last executing test programs: 5.284642205s ago: executing program 4 (id=8108): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=r1], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xda2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="e02742e8680d85ff978a762f88a8", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f00000002c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000240)=""/20, 0x14}], 0x1) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'batadv_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000340)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x17, 0xb, 0x50}, 0x2c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x1, @local}, 0x10, {0x2, 0x4e22, @empty}, 'ipvlan1\x00'}) 5.076486739s ago: executing program 3 (id=8110): r0 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, 0x30) sendmmsg$inet(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="3000000000ff9700000000000700"], 0x30}}], 0xa8000, 0x40000840) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000"], 0xc4}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008000) read(0xffffffffffffffff, 0x0, 0x0) 4.185409073s ago: executing program 0 (id=8121): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="400401000000000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x4) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x1000000) 4.167581879s ago: executing program 4 (id=8122): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14c, 0x14c, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xf45}}, @datasec={0x5, 0x2, 0x0, 0xf, 0x3, [{0x4, 0x7, 0xce7}, {0x3, 0x7, 0x3}], "8d0ccf"}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @enum64={0xa, 0x2, 0x0, 0x13, 0x0, 0x0, [{0x3, 0x6, 0x189}, {0x9, 0xc075, 0x4}]}, @var={0xc, 0x0, 0x0, 0xe, 0x5}, @float={0x9, 0x0, 0x0, 0x10, 0x10}, @datasec={0x9, 0x3, 0x0, 0xf, 0x1, [{0x1, 0x10000, 0x3}, {0x1, 0x2, 0x7}, {0x4, 0x1, 0x2}], "1b"}, @struct={0x7, 0x6, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x5, 0x5}, {0x9, 0x5, 0x7fffffff}, {0x8, 0x3, 0x81}, {0x6, 0x4, 0x8}, {0xb, 0x3, 0x1000}, {0x3, 0x2, 0xfff}]}, @enum64={0x8, 0x3, 0x0, 0x13, 0x1, 0xb, [{0x9, 0x5e, 0xc1}, {0x6, 0x77, 0x1000}, {0x7, 0x2, 0x10}]}, @const={0x9, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x10, 0x5f, 0x61]}}, &(0x7f0000000900)=""/138, 0x169, 0x8a, 0x1, 0x1, 0x10000}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) unshare(0x62040200) shutdown(0xffffffffffffffff, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xb) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x400454d1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x16c2, @private2, 0x80000000}}, 0xfdf, 0x9}, &(0x7f0000000200)=0x90) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000580)=[@mss, @window={0x3, 0x0, 0x980}, @timestamp, @mss={0x2, 0xb7f2}, @sack_perm, @timestamp, @timestamp, @mss={0x2, 0x9}, @sack_perm], 0x9) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x22d, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x6}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x400}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040005}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) read(r3, &(0x7f0000000600)=""/164, 0xa4) recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket$nl_generic(0x10, 0x3, 0x10) 4.068316726s ago: executing program 3 (id=8123): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={0x1c, r2, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4, 0x33}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x5c, r2, 0x0, 0x0, 0x4, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x240440c0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={0x1c, r2, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4, 0x33}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x5c, r2, 0x0, 0x0, 0x4, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x240440c0) (async) 3.936130477s ago: executing program 3 (id=8126): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x9, 0x49}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0xd, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x15f, 0x15f, 0x8, [@volatile={0x9, 0x0, 0x0, 0x9, 0x1}, @enum64={0x7, 0xa, 0x0, 0x13, 0x1, 0x4, [{0x1, 0x3, 0x64af}, {0x5, 0x4, 0x1}, {0x10, 0xffffff01, 0x4}, {0x7, 0x4, 0x4}, {0x10, 0x70b, 0x3}, {0x8, 0x3215, 0x6}, {0x10, 0x0, 0x1}, {0x2, 0x7ff, 0x7}, {0x10, 0xd, 0xa}, {0x4, 0x0, 0x7}]}, @func={0xf, 0x0, 0x0, 0xc, 0x2}, @const={0x5, 0x0, 0x0, 0xa, 0x2}, @struct={0x1, 0x8, 0x0, 0x4, 0x1, 0x4, [{0x1, 0x1, 0x1}, {0xe, 0x5}, {0xf, 0x1, 0xd}, {0x4, 0x3, 0x7}, {0xd, 0x5, 0xf84e}, {0xa, 0x3, 0xf7}, {0xb, 0x0, 0x82b}, {0xb, 0x0, 0x5}]}, @datasec={0xd, 0x5, 0x0, 0xf, 0x3, [{0x2, 0x2, 0x1}, {0x2, 0x9, 0x9}, {0x1, 0x5, 0x5}, {0x9, 0x4, 0x6}, {0x2, 0x1}], "96b554"}]}, {0x0, [0x0, 0x30, 0x0, 0x5f, 0x61, 0x0]}}, &(0x7f0000000440)=""/254, 0x180, 0xfe, 0x0, 0x4cff}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x2a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x18, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x11, &(0x7f0000000040)=@raw=[@generic={0x5, 0x7, 0xf, 0x8, 0x7ff}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8d28}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa88}}], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000180)=""/229, 0x40f00, 0x58, '\x00', r1, @fallback=0x1c, r2, 0x8, &(0x7f0000000580)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xd, 0x4, 0xcf11}, 0x10, r3, r4, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) 3.824792296s ago: executing program 0 (id=8128): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500010295"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 3.780361244s ago: executing program 3 (id=8129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'nicvf0\x00', 0x4}) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000080)={{&(0x7f0000000140)=""/228, 0xe4}, &(0x7f0000000040)}, 0x20) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0xe23, 0x70bd29, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x4004800) 3.612125369s ago: executing program 0 (id=8132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = socket(0x22, 0x2, 0x23) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000007000000060000008c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x4, 0x3, 0x8b, 0x9, 0x1, 0x9, 0x7f, 0x1, 0x10, 0x4f, 0x2, 0x9, 0x5, 0x5}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="7a0a00ff00000000711078000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010002b00050000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r6}, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="998083ed1ebfcdf889ec62e7954c4d9323ea5f586e6ae1362ce3291ccd358cb56abb786c6c3ca89ecbca16687ada8bcf8ec6feb378135f7f26eb5503c286116239c16c68763010a5fd26e05c4b669b74c244288d802b671fb110be70197e64773b72d4e519742e5280bee5022f1dc510b8d85bf4fd1113246326d89ebea196e299a967dee308746bab226a95e4716ac420c4f9e4f920ad94cda87ae0f0492ce09954bef752", @ANYRES16=r7, @ANYBLOB="2b0000000000000000000100000008000200020000000800010000000000"], 0x24}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x9, 0xfa, 0x0, 0x4, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x18, 0x7, 0xff}, @sadb_x_nat_t_type={0x1, 0x14, 0x57}]}, 0x20}}, 0x24000800) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x6, 0x0, 0x1, 0x7}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r10, 0x8b32, &(0x7f0000000040)) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1}, 0x6e) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='w\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000100000000000000007e000000000003008366071ee53b6c91032d20f074ade13757c1c74d66045fb04e92b372fdebf019c01ebd82a6872997cef06f1b529f65b902b06e8a17063507d3b22c56e31fb97c7aacc7bbcf29facb370a30712bb34a3ec4cff00481f49e31bc47bae9c4b46d176433fc21770c3f4a2b94b38252da65a68ac44b7224dd2a66b84beebd0331", @ANYRES32=r9, @ANYBLOB="0c009900f7ffffff65000000"], 0x20}}, 0x4000054) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa8}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 3.448977167s ago: executing program 3 (id=8134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0x3e, 0x23, &(0x7f00000000c0)="a0acf1117e0643e2a62f9fb5ec84bbb542603922fe306cd82cb14604a496eab85787dc0f21891e803563ac659986c15289efca595b9672a023e1e27f648e", &(0x7f0000000140)=""/35, 0x3, 0x0, 0x57, 0x72, &(0x7f0000000340)="4eae0c2d50456a3ba9a98842232adbd9d338b4a97ffebcadf57cdc53c998322c30557db46cf655fbc174c61e251071ce626ad1cca354d9635a7ad555d290cf7f34352b17659587536ca7163926103069e5bf8bcbeb445a", &(0x7f0000000400)="4185ff22eed96fcf97b705fbf0c3fbb7de46911d28898644bd0910d378ec7034593fa53033c93dab7e771fe6772db2b7b59d4d1c3b81bbf9db803e9d0521737d3cef0a7113c58f4dfd8ae1daaa15e9ae1957f694e7c8b110ff211ca8ca84ec04002b449feefc108f17de3c8390251fd9cb01", 0x1, 0x0, 0x32}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x70da}]}]}, 0x58}}, 0x20000000) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000001020102000000000000215e8b2ac26900000a0000078648eaac4978eb0a548d7f9a9103ee50084f0909a49961ee414397943fd87b8af26893aabc2a0a91d534a1bb2c0859af7ed3df52b3c9f78fa3e4e9a32101d2b920f3e8177d26e448e8b3a5091897b0e9df8753152e6f2a60d31f84ca304a9b565259962218f551729e5a1c"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000002c0)={0x1f, 0x2}, 0x6) write(r4, &(0x7f0000000000)="05000000", 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101040, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x35, 0x0, 0x3, 0xff9f0007}, {0x15, 0x0, 0x0, 0x9e8}, {0x3, 0x20}, {0x0, 0x2}, {0x6, 0x9}]}) 3.360195376s ago: executing program 0 (id=8135): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) unshare(0x6a040000) (async, rerun: 32) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 32) getsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x20000000) (async, rerun: 64) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r5, 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async, rerun: 64) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e21, 0xb, @remote, 0x40}, 0x1c) (rerun: 64) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001640)='n', 0x1}], 0x1}, 0x4000001) recvmsg(r7, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x11102) (async) close(r8) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010031000000ffdbdf250c00000008002c00060000007dbb56fc39c97805002e000000000005002e000100000008"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r10, &(0x7f0000000000), &(0x7f00000001c0)=""/4096}, 0x20) 3.116948192s ago: executing program 4 (id=8136): socket$kcm(0x10, 0x2, 0x0) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000000d8000000d8000000030000000c0000000000000c020000000400000007000085030000000500000001000000090000000800000004000000060000000c000000030000000100008002000000010000000100000005000000001000000b000000010000000100000007000000040000000c0800000100000000000001000000001c0046040a0000000000000700000000050008000000000801000000020000000000000700000000000000000200000d0000682564894424737e00000c00000005000000000000000200000d0000000006000000010000000400000002000000003000"], &(0x7f0000000980)=""/138, 0xf3, 0x8a, 0x0, 0xffffb9ef, 0x10000}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc}, 0x10}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r4 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x2000}}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x3, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x5e, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r6, 0x1) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async, rerun: 64) setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f0000000200)=0x9, 0x4) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)='=q', 0x2}], 0x1}, 0x1) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x46, 0x0, 0x0, 0x0, 0xf}, 0x102) (async) recvmsg$unix(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000121) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2.885267379s ago: executing program 0 (id=8137): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) unshare(0x20000400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r2, 0x0, 0x0, 0x4}, 0x20) nanosleep(&(0x7f0000000000), 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.763712448s ago: executing program 0 (id=8139): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/8, 0x8}, {0x0}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x10020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x8) sendmmsg(r0, &(0x7f0000000800), 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000480)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x891e, &(0x7f0000000900)={'bridge0\x00', @multicast}) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e1586e8521a654fc2538faaff61c75b305f68d9e6e226e602f10e29e98c99a9db3afbe80cf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='tegra_dma_tx_status\x00', r5, 0x0, 0x10000000}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}, @in6={0xa, 0x4e20, 0x2548, @private2, 0x1}, @in6={0xa, 0x4e21, 0xffff6bcc, @private2, 0xf3a}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e20, 0x3d99, @mcast1, 0x5}], 0x9c) 2.548187221s ago: executing program 1 (id=8140): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@mcast2, 0x0}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff00"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000cc0)="f2a0f0f863621b483b19e7ecfce0d34e53fbf295927214684f4d69e90f0ec506442d2126c3f5ab0cdfd79dc1815274c3ee57068b3793c25fab48eb353478689f452328afb023f75f93229060bc2c82dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e600000000f5be12a64e075c60dd63e0b00e8f42bfb7671a56925477029cec7e7f16b358404edfb5e7a055fdeb2ba044d0d54e341d1d1ef1eb2c317f587f591626ceed08555ca0b2f31a3e7bf5ba7541db275e6a6b", 0xc5}], 0x2}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000800)=ANY=[], 0x32600) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000180)={'ah\x00'}, &(0x7f0000000340)=0x1e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ppoll(0x0, 0xfe4a, 0x0, &(0x7f0000000580), 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x1c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c880) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x28, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x24, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x1000, 0x3, 0x9, 0xb956}, {0x1ed5, 0xd, 0x0, 0xffff}]}, 0x10) 2.335699935s ago: executing program 1 (id=8142): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r5 = socket(0x10, 0x803, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000005c0)={'vxcan1\x00'}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000006c0)) connect$packet(r6, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(r2, &(0x7f0000001d40)={0x0, 0x0, 0x0}, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r11}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x19, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x18, r11}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x7fffffff}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000380)='syzkaller\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x590b}, 0x94) 2.172107154s ago: executing program 4 (id=8143): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r0}, 0x10) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x6, 0x1, &(0x7f0000000180)=@raw=[@jmp={0x5, 0x1, 0x7, 0xb, 0x4, 0x12b51dd7ca0385f4, 0x1}], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x1, 0x1, 0x5, 0xfffffffe}, 0x10, 0x0, r1, 0x0, 0x0, &(0x7f0000000900), 0x10, 0xd}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r3, 0x401, 0x70bd25, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@dellinkprop={0x44, 0x6d, 0x8, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x102, 0x8041}, [@IFLA_PHYS_PORT_ID={0x12, 0x22, "455adbaa872691da4666fcf5f052"}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xffff}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x24010014) 2.167964655s ago: executing program 3 (id=8144): unshare(0x6a040000) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/208, 0xd0}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001880)="70041bf1af037f02b0e2a31763fb27cf17", 0x11}], 0x1, 0x0, 0x0, 0x30000040}], 0x1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket(0x14, 0x2, 0x4) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x61d0, 0x0) sendto$inet6(r3, &(0x7f0000000400)='\v', 0x1, 0x20000811, 0x0, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000167fcd2e27bd7000ffdbdf2502000000180b00081e000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 2.161361291s ago: executing program 2 (id=8145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r9 = socket$unix(0x1, 0x1, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFINDEX(r10, 0x400454da, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r12, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.037641082s ago: executing program 4 (id=8146): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x4c001) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) sendfile(r2, r1, 0x0, 0x10000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c8) bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r2}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r7, 0x0, 0xffffffff000) 1.583894854s ago: executing program 2 (id=8147): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40000) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) syz_emit_ethernet(0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="155a16e7ea4baaaaaaaaaa1b006055dcccf0325de8a130a53c0aadd97beb072b190a1e98059d5446c799464ded06931ae09fc86629893032f52bdac03fed8a82d4fa58cfdbc21366874a3aaf7ef4e52c14d7626ba2"], &(0x7f0000000200)={0x1, 0x3, [0x96, 0x625, 0xe4d, 0xc7c]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd25, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xd, 0xffff}, {0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x40008d4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800000040"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001180)={0x0, @in6={{0xa, 0x4e20, 0x1, @mcast1, 0xf}}}, &(0x7f0000001240)=0x84) socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xfff2}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x20003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newqdisc={0x30, 0x24, 0x200, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x4, 0x10002}, {0xb, 0x3}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x24004001) socket$packet(0x11, 0x3, 0x300) 984.738308ms ago: executing program 2 (id=8148): r0 = socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) (async) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0xffc3}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@end, @generic={0x82, 0x10, "66581ddb34253c0556c786172934"}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2cb5}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x58}, 0x4) 979.527543ms ago: executing program 1 (id=8149): socket(0x6, 0x800, 0xf98) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000805000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r2, 0x8, 0x1, 0xffffffff, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r4, r2, 0x34, 0x4, 0x0, @void, @value=r1, @void, @void, r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 