last executing test programs: 3.826734588s ago: executing program 4 (id=1303): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000006c0)=[{{0x4}, {0x3, 0x1, 0x1, 0x1}}], 0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000400000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000800000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a00000000000000000000000000000000000000000000000400"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x400, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) (async) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r6, 0xb97534d5fe9704cf, 0x800, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x2c}}, 0x8008) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r6, 0xb97534d5fe9704cf, 0x800, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x2c}}, 0x8008) 3.593613919s ago: executing program 4 (id=1309): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @mcast2, 0x3}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008801}, 0x30) 3.404215754s ago: executing program 2 (id=1310): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000080)=@ieee802154={0x24, @long={0x3, 0x1}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000000)="6253bbbb7bf91232d10a01c9865075", 0xf}, {&(0x7f0000000200)="d214bb64efd0b24381f491da175c44bd41a6d5a1303e01bcdf6ccdc63828bf2b7f155e1cc24d243e54058bb1b67529318dcb66b2544581ce0e0bd09ad0a09725fee10eced2fa6b1a5278f6534a7b18e70a6db26c6df8586d533ad5239b9bbaf386c1ff7b3c9584db6b3b67b363065beef5be149908b277eb2ece40c2a329768f645fd91ce65fff721668c4d81e67153b56379a91ce1ff2112ad5d486d562531e14de75a0c8e65fb450cc0c04d93131d8c259bc83f69de1361945d362601a682d5e3dbada56e464294e7983578e14a0ee14b41d0f0763fbfdc7073655056bac56c318c280e7b1fe0b50653590885fd4c2a1", 0xf1}, {&(0x7f0000000300)="558367f511c10e00578d49a5d80330c41379975fe70e8a2db8bfdafbba8c111288199c6b5957c4016b85363a2d", 0x2d}], 0x3}}], 0x1, 0x20) 3.396120793s ago: executing program 4 (id=1312): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async, rerun: 64) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f00000000c0)={0x4, 0x7}) (async, rerun: 64) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x800}, &(0x7f00000000c0)=0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) (async, rerun: 32) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x27, 0x14, 0x0, &(0x7f0000000140)="f80204000000000000007f530800d31e0edf4dd3", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x19}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) 3.322517432s ago: executing program 2 (id=1313): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="826d87688c04", 0x6}, {&(0x7f0000001a40)="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", 0xebb}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r5, &(0x7f0000000000)='yeah\x00', 0x5) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x522, 0x4) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@deltaction={0x84, 0x31, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x544}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc0}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x84}}, 0x40) 3.09096637s ago: executing program 2 (id=1317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000e2000000000000000000040000000000a86e186ba7683611322703e482cf58a80054561f9832fd68e718e0b45ed6c163b8c1159eda1ed06e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r3}, 0xe0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050004000000000063110c0000000000851000000200000085003cde571c4c58f4438dabd99db59600000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r7, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r7, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r7, 0x0, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) close(r6) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xda8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0xfff8, 0x7, 0x8, 0x200}, {0x22, 0x1, 0xb, 0x9, 0x9}, 0x3, 0xfffffffb, 0x67}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.044422067s ago: executing program 1 (id=1318): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000080)=0x80007, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000040a0103"], 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmsg(r4, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x880) 2.852260599s ago: executing program 1 (id=1322): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r2, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x92, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x803, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {0xffe0}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_UDP_DST={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c044}, 0x240440d4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x8, 0xfe, 0xfe, 0x0, 0xd, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0xe) shutdown(r1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, &(0x7f0000000180)) accept$nfc_llcp(r1, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r8, 0x7ae, 0x0, 0x6, 0x3}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000300)={r8, 0x92, "9053ac3f640c90aefe340c5a9b42f2015e2509c0177d3b96942c95bf796511560d3df0785d5eef20a463eb43407a827aa5bd513c456f4c3a07a7814bb47f030cbc0736ded047583983391788653842396ed78c063cfaf4f85f1ddf367c9dbb26336bf3bba208bffdad2608a4098e06830d6aceb59b39d4f3213c6a376d0ac990243c9779b211c38839a7c1b29cf279d7accc"}, &(0x7f0000000040)=0x9a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000100)=""/95, 0x27000, 0x1800, 0x8}, 0x20) 2.791022668s ago: executing program 3 (id=1323): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 2.712605036s ago: executing program 0 (id=1324): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x4a, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="68000000040a030000000000000000000000000011000b4000000000340008800c00014000000000000000000c00024000000000000000000c00014000000000000000000c00024000000000000000000b00070066696c746572dd000900010073797a3100000000574612385cbe50f66d992839a1bbf5081abeed27087d141d155db46b6a3a45cc0d24fe8fd320c6dd6082b79ccf515dbc2f406067b0a22baead77eb3fe96de8b4478ef8b9edd725a0ae986f97269ef99062499acfb29dd2bf6a21cfc517121224f1fcaa2c60d1a7b48135b006f8af3d6ec9056a9d34c7b260eba3d4bc2e754e3a98a4196bf5d48bc8"], 0x68}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r1}, 0x18) 2.628383274s ago: executing program 3 (id=1325): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7010040000000500001006000100050000000800090002000000000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 2.627890307s ago: executing program 1 (id=1326): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) socket$rxrpc(0x21, 0x2, 0xa) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pwrite64(r2, &(0x7f0000000fc0)="e21af3d1b26c6d066f35dd92ddfd11e931b621c56fd1ba501da205cd1445343798819f07199f298ff3dea12f16a4a9144da6aaba3a137f7521297853ab931a5043eee36bc1be344e287811ad90", 0x4d, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000"], &(0x7f0000000580)='GPL\x00'}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x29, 0x0, 0x0) pipe(&(0x7f0000000080)) r3 = socket$caif_stream(0x25, 0x1, 0x1) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f00000010c0), &(0x7f0000001100)=0x8) pipe(&(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x28, &(0x7f0000000f80)=ANY=[@ANYBLOB="ffffffffffff0180c200000060009bb2b568d2b8a0b090201d6b9b33675eff80b13cc4d33c99563c"], 0x0) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000001080)=""/33) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x280) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}}, 0xc080) 2.532946283s ago: executing program 3 (id=1327): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendto$inet(r2, &(0x7f0000000000)='\x00\x00', 0x2, 0x24008800, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x10000000007, 0x7) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x4, 0x1, 0x6, 0x6, 0x9, 0x10, 0x10}]}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x34, &(0x7f0000000240)=""/52, 0x41000, 0x36, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xc, 0x7fffffff, 0xfffffff8}, 0x10, 0x214a1, 0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x1, 0x4, 0x9, 0x3}, {0x3, 0x1, 0xf}], 0x10, 0x9}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=@newlinkprop={0xa8, 0x6c, 0x10, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5002, 0x200}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}, @IFLA_ALT_IFNAME={0x14, 0x35, 'syzkaller1\x00'}, @IFLA_PORT_SELF={0x28, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c88634b1c199ca57c86ae707285c88e8"}, @IFLA_PORT_PROFILE={0x6, 0x2, '%\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x4}]}, @IFLA_PHYS_PORT_ID={0x19, 0x22, "7af850e0f416fc1e245b0d8eedcb51c4c3a4b1c755"}, @IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) accept4$tipc(r2, 0x0, 0x0, 0x800) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="b346c7c8140001000000000000000000280011000100a71e2a26c2d174b4380271c1190000000000"], 0x28}}, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000}]}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000140)=0x80) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) close(0x3) 2.47144335s ago: executing program 2 (id=1328): r0 = socket$isdn(0x22, 0x3, 0x24) r1 = socket$isdn(0x22, 0x3, 0x4) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000000)={0x4003, 0xd8, 0x9, 0x100}) (async) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000040)={0x45c, 0x800000000000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000006900), 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006980), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000006a40)={&(0x7f0000006940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000006a00)={&(0x7f00000069c0)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000015}, 0x4000) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) (async) close(0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000006a80), 0x4) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000006ac0), 0x4) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FIOCLEX(r2, 0x5451) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000006b00)={{0x0, 0x9, 0x6, 0x320b, 0x101, 0x7, 0xd0fc, 0x8000, 0xccba, 0x8, 0x2, 0x5, 0x0, 0xfffffffffffffffe, 0x6d}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000006bc0)={{r6, 0xffffffffffffa9f3, 0x3, 0x4, 0x5, 0x6, 0x0, 0x1, 0x9, 0x466, 0x1c6, 0x1ff, 0x1, 0x0, 0x6}, 0x10, [0x0, 0x0]}) sendmsg$nl_route(r4, &(0x7f0000006d00)={&(0x7f0000006c40), 0xc, &(0x7f0000006cc0)={&(0x7f0000006c80)=@getrule={0x14, 0x22, 0x420, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x48881) (async) syz_genetlink_get_family_id$smc(&(0x7f0000006d40), r2) (async) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000006e40)={&(0x7f0000006d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000006e00)={&(0x7f0000006dc0)={0x10, 0x3f5, 0x330, 0x70bd26, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x50}, 0x48080) (async) pipe(&(0x7f0000006e80)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000007100)=@bpf_lsm={0x1d, 0x1, &(0x7f0000006ec0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000006f00)='syzkaller\x00', 0x0, 0xa5, &(0x7f0000006f40)=""/165, 0x41100, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000007000)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000007040)={0x5, 0x4, 0x8, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000007080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000070c0)=[{0x1, 0x3, 0xa, 0x8}], 0x10, 0x626}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f00000071c0)={r1, r10}) (async) getsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f0000007200)={@initdev, 0x0}, &(0x7f0000007240)=0x14) bind$xdp(r9, &(0x7f0000007280)={0x2c, 0xf, r11, 0x0, r8}, 0x10) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f00000072c0)={0x7fffffffffffffff, [{r7}, {r6}, {r6}, {r7}, {r6}, {r7}, {r7}, {r7}, {r7}, {r6}, {r7}, {r6}, {r7}, {r7}, {r6}, {r7}, {r7}, {}, {r6}, {r7}, {}, {r6}, {r6}, {r6}, {r7}, {r7}, {r6}, {r7}, {r6}, {r6}, {r7}, {r6}, {r7}, {r7}, {}, {r6}, {r7}, {r6}, {r6}, {r6}, {r7}, {r6}, {r7}, {}, {r6}, {r7}, {r7}, {r7}, {r6}, {r6}, {r6}, {r6}, {r7}, {r7}, {r7}, {r6}, {r6}, {r7}, {r7}, {r7}, {r7}, {r6}, {r7}, {r6}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r6}, {r7}, {r7}, {r7}, {r6}, {r7}, {r6}, {r7}, {r7}, {r6}, {r6}, {r7}, {r6}, {r6}, {r6}, {r6}, {r7}, {r7}, {r6}, {r6}, {r7}, {r6}, {r6}, {r7}, {r7}, {}, {r6}, {r6}, {r6}, {r6}, {r7}, {r7}, {r7}, {r7}, {r7}, {r6}, {r7}, {r7}, {r7}, {r6}, {r6}, {r6}, {r6}, {r6}, {r6}, {r7}, {r6}, {r6}, {r6}, {r6}, {r7}, {r6}, {r7}, {r6}, {r7}, {r6}, {r7}, {r7}, {r6}, {}, {r7}, {r7}, {r6}, {r6}, {r6}, {r6}, {r7}, {r7}, {r6}, {r7}, {r6}, {r6}, {r7}, {r7}, {r6}, {r7}, {}, {r7}, {r7}, {r7}, {r6}, {r7}, {}, {r6}, {r7}, {r6}, {r7}, {r6}, {r6}, {r7}, {r6}, {r6}, {r7}, {r7}, {}, {r6}, {r6}, {r6}, {r6}, {r7}, {r7}, {r6}, {r7}, {r7}, {r6}, {r7}, {r6}, {r6, 0x0}, {r6}, {r7}, {r7}, {}, {r7}, {r7}, {r6}, {}, {r7}, {r7}, {r7}, {r6}, {r7}, {r6}, {r6}, {r6}, {r6}, {r6}, {r6}, {r7}, {r7}, {r7}, {r7}, {r7}, {r6}, {r7}, {r6}, {r6}, {r7}, {r7}, {r6}, {r6}, {r7}, {r6}, {}, {r7}, {r6}, {r6}, {r7}, {r7}, {r6}, {r6}, {r6}, {r7}, {r6}, {r6}, {r6}, {r7}, {r7}, {r7}, {r7}, {r6}, {r6}, {r7}, {r7}, {r7}, {r7}, {r7}, {r6}, {r7}, {r7}, {r7}, {r7}, {r7}, {r6}, {r7}, {r6}, {r7}, {r7}, {r6}, {r6}, {r6}, {r6}, {r7}, {r6}, {r7}], 0x8c, "598a9df628cf78"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f00000082c0)={r12, r7, "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", "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"}) (async) r13 = bpf$ITER_CREATE(0x21, &(0x7f00000092c0)={r8}, 0x8) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000009380)={'ip6_vti0\x00', &(0x7f0000009300)={'ip6tnl0\x00', r11, 0x29, 0x5b, 0x7, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x8, 0x1, 0x80000001, 0xffffffff}}) ioctl$IMGETVERSION(r13, 0x80044942, &(0x7f00000093c0)) 2.416399585s ago: executing program 0 (id=1329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001a00fd5800006c610e2a00000a", @ANYRESHEX=r0, @ANYRES16=r1], 0x18}, 0x1, 0x0, 0x0, 0x811}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580000000206010800000000000000000000000005000400000000000900020073797a31000000000c0007800800114000000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x58}}, 0x0) 2.415763016s ago: executing program 4 (id=1330): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfdef) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800001e020000"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000b066489dc2a02d872383f947b90a9d836cd1555cfa10a54426fd55f096cb07a66c361db5c1cb1e93a6b174ec7a6a3e7260c0dde773308dee0da362a048d4df94ddde55da08ca083b80a214944dc15f957455328f31817daadfb12be36355f14d079809c31b825bd57f15f5dc77b8ef6326cfc6c1edb122a050e8d0528e5112d5a21a7ed3c009ea1c56139a6a397593be0b483f669c7e7b1b"], 0x50}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockname$inet(r1, &(0x7f0000000180)={0x2, 0x0, @multicast1}, &(0x7f0000000300)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESHEX], 0x84}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r5) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESHEX=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b8000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x26, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000800000000000000ff070000184a000006000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b70800000e0005b832c14d901d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000001865000002000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000851000000400000018000000060000000000000000000080184200000400000000000000000000009500000000000000"], &(0x7f0000000980)='syzkaller\x00', 0x100, 0x95, &(0x7f00000009c0)=""/149, 0x41000, 0x62, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newqdisc={0xd0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xb}, {0x0, 0xfff3}}, [@TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x5, 0x40, 0x4a8, 0x0, 0x401, 0x8, 0xa}}, {0x18, 0x2, [0x0, 0x9, 0x9, 0x0, 0x2, 0x6fbc, 0x0, 0x40, 0xffff, 0x1]}}, {{0x1c, 0x1, {0x40, 0x0, 0xfff, 0x9f2, 0x2, 0x6, 0x0, 0x4}}, {0xc, 0x2, [0x40, 0x25c1, 0x5, 0x1]}}, {{0x1c, 0x1, {0x3, 0x30, 0x1, 0x3, 0x1, 0x3, 0xfffffff7, 0x3}}, {0xa, 0x2, [0xfffb, 0x2, 0x401]}}, {{0x1c, 0x1, {0xd7, 0x29, 0x1, 0x8, 0x2, 0xc6, 0x18f, 0x1}}, {0x6, 0x2, [0x4]}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000041}, 0x2400c0c0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0xb, 0xb}, {0x3, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33a34d5a, 0xfffffffe, 0x9, 0x2001, 0xffbfffff, 0xffff, 0x1, 0x7, 0x22}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) 2.340765825s ago: executing program 0 (id=1331): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e) shutdown(r1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4088, 0x995}, {&(0x7f00000014c0)=""/263, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 2.301662132s ago: executing program 2 (id=1332): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FITHAW(r0, 0xc0045878) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1008}, 0x4) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtclass={0xa0, 0x28, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x5, 0xd}, {0x1, 0x10}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xd2}}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x7, 0xfa}}, @tclass_kind_options=@c_qfq={{0x8}, {0x4c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x7}, @TCA_QFQ_LMAX={0x8, 0x2, 0x9}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xe}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xc}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3}]}}, @tclass_kind_options=@c_clsact={0xb}]}, 