1000 [ 596.851002][T21844] lo speed is unknown, defaulting to 1000 [ 596.917823][ T24] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 597.224114][T21872] bond0: entered promiscuous mode [ 597.240765][T21872] bond_slave_0: entered promiscuous mode [ 597.256871][T21872] bond_slave_1: entered promiscuous mode [ 597.285060][T21872] bond0: left promiscuous mode [ 597.301630][T21872] bond_slave_0: left promiscuous mode [ 597.320884][T21872] bond_slave_1: left promiscuous mode [ 597.350975][T21844] wlan1 speed is unknown, defaulting to 1000 [ 597.437889][T19800] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 597.453349][T21877] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 597.802802][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.819892][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.845507][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.886285][ T7239] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 597.916541][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.054173][T21902] lo speed is unknown, defaulting to 1000 [ 598.113926][T21914] nbd: must specify an index to disconnect [ 598.160413][T21902] lo speed is unknown, defaulting to 1000 [ 598.306507][T21918] tipc: Enabling of bearer rejected, failed to enable media [ 598.356924][T21918] syzkaller0: entered promiscuous mode [ 598.387674][T21918] syzkaller0: entered allmulticast mode [ 598.642910][T21902] wlan1 speed is unknown, defaulting to 1000 [ 598.750228][T21933] tipc: Enabled bearer , priority 0 [ 598.758211][T21933] syzkaller0: entered promiscuous mode [ 598.758588][T21935] netlink: 'syz.4.4833': attribute type 1 has an invalid length. [ 598.763942][T21933] syzkaller0: entered allmulticast mode [ 598.886817][T21939] netlink: 'syz.0.4835': attribute type 3 has an invalid length. [ 598.896630][T21940] bond4: entered promiscuous mode [ 598.907883][T21935] __nla_validate_parse: 19 callbacks suppressed [ 598.907907][T21935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4833'. [ 598.913227][T21940] bond4: entered allmulticast mode [ 598.929572][T21940] 8021q: adding VLAN 0 to HW filter on device bond4 [ 598.943951][T21933] tipc: Resetting bearer [ 599.001081][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 599.011499][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 599.020647][T21944] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4833'. [ 599.079194][T21950] xt_bpf: check failed: parse error [ 599.086223][T21950] x_tables: unsorted entry at hook 3 [ 599.129485][T21939] siw: device registration error -23 [ 599.145875][T21939] dummy0: left promiscuous mode [ 599.187932][ T1924] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 599.196358][T21939] dummy0: left allmulticast mode [ 599.221002][T21939] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 599.279540][T21932] tipc: Resetting bearer [ 599.318823][T21932] tipc: Disabling bearer [ 599.370868][T21954] ¾x9ÿ: renamed from bridge_slave_0 [ 599.789218][T21974] tipc: Enabled bearer , priority 0 [ 599.802724][T21975] tipc: Enabling of bearer rejected, already enabled [ 599.820249][T21974] sctp: [Deprecated]: syz.4.4842 (pid 21974) Use of struct sctp_assoc_value in delayed_ack socket option. [ 599.820249][T21974] Use struct sctp_sack_info instead [ 599.837179][T21975] sctp: [Deprecated]: syz.4.4842 (pid 21975) Use of struct sctp_assoc_value in delayed_ack socket option. [ 599.837179][T21975] Use struct sctp_sack_info instead [ 599.918330][T21972] tipc: Disabling bearer [ 600.038759][T21983] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4846'. [ 600.250646][T21992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4848'. [ 600.513988][T22007] netlink: 'syz.2.4852': attribute type 13 has an invalid length. [ 600.872068][T22028] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4859'. [ 600.910733][T22027] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4858'. [ 601.027068][T22036] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4862'. [ 