816.201542ms ago: executing program 4 (id=8150): r0 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, 0x30) sendmmsg$inet(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="3000000000000000010000000700"], 0x30}}], 0xa8000, 0x40000840) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000"], 0xc4}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008000) read(0xffffffffffffffff, 0x0, 0x0) 811.719755ms ago: executing program 2 (id=8151): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="400401000000000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x4) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x9000000) 719.812082ms ago: executing program 1 (id=8152): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@mcast2, 0x0}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff00"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000cc0)="f2a0f0f863621b483b19e7ecfce0d34e53fbf295927214684f4d69e90f0ec506442d2126c3f5ab0cdfd79dc1815274c3ee57068b3793c25fab48eb353478689f452328afb023f75f93229060bc2c82dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e600000000f5be12a64e075c60dd63e0b00e8f42bfb7671a56925477029cec7e7f16b358404edfb5e7a055fdeb2ba044d0d54e341d1d1ef1eb2c317f587f591626ceed08555ca0b2f31a3e7bf5ba7541db275e6a6b", 0xc5}], 0x2}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000800)=ANY=[], 0x32600) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000180)={'ah\x00'}, &(0x7f0000000340)=0x1e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ppoll(0x0, 0xfe4a, 0x0, &(0x7f0000000580), 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x1c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c880) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x28, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x24, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x1000, 0x3, 0x9, 0xb956}, {0x1ed5, 0xd, 0x0, 0xffff}]}, 0x10) 350.694229ms ago: executing program 1 (id=8153): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000008de0d50003000400000085000000d3000000250000000000000085100000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r2, &(0x7f0000000b00), 0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004040) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001a00010000000000000000000200000000000000df3e1400046d00000014000500fc0200000000000000000000000000000800042006000000878df601c2ad5597ac1faef91fee7c9547767824a8aff41aa09d3d3aaa669f1f9a1c055e7583fe90f64559b8d4588841c0d6ebc6f6ca8eafaff512bb8143b31e5ff9fcda0df8ac2e20255dab93c73a4972bb5b5080e9e8e5e635a3410db62ef3fbb5def2a2395d", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000440)=[{&(0x7f00000000c0)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0x0) mkdirat$cgroup(r5, &(0x7f0000000140)='syz0\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000000706050000000000000000000700000705000100070000001500a77b587700cf"], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20002000) shutdown(r7, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @multicast2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000780)={0x27c, r11, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x268, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe9, 0x5, "732ca86d72c6f72b84c05a0c101878526bd58d5131a4f2f7b1aecfc6834c2d8058d5992dcddedd02bb735fde4946e2ad2174db94c8e0edfc0a7f59fb71bf01fd1e5d2324bdaa29e666c973eabb7c8f880f61514ea4f3e46eecdcce271a78671113c793b0a0c06acb90e4da98651792d371a000f5bdeca9e49da11446f816e7e7153f2318a4fa11679e548db61821c45bca47fe6f8e4dab000398aad51042200369f45283bb766345a39f0a9850cff5cf9695912ada429dc850e722e06a53d7f9c39bf1539457047126a9308f27a9ca903443c4d3b92f732e2145a0df8664c59c46b3414b32"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xeb0}, @ETHTOOL_A_BITSET_MASK={0x81, 0x5, "4713c8b256cba345e235c7b28e0b9088c706c14c5080266a8ed6951d860e247eaf1787d1856c0b889ae3d83758bfd01cf05a493ee9258761de48b600d2f8dd54065bb0e423470bdba85266a788fb363137f4f353a1a5834b86f793aa849f1982085d509678051e28e4c2b3dca8213bee8d2c6de5d4d2c2fe7ecd3b4283"}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '\\$-h[\xb6]-){\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4048080}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="90000000100003042bbd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000006800128009000100766c616e000000005800028006000100020000004c0003800c00010000000000800000000c00010003000000090000000c00010080000080020000000c000100fdffffff0a0000000c00010000000000010001000c000100080000000800000008000500", @ANYRES32=r6, @ANYBLOB], 0x90}}, 0x0) 292.076854ms ago: executing program 2 (id=8154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="18dbdf2508000100"/24], 0x18}, 0x1, 0x0, 0x0, 0x9040}, 0xc010) syz_emit_ethernet(0x13c4, &(0x7f0000001100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "feb957", 0x138e, 0x11, 0x1, @private1, @loopback, {[@hopopts={0x2f, 0x19, '\x00', [@generic={0x6, 0xc5, "2c61abc44da8e51f8443a83626d1f5661cfeece73f17ae2edecf2766100b33ea1f7c823c32160de3a0a0d21639bf75da579960d7757bb40a8d5ecfcfe4ada9dca6a5878df5a940042f7c909298aefb7d045adf7a6d8ce11907cb0f13df69fb6fb85c7cca1fa184b2677f9dcf846c5f8ef2957667722bf39f967f183483af91f42fd8ee7de4c1c5d8f7e7571c845a221f37038fb691d3a2a648b2e3b316d17aeda1c278cc2f0f44cb5152d4abde880fcd074799ccf91ec222935174025ab8c541f2586cdf64"}, @pad1]}, @fragment={0x33, 0x0, 0x9, 0x1, 0x0, 0x5, 0x66}, @hopopts={0x6, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x2}]}, @routing={0x1be, 0x4, 0x2, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x39}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x2c, 0xc, 0x1, 0x29, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @private1, @mcast1, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x39}]}, @dstopts={0x8, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @pad1, @enc_lim={0x4, 0x1, 0xf}]}, @fragment={0x27, 0x0, 0x9, 0x0, 0x0, 0x0, 0x65}, @fragment={0x84, 0x0, 0x5, 0x0, 0x0, 0x7, 0x67}, @hopopts={0x70, 0x21e, '\x00', [@generic={0x9, 0x1000, "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"}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0x15, "cffc1ef071648b20a9d31c5e3986607872cc552f78"}, @generic={0x7, 0xbb, "7455ff80ff23d5f984bda6b1e0897a5853875990c2ddebfd5d6d1eb394de6f233aa96b8afde20f42a6fde44366ad57759c1a8a19b6c036d0fdfde04578a16727d87feb4f9c8bb7aecdab0b101807e485a93f9dd91961aff5b3638467ca1538991d337c18e3f9f71decbc1039b2fcea5e656fbbc6ec9581980ddde3e69631fe85925d9c7e40a479188a2fd0aeeee58be8bd1c0ff0c91ed8b96d4633b73406de3cb32823f0c296a6ae3ff9082b786ca41463055a69143410b9766eee"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}, @fragment={0x2d, 0x0, 0x9, 0x1, 0x0, 0x11, 0x67}], {0x4e23, 0x4e24, 0xe6, 0x0, @wg=@data={0x4, 0x3, 0xfffffffffffff001, "88a84660324d60480c29e55f88d2032fbe9ed6e3c16e86a4fecd0743fc51e1234576678f1ff2c45fbe389b25a387c0b39876f9332078410ab4e0cfc88af2b194de324dd8613499b4eb082419aa3b915f4eba4f01c230c7c17d2c4287949f02baee467e3ec549a2b4f83f9ca33e6dde76152b3fca8e496cfd59cb96283639161def2b3dea23f98d8759ab03e607c1f2c40e8af19b0ab3f4758fe04b347136d0ceaf30ba6128a5eb4eaa536c31c5a67183b99315d6361ee34b2b64fad48f1918e49d3aa07d3dc01a42c9de01af1f3c"}}}}}}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0xfffffffffffffe00, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x44, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xcb}]}, 0x44}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)={0xffffffffffffff52, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x40084) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r11) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r12, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x810) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r17, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r17}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000000) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="2c0100000000000000010004010812b0"], 0x10) socketpair(0x1d, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r18, 0x8982, &(0x7f0000000000)={0x7, 'ip6gre0\x00', {}, 0x7}) 37.396278ms ago: executing program 1 (id=8155): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0xfffffffd, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="ca46dc08b6ac5da7007f000000000000dfff0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, 0x0, 0x0}, 0x20) socket$kcm(0x10, 0x3, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000080)=0x50, 0x8) unshare(0x24020400) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, 0x0, 0x8084) 0s ago: executing program 2 (id=8156): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz1\x00', @bcast, 0xff, 0x8, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) (async) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@phonet={0x23, 0x1, 0x81, 0x40}, 0x80, 0x0}, 0x40041) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x12, 0x0, 0x1f) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000340), 0x2) (async, rerun: 32) ioctl$SIOCNRDECOBS(r0, 0x89e2) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x40) (async) socketpair(0x10, 0x800, 0x7f, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000400)=0x6) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611274000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x464, 0x20, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x8000) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f0000000040)={0x21, {{0x29, 0x0, 0x2000000, @remote, 0x8000006}}}, 0x88) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x58, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x6f}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x46}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) kernel console output (not intermixed with test programs): 08][T30874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6642'. [ 843.701542][T30893] netlink: 'syz.0.6648': attribute type 12 has an invalid length. [ 843.901499][T30904] netlink: 'syz.0.6653': attribute type 1 has an invalid length. [ 844.046988][T30914] dvmrp0: entered allmulticast mode [ 844.072044][T30913] virt_wifi0 speed is unknown, defaulting to 1000 [ 844.091007][T30920] netlink: 'syz.0.6659': attribute type 1 has an invalid length. [ 844.106332][T30920] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6659'. [ 844.141511][T30924] netlink: 'syz.2.6657': attribute type 1 has an invalid length. [ 844.168204][T30924] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6657'. [ 844.222451][T30929] netlink: 'syz.0.6661': attribute type 1 has an invalid length. [ 844.289958][T30932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6662'. [ 844.312983][T30932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6662'. [ 844.396160][T30938] openvswitch: netlink: Message has 1 unknown bytes. [ 844.432366][T30939] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6664'. [ 844.460436][T30938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.792802][T30956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6670'. [ 844.824455][T30957] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6669'. [ 844.838012][T30959] netlink: 'syz.2.6671': attribute type 1 has an invalid length. [ 844.848871][T30959] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6671'. [ 844.895989][T30963] netlink: 'syz.1.6670': attribute type 1 has an invalid length. [ 844.959389][T30963] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 844.971744][T30963] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 844.977861][T30965] xt_connbytes: Forcing CT accounting to be enabled [ 845.193357][T30971] ": option downdelay: invalid value (18446744073709551615) [ 845.211075][T30971] ": option downdelay: allowed values 0 - 2147483647 [ 845.231625][T30971] " (unregistering): Released all slaves [ 845.272773][T30961] virt_wifi0 speed is unknown, defaulting to 1000 [ 845.527870][T30987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6677'. [ 845.545445][T30987] gretap0: entered promiscuous mode [ 845.552967][T30987] gretap0: left promiscuous mode [ 845.606064][T30989] netlink: 'syz.4.6678': attribute type 1 has an invalid length. [ 845.737580][T30997] netlink: 'syz.1.6681': attribute type 1 has an invalid length. [ 845.776477][T30997] bond5 (unregistering): Released all slaves [ 845.859225][T31001] netlink: 'syz.0.6683': attribute type 1 has an invalid length. [ 845.961274][T31008] openvswitch: netlink: Duplicate key (type 1). [ 846.051841][T31010] sit0: entered promiscuous mode [ 846.057000][T31010] sit0: entered allmulticast mode [ 846.105900][T31015] veth0: entered promiscuous mode [ 846.124014][T31013] veth0: left promiscuous mode [ 846.298415][T31025] virt_wifi0 speed is unknown, defaulting to 1000 [ 846.454243][T31037] netlink: 'syz.3.6697': attribute type 1 has an invalid length. [ 846.470344][T31036] netlink: 'syz.4.6698': attribute type 1 has an invalid length. [ 846.590920][T31037] bond3 (unregistering): Released all slaves [ 847.157899][ T5840] Bluetooth: hci2: command 0x0405 tx timeout [ 847.269982][T31075] team0: Port device dummy0 added [ 848.520603][T31122] syzkaller0: entered promiscuous mode [ 848.546631][T31122] syzkaller0: entered allmulticast mode [ 848.746048][T31129] virt_wifi0 speed is unknown, defaulting to 1000 [ 848.878609][T31138] __nla_validate_parse: 21 callbacks suppressed [ 848.878628][T31138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6730'. [ 848.926615][T31139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6728'. [ 848.950055][T31136] syzkaller0: entered promiscuous mode [ 848.955833][T31136] syzkaller0: entered allmulticast mode [ 849.403994][T31155] validate_nla: 6 callbacks suppressed [ 849.404014][T31155] netlink: 'syz.4.6736': attribute type 1 has an invalid length. [ 849.426058][T31155] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6736'. [ 849.567268][T31161] virt_wifi0 speed is unknown, defaulting to 1000 [ 849.582943][T31159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6738'. [ 850.174650][T31196] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6743'. [ 850.203601][T31192] virt_wifi0 speed is unknown, defaulting to 1000 [ 850.231049][T31199] macvlan2: left promiscuous mode [ 850.232189][T31196] netlink: 'syz.3.6743': attribute type 1 has an invalid length. [ 850.236530][T31199] macvtap2: left promiscuous mode [ 850.492808][T31202] netlink: 'syz.3.6749': attribute type 1 has an invalid length. [ 850.523449][T31202] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6749'. [ 850.558589][T31204] netlink: 'syz.0.6750': attribute type 1 has an invalid length. [ 850.572117][T31207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6751'. [ 850.862918][T31198] tipc: Started in network mode [ 850.887683][T31198] tipc: Node identity 56657149fa68, cluster identity 4711 [ 850.962898][T31198] tipc: Enabled bearer , priority 0 [ 851.040082][T31219] tipc: Enabled bearer , priority 0 [ 851.049468][T31219] syzkaller0: entered promiscuous mode [ 851.055343][T31219] syzkaller0: entered allmulticast mode [ 851.086899][T31219] tipc: Resetting bearer [ 851.134472][T31218] tipc: Resetting bearer [ 851.176138][T31218] tipc: Disabling bearer [ 851.208251][T31223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6757'. [ 851.224226][T31222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6756'. [ 851.254308][T31223] netlink: 'syz.4.6757': attribute type 5 has an invalid length. [ 851.262915][T31223] netlink: 'syz.4.6757': attribute type 8 has an invalid length. [ 851.289376][T31223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6757'. [ 851.339289][T31223] geneve2: entered promiscuous mode [ 851.357276][T31223] geneve2: entered allmulticast mode [ 851.368614][T27688] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 851.380996][T27688] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 851.486663][T27688] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 851.505249][T27688] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 851.572362][T31230] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 851.779217][T31246] netlink: 'syz.1.6763': attribute type 1 has an invalid length. [ 851.791941][T31244] netlink: 'syz.3.6762': attribute type 1 has an invalid length. [ 851.915560][T31248] bond5 (unregistering): Released all slaves [ 852.074517][ T5970] tipc: Node number set to 2886562121 [ 852.371530][T31271] team0: Port device team_slave_0 removed [ 852.571844][T31286] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 852.677778][T31290] netlink: 'syz.3.6776': attribute type 1 has an invalid length. [ 853.036019][T31310] team1: entered promiscuous mode [ 853.041087][T31310] team1: entered allmulticast mode [ 853.227187][T31320] nftables ruleset with unbound set [ 853.717814][T31347] netlink: 'syz.4.6795': attribute type 1 has an invalid length. [ 853.804368][T31350] bond7 (unregistering): Released all slaves [ 853.929524][T31356] __nla_validate_parse: 13 callbacks suppressed [ 853.929542][T31356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6797'. [ 853.967778][T31356] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6797'. [ 853.989069][T31356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6797'. [ 854.017473][T31356] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6797'. [ 854.083549][T31362] bridge0: port 3(netdevsim2) entered blocking state [ 854.101153][T31362] bridge0: port 3(netdevsim2) entered disabled state [ 854.112826][T31362] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 854.123805][T31362] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 854.142974][T31359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6799'. [ 854.153561][T31362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6800'. [ 854.177243][T27691] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.177360][T31359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6799'. [ 854.189662][T27691] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.205103][T27691] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.234656][T27691] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 854.334727][T31370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6801'. [ 854.618273][T31386] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6806'. [ 854.687309][T31389] netlink: 388 bytes leftover after parsing attributes in process `syz.1.6803'. [ 854.770273][T31376] team0 (unregistering): Port device team_slave_1 removed [ 854.786351][T31376] team0 (unregistering): Port device dummy0 removed [ 855.018901][T31403] virt_wifi0 speed is unknown, defaulting to 1000 [ 855.161384][T31400] virt_wifi0 speed is unknown, defaulting to 1000 [ 855.299582][T31405] virt_wifi0 speed is unknown, defaulting to 1000 [ 855.485090][T31432] x_tables: duplicate underflow at hook 2 [ 855.593795][T31436] sctp: [Deprecated]: syz.0.6821 (pid 31436) Use of int in maxseg socket option. [ 855.593795][T31436] Use struct sctp_assoc_value instead [ 855.596157][T31434] virt_wifi0 speed is unknown, defaulting to 1000 [ 855.741077][T31446] validate_nla: 1 callbacks suppressed [ 855.741096][T31446] netlink: 'syz.0.6823': attribute type 2 has an invalid length. [ 855.755104][T31446] netlink: 'syz.0.6823': attribute type 9 has an invalid length. [ 855.763176][T31446] netlink: 'syz.0.6823': attribute type 1 has an invalid length. [ 