0xa0}}, 0x0) 1.560359858s ago: executing program 3 (id=1333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0xc0c0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x3, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33a34d5a, 0xfffffffe, 0x9, 0x2001, 0xffbfffff, 0xffff, 0x1, 0x7, 0x22}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100054ec6"}) 485.860826ms ago: executing program 0 (id=1334): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r1, &(0x7f0000000080)={{0x3, @null}, [@remote, @bcast, @rose, @bcast, @default, @netrom, @netrom, @rose]}, &(0x7f0000000100)=0x48, 0x80800) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x1, 0x12) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x84, 0x4a, 0x4, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x8, 0x0, 0x0, 0xb4d}, [@IFAL_ADDRESS={0x14, 0x1, @private1}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x84}}, 0x4090) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x4}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000440)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x5, 0x0, 0x7, 0x84100002, r5}) r6 = socket$inet6(0xa, 0x2, 0xfff) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffff, 0x1, 0x0, 0x0, [{{r3}, 0x400000000000000}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000500)={'veth0_virt_wifi\x00', 0x1000}) setsockopt$ax25_int(r6, 0x101, 0x8, &(0x7f0000000540)=0x10001, 0x4) r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14) r9 = accept$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000680)={"ad516f422d95d3870938f33bef66b667", 0x0, 0x0, {0xe33, 0x2}, {0x6, 0x4}, 0xe295000000000000, [0x1, 0x1, 0x967, 0xef1c, 0x4, 0x5, 0xffffffffffff4e12, 0x9, 0x0, 0x7, 0xfffffffffffffffb, 0x384, 0x4, 0x9, 0x1, 0x4]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000000780)={{r10}, r11, 0x18, @unused=[0x3, 0x70, 0x9, 0x7], @name="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"}) splice(r9, &(0x7f0000001780)=0x1, r10, &(0x7f00000017c0)=0x200, 0x0, 0x2) r12 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r12, &(0x7f0000001800)="31aafac42eab041b86423a34513ec305dbd62d1d537353934c30a80491", 0x1d, 0xd0bcc7fb8e844361, &(0x7f0000001840)={0xa, 0x4e23, 0x4, @private1, 0xba8}, 0x1c) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000001880), &(0x7f00000018c0)=0xc) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000001900), r13) r14 = epoll_create1(0x0) epoll_pwait(r14, &(0x7f0000001940)=[{}, {}], 0x2, 0x3, &(0x7f0000001980)={[0x9]}, 0x8) 436.012235ms ago: executing program 1 (id=1335): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @empty}, 0x4, 0x2, 0x0, 0x2, 0x0, 0x4}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "11a5fad5869e3823", "3f16d9b13ecd117d46b6e029b99fc8979080cc8426d7d3a99091b954a7bba786", "91e0c120", "b164e2faa30d3461"}, 0x38) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010002081000418e00000004fcff", 0x58}], 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0xfffffed3, &(0x7f0000000080)="6f6a2fb850f778f728600000000000000066c391597abac00030852f958fd0e1eb7bf353cb9ea6c6fc615c5142a60d925b275cf541e3e65a7c46a8016752d5a5b92b5feb923c287b76e95968e3d258527f60abf7c3534377133510f76aa72dd7a0199c40e3863147e012e92c2b21a48a50f82c38466d161bd33ce6e8b35c86099f16b858eeaaa9b2ca84c7bd6332b26e7c0be9c5901f6a51c569008e5d52877930d384b97891d9000000") 360.432ms ago: executing program 4 (id=1336): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6(0xa, 0x2, 0xffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000005c0)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x6, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r6, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r7, 0x3, 0x71061}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x800}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x24008044) 340.551566ms ago: executing program 1 (id=1337): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x6e6bb3, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1, @in=@dev}}]}, 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42118, 0x42002}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x665}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}]}, 0x48}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110aa000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r5 = accept$nfc_llcp(r2, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9800000010a6b4fe52ba004b25000000006122cb8659f1ab8b0000", @ANYRES32=0x0, @ANYBLOB="20000000000000007800128008000100767469006c0002800700030001000000080002000500000008000600000000000800060001000000080002000000000008000400ac1e0101080004006401010108000400ac141438080004007f00000108000500ffffffff08000400e000000208000500e000000108000500ffffffff"], 0x98}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9800000010a6b4fe52ba004b25000000006122cb8659f1ab8b0000", @ANYRES32=0x0, @ANYBLOB="20000000000000007800128008000100767469006c0002800700030001000000080002000500000008000600000000000800060001000000080002000000000008000400ac1e0101080004006401010108000400ac141438080004007f00000108000500ffffffff08000400e000000208000500e000000108000500ffffffff"], 0x98}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) (async) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) (async) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r7, 0x6, 0xd, &(0x7f0000000000), 0x4) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000140)) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15}, 0x18}}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15}, 0x18}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000300)={'erspan0\x00', r9, 0x8, 0x40, 0x6, 0x7, {{0x12, 0x4, 0x0, 0x6, 0x48, 0x65, 0x0, 0x1, 0x2f, 0x0, @empty, @local, {[@generic={0x88, 0xe, "7ac63728dd60d924ebc0195b"}, @rr={0x7, 0xf, 0x70, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x18}]}, @generic={0x86, 0xa, "504678fb787335af"}, @rr={0x7, 0xb, 0x8f, [@loopback, @multicast2]}, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000300)={'erspan0\x00', r9, 0x8, 0x40, 0x6, 0x7, {{0x12, 0x4, 0x0, 0x6, 0x48, 0x65, 0x0, 0x1, 0x2f, 0x0, @empty, @local, {[@generic={0x88, 0xe, "7ac63728dd60d924ebc0195b"}, @rr={0x7, 0xf, 0x70, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x18}]}, @generic={0x86, 0xa, "504678fb787335af"}, @rr={0x7, 0xb, 0x8f, [@loopback, @multicast2]}, @end]}}}}}) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e24, 0xfffffff5, @local, 0x5}}, 0x0, 0x0, 0x4e, 0x0, "ec54e3f64ac4a71b2818d48ea68b189fcbcc31d1a0a89d9d2377b28b0292bab5b2b90ae36780b17a02802e27b692d61349e6b546d79dfd0649497db69a4d134208d5abdf579b0921772bd1d5f4932c5a"}, 0xd8) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r8, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 321.637876ms ago: executing program 3 (id=1338): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x20, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@multicast2, @in=@broadcast, @in=@multicast2, @in=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602200000000e000a00140000000280", 0x2a}, {&(0x7f0000000400)="6a718e5e", 0x4}], 0x2}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfdef) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r8, 0x0) socket$netlink(0x10, 0x3, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) write$tun(r9, &(0x7f0000000200)={@void, @void, @ipv4=@tcp={{0x2b, 0x4, 0x0, 0x1f, 0x167, 0x68, 0x0, 0x5, 0x6, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0x97, 0x1, 0xc, [{@multicast2, 0x3ff}, {@rand_addr=0x64010102, 0x6}]}, @ssrr={0x89, 0x1b, 0xf5, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x26}]}, @rr={0x7, 0xf, 0x96, [@rand_addr=0x64010100, @multicast1, @loopback]}, @timestamp={0x44, 0x20, 0x33, 0x0, 0x7, [0xfffffff7, 0xad, 0xffffff03, 0x1, 0x9, 0x10000, 0xffff]}, @noop, @ssrr={0x89, 0xf, 0xb0, [@loopback, @multicast2, @broadcast]}, @timestamp={0x44, 0x28, 0x43, 0x0, 0x8, [0x5, 0x1, 0x0, 0x7fffffff, 0x4, 0x4, 0x6, 0xff, 0x7]}]}}, {{0x4e21, 0x4e23, r10, 0x41424344, 0x1, 0x0, 0x15, 0x17, 0x9, 0x0, 0x2, {[@mptcp=@add_addr={0x1e, 0xb, 0x0, 0xb, 0x80, @local, 0xff, "ec"}, @generic={0x2, 0xd, "a72ef5826db4370ec4348b"}, @md5sig={0x13, 0x12, "b6702fbcb5d0fd3b8f6991204b9f2a69"}, @mptcp=@mp_join={0x1e, 0x3}, @sack={0x5, 0x12, [0x8, 0x400, 0xfff, 0xb]}]}}, {"08d6b85541e0ac4ed88d20d56d97fd84fb178c86f79bda6a09f5d75825048f5ed96e09c5f9c2bb16b8531965dbc95a00751c1c681ba8b43ba4650c90fe5725dc39b0a87a31fff969f1051a6596159760b377072770fb5f0b4f033cf9e2de481585b66f57f9e9d8"}}}}, 0x167) syz_emit_ethernet(0x4e, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000aaaaaaaaaa53860000f900f500180600fe0700000000000000000000000000aafe800000000000aa00004e220000000000000000", @ANYRES32=r10, @ANYRES32=0x41424344, @ANYBLOB="60020000907800001e020000"], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 244.03186ms ago: executing program 2 (id=1339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r1], &(0x7f0000000300)='GPL\x00', 0x9, 0xc6, &(0x7f0000000340)=""/198}, 0x94) 243.567719ms ago: executing program 0 (id=1340): r0 = socket(0x2, 0x80805, 0x0) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x84, 0x1}], 0x10}}], 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}]}, 0x40}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7ff}]}, 0x34}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000000)=ANY=[], 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xa89, 0x0, 0x1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) 193.146225ms ago: executing program 4 (id=1341): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4180) r3 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000040), 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvmmsg(r4, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001340)=""/222, 0xde}], 0x1}}], 0x1, 0x40000123, 0x0) 118.521156ms ago: executing program 0 (id=1342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x800, 0x4) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2, @mcast1, 0x5, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000203030002000000000054c17d6419f3a3e90000000000000800010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c240e067407e3c2561b9ea88c009000000003030300000000000000"], 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 565.351µs ago: executing program 1 (id=1343): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0) (async) r2 = socket(0x14, 0x2, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000040)=0x2002044) (async) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) ioctl$SIOCX25GDTEFACILITIES(r2, 0x400261f2, &(0x7f00000000c0)) socket(0x29, 0x5, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) (async) r9 = socket(0x11, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r9, &(0x7f0000000280)={0x11, 0x0, r11, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) (async) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) sendmsg$netlink(r9, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d60be312a894a0ad8b1847ecd706f971fd8ba38e2dcccbc09c00b93e2aeacc7990627fd6245fa47050af6a89fdcca617eafe3ce72ea"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6bb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 3 (id=1344): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x4008000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x1, 0x1, 0x20, 0x67, 0x0, 0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x4, 0xad, 0x0, 0xf}]}}, {0x1e, 0x7, 0x0, @multicast1}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. [ 66.047494][ T5814] cgroup: Unknown subsys name 'net' [ 66.238752][ T5814] cgroup: Unknown subsys name 'cpuset' [ 66.247744][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.717377][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.182677][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.187426][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.196711][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.206559][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.215550][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.220288][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.226505][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.230433][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.245612][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.255666][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.261918][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.263451][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.277866][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.279120][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.287713][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.294599][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.300196][ T5151] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.307395][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.324784][ T5151] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.325743][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.332908][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.343634][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.353443][ T5151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.361197][ T5151] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.369008][ T5151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.941218][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 71.001269][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 71.192391][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 71.202951][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 71.264043][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.272171][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.280779][ T5841] bridge_slave_0: entered allmulticast mode [ 71.287984][ T5841] bridge_slave_0: entered promiscuous mode [ 71.339254][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.346960][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.354120][ T5841] bridge_slave_1: entered allmulticast mode [ 71.361481][ T5841] bridge_slave_1: entered promiscuous mode [ 71.396481][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 71.423639][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.430962][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.438997][ T5827] bridge_slave_0: entered allmulticast mode [ 71.446149][ T5827] bridge_slave_0: entered promiscuous mode [ 71.482111][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.488923][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.496232][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.503871][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.512654][ T5827] bridge_slave_1: entered allmulticast mode [ 71.520091][ T5827] bridge_slave_1: entered promiscuous mode [ 71.556383][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.563503][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.570788][ T5830] bridge_slave_0: entered allmulticast mode [ 71.577961][ T5830] bridge_slave_0: entered promiscuous mode [ 71.589084][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.632140][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.639465][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.647318][ T5830] bridge_slave_1: entered allmulticast mode [ 71.654379][ T5830] bridge_slave_1: entered promiscuous mode [ 71.664045][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.725089][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.739510][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.747043][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.754175][ T5824] bridge_slave_0: entered allmulticast mode [ 71.762124][ T5824] bridge_slave_0: entered promiscuous mode [ 71.796849][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.811048][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.818400][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.825651][ T5824] bridge_slave_1: entered allmulticast mode [ 71.832664][ T5824] bridge_slave_1: entered promiscuous mode [ 71.854681][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.866065][ T5841] team0: Port device team_slave_0 added [ 71.909385][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.919974][ T5841] team0: Port device team_slave_1 added [ 71.940563][ T5827] team0: Port device team_slave_0 added [ 71.961506][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.998160][ T5827] team0: Port device team_slave_1 added [ 72.004164][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.011984][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.019270][ T5826] bridge_slave_0: entered allmulticast mode [ 72.026590][ T5826] bridge_slave_0: entered promiscuous mode [ 72.037008][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.078380][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.085795][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.092947][ T5826] bridge_slave_1: entered allmulticast mode [ 72.100651][ T5826] bridge_slave_1: entered promiscuous mode [ 72.122433][ T5830] team0: Port device team_slave_0 added [ 72.129359][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.136716][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.163136][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.218867][ T5830] team0: Port device team_slave_1 added [ 72.226803][ T5824] team0: Port device team_slave_0 added [ 72.233399][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.240589][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.266734][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.278736][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.285855][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.312044][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.345839][ T5824] team0: Port device team_slave_1 added [ 72.356277][ T5844] Bluetooth: hci0: command tx timeout [ 72.356282][ T5834] Bluetooth: hci1: command tx timeout [ 72.360286][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.374794][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.401421][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.415125][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.427838][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.437314][ T5844] Bluetooth: hci3: command tx timeout [ 72.437412][ T5151] Bluetooth: hci4: command tx timeout [ 72.449022][ T5834] Bluetooth: hci2: command tx timeout [ 72.485416][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.492388][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.518752][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.547839][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.554813][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.581610][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.594375][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.601601][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.628089][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.639921][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.646979][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.673041][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.774187][ T5826] team0: Port device team_slave_0 added [ 72.782406][ T5826] team0: Port device team_slave_1 added [ 72.794078][ T5841] hsr_slave_0: entered promiscuous mode [ 72.801031][ T5841] hsr_slave_1: entered promiscuous mode [ 72.826352][ T5827] hsr_slave_0: entered promiscuous mode [ 72.832640][ T5827] hsr_slave_1: entered promiscuous mode [ 72.839745][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 72.845581][ T5827] Cannot create hsr debugfs directory [ 72.898135][ T5824] hsr_slave_0: entered promiscuous mode [ 72.904471][ T5824] hsr_slave_1: entered promiscuous mode [ 72.910772][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 72.916631][ T5824] Cannot create hsr debugfs directory [ 72.960078][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.967083][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.993590][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.006345][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.013302][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.039989][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.070799][ T5830] hsr_slave_0: entered promiscuous mode [ 73.077524][ T5830] hsr_slave_1: entered promiscuous mode [ 73.083524][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 73.089351][ T5830] Cannot create hsr debugfs directory [ 73.227522][ T5826] hsr_slave_0: entered promiscuous mode [ 73.233722][ T5826] hsr_slave_1: entered promiscuous mode [ 73.240656][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 73.247191][ T5826] Cannot create hsr debugfs directory [ 73.664188][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.677058][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.687636][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.707451][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.767540][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.787388][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.809102][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.819255][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.887125][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.903812][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.914074][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.924539][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.027020][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.044634][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.068093][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.105168][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.152512][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.191258][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.217616][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.242842][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.251086][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.262689][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.289536][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.296840][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.330932][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.338145][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.376861][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.422534][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.435460][ T5151] Bluetooth: hci1: command tx timeout [ 74.441256][ T5834] Bluetooth: hci0: command tx timeout [ 74.472458][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.492603][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.511700][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.516994][ T5834] Bluetooth: hci3: command tx timeout [ 74.524066][ T5151] Bluetooth: hci4: command tx timeout [ 74.530550][ T5151] Bluetooth: hci2: command tx timeout [ 74.541333][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.548521][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.557544][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.564632][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.608773][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.615944][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.632759][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.660494][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.667636][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.679584][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.686740][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.739448][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.746676][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.787962][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.849086][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.935824][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.942997][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.971924][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.003548][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.010847][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.092185][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.117753][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.254058][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.337710][ T5824] veth0_vlan: entered promiscuous mode [ 75.378748][ T5824] veth1_vlan: entered promiscuous mode [ 75.502738][ T5824] veth0_macvtap: entered promiscuous mode [ 75.537948][ T5824] veth1_macvtap: entered promiscuous mode [ 75.547931][ T5827] veth0_vlan: entered promiscuous mode [ 75.567006][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.589992][ T5827] veth1_vlan: entered promiscuous mode [ 75.632060][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.658153][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.669270][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.707250][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.762723][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.783511][ T5827] veth0_macvtap: entered promiscuous mode [ 75.795005][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.806795][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.844514][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.856208][ T5827] veth1_macvtap: entered promiscuous mode [ 75.937756][ T5830] veth0_vlan: entered promiscuous mode [ 75.952114][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.968866][ T5826] veth0_vlan: entered promiscuous mode [ 75.996974][ T5830] veth1_vlan: entered promiscuous mode [ 76.014437][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.033378][ T5826] veth1_vlan: entered promiscuous mode [ 76.052167][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.061854][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.072521][ T1118] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.083313][ T1118] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.105680][ T1118] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.115020][ T1118] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.162375][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.170918][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.221701][ T5830] veth0_macvtap: entered promiscuous mode [ 76.251837][ T5830] veth1_macvtap: entered promiscuous mode [ 76.264346][ T5826] veth0_macvtap: entered promiscuous mode [ 76.269404][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.312718][ T5826] veth1_macvtap: entered promiscuous mode [ 76.332594][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.360946][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.364563][ T5841] veth0_vlan: entered promiscuous mode [ 76.404098][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.419392][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.435163][ T5944] netlink: 'syz.3.4': attribute type 21 has an invalid length. [ 76.439629][ T5841] veth1_vlan: entered promiscuous mode [ 76.444714][ T5944] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.488132][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.499887][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.511735][ T1330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.522348][ T5834] Bluetooth: hci1: command tx timeout [ 76.527757][ T5151] Bluetooth: hci0: command tx timeout [ 76.539620][ T1330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.551712][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.595838][ T5834] Bluetooth: hci3: command tx timeout [ 76.596155][ T5151] Bluetooth: hci2: command tx timeout [ 76.601269][ T5834] Bluetooth: hci4: command tx timeout [ 76.620562][ T1330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.629937][ T1330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.653339][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.683428][ T5841] veth0_macvtap: entered promiscuous mode [ 76.700927][ T5947] x_tables: duplicate underflow at hook 1 [ 76.709939][ T5947] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.752463][ T1330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.754605][ T5950] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1'. [ 76.766111][ T1330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.792872][ T5841] veth1_macvtap: entered promiscuous mode [ 76.831114][ T1330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.863644][ T1330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.010686][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.031553][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.034266][ T5964] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10'. [ 77.077322][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.194483][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.233311][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.265454][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.274515][ T5971] openvswitch: netlink: Key type 31 is not supported [ 77.296652][ T1330] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.323480][ T1330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.374360][ T1330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.404842][ T1330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.465410][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.473301][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.602887][ T5977] vlan2: entered promiscuous mode [ 77.612455][ T5977] bond0: entered promiscuous mode [ 77.619996][ T5977] bond_slave_0: entered promiscuous mode [ 77.626377][ T5977] bond_slave_1: entered promiscuous mode [ 77.672724][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.682148][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.789098][ T5992] Zero length message leads to an empty skb [ 77.898327][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.937560][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.021290][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.054562][ T6001] netlink: 7 bytes leftover after parsing attributes in process `syz.0.17'. [ 78.063672][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.143149][ T6001] erspan0: entered promiscuous mode [ 78.173164][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.208019][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.249997][ T6006] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 78.264547][ T6006] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 78.475523][ T6012] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20'. [ 78.598182][ T5834] Bluetooth: hci1: command tx timeout [ 78.603640][ T5834] Bluetooth: hci0: command tx timeout [ 78.676132][ T5844] Bluetooth: hci4: command tx timeout [ 78.676363][ T5151] Bluetooth: hci3: command tx timeout [ 78.681596][ T5834] Bluetooth: hci2: command tx timeout [ 78.803758][ T6016] tun0: tun_chr_ioctl cmd 1074025675 [ 78.816076][ T6016] tun0: persist disabled [ 78.858814][ T6026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23'. [ 78.871765][ T6024] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 79.194484][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'. [ 79.411447][ T6046] netlink: 'syz.0.31': attribute type 61 has an invalid length. [ 79.437875][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.31'. [ 79.439100][ T6048] netlink: 'syz.1.33': attribute type 83 has an invalid length. [ 79.472897][ T6050] netlink: 'syz.2.32': attribute type 3 has an invalid length. [ 79.508031][ T6052] netlink: 'syz.2.32': attribute type 3 has an invalid length. [ 79.836030][ T6069] syz.2.38 uses obsolete (PF_INET,SOCK_PACKET) [ 79.849981][ T6072] netlink: 'syz.1.39': attribute type 2 has an invalid length. [ 80.445920][ T6099] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.520216][ T138] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.542462][ T6104] netlink: 'syz.1.49': attribute type 1 has an invalid length. [ 80.546208][ T138] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.569400][ T138] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.569556][ T6104] Cannot find add_set index 0 as target [ 80.579188][ T138] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.823267][ T6114] veth3: entered promiscuous mode [ 81.606206][ T6153] __nla_validate_parse: 6 callbacks suppressed [ 81.606223][ T6153] netlink: 116 bytes leftover after parsing attributes in process `syz.3.58'. [ 81.788076][ T6165] netlink: 'syz.0.61': attribute type 1 has an invalid length. [ 81.808469][ T6165] netlink: 'syz.0.61': attribute type 1 has an invalid length. [ 81.853063][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'. [ 81.937785][ T6165] vlan2: entered promiscuous mode [ 81.943043][ T6165] geneve1: entered promiscuous mode [ 81.949235][ T6165] vlan2: entered allmulticast mode [ 81.954528][ T6165] geneve1: entered allmulticast mode [ 81.972994][ T6172] warning: `syz.1.65' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.199956][ T6176] bond1 (unregistering): Released all slaves [ 82.312828][ T6179] ipvlan2: entered promiscuous mode [ 82.367651][ T6184] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 83.032035][ T6221] nft_compat: unsupported protocol 0 [ 83.149485][ T6230] netlink: 'syz.4.81': attribute type 1 has an invalid length. [ 83.202086][ T6234] netlink: 'syz.1.82': attribute type 21 has an invalid length. [ 83.217605][ T6230] bond1 (unregistering): Released all slaves [ 83.319648][ T6230] ip6tnl1: entered promiscuous mode [ 83.324909][ T6230] ip6tnl1: entered allmulticast mode [ 83.347362][ T6238] netlink: 'syz.1.82': attribute type 21 has an invalid length. [ 83.393454][ T6247] netlink: 'syz.3.86': attribute type 11 has an invalid length. [ 83.405018][ T6247] netlink: 'syz.3.86': attribute type 11 has an invalid length. [ 83.420432][ T6247] netlink: 224 bytes leftover after parsing attributes in process `syz.3.86'. [ 83.485383][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 83.682124][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'. [ 83.719615][ T6262] Cannot find set identified by id 0 to match [ 83.783758][ T6269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.941313][ T6277] Cannot find del_set index 0 as target [ 84.117818][ T6288] netlink: 'syz.0.99': attribute type 23 has an invalid length. [ 84.634681][ T6324] netlink: 84 bytes leftover after parsing attributes in process `syz.1.110'. [ 84.659194][ T6328] netlink: 16 bytes leftover after parsing attributes in process `syz.4.108'. [ 84.771529][ T6322] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 84.807963][ T6322] bond1 (unregistering): Released all slaves [ 84.821139][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 84.833217][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 84.839523][ T6341] netlink: 'syz.3.111': attribute type 1 has an invalid length. [ 84.842376][ T6340] netlink: 'syz.0.109': attribute type 14 has an invalid length. [ 84.857589][ T6340] netlink: 'syz.0.109': attribute type 13 has an invalid length. [ 84.875842][ T24] IPVS: starting estimator thread 0... [ 84.951867][ T6346] netlink: 'syz.3.112': attribute type 10 has an invalid length. [ 84.952395][ T6330] bond1 (unregistering): Released all slaves [ 84.995541][ T6342] IPVS: using max 34 ests per chain, 81600 per kthread [ 85.011868][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.020185][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.070201][ T6346] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.077507][ T6346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.085663][ T6346] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.092857][ T6346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.146667][ T6348] netlink: 32 bytes leftover after parsing attributes in process `syz.1.113'. [ 85.167792][ T6346] bridge0: entered promiscuous mode [ 85.184812][ T6346] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 85.420030][ T6367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.735620][ T6384] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 85.751698][ T6382] syzkaller1: entered allmulticast mode [ 85.999023][ T6352] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 86.153757][ T6410] ieee802154 phy0 wpan0: encryption failed: -22 [ 86.173271][ T6401] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.350783][ T6413] bond1: (slave veth3): Enslaving as an active interface with a down link [ 86.371332][ T6401] bond1: (slave veth0_to_bond): making interface the new active one [ 86.381686][ T6401] veth0_to_bond: entered promiscuous mode [ 86.388321][ T6401] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 86.440228][ T6426] Bluetooth: MGMT ver 1.23 [ 86.688967][ T6449] __nla_validate_parse: 8 callbacks suppressed [ 86.688984][ T6449] netlink: 132 bytes leftover after parsing attributes in process `syz.2.142'. [ 86.825588][ T6456] validate_nla: 6 callbacks suppressed [ 86.825603][ T6456] netlink: 'syz.0.145': attribute type 1 has an invalid length. [ 86.858772][ T10] cfg80211: failed to load regulatory.db [ 86.873625][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 87.046849][ T6472] netlink: 'syz.0.149': attribute type 1 has an invalid length. [ 87.140220][ T6476] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 87.150938][ T6476] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 87.163766][ T6476] bond2: (slave xfrm1): making interface the new active one [ 87.171915][ T6476] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 87.184721][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 87.286562][ T6472] bond2 (unregistering): (slave xfrm1): Releasing backup interface [ 87.308030][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 87.321932][ T6472] bond2 (unregistering): Released all slaves [ 87.331373][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 87.359914][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 87.394624][ T6487] netlink: 'syz.1.154': attribute type 4 has an invalid length. [ 87.531056][ T6497] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.157'. [ 87.543389][ T6496] netlink: 64 bytes leftover after parsing attributes in process `syz.1.158'. [ 87.576767][ T6496] netlink: 64 bytes leftover after parsing attributes in process `syz.1.158'. [ 87.619211][ T6499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.156'. [ 87.717832][ T6492] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 87.987111][ T6518] tipc: Started in network mode [ 87.992192][ T6518] tipc: Node identity 22e47b47503e, cluster identity 4711 [ 88.030970][ T6518] tipc: Enabled bearer , priority 0 [ 88.042097][ T6525] syzkaller0: entered promiscuous mode [ 88.044789][ T6522] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 88.048159][ T6525] syzkaller0: entered allmulticast mode [ 88.102133][ T6518] tipc: Resetting bearer [ 88.123701][ T6517] tipc: Resetting bearer [ 88.191989][ T6517] tipc: Disabling bearer [ 88.251676][ T6528] macsec1: entered promiscuous mode [ 88.662682][ T6553] syzkaller0: entered promiscuous mode [ 88.679490][ T6553] syzkaller0: entered allmulticast mode [ 89.065722][ T6583] netlink: 'syz.0.180': attribute type 6 has an invalid length. [ 89.718132][ T5151] Bluetooth: hci0: command tx timeout [ 90.024980][ T6621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.038187][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.103247][ T6638] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 90.135107][ T6638] bond1 (unregistering): Released all slaves [ 90.169453][ T6647] sctp: [Deprecated]: syz.4.195 (pid 6647) Use of int in maxseg socket option. [ 90.169453][ T6647] Use struct sctp_assoc_value instead [ 90.293485][ T6651] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 90.687878][ T5151] Bluetooth: hci4: command 0x0405 tx timeout [ 90.710848][ T6662] ip6gre1: entered allmulticast mode [ 90.748057][ T6675] netlink: 'syz.3.198': attribute type 3 has an invalid length. [ 90.844660][ T6677] : renamed from veth1_vlan (while UP) [ 91.870321][ T6731] __nla_validate_parse: 9 callbacks suppressed [ 91.870341][ T6731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.216'. [ 91.908915][ T6727] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 92.258669][ T6745] team_slave_0: entered promiscuous mode [ 92.264647][ T6745] team_slave_1: entered promiscuous mode [ 92.300904][ T6745] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 92.316562][ T6745] team0: Device macvtap1 is already an upper device of the team interface [ 92.379198][ T6745] team_slave_0: left promiscuous mode [ 92.384741][ T6745] team_slave_1: left promiscuous mode [ 92.442007][ T6755] vlan2: entered allmulticast mode [ 92.559466][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 92.808074][ T6779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.230'. [ 92.884945][ T6783] xt_ecn: cannot match TCP bits for non-tcp packets [ 92.900730][ T6788] xt_ecn: cannot match TCP bits for non-tcp packets [ 92.934150][ T6793] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.233'. [ 93.069426][ T6785] netlink: 84 bytes leftover after parsing attributes in process `syz.2.233'. [ 93.079535][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 93.105405][ T6785] netlink: 84 bytes leftover after parsing attributes in process `syz.2.233'. [ 93.187221][ T6803] bridge_slave_1: left allmulticast mode [ 93.202036][ T6803] bridge_slave_1: left promiscuous mode [ 93.225685][ T6803] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.239706][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'. [ 93.252024][ T6803] bridge_slave_0: left allmulticast mode [ 93.258452][ T6803] bridge_slave_0: left promiscuous mode [ 93.264373][ T6803] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.277728][ T30] audit: type=1800 audit(1762677910.792:2): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.239" name="memory.events" dev="tmpfs" ino=229 res=0 errno=0 [ 93.301078][ T30] audit: type=1804 audit(1762677910.812:3): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.239" name="/newroot/41/memory.events" dev="tmpfs" ino=229 res=1 errno=0 [ 93.342776][ T6813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.239'. [ 93.363527][ T6809] geneve2: entered promiscuous mode [ 93.520711][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 93.802938][ T1330] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.817056][ T6832] syzkaller1: entered allmulticast mode [ 94.126201][ T6848] tipc: Started in network mode [ 94.146284][ T6848] tipc: Node identity f27608474024, cluster identity 4711 [ 94.171137][ T6848] tipc: Enabled bearer , priority 0 [ 94.199979][ T6853] syzkaller0: entered promiscuous mode [ 94.220345][ T6853] syzkaller0: entered allmulticast mode [ 94.241133][ T6858] ksmbd: Unknown IPC event: 1, ignore. [ 94.283219][ T6848] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 94.370718][ T6848] tipc: Resetting bearer [ 94.399268][ T6848] tipc: Resetting bearer [ 94.417102][ T6848] tipc: Disabling bearer [ 94.486398][ T6875] erspan0: entered promiscuous mode [ 94.502006][ T6875] erspan0: entered allmulticast mode [ 94.540902][ T6871] tipc: Started in network mode [ 94.546100][ T6871] tipc: Node identity f2d04999bb45, cluster identity 4711 [ 94.553378][ T6871] tipc: Enabled bearer , priority 0 [ 94.575732][ T6870] tipc: Disabling bearer [ 95.249643][ T6913] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 95.274514][ T6913] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 96.731282][ T7004] sctp: [Deprecated]: syz.1.296 (pid 7004) Use of int in max_burst socket option deprecated. [ 96.731282][ T7004] Use struct sctp_assoc_value instead [ 97.005973][ T7021] __nla_validate_parse: 11 callbacks suppressed [ 97.005991][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'. [ 97.351734][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'. [ 97.376587][ T7044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.384263][ T7044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.597083][ T7044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.623313][ T7044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.855400][ T60] veth0_to_bond: left promiscuous mode [ 98.946084][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 99.187417][ T7113] netlink: 'syz.2.326': attribute type 1 has an invalid length. [ 99.271037][ T7125] tipc: Enabling of bearer rejected, media not registered [ 99.310747][ T7118] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.468667][ T7130] can: request_module (can-proto-0) failed. [ 99.515051][ T7141] Driver unsupported XDP return value 0 on prog (id 58) dev N/A, expect packet loss! [ 99.669749][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 99.811628][ T7159] netlink: 'syz.3.338': attribute type 1 has an invalid length. [ 99.828910][ T7159] netlink: 'syz.3.338': attribute type 3 has an invalid length. [ 99.847642][ T7159] netlink: 'syz.3.338': attribute type 7 has an invalid length. [ 99.860025][ T7159] netlink: 'syz.3.338': attribute type 8 has an invalid length. [ 99.868747][ T7159] netlink: 184 bytes leftover after parsing attributes in process `syz.3.338'. [ 99.927134][ T7159] NCSI netlink: No device for ifindex 131092 [ 99.982302][ T7166] netlink: 'syz.2.340': attribute type 1 has an invalid length. [ 100.068201][ T7166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.068691][ T7172] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 100.103272][ T7174] bond1: (slave veth0_to_bond): making interface the new active one [ 100.113052][ T7174] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 100.118693][ T7176] netlink: 32 bytes leftover after parsing attributes in process `syz.3.343'. [ 100.142452][ T7176] netlink: 32 bytes leftover after parsing attributes in process `syz.3.343'. [ 100.152751][ T7172] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 100.164167][ T7176] netlink: 32 bytes leftover after parsing attributes in process `syz.3.343'. [ 100.174621][ T7176] netlink: 32 bytes leftover after parsing attributes in process `syz.3.343'. [ 100.183747][ T7172] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 100.200499][ T7176] netlink: 32 bytes leftover after parsing attributes in process `syz.3.343'. [ 100.221475][ T7172] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 100.295550][ T7172] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 100.325370][ T7172] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 100.330331][ T7180] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 100.361917][ T7172] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 100.388823][ T7172] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 100.398970][ T7172] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 100.409310][ T7172] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 100.588429][ T7192] syzkaller0: entered promiscuous mode [ 100.593943][ T7192] syzkaller0: entered allmulticast mode [ 100.912205][ T7205] IPVS: length: 42 != 24 [ 102.265524][ T7236] netlink: 'syz.0.359': attribute type 3 has an invalid length. [ 102.385539][ T7248] __nla_validate_parse: 65 callbacks suppressed [ 102.385557][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 102.553250][ T7251] netlink: 92 bytes leftover after parsing attributes in process `syz.0.363'. [ 102.660007][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 102.683561][ T7259] netlink: 104 bytes leftover after parsing attributes in process `syz.2.366'. [ 102.693919][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.367'. [ 102.760619][ T7264] veth0: entered promiscuous mode [ 102.892778][ T7272] netlink: 'syz.0.370': attribute type 1 has an invalid length. [ 103.040141][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'. [ 103.156952][ T7266] bond2: (slave geneve2): making interface the new active one [ 103.228327][ T7266] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 103.278644][ T7263] veth0: left promiscuous mode [ 103.284951][ T1330] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 103.343133][ T1330] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 103.385521][ T1330] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 103.439430][ T1330] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 103.615096][ T7292] netlink: 'syz.2.378': attribute type 11 has an invalid length. [ 103.624273][ T7296] netlink: 20 bytes leftover after parsing attributes in process `syz.0.379'. [ 103.790208][ T7300] netlink: 'syz.2.381': attribute type 21 has an invalid length. [ 103.921718][ T7302] bond3 (unregistering): Released all slaves [ 103.922389][ T7311] netlink: 'syz.2.384': attribute type 30 has an invalid length. [ 103.967448][ T7311] bond2: option arp_missed_max: invalid value (0) [ 103.974055][ T7311] bond2: option arp_missed_max: allowed values 1 - 255 [ 103.991764][ T7311] bond2 (unregistering): Released all slaves [ 104.503740][ T7331] syz_tun: entered allmulticast mode [ 104.725586][ T7340] netlink: 'syz.1.391': attribute type 11 has an invalid length. [ 104.940211][ T7354] bridge_slave_0: invalid flags given to default FDB implementation [ 105.017609][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'. [ 105.463194][ T7387] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 105.538494][ T7389] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 105.550642][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.558962][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.601003][ T7389] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 105.635378][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 106.135122][ T7420] netlink: 68 bytes leftover after parsing attributes in process `syz.2.415'. [ 106.195057][ T7416] tipc: Enabled bearer , priority 0 [ 106.270003][ T7416] syzkaller0: entered promiscuous mode [ 106.285782][ T7429] net_ratelimit: 3528 callbacks suppressed [ 106.285799][ T7429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.300790][ T7416] syzkaller0: entered allmulticast mode [ 106.394192][ T7416] tipc: Resetting bearer [ 106.451748][ T138] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 106.473202][ T7441] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.419'. [ 107.247559][ T5935] tipc: Node number set to 1926921031 [ 107.450382][ T7467] netlink: 'syz.3.424': attribute type 10 has an invalid length. [ 107.712092][ T7416] tipc: Disabling bearer [ 107.765013][ T7466] vlan2: entered promiscuous mode [ 107.782455][ T7466] bridge0: entered promiscuous mode [ 107.864060][ T7467] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.881622][ T7467] bridge_slave_1: left allmulticast mode [ 107.883878][ T7483] netlink: 'syz.0.428': attribute type 1 has an invalid length. [ 107.887523][ T7467] bridge_slave_1: left promiscuous mode [ 107.887771][ T7467] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.947541][ T7467] bridge_slave_1: entered promiscuous mode [ 107.986048][ T7467] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 108.053492][ T7485] syzkaller0: entered promiscuous mode [ 108.059594][ T7485] syzkaller0: entered allmulticast mode [ 108.536515][ T7511] netlink: 'syz.3.436': attribute type 3 has an invalid length. [ 108.596170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.783319][ T7523] netlink: 'syz.4.438': attribute type 1 has an invalid length. [ 109.102270][ T7542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.443'. [ 109.343074][ T7555] syzkaller0: entered promiscuous mode [ 109.382159][ T7555] syzkaller0: entered allmulticast mode [ 109.388773][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 109.420715][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'. [ 109.445101][ T7555] tipc: Enabled bearer , priority 0 [ 109.488609][ T7555] tipc: Resetting bearer [ 109.567253][ T7551] tipc: Resetting bearer [ 109.663489][ T7551] tipc: Disabling bearer [ 109.733588][ T7585] Bluetooth: MGMT ver 1.23 [ 109.964831][ T7600] netlink: 'syz.1.461': attribute type 1 has an invalid length. [ 110.052765][ T7600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.119642][ T7604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.134754][ T7604] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 110.146423][ T7604] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 110.301083][ T7600] veth3: entered promiscuous mode [ 110.318922][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.467'. [ 110.333230][ T7600] bond1: (slave veth3): Enslaving as an active interface with a down link [ 110.385643][ T7618] vlan2: entered allmulticast mode [ 110.390988][ T7618] bond1: entered allmulticast mode [ 110.486172][ T7614] syzkaller0: entered promiscuous mode [ 110.496770][ T7614] syzkaller0: entered allmulticast mode [ 110.631423][ T7643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.723929][ T7622] netlink: 'syz.3.467': attribute type 1 has an invalid length. [ 110.731511][ T7647] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 110.733550][ T7622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.040833][ T7665] netlink: 'syz.4.477': attribute type 39 has an invalid length. [ 111.129104][ T7669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.479'. [ 111.141808][ T7667] netlink: 220 bytes leftover after parsing attributes in process `syz.2.478'. [ 111.168310][ T7667] netlink: 220 bytes leftover after parsing attributes in process `syz.2.478'. [ 111.180491][ T7667] netlink: 56 bytes leftover after parsing attributes in process `syz.2.478'. [ 111.258231][ T10] IPVS: starting estimator thread 