601.088195][T22038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4863'. [ 601.145095][T22041] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 601.195117][T22041] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 601.242678][T22041] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 601.342225][T22057] netlink: 1940 bytes leftover after parsing attributes in process `syz.3.4868'. [ 601.354243][T22057] openvswitch: netlink: Flow actions attr not present in new flow. [ 601.651486][T22080] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4879'. [ 601.665276][T22081] IPv6: NLM_F_CREATE should be specified when creating new route [ 602.256259][T22119] batman_adv: batadv0: Adding interface: virt_wifi0 [ 602.285845][T22119] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.337890][T22119] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 602.355216][T22128] netlink: 'syz.1.4892': attribute type 1 has an invalid length. [ 602.500394][T22121] syzkaller0: entered promiscuous mode [ 602.506013][T22121] syzkaller0: entered allmulticast mode [ 602.898689][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 604.375013][T22138] __nla_validate_parse: 3 callbacks suppressed [ 604.375034][T22138] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4894'. [ 604.687345][T22183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4908'. [ 604.696553][T22183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4908'. [ 604.712185][T22181] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4909'. [ 604.892918][T22197] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4913'. [ 605.010548][T22205] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4915'. [ 605.360087][T22226] netlink: 'syz.2.4922': attribute type 10 has an invalid length. [ 605.370546][T22226] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4922'. [ 605.428737][T22226] hsr0: entered promiscuous mode [ 605.444364][T22226] bridge0: port 1(hsr0) entered blocking state [ 605.458554][T22226] bridge0: port 1(hsr0) entered disabled state [ 605.473181][T22226] hsr0: entered allmulticast mode [ 605.478822][T22226] hsr_slave_0: entered allmulticast mode [ 605.484638][T22226] hsr_slave_1: entered allmulticast mode [ 605.532761][T22226] bridge0: port 1(hsr0) entered blocking state [ 605.539157][T22226] bridge0: port 1(hsr0) entered forwarding state [ 605.600292][T22240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4926'. [ 605.638009][T22240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4926'. [ 605.676292][T22240] netlink: 580 bytes leftover after parsing attributes in process `syz.3.4926'. [ 605.930460][T22267] xt_connbytes: Forcing CT accounting to be enabled [ 606.157616][ T5828] block nbd0: Receive control failed (result -32) [ 606.784108][T22319] nbd: must specify a device to reconfigure [ 606.790786][T22321] netlink: 'syz.4.4949': attribute type 10 has an invalid length. [ 607.147701][ C0] [ 607.150112][ C0] ============================================ [ 607.156295][ C0] WARNING: possible recursive locking detected [ 607.162487][ C0] syzkaller #0 Not tainted [ 607.166928][ C0] -------------------------------------------- [ 607.173113][ C0] syz-executor/15570 is trying to acquire lock: [ 607.179385][ C0] ffff888089504f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 607.179563][T22345] netlink: 'syz.1.4956': attribute type 1 has an invalid length. [ 607.188607][ C0] [ 607.188607][ C0] but task is already holding lock: [ 607.188619][ C0] ffff888025530f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 607.188686][ C0] [ 607.188686][ C0] other info that might help us debug this: [ 607.188694][ C0] Possible unsafe locking scenario: [ 607.188694][ C0] [ 607.188702][ C0] CPU0 [ 607.188709][ C0] ---- [ 607.188715][ C0] lock(&hsr->seqnr_lock); [ 607.188733][ C0] lock(&hsr->seqnr_lock); [ 607.188748][ C0] [ 607.188748][ C0] *** DEADLOCK *** [ 607.188748][ C0] [ 607.188755][ C0] May be due to missing lock nesting notation [ 607.188755][ C0] [ 607.188764][ C0] 11 locks held by syz-executor/15570: [ 607.188778][ C0] #0: ffff888050da4420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 607.188841][ C0] #1: ffff8880353e5d58 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610 [ 607.188915][ C0] #2: ffff88806dafdd58 (&sb->s_type->i_mutex_key#16){+.