855.882018][T31453] bond4: option resend_igmp: invalid value (2878) [ 855.890996][T31453] bond4: option resend_igmp: allowed values 0 - 255 [ 855.900814][T31453] bond4 (unregistering): Released all slaves [ 856.270126][T31483] virt_wifi0 speed is unknown, defaulting to 1000 [ 856.476359][T31490] netlink: 'syz.4.6835': attribute type 2 has an invalid length. [ 856.668285][T31490] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 856.698896][T31490] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.711129][T31490] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 856.838069][T31497] netlink: 'syz.2.6837': attribute type 1 has an invalid length. [ 856.846304][T31497] netlink: 'syz.2.6837': attribute type 2 has an invalid length. [ 856.916047][T31490] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 856.942951][T31490] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.971304][T31490] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 856.993376][T31500] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 857.123664][T31490] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.142330][T31490] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.153500][T31490] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 857.180805][T31488] tipc: Started in network mode [ 857.185981][T31488] tipc: Node identity fe40cc4600fc, cluster identity 4711 [ 857.193263][T31488] tipc: Enabled bearer , priority 0 [ 857.316465][T31490] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.343651][T31490] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.384270][T31490] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 857.460598][T31513] bridge0: entered promiscuous mode [ 857.466499][T31513] macsec1: entered allmulticast mode [ 857.473229][T31513] bridge0: entered allmulticast mode [ 857.495968][T31513] bridge0: port 3(macsec1) entered blocking state [ 857.502623][T31513] bridge0: port 3(macsec1) entered disabled state [ 857.536668][T31513] bridge0: left allmulticast mode [ 857.541777][T31513] bridge0: left promiscuous mode [ 857.813809][T27687] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 857.846906][T27687] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 857.865404][T27687] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 857.933548][T31533] netlink: 'syz.1.6849': attribute type 1 has an invalid length. [ 857.953140][T27687] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 857.975204][T27687] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 857.983331][T27687] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 858.083866][T31540] bond5 (unregistering): Released all slaves [ 858.165627][T27687] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.182892][T27687] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 858.194891][T27687] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 858.251421][T27692] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.272145][T27692] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 858.292564][T27692] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 858.304228][ T5970] tipc: Node number set to 4273785926 [ 858.351130][T31545] netlink: 'syz.1.6852': attribute type 9 has an invalid length. [ 858.592473][T31562] virt_wifi0 speed is unknown, defaulting to 1000 [ 858.944932][T31582] __nla_validate_parse: 48 callbacks suppressed [ 858.944951][T31582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6861'. [ 858.970991][T31586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6861'. [ 859.142781][T31590] netlink: 'syz.1.6863': attribute type 16 has an invalid length. [ 859.164286][T31590] netlink: 'syz.1.6863': attribute type 17 has an invalid length. [ 859.321095][T27692] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.364467][T27692] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.404191][T27692] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.456631][T27692] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.480984][T31596] virt_wifi0 speed is unknown, defaulting to 1000 [ 859.701369][T31629] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6876'. [ 860.480628][T31678] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6886'. [ 860.537331][T31672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6886'. [ 860.576228][T31672] bond7 (unregistering): Released all slaves [ 860.657655][T31686] virt_wifi0 speed is unknown, defaulting to 1000 [ 860.770418][T31688] virt_wifi0 speed is unknown, defaulting to 1000 [ 860.820586][T31695] validate_nla: 4 callbacks suppressed [ 860.820605][T31695] netlink: 'syz.4.6893': attribute type 6 has an invalid length. [ 860.991816][T31695] netlink: 'syz.4.6893': attribute type 12 has an invalid length. [ 860.999992][T31695] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.6893'. [ 861.340838][T31715] netlink: 'syz.2.6897': attribute type 12 has an invalid length. [ 861.452220][T31722] virt_wifi0 speed is unknown, defaulting to 1000 [ 861.667023][T31730] netlink: 'syz.4.6903': attribute type 1 has an invalid length. [ 861.767896][T31735] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6903'. [ 861.793235][T31730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6903'. [ 861.867708][T31730] bond7 (unregistering): Released all slaves [ 862.086975][T31726] IPVS: Error connecting to the multicast addr [ 862.481733][T31757] virt_wifi0 speed is unknown, defaulting to 1000 [ 863.440830][T31781] netlink: 'syz.3.6910': attribute type 2 has an invalid length. [ 864.369246][T31763] veth7: entered promiscuous mode [ 864.374880][T31764] tipc: Enabled bearer , priority 0 [ 864.383480][T31766] syzkaller0: entered promiscuous mode [ 864.396366][T31766] syzkaller0: entered allmulticast mode [ 864.415642][T31772] tipc: Resetting bearer [ 864.534685][T31761] tipc: Resetting bearer [ 864.553973][T31761] tipc: Disabling bearer [ 864.681538][T31789] veth1_to_team: entered promiscuous mode [ 864.697409][T31789] bond0: entered promiscuous mode [ 864.702813][T31789] bond_slave_0: entered promiscuous mode [ 864.711230][T31789] bond_slave_1: entered promiscuous mode [ 864.725198][T31789] hsr1: entered allmulticast mode [ 864.730326][T31789] veth1_to_team: entered allmulticast mode [ 864.744536][T31789] bond0: entered allmulticast mode [ 864.764250][T31789] bond_slave_0: entered allmulticast mode [ 864.770008][T31789] bond_slave_1: entered allmulticast mode [ 864.914385][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 864.953618][T31795] syzkaller1: entered promiscuous mode [ 864.959704][T31795] syzkaller1: entered allmulticast mode [ 865.158306][T31824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6919'. [ 865.177640][T31823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6921'. [ 865.561350][T31840] virt_wifi0 speed is unknown, defaulting to 1000 [ 866.118143][T31867] virt_wifi0 speed is unknown, defaulting to 1000 [ 866.632547][T31878] virt_wifi0 speed is unknown, defaulting to 1000 [ 866.940191][T31878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6936'. [ 867.094573][T31901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6943'. [ 867.671620][T31928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6949'. [ 867.925871][T31922] virt_wifi0 speed is unknown, defaulting to 1000 [ 867.980412][T31925] macvtap1: entered allmulticast mode [ 867.986439][T31925] mac80211_hwsim hwsim89 wlan0: entered allmulticast mode [ 868.061146][T31925] mac80211_hwsim hwsim89 wlan0: left allmulticast mode [ 868.360030][T31959] netlink: 'syz.3.6960': attribute type 1 has an invalid length. [ 868.400423][T31963] netlink: 'syz.0.6959': attribute type 1 has an invalid length. [ 868.417290][T31957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6957'. [ 868.461120][T31966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6961'. [ 868.471138][T31970] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6960'. [ 868.565042][T31973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6960'. [ 868.577579][T31974] netlink: 'syz.1.6958': attribute type 2 has an invalid length. [ 868.889972][T31963] 8021q: adding VLAN 0 to HW filter on device bond4 [ 869.118824][T31968] bond4: (slave geneve2): making interface the new active one [ 869.147444][T31968] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 869.183377][T31973] bond3 (unregistering): Released all slaves [ 869.238346][T27687] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.262769][T27687] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.318686][T31984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6963'. [ 869.340249][T27687] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.391550][T31988] sctp: [Deprecated]: syz.3.6966 (pid 31988) Use of int in maxseg socket option. [ 869.391550][T31988] Use struct sctp_assoc_value instead [ 869.406234][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 869.414226][T27687] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.418754][T32019] netlink: 'syz.2.6977': attribute type 1 has an invalid length. [ 870.475399][T32029] __nla_validate_parse: 4 callbacks suppressed [ 870.475417][T32029] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6977'. [ 870.560390][T32019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6977'. [ 870.609901][T32034] netlink: 'syz.1.6981': attribute type 1 has an invalid length. [ 870.619638][T32019] bond1 (unregistering): Released all slaves [ 870.671490][T32041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6981'. [ 870.697713][ T30] audit: type=1800 audit(1760559277.441:16): pid=32025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6979" name="cgroup.controllers" dev="tmpfs" ino=1053 res=0 errno=0 [ 870.719111][T32041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6981'. [ 870.852960][T32034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6981'. [ 870.896292][T32034] bond5 (unregistering): Released all slaves [ 870.970522][T32047] virt_wifi0 speed is unknown, defaulting to 1000 [ 871.102307][T32061] FAULT_INJECTION: forcing a failure. [ 871.102307][T32061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.121438][T32061] CPU: 1 UID: 0 PID: 32061 Comm: syz.1.6989 Not tainted syzkaller #0 PREEMPT(full) [ 871.121464][T32061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 871.121477][T32061] Call Trace: [ 871.121485][T32061] [ 871.121494][T32061] dump_stack_lvl+0x189/0x250 [ 871.121519][T32061] ? __pfx____ratelimit+0x10/0x10 [ 871.121542][T32061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 871.121564][T32061] ? __pfx__printk+0x10/0x10 [ 871.121584][T32061] ? __might_fault+0xb0/0x130 [ 871.121621][T32061] should_fail_ex+0x414/0x560 [ 871.121649][T32061] _copy_from_user+0x2d/0xb0 [ 871.121670][T32061] ___sys_sendmsg+0x158/0x2a0 [ 871.121697][T32061] ? __pfx____sys_sendmsg+0x10/0x10 [ 871.121767][T32061] ? __fget_files+0x2a/0x420 [ 871.121785][T32061] ? __fget_files+0x3a0/0x420 [ 871.121813][T32061] __sys_sendmmsg+0x227/0x430 [ 871.121842][T32061] ? __pfx___sys_sendmmsg+0x10/0x10 [ 871.121876][T32061] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 871.121917][T32061] ? ksys_write+0x22a/0x250 [ 871.121944][T32061] ? __pfx_ksys_write+0x10/0x10 [ 871.121975][T32061] __x64_sys_sendmmsg+0xa0/0xc0 [ 871.122001][T32061] do_syscall_64+0xfa/0xfa0 [ 871.122024][T32061] ? lockdep_hardirqs_on+0x9c/0x150 [ 871.122047][T32061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.122066][T32061] ? clear_bhb_loop+0x60/0xb0 [ 871.122091][T32061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.122110][T32061] RIP: 0033:0x7fd22158eec9 [ 871.122129][T32061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 871.122147][T32061] RSP: 002b:00007fd2224ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 871.122168][T32061] RAX: ffffffffffffffda RBX: 00007fd2217e5fa0 RCX: 00007fd22158eec9 [ 871.122183][T32061] RDX: 00000000000a8000 RSI: 00002000000034c0 RDI: 0000000000000003 [ 871.122195][T32061] RBP: 00007fd2224ed090 R08: 0000000000000000 R09: 0000000000000000 [ 871.122207][T32061] R10: 0000000040000840 R11: 0000000000000246 R12: 0000000000000001 [ 871.122220][T32061] R13: 00007fd2217e6038 R14: 00007fd2217e5fa0 R15: 00007ffff51799f8 [ 871.122253][T32061] [ 872.012872][T32080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6997'. [ 872.046403][T32080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6997'. [ 872.087225][T32080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6997'. [ 872.152622][T32090] netlink: 'syz.0.6999': attribute type 2 has an invalid length. [ 872.171215][T32090] netlink: 'syz.0.6999': attribute type 1 has an invalid length. [ 872.185525][T32090] netlink: 'syz.0.6999': attribute type 1 has an invalid length. [ 872.774055][T32115] netlink: 'syz.2.7003': attribute type 16 has an invalid length. [ 872.782115][T32115] netlink: 'syz.2.7003': attribute type 17 has an invalid length. [ 872.819855][T32115] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 872.986048][T32126] FAULT_INJECTION: forcing a failure. [ 872.986048][T32126] name failslab, interval 1, probability 0, space 0, times 0 [ 873.003199][T32126] CPU: 0 UID: 0 PID: 32126 Comm: syz.4.7009 Not tainted syzkaller #0 PREEMPT(full) [ 873.003227][T32126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 873.003240][T32126] Call Trace: [ 873.003248][T32126] [ 873.003256][T32126] dump_stack_lvl+0x189/0x250 [ 873.003281][T32126] ? __pfx____ratelimit+0x10/0x10 [ 873.003305][T32126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 873.003325][T32126] ? __pfx__printk+0x10/0x10 [ 873.003352][T32126] ? __pfx___might_resched+0x10/0x10 [ 873.003373][T32126] ? fs_reclaim_acquire+0x7d/0x100 [ 873.003415][T32126] should_fail_ex+0x414/0x560 [ 873.003442][T32126] should_failslab+0xa8/0x100 [ 873.003463][T32126] __kmalloc_noprof+0xcb/0x7f0 [ 873.003489][T32126] ? sock_kmalloc+0xd6/0x160 [ 873.003521][T32126] sock_kmalloc+0xd6/0x160 [ 873.003549][T32126] ____sys_sendmsg+0x1b5/0x830 [ 873.003577][T32126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 873.003611][T32126] ? import_iovec+0x74/0xa0 [ 873.003635][T32126] ___sys_sendmsg+0x21f/0x2a0 [ 873.003661][T32126] ? __pfx____sys_sendmsg+0x10/0x10 [ 873.003723][T32126] ? __fget_files+0x2a/0x420 [ 873.003741][T32126] ? __fget_files+0x3a0/0x420 [ 873.003771][T32126] __sys_sendmmsg+0x227/0x430 [ 873.003801][T32126] ? __pfx___sys_sendmmsg+0x10/0x10 [ 873.003834][T32126] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 873.003878][T32126] ? ksys_write+0x22a/0x250 [ 873.003907][T32126] ? __pfx_ksys_write+0x10/0x10 [ 873.003939][T32126] __x64_sys_sendmmsg+0xa0/0xc0 [ 873.003965][T32126] do_syscall_64+0xfa/0xfa0 [ 873.003987][T32126] ? lockdep_hardirqs_on+0x9c/0x150 [ 873.004011][T32126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.004030][T32126] ? clear_bhb_loop+0x60/0xb0 [ 873.004054][T32126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.004074][T32126] RIP: 0033:0x7fa564d8eec9 [ 873.004092][T32126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.004111][T32126] RSP: 002b:00007fa565c26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 873.004130][T32126] RAX: ffffffffffffffda RBX: 00007fa564fe5fa0 RCX: 00007fa564d8eec9 [ 873.004144][T32126] RDX: 00000000000a8000 RSI: 00002000000034c0 RDI: 0000000000000003 [ 873.004157][T32126] RBP: 00007fa565c26090 R08: 0000000000000000 R09: 0000000000000000 [ 873.004168][T32126] R10: 0000000040000840 R11: 0000000000000246 R12: 0000000000000001 [ 873.004181][T32126] R13: 00007fa564fe6038 R14: 00007fa564fe5fa0 R15: 00007ffd93fa7b38 [ 873.004213][T32126] [ 873.361834][T32129] virt_wifi0 speed is unknown, defaulting to 1000 [ 873.495733][T32134] virt_wifi0 speed is unknown, defaulting to 1000 [ 873.559224][T32138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7012'. [ 874.089446][T32155] dummy0: entered allmulticast mode [ 874.138496][T32154] virt_wifi0 speed is unknown, defaulting to 1000 [ 874.193742][T32158] netlink: 'syz.3.7015': attribute type 1 has an invalid length. [ 874.303625][T32158] 8021q: adding VLAN 0 to HW filter on device bond3 [ 874.343800][T32161] netlink: 'syz.0.7014': attribute type 6 has an invalid length. [ 874.497268][T32163] syzkaller0: entered promiscuous mode [ 874.502995][T32163] syzkaller0: entered allmulticast mode [ 874.519570][T32164] macvlan3: entered promiscuous mode [ 874.564746][T32153] dummy0: left allmulticast mode [ 874.828408][T32178] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7018'. [ 875.225118][T32193] netlink: 'syz.1.7022': attribute type 4 has an invalid length. [ 875.333308][T32197] netlink: 'syz.0.7021': attribute type 5 has an invalid length. [ 876.927031][T32203] virt_wifi0 speed is unknown, defaulting to 1000 [ 877.181121][T32221] netlink: 'syz.0.7028': attribute type 1 has an invalid length. [ 877.302078][T32224] bond5: (slave veth7): Enslaving as an active interface with a down link [ 877.377989][T32221] __nla_validate_parse: 7 callbacks suppressed [ 877.378010][T32221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7028'. [ 877.621300][T32238] netlink: 'syz.1.7033': attribute type 9 has an invalid length. [ 877.629818][T32238] netlink: 448 bytes leftover after parsing attributes in process `syz.1.7033'. [ 878.033336][T32257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7039'. [ 878.137584][T32264] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7042'. [ 878.200934][T32264] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7042'. [ 878.249279][T32270] mac80211_hwsim hwsim91 syzkaller0: entered promiscuous mode [ 878.257298][T32270] mac80211_hwsim hwsim91 syzkaller0: entered allmulticast mode [ 878.332419][T32273] FAULT_INJECTION: forcing a failure. [ 878.332419][T32273] name failslab, interval 1, probability 0, space 0, times 0 [ 878.350411][T32273] CPU: 0 UID: 0 PID: 32273 Comm: syz.2.7044 Not tainted syzkaller #0 PREEMPT(full) [ 878.350438][T32273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 878.350451][T32273] Call Trace: [ 878.350459][T32273] [ 878.350468][T32273] dump_stack_lvl+0x189/0x250 [ 878.350494][T32273] ? __pfx____ratelimit+0x10/0x10 [ 878.350517][T32273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 878.350542][T32273] ? __pfx__printk+0x10/0x10 [ 878.350563][T32273] ? rcu_is_watching+0x15/0xb0 [ 878.350586][T32273] ? trace_fib_table_lookup+0x85/0x200 [ 878.350618][T32273] should_fail_ex+0x414/0x560 [ 878.350647][T32273] should_failslab+0xa8/0x100 [ 878.350668][T32273] kmem_cache_alloc_noprof+0x74/0x6e0 [ 878.350693][T32273] ? __pfx_find_exception+0x10/0x10 [ 878.350718][T32273] ? dst_alloc+0x105/0x170 [ 878.350740][T32273] ? fib_lookup+0x76/0x440 [ 878.350767][T32273] dst_alloc+0x105/0x170 [ 878.350797][T32273] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 878.350835][T32273] ? ip_route_output_key_hash+0xc1/0x280 [ 878.350864][T32273] ip_route_output_key_hash+0x174/0x280 [ 878.350895][T32273] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 878.350930][T32273] ? ip_cmsg_send+0x9c3/0xa70 [ 878.350967][T32273] ip_route_output_flow+0x2a/0x150 [ 878.350991][T32273] ? security_sk_classify_flow+0x70/0x180 [ 878.351015][T32273] raw_sendmsg+0x1039/0x18b0 [ 878.351060][T32273] ? __pfx_raw_sendmsg+0x10/0x10 [ 878.351108][T32273] ? aa_sk_perm+0x81e/0x950 [ 878.351138][T32273] ? __pfx_aa_sk_perm+0x10/0x10 [ 