0... [ 111.356307][ T7678] IPVS: using max 27 ests per chain, 64800 per kthread [ 111.485557][ T7689] tipc: Enabled bearer , priority 0 [ 111.509011][ T7689] syzkaller0: entered promiscuous mode [ 111.531872][ T7689] syzkaller0: entered allmulticast mode [ 111.603331][ T7689] tipc: Resetting bearer [ 111.620866][ T7684] tipc: Resetting bearer [ 111.645589][ T7684] tipc: Disabling bearer [ 111.666020][ T7698] ip6tnl0: entered allmulticast mode [ 111.784210][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.491'. [ 111.854313][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'. [ 111.958735][ T7710] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.975677][ T7704] openvswitch: netlink: Flow actions attr not present in new flow. [ 112.028070][ T7711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.035771][ T7711] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 112.048874][ T7711] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 112.106116][ T7715] syzkaller0: entered promiscuous mode [ 112.147439][ T7715] syzkaller0: entered allmulticast mode [ 112.223045][ T7721] netlink: 'syz.2.496': attribute type 10 has an invalid length. [ 112.287426][ T7721] veth1_macvtap: left promiscuous mode [ 113.091209][ T7769] syzkaller0: entered promiscuous mode [ 113.097150][ T7769] syzkaller0: entered allmulticast mode [ 113.181341][ T7775] openvswitch: netlink: Actions may not be safe on all matching packets [ 113.214739][ T7769] netlink: 'syz.4.508': attribute type 1 has an invalid length. [ 113.360680][ T7784] netlink: 'syz.1.514': attribute type 2 has an invalid length. [ 113.846521][ T7813] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 114.106436][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.114065][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.220682][ T7817] bridge_slave_0: left allmulticast mode [ 114.227154][ T7817] bridge_slave_0: left promiscuous mode [ 114.233479][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.248408][ T7817] bridge_slave_1: left allmulticast mode [ 114.254155][ T7817] bridge_slave_1: left promiscuous mode [ 114.260737][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.272919][ T7817] bond1: (slave veth0_to_bond): Releasing active interface [ 114.285097][ T7817] bond0: (slave bond_slave_0): Releasing backup interface [ 114.300202][ T7817] bond0: (slave bond_slave_1): Releasing backup interface [ 114.316949][ T7817] team0: Port device team_slave_0 removed [ 114.329282][ T7817] team0: Port device team_slave_1 removed [ 114.358755][ T7817] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 114.399134][ T7829] : entered promiscuous mode [ 114.422923][ T7840] smc: net device vcan0 applied user defined pnetid SYZ1 [ 114.609589][ T7848] __nla_validate_parse: 4 callbacks suppressed [ 114.609607][ T7848] netlink: 45 bytes leftover after parsing attributes in process `syz.3.534'. [ 114.805982][ T7858] netlink: 'syz.0.537': attribute type 29 has an invalid length. [ 114.911115][ T7864] netlink: 32 bytes leftover after parsing attributes in process `syz.0.537'. [ 114.984159][ T7859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.016811][ T7859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.061797][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 115.101443][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 115.197351][ T7859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.239408][ T7859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.283001][ T7881] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.543'. [ 115.307708][ T7885] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.543'. [ 115.352029][ T7881] openvswitch: netlink: Missing key (keys=40, expected=100) [ 115.370940][ T7859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.376381][ T7885] openvswitch: netlink: Missing key (keys=40, expected=100) [ 115.392989][ T7859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.485484][ T7894] netlink: 'syz.4.548': attribute type 9 has an invalid length. [ 115.505493][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'. [ 115.573998][ T7859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.588473][ T7859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.704817][ T50] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.732633][ T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.772120][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.554'. [ 115.802457][ T7911] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.836027][ T50] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.844246][ T50] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.854541][ T7918] netlink: 'syz.1.554': attribute type 8 has an invalid length. [ 115.945061][ T50] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.956100][ T138] wlan1: Trigger new scan to find an IBSS to join [ 115.959380][ T50] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.046090][ T138] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.059015][ T138] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.304085][ T7949] netlink: 576 bytes leftover after parsing attributes in process `syz.4.562'. [ 116.452102][ T7953] netlink: 124 bytes leftover after parsing attributes in process `syz.1.563'. [ 117.518637][ T8017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.586767][ T8018] bridge1: entered promiscuous mode [ 117.598319][ T8018] bridge1: entered allmulticast mode [ 117.752438][ T8032] bridge_slave_1: left allmulticast mode [ 117.788367][ T8032] bridge_slave_1: left promiscuous mode [ 117.807485][ T8032] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.817665][ T8032] bridge_slave_0: left promiscuous mode [ 117.823457][ T8032] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.848837][ T8038] Cannot find add_set index 0 as target [ 117.994905][ T8044] netlink: 'syz.1.588': attribute type 4 has an invalid length. [ 118.058203][ T8046] sctp: [Deprecated]: syz.3.591 (pid 8046) Use of int in max_burst socket option. [ 118.058203][ T8046] Use struct sctp_assoc_value instead [ 118.084306][ T8046] netlink: 'syz.3.591': attribute type 1 has an invalid length. [ 118.104399][ T8046] NCSI netlink: No device for ifindex 0 [ 118.212567][ T8049] bridge_slave_1: left allmulticast mode [ 118.218382][ T8049] bridge_slave_1: left promiscuous mode [ 118.224173][ T8049] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.265600][ T8049] bridge_slave_0: left allmulticast mode [ 118.274170][ T8049] bridge_slave_0: left promiscuous mode [ 118.308501][ T8049] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.746690][ T8093] tipc: MTU too low for tipc bearer [ 118.759813][ T8093] tipc: MTU too low for tipc bearer [ 119.569491][ T8143] xt_hashlimit: invalid interval [ 119.772825][ T8157] __nla_validate_parse: 11 callbacks suppressed [ 119.772844][ T8157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.618'. [ 119.888544][ T8164] x_tables: duplicate underflow at hook 1 [ 119.893588][ T8165] netlink: 68 bytes leftover after parsing attributes in process `syz.1.620'. [ 119.933052][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.621'. [ 120.041370][ T8167] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 120.083918][ T8167] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 120.191540][ T8175] macvlan2: entered promiscuous mode [ 120.213239][ T8175] macvlan2: entered allmulticast mode [ 120.226671][ T8175] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 120.507224][ T8212] x_tables: duplicate entry at hook 1 [ 120.539214][ T8212] netlink: 'syz.0.625': attribute type 1 has an invalid length. [ 120.598098][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 120.782085][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.629'. [ 120.804794][ T8212] 8021q: adding VLAN 0 to HW filter on device bond4 [ 120.983876][ T8233] xt_l2tp: v2 doesn't support IP mode [ 121.007370][ T12] wlan1: Trigger new scan to find an IBSS to join [ 121.103656][ T8225] team0 (unregistering): Port device team_slave_0 removed [ 121.118820][ T8225] team0 (unregistering): Port device team_slave_1 removed [ 121.150575][ T8236] netlink: 240 bytes leftover after parsing attributes in process `syz.2.632'. [ 122.290053][ T12] wlan1: Creating new IBSS network, BSSID d2:66:05:1c:5f:83 [ 122.428520][ T8299] x_tables: duplicate underflow at hook 3 [ 122.571642][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'. [ 122.818369][ T8325] netlink: 'syz.2.656': attribute type 10 has an invalid length. [ 122.866316][ T8325] bond0: (slave wg0): The slave device specified does not support setting the MAC address [ 122.913841][ T8329] x_tables: duplicate underflow at hook 2 [ 122.920565][ T8325] bond0: (slave wg0): Error -95 calling set_mac_address [ 122.969185][ T8329] vlan2: entered promiscuous mode [ 122.974392][ T8329] bridge0: entered promiscuous mode [ 123.174893][ T8348] netlink: 412 bytes leftover after parsing attributes in process `syz.1.661'. [ 123.183061][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 123.194770][ T8344] netlink: 104 bytes leftover after parsing attributes in process `syz.2.662'. [ 123.308972][ T8357] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 123.704367][ T8390] netlink: 'syz.2.673': attribute type 1 has an invalid length. [ 123.954664][ T8406] tipc: Enabling of bearer rejected, failed to enable media [ 124.092008][ T8413] IPVS: set_ctl: invalid protocol: 81 172.20.20.19:20002 [ 124.174329][ T8417] syzkaller1: entered promiscuous mode [ 124.182240][ T8417] syzkaller1: entered allmulticast mode [ 124.845005][ T8453] __nla_validate_parse: 5 callbacks suppressed [ 124.845021][ T8453] netlink: 36 bytes leftover after parsing attributes in process `syz.0.692'. [ 124.929472][ T8457] netlink: 'syz.0.692': attribute type 1 has an invalid length. [ 124.948660][ T8454] netlink: 'syz.0.692': attribute type 1 has an invalid length. [ 124.986174][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'. [ 125.021287][ T8454] netlink: 1 bytes leftover after parsing attributes in process `syz.0.692'. [ 125.454788][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 125.471284][ T8494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.702'. [ 125.645998][ T8502] tipc: Enabling of bearer rejected, failed to enable media [ 125.883055][ T8519] netlink: 'syz.4.711': attribute type 1 has an invalid length. [ 126.044251][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 126.048105][ T8528] bond2: (slave bridge0): making interface the new active one [ 126.087710][ T8528] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 127.081833][ T8551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.230331][ T8544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.292378][ T8544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.442187][ T8566] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.455477][ T8567] netlink: 'syz.4.722': attribute type 16 has an invalid length. [ 127.487524][ T8567] netlink: 'syz.4.722': attribute type 17 has an invalid length. [ 127.565609][ T8567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.609479][ T8569] batadv1: entered allmulticast mode [ 127.816939][ T8588] netlink: 60 bytes leftover after parsing attributes in process `syz.1.731'. [ 128.262240][ T8610] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 128.413971][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 128.872500][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'. [ 128.928414][ T8639] tipc: Enabled bearer , priority 0 [ 128.997607][ T8639] tipc: Disabling bearer [ 129.178214][ T8664] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 129.664675][ T8701] can: request_module (can-proto-0) failed. [ 129.728033][ T8705] erspan0: left promiscuous mode [ 129.743542][ T8705] erspan0: left allmulticast mode [ 130.178427][ T8705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.199790][ T8705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.486000][ T8705] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 130.610149][ T8724] syzkaller1: entered promiscuous mode [ 130.623522][ T8724] syzkaller1: entered allmulticast mode [ 130.631540][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.684804][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.700740][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.844457][ T8753] xt_TCPMSS: Only works on TCP SYN packets [ 130.942385][ T8756] tipc: Enabled bearer , priority 0 [ 130.960453][ T8756] syzkaller0: entered promiscuous mode [ 130.972952][ T8756] syzkaller0: entered allmulticast mode [ 131.009149][ T8756] tipc: Resetting bearer [ 131.014498][ T8765] openvswitch: netlink: Missing key (keys=40, expected=80) [ 131.031603][ T8763] netlink: 'syz.4.778': attribute type 39 has an invalid length. [ 131.045696][ T8755] tipc: Resetting bearer [ 131.072269][ T8755] tipc: Disabling bearer [ 131.139756][ T8770] netlink: 40 bytes leftover after parsing attributes in process `syz.0.782'. [ 131.201555][ T8772] netlink: 44 bytes leftover after parsing attributes in process `syz.3.783'. [ 131.247480][ T8779] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 131.266907][ T8778] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 131.318740][ T8784] netlink: 48 bytes leftover after parsing attributes in process `syz.1.788'. [ 131.438224][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.789'. [ 131.518251][ T8793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.578417][ T8806] netlink: 'syz.2.795': attribute type 10 has an invalid length. [ 131.663703][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'. [ 131.729478][ T8806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.795'. [ 131.786206][ T8817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.796'. [ 131.938698][ T8823] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.147695][ T8832] xt_policy: output policy not valid in PREROUTING and INPUT [ 132.180474][ T8839] : renamed from bridge_slave_0 (while UP) [ 132.256243][ T8851] tipc: Started in network mode [ 132.273832][ T8851] tipc: Node identity 06bb080b9703, cluster identity 4711 [ 132.292175][ T8851] tipc: Enabled bearer , priority 0 [ 132.335515][ T8855] syzkaller0: entered promiscuous mode [ 132.374539][ T8855] syzkaller0: entered allmulticast mode [ 132.403266][ T8877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.808'. [ 132.413237][ T8880] netlink: 72 bytes leftover after parsing attributes in process `syz.1.811'. [ 132.427579][ T8851] tipc: Resetting bearer [ 132.436593][ T8874] netlink: 'syz.2.810': attribute type 1 has an invalid length. [ 132.454564][ T8848] tipc: Resetting bearer [ 132.497648][ T8881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.812'. [ 132.517485][ T8848] tipc: Disabling bearer [ 132.706383][ T8899] netlink: 'syz.1.814': attribute type 1 has an invalid length. [ 132.746008][ T8901] syzkaller0: entered promiscuous mode [ 132.751798][ T8901] syzkaller0: entered allmulticast mode [ 132.767094][ T8903] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 132.789175][ T8899] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 132.830016][ T8900] netlink: 'syz.3.816': attribute type 153 has an invalid length. [ 132.923196][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.001764][ T8915] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 134.617870][ T8980] nbd: must specify an index to disconnect [ 134.628077][ T8982] syzkaller0: entered promiscuous mode [ 134.633903][ T8982] syzkaller0: entered allmulticast mode [ 134.851094][ T8995] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 134.863105][ T8995] bond3 (unregistering): Released all slaves [ 134.961240][ T9000] tipc: Enabled bearer , priority 0 [ 134.969046][ T9000] syzkaller0: entered promiscuous mode [ 134.974571][ T9000] syzkaller0: entered allmulticast mode [ 134.998853][ T9000] tipc: Resetting bearer [ 135.009958][ T8999] tipc: Resetting bearer [ 135.029547][ T8999] tipc: Disabling bearer [ 135.326396][ T9021] netlink: 'syz.2.853': attribute type 1 has an invalid length. [ 135.429437][ T9027] netlink: 'syz.0.851': attribute type 8 has an invalid length. [ 135.463487][ T9029] bond4: (slave gretap1): making interface the new active one [ 135.503354][ T9029] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 135.526205][ T9035] tipc: Enabled bearer , priority 0 [ 135.534055][ T9035] syzkaller0: entered promiscuous mode [ 135.539660][ T9035] syzkaller0: entered allmulticast mode [ 135.568537][ T9034] tipc: Resetting bearer [ 135.671648][ T9034] tipc: Disabling bearer [ 135.794679][ T9050] tipc: Enabled bearer , priority 0 [ 135.812191][ T9050] syzkaller0: entered promiscuous mode [ 135.820088][ T9050] syzkaller0: entered allmulticast mode [ 135.840518][ T9050] tipc: Resetting bearer [ 135.850520][ T9047] tipc: Resetting bearer [ 135.867823][ T9047] tipc: Disabling bearer [ 136.114647][ T9073] lo: entered promiscuous mode [ 136.126361][ T9073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.176252][ T9078] __nla_validate_parse: 13 callbacks suppressed [ 136.176271][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.869'. [ 136.246243][ T9083] sctp: [Deprecated]: syz.4.872 (pid 9083) Use of int in maxseg socket option. [ 136.246243][ T9083] Use struct sctp_assoc_value instead [ 136.321286][ T9091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.872'. [ 136.417220][ T9095] tipc: Enabled bearer , priority 0 [ 136.424954][ T9095] syzkaller0: entered promiscuous mode [ 136.431491][ T9095] syzkaller0: entered allmulticast mode [ 136.454164][ T9095] tipc: Resetting bearer [ 136.461918][ T9094] tipc: Resetting bearer [ 136.487295][ T9094] tipc: Disabling bearer [ 136.583827][ T9105] 0: reclassify loop, rule prio 0, protocol 800 [ 136.968106][ T9127] netlink: 'syz.0.885': attribute type 1 has an invalid length. [ 