+.}-{4:4}, at: vfs_unlink+0xed/0x6c0 [ 607.297875][ C0] #3: ffffc90000007ce0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x640 [ 607.307937][ C0] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 607.317113][ C0] #5: ffff888025530f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 607.327850][ C0] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 607.337372][ C0] #7: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28d/0x38d0 [ 607.347340][ C0] #8: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1930 [ 607.356701][ C0] #9: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28d/0x38d0 [ 607.366645][ C0] #10: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 607.375895][ C0] [ 607.375895][ C0] stack backtrace: [ 607.381803][ C0] CPU: 0 UID: 0 PID: 15570 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 607.381824][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 607.381836][ C0] Call Trace: [ 607.381843][ C0] [ 607.381851][ C0] dump_stack_lvl+0xe8/0x150 [ 607.381878][ C0] print_deadlock_bug+0x279/0x290 [ 607.381917][ C0] __lock_acquire+0x253f/0x2cf0 [ 607.381942][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 607.381964][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 607.381987][ C0] lock_acquire+0xf0/0x2e0 [ 607.382007][ C0] ? hsr_dev_xmit+0x237/0x360 [ 607.382030][ C0] ? hsr_dev_xmit+0x237/0x360 [ 607.382049][ C0] _raw_spin_lock_bh+0x36/0x50 [ 607.382138][ C0] ? hsr_dev_xmit+0x237/0x360 [ 607.382157][ C0] hsr_dev_xmit+0x237/0x360 [ 607.382176][ C0] ? hsr_dev_xmit+0x2d/0x360 [ 607.382195][ C0] dev_hard_start_xmit+0x2d8/0x870 [ 607.382220][ C0] __dev_queue_xmit+0x17a7/0x38d0 [ 607.382240][ C0] ? __dev_queue_xmit+0x28d/0x38d0 [ 607.382259][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 607.382284][ C0] ? ebt_do_table+0x2665/0x2830 [ 607.382345][ C0] ? ebt_do_table+0x2665/0x2830 [ 607.382367][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 607.382394][ C0] ? br_nf_post_routing+0x219/0xfe0 [ 607.382418][ C0] br_dev_queue_push_xmit+0x370/0x4a0 [ 607.382436][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 607.382452][ C0] NF_HOOK+0x360/0x3f0 [ 607.382469][ C0] ? NF_HOOK+0xa2/0x3f0 [ 607.382483][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 607.382499][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 607.382520][ C0] br_forward_finish+0xd3/0x130 [ 607.382535][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 607.382551][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 607.382567][ C0] NF_HOOK+0x360/0x3f0 [ 607.382583][ C0] ? NF_HOOK+0xa2/0x3f0 [ 607.382597][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 607.382613][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 607.382629][ C0] ? br_flood+0x8ff/0xb80 [ 607.382645][ C0] ? br_handle_vlan+0x61/0x530 [ 607.382689][ C0] __br_forward+0x397/0x540 [ 607.382704][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 607.382720][ C0] ? br_dev_xmit+0x193/0x1930 [ 607.382741][ C0] br_dev_xmit+0x1292/0x1930 [ 607.382761][ C0] ? br_dev_xmit+0x193/0x1930 [ 607.382783][ C0] ? __pfx_br_dev_xmit+0x10/0x10 [ 607.382802][ C0] ? __skb_get_hash_net+0x13f/0x2e0 [ 607.382819][ C0] ? __pfx___skb_get_hash_net+0x10/0x10 [ 607.382835][ C0] ? qdisc_pkt_len_segs_init+0x2c4/0x970 [ 607.382854][ C0] ? skb_network_protocol+0x234/0x3f0 [ 607.382871][ C0] ? __pfx_passthru_features_check+0x10/0x10 [ 607.382890][ C0] dev_hard_start_xmit+0x2d8/0x870 [ 607.382919][ C0] __dev_queue_xmit+0x17a7/0x38d0 [ 607.382936][ C0] ? handle_softirqs+0x22a/0x870 [ 607.382959][ C0] ? drop_nlink+0x4b/0x110 [ 607.382981][ C0] ? __dev_queue_xmit+0x28d/0x38d0 [ 607.383005][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 