878.351160][T32273] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 878.351192][T32273] ? sock_rps_record_flow+0x19/0x410 [ 878.351215][T32273] ? inet_sendmsg+0x2f4/0x370 [ 878.351233][T32273] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 878.351257][T32273] __sock_sendmsg+0x19c/0x270 [ 878.351288][T32273] ____sys_sendmsg+0x52d/0x830 [ 878.351318][T32273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 878.351351][T32273] ? import_iovec+0x74/0xa0 [ 878.351381][T32273] ___sys_sendmsg+0x21f/0x2a0 [ 878.351407][T32273] ? __pfx____sys_sendmsg+0x10/0x10 [ 878.351470][T32273] ? __fget_files+0x2a/0x420 [ 878.351487][T32273] ? __fget_files+0x3a0/0x420 [ 878.351517][T32273] __sys_sendmmsg+0x227/0x430 [ 878.351547][T32273] ? __pfx___sys_sendmmsg+0x10/0x10 [ 878.351581][T32273] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 878.351626][T32273] ? ksys_write+0x22a/0x250 [ 878.351660][T32273] ? __pfx_ksys_write+0x10/0x10 [ 878.351691][T32273] __x64_sys_sendmmsg+0xa0/0xc0 [ 878.351717][T32273] do_syscall_64+0xfa/0xfa0 [ 878.351740][T32273] ? lockdep_hardirqs_on+0x9c/0x150 [ 878.351764][T32273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.351783][T32273] ? clear_bhb_loop+0x60/0xb0 [ 878.351808][T32273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.351827][T32273] RIP: 0033:0x7fb20f38eec9 [ 878.351844][T32273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.351862][T32273] RSP: 002b:00007fb21022e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 878.351883][T32273] RAX: ffffffffffffffda RBX: 00007fb20f5e5fa0 RCX: 00007fb20f38eec9 [ 878.351898][T32273] RDX: 00000000000a8000 RSI: 00002000000034c0 RDI: 0000000000000003 [ 878.351912][T32273] RBP: 00007fb21022e090 R08: 0000000000000000 R09: 0000000000000000 [ 878.351925][T32273] R10: 0000000040000840 R11: 0000000000000246 R12: 0000000000000001 [ 878.351938][T32273] R13: 00007fb20f5e6038 R14: 00007fb20f5e5fa0 R15: 00007fff59ba7658 [ 878.351973][T32273] [ 878.815936][T32284] netlink: 'syz.3.7047': attribute type 1 has an invalid length. [ 878.824009][T32284] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7047'. [ 878.931556][T32287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7048'. [ 878.960409][T32291] pim6reg1: entered promiscuous mode [ 878.966589][T32291] pim6reg1: entered allmulticast mode [ 879.170607][T32307] pim6reg: entered allmulticast mode [ 879.199942][T32307] pim6reg: left allmulticast mode [ 879.483931][T32326] netlink: 'syz.0.7058': attribute type 1 has an invalid length. [ 879.617001][T32326] bond6: (slave veth9): Enslaving as an active interface with a down link [ 879.660240][T32326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7058'. [ 880.182730][T32357] netlink: 'syz.3.7067': attribute type 3 has an invalid length. [ 880.198003][T32357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7067'. [ 880.247345][T32360] netlink: 'syz.4.7069': attribute type 1 has an invalid length. [ 880.338260][T32360] bond7: (slave geneve3): making interface the new active one [ 880.360068][T32360] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 880.381500][T27708] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 880.401632][T27708] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 880.436390][T27708] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 880.467475][T27708] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 880.573310][T32370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7072'. [ 880.682939][T32375] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 880.858059][T32382] netlink: 'syz.4.7076': attribute type 1 has an invalid length. [ 880.992877][T32383] syzkaller0: entered promiscuous mode [ 881.001843][T32383] syzkaller0: entered allmulticast mode [ 881.164986][T32386] bond8: (slave veth9): Enslaving as an active interface with a down link [ 881.351919][T32413] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 883.077395][T32440] netlink: 'syz.4.7095': attribute type 1 has an invalid length. [ 883.158676][T32446] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 883.168869][T32442] netlink: 'syz.0.7097': attribute type 12 has an invalid length. [ 883.200302][T32447] __nla_validate_parse: 3 callbacks suppressed [ 883.200320][T32447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7098'. [ 883.232239][T32440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7095'. [ 883.258936][T32450] bond9: (slave veth11): Enslaving as an active interface with a down link [ 883.259184][T32452] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 883.496597][T32466] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 883.522061][T32460] netlink: 'syz.4.7104': attribute type 29 has an invalid length. [ 883.530842][T32460] netlink: 'syz.4.7104': attribute type 29 has an invalid length. [ 884.084430][T32495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7114'. [ 884.407404][T32508] tipc: Enabled bearer , priority 10 [ 884.413812][T32507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7119'. [ 884.462651][T32513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7119'. [ 884.611402][T32513] bond0: Device is already in use. [ 884.618454][T32520] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 884.747325][T32525] virt_wifi0 speed is unknown, defaulting to 1000 [ 884.761867][T32527] netlink: 'syz.3.7125': attribute type 1 has an invalid length. [ 884.877640][T32527] 8021q: adding VLAN 0 to HW filter on device bond4 [ 884.956838][T32538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7127'. [ 885.586647][T32559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7135'. [ 885.623053][T32559] netlink: 'syz.4.7135': attribute type 1 has an invalid length. [ 885.654054][T32559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7135'. [ 885.667781][T32568] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 885.750006][T32571] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7138'. [ 885.922153][T32579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7140'. [ 886.147851][T32590] pim6reg1: entered promiscuous mode [ 886.153190][T32590] pim6reg1: entered allmulticast mode [ 886.198196][T32593] netlink: 'syz.1.7147': attribute type 1 has an invalid length. [ 886.253769][ T5840] Bluetooth: hci2: link tx timeout [ 886.259869][ T5840] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 886.271190][ T5840] Bluetooth: hci2: link tx timeout [ 886.278083][ T5840] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 886.285802][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c87ec00: rx timeout, send abort [ 886.291545][T32597] virt_wifi0 speed is unknown, defaulting to 1000 [ 886.359488][T32604] bond6: (slave veth7): Enslaving as an active interface with a down link [ 886.447690][T32613] IPv6: NLM_F_CREATE should be specified when creating new route [ 886.553973][T32611] virt_wifi0 speed is unknown, defaulting to 1000 [ 886.659126][T32618] virt_wifi0 speed is unknown, defaulting to 1000 [ 886.677512][T32621] netlink: 'syz.2.7152': attribute type 3 has an invalid length. [ 886.786574][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c87ec00: abort rx timeout. Force session deactivation [ 887.252959][T32655] netlink: 'syz.3.7167': attribute type 1 has an invalid length. [ 887.276032][T32653] netlink: 'syz.0.7164': attribute type 1 has an invalid length. [ 887.316692][T32653] netlink: 'syz.0.7164': attribute type 1 has an invalid length. [ 887.441074][T32659] bond5: (slave veth7): Enslaving as an active interface with a down link [ 887.946424][T32682] sctp: [Deprecated]: syz.2.7175 (pid 32682) Use of int in maxseg socket option. [ 887.946424][T32682] Use struct sctp_assoc_value instead [ 888.229593][T32701] __nla_validate_parse: 8 callbacks suppressed [ 888.229612][T32701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7179'. [ 888.364305][T25961] Bluetooth: hci2: command 0x0405 tx timeout [ 888.387931][T32709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7184'. [ 888.659957][T32729] netlink: 'syz.1.7190': attribute type 6 has an invalid length. [ 888.694363][T32729] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7190'. [ 888.708503][T32729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7190'. [ 888.895389][T32732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7191'. [ 888.912486][T32732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7191'. [ 888.975439][T32732] virt_wifi0 speed is unknown, defaulting to 1000 [ 889.242598][T32751] syzkaller1: entered promiscuous mode [ 889.249736][T32751] syzkaller1: entered allmulticast mode [ 889.442918][T32757] syzkaller0: entered promiscuous mode [ 889.465403][T32757] syzkaller0: entered allmulticast mode [ 890.477202][ T351] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7216'. [ 890.633303][ T356] x_tables: duplicate underflow at hook 2 [ 890.701289][ T360] netlink: 'syz.2.7219': attribute type 1 has an invalid length. [ 890.789128][ T360] bond1: (slave veth9): Enslaving as an active interface with a down link [ 890.910706][ T367] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7221'. [ 891.032128][ T372] sch_tbf: burst 43029 is lower than device ip6gre0 mtu (61406) ! [ 891.404582][ T393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7227'. [ 891.418577][ T389] virt_wifi0 speed is unknown, defaulting to 1000 [ 891.458388][ T393] netdevsim netdevsim3 netdevsim2: left allmulticast mode [ 891.473683][ T398] netlink: 'syz.1.7232': attribute type 1 has an invalid length. [ 891.482465][ T393] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 891.490047][ T393] bridge0: port 3(netdevsim2) entered disabled state [ 891.539611][ T393] bridge_slave_1: left allmulticast mode [ 891.571541][ T393] bridge_slave_1: left promiscuous mode [ 891.578843][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.687776][ T393] bridge_slave_0: left allmulticast mode [ 891.696178][ T393] bridge_slave_0: left promiscuous mode [ 891.702656][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.003733][ T388] virt_wifi0 speed is unknown, defaulting to 1000 [ 892.147792][ T400] bond8: (slave veth9): Enslaving as an active interface with a down link [ 892.250895][ T411] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7234'. [ 892.299238][ T411] macvtap1: entered promiscuous mode [ 892.314603][ T411] mac80211_hwsim hwsim86 wlan1: entered promiscuous mode [ 892.841620][ T436] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 892.872524][ T440] veth1_virt_wifi: entered promiscuous mode [ 892.879004][ T440] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 892.922068][ T442] netlink: 'syz.2.7245': attribute type 1 has an invalid length. [ 892.983772][ T442] bond2: (slave veth11): Enslaving as an active interface with a down link [ 893.065169][ T450] delete_channel: no stack [ 893.390123][ T473] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 893.505067][ T477] netlink: 'syz.0.7257': attribute type 1 has an invalid length. [ 893.513101][ T477] __nla_validate_parse: 2 callbacks suppressed [ 893.513118][ T477] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7257'. [ 893.618858][ T481] netlink: 'syz.0.7259': attribute type 1 has an invalid length. [ 893.676432][ T481] bond7: (slave veth11): Enslaving as an active interface with a down link [ 893.718567][ T488] x_tables: duplicate underflow at hook 1 [ 893.930288][ T502] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 895.055121][ T547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7274'. [ 895.147522][ T554] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 895.218800][ T549] sit0: left promiscuous mode [ 895.223610][ T549] sit0: left allmulticast mode [ 895.226013][ T560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7279'. [ 895.250763][ T549] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.277808][ T549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 895.400890][ T567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 895.505834][ T569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 895.736436][ T592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7289'. [ 895.828076][ T594] virt_wifi0 speed is unknown, defaulting to 1000 [ 896.301933][ T619] virt_wifi0 speed is unknown, defaulting to 1000 [ 896.453959][ T629] virt_wifi0 speed is unknown, defaulting to 1000 [ 896.680409][ T642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7303'. [ 897.056117][ T658] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7311'. [ 897.128841][ T663] IPVS: set_ctl: invalid protocol: 2 172.30.1.4:20003 [ 897.314018][ T673] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7315'. [ 897.360713][ T673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7315'. [ 897.539140][ T684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7318'. [ 897.709101][ T693] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 897.797238][ T694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7323'. [ 897.852494][ T701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 897.866240][ T701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 897.880188][ T701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 897.898602][ T701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.219076][ T724] netlink: 'syz.3.7335': attribute type 2 has an invalid length. [ 898.314034][ T729] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 898.521194][ T749] __nla_validate_parse: 4 callbacks suppressed [ 898.521213][ T749] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7343'. [ 898.541335][ T751] IPVS: length: 4096 != 8 [ 898.622412][ T754] netlink: 'syz.4.7345': attribute type 1 has an invalid length. [ 898.682215][ T761] netlink: 'syz.3.7348': attribute type 1 has an invalid length. [ 898.698451][ T761] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7348'. [ 898.713214][ T767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7349'. [ 898.725746][ T761] netlink: 'syz.3.7348': attribute type 2 has an invalid length. [ 898.733508][ T761] netlink: 'syz.3.7348': attribute type 1 has an invalid length. [ 898.742255][ T761] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7348'. [ 898.857041][ T772] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 899.072472][ T786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7357'. [ 899.100338][ T786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7357'. [ 899.117337][ T786] netlink: 'syz.1.7357': attribute type 19 has an invalid length. [ 899.140095][ T786] netlink: 'syz.1.7357': attribute type 20 has an invalid length. [ 899.189075][ T788] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 899.290306][ T799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7360'. [ 899.359358][ T799] syzkaller0: entered promiscuous mode [ 899.365506][ T799] syzkaller0: entered allmulticast mode [ 899.376699][ T805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7362'. [ 899.591973][ T812] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 900.321664][ T837] xt_CT: You must specify a L4 protocol and not use inversions on it [ 900.341120][ T837] netlink: 'syz.3.7371': attribute type 16 has an invalid length. [ 900.351382][ T837] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 901.155141][T25961] Bluetooth: hci1: command 0x0401 tx timeout [ 901.239398][ T839] virt_wifi0 speed is unknown, defaulting to 1000 [ 901.370095][ T849] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 901.385910][ T842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7373'. [ 901.584972][ T857] netlink: 'syz.3.7379': attribute type 1 has an invalid length. [ 901.667759][ T857] bond6: (slave veth9): Enslaving as an active interface with a down link [ 901.698389][ T857] FAULT_INJECTION: forcing a failure. [ 901.698389][ T857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 901.728243][ T857] CPU: 0 UID: 0 PID: 857 Comm: syz.3.7379 Not tainted syzkaller #0 PREEMPT(full) [ 901.728271][ T857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 901.728284][ T857] Call Trace: [ 901.728292][ T857] [ 901.728302][ T857] dump_stack_lvl+0x189/0x250 [ 901.728327][ T857] ? __pfx____ratelimit+0x10/0x10 [ 901.728351][ T857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 901.728371][ T857] ? __pfx__printk+0x10/0x10 [ 901.728392][ T857] ? __might_fault+0xb0/0x130 [ 901.728431][ T857] should_fail_ex+0x414/0x560 [ 901.728459][ T857] _copy_from_user+0x2d/0xb0 [ 901.728479][ T857] ___sys_sendmsg+0x158/0x2a0 [ 901.728506][ T857] ? __pfx____sys_sendmsg+0x10/0x10 [ 901.728568][ T857] ? __fget_files+0x2a/0x420 [ 901.728593][ T857] ? __fget_files+0x3a0/0x420 [ 901.728622][ T857] __x64_sys_sendmsg+0x19b/0x260 [ 901.728648][ T857] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 901.728683][ T857] ? __pfx_ksys_write+0x10/0x10 [ 901.728714][ T857] ? do_syscall_64+0xbe/0xfa0 [ 901.728742][ T857] do_syscall_64+0xfa/0xfa0 [ 901.728764][ T857] ? lockdep_hardirqs_on+0x9c/0x150 [ 901.728788][ T857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.728808][ T857] ? clear_bhb_loop+0x60/0xb0 [ 901.728831][ T857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.728851][ T857] RIP: 0033:0x7fb8fd18eec9 [ 901.728869][ T857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 901.728887][ T857] RSP: 002b:00007fb8fdf9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.728908][ T857] RAX: ffffffffffffffda RBX: 00007fb8fd3e5fa0 RCX: 00007fb8fd18eec9 [ 901.728924][ T857] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 901.728936][ T857] RBP: 00007fb8fdf9b090 R08: 0000000000000000 R09: 0000000000000000 [ 901.728949][ T857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.728961][ T857] R13: 00007fb8fd3e6038 R14: 00007fb8fd3e5fa0 R15: 00007ffd74ce4b48 [ 901.728995][ T857] [ 902.037637][ T873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7386'. [ 902.435476][ T884] bond11: option arp_validate: invalid value (18446744073491447809) [ 902.446221][ T884] bond11 (unregistering): Released all slaves [ 902.621437][ T900] netlink: 'syz.3.7395': attribute type 1 has an invalid length. [ 902.748632][ T900] FAULT_INJECTION: forcing a failure. [ 902.748632][ T900] name failslab, interval 1, probability 0, space 0, times 0 [ 902.750072][ T911] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 902.767711][ T900] CPU: 0 UID: 0 PID: 900 Comm: syz.3.7395 Not tainted syzkaller #0 PREEMPT(full) [ 902.767744][ T900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 902.767756][ T900] Call Trace: [ 902.767764][ T900] [ 902.767773][ T900] dump_stack_lvl+0x189/0x250 [ 902.767798][ T900] ? __pfx____ratelimit+0x10/0x10 [ 902.767821][ T900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 902.767841][ T900] ? __pfx__printk+0x10/0x10 [ 902.767867][ T900] ? __pfx___might_resched+0x10/0x10 [ 902.767888][ T900] ? fs_reclaim_acquire+0x7d/0x100 [ 902.767921][ T900] should_fail_ex+0x414/0x560 [ 902.767949][ T900] should_failslab+0xa8/0x100 [ 902.767969][ T900] kmem_cache_alloc_node_noprof+0x77/0x710 [ 902.767995][ T900] ? __alloc_skb+0x112/0x2d0 [ 902.768013][ T900] ? netlink_autobind+0xdb/0x300 [ 902.768042][ T900] __alloc_skb+0x112/0x2d0 [ 902.768067][ T900] netlink_sendmsg+0x5c6/0xb30 [ 902.768097][ T900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 902.768123][ T900] ? aa_sock_msg_perm+0xf1/0x1d0 [ 902.768152][ T900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 902.768171][ T900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 902.768193][ T900] __sock_sendmsg+0x21c/0x270 [ 902.768224][ T900] ____sys_sendmsg+0x505/0x830 [ 902.768253][ T900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 902.768286][ T900] ? import_iovec+0x74/0xa0 [ 902.768309][ T900] ___sys_sendmsg+0x21f/0x2a0 [ 902.768335][ T900] ? __pfx____sys_sendmsg+0x10/0x10 [ 902.768396][ T900] ? __fget_files+0x2a/0x420 [ 902.768413][ T900] ? __fget_files+0x3a0/0x420 [ 902.768441][ T900] __x64_sys_sendmsg+0x19b/0x260 [ 902.768468][ T900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 902.768502][ T900] ? __pfx_ksys_write+0x10/0x10 [ 902.768533][ T900] ? do_syscall_64+0xbe/0xfa0 [ 902.768561][ T900] do_syscall_64+0xfa/0xfa0 [ 902.768583][ T900] ? lockdep_hardirqs_on+0x9c/0x150 [ 902.768607][ T900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.768627][ T900] ? clear_bhb_loop+0x60/0xb0 [ 902.768652][ T900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.768671][ T900] RIP: 0033:0x7fb8fd18eec9 [ 902.768690][ T900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 902.768707][ T900] RSP: 002b:00007fb8fdf9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.768733][ T900] RAX: ffffffffffffffda RBX: 00007fb8fd3e5fa0 RCX: 00007fb8fd18eec9 [ 902.768749][ T900] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 902.768762][ T900] RBP: 00007fb8fdf9b090 R08: 0000000000000000 R09: 0000000000000000 [ 902.768776][ T900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.768788][ T900] R13: 00007fb8fd3e6038 R14: 00007fb8fd3e5fa0 R15: 00007ffd74ce4b48 [ 902.768822][ T900] [ 903.050645][ T906] bond7: (slave veth11): Enslaving as an active interface with a down link [ 903.303111][ T938] netlink: 'syz.0.7402': attribute type 12 has an invalid length. [ 903.430830][ T947] syzkaller0: entered promiscuous mode [ 903.436624][ T947] syzkaller0: entered allmulticast mode [ 903.724761][ T964] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 903.849764][ T968] netlink: 'syz.2.7411': attribute type 1 has an invalid length. [ 904.611802][ T992] __nla_validate_parse: 3 callbacks suppressed [ 904.611820][ T992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7416'. [ 904.640727][ T992] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7416'. [ 904.651525][ T992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7416'. [ 904.661521][ T992] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7416'. [ 904.670822][ T992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7416'. [ 904.682098][ T992] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7416'. [ 904.691995][ T992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7416'. [ 904.701180][ T992] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7416'. [ 904.711129][ T992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7416'. [ 904.735214][ T992] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7416'. [ 905.344468][ T968] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 905.383502][ T979] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 905.402956][ T979] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.410634][ T979] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.615104][ T1008] netlink: 'syz.2.7419': attribute type 1 has an invalid length. [ 905.689488][ T1008] 8021q: adding VLAN 0 to HW filter on device bond3 [ 905.706439][ T1015] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 905.793375][ T1023] netlink: 'syz.4.7426': attribute type 1 has an invalid length. [ 905.844408][ T1027] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20004 [ 905.861569][ T1032] netlink: 'syz.2.7429': attribute type 1 has an invalid length. [ 905.978066][ T1038] FAULT_INJECTION: forcing a failure. [ 905.978066][ T1038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.071152][ T1038] CPU: 1 UID: 0 PID: 1038 Comm: syz.2.7429 Not tainted syzkaller #0 PREEMPT(full) [ 906.071179][ T1038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 906.071192][ T1038] Call Trace: [ 906.071200][ T1038] [ 906.071210][ T1038] dump_stack_lvl+0x189/0x250 [ 906.071236][ T1038] ? __pfx____ratelimit+0x10/0x10 [ 906.071260][ T1038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 906.071281][ T1038] ? __pfx__printk+0x10/0x10 [ 906.071301][ T1038] ? __might_fault+0xb0/0x130 [ 906.071340][ T1038] should_fail_ex+0x414/0x560 [ 906.071370][ T1038] _copy_from_iter+0x1de/0x1790 [ 906.071404][ T1038] ? rcu_is_watching+0x15/0xb0 [ 906.071431][ T1038] ? kmalloc_reserve+0xbd/0x290 [ 906.071452][ T1038] ? __pfx__copy_from_iter+0x10/0x10 [ 906.071482][ T1038] ? __build_skb_around+0x262/0x3f0 [ 906.071505][ T1038] ? netlink_sendmsg+0x642/0xb30 [ 906.071525][ T1038] ? skb_put+0x11b/0x210 [ 906.071555][ T1038] netlink_sendmsg+0x6b2/0xb30 [ 906.071586][ T1038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.071612][ T1038] ? aa_sock_msg_perm+0xf1/0x1d0 [ 906.071641][ T1038] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 906.071660][ T1038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.071683][ T1038] __sock_sendmsg+0x21c/0x270 [ 906.071714][ T1038] ____sys_sendmsg+0x505/0x830 [ 906.071743][ T1038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 906.071777][ T1038] ? import_iovec+0x74/0xa0 [ 906.071799][ T1038] ___sys_sendmsg+0x21f/0x2a0 [ 906.071826][ T1038] ? __pfx____sys_sendmsg+0x10/0x10 [ 906.071888][ T1038] ? __fget_files+0x2a/0x420 [ 906.071905][ T1038] ? __fget_files+0x3a0/0x420 [ 906.071934][ T1038] __x64_sys_sendmsg+0x19b/0x260 [ 906.071960][ T1038] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 906.071995][ T1038] ? __pfx_ksys_write+0x10/0x10 [ 906.072026][ T1038] ? do_syscall_64+0xbe/0xfa0 [ 906.072054][ T1038] do_syscall_64+0xfa/0xfa0 [ 906.072075][ T1038] ? lockdep_hardirqs_on+0x9c/0x150 [ 906.072098][ T1038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.072117][ T1038] ? clear_bhb_loop+0x60/0xb0 [ 906.072144][ T1038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.072163][ T1038] RIP: 0033:0x7fb20f38eec9 [ 906.072180][ T1038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.072197][ T1038] RSP: 002b:00007fb2101ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.072218][ T1038] RAX: ffffffffffffffda RBX: 00007fb20f5e6180 RCX: 00007fb20f38eec9 [ 906.072232][ T1038] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 906.072243][ T1038] RBP: 00007fb2101ec090 R08: 0000000000000000 R09: 0000000000000000 [ 906.072255][ T1038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.072267][ T1038] R13: 00007fb20f5e6218 R14: 00007fb20f5e6180 R15: 00007fff59ba7658 [ 906.072300][ T1038] [ 906.390626][ T1036] bond4: (slave veth13): Enslaving as an active interface with a down link [ 906.439777][ T1042] xt_TCPMSS: Only works on TCP SYN packets [ 906.649988][ T1069] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 906.824983][ T1081] netlink: 'syz.3.7441': attribute type 11 has an invalid length. [ 906.834854][ T1083] netlink: 'syz.3.7441': attribute type 11 has an invalid length. [ 906.857107][ T1080] netlink: 'syz.4.7443': attribute type 1 has an invalid length. [ 907.012011][ T1080] FAULT_INJECTION: forcing a failure. [ 907.012011][ T1080] name failslab, interval 1, probability 0, space 0, times 0 [ 907.051222][ T1080] CPU: 0 UID: 0 PID: 1080 Comm: syz.4.7443 Not tainted syzkaller #0 PREEMPT(full) [ 907.051248][ T1080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 907.051260][ T1080] Call Trace: [ 907.051268][ T1080] [ 907.051276][ T1080] dump_stack_lvl+0x189/0x250 [ 907.051300][ T1080] ? __pfx____ratelimit+0x10/0x10 [ 907.051322][ T1080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 907.051343][ T1080] ? __pfx__printk+0x10/0x10 [ 907.051369][ T1080] ? __lock_acquire+0xab9/0xd20 [ 907.051394][ T1080] should_fail_ex+0x414/0x560 [ 907.051421][ T1080] should_failslab+0xa8/0x100 [ 907.051441][ T1080] kmem_cache_alloc_noprof+0x74/0x6e0 [ 907.051466][ T1080] ? skb_clone+0x212/0x3a0 [ 907.051495][ T1080] skb_clone+0x212/0x3a0 [ 907.051522][ T1080] __netlink_deliver_tap+0x404/0x850 [ 907.051555][ T1080] ? netlink_deliver_tap+0x2e/0x1b0 [ 907.051576][ T1080] netlink_deliver_tap+0x19c/0x1b0 [ 907.051596][ T1080] netlink_unicast+0x7fa/0x9e0 [ 907.051634][ T1080] ? __pfx_netlink_unicast+0x10/0x10 [ 907.051663][ T1080] ? netlink_sendmsg+0x642/0xb30 [ 907.051680][ T1080] ? skb_put+0x11b/0x210 [ 907.051703][ T1080] netlink_sendmsg+0x805/0xb30 [ 907.051732][ T1080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 907.051756][ T1080] ? aa_sock_msg_perm+0xf1/0x1d0 [ 907.051788][ T1080] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 907.051807][ T1080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 907.051828][ T1080] __sock_sendmsg+0x21c/0x270 [ 907.051859][ T1080] ____sys_sendmsg+0x505/0x830 [ 907.051888][ T1080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 907.051920][ T1080] ? import_iovec+0x74/0xa0 [ 907.051943][ T1080] ___sys_sendmsg+0x21f/0x2a0 [ 907.051969][ T1080] ? __pfx____sys_sendmsg+0x10/0x10 [ 907.052031][ T1080] ? __fget_files+0x2a/0x420 [ 907.052047][ T1080] ? __fget_files+0x3a0/0x420 [ 907.052078][ T1080] __x64_sys_sendmsg+0x19b/0x260 [ 907.052105][ T1080] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 907.052140][ T1080] ? __pfx_ksys_write+0x10/0x10 [ 907.052171][ T1080] ? do_syscall_64+0xbe/0xfa0 [ 907.052206][ T1080] do_syscall_64+0xfa/0xfa0 [ 907.052228][ T1080] ? lockdep_hardirqs_on+0x9c/0x150 [ 907.052252][ T1080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.052272][ T1080] ? clear_bhb_loop+0x60/0xb0 [ 907.052296][ T1080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.052316][ T1080] RIP: 0033:0x7fa564d8eec9 [ 907.052334][ T1080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.052351][ T1080] RSP: 002b:00007fa565c26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.052372][ T1080] RAX: ffffffffffffffda RBX: 00007fa564fe5fa0 RCX: 00007fa564d8eec9 [ 907.052387][ T1080] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 907.052404][ T1080] RBP: 00007fa565c26090 R08: 0000000000000000 R09: 0000000000000000 [ 907.052417][ T1080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.052429][ T1080] R13: 00007fa564fe6038 R14: 00007fa564fe5fa0 R15: 00007ffd93fa7b38 [ 907.052464][ T1080] [ 907.495569][ T1087] bond11: (slave veth13): Enslaving as an active interface with a down link [ 907.513782][ T1080] bond11 (unregistering): (slave veth13): Releasing active interface [ 907.529510][ T1080] bond11 (unregistering): Released all slaves [ 907.686934][ T1099] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 907.948827][ T1111] batadv_slave_1: entered promiscuous mode [ 907.965536][ T1110] batadv_slave_1: left promiscuous mode [ 907.999528][ T1109] ip6t_srh: unknown srh match flags 4000 [ 908.150809][ T1120] netlink: 'syz.4.7455': attribute type 21 has an invalid length. [ 908.173921][ T1125] netlink: 'syz.0.7457': attribute type 1 has an invalid length. [ 908.214921][ T1125] 8021q: adding VLAN 0 to HW filter on device bond8 [ 908.265936][ T1125] bond8: entered promiscuous mode [ 908.484250][ T1144] netlink: 'syz.0.7463': attribute type 1 has an invalid length. [ 908.492306][ T1144] netlink: 'syz.0.7463': attribute type 2 has an invalid length. [ 908.842318][ T1150] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 908.970163][ T1156] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:0 [ 909.169858][ T1163] ipt_ECN: cannot use operation on non-tcp rule [ 909.220156][ T1165] netlink: 'syz.2.7471': attribute type 11 has an invalid length. [ 909.662056][ T1196] __nla_validate_parse: 142 callbacks suppressed [ 909.662076][ T1196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7480'. [ 909.886423][ T1209] netlink: 'syz.3.7486': attribute type 1 has an invalid length. [ 909.897381][ T1212] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 909.964407][ T1209] bond8: (slave veth13): Enslaving as an active interface with a down link [ 909.977656][ T1209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7486'. [ 909.992425][ T1209] bond8 (unregistering): (slave veth13): Releasing active interface [ 910.016295][ T1209] bond8 (unregistering): Released all slaves [ 910.060192][ T1220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 910.083411][ T1221] virt_wifi0 speed is unknown, defaulting to 1000 [ 910.209839][ T1224] virt_wifi0 speed is unknown, defaulting to 1000 [ 910.358277][ T1230] netlink: 'syz.1.7491': attribute type 1 has an invalid length. [ 910.459258][ T1230] bond9: (slave veth11): Enslaving as an active interface with a down link [ 910.470434][ T1239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7491'. [ 910.497906][ T1239] bond9 (unregistering): (slave veth11): Releasing active interface [ 910.518235][ T1239] bond9 (unregistering): Released all slaves [ 910.569663][ T1235] virt_wifi0 speed is unknown, defaulting to 1000 [ 911.061595][ T1266] netlink: 'syz.2.7500': attribute type 1 has an invalid length. [ 911.185160][ T1271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7500'. [ 911.237874][ T1266] bond5: (slave veth15): Enslaving as an active interface with a down link [ 911.259877][ T1270] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7499'. [ 911.285139][ T1271] bond5 (unregistering): (slave veth15): Releasing active interface [ 911.317695][ T1271] bond5 (unregistering): Released all slaves [ 911.453065][ T1285] netlink: 'syz.3.7505': attribute type 1 has an invalid length. [ 911.522146][ T1286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7505'. [ 911.652438][ T1286] bond8 (unregistering): Released all slaves [ 911.874473][ T5839] Bluetooth: hci2: command 0x0405 tx timeout [ 912.305274][ T1326] netlink: 'syz.0.7516': attribute type 1 has an invalid length. [ 912.393309][ T1326] bond9: (slave veth13): Enslaving as an active interface with a down link [ 912.457291][ T1326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7516'. [ 912.474065][ T1333] virt_wifi0 speed is unknown, defaulting to 1000 [ 912.499675][ T1326] bond9 (unregistering): (slave veth13): Releasing active interface [ 912.512139][ T1337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7520'. [ 912.527436][ T1326] bond9 (unregistering): Released all slaves [ 912.564732][ T1339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7521'. [ 912.649300][ T1345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7521'. [ 913.074602][ T5839] Bluetooth: hci1: command 0x0401 tx timeout [ 913.411545][ T1384] netlink: 'syz.3.7535': attribute type 1 has an invalid length. [ 913.436665][ T1387] netlink: 'syz.0.7536': attribute type 1 has an invalid length. [ 913.478696][ T1384] bond8: (slave veth15): Enslaving as an active interface with a down link [ 913.495815][ T1384] bond8 (unregistering): (slave veth15): Releasing active interface [ 913.506739][ T1384] bond8 (unregistering): Released all slaves [ 913.538693][ T1387] bond9: (slave veth15): Enslaving as an active interface with a down link [ 913.679425][T27686] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.689032][T27686] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.704614][T27686] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.714736][T27686] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.925849][ T1408] virt_wifi0 speed is unknown, defaulting to 1000 [ 913.957953][ T1410] netlink: 'syz.1.7543': attribute type 83 has an invalid length. [ 914.027474][ T1415] vxcan1 speed is unknown, defaulting to 1000 [ 914.037209][ T5840] Bluetooth: hci2: command 0x0405 tx timeout [ 914.073889][ T1415] vxcan1 speed is unknown, defaulting to 1000 [ 914.084733][ T1415] vxcan1 speed is unknown, defaulting to 1000 [ 914.145593][ T1414] sctp: [Deprecated]: syz.0.7545 (pid 1414) Use of int in max_burst socket option deprecated. [ 914.145593][ T1414] Use struct sctp_assoc_value instead [ 914.328030][ T1423] netlink: 'syz.4.7548': attribute type 1 has an invalid length. [ 914.368118][ T1427] netlink: 'syz.2.7550': attribute type 1 has an invalid length. [ 914.484633][ T1415] infiniband syz2: set down [ 914.489558][ T1415] infiniband syz2: added vxcan1 [ 914.525295][ T1429] bond11 (unregistering): Released all slaves [ 914.583006][ T1415] RDS/IB: syz2: added [ 914.588640][ T1415] smc: adding ib device syz2 with port count 1 [ 914.595445][ T1415] smc: ib device syz2 port 1 has no pnetid [ 914.617407][ T1431] bond5: (slave veth17): Enslaving as an active interface with a down link [ 914.631341][ T8985] vxcan1 speed is unknown, defaulting to 1000 [ 914.647318][ T1427] bond5 (unregistering): (slave veth17): Releasing active interface [ 914.659937][ T1427] bond5 (unregistering): Released all slaves [ 914.709449][ T50] vxcan1 speed is unknown, defaulting to 1000 [ 914.723432][ T1438] macvlan2: entered promiscuous mode [ 914.732478][ T1438] syz_tun: entered promiscuous mode [ 914.745877][ T1438] team0: Port device macvlan2 added [ 914.760056][ T1415] vxcan1 speed is unknown, defaulting to 1000 [ 914.961852][ T1454] x_tables: duplicate underflow at hook 1 [ 915.101001][ T1460] __nla_validate_parse: 12 callbacks suppressed [ 915.101020][ T1460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7560'. [ 915.161596][ T1415] vxcan1 speed is unknown, defaulting to 1000 [ 915.288534][ T1467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7563'. [ 915.358436][ T1467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 915.365775][ T1467] IPv6: NLM_F_CREATE should be set when creating new route [ 915.427128][ T1473] netlink: 'syz.2.7565': attribute type 1 has an invalid length. [ 915.544856][ T1480] netlink: 'syz.0.7567': attribute type 1 has an invalid length. [ 915.566542][ T1477] bond5: (slave veth19): Enslaving as an active interface with a down link [ 915.575436][ T1415] vxcan1 speed is unknown, defaulting to 1000 [ 915.680320][ T1480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7567'. [ 915.701059][ T1489] netlink: 'syz.4.7569': attribute type 1 has an invalid length. [ 915.722634][ T1484] bond10: (slave veth17): Enslaving as an active interface with a down link [ 915.793651][ T1480] bond10 (unregistering): (slave veth17): Releasing active interface [ 915.816472][ T1480] bond10 (unregistering): Released all slaves [ 915.863103][ T1497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7570'. [ 916.016645][ T1493] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 916.055351][ T1493] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 916.082438][ T1415] vxcan1 speed is unknown, defaulting to 1000 [ 916.164704][ T1505] netlink: 'syz.0.7573': attribute type 13 has an invalid length. [ 916.204942][ T1505] netlink: 'syz.0.7573': attribute type 17 has an invalid length. [ 916.269646][ T1514] netlink: 'syz.4.7577': attribute type 9 has an invalid length. [ 916.309593][ T1516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7576'. [ 916.377578][ T1519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.431992][ T1505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.448389][ T1505] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.527428][ T1527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7579'. [ 916.698094][ T1505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 916.749493][ T1415] vxcan1 speed is