137.242781][ T9143] netlink: 'syz.1.889': attribute type 12 has an invalid length. [ 137.276732][ T9142] syzkaller0: entered promiscuous mode [ 137.282233][ T9142] syzkaller0: entered allmulticast mode [ 137.505073][ T9154] syzkaller0: entered promiscuous mode [ 137.528383][ T9154] syzkaller0: entered allmulticast mode [ 137.653347][ T9165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.069345][ T9178] netlink: 204 bytes leftover after parsing attributes in process `syz.4.900'. [ 138.099398][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 139.128817][ T9176] syzkaller1: entered promiscuous mode [ 139.134691][ T9176] syzkaller1: entered allmulticast mode [ 139.149634][ T9187] pim6reg: entered allmulticast mode [ 139.374167][ T9207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.404791][ T9206] veth5: entered allmulticast mode [ 139.611235][ T9227] tipc: Enabled bearer , priority 0 [ 139.627739][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.916'. [ 139.638385][ T9227] syzkaller0: entered promiscuous mode [ 139.675315][ T9227] syzkaller0: entered allmulticast mode [ 139.722644][ T9238] netlink: 1 bytes leftover after parsing attributes in process `syz.1.918'. [ 139.723963][ T9227] tipc: Resetting bearer [ 139.742301][ T9226] tipc: Resetting bearer [ 139.765572][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.918'. [ 139.792852][ T9226] tipc: Disabling bearer [ 140.325621][ T9290] netlink: 44 bytes leftover after parsing attributes in process `syz.3.932'. [ 140.358694][ T9291] netlink: 64 bytes leftover after parsing attributes in process `syz.3.932'. [ 140.453648][ T9298] netlink: 'syz.1.935': attribute type 1 has an invalid length. [ 140.573556][ T9308] netlink: 596 bytes leftover after parsing attributes in process `syz.0.938'. [ 140.587150][ T9306] bond0: (slave bond_slave_0): Releasing backup interface [ 140.604762][ T9306] bond0: (slave bond_slave_1): Releasing backup interface [ 140.631917][ T9306] team0: Port device team_slave_0 removed [ 140.666792][ T9306] team0: Port device team_slave_1 removed [ 140.682317][ T9306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.702224][ T9306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.714440][ T9306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.727186][ T9306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.738301][ T9306] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 140.811461][ T9325] netlink: 'syz.0.942': attribute type 5 has an invalid length. [ 140.953185][ T9339] sctp: [Deprecated]: syz.0.945 (pid 9339) Use of int in max_burst socket option. [ 140.953185][ T9339] Use struct sctp_assoc_value instead [ 141.214204][ T9358] __nla_validate_parse: 1 callbacks suppressed [ 141.214222][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.952'. [ 141.307755][ T9364] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 141.322351][ T9364] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 141.666721][ T9377] tipc: Enabled bearer , priority 0 [ 141.684775][ T9377] syzkaller0: entered promiscuous mode [ 141.695834][ T9377] syzkaller0: entered allmulticast mode [ 141.736127][ T9386] netlink: 'syz.1.962': attribute type 83 has an invalid length. [ 141.777096][ T9377] tipc: Resetting bearer [ 141.787212][ T9373] tipc: Resetting bearer [ 141.810621][ T9373] tipc: Disabling bearer [ 141.846671][ T9392] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 142.032921][ T9405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.970'. [ 142.065456][ T9405] netlink: 60 bytes leftover after parsing attributes in process `syz.0.970'. [ 142.077820][ T9405] netlink: 60 bytes leftover after parsing attributes in process `syz.0.970'. [ 142.307129][ T9423] netlink: 56 bytes leftover after parsing attributes in process `syz.2.976'. [ 142.339882][ T9423] tipc: Cannot configure node identity twice [ 142.354098][ T9433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.979'. [ 142.468959][ T9434] macsec2: entered promiscuous mode [ 142.491691][ T9444] Bluetooth: MGMT ver 1.23 [ 142.498778][ T9434] macsec2: entered allmulticast mode [ 142.504974][ T9434] bond3: (slave macsec2): Error -34 calling dev_set_mtu [ 142.708588][ T9458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.118414][ T9489] netlink: 'syz.3.994': attribute type 32 has an invalid length. [ 143.352399][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1000'. [ 143.390641][ T9504] netlink: 'syz.2.1000': attribute type 1 has an invalid length. [ 143.418212][ T9504] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1000'. [ 143.586856][ T9521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1006'. [ 143.622458][ T9521] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.644388][ T9518] netlink: 'syz.4.1001': attribute type 83 has an invalid length. [ 143.655630][ T9521] netlink: 'syz.3.1006': attribute type 5 has an invalid length. [ 143.981680][ T9540] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1011'. [ 144.085806][ T9541] veth7: entered allmulticast mode [ 144.321762][ T9561] netlink: 'syz.3.1016': attribute type 21 has an invalid length. [ 144.607848][ T9585] netlink: 'syz.4.1022': attribute type 4 has an invalid length. [ 144.628990][ T9585] tipc: Can't bind to reserved service type 2 [ 144.676290][ T9596] syzkaller0: entered promiscuous mode [ 144.681940][ T9596] syzkaller0: entered allmulticast mode [ 144.806987][ T9604] netlink: 'syz.3.1023': attribute type 7 has an invalid length. [ 144.933358][ T9603] netlink: 'syz.2.1025': attribute type 4 has an invalid length. [ 145.598056][ T30] audit: type=1800 audit(1762677963.122:4): pid=9626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1028" name="memory.events" dev="tmpfs" ino=999 res=0 errno=0 [ 145.642132][ T9653] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.651299][ T9653] bond0: (slave bond3): Enslaving as an active interface with an up link [ 145.676289][ T9653] netlink: 'syz.1.1039': attribute type 29 has an invalid length. [ 146.304293][ T9694] netlink: 'syz.2.1049': attribute type 1 has an invalid length. [ 146.336421][ T9698] openvswitch: netlink: IP tunnel dst address not specified [ 146.356147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.785010][ T9721] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 146.803508][ T9721] __nla_validate_parse: 5 callbacks suppressed [ 146.803525][ T9721] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1055'. [ 147.030408][ T9732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1059'. [ 147.247201][ T9748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1065'. [ 147.278868][ T9752] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.394975][ T9760] tipc: Enabled bearer , priority 0 [ 147.475631][ T9765] syzkaller0: entered promiscuous mode [ 147.485387][ T9765] syzkaller0: entered allmulticast mode [ 147.503218][ T9767] syzkaller0: entered promiscuous mode [ 147.510025][ T9767] syzkaller0: entered allmulticast mode [ 147.541498][ T9760] FAULT_INJECTION: forcing a failure. [ 147.541498][ T9760] name failslab, interval 1, probability 0, space 0, times 1 [ 147.575006][ T9760] CPU: 1 UID: 0 PID: 9760 Comm: syz.3.1069 Not tainted syzkaller #0 PREEMPT(full) [ 147.575038][ T9760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 147.575055][ T9760] Call Trace: [ 147.575062][ T9760] [ 147.575070][ T9760] dump_stack_lvl+0x189/0x250 [ 147.575105][ T9760] ? __pfx____ratelimit+0x10/0x10 [ 147.575127][ T9760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.575150][ T9760] ? __pfx__printk+0x10/0x10 [ 147.575171][ T9760] ? __pfx___might_resched+0x10/0x10 [ 147.575193][ T9760] should_fail_ex+0x414/0x560 [ 147.575219][ T9760] should_failslab+0xa8/0x100 [ 147.575236][ T9760] __kmalloc_noprof+0xcb/0x7f0 [ 147.575258][ T9760] ? kfree+0x4d/0x6d0 [ 147.575274][ T9760] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 147.575306][ T9760] tomoyo_realpath_from_path+0xe3/0x5d0 [ 147.575332][ T9760] ? tomoyo_domain+0xd9/0x130 [ 147.575354][ T9760] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 147.575376][ T9760] tomoyo_path_number_perm+0x1e8/0x5a0 [ 147.575400][ T9760] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 147.575463][ T9760] ? __fget_files+0x2a/0x420 [ 147.575484][ T9760] ? __fget_files+0x3a0/0x420 [ 147.575499][ T9760] ? __fget_files+0x2a/0x420 [ 147.575519][ T9760] security_file_ioctl+0xcb/0x2d0 [ 147.575541][ T9760] __se_sys_ioctl+0x47/0x170 [ 147.575564][ T9760] do_syscall_64+0xfa/0xfa0 [ 147.575585][ T9760] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.575607][ T9760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.575624][ T9760] ? clear_bhb_loop+0x60/0xb0 [ 147.575644][ T9760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.575661][ T9760] RIP: 0033:0x7f0be2b8f6c9 [ 147.575684][ T9760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.575698][ T9760] RSP: 002b:00007f0be3ab1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.575717][ T9760] RAX: ffffffffffffffda RBX: 00007f0be2de5fa0 RCX: 00007f0be2b8f6c9 [ 147.575730][ T9760] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 147.575741][ T9760] RBP: 00007f0be3ab1090 R08: 0000000000000000 R09: 0000000000000000 [ 147.575752][ T9760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.575762][ T9760] R13: 00007f0be2de6038 R14: 00007f0be2de5fa0 R15: 00007ffeef015658 [ 147.575793][ T9760] [ 147.806279][ T9760] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.827672][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'. [ 147.831445][ T9760] tipc: Resetting bearer [ 147.848423][ T9759] tipc: Resetting bearer [ 147.860780][ T9759] tipc: Disabling bearer [ 147.897723][ T9778] syzkaller0: entered allmulticast mode [ 147.951642][ T9780] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1076'. [ 148.009027][ T9782] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1075'. [ 148.201824][ T9807] netlink: 'syz.2.1084': attribute type 10 has an invalid length. [ 148.233820][ T9808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1080'. [ 148.242553][ T9810] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1085'. [ 148.310063][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1083'. [ 148.455903][ T9821] tipc: Enabled bearer , priority 0 [ 148.464616][ T9821] syzkaller0: entered promiscuous mode [ 148.471655][ T9821] syzkaller0: entered allmulticast mode [ 148.491244][ T9822] tipc: Enabled bearer , priority 0 [ 148.512385][ T9821] tipc: Resetting bearer [ 148.520971][ T9822] syzkaller0: entered promiscuous mode [ 148.532204][ T9822] syzkaller0: entered allmulticast mode [ 148.577353][ T9820] tipc: Resetting bearer [ 148.592607][ T9820] tipc: Disabling bearer [ 148.602663][ T9831] netlink: 'syz.1.1090': attribute type 29 has an invalid length. [ 148.663351][ T9822] tipc: Resetting bearer [ 148.666410][ T9833] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1090'. [ 148.679088][ T9831] netlink: 'syz.1.1090': attribute type 29 has an invalid length. [ 148.704015][ T9819] tipc: Resetting bearer [ 148.755140][ T9819] tipc: Disabling bearer [ 148.789333][ T9838] vlan2: entered promiscuous mode [ 148.808605][ T9838] bond0: entered promiscuous mode [ 148.814577][ T9838] bond0: (slave vlan2): Opening slave failed [ 148.900341][ T9850] openvswitch: netlink: Flow actions attr not present in new flow. [ 148.996429][ T9854] syzkaller0: entered promiscuous mode [ 149.008038][ T9854] syzkaller0: entered allmulticast mode [ 149.113723][ T9867] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 149.138725][ T9865] tipc: Enabled bearer , priority 0 [ 149.157739][ T9865] syzkaller0: entered promiscuous mode [ 149.163249][ T9865] syzkaller0: entered allmulticast mode [ 149.221423][ T9865] tipc: Resetting bearer [ 149.239750][ T9864] tipc: Resetting bearer [ 149.275751][ T9864] tipc: Disabling bearer [ 149.358327][ T9875] bond5 (unregistering): Released all slaves [ 149.467815][ T9887] netlink: 'syz.0.1109': attribute type 28 has an invalid length. [ 149.481890][ T9887] netlink: 'syz.0.1109': attribute type 3 has an invalid length. [ 149.492514][ T9885] tipc: Enabled bearer , priority 0 [ 149.504148][ T9885] syzkaller0: entered promiscuous mode [ 149.535334][ T9885] syzkaller0: entered allmulticast mode [ 149.581442][ T9889] 8021q: adding VLAN 0 to HW filter on device bond5 [ 149.624459][ T9889] bond_slave_0: entered promiscuous mode [ 149.630472][ T9889] bond_slave_1: entered promiscuous mode [ 149.643900][ T9892] xt_CT: No such helper "snmp_trap" [ 149.644718][ T9889] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 149.663290][ T9892] xt_CT: No such helper "snmp_trap" [ 149.666965][ T9889] bond5: (slave macvlan2): Enslaving as a backup interface with an up link [ 149.700624][ T9897] tipc: Resetting bearer [ 149.741045][ T9884] tipc: Resetting bearer [ 149.828228][ T9905] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 149.840395][ T9884] tipc: Disabling bearer [ 149.971430][ T9912] netlink: 'syz.0.1116': attribute type 3 has an invalid length. [ 150.012839][ T9914] netlink: 'syz.1.1117': attribute type 21 has an invalid length. [ 150.040846][ T9912] dvmrp0: entered allmulticast mode [ 150.111516][ T9917] geneve2: entered promiscuous mode [ 150.117478][ T9917] geneve2: entered allmulticast mode [ 150.670711][ T9958] block nbd2: not configured, cannot reconfigure [ 150.887931][ T9972] tipc: Enabled bearer , priority 0 [ 150.910915][ T9972] syzkaller0: entered promiscuous mode [ 150.924440][ T9972] syzkaller0: entered allmulticast mode [ 150.988697][ T9972] syzkaller0: mtu less than device minimum [ 151.018528][ T9971] tipc: Resetting bearer [ 151.104394][ T9971] tipc: Disabling bearer [ 151.134139][ T9989] netlink: 'syz.2.1135': attribute type 10 has an invalid length. [ 151.161743][ T9986] vlan3: entered promiscuous mode [ 151.175428][ T9986] vlan3: entered allmulticast mode [ 151.180677][ T9986] hsr_slave_1: entered allmulticast mode [ 151.193452][ T9989] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.205523][ T9989] team0: entered promiscuous mode [ 151.940718][T10028] tipc: Enabled bearer , priority 0 [ 151.954244][T10018] __nla_validate_parse: 17 callbacks suppressed [ 151.954260][T10018] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1144'. [ 151.986706][T10025] syzkaller0: entered promiscuous mode [ 151.992219][T10025] syzkaller0: entered allmulticast mode [ 152.000413][T10033] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1148'. [ 152.052066][T10025] syzkaller0: MTU too low for tipc bearer [ 152.071123][T10025] tipc: Disabling bearer [ 152.790986][T10084] trusted_key: syz.1.1160 sent an empty control message without MSG_MORE. [ 152.868929][T10090] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 152.882462][T10087] tipc: Enabled bearer , priority 0 [ 152.890580][T10087] syzkaller0: entered promiscuous mode [ 152.900882][T10087] syzkaller0: entered allmulticast mode [ 152.926888][T10087] tipc: Resetting bearer [ 152.937934][T10095] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1164'. [ 152.975484][T10095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1164'. [ 152.984764][T10086] tipc: Resetting bearer [ 153.003214][T10086] tipc: Disabling bearer [ 153.079376][T10095] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.088779][T10095] bond5: entered promiscuous mode [ 153.094436][T10095] bond0: (slave bond5): Enslaving as an active interface with a down link [ 153.125436][T10106] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1167'. [ 153.137724][T10095] netlink: 'syz.2.1164': attribute type 2 has an invalid length. [ 153.153681][T10095] 9: entered promiscuous mode [ 153.194154][T10109] tipc: Enabled bearer , priority 0 [ 153.215107][T10109] syzkaller0: entered promiscuous mode [ 153.222749][T10109] syzkaller0: entered allmulticast mode [ 153.264981][T10109] tipc: Resetting bearer [ 153.294172][T10117] pimreg: entered allmulticast mode [ 153.304021][T10108] tipc: Resetting bearer [ 153.363348][T10108] tipc: Disabling bearer [ 153.466629][T10126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1170'. [ 153.466889][T10127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1172'. [ 153.655385][T10136] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1176'. [ 153.716710][T10138] tipc: Enabled bearer , priority 0 [ 153.735933][T10138] syzkaller0: entered promiscuous mode [ 153.741845][T10138] syzkaller0: entered allmulticast mode [ 153.781439][T10138] tipc: Resetting bearer [ 153.789161][T10137] tipc: Resetting bearer [ 153.811874][T10137] tipc: Disabling bearer [ 153.967675][T10155] veth0: entered promiscuous mode [ 154.023901][T10157] syzkaller0: entered promiscuous mode [ 154.032249][T10157] syzkaller0: entered allmulticast mode [ 154.242158][T10174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1188'. [ 154.312232][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'. [ 154.333394][T10180] x_tables: duplicate underflow at hook 3 [ 154.432581][T10186] tipc: Enabled bearer , priority 0 [ 154.444608][T10186] syzkaller0: entered promiscuous mode [ 154.450507][T10186] syzkaller0: entered allmulticast mode [ 154.473909][T10186] tipc: Resetting bearer [ 154.491039][T10185] tipc: Resetting bearer [ 154.506545][T10185] tipc: Disabling bearer [ 154.730937][T10149] veth0: left promiscuous mode [ 154.772066][T10208] tipc: Enabled bearer , priority 0 [ 154.779409][T10208] syzkaller0: entered promiscuous mode [ 154.788142][T10208] syzkaller0: entered allmulticast mode [ 154.819863][T10208] FAULT_INJECTION: forcing a failure. [ 154.819863][T10208] name failslab, interval 1, probability 0, space 0, times 0 [ 154.832834][T10208] CPU: 0 UID: 0 PID: 10208 Comm: syz.2.1196 Not tainted syzkaller #0 PREEMPT(full) [ 154.832855][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 154.832864][T10208] Call Trace: [ 154.832871][T10208] [ 