607.383025][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 607.383046][ C0] ? hsr_addr_subst_dest+0x30d/0xa90 [ 607.383067][ C0] ? skb_clone+0x246/0x3a0 [ 607.383084][ C0] hsr_forward_skb+0x157b/0x2860 [ 607.383112][ C0] ? hsr_forward_skb+0xb3/0x2860 [ 607.383135][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 607.383157][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 607.383176][ C0] ? __asan_memset+0x22/0x50 [ 607.383191][ C0] ? __skb_pad+0x405/0x610 [ 607.383210][ C0] send_hsr_supervision_frame+0x731/0xcb0 [ 607.383236][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 607.383259][ C0] hsr_announce+0x1db/0x370 [ 607.383278][ C0] ? hsr_announce+0x89/0x370 [ 607.383313][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 607.383337][ C0] call_timer_fn+0x192/0x640 [ 607.383358][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 607.383377][ C0] ? call_timer_fn+0xd4/0x640 [ 607.383397][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 607.383423][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 607.383446][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 607.383466][ C0] __run_timer_base+0x652/0x8b0 [ 607.383485][ C0] ? ktime_get+0x45/0x200 [ 607.383505][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 607.383526][ C0] ? sched_clock_cpu+0x74/0x440 [ 607.383551][ C0] run_timer_softirq+0xb7/0x170 [ 607.383572][ C0] handle_softirqs+0x22a/0x870 [ 607.383594][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 607.383619][ C0] __irq_exit_rcu+0x5f/0x150 [ 607.383640][ C0] irq_exit_rcu+0x9/0x30 [ 607.383660][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 607.383685][ C0] [ 607.383692][ C0] [ 607.383698][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 607.383717][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5c/0x70 [ 607.383744][ C0] Code: 70 16 00 00 83 fa 02 75 21 48 8b 91 78 16 00 00 48 8b 32 48 8d 7e 01 8b 89 74 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 cf fe eb 09 cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 607.383761][ C0] RSP: 0018:ffffc90005027ca8 EFLAGS: 00000293 [ 607.383776][ C0] RAX: ffffffff824a036b RBX: ffff88806dafdc10 RCX: ffff88802b3f8000 [ 607.383790][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 607.383801][ C0] RBP: 0000000000000001 R08: ffffffff901141b7 R09: 1ffffffff2022836 [ 607.383813][ C0] R10: dffffc0000000000 R11: fffffbfff2022837 R12: 1ffff1100db5fb8b [ 607.383827][ C0] R13: 0000000069abb657 R14: ffff88806dafdc58 R15: dffffc0000000000 [ 607.383843][ C0] ? drop_nlink+0x4b/0x110 [ 607.383868][ C0] drop_nlink+0x4b/0x110 [ 607.383890][ C0] simple_unlink+0x90/0xd0 [ 607.383920][ C0] shmem_unlink+0x1a1/0x250 [ 607.383942][ C0] vfs_unlink+0x272/0x6c0 [ 607.383965][ C0] filename_unlinkat+0x3cd/0x610 [ 607.383988][ C0] ? __pfx_filename_unlinkat+0x10/0x10 [ 607.384012][ C0] ? do_getname+0x151/0x250 [ 607.384035][ C0] __se_sys_unlink+0x2e/0x140 [ 607.384057][ C0] do_syscall_64+0x14d/0xf80 [ 607.384072][ C0] ? trace_irq_disable+0x3b/0x150 [ 607.384097][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.384114][ C0] ? clear_bhb_loop+0x40/0x90 [ 607.384133][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.384149][ C0] RIP: 0033:0x7f070bb9b887 [ 607.384165][ C0] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 607.384180][ C0] RSP: 002b:00007ffd2c52a038 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 607.384196][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f070bb9b887 [ 607.384208][ C0] RDX: 00007ffd2c52a060 RSI: 00007ffd2c52a0f0 RDI: 00007ffd2c52a0f0 [ 607.384221][ C0] RBP: 00007ffd2c52a0f0 R08: 00007ffd2c52b0f0 R09: 00000000ffffffff [ 607.384233][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd2c52b180 [ 607.384245][ C0] R13: 00007f070bc31f90 R14: 0000000000094359 R15: 00007ffd2c52b1c0 [ 607.384264][ C0] [ 607.391606][T22345] netlink: 'syz.1.4956': attribute type 2 has an invalid length. [ 607.720905][T22347] lo: Caught tx_queue_len zero misconfig [ 610.337716][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!