unknown, defaulting to 1000 [ 916.771789][ T1507] virt_wifi0 speed is unknown, defaulting to 1000 [ 916.926027][ T1534] netlink: 'syz.4.7582': attribute type 1 has an invalid length. [ 917.059092][ T1534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7582'. [ 917.090168][ T1537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7583'. [ 917.106749][ T1539] bond11: (slave veth15): Enslaving as an active interface with a down link [ 917.169400][ T1540] bond6: (slave veth21): Enslaving as an active interface with a down link [ 917.189965][ T1534] bond11 (unregistering): (slave veth15): Releasing active interface [ 917.202815][ T1534] bond11 (unregistering): Released all slaves [ 917.231471][ T1537] bond6 (unregistering): (slave veth21): Releasing active interface [ 917.243566][ T1537] bond6 (unregistering): Released all slaves [ 917.324797][ T1507] vxcan1 speed is unknown, defaulting to 1000 [ 917.340949][ T1544] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7584'. [ 917.362464][ T1547] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7584'. [ 917.728560][ T1415] vxcan1 speed is unknown, defaulting to 1000 [ 918.197096][ T1415] vxcan1 speed is unknown, defaulting to 1000 [ 918.599303][ T1415] vxcan1 speed is unknown, defaulting to 1000 [ 918.623333][ T1599] bond11: (slave veth17): Enslaving as an active interface with a down link [ 918.642239][ T1599] bond11 (unregistering): (slave veth17): Releasing active interface [ 918.656861][ T1599] bond11 (unregistering): Released all slaves [ 918.802170][ T1586] virt_wifi0 speed is unknown, defaulting to 1000 [ 918.985671][ T1610] validate_nla: 2 callbacks suppressed [ 918.985690][ T1610] netlink: 'syz.3.7599': attribute type 1 has an invalid length. [ 919.076594][ T1610] bond8: (slave veth17): Enslaving as an active interface with a down link [ 919.108892][ T1610] bond8 (unregistering): (slave veth17): Releasing active interface [ 919.121198][ T1610] bond8 (unregistering): Released all slaves [ 919.626403][ T1634] netlink: 'syz.2.7607': attribute type 1 has an invalid length. [ 919.682910][ T1634] bond6 (unregistering): Released all slaves [ 919.763915][ T1642] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 919.863221][ T1647] netlink: 'syz.2.7612': attribute type 1 has an invalid length. [ 919.981941][ T1654] bond6: (slave veth23): Enslaving as an active interface with a down link [ 919.991823][ T1656] xt_hashlimit: max too large, truncated to 1048576 [ 920.019644][ T1647] bond6 (unregistering): (slave veth23): Releasing active interface [ 920.052187][ T1653] sock: sock_timestamping_bind_phc: sock not bind to device [ 920.075340][ T1647] bond6 (unregistering): Released all slaves [ 920.421669][ T1674] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 920.610008][ T1684] netlink: 'syz.2.7623': attribute type 1 has an invalid length. [ 920.631208][ T1688] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 920.701029][ T1684] bond6: (slave veth25): Enslaving as an active interface with a down link [ 920.713317][ T1689] tipc: Started in network mode [ 920.722025][ T1684] __nla_validate_parse: 8 callbacks suppressed [ 920.722042][ T1684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7623'. [ 920.740773][ T1689] tipc: Node identity 080211, cluster identity 4711 [ 920.757113][ T1689] tipc: Enabled bearer , priority 0 [ 920.767814][ T1692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7625'. [ 920.786474][ T1692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7625'. [ 920.816603][ T1684] bond6 (unregistering): (slave veth25): Releasing active interface [ 920.846889][ T1684] bond6 (unregistering): Released all slaves [ 920.878859][ T1693] caif0: mtu less than device minimum [ 920.887333][ T1699] netlink: 'syz.1.7628': attribute type 39 has an invalid length. [ 920.975864][ T1697] 8021q: adding VLAN 0 to HW filter on device bond10 [ 921.035522][ T1704] netlink: 'syz.4.7629': attribute type 1 has an invalid length. [ 921.067767][ T1703] tipc: Enabling of bearer rejected, already enabled [ 921.203365][ T1710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7629'. [ 921.222847][ T1704] bond11: (slave veth19): Enslaving as an active interface with a down link [ 921.252876][ T1710] bond11 (unregistering): (slave veth19): Releasing active interface [ 921.281729][ T1710] bond11 (unregistering): Released all slaves [ 921.567255][ T1727] virt_wifi0 speed is unknown, defaulting to 1000 [ 921.695315][ T1727] vxcan1 speed is unknown, defaulting to 1000 [ 921.874994][ T5970] tipc: Node number set to 134353152 [ 921.897317][ T1751] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7640'. [ 921.967369][ T1751] tipc: Resetting bearer [ 922.068227][ T1753] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7641'. [ 922.102556][ T1751] veth0_vlan: left allmulticast mode [ 922.115907][ T1751] tipc: Resetting bearer [ 922.150623][ T1751] syzkaller0: left promiscuous mode [ 922.156991][ T1751] syzkaller0: left allmulticast mode [ 922.202339][ T1751] gretap1: left promiscuous mode [ 922.263536][ T1751] mac80211_hwsim hwsim86 wlan1: left promiscuous mode [ 922.274511][ T1751] macvtap1: left promiscuous mode [ 922.293686][ T1751] bond8: left promiscuous mode [ 922.315760][T27708] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.349162][T27708] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.372273][T27708] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.395011][T27708] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.430156][ T1764] virt_wifi0 speed is unknown, defaulting to 1000 [ 922.469777][ T1770] netlink: 'syz.3.7645': attribute type 1 has an invalid length. [ 922.537929][ T1770] bond8: (slave veth19): Enslaving as an active interface with a down link [ 922.547122][ T1764] vxcan1 speed is unknown, defaulting to 1000 [ 922.619404][ T1772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7645'. [ 923.020228][ T1775] 8021q: adding VLAN 0 to HW filter on device bond9 [ 923.081473][ T1778] syzkaller0: entered promiscuous mode [ 923.089872][ T1778] syzkaller0: entered allmulticast mode [ 925.012274][ T1786] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 925.186168][ T1798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7653'. [ 925.717924][ T1814] netlink: 'syz.2.7657': attribute type 1 has an invalid length. [ 925.790909][ T1820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7661'. [ 925.813478][ T1814] bond6: (slave veth27): Enslaving as an active interface with a down link [ 925.827162][ T1814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7657'. [ 925.828180][ T1818] FAULT_INJECTION: forcing a failure. [ 925.828180][ T1818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 925.850834][ T1818] CPU: 0 UID: 0 PID: 1818 Comm: syz.4.7659 Not tainted syzkaller #0 PREEMPT(full) [ 925.850859][ T1818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 925.850871][ T1818] Call Trace: [ 925.850879][ T1818] [ 925.850887][ T1818] dump_stack_lvl+0x189/0x250 [ 925.850912][ T1818] ? __pfx____ratelimit+0x10/0x10 [ 925.850936][ T1818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 925.850956][ T1818] ? __pfx__printk+0x10/0x10 [ 925.850977][ T1818] ? __might_fault+0xb0/0x130 [ 925.851016][ T1818] should_fail_ex+0x414/0x560 [ 925.851053][ T1818] _copy_from_user+0x2d/0xb0 [ 925.851073][ T1818] kstrtouint_from_user+0xc4/0x170 [ 925.851103][ T1818] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 925.851147][ T1818] proc_fail_nth_write+0x88/0x200 [ 925.851171][ T1818] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 925.851200][ T1818] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 925.851226][ T1818] vfs_write+0x27b/0xb30 [ 925.851262][ T1818] ? __pfx_vfs_write+0x10/0x10 [ 925.851289][ T1818] ? __fget_files+0x2a/0x420 [ 925.851312][ T1818] ? __fget_files+0x3a0/0x420 [ 925.851328][ T1818] ? __fget_files+0x2a/0x420 [ 925.851355][ T1818] ksys_write+0x145/0x250 [ 925.851384][ T1818] ? __pfx_ksys_write+0x10/0x10 [ 925.851414][ T1818] ? do_syscall_64+0xbe/0xfa0 [ 925.851442][ T1818] do_syscall_64+0xfa/0xfa0 [ 925.851464][ T1818] ? lockdep_hardirqs_on+0x9c/0x150 [ 925.851487][ T1818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.851507][ T1818] ? clear_bhb_loop+0x60/0xb0 [ 925.851531][ T1818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.851550][ T1818] RIP: 0033:0x7fa564d8d97f [ 925.851568][ T1818] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 925.851586][ T1818] RSP: 002b:00007fa565c26030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 925.851607][ T1818] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa564d8d97f [ 925.851621][ T1818] RDX: 0000000000000001 RSI: 00007fa565c260a0 RDI: 0000000000000003 [ 925.851634][ T1818] RBP: 00007fa565c26090 R08: 0000000000000000 R09: 0000000000000000 [ 925.851645][ T1818] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 925.851655][ T1818] R13: 00007fa564fe6038 R14: 00007fa564fe5fa0 R15: 00007ffd93fa7b38 [ 925.851684][ T1818] [ 925.854558][ T1814] bond6 (unregistering): (slave veth27): Releasing active interface [ 926.147966][ T1814] bond6 (unregistering): Released all slaves [ 926.317525][ T1834] virt_wifi0 speed is unknown, defaulting to 1000 [ 926.339945][ T1834] vxcan1 speed is unknown, defaulting to 1000 [ 926.382715][ T1840] netlink: 'syz.3.7666': attribute type 4 has an invalid length. [ 926.404166][ T1840] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7666'. [ 926.533413][ T1847] virt_wifi0 speed is unknown, defaulting to 1000 [ 926.556310][ T1850] netlink: 'syz.4.7668': attribute type 9 has an invalid length. [ 926.840533][ T1854] can: request_module (can-proto-0) failed. [ 926.844853][ T1847] vxcan1 speed is unknown, defaulting to 1000 [ 927.066162][ T1872] netlink: 'syz.1.7675': attribute type 1 has an invalid length. [ 927.207949][ T1880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7675'. [ 927.282414][ T1873] bond10: (slave veth13): Enslaving as an active interface with a down link [ 927.304628][ T1880] bond10 (unregistering): (slave veth13): Releasing active interface [ 927.324706][ T1880] bond10 (unregistering): Released all slaves [ 927.360082][ T1877] tipc: Enabling of bearer rejected, already enabled [ 927.444717][ T1877] tipc: Resetting bearer [ 927.462390][ T1877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7676'. [ 927.661121][ T1893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7680'. [ 927.747612][ T1896] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 928.264776][ T1898] virt_wifi0 speed is unknown, defaulting to 1000 [ 928.290922][ T1898] vxcan1 speed is unknown, defaulting to 1000 [ 928.320496][ T1913] netlink: 'syz.0.7689': attribute type 1 has an invalid length. [ 928.437234][ T1913] bond11: (slave veth19): Enslaving as an active interface with a down link [ 928.450701][ T1913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7689'. [ 928.486990][ T1913] bond11 (unregistering): (slave veth19): Releasing active interface [ 928.543368][ T1913] bond11 (unregistering): Released all slaves [ 928.679562][ T1922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7693'. [ 928.710664][ T1922] netlink: 26 bytes leftover after parsing attributes in process `syz.2.7693'. [ 928.792041][ T1929] bond11: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 928.806443][ T1929] bond11 (unregistering): Released all slaves [ 929.124684][ T1945] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7699'. [ 929.360516][ T1953] netlink: 'syz.4.7701': attribute type 1 has an invalid length. [ 929.381310][ T1953] nbd: must specify at least one socket [ 929.640157][ T1967] netlink: 'syz.2.7707': attribute type 1 has an invalid length. [ 929.772129][ T1978] netlink: 'syz.3.7710': attribute type 74 has an invalid length. [ 929.786617][ T1973] bond6: (slave veth29): Enslaving as an active interface with a down link [ 929.812861][ T1967] bond6 (unregistering): (slave veth29): Releasing active interface [ 929.858880][ T1967] bond6 (unregistering): Released all slaves [ 929.906925][ T1976] virt_wifi0 speed is unknown, defaulting to 1000 [ 929.917760][ T1976] vxcan1 speed is unknown, defaulting to 1000 [ 929.925041][ T1972] virt_wifi0 speed is unknown, defaulting to 1000 [ 930.138308][ T1972] vxcan1 speed is unknown, defaulting to 1000 [ 930.290155][ T1994] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 930.724408][ T2007] nbd1: detected capacity change from 0 to 127 [ 930.794543][ T2005] __nla_validate_parse: 9 callbacks suppressed [ 930.794562][ T2005] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7718'. [ 930.817632][ T2007] bond6: entered promiscuous mode [ 930.832948][ T2007] bond6: entered allmulticast mode [ 930.845690][ T2007] 8021q: adding VLAN 0 to HW filter on device bond6 [ 931.030134][ T2007] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7719'. [ 931.042010][ T2007] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7719'. [ 931.086439][ T2012] virt_wifi0 speed is unknown, defaulting to 1000 [ 931.122455][ T2012] vxcan1 speed is unknown, defaulting to 1000 [ 931.143127][ T2030] dvmrp0: entered allmulticast mode [ 931.212812][ T2034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7726'. [ 931.254385][ T2034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7726'. [ 931.479951][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 931.487857][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 931.586571][ T5840] block nbd1: Receive control failed (result -32) [ 931.648635][ T2045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7730'. [ 931.916515][ T2042] virt_wifi0 speed is unknown, defaulting to 1000 [ 931.942855][ T2042] vxcan1 speed is unknown, defaulting to 1000 [ 932.372914][ T2054] netlink: 'syz.4.7733': attribute type 12 has an invalid length. [ 932.380878][ T2054] netlink: 'syz.4.7733': attribute type 29 has an invalid length. [ 932.392730][ T2054] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7733'. [ 932.419257][ T2054] netlink: 'syz.4.7733': attribute type 2 has an invalid length. [ 932.438070][ T2054] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7733'. [ 932.464726][ T2059] netlink: 'syz.4.7733': attribute type 12 has an invalid length. [ 932.482823][ T2059] netlink: 'syz.4.7733': attribute type 29 has an invalid length. [ 932.493703][ T2059] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7733'. [ 932.523173][ T2059] netlink: 'syz.4.7733': attribute type 2 has an invalid length. [ 932.532215][ T2059] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7733'. [ 932.629416][ T2054] 8021q: adding VLAN 0 to HW filter on device bond11 [ 932.677087][ T2054] bond11: entered promiscuous mode [ 932.686212][ T2054] bond11: entered allmulticast mode [ 932.692390][ T2054] bond0: (slave bond11): Enslaving as an active interface with an up link [ 932.970684][ T2062] bond0 (unregistering): left promiscuous mode [ 932.977215][ T2062] bond_slave_0: left promiscuous mode [ 932.983071][ T2062] bond_slave_1: left promiscuous mode [ 932.989029][ T2062] bond11: left promiscuous mode [ 932.997487][ T2062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 933.008128][ T2062] bond_slave_0: left allmulticast mode [ 933.016843][ T2062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 933.026159][ T2062] bond_slave_1: left allmulticast mode [ 933.037564][ T2062] bond0 (unregistering): (slave bond11): Releasing backup interface [ 933.047265][ T2062] bond11: left allmulticast mode [ 933.060862][ T2062] bond0 (unregistering): Released all slaves [ 933.250000][ T2070] netlink: 'syz.4.7736': attribute type 13 has an invalid length. [ 933.303062][ T2070] Bluetooth: hci0: unsupported parameter 512 [ 933.323337][ T2070] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 933.422424][ T2078] tipc: Enabling of bearer rejected, failed to enable media [ 934.047221][ T2112] IPVS: Scheduler module ip_vs_sip not found [ 934.099775][ T2118] virt_wifi0 speed is unknown, defaulting to 1000 [ 934.109905][ T2118] vxcan1 speed is unknown, defaulting to 1000 [ 934.222331][ T2123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 934.394979][ T2132] netlink: 'syz.3.7756': attribute type 1 has an invalid length. [ 934.410026][ T2129] bond10: entered promiscuous mode [ 934.415424][ T2129] bond10: entered allmulticast mode [ 934.421069][ T2129] 8021q: adding VLAN 0 to HW filter on device bond10 [ 934.564999][ T2129] bond10 (unregistering): Released all slaves [ 934.725221][ T2139] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.739701][ T2139] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 934.766574][ T2139] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 934.779444][ T2139] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 934.886402][ T2139] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.921773][ T2139] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 934.947456][ T2139] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 934.960544][ T2139] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 935.057147][ T2139] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.067973][ T2139] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 935.078458][ T2139] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 935.089401][ T2139] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 935.104502][ T2171] netlink: 'syz.0.7763': attribute type 11 has an invalid length. [ 935.191246][ T2139] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.214281][ T2139] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 935.235301][ T2139] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 935.285684][ T2139] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 935.452825][ T2178] bridge0: entered promiscuous mode [ 935.459533][ T2178] bridge0: port 1(macvlan3) entered blocking state [ 935.466897][ T2178] bridge0: port 1(macvlan3) entered disabled state [ 935.473687][ T2178] macvlan3: entered allmulticast mode [ 935.479731][ T2178] bridge0: entered allmulticast mode [ 935.494879][ T2178] macvlan3: left allmulticast mode [ 935.500179][ T2178] bridge0: left allmulticast mode [ 935.506523][ T2178] bridge0: left promiscuous mode [ 935.550768][T27692] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.559538][T27692] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 935.568205][T27692] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 935.576753][T27692] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 935.592887][T27692] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.601945][T27692] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 935.610789][T27692] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 935.618934][T27692] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 935.643846][T27692] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.652540][T27692] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 935.660986][T27692] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 935.669701][T27692] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 935.727389][T27692] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.743943][T27692] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 935.765073][T27692] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 935.781453][T27692] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 935.929223][ T2184] x_tables: duplicate underflow at hook 2 [ 935.938614][ T2186] __nla_validate_parse: 12 callbacks suppressed [ 935.938632][ T2186] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7769'. [ 936.058899][ T2194] netlink: 'syz.3.7772': attribute type 1 has an invalid length. [ 936.112543][ T2200] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7772'. [ 936.227313][ T2199] bond11: (slave veth21): Enslaving as an active interface with a down link [ 936.236578][ T2205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7775'. [ 936.293431][ T2199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7773'. [ 936.298289][ T2214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7777'. [ 936.319415][ T2199] bond11 (unregistering): (slave veth21): Releasing active interface [ 936.339842][ T2199] bond11 (unregistering): Released all slaves [ 936.690539][ T2237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7785'. [ 936.712409][ T2240] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7787'. [ 936.734896][ T2237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.743068][ T2238] pim6reg0: tun_chr_ioctl cmd 2148553947 [ 936.791406][ T2243] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20002 [ 937.068971][ T2254] virt_wifi0 speed is unknown, defaulting to 1000 [ 937.072312][ T2260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7792'. [ 937.078289][ T2254] vxcan1 speed is unknown, defaulting to 1000 [ 937.295369][ T2264] bond11: (slave veth23): Enslaving as an active interface with a down link [ 937.315300][ T2262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7793'. [ 937.335940][ T2262] bond11 (unregistering): (slave veth23): Releasing active interface [ 937.365905][ T2262] bond11 (unregistering): Released all slaves [ 937.568054][ T2272] ip6gre1: entered allmulticast mode [ 937.860411][ T2291] xt_hashlimit: max too large, truncated to 1048576 [ 937.925944][ T2284] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.092967][ T2284] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.170381][ T2300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7804'. [ 938.465210][ T2300] 8021q: adding VLAN 0 to HW filter on device bond10 [ 938.521253][ T2301] syzkaller0: entered promiscuous mode [ 938.527460][ T2301] syzkaller0: entered allmulticast mode [ 938.603238][ T2284] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.730436][ T2312] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 938.776892][ T2319] validate_nla: 5 callbacks suppressed [ 938.776910][ T2319] netlink: 'syz.4.7809': attribute type 1 has an invalid length. [ 940.172557][ T2319] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 940.327840][ T2284] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.347914][ T2330] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 940.370310][ T2334] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 940.549646][T27709] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.589869][T27708] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.623457][T27708] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.661639][T27708] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.939948][ T2362] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 940.970625][ T2361] 8021q: adding VLAN 0 to HW filter on device bond12 [ 940.989108][ T2366] netlink: 'syz.1.7826': attribute type 1 has an invalid length. [ 941.166271][ T2376] bond11: (slave veth15): Enslaving as an active interface with a down link [ 941.197509][ T2377] __nla_validate_parse: 69 callbacks suppressed [ 941.197529][ T2377] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7827'. [ 941.283131][ T2377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7827'. [ 941.604839][ T2395] netlink: 20824 bytes leftover after parsing attributes in process `syz.3.7832'. [ 941.848471][ T2405] IPVS: length: 195 != 24 [ 941.880237][ T2408] netlink: 'syz.4.7838': attribute type 2 has an invalid length. [ 942.025876][ T2417] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 942.033209][ T2418] netlink: 'syz.1.7840': attribute type 1 has an invalid length. [ 942.233998][ T2422] bond12: (slave veth17): Enslaving as an active interface with a down link [ 942.292051][ T2432] batman_adv: batadv0: Adding interface: vlan3 [ 942.327581][ T2432] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.376404][ T2432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.404228][ T2432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.450328][ T2432] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 942.740865][ T2455] pim6reg: entered allmulticast mode [ 942.801291][ T2459] pim6reg: left allmulticast mode [ 943.049963][ T2473] caif0: entered allmulticast mode [ 943.063985][ T2479] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 943.238654][ T2487] netlink: 'syz.0.7857': attribute type 1 has an invalid length. [ 943.294616][ T2491] xt_TPROXY: Can be used only with -p tcp or -p udp [ 943.335516][ T2487] bond11: (slave veth25): Enslaving as an active interface with a down link [ 943.359648][ T2499] bridge_slave_0: left allmulticast mode [ 943.366423][ T2499] bridge_slave_0: left promiscuous mode [ 943.372997][ T2499] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.417521][ T2499] bridge_slave_1: left allmulticast mode [ 943.423210][ T2499] bridge_slave_1: left promiscuous mode [ 943.429602][ T2499] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.526185][ T2499] bond0: (slave bond_slave_0): Releasing backup interface [ 943.886798][ T2499] bond0: (slave bond_slave_1): Releasing backup interface [ 943.919992][ T2499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.934265][ T2499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.036734][ T2499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.054261][ T2499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.106686][ T2499] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 944.143232][ T2495] tc_dump_action: action bad kind [ 944.167216][ T2507] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 944.202702][ T2520] netlink: 'syz.4.7865': attribute type 1 has an invalid length. [ 944.226757][ T2520] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7865'. [ 944.242657][ T2534] netlink: ct family unspecified [ 944.259231][ T2534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 944.357615][ T2538] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 944.407566][ T2548] tipc: Started in network mode [ 944.422638][ T2548] tipc: Node identity 080211, cluster identity 4711 [ 944.437218][ T2548] tipc: Enabled bearer , priority 0 [ 944.508985][ T2561] virt_wifi0 speed is unknown, defaulting to 1000 [ 944.528404][ T2561] vxcan1 speed is unknown, defaulting to 1000 [ 944.629801][ T2575] netlink: 'syz.3.7874': attribute type 1 has an invalid length. [ 944.742132][ T2575] bond11: (slave veth21): Enslaving as an active interface with a down link [ 945.057589][ T2593] tipc: Enabling of bearer rejected, already enabled [ 945.339195][ T2609] netlink: 'syz.2.7882': attribute type 1 has an invalid length. [ 945.347784][ T2609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7882'. [ 945.506382][ T2625] netlink: 'syz.2.7886': attribute type 1 has an invalid length. [ 945.555835][ T8985] tipc: Node number set to 134353152 [ 945.816711][ T2617] team0 (unregistering): Port device team_slave_0 removed [ 945.825826][ T2617] team0 (unregistering): Port device team_slave_1 removed [ 945.834889][ T2617] team0 (unregistering): Port device bridge1 removed [ 945.841681][ T2659] FAULT_INJECTION: forcing a failure. [ 945.841681][ T2659] name failslab, interval 1, probability 0, space 0, times 0 [ 945.857888][ T2659] CPU: 0 UID: 0 PID: 2659 Comm: syz.0.7893 Not tainted syzkaller #0 PREEMPT(full) [ 945.857915][ T2659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 945.857928][ T2659] Call Trace: [ 945.857936][ T2659] [ 945.857946][ T2659] dump_stack_lvl+0x189/0x250 [ 945.857972][ T2659] ? __pfx____ratelimit+0x10/0x10 [ 945.857996][ T2659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 945.858018][ T2659] ? __pfx__printk+0x10/0x10 [ 945.858046][ T2659] ? __ip_dev_find+0x444/0x4e0 [ 945.858074][ T2659] should_fail_ex+0x414/0x560 [ 945.858102][ T2659] should_failslab+0xa8/0x100 [ 945.858124][ T2659] kmem_cache_alloc_noprof+0x74/0x6e0 [ 945.858162][ T2659] ? dst_alloc+0x105/0x170 [ 945.858193][ T2659] dst_alloc+0x105/0x170 [ 945.858216][ T2659] ? ip_check_mc_rcu+0x400/0x680 [ 945.858252][ T2659] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 945.858292][ T2659] ? ip_route_output_key_hash+0xc1/0x280 [ 945.858322][ T2659] ip_route_output_key_hash+0x174/0x280 [ 945.858349][ T2659] ? __lock_acquire+0xab9/0xd20 [ 945.858370][ T2659] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 945.858418][ T2659] ip_route_output_flow+0x2a/0x150 [ 945.858441][ T2659] ? security_sk_classify_flow+0x70/0x180 [ 945.858465][ T2659] udp_sendmsg+0x142e/0x2170 [ 945.858507][ T2659] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 945.858538][ T2659] ? __pfx_udp_sendmsg+0x10/0x10 [ 945.858566][ T2659] ? count_memcg_event_mm+0x21/0x260 [ 945.858598][ T2659] ? count_memcg_event_mm+0x21/0x260 [ 945.858637][ T2659] ? __pfx_aa_sk_perm+0x10/0x10 [ 945.858660][ T2659] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 945.858692][ T2659] ? sock_rps_record_flow+0x19/0x410 [ 945.858721][ T2659] ? inet_sendmsg+0x29c/0x370 [ 945.858738][ T2659] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 945.858762][ T2659] __sock_sendmsg+0x19c/0x270 [ 945.858794][ T2659] ____sys_sendmsg+0x52d/0x830 [ 945.858828][ T2659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 945.858862][ T2659] ? import_iovec+0x74/0xa0 [ 945.858886][ T2659] ___sys_sendmsg+0x21f/0x2a0 [ 945.858912][ T2659] ? __pfx____sys_sendmsg+0x10/0x10 [ 945.858973][ T2659] ? __fget_files+0x2a/0x420 [ 945.858990][ T2659] ? __fget_files+0x3a0/0x420 [ 945.859019][ T2659] __sys_sendmmsg+0x227/0x430 [ 945.859049][ T2659] ? __pfx___sys_sendmmsg+0x10/0x10 [ 945.859083][ T2659] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 945.859130][ T2659] ? ksys_write+0x22a/0x250 [ 945.859159][ T2659] ? __pfx_ksys_write+0x10/0x10 [ 945.859192][ T2659] __x64_sys_sendmmsg+0xa0/0xc0 [ 945.859217][ T2659] do_syscall_64+0xfa/0xfa0 [ 945.859240][ T2659] ? lockdep_hardirqs_on+0x9c/0x150 [ 945.859263][ T2659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.859282][ T2659] ? clear_bhb_loop+0x60/0xb0 [ 945.859307][ T2659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.859326][ T2659] RIP: 0033:0x7fe2f8d8eec9 [ 945.859344][ T2659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.859362][ T2659] RSP: 002b:00007fe2f9c4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 945.859384][ T2659] RAX: ffffffffffffffda RBX: 00007fe2f8fe5fa0 RCX: 00007fe2f8d8eec9 [ 945.859399][ T2659] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 945.859413][ T2659] RBP: 00007fe2f9c4f090 R08: 0000000000000000 R09: 0000000000000000 [ 945.859425][ T2659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.859438][ T2659] R13: 00007fe2f8fe6038 R14: 00007fe2f8fe5fa0 R15: 00007fff5d903108 [ 945.859473][ T2659] [ 945.860772][ T2617] syz_tun: left promiscuous mode [ 946.216975][ T2617] team0 (unregistering): Port device macvlan2 removed [ 946.325593][ T2634] bond7: (slave veth31): Enslaving as an active interface with a down link [ 946.514513][ T2689] netlink: 'syz.3.7898': attribute type 12 has an invalid length. [ 946.641281][ T2693] netlink: 'syz.1.7899': attribute type 3 has an invalid length. [ 946.664341][ T2693] netlink: 'syz.1.7899': attribute type 1 has an invalid length. [ 946.705683][ T2693] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7899'. [ 946.774204][ T2703] netlink: 'syz.3.7901': attribute type 1 has an invalid length. [ 946.879802][ T2703] 8021q: adding VLAN 0 to HW filter on device bond12 [ 946.900170][ T2710] net_ratelimit: 1 callbacks suppressed [ 946.900188][ T2710] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 946.910225][ T2706] bond12: (slave geneve2): making interface the new active one [ 946.933764][ T2706] bond12: (slave geneve2): Enslaving as an active interface with an up link [ 946.957253][T27691] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.001412][T27691] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.024819][T27691] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.044574][T27691] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.090766][ T2720] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 947.092074][ T2719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7906'. [ 947.115234][ T2720] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 947.167447][ T2723] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7906'. [ 947.187981][ T2723] netlink: 34 bytes leftover after parsing attributes in process `syz.3.7906'. [ 947.287786][ T2725] netlink: 'syz.1.7907': attribute type 1 has an invalid length. [ 947.413742][ T2739] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 947.462507][ T2730] bond13: (slave veth19): Enslaving as an active interface with a down link [ 947.511110][ T2741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7912'. [ 947.579809][ T2744] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 947.596937][ T2744] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:0 [ 947.622512][ T2745] virt_wifi0 speed is unknown, defaulting to 1000 [ 947.654330][ T2747] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7916'. [ 947.663317][ T2747] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7916'. [ 947.693158][ T2745] vxcan1 speed is unknown, defaulting to 1000 [ 947.702173][ T2754] FAULT_INJECTION: forcing a failure. [ 947.702173][ T2754] name failslab, interval 1, probability 0, space 0, times 0 [ 947.728429][ T2754] CPU: 1 UID: 0 PID: 2754 Comm: syz.4.7917 Not tainted syzkaller #0 PREEMPT(full) [ 947.728458][ T2754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 947.728471][ T2754] Call Trace: [ 947.728480][ T2754] [ 947.728488][ T2754] dump_stack_lvl+0x189/0x250 [ 947.728515][ T2754] ? __pfx____ratelimit+0x10/0x10 [ 947.728539][ T2754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 947.728559][ T2754] ? __pfx__printk+0x10/0x10 [ 947.728586][ T2754] ? __pfx___might_resched+0x10/0x10 [ 947.728607][ T2754] ? fs_reclaim_acquire+0x7d/0x100 [ 947.728648][ T2754] should_fail_ex+0x414/0x560 [ 947.728676][ T2754] should_failslab+0xa8/0x100 [ 947.728697][ T2754] kmem_cache_alloc_node_noprof+0x77/0x710 [ 947.728724][ T2754] ? __alloc_skb+0x112/0x2d0 [ 947.728750][ T2754] __alloc_skb+0x112/0x2d0 [ 947.728774][ T2754] alloc_skb_with_frags+0xca/0x890 [ 947.728805][ T2754] ? is_bpf_text_address+0x26/0x2b0 [ 947.728830][ T2754] sock_alloc_send_pskb+0x84d/0x980 [ 947.728855][ T2754] ? __lock_acquire+0xab9/0xd20 [ 947.728892][ T2754] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 947.728918][ T2754] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 947.728940][ T2754] ? lockdep_hardirqs_on+0x9c/0x150 [ 947.728965][ T2754] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 947.728987][ T2754] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 947.729013][ T2754] __ip_append_data+0x2ce8/0x40c0 [ 947.729063][ T2754] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 947.729115][ T2754] ? __pfx___ip_append_data+0x10/0x10 [ 947.729141][ T2754] ? ipv4_mtu+0x53b/0x650 [ 947.729171][ T2754] ? ip_setup_cork+0x577/0x9a0 [ 947.729201][ T2754] ip_make_skb+0x1de/0x3f0 [ 947.729236][ T2754] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 947.729264][ T2754] ? __pfx_ip_make_skb+0x10/0x10 [ 947.729313][ T2754] udp_sendmsg+0x1925/0x2170 [ 947.729350][ T2754] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 947.729380][ T2754] ? __pfx_udp_sendmsg+0x10/0x10 [ 947.729408][ T2754] ? count_memcg_event_mm+0x21/0x260 [ 947.729440][ T2754] ? count_memcg_event_mm+0x21/0x260 [ 947.729486][ T2754] ? sock_rps_record_flow+0x19/0x410 [ 947.729510][ T2754] ? inet_sendmsg+0x29c/0x370 [ 947.729527][ T2754] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 947.729550][ T2754] __sock_sendmsg+0x19c/0x270 [ 947.729581][ T2754] ____sys_sendmsg+0x52d/0x830 [ 947.729611][ T2754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 947.729651][ T2754] ? import_iovec+0x74/0xa0 [ 947.729675][ T2754] ___sys_sendmsg+0x21f/0x2a0 [ 947.729701][ T2754] ? __pfx____sys_sendmsg+0x10/0x10 [ 947.729765][ T2754] ? __fget_files+0x2a/0x420 [ 947.729782][ T2754] ? __fget_files+0x3a0/0x420 [ 947.729811][ T2754] __sys_sendmmsg+0x227/0x430 [ 947.729841][ T2754] ? __pfx___sys_sendmmsg+0x10/0x10 [ 947.729873][ T2754] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 947.729914][ T2754] ? ksys_write+0x22a/0x250 [ 947.729940][ T2754] ? __pfx_ksys_write+0x10/0x10 [ 947.729973][ T2754] __x64_sys_sendmmsg+0xa0/0xc0 [ 947.729996][ T2754] do_syscall_64+0xfa/0xfa0 [ 947.730016][ T2754] ? lockdep_hardirqs_on+0x9c/0x150 [ 947.730036][ T2754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.730054][ T2754] ? clear_bhb_loop+0x60/0xb0 [ 947.730077][ T2754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.730096][ T2754] RIP: 0033:0x7fa564d8eec9 [ 947.730113][ T2754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 947.730130][ T2754] RSP: 002b:00007fa565c26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 947.730152][ T2754] RAX: ffffffffffffffda RBX: 00007fa564fe5fa0 RCX: 00007fa564d8eec9 [ 947.730167][ T2754] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 947.730181][ T2754] RBP: 00007fa565c26090 R08: 0000000000000000 R09: 0000000000000000 [ 947.730194][ T2754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.730206][ T2754] R13: 00007fa564fe6038 R14: 00007fa564fe5fa0 R15: 00007ffd93fa7b38 [ 947.730240][ T2754] [ 948.297339][ T2762] netlink: 'syz.2.7919': attribute type 1 has an invalid length. [ 948.498356][ T2776] virt_wifi0 speed is unknown, defaulting to 1000 [ 948.506926][ T2776] vxcan1 speed is unknown, defaulting to 1000 [ 948.584277][ T2745] nbd2: detected capacity change from 0 to 127 [ 948.592844][ T5840] block nbd2: Receive control failed (result -32) [ 948.807011][ T2787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 948.992570][ T2771] virt_wifi0 speed is unknown, defaulting to 1000 [ 949.002320][ T2794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7928'. [ 949.058721][ T2771] vxcan1 speed is unknown, defaulting to 1000 [ 949.117851][ T2797] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 949.223946][ T2799] netlink: 'syz.0.7930': attribute type 13 has an invalid length. [ 949.273195][ T2799] netlink: 'syz.0.7930': attribute type 13 has an invalid length. [ 949.583337][ T2820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7934'. [ 949.612237][ T2820] syzkaller0: entered promiscuous mode [ 949.617859][ T2820] syzkaller0: entered allmulticast mode [ 949.626528][ T2824] netlink: 'syz.2.7935': attribute type 1 has an invalid length. [ 949.823680][ T2827] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 949.948380][ T2831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 950.556313][ T2860] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 950.852569][ T2873] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 950.874209][ T2873] FAULT_INJECTION: forcing a failure. [ 950.874209][ T2873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.899319][ T2873] CPU: 0 UID: 0 PID: 2873 Comm: syz.4.7945 Not tainted syzkaller #0 PREEMPT(full) [ 950.899348][ T2873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 950.899361][ T2873] Call Trace: [ 950.899369][ T2873] [ 950.899377][ T2873] dump_stack_lvl+0x189/0x250 [ 950.899404][ T2873] ? __pfx____ratelimit+0x10/0x10 [ 950.899427][ T2873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 950.899448][ T2873] ? __pfx__printk+0x10/0x10 [ 950.899484][ T2873] should_fail_ex+0x414/0x560 [ 950.899514][ T2873] _copy_to_user+0x31/0xb0 [ 950.899537][ T2873] simple_read_from_buffer+0xe1/0x170 [ 950.899572][ T2873] proc_fail_nth_read+0x1b3/0x220 [ 950.899600][ T2873] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 950.899635][ T2873] ? rw_verify_area+0x2a6/0x4d0 [ 950.899660][ T2873] ? __lock_acquire+0xab9/0xd20 [ 950.899678][ T2873] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 950.899704][ T2873] vfs_read+0x200/0xa30 [ 950.899729][ T2873] ? fdget_pos+0x247/0x320 [ 950.899751][ T2873] ? __pfx___mutex_lock+0x10/0x10 [ 950.899778][ T2873] ? __pfx_vfs_read+0x10/0x10 [ 950.899806][ T2873] ? __fget_files+0x2a/0x420 [ 950.899829][ T2873] ? __fget_files+0x3a0/0x420 [ 950.899846][ T2873] ? __fget_files+0x2a/0x420 [ 950.899875][ T2873] ksys_read+0x145/0x250 [ 950.899904][ T2873] ? __pfx_ksys_read+0x10/0x10 [ 950.899935][ T2873] ? do_syscall_64+0xbe/0xfa0 [ 950.899964][ T2873] do_syscall_64+0xfa/0xfa0 [ 950.899986][ T2873] ? lockdep_hardirqs_on+0x9c/0x150 [ 950.900010][ T2873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.900030][ T2873] ? clear_bhb_loop+0x60/0xb0 [ 950.900055][ T2873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.900074][ T2873] RIP: 0033:0x7fa564d8d8dc [ 950.900093][ T2873] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 950.900110][ T2873] RSP: 002b:00007fa565c26030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 950.900131][ T2873] RAX: ffffffffffffffda RBX: 00007fa564fe5fa0 RCX: 00007fa564d8d8dc [ 950.900146][ T2873] RDX: 000000000000000f RSI: 00007fa565c260a0 RDI: 0000000000000005 [ 950.900159][ T2873] RBP: 00007fa565c26090 R08: 0000000000000000 R09: 0000000000000000 [ 950.900173][ T2873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.900185][ T2873] R13: 00007fa564fe6038 R14: 00007fa564fe5fa0 R15: 00007ffd93fa7b38 [ 950.900221][ T2873] [ 951.182009][ T2877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7948'. [ 951.204027][ T2879] netlink: 'syz.0.7947': attribute type 10 has an invalid length. [ 951.709331][ T2911] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20002 [ 951.776075][ T2909] virt_wifi0 speed is unknown, defaulting to 1000 [ 951.796441][ T2909] vxcan1 speed is unknown, defaulting to 1000 [ 952.075236][ T2928] __nla_validate_parse: 1 callbacks suppressed [ 952.075257][ T2928] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7966'. [ 952.213059][ T2936] net_ratelimit: 4 callbacks suppressed [ 952.213078][ T2936] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 952.533091][ T2951] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 952.652038][ T2954] netlink: 'syz.1.7976': attribute type 4 has an invalid length. [ 952.703684][ T2954] netlink: 'syz.1.7976': attribute type 4 has an invalid length. [ 952.721309][ T2958] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7977'. [ 952.746109][ T2954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7976'. [ 952.776211][ T2954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 952.907588][ T2966] vlan3: entered allmulticast mode [ 952.913017][ T2966] bridge_slave_0: entered allmulticast mode [ 953.167074][ T2969] virt_wifi0 speed is unknown, defaulting to 1000 [ 953.193034][ T2969] vxcan1 speed is unknown, defaulting to 1000 [ 954.278684][ T3012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7990'. [ 954.820137][ T3025] netlink: 'syz.4.7994': attribute type 9 has an invalid length. [ 955.421023][ T3062] netlink: 'syz.1.8006': attribute type 1 has an invalid length. [ 955.766107][ T3067] virt_wifi0 speed is unknown, defaulting to 1000 [ 955.796397][ T3070] netlink: 'syz.2.8007': attribute type 21 has an invalid length. [ 955.801980][ T3067] vxcan1 speed is unknown, defaulting to 1000 [ 955.808989][ T3070] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8007'. [ 955.843204][ T3070] netlink: 'syz.2.8007': attribute type 4 has an invalid length. [ 955.854257][ T3070] netlink: 'syz.2.8007': attribute type 5 has an invalid length. [ 955.862022][ T3070] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8007'. [ 955.946151][ T3080] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8010'. [ 956.130996][ T3093] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 956.131649][ T3095] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 956.490100][ T3117] netlink: 'syz.2.8021': attribute type 21 has an invalid length. [ 956.509444][ T3117] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8021'. [ 956.533851][ T3109] virt_wifi0 speed is unknown, defaulting to 1000 [ 956.569152][ T3109] vxcan1 speed is unknown, defaulting to 1000 [ 956.963752][ T3136] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 957.119893][ T3139] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 957.631663][ T3172] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 957.721591][ T3166] virt_wifi0 speed is unknown, defaulting to 1000 [ 957.795583][ T3166] vxcan1 speed is unknown, defaulting to 1000 [ 957.847690][ T3180] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8042'. [ 958.111565][ T3187] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8044'. [ 958.144505][ T3187] netlink: 'syz.0.8044': attribute type 4 has an invalid length. [ 958.146572][ T3189] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 958.489853][ T3206] netlink: 'syz.3.8050': attribute type 15 has an invalid length. [ 958.872740][ T3229] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 959.456452][ T3251] batman_adv: batadv0: Adding interface: dummy0 [ 959.478786][ T3251] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.505728][ T3251] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 959.518043][ T3257] sctp: [Deprecated]: syz.1.8067 (pid 3257) Use of int in max_burst socket option. [ 959.518043][ T3257] Use struct sctp_assoc_value instead [ 959.531383][ T3258] macvtap2: mtu less than device minimum [ 959.656350][ T3264] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 959.749898][ T3268] tipc: Resetting bearer [ 959.853698][ T3274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8073'. [ 959.912680][ T3276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8074'. [ 959.947486][ T3279] vlan4: entered allmulticast mode [ 959.952834][ T3279] bridge_slave_0: entered allmulticast mode [ 960.114493][T25961] Bluetooth: hci2: command 0x0405 tx timeout [ 960.354802][ T3304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8081'. [ 960.374470][ T3304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8081'. [ 960.490287][ T3313] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8086'. [ 960.510060][ T3314] batadv_slave_0: entered promiscuous mode [ 960.608013][ T3318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8089'. [ 960.729010][ T3327] netlink: 'syz.0.8092': attribute type 2 has an invalid length. [ 960.738631][ T3326] syzkaller1: entered promiscuous mode [ 960.738992][ T3327] netlink: 'syz.0.8092': attribute type 9 has an invalid length. [ 960.744522][ T3326] syzkaller1: entered allmulticast mode [ 960.751940][ T3327] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8092'. [ 960.911637][ T3330] Bluetooth: hci0: unsupported parameter 145 [ 960.922654][ T3330] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 960.973531][ T3334] virt_wifi0 speed is unknown, defaulting to 1000 [ 960.983093][ T3334] vxcan1 speed is unknown, defaulting to 1000 [ 961.100900][ T3339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8094'. [ 961.286271][ T3310] batadv_slave_0: left promiscuous mode [ 961.416182][ T3347] sctp: [Deprecated]: syz.2.8098 (pid 3347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 961.416182][ T3347] Use struct sctp_sack_info instead [ 962.158872][ T3369] netlink: 'syz.2.8105': attribute type 1 has an invalid length. [ 962.462023][ T3371] bond8: (slave veth33): Enslaving as an active interface with a down link [ 962.499972][ T3372] bond8 (unregistering): (slave veth33): Releasing active interface [ 962.537527][ T3372] bond8 (unregistering): Released all slaves [ 962.651042][ T3378] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 962.702309][ T3380] openvswitch: netlink: Missing key (keys=40, expected=80) [ 962.717377][ T3380] netlink: 'syz.2.8111': attribute type 3 has an invalid length. [ 962.739510][ T3380] netlink: 'syz.2.8111': attribute type 3 has an invalid length. [ 962.961712][ T3394] __nla_validate_parse: 4 callbacks suppressed [ 962.961731][ T3394] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8114'. [ 963.166741][ T3401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 963.204991][ T3402] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 963.225126][ T3402] dvmrp1: linktype set to 768 [ 963.617903][ T3420] virt_wifi0 speed is unknown, defaulting to 1000 [ 963.624681][ T3422] netlink: 'syz.0.8121': attribute type 1 has an invalid length. [ 963.637099][ T3420] vxcan1 speed is unknown, defaulting to 1000 [ 963.729314][ T3422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8121'. [ 963.746581][ T3422] bond12 (unregistering): Released all slaves [ 963.816355][ T3436] tun0: tun_chr_ioctl cmd 1074025681 [ 963.841487][ T3440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8125'. [ 964.251259][ T3457] delete_channel: no stack [ 964.382494][ T3469] virt_wifi0 speed is unknown, defaulting to 1000 [ 964.391191][ T3469] vxcan1 speed is unknown, defaulting to 1000 [ 965.031430][ T3484] netlink: 'syz.2.8138': attribute type 1 has an invalid length. [ 965.147889][ T3484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8138'. [ 965.171459][ T3487] bond8: (slave veth35): Enslaving as an active interface with a down link [ 965.220240][ T3484] bond8 (unregistering): (slave veth35): Releasing active interface [ 965.249734][ T3484] bond8 (unregistering): Released all slaves [ 965.302707][ T3489] virt_wifi0 speed is unknown, defaulting to 1000 [ 965.357078][ T3489] vxcan1 speed is unknown, defaulting to 1000 [ 965.537571][ T3494] virt_wifi0 speed is unknown, defaulting to 1000 [ 966.027320][ T3494] vxcan1 speed is unknown, defaulting to 1000 [ 966.823046][ T3510] virt_wifi0 speed is unknown, defaulting to 1000 [ 966.952869][ T3529] netlink: 'syz.2.8151': attribute type 1 has an invalid length. [ 967.001819][ T3510] vxcan1 speed is unknown, defaulting to 1000 [ 967.077766][ T3534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8151'. [ 967.241381][ T3532] bond8: (slave veth37): Enslaving as an active interface with a down link [ 967.254285][ T3534] bond8 (unregistering): (slave veth37): Releasing active interface [ 967.273513][ T3534] bond8 (unregistering): Released all slaves [ 967.439875][ T3542] netlink: 'syz.2.8154': attribute type 9 has an invalid length. [ 967.457469][ T3544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8153'. [ 967.466964][ T3544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8153'. [ 967.634206][T25961] Bluetooth: hci2: command 0x0405 tx timeout [ 967.663815][ T3542] can: request_module (can-proto-0) failed. [ 967.758081][ T3554] [ 967.760440][ T3554] ====================================================== [ 967.767454][ T3554] WARNING: possible circular locking dependency detected [ 967.774486][ T3554] syzkaller #0 Not tainted [ 967.778902][ T3554] ------------------------------------------------------ [ 967.785916][ T3554] syz.2.8156/3554 is trying to acquire lock: [ 967.791889][ T3554] ffffffff8f6394d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 967.801042][ T3554] [ 967.801042][ T3554] but task is already holding lock: [ 967.808404][ T3554] ffff888035413870 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 967.817641][ T3554] [ 967.817641][ T3554] which lock already depends on the new lock. [ 967.817641][ T3554] [ 967.828033][ T3554] [ 967.828033][ T3554] the existing dependency chain (in reverse order) is: [ 967.837033][ T3554] [ 967.837033][ T3554] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 967.845019][ T3554] lock_acquire+0x120/0x360 [ 967.850032][ T3554] _raw_spin_lock_bh+0x36/0x50 [ 967.855305][ T3554] nr_rt_device_down+0x12a/0x720 [ 967.860752][ T3554] nr_device_event+0x137/0x150 [ 967.866021][ T3554] notifier_call_chain+0x1b6/0x3e0 [ 967.871641][ T3554] netif_close_many+0x29c/0x410 [ 967.877010][ T3554] netif_close+0x158/0x210 [ 967.881943][ T3554] dev_close+0x10a/0x220 [ 967.886693][ T3554] bpq_device_event+0x377/0x6a0 [ 967.892056][ T3554] notifier_call_chain+0x1b6/0x3e0 [ 967.897678][ T3554] netif_close_many+0x29c/0x410 [ 967.903044][ T3554] netif_close+0x158/0x210 [ 967.907977][ T3554] dev_close+0x10a/0x220 [ 967.912726][ T3554] bond_setup_by_slave+0x5f/0x3f0 [ 967.918258][ T3554] bond_enslave+0x6ca/0x3870 [ 967.923362][ T3554] bond_do_ioctl+0x635/0x9b0 [ 967.928467][ T3554] bond_siocdevprivate+0x17e/0x350 [ 967.934092][ T3554] dev_ifsioc+0xb54/0xf00 [ 967.938927][ T3554] dev_ioctl+0x84c/0x1150 [ 967.943762][ T3554] sock_ioctl+0x719/0x790 [ 967.948603][ T3554] __se_sys_ioctl+0xfc/0x170 [ 967.953703][ T3554] do_syscall_64+0xfa/0xfa0 [ 967.958720][ T3554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.965120][ T3554] [ 967.965120][ T3554] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 967.972933][ T3554] lock_acquire+0x120/0x360 [ 967.977943][ T3554] _raw_spin_lock_bh+0x36/0x50 [ 967.983218][ T3554] nr_rt_device_down+0xa9/0x720 [ 967.988582][ T3554] nr_device_event+0x137/0x150 [ 967.993852][ T3554] notifier_call_chain+0x1b6/0x3e0 [ 967.999475][ T3554] netif_close_many+0x29c/0x410 [ 968.004844][ T3554] netif_close+0x158/0x210 [ 968.009777][ T3554] dev_close+0x10a/0x220 [ 968.014529][ T3554] bpq_device_event+0x377/0x6a0 [ 968.019893][ T3554] notifier_call_chain+0x1b6/0x3e0 [ 968.025514][ T3554] netif_close_many+0x29c/0x410 [ 968.030880][ T3554] netif_close+0x158/0x210 [ 968.035810][ T3554] dev_close+0x10a/0x220 [ 968.040561][ T3554] bond_setup_by_slave+0x5f/0x3f0 [ 968.046097][ T3554] bond_enslave+0x6ca/0x3870 [ 968.051195][ T3554] bond_do_ioctl+0x635/0x9b0 [ 968.056300][ T3554] bond_siocdevprivate+0x17e/0x350 [ 968.061924][ T3554] dev_ifsioc+0xb54/0xf00 [ 968.066760][ T3554] dev_ioctl+0x84c/0x1150 [ 968.071599][ T3554] sock_ioctl+0x719/0x790 [ 968.076444][ T3554] __se_sys_ioctl+0xfc/0x170 [ 968.081545][ T3554] do_syscall_64+0xfa/0xfa0 [ 968.086557][ T3554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.092956][ T3554] [ 968.092956][ T3554] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 968.100851][ T3554] validate_chain+0xb9b/0x2140 [ 968.106126][ T3554] __lock_acquire+0xab9/0xd20 [ 968.111315][ T3554] lock_acquire+0x120/0x360 [ 968.116326][ T3554] _raw_spin_lock_bh+0x36/0x50 [ 968.121605][ T3554] nr_rt_ioctl+0x390/0xd50 [ 968.126529][ T3554] sock_do_ioctl+0xd9/0x300 [ 968.131545][ T3554] sock_ioctl+0x576/0x790 [ 968.136392][ T3554] __se_sys_ioctl+0xfc/0x170 [ 968.141494][ T3554] do_syscall_64+0xfa/0xfa0 [ 968.146516][ T3554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.152921][ T3554] [ 968.152921][ T3554] other info that might help us debug this: [ 968.152921][ T3554] [ 968.163131][ T3554] Chain exists of: [ 968.163131][ T3554] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 968.163131][ T3554] [ 968.176942][ T3554] Possible unsafe locking scenario: [ 968.176942][ T3554] [ 968.184379][ T3554] CPU0 CPU1 [ 968.189729][ T3554] ---- ---- [ 968.195078][ T3554] lock(&nr_node->node_lock); [ 968.199839][ T3554] lock(nr_node_list_lock); [ 968.206935][ T3554] lock(&nr_node->node_lock); [ 968.214210][ T3554] lock(nr_neigh_list_lock); [ 968.218882][ T3554] [ 968.218882][ T3554] *** DEADLOCK *** [ 968.218882][ T3554] [ 968.227010][ T3554] 2 locks held by syz.2.8156/3554: [ 968.232112][ T3554] #0: ffffffff8f639538 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 968.241593][ T3554] #1: ffff888035413870 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 968.251255][ T3554] [ 968.251255][ T3554] stack backtrace: [ 968.257134][ T3554] CPU: 0 UID: 0 PID: 3554 Comm: syz.2.8156 Not tainted syzkaller #0 PREEMPT(full) [ 968.257154][ T3554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 968.257165][ T3554] Call Trace: [ 968.257173][ T3554] [ 968.257181][ T3554] dump_stack_lvl+0x189/0x250 [ 968.257202][ T3554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 968.257219][ T3554] ? __pfx__printk+0x10/0x10 [ 968.257233][ T3554] ? stack_trace_save+0x9c/0xe0 [ 968.257268][ T3554] print_circular_bug+0x2ee/0x310 [ 968.257290][ T3554] check_noncircular+0x134/0x160 [ 968.257312][ T3554] validate_chain+0xb9b/0x2140 [ 968.257335][ T3554] ? look_up_lock_class+0x74/0x170 [ 968.257356][ T3554] ? register_lock_class+0x51/0x320 [ 968.257374][ T3554] __lock_acquire+0xab9/0xd20 [ 968.257392][ T3554] ? nr_rt_ioctl+0x390/0xd50 [ 968.257408][ T3554] lock_acquire+0x120/0x360 [ 968.257422][ T3554] ? nr_rt_ioctl+0x390/0xd50 [ 968.257441][ T3554] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 968.257464][ T3554] ? nr_rt_ioctl+0x390/0xd50 [ 968.257480][ T3554] _raw_spin_lock_bh+0x36/0x50 [ 968.257498][ T3554] ? nr_rt_ioctl+0x390/0xd50 [ 968.257514][ T3554] nr_rt_ioctl+0x390/0xd50 [ 968.257536][ T3554] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 968.257551][ T3554] ? lockdep_hardirqs_on+0x9c/0x150 [ 968.257575][ T3554] ? apparmor_capable+0x137/0x1b0 [ 968.257594][ T3554] ? capable+0x89/0xe0 [ 968.257612][ T3554] ? nr_ioctl+0x1b1/0x3b0 [ 968.257636][ T3554] sock_do_ioctl+0xd9/0x300 [ 968.257660][ T3554] ? __pfx_sock_do_ioctl+0x10/0x10 [ 968.257688][ T3554] sock_ioctl+0x576/0x790 [ 968.257710][ T3554] ? __pfx_sock_ioctl+0x10/0x10 [ 968.257732][ T3554] ? __fget_files+0x3a0/0x420 [ 968.257747][ T3554] ? __fget_files+0x2a/0x420 [ 968.257762][ T3554] ? bpf_lsm_file_ioctl+0x9/0x20 [ 968.257780][ T3554] ? __pfx_sock_ioctl+0x10/0x10 [ 968.257800][ T3554] __se_sys_ioctl+0xfc/0x170 [ 968.257821][ T3554] do_syscall_64+0xfa/0xfa0 [ 968.257841][ T3554] ? lockdep_hardirqs_on+0x9c/0x150 [ 968.257860][ T3554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.257876][ T3554] ? clear_bhb_loop+0x60/0xb0 [ 968.257894][ T3554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.257910][ T3554] RIP: 0033:0x7fb20f38eec9 [ 968.257926][ T3554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 968.257941][ T3554] RSP: 002b:00007fb21022e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 968.257958][ T3554] RAX: ffffffffffffffda RBX: 00007fb20f5e5fa0 RCX: 00007fb20f38eec9 [ 968.257971][ T3554] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 968.257981][ T3554] RBP: 00007fb20f411f91 R08: 0000000000000000 R09: 0000000000000000 [ 968.257992][ T3554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 968.258002][ T3554] R13: 00007fb20f5e6038 R14: 00007fb20f5e5fa0 R15: 00007fff59ba7658 [ 968.258022][ T3554]