154.832878][T10208] dump_stack_lvl+0x189/0x250 [ 154.832904][T10208] ? __pfx____ratelimit+0x10/0x10 [ 154.832925][T10208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.832946][T10208] ? __pfx__printk+0x10/0x10 [ 154.832972][T10208] should_fail_ex+0x414/0x560 [ 154.833001][T10208] should_failslab+0xa8/0x100 [ 154.833018][T10208] kmem_cache_alloc_node_noprof+0x77/0x710 [ 154.833038][T10208] ? __alloc_skb+0x112/0x2d0 [ 154.833050][T10208] ? __pfx_rt6_nlmsg_size+0x10/0x10 [ 154.833078][T10208] __alloc_skb+0x112/0x2d0 [ 154.833098][T10208] ? inet6_rt_notify+0xaf/0x470 [ 154.833119][T10208] inet6_rt_notify+0x170/0x470 [ 154.833149][T10208] fib6_del+0x1094/0x1550 [ 154.833192][T10208] ? __pfx_fib6_del+0x10/0x10 [ 154.833210][T10208] ? xfd_validate_state+0x6d/0x150 [ 154.833224][T10208] ? save_fpregs_to_fpstate+0xa3/0x210 [ 154.833250][T10208] ? rcu_is_watching+0x15/0xb0 [ 154.833279][T10208] fib6_clean_node+0x29f/0x590 [ 154.833306][T10208] ? __pfx_fib6_clean_node+0x10/0x10 [ 154.833334][T10208] ? __lock_acquire+0xab9/0xd20 [ 154.833358][T10208] ? __local_bh_enable_ip+0x12d/0x1c0 [ 154.833381][T10208] fib6_walk_continue+0x67b/0x910 [ 154.833419][T10208] fib6_walk+0x149/0x290 [ 154.833444][T10208] __fib6_clean_all+0x234/0x380 [ 154.833465][T10208] ? __fib6_clean_all+0x9b/0x380 [ 154.833487][T10208] ? __pfx_fib6_ifdown+0x10/0x10 [ 154.833508][T10208] ? __pfx___fib6_clean_all+0x10/0x10 [ 154.833531][T10208] ? __pfx_fib6_clean_node+0x10/0x10 [ 154.833552][T10208] ? __pfx_fib6_ifdown+0x10/0x10 [ 154.833580][T10208] ? __mutex_trylock_common+0x153/0x260 [ 154.833604][T10208] rt6_disable_ip+0x120/0x720 [ 154.833631][T10208] ? rcu_is_watching+0x15/0xb0 [ 154.833649][T10208] ? trace_contention_end+0x39/0x120 [ 154.833668][T10208] ? __pfx_rt6_disable_ip+0x10/0x10 [ 154.833701][T10208] addrconf_ifdown+0x15d/0x1880 [ 154.833722][T10208] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 154.833753][T10208] ? tls_dev_event+0x717/0xec0 [ 154.833769][T10208] ? __pfx_addrconf_ifdown+0x10/0x10 [ 154.833805][T10208] addrconf_notify+0x1bc/0x1010 [ 154.833834][T10208] notifier_call_chain+0x1b6/0x3e0 [ 154.833862][T10208] netif_set_mtu_ext+0x594/0x7d0 [ 154.833885][T10208] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 154.833899][T10208] ? __mutex_trylock_common+0x153/0x260 [ 154.833922][T10208] ? __pfx___mutex_trylock_common+0x10/0x10 [ 154.833947][T10208] ? rcu_is_watching+0x15/0xb0 [ 154.833967][T10208] ? trace_contention_end+0x39/0x120 [ 154.833994][T10208] netif_set_mtu+0xa4/0x150 [ 154.834011][T10208] ? __pfx_netif_set_mtu+0x10/0x10 [ 154.834026][T10208] ? __lock_acquire+0xab9/0xd20 [ 154.834057][T10208] ? netdev_name_node_lookup+0xdf/0x120 [ 154.834087][T10208] dev_set_mtu+0x126/0x260 [ 154.834109][T10208] dev_ioctl+0x7b4/0x1150 [ 154.834139][T10208] sock_do_ioctl+0x22c/0x300 [ 154.834163][T10208] ? __pfx_sock_do_ioctl+0x10/0x10 [ 154.834203][T10208] sock_ioctl+0x576/0x790 [ 154.834226][T10208] ? __pfx_sock_ioctl+0x10/0x10 [ 154.834249][T10208] ? __fget_files+0x3a0/0x420 [ 154.834265][T10208] ? __fget_files+0x2a/0x420 [ 154.834284][T10208] ? bpf_lsm_file_ioctl+0x9/0x20 [ 154.834304][T10208] ? __pfx_sock_ioctl+0x10/0x10 [ 154.834335][T10208] __se_sys_ioctl+0xfc/0x170 [ 154.834359][T10208] do_syscall_64+0xfa/0xfa0 [ 154.834381][T10208] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.834402][T10208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.834419][T10208] ? clear_bhb_loop+0x60/0xb0 [ 154.834440][T10208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.834457][T10208] RIP: 0033:0x7f59d558f6c9 [ 154.834473][T10208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.834487][T10208] RSP: 002b:00007f59d63c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.834506][T10208] RAX: ffffffffffffffda RBX: 00007f59d57e5fa0 RCX: 00007f59d558f6c9 [ 154.834518][T10208] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 154.834529][T10208] RBP: 00007f59d63c0090 R08: 0000000000000000 R09: 0000000000000000 [ 154.834540][T10208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.834550][T10208] R13: 00007f59d57e6038 R14: 00007f59d57e5fa0 R15: 00007ffd09bb40d8 [ 154.834582][T10208] [ 155.287707][T10208] tipc: Resetting bearer [ 155.331507][T10207] tipc: Resetting bearer [ 155.369933][T10207] tipc: Disabling bearer [ 155.883361][T10256] netlink: 'syz.4.1210': attribute type 1 has an invalid length. [ 156.009901][T10257] bond4: (slave bridge3): making interface the new active one [ 156.023863][T10257] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 156.168449][T10274] 8021q: VLANs not supported on ip6tnl0 [ 156.416179][T10290] tipc: Started in network mode [ 156.422086][T10290] tipc: Node identity be216fa4c3de, cluster identity 4711 [ 156.459728][T10290] tipc: Enabled bearer , priority 0 [ 156.477191][T10290] syzkaller0: entered promiscuous mode [ 156.501621][T10290] syzkaller0: entered allmulticast mode [ 156.543224][T10290] tipc: Resetting bearer [ 156.574673][T10289] tipc: Resetting bearer [ 156.615776][T10289] tipc: Disabling bearer [ 156.672683][T10311] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 156.683794][T10312] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 156.924507][T10331] netlink: 'syz.2.1235': attribute type 8 has an invalid length. [ 156.933794][T10335] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 156.944911][T10331] netlink: 'syz.2.1235': attribute type 21 has an invalid length. [ 156.963633][T10331] __nla_validate_parse: 6 callbacks suppressed [ 156.963652][T10331] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1235'. [ 157.001677][T10338] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1238'. [ 157.011828][T10338] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1238'. [ 157.019198][T10340] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 157.098737][T10343] xt_TPROXY: Can be used only with -p tcp or -p udp [ 157.100160][T10349] bridge4: entered promiscuous mode [ 157.117527][T10349] bridge4: entered allmulticast mode [ 157.248174][T10355] tipc: Enabled bearer , priority 0 [ 157.256772][T10355] syzkaller0: entered promiscuous mode [ 157.262467][T10355] syzkaller0: entered allmulticast mode [ 157.293511][T10355] FAULT_INJECTION: forcing a failure. [ 157.293511][T10355] name failslab, interval 1, probability 0, space 0, times 0 [ 157.306312][T10355] CPU: 1 UID: 0 PID: 10355 Comm: syz.1.1241 Not tainted syzkaller #0 PREEMPT(full) [ 157.306337][T10355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 157.306346][T10355] Call Trace: [ 157.306354][T10355] [ 157.306362][T10355] dump_stack_lvl+0x189/0x250 [ 157.306391][T10355] ? __pfx____ratelimit+0x10/0x10 [ 157.306438][T10355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.306460][T10355] ? __pfx__printk+0x10/0x10 [ 157.306493][T10355] should_fail_ex+0x414/0x560 [ 157.306524][T10355] should_failslab+0xa8/0x100 [ 157.306544][T10355] __kmalloc_cache_noprof+0x6f/0x6f0 [ 157.306567][T10355] ? nsim_fib_event_nb+0x187/0x1080 [ 157.306588][T10355] ? __lock_acquire+0xab9/0xd20 [ 157.306610][T10355] nsim_fib_event_nb+0x187/0x1080 [ 157.306631][T10355] ? atomic_notifier_call_chain+0x26/0x180 [ 157.306660][T10355] notifier_call_chain+0x1b6/0x3e0 [ 157.306684][T10355] ? atomic_notifier_call_chain+0x26/0x180 [ 157.306706][T10355] atomic_notifier_call_chain+0xda/0x180 [ 157.306729][T10355] call_fib_notifiers+0x31/0x60 [ 157.306749][T10355] fib6_del+0x104d/0x1550 [ 157.306775][T10355] ? fib6_del+0x5c1/0x1550 [ 157.306815][T10355] ? __pfx_fib6_del+0x10/0x10 [ 157.306833][T10355] ? is_bpf_text_address+0x26/0x2b0 [ 157.306856][T10355] ? kernel_text_address+0xa5/0xe0 [ 157.306894][T10355] fib6_clean_node+0x29f/0x590 [ 157.306921][T10355] ? __pfx_fib6_clean_node+0x10/0x10 [ 157.306941][T10355] ? __lock_acquire+0xab9/0xd20 [ 157.306965][T10355] ? __local_bh_enable_ip+0x12d/0x1c0 [ 157.306988][T10355] fib6_walk_continue+0x67b/0x910 [ 157.307027][T10355] fib6_walk+0x149/0x290 [ 157.307052][T10355] __fib6_clean_all+0x234/0x380 [ 157.307073][T10355] ? __fib6_clean_all+0x9b/0x380 [ 157.307096][T10355] ? __pfx_fib6_ifdown+0x10/0x10 [ 157.307120][T10355] ? __pfx___fib6_clean_all+0x10/0x10 [ 157.307146][T10355] ? __pfx_fib6_clean_node+0x10/0x10 [ 157.307167][T10355] ? __pfx_fib6_ifdown+0x10/0x10 [ 157.307197][T10355] ? __mutex_trylock_common+0x153/0x260 [ 157.307222][T10355] rt6_disable_ip+0x120/0x720 [ 157.307250][T10355] ? rcu_is_watching+0x15/0xb0 [ 157.307270][T10355] ? trace_contention_end+0x39/0x120 [ 157.307289][T10355] ? __pfx_rt6_disable_ip+0x10/0x10 [ 157.307329][T10355] addrconf_ifdown+0x15d/0x1880 [ 157.307350][T10355] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 157.307382][T10355] ? tls_dev_event+0x717/0xec0 [ 157.307398][T10355] ? __pfx_addrconf_ifdown+0x10/0x10 [ 157.307440][T10355] addrconf_notify+0x1bc/0x1010 [ 157.307470][T10355] notifier_call_chain+0x1b6/0x3e0 [ 157.307498][T10355] netif_set_mtu_ext+0x594/0x7d0 [ 157.307524][T10355] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 157.307539][T10355] ? __mutex_trylock_common+0x153/0x260 [ 157.307562][T10355] ? __pfx___mutex_trylock_common+0x10/0x10 [ 157.307588][T10355] ? rcu_is_watching+0x15/0xb0 [ 157.307607][T10355] ? trace_contention_end+0x39/0x120 [ 157.307634][T10355] netif_set_mtu+0xa4/0x150 [ 157.307651][T10355] ? __pfx_netif_set_mtu+0x10/0x10 [ 157.307666][T10355] ? __lock_acquire+0xab9/0xd20 [ 157.307696][T10355] ? netdev_name_node_lookup+0xdf/0x120 [ 157.307725][T10355] dev_set_mtu+0x126/0x260 [ 157.307748][T10355] dev_ioctl+0x7b4/0x1150 [ 157.307776][T10355] sock_do_ioctl+0x22c/0x300 [ 157.307801][T10355] ? __pfx_sock_do_ioctl+0x10/0x10 [ 157.307839][T10355] sock_ioctl+0x576/0x790 [ 157.307859][T10355] ? __pfx_sock_ioctl+0x10/0x10 [ 157.307880][T10355] ? __fget_files+0x3a0/0x420 [ 157.307893][T10355] ? __fget_files+0x2a/0x420 [ 157.307909][T10355] ? bpf_lsm_file_ioctl+0x9/0x20 [ 157.307948][T10355] ? __pfx_sock_ioctl+0x10/0x10 [ 157.307966][T10355] __se_sys_ioctl+0xfc/0x170 [ 157.307989][T10355] do_syscall_64+0xfa/0xfa0 [ 157.308009][T10355] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.308030][T10355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.308047][T10355] ? clear_bhb_loop+0x60/0xb0 [ 157.308068][T10355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.308084][T10355] RIP: 0033:0x7f1d7c18f6c9 [ 157.308100][T10355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.308113][T10355] RSP: 002b:00007f1d7cf6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.308132][T10355] RAX: ffffffffffffffda RBX: 00007f1d7c3e5fa0 RCX: 00007f1d7c18f6c9 [ 157.308144][T10355] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 157.308155][T10355] RBP: 00007f1d7cf6f090 R08: 0000000000000000 R09: 0000000000000000 [ 157.308164][T10355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.308173][T10355] R13: 00007f1d7c3e6038 R14: 00007f1d7c3e5fa0 R15: 00007ffefcb13ae8 [ 157.308205][T10355] [ 157.425985][ T30] audit: type=1800 audit(1762677974.902:5): pid=10352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1240" name="memory.events" dev="tmpfs" ino=1271 res=0 errno=0 [ 157.435042][T10355] tipc: Resetting bearer [ 157.638183][T10359] netlink: 'syz.4.1242': attribute type 10 has an invalid length. [ 157.804042][T10354] tipc: Resetting bearer [ 157.834880][T10368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1245'. [ 157.845388][T10354] tipc: Disabling bearer [ 157.846692][T10368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1245'. [ 157.882230][T10359] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 158.009820][T10377] ip6gretap0 speed is unknown, defaulting to 1000 [ 158.019711][T10377] ip6gretap0 speed is unknown, defaulting to 1000 [ 158.037697][T10377] ip6gretap0 speed is unknown, defaulting to 1000 [ 158.054742][T10377] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 158.121664][T10377] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 158.150880][T10392] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1250'. [ 158.200378][T10394] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1253'. [ 158.275480][T10377] ip6gretap0 speed is unknown, defaulting to 1000 [ 158.303696][T10377] ip6gretap0 speed is unknown, defaulting to 1000 [ 158.312589][T10398] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1254'. [ 158.327131][T10377] ip6gretap0 speed is unknown, defaulting to 1000 [ 158.356277][T10377] ip6gretap0 speed is unknown, defaulting to 1000 [ 158.374083][T10377] ip6gretap0 speed is unknown, defaulting to 1000 [ 158.382760][T10407] tipc: Enabled bearer , priority 0 [ 158.394536][T10407] syzkaller0: entered promiscuous mode [ 158.412863][T10407] syzkaller0: entered allmulticast mode [ 158.479915][T10407] FAULT_INJECTION: forcing a failure. [ 158.479915][T10407] name failslab, interval 1, probability 0, space 0, times 0 [ 158.492700][T10407] CPU: 1 UID: 0 PID: 10407 Comm: syz.0.1257 Not tainted syzkaller #0 PREEMPT(full) [ 158.492724][T10407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.492734][T10407] Call Trace: [ 158.492741][T10407] [ 158.492749][T10407] dump_stack_lvl+0x189/0x250 [ 158.492776][T10407] ? __pfx____ratelimit+0x10/0x10 [ 158.492798][T10407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.492828][T10407] ? __pfx__printk+0x10/0x10 [ 158.492862][T10407] should_fail_ex+0x414/0x560 [ 158.492890][T10407] should_failslab+0xa8/0x100 [ 158.492910][T10407] __kmalloc_noprof+0xcb/0x7f0 [ 158.492933][T10407] ? nsim_fib_event_nb+0x295/0x1080 [ 158.492954][T10407] ? __lock_acquire+0xab9/0xd20 [ 158.492975][T10407] nsim_fib_event_nb+0x295/0x1080 [ 158.493007][T10407] notifier_call_chain+0x1b6/0x3e0 [ 158.493030][T10407] ? atomic_notifier_call_chain+0x26/0x180 [ 158.493053][T10407] atomic_notifier_call_chain+0xda/0x180 [ 158.493075][T10407] call_fib_notifiers+0x31/0x60 [ 158.493093][T10407] fib6_del+0x104d/0x1550 [ 158.493120][T10407] ? fib6_del+0x5c1/0x1550 [ 158.493159][T10407] ? __pfx_fib6_del+0x10/0x10 [ 158.493177][T10407] ? is_bpf_text_address+0x26/0x2b0 [ 158.493199][T10407] ? kernel_text_address+0xa5/0xe0 [ 158.493244][T10407] fib6_clean_node+0x29f/0x590 [ 158.493270][T10407] ? __pfx_fib6_clean_node+0x10/0x10 [ 158.493290][T10407] ? __lock_acquire+0xab9/0xd20 [ 158.493314][T10407] ? __local_bh_enable_ip+0x12d/0x1c0 [ 158.493338][T10407] fib6_walk_continue+0x67b/0x910 [ 158.493376][T10407] fib6_walk+0x149/0x290 [ 158.493401][T10407] __fib6_clean_all+0x234/0x380 [ 158.493421][T10407] ? __fib6_clean_all+0x9b/0x380 [ 158.493443][T10407] ? __pfx_fib6_ifdown+0x10/0x10 [ 158.493467][T10407] ? __pfx___fib6_clean_all+0x10/0x10 [ 158.493494][T10407] ? __pfx_fib6_clean_node+0x10/0x10 [ 158.493516][T10407] ? __pfx_fib6_ifdown+0x10/0x10 [ 158.493547][T10407] ? __mutex_trylock_common+0x153/0x260 [ 158.493572][T10407] rt6_disable_ip+0x120/0x720 [ 158.493599][T10407] ? rcu_is_watching+0x15/0xb0 [ 158.493618][T10407] ? trace_contention_end+0x39/0x120 [ 158.493637][T10407] ? __pfx_rt6_disable_ip+0x10/0x10 [ 158.493672][T10407] addrconf_ifdown+0x15d/0x1880 [ 158.493694][T10407] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 158.493727][T10407] ? tls_dev_event+0x717/0xec0 [ 158.493743][T10407] ? __pfx_addrconf_ifdown+0x10/0x10 [ 158.493780][T10407] addrconf_notify+0x1bc/0x1010 [ 158.493809][T10407] notifier_call_chain+0x1b6/0x3e0 [ 158.493838][T10407] netif_set_mtu_ext+0x594/0x7d0 [ 158.493864][T10407] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 158.493879][T10407] ? __mutex_trylock_common+0x153/0x260 [ 158.493902][T10407] ? __pfx___mutex_trylock_common+0x10/0x10 [ 158.493928][T10407] ? rcu_is_watching+0x15/0xb0 [ 158.493947][T10407] ? trace_contention_end+0x39/0x120 [ 158.493975][T10407] netif_set_mtu+0xa4/0x150 [ 158.493991][T10407] ? __pfx_netif_set_mtu+0x10/0x10 [ 158.494005][T10407] ? __lock_acquire+0xab9/0xd20 [ 158.494036][T10407] ? netdev_name_node_lookup+0xdf/0x120 [ 158.494065][T10407] dev_set_mtu+0x126/0x260 [ 158.494087][T10407] dev_ioctl+0x7b4/0x1150 [ 158.494116][T10407] sock_do_ioctl+0x22c/0x300 [ 158.494140][T10407] ? __pfx_sock_do_ioctl+0x10/0x10 [ 158.494180][T10407] sock_ioctl+0x576/0x790 [ 158.494203][T10407] ? __pfx_sock_ioctl+0x10/0x10 [ 158.494227][T10407] ? __fget_files+0x3a0/0x420 [ 158.494248][T10407] ? __fget_files+0x2a/0x420 [ 158.494268][T10407] ? bpf_lsm_file_ioctl+0x9/0x20 [ 158.494288][T10407] ? __pfx_sock_ioctl+0x10/0x10 [ 158.494307][T10407] __se_sys_ioctl+0xfc/0x170 [ 158.494332][T10407] do_syscall_64+0xfa/0xfa0 [ 158.494353][T10407] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.494375][T10407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.494392][T10407] ? clear_bhb_loop+0x60/0xb0 [ 158.494413][T10407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.494429][T10407] RIP: 0033:0x7f46e8b8f6c9 [ 158.494445][T10407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.494458][T10407] RSP: 002b:00007f46e9a9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.494478][T10407] RAX: ffffffffffffffda RBX: 00007f46e8de5fa0 RCX: 00007f46e8b8f6c9 [ 158.494490][T10407] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 158.494501][T10407] RBP: 00007f46e9a9e090 R08: 0000000000000000 R09: 0000000000000000 [ 158.494511][T10407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.494521][T10407] R13: 00007f46e8de6038 R14: 00007f46e8de5fa0 R15: 00007ffd776d6da8 [ 158.494554][T10407] [ 158.947092][T10407] tipc: Resetting bearer [ 158.984495][T10403] tipc: Resetting bearer [ 159.021030][T10403] tipc: Disabling bearer [ 159.049662][T10418] : entered promiscuous mode [ 159.075436][ T5834] Bluetooth: hci0: command tx timeout [ 159.250643][T10436] netlink: 'syz.2.1265': attribute type 58 has an invalid length. [ 159.289952][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'. [ 159.332946][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1266'. [ 159.589376][T10433] infiniband syz1: set down [ 159.602288][T10433] infiniband syz1: added ipvlan0 [ 159.671005][T10468] batadv_slave_1: entered promiscuous mode [ 159.730715][T10468] batadv_slave_1: left promiscuous mode [ 159.765304][T10433] RDS/IB: syz1: added [ 159.798260][T10472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.812482][T10433] smc: adding ib device syz1 with port count 1 [ 159.847117][T10472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.903260][T10472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.915989][T10433] smc: ib device syz1 port 1 has no pnetid [ 159.965957][T10472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.308227][T10496] netlink: 'syz.2.1281': attribute type 16 has an invalid length. [ 160.326185][T10496] netlink: 'syz.2.1281': attribute type 17 has an invalid length. [ 160.489749][T10496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.512131][T10496] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.547992][T10496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.765854][T10516] x_tables: duplicate underflow at hook 2 [ 161.092579][ T8885] nci: nci_ntf_packet: unsupported ntf opcode 0xf03 [ 161.367663][T10542] bridge_slave_0: default FDB implementation only supports local addresses [ 162.148569][T10558] __nla_validate_parse: 10 callbacks suppressed [ 162.148585][T10558] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1302'. [ 162.150700][T10556] tipc: New replicast peer: 255.255.255.255 [ 162.189597][T10556] tipc: Enabled bearer , priority 10 [ 162.289925][T10565] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1307'. [ 162.731817][T10599] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 162.735615][T10601] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1314'. [ 162.755959][T10603] 8021q: VLANs not supported on vxcan1 [ 162.762865][T10603] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1315'. [ 163.004847][T10615] tipc: Enabled bearer , priority 0 [ 163.042616][T10615] syzkaller0: entered promiscuous mode [ 163.059949][T10615] syzkaller0: entered allmulticast mode [ 163.199833][T10620] syz.0.1320 (10620) used greatest stack depth: 16664 bytes left [ 163.230435][T10615] tipc: Resetting bearer [ 163.245699][T10611] tipc: Resetting bearer [ 163.305411][ T6002] tipc: Node number set to 1234520473 [ 163.324568][T10611] tipc: Disabling bearer [ 163.332061][T10634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1325'. [ 163.350621][T10633] netlink: 'syz.0.1324': attribute type 11 has an invalid length. [ 163.360296][T10633] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1324'. [ 163.544720][T10646] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1330'. [ 163.573524][T10644] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1326'. [ 163.631674][T10646] bond5 (unregistering): Released all slaves [ 165.428192][T10661] syzkaller0: entered promiscuous mode [ 165.433793][T10661] syzkaller0: entered allmulticast mode [ 165.495331][T10671] tipc: Enabling of bearer rejected, failed to enable media [ 165.556231][ T8878] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 165.676957][T10691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1338'. [ 165.700351][T10693] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1337'. [ 165.716044][T10691] netlink: 'syz.3.1338': attribute type 10 has an invalid length. [ 165.746352][T10691] batman_adv: batadv0: Adding interface: netdevsim0 [ 165.752993][T10691] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.788742][T10691] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 165.896361][T10710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.907335][T10710] [ 165.909687][T10710] ====================================================== [ 165.916699][T10710] WARNING: possible circular locking dependency detected [ 165.923718][T10710] syzkaller #0 Not tainted [ 165.928114][T10710] ------------------------------------------------------ [ 165.935119][T10710] syz.0.1342/10710 is trying to acquire lock: [ 165.941172][T10710] ffff888053971218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50 [ 165.953350][T10710] [ 165.953350][T10710] but task is already holding lock: [ 165.960697][T10710] ffff888023623558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 165.970618][T10710] [ 165.970618][T10710] which lock already depends on the new lock. [ 165.970618][T10710] [ 165.981002][T10710] [ 165.981002][T10710] the existing dependency chain (in reverse order) is: [ 165.989999][T10710] [ 165.989999][T10710] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 165.998277][T10710] lock_acquire+0x120/0x360 [ 166.003290][T10710] _raw_spin_lock+0x2e/0x40 [ 166.008316][T10710] sch_direct_xmit+0x153/0x4b0 [ 166.013589][T10710] __dev_queue_xmit+0x1857/0x3b50 [ 166.019128][T10710] ip6_finish_output2+0xfb3/0x1480 [ 166.024756][T10710] ip6_output+0x340/0x550 [ 166.029596][T10710] NF_HOOK+0x9e/0x380 [ 166.034089][T10710] mld_sendpack+0x8d4/0xe60 [ 166.039111][T10710] mld_ifc_work+0x83e/0xd60 [ 166.044135][T10710] process_scheduled_works+0xae1/0x17b0 [ 166.050188][T10710] worker_thread+0x8a0/0xda0 [ 166.055293][T10710] kthread+0x711/0x8a0 [ 166.059875][T10710] ret_from_fork+0x4bc/0x870 [ 166.064976][T10710] ret_from_fork_asm+0x1a/0x30 [ 166.070245][T10710] [ 166.070245][T10710] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}: [ 166.080662][T10710] validate_chain+0xb9b/0x2140 [ 166.085941][T10710] __lock_acquire+0xab9/0xd20 [ 166.091168][T10710] lock_acquire+0x120/0x360 [ 166.096182][T10710] _raw_spin_lock+0x2e/0x40 [ 166.101210][T10710] __dev_queue_xmit+0x22b7/0x3b50 [ 166.106746][T10710] ip6_finish_output2+0xfb3/0x1480 [ 166.112373][T10710] ip6_output+0x340/0x550 [ 166.117221][T10710] ndisc_send_skb+0xbce/0x1510 [ 166.122507][T10710] ndisc_solicit+0x444/0x610 [ 166.127609][T10710] __neigh_event_send+0xf70/0x1560 [ 166.133228][T10710] neigh_resolve_output+0x198/0x750 [ 166.138947][T10710] ip6_finish_output2+0xfb3/0x1480 [ 166.144586][T10710] ip6_output+0x340/0x550 [ 166.149434][T10710] ip6_send_skb+0x1d5/0x390 [ 166.154462][T10710] icmp6_send+0x12c6/0x1940 [ 166.159468][T10710] ip6_link_failure+0x3b/0x4c0 [ 166.164750][T10710] ip_tunnel_xmit+0x175b/0x2390 [ 166.170118][T10710] __gre_xmit+0x19a/0x240 [ 166.174961][T10710] erspan_xmit+0xa04/0x1220 [ 166.179972][T10710] dev_hard_start_xmit+0x2d7/0x830 [ 166.185593][T10710] sch_direct_xmit+0x241/0x4b0 [ 166.190865][T10710] __qdisc_run+0xb16/0x15f0 [ 166.195876][T10710] __dev_queue_xmit+0x1056/0x3b50 [ 166.201424][T10710] ip6_finish_output2+0xfb3/0x1480 [ 166.207072][T10710] ip6_output+0x340/0x550 [ 166.211908][T10710] ip6_mr_output+0x4e9/0x1100 [ 166.217127][T10710] rawv6_send_hdrinc+0xe16/0x17a0 [ 166.222745][T10710] rawv6_sendmsg+0x12ee/0x1830 [ 166.228017][T10710] __sock_sendmsg+0x19c/0x270 [ 166.233204][T10710] ____sys_sendmsg+0x505/0x830 [ 166.238473][T10710] ___sys_sendmsg+0x21f/0x2a0 [ 166.243654][T10710] __x64_sys_sendmsg+0x19b/0x260 [ 166.249103][T10710] do_syscall_64+0xfa/0xfa0 [ 166.254119][T10710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.260531][T10710] [ 166.260531][T10710] other info that might help us debug this: [ 166.260531][T10710] [ 166.270740][T10710] Possible unsafe locking scenario: [ 166.270740][T10710] [ 166.278188][T10710] CPU0 CPU1 [ 166.283534][T10710] ---- ---- [ 166.288880][T10710] lock(&qdisc_xmit_lock_key#4); [ 166.293896][T10710] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 166.303512][T10710] lock(&qdisc_xmit_lock_key#4); [ 166.311043][T10710] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 166.318145][T10710] [ 166.318145][T10710] *** DEADLOCK *** [ 166.318145][T10710] [ 166.326355][T10710] 12 locks held by syz.0.1342/10710: [ 166.331621][T10710] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: rawv6_send_hdrinc+0xc9f/0x17a0 [ 166.341355][T10710] #1: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_mr_output+0x1ca/0x1100 [ 166.350749][T10710] #2: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 166.359785][T10710] #3: ffffffff8df3d6c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 166.369698][T10710] #4: ffff888023623558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 166.379962][T10710] #5: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0x1e9/0x1940 [ 166.389098][T10710] #6: ffff88802f360a20 (k-slock-AF_INET6){+.-.}-{3:3}, at: icmp6_send+0xc5c/0x1940 [ 166.398485][T10710] #7: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0x10f/0x390 [ 166.407702][T10710] #8: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 166.416743][T10710] #9: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1e4/0x1510 [ 166.426215][T10710] #10: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 166.435436][T10710] #11: ffffffff8df3d6c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 166.445458][T10710] [ 166.445458][T10710] stack backtrace: [ 166.451646][T10710] CPU: 1 UID: 0 PID: 10710 Comm: syz.0.1342 Not tainted syzkaller #0 PREEMPT(full) [ 166.451664][T10710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 166.451672][T10710] Call Trace: [ 166.451681][T10710] [ 166.451688][T10710] dump_stack_lvl+0x189/0x250 [ 166.451711][T10710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.451728][T10710] ? __pfx__printk+0x10/0x10 [ 166.451742][T10710] ? print_lock_name+0xde/0x100 [ 166.451756][T10710] print_circular_bug+0x2ee/0x310 [ 166.451775][T10710] check_noncircular+0x134/0x160 [ 166.451793][T10710] validate_chain+0xb9b/0x2140 [ 166.451815][T10710] __lock_acquire+0xab9/0xd20 [ 166.451830][T10710] ? __dev_queue_xmit+0x22b7/0x3b50 [ 166.451845][T10710] lock_acquire+0x120/0x360 [ 166.451856][T10710] ? __dev_queue_xmit+0x22b7/0x3b50 [ 166.451872][T10710] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 166.451888][T10710] ? check_noncircular+0xe0/0x160 [ 166.451905][T10710] _raw_spin_lock+0x2e/0x40 [ 166.451921][T10710] ? __dev_queue_xmit+0x22b7/0x3b50 [ 166.451935][T10710] __dev_queue_xmit+0x22b7/0x3b50 [ 166.451954][T10710] ? __dev_queue_xmit+0x27b/0x3b50 [ 166.451972][T10710] ? neigh_resolve_output+0x438/0x750 [ 166.451991][T10710] ? __pfx___dev_queue_xmit+0x10/0x10 [ 166.452006][T10710] ? read_seqbegin+0x122/0x250 [ 166.452022][T10710] ? neigh_resolve_output+0x438/0x750 [ 166.452039][T10710] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.452056][T10710] ? read_seqbegin+0x1ac/0x250 [ 166.452072][T10710] ? __pfx_read_seqbegin+0x10/0x10 [ 166.452089][T10710] ? __local_bh_enable_ip+0x12d/0x1c0 [ 166.452103][T10710] ? eth_header+0x11b/0x200 [ 166.452118][T10710] ? __asan_memcpy+0x40/0x70 [ 166.452144][T10710] ip6_finish_output2+0xfb3/0x1480 [ 166.452174][T10710] ? __pfx_ip6_finish_output2+0x10/0x10 [ 166.452193][T10710] ? ip6_mtu+0x7d/0x490 [ 166.452208][T10710] ? ip6_mtu+0x38c/0x490 [ 166.452224][T10710] ? ip6_finish_output+0x2ef/0x4e0 [ 166.452240][T10710] ? ip6_output+0x126/0x550 [ 166.452256][T10710] ip6_output+0x340/0x550 [ 166.452273][T10710] ndisc_send_skb+0xbce/0x1510 [ 166.452289][T10710] ? ndisc_send_skb+0x1e4/0x1510 [ 166.452304][T10710] ? __pfx_ndisc_send_skb+0x10/0x10 [ 166.452318][T10710] ? __pfx_dst_output+0x10/0x10 [ 166.452334][T10710] ? ipv6_get_lladdr+0x2b/0x3f0 [ 166.452347][T10710] ? ipv6_get_lladdr+0x2b/0x3f0 [ 166.452358][T10710] ? ipv6_get_lladdr+0x2b/0x3f0 [ 166.452371][T10710] ? ipv6_get_lladdr+0x378/0x3f0 [ 166.452383][T10710] ? ipv6_get_lladdr+0x2b/0x3f0 [ 166.452396][T10710] ndisc_solicit+0x444/0x610 [ 166.452414][T10710] ? __pfx_ndisc_solicit+0x10/0x10 [ 166.452431][T10710] ? __neigh_event_send+0xf08/0x1560 [ 166.452449][T10710] ? __pfx_ndisc_solicit+0x10/0x10 [ 166.452463][T10710] __neigh_event_send+0xf70/0x1560 [ 166.452483][T10710] ? ___neigh_create+0x1c83/0x2260 [ 166.452501][T10710] neigh_resolve_output+0x198/0x750 [ 166.452524][T10710] ip6_finish_output2+0xfb3/0x1480 [ 166.452546][T10710] ? __pfx_ip6_finish_output2+0x10/0x10 [ 166.452565][T10710] ? ip6_mtu+0x7d/0x490 [ 166.452580][T10710] ? ip6_mtu+0x38c/0x490 [ 166.452595][T10710] ? ip6_finish_output+0x2ef/0x4e0 [ 166.452611][T10710] ? ip6_output+0x126/0x550 [ 166.452627][T10710] ip6_output+0x340/0x550 [ 166.452642][T10710] ? ip6_send_skb+0x10f/0x390 [ 166.452659][T10710] ip6_send_skb+0x1d5/0x390 [ 166.452678][T10710] icmp6_send+0x12c6/0x1940 [ 166.452692][T10710] ? icmp6_send+0x1e9/0x1940 [ 166.452711][T10710] ? __pfx_icmp6_send+0x10/0x10 [ 166.452723][T10710] ? __lock_acquire+0xab9/0xd20 [ 166.452741][T10710] ? ip6_neigh_lookup+0x14e/0x470 [ 166.452756][T10710] ? ip6_neigh_lookup+0x14e/0x470 [ 166.452769][T10710] ? ip6_neigh_lookup+0x397/0x470 [ 166.452782][T10710] ? ip6_neigh_lookup+0x14e/0x470 [ 166.452796][T10710] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 166.452811][T10710] ip6_link_failure+0x3b/0x4c0 [ 166.452827][T10710] ip_tunnel_xmit+0x175b/0x2390 [ 166.452846][T10710] ? desc_read+0x1b8/0x3f0 [ 166.452860][T10710] ? ip_tunnel_xmit+0x80/0x2390 [ 166.452879][T10710] ? _prb_read_valid+0xa07/0xa90 [ 166.452892][T10710] ? console_flush_all+0x13a/0xb10 [ 166.452911][T10710] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 166.452927][T10710] ? gre_build_header+0x31c/0xa40 [ 166.452947][T10710] ? __pfx_gre_build_header+0x10/0x10 [ 166.452962][T10710] ? __console_unlock+0x14c/0x1a0 [ 166.452977][T10710] ? __pfx___console_unlock+0x10/0x10 [ 166.452992][T10710] ? __pfx_skb_network_protocol+0x10/0x10 [ 166.453008][T10710] __gre_xmit+0x19a/0x240 [ 166.453025][T10710] ? __pfx___gre_xmit+0x10/0x10 [ 166.453041][T10710] ? __asan_memset+0x22/0x50 [ 166.453056][T10710] ? erspan_build_header+0x19c/0x370 [ 166.453075][T10710] erspan_xmit+0xa04/0x1220 [ 166.453096][T10710] ? __pfx_erspan_xmit+0x10/0x10 [ 166.453112][T10710] ? __lock_acquire+0xab9/0xd20 [ 166.453127][T10710] dev_hard_start_xmit+0x2d7/0x830 [ 166.453169][T10710] sch_direct_xmit+0x241/0x4b0 [ 166.453189][T10710] ? __pfx_sch_direct_xmit+0x10/0x10 [ 166.453209][T10710] __qdisc_run+0xb16/0x15f0 [ 166.453227][T10710] ? __dev_queue_xmit+0xd31/0x3b50 [ 166.453246][T10710] __dev_queue_xmit+0x1056/0x3b50 [ 166.453261][T10710] ? register_lock_class+0x51/0x320 [ 166.453275][T10710] ? __dev_queue_xmit+0x27b/0x3b50 [ 166.453296][T10710] ? __pfx___dev_queue_xmit+0x10/0x10 [ 166.453311][T10710] ? read_seqbegin+0x122/0x250 [ 166.453332][T10710] ? neigh_resolve_output+0x438/0x750 [ 166.453349][T10710] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.453366][T10710] ? read_seqbegin+0x1ac/0x250 [ 166.453383][T10710] ? __pfx_read_seqbegin+0x10/0x10 [ 166.453400][T10710] ? __local_bh_enable_ip+0x12d/0x1c0 [ 166.453414][T10710] ? eth_header+0x11b/0x200 [ 166.453427][T10710] ? __asan_memcpy+0x40/0x70 [ 166.453452][T10710] ip6_finish_output2+0xfb3/0x1480 [ 166.453475][T10710] ? __pfx_ip6_finish_output2+0x10/0x10 [ 166.453494][T10710] ? ip6_mtu+0x7d/0x490 [ 166.453509][T10710] ? ip6_mtu+0x38c/0x490 [ 166.453525][T10710] ? ip6_finish_output+0x2ef/0x4e0 [ 166.453542][T10710] ? ip6_output+0x126/0x550 [ 166.453558][T10710] ip6_output+0x340/0x550 [ 166.453575][T10710] ip6_mr_output+0x4e9/0x1100 [ 166.453597][T10710] ? ip6_mr_output+0x1ca/0x1100 [ 166.453616][T10710] ? __pfx_ip6_mr_output+0x10/0x10 [ 166.453637][T10710] ? ip6t_do_table+0x1db/0x1560 [ 166.453655][T10710] ? __pfx_ip6t_do_table+0x10/0x10 [ 166.453677][T10710] ? skb_dst+0x4f/0xd0 [ 166.453690][T10710] ? dst_output+0x17b/0x1c0 [ 166.453702][T10710] ? rawv6_send_hdrinc+0xc9f/0x17a0 [ 166.453716][T10710] rawv6_send_hdrinc+0xe16/0x17a0 [ 166.453735][T10710] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 166.453747][T10710] ? txopt_get+0x335/0x3f0 [ 166.453760][T10710] ? __pfx_dst_output+0x10/0x10 [ 166.453772][T10710] ? __pfx_txopt_get+0x10/0x10 [ 166.453788][T10710] rawv6_sendmsg+0x12ee/0x1830 [ 166.453807][T10710] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 166.453828][T10710] ? __pfx_aa_sk_perm+0x10/0x10 [ 166.453846][T10710] ? sock_rps_record_flow+0x19/0x410 [ 166.453866][T10710] ? inet_sendmsg+0x2f4/0x370 [ 166.453877][T10710] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 166.453892][T10710] __sock_sendmsg+0x19c/0x270 [ 166.453910][T10710] ____sys_sendmsg+0x505/0x830 [ 166.453926][T10710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.453942][T10710] ? import_iovec+0x74/0xa0 [ 166.453960][T10710] ___sys_sendmsg+0x21f/0x2a0 [ 166.453974][T10710] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.453999][T10710] ? __fget_files+0x2a/0x420 [ 166.454015][T10710] ? __fget_files+0x3a0/0x420 [ 166.454030][T10710] __x64_sys_sendmsg+0x19b/0x260 [ 166.454045][T10710] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 166.454063][T10710] ? do_syscall_64+0xbe/0xfa0 [ 166.454083][T10710] do_syscall_64+0xfa/0xfa0 [ 166.454100][T10710] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.454116][T10710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.454130][T10710] ? clear_bhb_loop+0x60/0xb0 [ 166.454145][T10710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.454164][T10710] RIP: 0033:0x7f46e8b8f6c9 [ 166.454178][T10710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.454190][T10710] RSP: 002b:00007f46e9a9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.454206][T10710] RAX: ffffffffffffffda RBX: 00007f46e8de5fa0 RCX: 00007f46e8b8f6c9 [ 166.454216][T10710] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 166.454229][T10710] RBP: 00007f46e8c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 166.454238][T10710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.454246][T10710] R13: 00007f46e8de6038 R14: 00007f46e8de5fa0 R15: 00007ffd776d6da8 [ 166.454262][T10710] [ 167.270776][T10710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.279675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.322277][T10722] __nla_validate_parse: 2 callbacks suppressed [ 167.322296][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1342'. [ 167.388057][T10719] : entered promiscuous mode [ 168.355453][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog