last executing test programs: 5.153746646s ago: executing program 3 (id=4286): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x40, 0x708, 0xffffff0f, 0x0, {{0x2b, 0x4, 0x1, 0x6, 0xac, 0x66, 0x0, 0x1, 0x2f, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x28, 0x6e, 0x0, 0xa, [0x8000, 0x8001, 0x0, 0x7, 0x6, 0x1, 0x8, 0xb, 0xfb]}, @ssrr={0x89, 0x7, 0x10, [@empty]}, @end, @ssrr={0x89, 0x23, 0xd7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @local, @loopback, @rand_addr=0x64010101, @empty, @private=0xa010101, @local]}, @rr={0x7, 0x17, 0x16, [@private=0xa010101, @rand_addr=0x64010101, @remote, @dev={0xac, 0x14, 0x14, 0x23}, @loopback]}, @timestamp_addr={0x44, 0x2c, 0xdb, 0x1, 0xa, [{@local, 0x100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7ff}, {@rand_addr=0x64010101, 0x5}, {@local, 0x2}, {@empty, 0xcbba}]}]}}}}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='cpuacct.usage_user\x00', 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e21, 0x82c4, @remote, 0x2}}, [0x1, 0x3, 0x3, 0x8, 0xc, 0x401, 0x7, 0x8, 0x99be, 0xfffffffffffffff7, 0x4, 0x7, 0x0, 0x0, 0x5]}, &(0x7f0000000340)=0x100) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000540)={r7, 0x6, 0x0, 0x800000, 0xf1}, &(0x7f0000000640)=0x18) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f00000000c0)={0xfffffffb}, 0x9) shutdown(r8, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) recvmmsg(r11, &(0x7f00000023c0)=[{{&(0x7f00000008c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000940)=""/120, 0x78}, {&(0x7f00000009c0)=""/61, 0x3d}, {&(0x7f0000000a00)=""/227, 0xe3}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/122, 0x7a}, {&(0x7f0000000b80)=""/90, 0x5a}, {&(0x7f0000000c00)=""/209, 0xd1}, {&(0x7f0000000d00)=""/197, 0xc5}, {&(0x7f0000000e00)=""/234, 0xea}], 0x9, &(0x7f0000000fc0)=""/255, 0xff}, 0x6}, {{&(0x7f00000010c0)=@in6, 0x80, &(0x7f0000001280)=[{&(0x7f0000001180)=""/53, 0x35}, {&(0x7f00000011c0)=""/157, 0x9d}, {&(0x7f0000002300)=""/179, 0xb3}], 0x3}, 0x40000000}], 0x2, 0x20, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a010400000000000000000a0000050b00020073797a320000000028000480240001800b0001007470726f7879000014000280080002400000000c080001400000000b0900010073797a3100000000140000001100010000000000000000000200000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x240008c0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x100}}}]}, 0x38}}, 0xc0f0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x2f, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x6, 0x4}, {0xe}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x7800, 0x80, 0x10001, 0x9, {{0x31, 0x4, 0x1, 0x5, 0xc4, 0x68, 0x0, 0x3, 0x2f, 0x0, @local, @empty, {[@timestamp_addr={0x44, 0x1c, 0x24, 0x1, 0x3, [{@multicast1, 0x6}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x2}, {@remote, 0x1}]}, @cipso={0x86, 0x25, 0x2, [{0x2, 0x12, "8d9592d5ed8e600b8f81f3fa25adf2e1"}, {0x2, 0x8, "df3c22359447"}, {0x1, 0x5, "e0f14d"}]}, @cipso={0x86, 0x65, 0xffffffffffffffff, [{0x2, 0x8, "0beb625f4878"}, {0x5, 0x9, "d023296b6c3e74"}, {0x0, 0xd, "9aa24e6a53521f38ee8d68"}, {0x7, 0xd, "c01266998eb1efc6e9d7a0"}, {0x6, 0xa, "4b17868f021053c3"}, {0x6, 0xc, "c2bf6e933d87dd791104"}, {0x2, 0x10, "b8cac5b439e26da210b026d248ca"}, {0x1, 0xa, "eca8ef38372e7c9a"}, {0x1, 0x4, '\"I'}]}, @timestamp={0x44, 0x8, 0x50, 0x0, 0x0, [0x70c38df]}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000024c0)=ANY=[@ANYBLOB="600000006a00040000000000fbdbdf25000000000000000004000900080001000000000008000500", @ANYBLOB="a14402ff28a25320a0933fbc6d3d1a8bd2f79bf9", @ANYRESDEC=0x0, @ANYRES32=r9, @ANYBLOB="08000a00010000000800010003000000080001000200000008000500", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x40) 4.933192121s ago: executing program 3 (id=4287): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000003030101004130f2926a742a6f7f0e2b94cb0ef3000000000000000a000001080003400000000a0c000200000000008000000008000340000003ff0c000200000000000000b9ca0800034000004ffa0c000200ff"], 0x58}, 0x1, 0x0, 0x0, 0x4801}, 0x20000001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x34}, @in6=@empty, 0x0, 0x0, 0x0, 0x20, 0xa}, {0x0, 0x0, 0x0, 0x5}, {0x8000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@private0, 0x0, 0x2}, {{@in6=@loopback, 0xffffffff, 0xff}, 0x2, @in=@multicast2, 0x0, 0x1}]}]}, 0x13c}}, 0x20000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) (async) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0xa, 0x10000, 0x400001, 0x0, 0x101, 0x1000}, 0x1c) (async) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0xa, 0x10000, 0x400001, 0x0, 0x101, 0x1000}, 0x1c) mmap(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x1000004, 0x13012, r8, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x45, &(0x7f0000000500)=ANY=[@ANYBLOB="0380c2000003bbbbbbbbbbbb08004500003700000000bc019078ac1e0001ac1414aa030090781200183f2500000000680000000100007f0000017f00000100186371ae9b1c182c70b9781c8ce6c2cbf411762188bea57446a836060cb5d935548f37c50902148b4a84b4fd4534e89ff53acd9c6f3d33e51a94242f2b5f80adbbc5e9ce315e390b09e30e1bcf9b02352a305f3aad22883a855103a716592e2c08fb6a4ac54d0921c9007bbacf42533d47d7a47e2cc560fab8f0a90bd6bc2c81d38f67f993cbd28b4ad121b243f9a3b942d4809d76acae9387992f6ad6bb3c0e925270beaf60a0e93e21f5a48db00d"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x4c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @empty}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 2.716234891s ago: executing program 3 (id=4312): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="d4000000150001002dbd7000fcdbdf210a3f10ff", @ANYRES32, @ANYBLOB="1400020020010000000000000000000000000000140001"], 0xd4}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000180100002800c0001800800010016"], 0x28}}, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000180100002800c0001800800010016"], 0x28}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x1d, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fd}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x81, 0x8, 0x1, @private0, @loopback, 0x7, 0x8, 0xfffffff8, 0x8}}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000004000000000000000000008500000036000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r9, r8, 0x25, 0x0, @val=@tracing}, 0x40) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x4, 0xffffff7f, 0x2, 0x86, 0xffffffffffffffff, 0x0, '\x00', r8, r6, 0x0, 0x0, 0x20000000}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r10, &(0x7f0000000340), 0x0}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000007000000030000000000000f050000000000000001000004a60100000400000001000000000000000100000000000012050000000400000000000012050000000600000000000010080000000061615f5f"], 0x0, 0x67, 0x0, 0x1}, 0x28) close(r2) (async) close(r2) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x1a0, 0x3f8, 0x2b8, 0x0, 0xd0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, [0xffffffff, 0xffffffff, 0x7f000101, 0xff000000], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], 'pimreg\x00', 'veth1_to_bridge\x00', {}, {}, 0xfd, 0xff, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x5, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@private=0xa010101, 0x21, 0x3b, 0x200}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x2, 0x17c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) socket(0x40000000015, 0x5, 0x0) (async) r12 = socket(0x40000000015, 0x5, 0x0) bind$inet(r12, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r12, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.453431725s ago: executing program 3 (id=4316): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x26, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x45, &(0x7f0000000040)=""/69, 0x40f00, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xa, 0x80000001, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x2, 0x1, 0x1, 0xb}, {0x5, 0x2, 0xb, 0x3}]}, 0x94) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) r6 = socket(0x400000000010, 0x3, 0x0) sendto$isdn(r6, 0x0, 0xbd, 0x8800, &(0x7f0000000040)={0x22, 0x0, 0xb7, 0x2}, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x800) (async, rerun: 64) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000900)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4000) (rerun: 64) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x14) write$cgroup_int(r5, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async, rerun: 32) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r0, 0x9, 0x6, 0xfffffffffffff24c}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x22d4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRESHEX=r0, @ANYRES32=r0], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000045, [0x2, 0x89ff]}}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x1, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x2, 0x0, 0x8}]}]}, {0x0, [0x2e, 0x2e, 0x2e]}}, 0x0, 0x35, 0x0, 0x1, 0x4}, 0x28) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r10}, 0x10) 2.383519042s ago: executing program 1 (id=4318): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x1, 0x70bd2c, 0x20, {0x0, 0x0, 0x0, 0x0, 0xdf15003157970008, 0x20c0}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x1}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x401, 0x9}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000010) 2.265578904s ago: executing program 3 (id=4319): socket$kcm(0x10, 0x2, 0x10) (async) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x40, 0x140d, 0x800, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}}, 0x20040800) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) (async) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004454) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000090002"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(0xffffffffffffffff, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0xfdef) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x40010, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) unshare(0x62040200) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r5) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0xfffff000) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000180)='`', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2, 0x540}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="b4", 0x1}], 0x1}}], 0x2, 0x0) (async) sendmmsg$inet6(r8, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000180)='`', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2, 0x540}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="b4", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r8, 0x1) (async) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000040), &(0x7f00000000c0)=0x8) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x7b, &(0x7f0000000000), 0x8) (async) setsockopt$sock_attach_bpf(r9, 0x84, 0x7b, &(0x7f0000000000), 0x8) 2.264940753s ago: executing program 2 (id=4320): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x4000}, 0x50) close(0x3) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7020000010000008500000086", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x18, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) r8 = socket$inet6(0xa, 0x6, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000140), 0x0}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0xe}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0xfff, 0x200}}}}}, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r9, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 2.240208571s ago: executing program 1 (id=4322): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18cd73e874000000000000000000000071121f0000000000950000010000064035f71758fa470b6211431a361e971481144ee23928aeebc3e08d4dfc37ac051dd9c36e43130811bd48b4ae7655ad96a7249e37a1a2061e41faae31dd2183e352c703d61b26c69d76f79e843fc2fd12a5268a492946373c4e07ae5c570ad6d3f57003195cc9295b31674a90c73cb27b2b5a87a0085b7bdba210cac47ca59e81e8b3989934d2a733818710e367c87c4777916755c9dbb6d6957613fddd6401873758151f31088bfe400dee65dfe197617173cd7a080ded59b3118ff766b73862a3b233c789"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x24}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x8, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r2, &(0x7f0000001780)=[{&(0x7f00000006c0)="ba", 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) sendmmsg$inet(r1, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000004a00)="50271b49125c5b37127a1ba8004f9286dec63f21f1df7e58a55adc3f67598b8bb9ffc059281b2a177ef10e1ee51bb526c008fbe50aa48d15fa7f842cc1cd4c6a8ce2581429387ee6a9a431c15a14f1d3a492780a967a2881440ed24ba123c10bb9a33324660541612278", 0x6a}], 0x1}}], 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="136b0000ffff0000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r5, &(0x7f0000001c00)=[{{&(0x7f0000001300)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001340)='Y', 0x1}, {0x0, 0x21}], 0x2}}], 0x1, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x2b, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) 2.022557935s ago: executing program 1 (id=4324): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xc80000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 1.879074971s ago: executing program 1 (id=4325): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280080001002100000014000700000000000000000000000000000000001400030067656e65766531"], 0x64}}, 0x2000000) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='-', @ANYRESHEX=r5], 0x27) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) close(0x4) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r9, 0x0, 0x0, 0x20, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_GET_ES_CACHE(r10, 0xc020662a, &(0x7f0000000040)={0x1, 0x9, 0x5, 0xb, 0x1, 0x0, [{0x9, 0x9, 0x6, '\x00', 0x100}]}) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x40, 0x107, 0x70bd2d, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.846216669s ago: executing program 2 (id=4326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x22, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d2bb9149a8c9b8ad1ff7568565a98f80146847b0c6c4698efb8d42bed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@cgroup=r3, r2, 0x2f, 0x203e, 0x4}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002800400338008000900", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40080) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xff, 0x57}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="222f0fa2a8a0"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) 1.754079899s ago: executing program 0 (id=4327): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000001000000000000000000000005000000fdffffffffffffffdd02040040000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b00000000000000fc010000000000000000000000000001000000000000ff000000000000000000000000000000000000000000000000000000000100000000320000000000000000000000000000000000fffffffffffffeffc0cf0000000000000000000000000700000000000000000000000000000000000001000000003c0000000277218b3bc01d49640000000000000000000000010000000103"], 0x23c}}, 0x8000000) 1.729732156s ago: executing program 2 (id=4328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @remote}, 0x14) 1.670788996s ago: executing program 4 (id=4329): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) shutdown(r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000000)="a2", 0x1}], 0x1, &(0x7f0000000040)=[@sndinfo={0x20}, @dstaddrv6={0x20, 0x84, 0x8, @dev}], 0x40}, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 1.562610046s ago: executing program 0 (id=4330): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x102, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.437563835s ago: executing program 0 (id=4331): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3ff}]}}]}, 0x48}}, 0x0) (fail_nth: 5) 1.405143956s ago: executing program 2 (id=4332): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0xd, &(0x7f0000000500)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000200)='syzkaller\x00', 0x80000000, 0xc5, &(0x7f0000000800)=""/197, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x5, 0xb, 0x200}, 0x10, 0x20210, 0xffffffffffffffff, 0x5, &(0x7f0000000600)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000700)=[{0x5, 0x4, 0xf, 0x8}, {0x3, 0x3, 0x10}, {0x2, 0x2, 0x1, 0xa}, {0x3, 0x2, 0x9, 0x3}, {0x2, 0x1}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DST={0x8, 0x1, @local}, @RTA_IIF={0x8}]}, 0x2c}}, 0x20000050) connect$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000feffffff000000000a00000085000000bc000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x0, 0x7, 0x0, &(0x7f0000000140)="d48806a2cb348b", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000200010851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afffffff8000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1.383036502s ago: executing program 4 (id=4333): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000400000004000e1ff95000000000000002ba76bb33123751c4e3409e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d046837d907b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca315f5b87e1ca6433a8acd715f5888b2007f0000000000000000010089937090c34410000000000000090000000000414027efc842b6d6f800005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdce57a79d6fce424c22001f6c3784a1975fa657d05003a32a4fd67ce446ac5430207db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bd2b5543ffc16695572361629d1022f722ec23812b70d72cd0010000007881bfa35b9fd6864e90ddb31f75f6324989cdc7044f563a1f74d4efe895fdbc463f747c08f40105869035000000000003000000000000000000000000000000000000080000003ddf4aa4b1c8b8a0ae6feb6737c275dc2740f742b5425f1d5819610608bbab35471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f15b8ee25a2a5ccf4a9b603c88e12ff25184d4e3c2f7f623559435b2c505fb7113400000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7a92a557ac2b44b8f7a49789906d922b3e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696abaa042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb328790700000021e041254f06bd7f000000000000000000000000000000282ffe000000000000000431e8e3204a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dfdb3d1179b4b9fccd0cd5b7578802c66f5dbf22ad0bd03cbe0fecd096bcf419d35988948d1cd4c51c406040000000090a3bc3cbc08255975f3cee08dab765d8a4ef870aaae3f81ed6364837171ce5564f3cf6feba1b6745409000000000000003459263499fae97e7dcb30e4cff009e0f4f78c155c4ab19b878fcb4cc14b8d2823643a17120418f42b42ed879cb23e6d4e0d11db988d0bc46de02702d29243b72215d5563bdae8c2ccda4498687cd50f3a9058f61d52d70aabccb18d41d75788faf60ce9be97c13e4252d9d112d9ac47368829f8a29eca17de807c840293dd387eee13fdecf3d5a334350f045a22b9adb0539d44d58a00fb9e83ebf4fea36b87e2afdf63f7abf5caf2b01317a5f65f22c8bcf36b390dece1e98541ae932ec3486f74c1eea673c1647568acb17efcef24a9c3504dfa7c7eefe3dcb8d570a730a0837839f54527ce334b8173e7bf73bcd8d80ef294fde6549a0f1a23b78b41f79ea543d2b38b80d3d28c6c93901b763fc8b88794aa74facc345e28f0ad79de4df5afd52e7dfc387e4d2ca4d5caca74754987dbbd4d64e233b4a1d81a9aeb981734ca5416cacf516ca8384d85310f24d393fd48c668465546117377547d11a61bd2bd9e35fa0da5118554a1d93147b103a51baf94aeb1b6292038300423344e6add2226ba5f6724a08567ef515898f0f7dfd3fc198092af3265c5df377a66bbde4fa4a049692e06ee5022c58290bdc37eeb16f4e099e33679044ba21898f76c982c8203663f1adb7bbb42ed8d9b0bb8bd9255e342959b822fa8b3d08b29f2201dfe3a3c5c8bf8bc82f249e7eb9f8571823d730fdc78c6b3122a3fd9209dcae70c10c7b17e83dd759a52fe5c362358dbb780a52f540000000000000000000011230e1d6f9fd3315ada8ecee55fc0ec6ec0ec950c0ad006a06a162035d5729795c4a58b59f9a252723480b08ae9bd52c176380a42b972a3400b5d28b273e60000007cac9d35a991c27e23ce5217fec9ce89ea2dea8ddb383e53cdd077e7c2d73404b7450664f70225897307d8a140ba97bfc2232dccdb1dd0496c219315c02f2ef46f30add1aa13e52d67116328c3a5ee3356eadea07abe8506767771d68e760f8c623fb64865a942acc4912dcd1fa5d729cb45c15577bbb8b08a705efeaf09dd6aadeb8d61501e4fd9c9b1ac845a2138cbde58a04589888c0e528a5134e1dfa8b3f6d8a76517df589cae1019a3bc280e99fb661271357dbbd7e9c42d3fe45efaaa00"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x9) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x3e}, 0x28) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r4 = socket(0x1, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r4}, 0x20) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r4, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000801}}], 0x2, 0x0) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xc4}, 0xa) 881.82903ms ago: executing program 0 (id=4334): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x100}, @TCA_FQ_FLOW_MAX_RATE={0xffffffffffffff20, 0x2, 0x10270000}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x100}, @TCA_FQ_FLOW_MAX_RATE={0xffffffffffffff20, 0x2, 0x10270000}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x9}, &(0x7f0000000340)=0x8) 880.506604ms ago: executing program 1 (id=4335): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 880.018226ms ago: executing program 2 (id=4336): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000a00bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 798.243254ms ago: executing program 4 (id=4337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'ipvlan1\x00'}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)="2e9b020007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000004c0)="b7f3dd8729bf61a740a6c7ab77820e5fc44abd546c5774e451227db3494bc82e34d148ff5370", 0x26}], 0x2) 738.006763ms ago: executing program 1 (id=4338): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') write(r0, &(0x7f0000000040)="8e81bd1b1b8d9b48846b5b713edbfc61234b337df17c6048f4d3314692da77d8aae1a20a20bf8b09430d2a88499c4f59e13ff017532cdcc6be57cc10c6ea68d9b84a244fe6956b178030093c3971de706f43d4fc4f", 0x55) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="2400000001031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48d5}, 0x8010) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xb}}, 0x4040080) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x11, 0xa, 0x300) r5 = epoll_create1(0x80000) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000000c0)={0x90000001}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="c3000e000300"}) 630.373111ms ago: executing program 2 (id=4339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x6aa5b000) r2 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f00000011c0)=@ethtool_ts_info}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000"], 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd090011000006001500020000001400168010000880"], 0x38}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000002060102000034e40000000000000008050005000a0076bae700000005000400000000000900020073797a000300686173683a6eeff5d1fa59e19065742c706f7274000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000e90000000000000000000a78000000060a0b040000000000000000020000034c000480240001800b000100736f636b657400001400028008000240000000030800014000000000240001800a000100717565756500000014000280080004400000001006000340000100000900010073797a30000000000900020073797a3200"], 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000200)={'wg0\x00'}) 629.393462ms ago: executing program 0 (id=4340): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0xc084) sendmsg$nl_route(r2, 0x0, 0x40000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x0, 0x4}, 0x2c) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x5c}}, 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x10, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3ff}]}}]}, 0x48}}, 0x0) 497.413113ms ago: executing program 4 (id=4341): r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xf0}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f00000005c0)={'filter\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x3, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xa43, 0x8000000000000001], 0x0, 0x0}, 0x78) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) 395.804992ms ago: executing program 0 (id=4342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @remote}, 0x14) 270.306375ms ago: executing program 4 (id=4343): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xd, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) recvfrom$packet(r0, &(0x7f00000000c0), 0x0, 0x10040, &(0x7f0000000180)={0x11, 0x17, r3, 0x1, 0xb, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xd, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) recvfrom$packet(r0, &(0x7f00000000c0), 0x0, 0x10040, &(0x7f0000000180)={0x11, 0x17, r3, 0x1, 0xb, 0x6, @multicast}, 0x14) (async) 186.98µs ago: executing program 3 (id=4344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket(0x10, 0x80002, 0x0) r4 = socket(0x11, 0x80a, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYRESDEC=r0], 0x270}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000028c0)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x161b060f1436d4f2}, 0x10) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) (async) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)="f7", 0x88}], 0x1}], 0x1, 0x40800) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0)=[0x1], &(0x7f0000000700), 0x4, 0x100000}}, 0x40) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r10, 0x20, &(0x7f0000000140)={&(0x7f0000000240)=""/224, 0xe0, 0x0, &(0x7f0000000780)=""/4096, 0x1000}}, 0x10) 0s ago: executing program 4 (id=4345): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3ff}]}}]}, 0x48}}, 0x0) (fail_nth: 6) kernel console output (not intermixed with test programs): stering): Released all slaves [ 298.992978][ T3425] bond1 (unregistering): (slave lo): Releasing backup interface [ 299.001772][ T3425] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 299.017906][ T3425] bond1 (unregistering): Released all slaves [ 299.094947][ T3425] bond2 (unregistering): Released all slaves [ 299.129736][T15577] netlink: 'syz.3.3165': attribute type 4 has an invalid length. [ 299.241286][ T3425] tipc: Left network mode [ 299.527499][T15593] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ï€ã,ÄûÔxµ…üb©@óìã4‰Ú3DûLÌ¥ [ 299.554576][ T5827] Bluetooth: hci4: command tx timeout [ 299.622862][T15595] tipc: Enabled bearer , priority 0 [ 299.690758][T15594] tipc: Disabling bearer [ 299.726748][T15600] netlink: 'syz.3.3172': attribute type 1 has an invalid length. [ 299.788074][ T3425] mac80211_hwsim hwsim5 wlan1 (unregistering): left promiscuous mode [ 299.888453][T15604] netlink: 'syz.4.3175': attribute type 4 has an invalid length. [ 300.042133][T15611] syzkaller0: entered promiscuous mode [ 300.064700][T15611] syzkaller0: entered allmulticast mode [ 300.149632][ T3425] hsr_slave_0: left promiscuous mode [ 300.158039][ T3425] hsr_slave_1: left promiscuous mode [ 300.174604][ T3425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.197257][ T3425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.448600][T15627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3179'. [ 300.457746][T15627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3179'. [ 300.830497][T15431] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 300.842905][T15431] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 300.877226][T15431] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 300.907369][T15431] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 300.969835][T15640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3183'. [ 301.105835][T15431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.131180][ T3425] IPVS: stop unused estimator thread 0... [ 301.142085][T15431] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.254823][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.262098][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.304940][T15649] netlink: 'syz.0.3186': attribute type 4 has an invalid length. [ 301.318922][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.326101][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.452102][T15653] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3188'. [ 301.634510][ T5827] Bluetooth: hci4: command tx timeout [ 301.650833][T15662] syzkaller0: entered promiscuous mode [ 301.662965][T15662] syzkaller0: entered allmulticast mode [ 301.697307][T15666] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3193'. [ 301.822391][T15431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.926060][T15431] veth0_vlan: entered promiscuous mode [ 301.939353][T15431] veth1_vlan: entered promiscuous mode [ 301.950161][T15670] netlink: 'syz.3.3194': attribute type 13 has an invalid length. [ 301.967753][T15672] netlink: 'syz.0.3195': attribute type 32 has an invalid length. [ 301.997379][T15431] veth0_macvtap: entered promiscuous mode [ 302.007754][T15431] veth1_macvtap: entered promiscuous mode [ 302.030121][T15431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.047323][T15431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.072687][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.088596][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.101324][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.133449][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.291340][ T3425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.318674][ T3425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.357873][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.366883][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.533158][T15686] syzkaller0: entered promiscuous mode [ 302.537161][T15694] FAULT_INJECTION: forcing a failure. [ 302.537161][T15694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.555305][T15686] syzkaller0: entered allmulticast mode [ 302.555680][T15694] CPU: 0 UID: 0 PID: 15694 Comm: syz.1.3129 Not tainted syzkaller #0 PREEMPT(full) [ 302.555703][T15694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.555716][T15694] Call Trace: [ 302.555723][T15694] [ 302.555731][T15694] dump_stack_lvl+0xe8/0x150 [ 302.555759][T15694] should_fail_ex+0x414/0x560 [ 302.555794][T15694] _copy_from_iter+0x1cd/0x1630 [ 302.555825][T15694] ? __pfx__copy_from_iter+0x10/0x10 [ 302.555845][T15694] ? __build_skb_around+0x22d/0x3c0 [ 302.555868][T15694] ? __alloc_skb+0x198/0x3b0 [ 302.555888][T15694] ? netlink_sendmsg+0x642/0xb30 [ 302.555912][T15694] ? skb_put+0x11b/0x210 [ 302.555936][T15694] netlink_sendmsg+0x6b2/0xb30 [ 302.555969][T15694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.556005][T15694] ? aa_sock_msg_perm+0xf1/0x1b0 [ 302.556031][T15694] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 302.556048][T15694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.556074][T15694] __sock_sendmsg+0x21c/0x270 [ 302.556105][T15694] ____sys_sendmsg+0x505/0x820 [ 302.556134][T15694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.556165][T15694] ? import_iovec+0x74/0xa0 [ 302.556190][T15694] ___sys_sendmsg+0x21f/0x2a0 [ 302.556215][T15694] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.556270][T15694] ? __fget_files+0x2a/0x420 [ 302.556292][T15694] ? __fget_files+0x3a0/0x420 [ 302.556324][T15694] __x64_sys_sendmsg+0x19b/0x260 [ 302.556350][T15694] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.556382][T15694] ? __pfx_ksys_write+0x10/0x10 [ 302.556411][T15694] do_syscall_64+0xec/0xf80 [ 302.556431][T15694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.556449][T15694] ? trace_irq_disable+0x37/0x100 [ 302.556472][T15694] ? clear_bhb_loop+0x60/0xb0 [ 302.556494][T15694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.556512][T15694] RIP: 0033:0x7f964438f749 [ 302.556528][T15694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.556545][T15694] RSP: 002b:00007f96452d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.556564][T15694] RAX: ffffffffffffffda RBX: 00007f96445e5fa0 RCX: 00007f964438f749 [ 302.556578][T15694] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 302.556590][T15694] RBP: 00007f96452d2090 R08: 0000000000000000 R09: 0000000000000000 [ 302.556603][T15694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.556614][T15694] R13: 00007f96445e6038 R14: 00007f96445e5fa0 R15: 00007fffca490018 [ 302.556645][T15694] [ 302.725278][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.823426][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.831454][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.846284][T15702] netlink: 'syz.1.3205': attribute type 32 has an invalid length. [ 302.855839][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.864765][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.726247][ T5835] Bluetooth: hci4: command tx timeout [ 304.093566][T15703] syzkaller0: entered promiscuous mode [ 304.099740][T15703] syzkaller0: entered allmulticast mode [ 304.132103][T15713] tipc: Started in network mode [ 304.140520][T15713] tipc: Node identity , cluster identity 4711 [ 304.146884][T15713] tipc: Failed to obtain node identity [ 304.152369][T15713] tipc: Enabling of bearer rejected, failed to enable media [ 304.203344][T15697] lo speed is unknown, defaulting to 1000 [ 304.225663][T15716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3210'. [ 304.237765][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.288357][T15719] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3210'. [ 304.324083][T15716] 8021q: adding VLAN 0 to HW filter on device bond4 [ 304.405032][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.555240][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.588669][T15733] FAULT_INJECTION: forcing a failure. [ 304.588669][T15733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.604359][T15733] CPU: 1 UID: 0 PID: 15733 Comm: syz.0.3215 Not tainted syzkaller #0 PREEMPT(full) [ 304.604385][T15733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.604397][T15733] Call Trace: [ 304.604405][T15733] [ 304.604413][T15733] dump_stack_lvl+0xe8/0x150 [ 304.604441][T15733] should_fail_ex+0x414/0x560 [ 304.604474][T15733] _copy_to_user+0x31/0xb0 [ 304.604513][T15733] simple_read_from_buffer+0xe1/0x170 [ 304.604538][T15733] proc_fail_nth_read+0x1b3/0x220 [ 304.604561][T15733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.604582][T15733] ? rw_verify_area+0x2a6/0x4d0 [ 304.604609][T15733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.604630][T15733] vfs_read+0x200/0xa30 [ 304.604646][T15733] ? fdget_pos+0x247/0x320 [ 304.604674][T15733] ? __pfx___mutex_lock+0x10/0x10 [ 304.604698][T15733] ? __pfx_vfs_read+0x10/0x10 [ 304.604717][T15733] ? __fget_files+0x2a/0x420 [ 304.604743][T15733] ? __fget_files+0x3a0/0x420 [ 304.604765][T15733] ? __fget_files+0x2a/0x420 [ 304.604796][T15733] ksys_read+0x145/0x250 [ 304.604817][T15733] ? __pfx_ksys_read+0x10/0x10 [ 304.604844][T15733] do_syscall_64+0xec/0xf80 [ 304.604865][T15733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.604882][T15733] ? trace_irq_disable+0x37/0x100 [ 304.604904][T15733] ? clear_bhb_loop+0x60/0xb0 [ 304.604926][T15733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.604944][T15733] RIP: 0033:0x7f2455d8e15c [ 304.604961][T15733] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 304.604979][T15733] RSP: 002b:00007f2456ced030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 304.605001][T15733] RAX: ffffffffffffffda RBX: 00007f2455fe5fa0 RCX: 00007f2455d8e15c [ 304.605015][T15733] RDX: 000000000000000f RSI: 00007f2456ced0a0 RDI: 000000000000000a [ 304.605028][T15733] RBP: 00007f2456ced090 R08: 0000000000000000 R09: 0000000000000000 [ 304.605040][T15733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.605051][T15733] R13: 00007f2455fe6038 R14: 00007f2455fe5fa0 R15: 00007ffefb9f4a78 [ 304.605085][T15733] [ 304.870970][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.913985][ T5835] Bluetooth: hci2: command tx timeout [ 304.931831][T15727] syzkaller0: entered promiscuous mode [ 304.938702][T15727] syzkaller0: entered allmulticast mode [ 304.962728][T15745] syzkaller0: entered promiscuous mode [ 304.969426][T15745] syzkaller0: entered allmulticast mode [ 305.133898][T15750] syzkaller0: entered promiscuous mode [ 305.144201][T15750] syzkaller0: entered allmulticast mode [ 305.281527][T15766] netlink: 'syz.3.3228': attribute type 32 has an invalid length. [ 305.352772][T15767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3225'. [ 305.497313][ T154] bridge_slave_1: left allmulticast mode [ 305.502991][ T154] bridge_slave_1: left promiscuous mode [ 305.510600][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.530696][ T154] bridge_slave_0: left allmulticast mode [ 305.537210][ T154] bridge_slave_0: left promiscuous mode [ 305.543042][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.274900][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.285595][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.295824][ T154] bond0 (unregistering): Released all slaves [ 306.336557][T15788] tipc: Started in network mode [ 306.341447][T15788] tipc: Node identity 92b4cde10378, cluster identity 4711 [ 306.387949][T15788] tipc: Enabled bearer , priority 0 [ 306.417614][T15790] syzkaller0: entered promiscuous mode [ 306.423094][T15790] syzkaller0: entered allmulticast mode [ 306.452617][ T154] hmac(sha224): left promiscuous mode [ 306.492315][T15697] chnl_net:caif_netlink_parms(): no params data found [ 306.556897][ T154] tipc: Left network mode [ 306.561566][T15794] tipc: Resetting bearer [ 306.625417][T15794] tipc: Disabling bearer [ 306.644206][T15800] lo speed is unknown, defaulting to 1000 [ 306.793565][T15804] netlink: 'syz.3.3236': attribute type 10 has an invalid length. [ 306.819286][T15804] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 307.040599][ T5835] Bluetooth: hci2: command tx timeout [ 307.471000][T15697] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.483879][T15697] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.492851][T15697] bridge_slave_0: entered allmulticast mode [ 307.504503][T15697] bridge_slave_0: entered promiscuous mode [ 307.512967][T15697] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.520474][T15697] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.527924][T15697] bridge_slave_1: entered allmulticast mode [ 307.536776][T15697] bridge_slave_1: entered promiscuous mode [ 307.752377][T15826] syzkaller0: entered promiscuous mode [ 307.757950][T15826] syzkaller0: entered allmulticast mode [ 307.838335][T15697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.851295][T15697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.060235][T15697] team0: Port device team_slave_0 added [ 308.085266][T15697] team0: Port device team_slave_1 added [ 308.223584][ T154] hsr_slave_0: left promiscuous mode [ 308.235318][ T154] hsr_slave_1: left promiscuous mode [ 308.245689][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.274609][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.300945][T15848] netlink: 'syz.2.3245': attribute type 7 has an invalid length. [ 308.837376][ T154] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 309.008652][ T154] team_slave_1 (unregistering): left promiscuous mode [ 309.016538][ T154] team_slave_1 (unregistering): left allmulticast mode [ 309.028878][ T154] team0 (unregistering): Port device team_slave_1 removed [ 309.086764][ T5835] Bluetooth: hci2: command tx timeout [ 309.188937][ T154] team_slave_0 (unregistering): left promiscuous mode [ 309.196431][ T154] team_slave_0 (unregistering): left allmulticast mode [ 309.218859][ T154] team0 (unregistering): Port device team_slave_0 removed [ 309.726527][ T5880] lo speed is unknown, defaulting to 1000 [ 309.732456][ T5880] infiniband syz2: ib_query_port failed (-19) [ 309.801265][T15697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.814780][T15697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.851422][T15697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.875224][T15697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.882170][T15697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.939016][T15697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.115098][T15858] tipc: Enabled bearer , priority 0 [ 310.127825][T15858] syzkaller0: entered promiscuous mode [ 310.133307][T15858] syzkaller0: entered allmulticast mode [ 310.165415][T15858] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 310.189912][T15697] hsr_slave_0: entered promiscuous mode [ 310.205756][T15697] hsr_slave_1: entered promiscuous mode [ 310.254118][T15858] tipc: Resetting bearer [ 310.263591][T15857] tipc: Resetting bearer [ 310.279629][T15857] tipc: Disabling bearer [ 310.434071][T15870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3253'. [ 310.505883][ T5835] block nbd1: Receive control failed (result -1) [ 311.186789][ T5835] Bluetooth: hci2: command tx timeout [ 311.932004][T15831] Set syz1 is full, maxelem 65536 reached [ 312.918690][T15931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3267'. [ 312.946353][T15924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3265'. [ 312.958039][T15924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3265'. [ 313.076174][T15938] netlink: 'syz.3.3268': attribute type 13 has an invalid length. [ 313.287229][T15944] syzkaller0: entered promiscuous mode [ 313.293048][T15944] syzkaller0: entered allmulticast mode [ 313.519441][T15697] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 313.631510][T15697] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 313.649402][T15963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3274'. [ 313.669425][T15697] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 313.848707][T15697] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 313.874521][T15971] netlink: 'syz.1.3277': attribute type 1 has an invalid length. [ 313.931452][T15968] FAULT_INJECTION: forcing a failure. [ 313.931452][T15968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.959565][T15971] vlan2: entered promiscuous mode [ 313.963850][T15968] CPU: 1 UID: 0 PID: 15968 Comm: syz.0.3276 Not tainted syzkaller #0 PREEMPT(full) [ 313.963874][T15968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 313.963886][T15968] Call Trace: [ 313.963894][T15968] [ 313.963901][T15968] dump_stack_lvl+0xe8/0x150 [ 313.963929][T15968] should_fail_ex+0x414/0x560 [ 313.963963][T15968] _copy_from_user+0x2d/0xb0 [ 313.963986][T15968] ___sys_sendmsg+0x158/0x2a0 [ 313.964012][T15968] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.964039][T15968] ? kstrtouint+0x6e/0xe0 [ 313.964089][T15968] ? __fget_files+0x2a/0x420 [ 313.964111][T15968] ? __fget_files+0x3a0/0x420 [ 313.964142][T15968] __sys_sendmmsg+0x227/0x430 [ 313.964169][T15968] ? __pfx___sys_sendmmsg+0x10/0x10 [ 313.964190][T15968] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 313.964236][T15968] ? ksys_write+0x22a/0x250 [ 313.964255][T15968] ? __pfx_ksys_write+0x10/0x10 [ 313.964278][T15968] __x64_sys_sendmmsg+0xa0/0xc0 [ 313.964303][T15968] do_syscall_64+0xec/0xf80 [ 313.964324][T15968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.964342][T15968] ? trace_irq_disable+0x37/0x100 [ 313.964366][T15968] ? clear_bhb_loop+0x60/0xb0 [ 313.964388][T15968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.964405][T15968] RIP: 0033:0x7f2455d8f749 [ 313.964422][T15968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.964439][T15968] RSP: 002b:00007f2456ced038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 313.964458][T15968] RAX: ffffffffffffffda RBX: 00007f2455fe5fa0 RCX: 00007f2455d8f749 [ 313.964472][T15968] RDX: 0000000000000001 RSI: 00002000000017c0 RDI: 0000000000000006 [ 313.964484][T15968] RBP: 00007f2456ced090 R08: 0000000000000000 R09: 0000000000000000 [ 313.964496][T15968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.964508][T15968] R13: 00007f2455fe6038 R14: 00007f2455fe5fa0 R15: 00007ffefb9f4a78 [ 313.964537][T15968] [ 314.177620][T15971] macvlan1: entered promiscuous mode [ 314.183122][T15971] vlan2: entered allmulticast mode [ 314.188767][T15971] macvlan1: entered allmulticast mode [ 314.199830][T15971] veth1_vlan: entered allmulticast mode [ 314.205979][T15971] af_packet: tpacket_rcv: packet too big, clamped from 1528 to 4294967272. macoff=96 [ 314.233415][T15986] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3280'. [ 314.294055][T15986] netlink: 'syz.2.3280': attribute type 13 has an invalid length. [ 314.433165][T15697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.493662][T15697] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.518055][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.525248][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.630950][T15998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.693645][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.700853][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.817139][T16007] netlink: 'syz.2.3287': attribute type 1 has an invalid length. [ 314.887176][T16007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.921055][T15697] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.949071][T15697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.059293][T16007] veth3: entered promiscuous mode [ 315.088871][T16010] netlink: 'syz.3.3288': attribute type 10 has an invalid length. [ 315.107821][T16010] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 315.452096][T16025] FAULT_INJECTION: forcing a failure. [ 315.452096][T16025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.499712][T16025] CPU: 1 UID: 0 PID: 16025 Comm: syz.0.3291 Not tainted syzkaller #0 PREEMPT(full) [ 315.499742][T16025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 315.499754][T16025] Call Trace: [ 315.499761][T16025] [ 315.499769][T16025] dump_stack_lvl+0xe8/0x150 [ 315.499799][T16025] should_fail_ex+0x414/0x560 [ 315.499832][T16025] _copy_from_user+0x2d/0xb0 [ 315.499858][T16025] __copy_msghdr+0x3c5/0x5b0 [ 315.499886][T16025] ___sys_sendmsg+0x1a5/0x2a0 [ 315.499908][T16025] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.499937][T16025] ? kstrtouint+0x6e/0xe0 [ 315.499987][T16025] ? __fget_files+0x2a/0x420 [ 315.500008][T16025] ? __fget_files+0x3a0/0x420 [ 315.500040][T16025] __sys_sendmmsg+0x227/0x430 [ 315.500068][T16025] ? __pfx___sys_sendmmsg+0x10/0x10 [ 315.500089][T16025] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 315.500134][T16025] ? ksys_write+0x22a/0x250 [ 315.500154][T16025] ? __pfx_ksys_write+0x10/0x10 [ 315.500176][T16025] __x64_sys_sendmmsg+0xa0/0xc0 [ 315.500200][T16025] do_syscall_64+0xec/0xf80 [ 315.500220][T16025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.500239][T16025] ? trace_irq_disable+0x37/0x100 [ 315.500263][T16025] ? clear_bhb_loop+0x60/0xb0 [ 315.500283][T16025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.500300][T16025] RIP: 0033:0x7f2455d8f749 [ 315.500317][T16025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.500335][T16025] RSP: 002b:00007f2456ced038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 315.500356][T16025] RAX: ffffffffffffffda RBX: 00007f2455fe5fa0 RCX: 00007f2455d8f749 [ 315.500370][T16025] RDX: 0000000000000001 RSI: 00002000000017c0 RDI: 0000000000000006 [ 315.500381][T16025] RBP: 00007f2456ced090 R08: 0000000000000000 R09: 0000000000000000 [ 315.500394][T16025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.500406][T16025] R13: 00007f2455fe6038 R14: 00007f2455fe5fa0 R15: 00007ffefb9f4a78 [ 315.500437][T16025] [ 315.802763][T16035] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3294'. [ 315.842898][T15697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.958351][T16042] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.3296'. [ 315.983259][T16042] netlink: Conntrack attr has 4 unknown bytes [ 315.996634][T16042] netlink: 'syz.0.3296': attribute type 12 has an invalid length. [ 316.604148][T16068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3304'. [ 316.610284][T16067] syzkaller0: entered promiscuous mode [ 316.619912][T16067] syzkaller0: entered allmulticast mode [ 316.623995][T16068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3304'. [ 316.636329][T16068] netlink: 'syz.2.3304': attribute type 19 has an invalid length. [ 316.646347][T16068] netlink: 'syz.2.3304': attribute type 20 has an invalid length. [ 316.658737][T16069] Cannot find map_set index 0 as target [ 316.722555][T15697] veth0_vlan: entered promiscuous mode [ 316.744996][T15697] veth1_vlan: entered promiscuous mode [ 316.787710][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3306'. [ 316.797004][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3306'. [ 316.826274][T16074] erspan0: entered allmulticast mode [ 316.831850][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3307'. [ 316.876259][T16076] openvswitch: netlink: Unknown nsh attribute 0 [ 316.969171][T16077] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.998129][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.041158][T15697] veth0_macvtap: entered promiscuous mode [ 317.044966][T16084] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3309'. [ 317.095523][T16084] openvswitch: netlink: Missing key (keys=40, expected=100) [ 317.135680][T16077] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.160430][T16084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3309'. [ 317.217685][T16084] 8021q: adding VLAN 0 to HW filter on device bond2 [ 317.227319][T15697] veth1_macvtap: entered promiscuous mode [ 317.268066][T16088] 8021q: adding VLAN 0 to HW filter on device bond2 [ 317.277961][T16088] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 317.289932][T16088] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 317.358275][T16077] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.434946][T15697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.491101][T16077] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.526966][T15697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.627630][T10839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.652193][T10839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.820343][T10839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.841881][T10839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.922778][T16105] lo speed is unknown, defaulting to 1000 [ 317.947305][ T154] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.985093][T16105] lo speed is unknown, defaulting to 1000 [ 317.999123][T16105] lo speed is unknown, defaulting to 1000 [ 318.031494][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.052997][T16105] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 318.204837][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.213143][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.221366][T10839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.231499][T16105] lo speed is unknown, defaulting to 1000 [ 318.243853][T10839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.264990][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.273200][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.287318][T16105] lo speed is unknown, defaulting to 1000 [ 318.306100][T16105] lo speed is unknown, defaulting to 1000 [ 318.319447][T16105] lo speed is unknown, defaulting to 1000 [ 318.330254][T16105] lo speed is unknown, defaulting to 1000 [ 318.338594][T16105] lo speed is unknown, defaulting to 1000 [ 318.934329][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.950487][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.958540][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.972818][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.983207][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 319.093356][T16132] lo speed is unknown, defaulting to 1000 [ 319.234963][T16151] netlink: 'syz.4.3323': attribute type 3 has an invalid length. [ 320.188397][T16132] chnl_net:caif_netlink_parms(): no params data found [ 320.416948][T16190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3332'. [ 320.559407][T16184] lo speed is unknown, defaulting to 1000 [ 320.727556][T16132] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.740296][T16132] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.748365][T16132] bridge_slave_0: entered allmulticast mode [ 320.766041][T16132] bridge_slave_0: entered promiscuous mode [ 320.822821][T16132] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.833002][T16132] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.842226][T16132] bridge_slave_1: entered allmulticast mode [ 320.850266][T16132] bridge_slave_1: entered promiscuous mode [ 321.054592][T16132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.076679][ T5827] Bluetooth: hci1: command tx timeout [ 321.079209][T16132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.261405][T16132] team0: Port device team_slave_0 added [ 321.283421][T16132] team0: Port device team_slave_1 added [ 321.369608][T16132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.384930][T16132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.434773][T16132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.461457][T16132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.472934][T16132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.528015][T16132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.573405][T16214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3339'. [ 321.670982][T16132] hsr_slave_0: entered promiscuous mode [ 321.686938][T16132] hsr_slave_1: entered promiscuous mode [ 321.701430][T16132] debugfs: 'hsr0' already exists in 'hsr' [ 321.715744][T16132] Cannot create hsr debugfs directory [ 321.878337][T16221] netlink: 'syz.1.3341': attribute type 4 has an invalid length. [ 322.088066][T16225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.169724][T16229] bond_slave_0: entered promiscuous mode [ 322.175759][T16229] bond_slave_1: entered promiscuous mode [ 322.242401][T16229] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 322.281430][T16229] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 322.394712][T16225] bridge_slave_0: left allmulticast mode [ 322.405917][T16225] bridge_slave_0: left promiscuous mode [ 322.412392][T16225] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.438133][T16225] bridge_slave_1: left allmulticast mode [ 322.454195][T16225] bridge_slave_1: left promiscuous mode [ 322.470205][T16225] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.492829][T16225] bond0: (slave bond_slave_0): Releasing backup interface [ 322.507195][T16225] bond_slave_0: left promiscuous mode [ 322.529602][T16225] bond0: (slave bond_slave_1): Releasing backup interface [ 322.545595][T16225] bond_slave_1: left promiscuous mode [ 322.561047][T16225] team0: Port device team_slave_0 removed [ 322.572970][T16225] team0: Port device team_slave_1 removed [ 322.580508][T16225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.588359][T16225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.615064][T16225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.622453][T16225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.634474][T16225] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 322.695759][T10836] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 322.790092][T16232] lo speed is unknown, defaulting to 1000 [ 322.797583][ T60] bond1: (slave macvlan2): link status definitely down, disabling slave [ 322.822580][T16227] lo speed is unknown, defaulting to 1000 [ 322.887505][T16132] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.153917][ T5827] Bluetooth: hci1: command tx timeout [ 323.174316][T10839] bond1: (slave macvlan2): link status definitely down, disabling slave [ 323.251124][T16132] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.283553][T16246] syzkaller0: entered promiscuous mode [ 323.289185][T16246] syzkaller0: entered allmulticast mode [ 323.303618][T16244] syzkaller0: entered promiscuous mode [ 323.309576][T16244] syzkaller0: entered allmulticast mode [ 323.429764][T16132] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.567975][T16132] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.817944][T16260] netlink: 'syz.3.3352': attribute type 4 has an invalid length. [ 323.844397][T16132] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.858653][T16132] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.899813][T16132] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.931898][T16132] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 323.991215][T16268] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 324.000670][T16272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3355'. [ 324.018657][T16268] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 324.089910][T16277] netlink: 'syz.1.3356': attribute type 11 has an invalid length. [ 324.109740][T16132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.192083][T16272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3355'. [ 324.197542][T16132] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.227994][T16272] vlan2: entered promiscuous mode [ 324.233143][T16272] bond0: entered promiscuous mode [ 324.239641][T16272] bond_slave_0: entered promiscuous mode [ 324.245874][T16272] bond_slave_1: entered promiscuous mode [ 324.283092][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.290256][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.311708][T16286] lo speed is unknown, defaulting to 1000 [ 324.320078][T16284] syzkaller0: entered promiscuous mode [ 324.328404][T16284] syzkaller0: entered allmulticast mode [ 324.349710][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.356896][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.733045][T16299] lo speed is unknown, defaulting to 1000 [ 324.914539][T16307] lo speed is unknown, defaulting to 1000 [ 325.234201][ T5827] Bluetooth: hci1: command tx timeout [ 325.349835][T16132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.650795][T16331] IPVS: length: 55 != 8 [ 325.707282][T16132] veth0_vlan: entered promiscuous mode [ 325.749611][T16132] veth1_vlan: entered promiscuous mode [ 325.807774][T16336] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.929320][T16340] netlink: 'syz.4.3372': attribute type 10 has an invalid length. [ 325.938534][T16340] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 325.964748][T16336] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.072621][T16336] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.141771][T16132] veth0_macvtap: entered promiscuous mode [ 326.156589][T16350] netlink: 'syz.4.3375': attribute type 4 has an invalid length. [ 326.170331][T16132] veth1_macvtap: entered promiscuous mode [ 326.185727][T16336] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.248355][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3377'. [ 326.249874][T16132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.308726][T16132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.349772][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.367163][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.431708][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.446343][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.500223][T10839] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.575906][ T60] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.613595][T10839] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.700590][T16377] netlink: 'syz.2.3386': attribute type 13 has an invalid length. [ 326.719187][T16377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3386'. [ 326.733962][ T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.747078][T16372] netlink: 'syz.3.3384': attribute type 10 has an invalid length. [ 326.771506][T16372] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 326.827311][T16375] lo speed is unknown, defaulting to 1000 [ 326.982816][T16383] netlink: 'syz.2.3388': attribute type 1 has an invalid length. [ 327.024317][T16383] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3388'. [ 327.031617][T10836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.075617][T10836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.227382][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.256765][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.313921][ T5827] Bluetooth: hci1: command tx timeout [ 327.674187][T16400] lo speed is unknown, defaulting to 1000 [ 327.998148][T16428] netlink: 'syz.4.3398': attribute type 13 has an invalid length. [ 328.006355][T16428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3398'. [ 328.018278][T16421] bridge0: port 3(batadv0) entered disabled state [ 328.024909][T16421] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.032279][T16421] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.051244][T16398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.057344][T16424] Cannot find del_set index 0 as target [ 328.125651][T16421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.139040][T16421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.209000][T16421] vlan2: left promiscuous mode [ 328.214678][T16421] bond0: left promiscuous mode [ 328.219457][T16421] bond_slave_0: left promiscuous mode [ 328.225511][T16421] bond_slave_1: left promiscuous mode [ 328.232814][T16417] syzkaller0: entered promiscuous mode [ 328.243216][T16417] syzkaller0: entered allmulticast mode [ 328.255385][ T60] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.300850][ T60] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.318874][ T60] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.340589][ T60] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.350617][T16432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3399'. [ 328.510765][T16441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3402'. [ 328.523201][T16441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3402'. [ 328.831928][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3406'. [ 328.969846][T16457] lo speed is unknown, defaulting to 1000 [ 329.055276][T16460] netlink: 'syz.3.3409': attribute type 13 has an invalid length. [ 329.058945][T16462] netlink: 'syz.1.3410': attribute type 10 has an invalid length. [ 329.063361][T16460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3409'. [ 329.094605][T16462] veth0_vlan: left promiscuous mode [ 329.103250][T16462] veth0_vlan: entered promiscuous mode [ 329.125585][T16462] team0: Device veth0_vlan failed to register rx_handler [ 329.284722][T16465] syzkaller0: entered promiscuous mode [ 329.290232][T16465] syzkaller0: entered allmulticast mode [ 329.290892][T16468] netlink: 'syz.3.3412': attribute type 7 has an invalid length. [ 329.344943][T16468] netlink: 'syz.3.3412': attribute type 8 has an invalid length. [ 329.597565][T16481] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 329.681102][T16486] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3416'. [ 329.690502][T16486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3416'. [ 329.698934][T16484] raw_sendmsg: syz.1.3416 forgot to set AF_INET. Fix it! [ 329.910533][T16497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.023402][T16491] team0: Failed to send options change via netlink (err -105) [ 330.063754][T16491] team0: Port device geneve0 added [ 330.287352][T16511] syzkaller0: entered promiscuous mode [ 330.295167][T16511] syzkaller0: entered allmulticast mode [ 331.515761][T16525] validate_nla: 3 callbacks suppressed [ 331.515778][T16525] netlink: 'syz.4.3429': attribute type 10 has an invalid length. [ 331.529295][T16525] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 331.832985][T16545] lo speed is unknown, defaulting to 1000 [ 331.924989][T16560] __nla_validate_parse: 2 callbacks suppressed [ 331.925006][T16560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3439'. [ 331.973478][T16564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3441'. [ 332.162979][T16557] lo speed is unknown, defaulting to 1000 [ 332.289486][T16573] netlink: 'syz.3.3442': attribute type 10 has an invalid length. [ 332.297452][T16573] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 332.859236][T16596] syzkaller0: entered promiscuous mode [ 332.891067][T16596] syzkaller0: entered allmulticast mode [ 333.406194][T16608] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3451'. [ 333.828613][ T5880] IPVS: starting estimator thread 0... [ 333.944804][T16624] IPVS: using max 30 ests per chain, 72000 per kthread [ 333.972531][T16619] : entered promiscuous mode [ 333.983731][T16637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3459'. [ 337.051417][T16650] netlink: 'syz.2.3461': attribute type 13 has an invalid length. [ 337.177252][T16650] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.184973][T16650] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.293643][T16650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.310749][T16650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.475658][ T5908] lo speed is unknown, defaulting to 1000 [ 337.481637][ T5908] syz2: Port: 1 Link DOWN [ 337.513621][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.551723][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.577667][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3466'. [ 337.595257][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.617579][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.760776][T16671] tipc: Enabled bearer , priority 0 [ 337.784264][T16671] syzkaller0: entered promiscuous mode [ 337.789883][T16671] syzkaller0: entered allmulticast mode [ 337.833224][T16671] tipc: Resetting bearer [ 337.870654][T16669] tipc: Resetting bearer [ 337.924336][T16669] tipc: Disabling bearer [ 338.046952][T16684] tipc: Started in network mode [ 338.052015][T16684] tipc: Node identity ba6163e0f313, cluster identity 4711 [ 338.062335][T16684] tipc: Enabled bearer , priority 0 [ 338.076990][T16684] syzkaller0: entered promiscuous mode [ 338.082644][T16684] syzkaller0: entered allmulticast mode [ 338.091903][T16684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3473'. [ 338.102096][T16684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3473'. [ 338.182503][T16684] tipc: Resetting bearer [ 338.198112][T16683] tipc: Resetting bearer [ 338.223606][T16683] tipc: Disabling bearer [ 338.463302][T16699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3477'. [ 338.485495][ T60] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.485594][T16699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3477'. [ 338.509176][ T60] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.534165][ T60] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.545800][ T60] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.602748][T16690] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3474'. [ 338.612242][T16690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3474'. [ 338.662460][T16709] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3479'. [ 338.690967][T16693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3474'. [ 338.710525][T16713] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3480'. [ 339.162658][T16730] lo speed is unknown, defaulting to 1000 [ 339.324113][T16743] netlink: 'syz.0.3484': attribute type 13 has an invalid length. [ 339.813612][T16746] bond0: (slave bond_slave_1): Releasing backup interface [ 340.188479][T16773] netlink: 'syz.3.3495': attribute type 13 has an invalid length. [ 340.283316][T16778] netlink: 'syz.0.3496': attribute type 10 has an invalid length. [ 340.306068][T16778] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 340.508945][T16799] netlink: 'syz.0.3502': attribute type 32 has an invalid length. [ 340.715197][T16812] netlink: 'syz.0.3505': attribute type 13 has an invalid length. [ 340.828153][T16821] netlink: 'syz.4.3507': attribute type 13 has an invalid length. [ 340.869753][T16825] xt_SECMARK: invalid mode: 0 [ 340.900578][T16812] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.908159][T16812] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.981789][T16826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.090429][T16812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.116757][T16812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.350895][ T1011] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.372027][ T1011] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.413935][ T1011] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.432837][ T1011] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.460821][ T1011] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.484630][ T1011] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.506800][ T1011] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.525340][ T1011] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.543826][ T1011] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.560027][T16848] netlink: 'syz.0.3512': attribute type 10 has an invalid length. [ 341.573818][T16848] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 341.597644][ T1011] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.624047][ T1011] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.653159][ T1011] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.684690][T16855] netlink: 'syz.3.3515': attribute type 32 has an invalid length. [ 341.794886][T16863] netlink: 'syz.1.3518': attribute type 11 has an invalid length. [ 341.895048][T16873] syzkaller0: entered promiscuous mode [ 341.922377][T16873] syzkaller0: entered allmulticast mode [ 342.093485][T16881] netlink: 'syz.2.3522': attribute type 13 has an invalid length. [ 342.143052][ T1011] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.155021][ T1011] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.174612][ T1011] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.183518][ T1011] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.342086][T16893] netem: change failed [ 355.646150][T16916] syzkaller0: entered promiscuous mode [ 355.657263][T16916] syzkaller0: entered allmulticast mode [ 355.674333][T16920] __nla_validate_parse: 7 callbacks suppressed [ 355.674348][T16920] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3534'. [ 355.700837][T16918] netlink: 'syz.4.3535': attribute type 13 has an invalid length. [ 355.719173][T16923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3536'. [ 355.831502][T16928] netlink: 640 bytes leftover after parsing attributes in process `syz.1.3539'. [ 355.854132][T16928] netlink: 640 bytes leftover after parsing attributes in process `syz.1.3539'. [ 355.901639][T16918] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.909423][T16918] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.076430][T16918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.125973][T16918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.135410][T16942] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3542'. [ 356.202248][T16945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3542'. [ 356.295144][T16923] bridge_slave_1: left allmulticast mode [ 356.304203][T16923] bridge_slave_1: left promiscuous mode [ 356.315547][T16923] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.349309][T16923] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 356.368451][T16929] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3536'. [ 356.520268][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.545990][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.575033][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.585959][T16957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3545'. [ 356.654572][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.818289][T16951] lo speed is unknown, defaulting to 1000 [ 356.985266][T16967] syzkaller0: entered promiscuous mode [ 357.022875][T16967] syzkaller0: entered allmulticast mode [ 357.593932][T16983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3555'. [ 357.603382][T16988] gretap1: entered promiscuous mode [ 357.609619][T16988] batman_adv: batadv0: Adding interface: gretap1 [ 357.627662][T16988] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 357.646283][T16995] xt_hashlimit: size too large, truncated to 1048576 [ 357.648656][T16988] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 357.690377][T16995] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 357.717857][T16993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3555'. [ 358.088563][T17007] lo speed is unknown, defaulting to 1000 [ 358.103454][T16998] lo speed is unknown, defaulting to 1000 [ 358.433188][T17029] batadv1: entered promiscuous mode [ 358.524649][T17037] syzkaller1: entered promiscuous mode [ 358.540273][T17037] syzkaller1: entered allmulticast mode [ 359.072470][T17052] bond2: Removing last arp target with arp_interval on [ 359.772237][T17100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.779789][T17083] lo speed is unknown, defaulting to 1000 [ 359.784869][T17100] netlink: 'syz.2.3585': attribute type 1 has an invalid length. [ 359.915561][T17100] 8021q: adding VLAN 0 to HW filter on device bond3 [ 359.973837][T17099] bond3: (slave geneve2): making interface the new active one [ 359.982800][T17099] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 359.997586][ T3687] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.023084][ T3687] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.039437][T17110] IPv6: Can't replace route, no match found [ 360.071529][ T3687] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.115860][ T3687] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.546209][T17131] syzkaller0: entered promiscuous mode [ 360.572314][T17131] syzkaller0: entered allmulticast mode [ 360.718703][T17137] lo speed is unknown, defaulting to 1000 [ 360.878965][T17140] lo speed is unknown, defaulting to 1000 [ 360.978202][T17146] __nla_validate_parse: 10 callbacks suppressed [ 360.978228][T17146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3599'. [ 361.000621][T17146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3599'. [ 361.032494][T17146] netlink: 'syz.4.3599': attribute type 4 has an invalid length. [ 361.053947][T17152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3599'. [ 361.087086][T17152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3599'. [ 361.115920][T17152] netlink: 'syz.4.3599': attribute type 4 has an invalid length. [ 361.181445][T17152] delete_channel: no stack [ 361.199302][T17152] delete_channel: no stack [ 362.223575][T17183] syzkaller0: entered promiscuous mode [ 362.229337][T17183] syzkaller0: entered allmulticast mode [ 362.815149][T17207] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 362.822483][T17212] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 362.847574][T17204] lo speed is unknown, defaulting to 1000 [ 362.855845][T17201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3616'. [ 363.244221][T17228] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3626'. [ 363.250989][T17222] syzkaller0: entered promiscuous mode [ 363.265090][T17228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3626'. [ 363.274617][T17222] syzkaller0: entered allmulticast mode [ 363.500959][T17241] netlink: 'syz.4.3629': attribute type 13 has an invalid length. [ 363.630989][T17254] netlink: 'syz.0.3632': attribute type 8 has an invalid length. [ 363.815118][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3637'. [ 363.885951][T17272] tipc: Started in network mode [ 363.890854][T17272] tipc: Node identity 9a7b4983b8a6, cluster identity 4711 [ 363.921751][T17272] tipc: Enabled bearer , priority 0 [ 363.943615][T17280] syzkaller0: entered promiscuous mode [ 363.960058][T17280] syzkaller0: entered allmulticast mode [ 363.981091][T17277] veth1_to_bond: entered allmulticast mode [ 364.009716][T17272] tipc: Resetting bearer [ 364.069239][T17271] tipc: Resetting bearer [ 364.070071][T17284] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3642'. [ 364.094946][T17271] tipc: Disabling bearer [ 364.134752][T17286] syzkaller0: entered promiscuous mode [ 364.150759][T17286] syzkaller0: entered allmulticast mode [ 364.296670][T17297] netlink: 'syz.3.3648': attribute type 4 has an invalid length. [ 364.325327][T17294] netlink: 'syz.0.3646': attribute type 10 has an invalid length. [ 364.355744][T17294] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 364.392115][T17302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3651'. [ 364.580551][T17304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.688902][T17304] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.781836][T17304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.061135][T17331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 365.253612][T17343] lo: entered allmulticast mode [ 365.302459][T17351] netlink: 'syz.1.3660': attribute type 4 has an invalid length. [ 365.350127][T17353] syzkaller0: entered promiscuous mode [ 365.364996][T17353] syzkaller0: entered allmulticast mode [ 365.376725][T17343] lo: left allmulticast mode [ 365.567122][T17363] xt_CT: You must specify a L4 protocol and not use inversions on it [ 365.809157][T17374] bridge_slave_1: left allmulticast mode [ 365.846213][T17374] bridge_slave_1: left promiscuous mode [ 365.852018][T17374] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.960938][T17374] bridge_slave_0: left allmulticast mode [ 365.977843][T17374] bridge_slave_0: left promiscuous mode [ 365.983631][T17374] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.073577][T17394] __nla_validate_parse: 8 callbacks suppressed [ 366.073594][T17394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3673'. [ 366.171437][T17397] netlink: 'syz.4.3674': attribute type 15 has an invalid length. [ 366.173856][T17398] netlink: 'syz.4.3674': attribute type 15 has an invalid length. [ 366.203093][T17398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3674'. [ 366.203969][T17397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3674'. [ 366.398763][T17404] netlink: 'syz.4.3676': attribute type 13 has an invalid length. [ 366.505012][T17408] lo speed is unknown, defaulting to 1000 [ 366.549675][T17413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3679'. [ 366.731322][T17418] lo speed is unknown, defaulting to 1000 [ 366.868295][T17420] lo speed is unknown, defaulting to 1000 [ 367.022215][T17442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3688'. [ 367.460227][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3695'. [ 367.521536][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3695'. [ 367.719207][T17490] trusted_key: syz.3.3700 sent an empty control message without MSG_MORE. [ 367.804720][T17482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.964878][T17496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3699'. [ 368.223955][T17516] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3706'. [ 368.283391][T17520] batman_adv: batadv0: Adding interface: macsec1 [ 368.313254][T17520] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.342757][T17520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.357541][T17520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.381925][T17520] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 368.416684][T17525] syzkaller0: entered promiscuous mode [ 368.422188][T17525] syzkaller0: entered allmulticast mode [ 368.431717][T17528] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3710'. [ 368.521684][T17533] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 368.536909][T17527] tipc: Started in network mode [ 368.541813][T17527] tipc: Node identity c64a5968ef92, cluster identity 4711 [ 368.553899][T17527] tipc: Enabled bearer , priority 0 [ 368.628358][T17541] Unsupported ieee802154 address type: 0 [ 368.641035][T17524] tipc: Resetting bearer [ 368.692730][T17524] tipc: Disabling bearer [ 368.736600][T17551] syzkaller0: entered promiscuous mode [ 368.742244][T17551] syzkaller0: entered allmulticast mode [ 368.833303][T17558] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 368.991887][T17560] netlink: 'syz.4.3719': attribute type 5 has an invalid length. [ 369.096529][T17561] syzkaller1: entered allmulticast mode [ 369.244916][T17582] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 369.287108][T17582] vlan4: entered promiscuous mode [ 369.293007][T17582] vlan4: entered allmulticast mode [ 369.326572][T17582] hsr_slave_1: entered allmulticast mode [ 369.455768][T17586] lo speed is unknown, defaulting to 1000 [ 369.525187][T17593] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 369.738087][T17599] syzkaller0: entered promiscuous mode [ 369.745531][T17599] syzkaller0: entered allmulticast mode [ 370.385438][T17641] syzkaller0: entered promiscuous mode [ 370.390933][T17641] syzkaller0: entered allmulticast mode [ 370.495714][T17641] FAULT_INJECTION: forcing a failure. [ 370.495714][T17641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.514682][T17641] CPU: 0 UID: 0 PID: 17641 Comm: syz.2.3732 Not tainted syzkaller #0 PREEMPT(full) [ 370.514729][T17641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 370.514755][T17641] Call Trace: [ 370.514763][T17641] [ 370.514772][T17641] dump_stack_lvl+0xe8/0x150 [ 370.514803][T17641] should_fail_ex+0x414/0x560 [ 370.514838][T17641] _copy_from_iter+0x1cd/0x1630 [ 370.514867][T17641] ? sock_alloc_send_pskb+0x86b/0x980 [ 370.514900][T17641] ? __pfx__copy_from_iter+0x10/0x10 [ 370.514930][T17641] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 370.514959][T17641] skb_copy_datagram_from_iter+0xf5/0x720 [ 370.514988][T17641] ? dev_get_by_index+0x22/0x2e0 [ 370.515015][T17641] ? skb_put+0x11b/0x210 [ 370.515040][T17641] packet_sendmsg+0x3797/0x5080 [ 370.515077][T17641] ? aa_update_label_name+0x91/0x3d0 [ 370.515130][T17641] ? aa_sk_perm+0x15f/0x920 [ 370.515154][T17641] ? __pfx_packet_sendmsg+0x10/0x10 [ 370.515180][T17641] ? aa_sk_perm+0x7ee/0x920 [ 370.515208][T17641] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 370.515240][T17641] ? aa_sock_msg_perm+0xf1/0x1b0 [ 370.515271][T17641] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 370.515289][T17641] ? __pfx_packet_sendmsg+0x10/0x10 [ 370.515317][T17641] __sock_sendmsg+0x21c/0x270 [ 370.515349][T17641] __sys_sendto+0x3bd/0x520 [ 370.515376][T17641] ? __pfx___sys_sendto+0x10/0x10 [ 370.515395][T17641] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 370.515431][T17641] ? __fget_files+0x3a0/0x420 [ 370.515466][T17641] ? ksys_write+0x22a/0x250 [ 370.515486][T17641] ? __pfx_ksys_write+0x10/0x10 [ 370.515510][T17641] __x64_sys_sendto+0xde/0x100 [ 370.515535][T17641] do_syscall_64+0xec/0xf80 [ 370.515557][T17641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.515575][T17641] ? trace_irq_disable+0x37/0x100 [ 370.515600][T17641] ? clear_bhb_loop+0x60/0xb0 [ 370.515623][T17641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.515646][T17641] RIP: 0033:0x7f5658f8f749 [ 370.515664][T17641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.515683][T17641] RSP: 002b:00007f5659e47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 370.515705][T17641] RAX: ffffffffffffffda RBX: 00007f56591e5fa0 RCX: 00007f5658f8f749 [ 370.515721][T17641] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 0000000000000007 [ 370.515735][T17641] RBP: 00007f5659e47090 R08: 0000200000000140 R09: 0000000000000014 [ 370.515749][T17641] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 370.515762][T17641] R13: 00007f56591e6038 R14: 00007f56591e5fa0 R15: 00007fff387ceb68 [ 370.515795][T17641] [ 370.518510][T17658] netlink: 'syz.4.3735': attribute type 1 has an invalid length. [ 370.747831][T17648] lo speed is unknown, defaulting to 1000 [ 370.867830][T17668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.949658][T17670] syzkaller0: entered promiscuous mode [ 370.955422][T17670] syzkaller0: entered allmulticast mode [ 371.066915][T17668] lo speed is unknown, defaulting to 1000 [ 371.075606][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.094271][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.104433][T17682] __nla_validate_parse: 8 callbacks suppressed [ 371.104448][T17682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3738'. [ 371.210280][T17688] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 371.249510][T17692] openvswitch: netlink: Message has 113 unknown bytes. [ 371.369055][T17697] SET target dimension over the limit! [ 371.462782][T17699] tipc: Enabled bearer , priority 0 [ 371.522197][T17707] syzkaller0: entered promiscuous mode [ 371.530557][T17707] syzkaller0: entered allmulticast mode [ 371.565540][T17699] lo speed is unknown, defaulting to 1000 [ 371.574253][T17702] tipc: Disabling bearer [ 371.679464][T17707] FAULT_INJECTION: forcing a failure. [ 371.679464][T17707] name failslab, interval 1, probability 0, space 0, times 0 [ 371.692417][T17707] CPU: 0 UID: 0 PID: 17707 Comm: syz.0.3750 Not tainted syzkaller #0 PREEMPT(full) [ 371.692444][T17707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 371.692456][T17707] Call Trace: [ 371.692465][T17707] [ 371.692473][T17707] dump_stack_lvl+0xe8/0x150 [ 371.692504][T17707] should_fail_ex+0x414/0x560 [ 371.692539][T17707] should_failslab+0xa8/0x100 [ 371.692565][T17707] kmem_cache_alloc_noprof+0x88/0x710 [ 371.692596][T17707] ? skb_clone+0x212/0x3a0 [ 371.692626][T17707] skb_clone+0x212/0x3a0 [ 371.692650][T17707] ? dev_queue_xmit_nit+0x268/0xad0 [ 371.692676][T17707] dev_queue_xmit_nit+0x29a/0xad0 [ 371.692700][T17707] ? lockdep_hardirqs_on+0x7b/0x110 [ 371.692721][T17707] ? dev_queue_xmit_nit+0x2d/0xad0 [ 371.692753][T17707] dev_hard_start_xmit+0x1c1/0x800 [ 371.692795][T17707] sch_direct_xmit+0x241/0x4b0 [ 371.692824][T17707] ? __pfx_sch_direct_xmit+0x10/0x10 [ 371.692847][T17707] ? netem_enqueue+0x17e4/0x38a0 [ 371.692878][T17707] __qdisc_run+0xa88/0x1510 [ 371.692926][T17707] qdisc_run+0xc7/0x300 [ 371.692948][T17707] __dev_queue_xmit+0x18e3/0x31c0 [ 371.692983][T17707] ? __dev_queue_xmit+0x289/0x31c0 [ 371.693019][T17707] ? _copy_from_iter+0x215/0x1630 [ 371.693042][T17707] ? __pfx___dev_queue_xmit+0x10/0x10 [ 371.693067][T17707] ? sock_alloc_send_pskb+0x86b/0x980 [ 371.693102][T17707] ? packet_parse_headers+0x7ff/0xb60 [ 371.693124][T17707] ? packet_parse_headers+0x8b8/0xb60 [ 371.693154][T17707] ? skb_copy_datagram_from_iter+0x60c/0x720 [ 371.693185][T17707] ? packet_xmit+0x68/0x330 [ 371.693208][T17707] packet_sendmsg+0x3e33/0x5080 [ 371.693245][T17707] ? aa_update_label_name+0x91/0x3d0 [ 371.693297][T17707] ? aa_sk_perm+0x15f/0x920 [ 371.693320][T17707] ? __pfx_packet_sendmsg+0x10/0x10 [ 371.693346][T17707] ? aa_sk_perm+0x7ee/0x920 [ 371.693376][T17707] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 371.693406][T17707] ? aa_sock_msg_perm+0xf1/0x1b0 [ 371.693432][T17707] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 371.693450][T17707] ? __pfx_packet_sendmsg+0x10/0x10 [ 371.693479][T17707] __sock_sendmsg+0x21c/0x270 [ 371.693513][T17707] __sys_sendto+0x3bd/0x520 [ 371.693537][T17707] ? __pfx___sys_sendto+0x10/0x10 [ 371.693557][T17707] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 371.693591][T17707] ? __fget_files+0x3a0/0x420 [ 371.693625][T17707] ? ksys_write+0x22a/0x250 [ 371.693650][T17707] ? __pfx_ksys_write+0x10/0x10 [ 371.693672][T17707] __x64_sys_sendto+0xde/0x100 [ 371.693695][T17707] do_syscall_64+0xec/0xf80 [ 371.693715][T17707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.693732][T17707] ? trace_irq_disable+0x37/0x100 [ 371.693757][T17707] ? clear_bhb_loop+0x60/0xb0 [ 371.693780][T17707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.693799][T17707] RIP: 0033:0x7f531798f749 [ 371.693818][T17707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.693836][T17707] RSP: 002b:00007f5318879038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 371.693857][T17707] RAX: ffffffffffffffda RBX: 00007f5317be5fa0 RCX: 00007f531798f749 [ 371.693872][T17707] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 0000000000000007 [ 371.693886][T17707] RBP: 00007f5318879090 R08: 0000200000000140 R09: 0000000000000014 [ 371.693906][T17707] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 371.693918][T17707] R13: 00007f5317be6038 R14: 00007f5317be5fa0 R15: 00007fff88a40678 [ 371.693951][T17707] [ 372.154989][T17727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3753'. [ 372.444025][T17749] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3759'. [ 372.459960][T17749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3759'. [ 372.556679][T17753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3758'. [ 372.715161][T17758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3761'. [ 372.868245][T17753] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 372.876737][T17753] macvlan3: entered promiscuous mode [ 372.890324][T17753] macvlan3: entered allmulticast mode [ 372.895901][T17753] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 373.195378][T17765] netlink: 'syz.2.3764': attribute type 1 has an invalid length. [ 373.374495][T17772] syzkaller0: entered promiscuous mode [ 373.391950][T17772] syzkaller0: entered allmulticast mode [ 373.398253][T17776] IPv6: addrconf: prefix option has invalid lifetime [ 373.442080][T17772] FAULT_INJECTION: forcing a failure. [ 373.442080][T17772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.456233][T17772] CPU: 0 UID: 0 PID: 17772 Comm: syz.2.3766 Not tainted syzkaller #0 PREEMPT(full) [ 373.456261][T17772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.456275][T17772] Call Trace: [ 373.456283][T17772] [ 373.456292][T17772] dump_stack_lvl+0xe8/0x150 [ 373.456323][T17772] should_fail_ex+0x414/0x560 [ 373.456363][T17772] _copy_to_user+0x31/0xb0 [ 373.456390][T17772] simple_read_from_buffer+0xe1/0x170 [ 373.456420][T17772] proc_fail_nth_read+0x1b3/0x220 [ 373.456445][T17772] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.456469][T17772] ? rw_verify_area+0x2a6/0x4d0 [ 373.456499][T17772] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 373.456522][T17772] vfs_read+0x200/0xa30 [ 373.456539][T17772] ? fdget_pos+0x247/0x320 [ 373.456567][T17772] ? __pfx___mutex_lock+0x10/0x10 [ 373.456593][T17772] ? __pfx_vfs_read+0x10/0x10 [ 373.456613][T17772] ? __fget_files+0x2a/0x420 [ 373.456641][T17772] ? __fget_files+0x3a0/0x420 [ 373.456664][T17772] ? __fget_files+0x2a/0x420 [ 373.456696][T17772] ksys_read+0x145/0x250 [ 373.456718][T17772] ? __pfx_ksys_read+0x10/0x10 [ 373.456748][T17772] do_syscall_64+0xec/0xf80 [ 373.456771][T17772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.456797][T17772] ? trace_irq_disable+0x37/0x100 [ 373.456822][T17772] ? clear_bhb_loop+0x60/0xb0 [ 373.456846][T17772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.456865][T17772] RIP: 0033:0x7f5658f8e15c [ 373.456883][T17772] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 373.456901][T17772] RSP: 002b:00007f5659e47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 373.456923][T17772] RAX: ffffffffffffffda RBX: 00007f56591e5fa0 RCX: 00007f5658f8e15c [ 373.456939][T17772] RDX: 000000000000000f RSI: 00007f5659e470a0 RDI: 0000000000000008 [ 373.456953][T17772] RBP: 00007f5659e47090 R08: 0000000000000000 R09: 0000000000000014 [ 373.456966][T17772] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 373.456979][T17772] R13: 00007f56591e6038 R14: 00007f56591e5fa0 R15: 00007fff387ceb68 [ 373.457012][T17772] [ 373.794540][T17787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3771'. [ 373.945385][T17788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3771'. [ 373.958553][T17788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3771'. [ 373.980492][T17792] netlink: 'syz.2.3774': attribute type 30 has an invalid length. [ 373.981166][T17802] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3777'. [ 374.040968][T17792] bond4: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 374.066956][T17792] bond4 (unregistering): Released all slaves [ 374.351186][T17820] netlink: zone id is out of range [ 374.356936][T17820] netlink: zone id is out of range [ 374.370093][T17820] netlink: zone id is out of range [ 374.378601][T17820] netlink: zone id is out of range [ 374.388427][T17820] netlink: zone id is out of range [ 374.396499][T17820] netlink: zone id is out of range [ 374.423224][T17829] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 374.431701][T17820] netlink: zone id is out of range [ 374.441180][T17820] netlink: zone id is out of range [ 374.452901][T17820] netlink: zone id is out of range [ 374.485977][T17820] netlink: zone id is out of range [ 374.546155][T17838] netlink: 'syz.1.3787': attribute type 1 has an invalid length. [ 374.895952][T17860] syzkaller0: entered promiscuous mode [ 374.924301][T17860] syzkaller0: entered allmulticast mode [ 375.266063][T17875] veth2: entered allmulticast mode [ 375.296737][T17878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.316414][T17878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.332610][T17878] batman_adv: batadv0: Removing interface: gretap1 [ 375.425414][T17872] syzkaller0: entered promiscuous mode [ 375.431051][T17872] syzkaller0: entered allmulticast mode [ 375.523195][T17886] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 375.550940][T17886] bond2 (unregistering): Released all slaves [ 375.987388][T17911] netlink: 'syz.4.3806': attribute type 1 has an invalid length. [ 376.950708][T17928] x_tables: duplicate entry at hook 1 [ 377.820193][T17904] lo speed is unknown, defaulting to 1000 [ 377.828315][T17914] lo speed is unknown, defaulting to 1000 [ 377.961067][T17942] __nla_validate_parse: 12 callbacks suppressed [ 377.961085][T17942] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3816'. [ 378.299794][T17951] lo speed is unknown, defaulting to 1000 [ 378.725648][T17959] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3821'. [ 378.757158][T17961] lo speed is unknown, defaulting to 1000 [ 378.777859][T17975] netlink: 'syz.2.3826': attribute type 5 has an invalid length. [ 378.814554][T17975] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3826'. [ 378.824704][T17977] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3825'. [ 378.895609][T17980] netlink: 'syz.0.3827': attribute type 32 has an invalid length. [ 379.033931][T17964] lo speed is unknown, defaulting to 1000 [ 379.141432][T17990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3831'. [ 379.379556][T17995] syzkaller0: entered promiscuous mode [ 379.385608][T17995] syzkaller0: entered allmulticast mode [ 379.884939][T18014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 379.919080][T18007] lo speed is unknown, defaulting to 1000 [ 379.956512][T18021] netlink: 'syz.2.3840': attribute type 32 has an invalid length. [ 380.120849][T18029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3843'. [ 380.183438][T18029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3843'. [ 380.399814][T18041] syzkaller0: entered promiscuous mode [ 380.415705][T18041] syzkaller0: entered allmulticast mode [ 380.581616][T18055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3851'. [ 380.632605][T18059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3851'. [ 380.750698][T18068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3851'. [ 380.762954][T18067] netlink: 'syz.2.3855': attribute type 32 has an invalid length. [ 380.979062][T18060] net_ratelimit: 46 callbacks suppressed [ 380.979082][T18060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.257742][T18089] lo speed is unknown, defaulting to 1000 [ 381.349751][T18091] lo speed is unknown, defaulting to 1000 [ 381.349768][T18087] netlink: 'syz.4.3859': attribute type 10 has an invalid length. [ 381.349788][T18087] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 381.571519][T18100] lo speed is unknown, defaulting to 1000 [ 382.240221][T18120] netlink: 'syz.2.3868': attribute type 13 has an invalid length. [ 382.242138][T18126] bond4: option arp_validate: invalid value (18446744073491447809) [ 382.267666][T18126] bond4 (unregistering): Released all slaves [ 382.606557][ T3687] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.663810][ T3687] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.745533][ T3687] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.763995][ T3687] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.788375][T18147] netlink: 'syz.4.3873': attribute type 10 has an invalid length. [ 382.801157][T18147] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 383.000409][T18161] lo speed is unknown, defaulting to 1000 [ 383.031743][T18173] __nla_validate_parse: 9 callbacks suppressed [ 383.031761][T18173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3879'. [ 383.055423][T18162] bond4: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 383.070843][T18161] lo speed is unknown, defaulting to 1000 [ 383.088067][T18161] lo speed is unknown, defaulting to 1000 [ 383.341157][T18173] nbd: socks must be embedded in a SOCK_ITEM attr [ 383.840260][T18161] infiniband syz0: set active [ 383.851041][T17328] lo speed is unknown, defaulting to 1000 [ 383.871153][T18161] infiniband syz0: added lo [ 383.943436][T18161] RDS/IB: syz0: added [ 383.948448][T18190] netlink: 'syz.1.3882': attribute type 16 has an invalid length. [ 383.957253][T18161] smc: adding ib device syz0 with port count 1 [ 383.963622][T18161] smc: ib device syz0 port 1 has no pnetid [ 383.971701][T18190] netlink: 'syz.1.3882': attribute type 17 has an invalid length. [ 383.990458][T17328] lo speed is unknown, defaulting to 1000 [ 384.015351][T18161] lo speed is unknown, defaulting to 1000 [ 384.025960][T10836] bond1: (slave macvlan2): link status definitely down, disabling slave [ 384.060563][T18192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3883'. [ 384.082845][T18190] erspan0: left allmulticast mode [ 384.142375][T18190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.459241][T18161] lo speed is unknown, defaulting to 1000 [ 384.611014][T18218] lo speed is unknown, defaulting to 1000 [ 384.767498][T18223] netlink: 'syz.1.3890': attribute type 4 has an invalid length. [ 384.896091][T18161] lo speed is unknown, defaulting to 1000 [ 384.986818][T18235] syzkaller0: entered allmulticast mode [ 385.094690][T18237] sctp: [Deprecated]: syz.1.3892 (pid 18237) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.094690][T18237] Use struct sctp_sack_info instead [ 385.139124][T18239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3894'. [ 385.453462][T18244] syzkaller0: entered promiscuous mode [ 385.475923][T18244] syzkaller0: entered allmulticast mode [ 385.495464][T18218] lo speed is unknown, defaulting to 1000 [ 387.010689][T18161] lo speed is unknown, defaulting to 1000 [ 387.021910][T18262] tipc: Started in network mode [ 387.033977][T18262] tipc: Node identity 4, cluster identity 4711 [ 387.040153][T18262] tipc: Node number set to 4 [ 387.462246][T18161] lo speed is unknown, defaulting to 1000 [ 387.578016][T18285] FAULT_INJECTION: forcing a failure. [ 387.578016][T18285] name failslab, interval 1, probability 0, space 0, times 0 [ 387.623009][T18285] CPU: 1 UID: 0 PID: 18285 Comm: syz.1.3904 Not tainted syzkaller #0 PREEMPT(full) [ 387.623038][T18285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.623050][T18285] Call Trace: [ 387.623059][T18285] [ 387.623068][T18285] dump_stack_lvl+0xe8/0x150 [ 387.623097][T18285] should_fail_ex+0x414/0x560 [ 387.623131][T18285] should_failslab+0xa8/0x100 [ 387.623156][T18285] kmem_cache_alloc_noprof+0x88/0x710 [ 387.623184][T18285] ? __netlink_lookup+0xbd/0x8a0 [ 387.623213][T18285] ? skb_clone+0x212/0x3a0 [ 387.623243][T18285] skb_clone+0x212/0x3a0 [ 387.623272][T18285] __netlink_deliver_tap+0x404/0x850 [ 387.623310][T18285] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.623337][T18285] netlink_deliver_tap+0x19c/0x1b0 [ 387.623364][T18285] netlink_unicast+0x7fa/0x9e0 [ 387.623397][T18285] ? __pfx_netlink_unicast+0x10/0x10 [ 387.623420][T18285] ? __alloc_skb+0x198/0x3b0 [ 387.623441][T18285] ? netlink_sendmsg+0x642/0xb30 [ 387.623466][T18285] ? skb_put+0x11b/0x210 [ 387.623491][T18285] netlink_sendmsg+0x805/0xb30 [ 387.623528][T18285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.623558][T18285] ? aa_sock_msg_perm+0xf1/0x1b0 [ 387.623592][T18285] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.623611][T18285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.623642][T18285] __sock_sendmsg+0x21c/0x270 [ 387.623672][T18285] ____sys_sendmsg+0x505/0x820 [ 387.623702][T18285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.623737][T18285] ? import_iovec+0x74/0xa0 [ 387.623765][T18285] ___sys_sendmsg+0x21f/0x2a0 [ 387.623792][T18285] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.623851][T18285] ? __fget_files+0x2a/0x420 [ 387.623875][T18285] ? __fget_files+0x3a0/0x420 [ 387.623909][T18285] __x64_sys_sendmsg+0x19b/0x260 [ 387.623937][T18285] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.623971][T18285] ? __pfx_ksys_write+0x10/0x10 [ 387.624002][T18285] do_syscall_64+0xec/0xf80 [ 387.624026][T18285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.624045][T18285] ? trace_irq_disable+0x37/0x100 [ 387.624071][T18285] ? clear_bhb_loop+0x60/0xb0 [ 387.624096][T18285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.624116][T18285] RIP: 0033:0x7f964438f749 [ 387.624134][T18285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.624153][T18285] RSP: 002b:00007f9645290038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.624176][T18285] RAX: ffffffffffffffda RBX: 00007f96445e6180 RCX: 00007f964438f749 [ 387.624193][T18285] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000005 [ 387.624207][T18285] RBP: 00007f9645290090 R08: 0000000000000000 R09: 0000000000000000 [ 387.624220][T18285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.624233][T18285] R13: 00007f96445e6218 R14: 00007f96445e6180 R15: 00007fffca490018 [ 387.624267][T18285] [ 388.039736][T18161] lo speed is unknown, defaulting to 1000 [ 388.171222][T18293] tipc: Enabled bearer , priority 0 [ 388.206737][T18292] tipc: Disabling bearer [ 388.262653][T18161] lo speed is unknown, defaulting to 1000 [ 388.664117][T18288] lo speed is unknown, defaulting to 1000 [ 388.830475][T18312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3913'. [ 388.905200][T18312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.958653][T18314] lo speed is unknown, defaulting to 1000 [ 389.064037][T18314] lo speed is unknown, defaulting to 1000 [ 389.341891][T18333] FAULT_INJECTION: forcing a failure. [ 389.341891][T18333] name failslab, interval 1, probability 0, space 0, times 0 [ 389.401624][T18333] CPU: 1 UID: 0 PID: 18333 Comm: syz.1.3918 Not tainted syzkaller #0 PREEMPT(full) [ 389.401651][T18333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 389.401664][T18333] Call Trace: [ 389.401672][T18333] [ 389.401681][T18333] dump_stack_lvl+0xe8/0x150 [ 389.401710][T18333] should_fail_ex+0x414/0x560 [ 389.401744][T18333] should_failslab+0xa8/0x100 [ 389.401770][T18333] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 389.401800][T18333] ? __alloc_skb+0x198/0x3b0 [ 389.401821][T18333] ? __alloc_skb+0x1dc/0x3b0 [ 389.401839][T18333] ? __local_bh_enable_ip+0xd0/0x130 [ 389.401861][T18333] ? __alloc_skb+0x198/0x3b0 [ 389.401883][T18333] __alloc_skb+0x1dc/0x3b0 [ 389.401908][T18333] netlink_ack+0x146/0xa50 [ 389.401933][T18333] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 389.401954][T18333] ? ref_tracker_free+0x63a/0x7d0 [ 389.401975][T18333] ? __asan_memcpy+0x40/0x70 [ 389.402002][T18333] ? __pfx_ref_tracker_free+0x10/0x10 [ 389.402032][T18333] netlink_rcv_skb+0x28c/0x470 [ 389.402060][T18333] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 389.402084][T18333] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 389.402121][T18333] ? netlink_deliver_tap+0x2e/0x1b0 [ 389.402156][T18333] netlink_unicast+0x82f/0x9e0 [ 389.402189][T18333] ? __pfx_netlink_unicast+0x10/0x10 [ 389.402212][T18333] ? __alloc_skb+0x198/0x3b0 [ 389.402240][T18333] ? netlink_sendmsg+0x642/0xb30 [ 389.402265][T18333] ? skb_put+0x11b/0x210 [ 389.402291][T18333] netlink_sendmsg+0x805/0xb30 [ 389.402327][T18333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.402358][T18333] ? aa_sock_msg_perm+0xf1/0x1b0 [ 389.402385][T18333] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 389.402404][T18333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.402432][T18333] __sock_sendmsg+0x21c/0x270 [ 389.402464][T18333] ____sys_sendmsg+0x505/0x820 [ 389.402492][T18333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 389.402522][T18333] ? import_iovec+0x74/0xa0 [ 389.402549][T18333] ___sys_sendmsg+0x21f/0x2a0 [ 389.402576][T18333] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.402634][T18333] ? __fget_files+0x2a/0x420 [ 389.402658][T18333] ? __fget_files+0x3a0/0x420 [ 389.402692][T18333] __x64_sys_sendmsg+0x19b/0x260 [ 389.402719][T18333] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 389.402753][T18333] ? __pfx_ksys_write+0x10/0x10 [ 389.402783][T18333] do_syscall_64+0xec/0xf80 [ 389.402805][T18333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.402823][T18333] ? trace_irq_disable+0x37/0x100 [ 389.402847][T18333] ? clear_bhb_loop+0x60/0xb0 [ 389.402871][T18333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.402890][T18333] RIP: 0033:0x7f964438f749 [ 389.402908][T18333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.402926][T18333] RSP: 002b:00007f9645290038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.402947][T18333] RAX: ffffffffffffffda RBX: 00007f96445e6180 RCX: 00007f964438f749 [ 389.402963][T18333] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000005 [ 389.402977][T18333] RBP: 00007f9645290090 R08: 0000000000000000 R09: 0000000000000000 [ 389.402990][T18333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.403002][T18333] R13: 00007f96445e6218 R14: 00007f96445e6180 R15: 00007fffca490018 [ 389.403034][T18333] [ 389.889211][T18341] netlink: 'syz.0.3920': attribute type 13 has an invalid length. [ 389.986128][T18344] tipc: Enabled bearer , priority 0 [ 390.010378][T18338] tipc: Disabling bearer [ 390.509713][T18359] netlink: 'syz.1.3926': attribute type 1 has an invalid length. [ 390.574619][T18359] 8021q: adding VLAN 0 to HW filter on device bond5 [ 390.583304][T18362] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3923'. [ 390.709343][T18359] bond5: (slave veth3): Enslaving as an active interface with a down link [ 390.767366][T18375] bond5: entered allmulticast mode [ 390.831576][T18384] tipc: Enabled bearer , priority 0 [ 390.910134][T18380] tipc: Disabling bearer [ 391.110617][T16832] IPVS: starting estimator thread 0... [ 391.223806][T18401] IPVS: using max 30 ests per chain, 72000 per kthread [ 391.312015][T18416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3941'. [ 391.343984][T18414] lo speed is unknown, defaulting to 1000 [ 391.351856][T18414] lo speed is unknown, defaulting to 1000 [ 391.622059][T18440] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3948'. [ 391.631962][T18440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3948'. [ 391.641483][T18440] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3948'. [ 391.671624][T18442] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3947'. [ 391.799801][T18446] netlink: 'syz.1.3950': attribute type 4 has an invalid length. [ 392.390777][T18471] syzkaller0: entered promiscuous mode [ 392.396997][T18471] syzkaller0: entered allmulticast mode [ 392.527321][T18470] lo speed is unknown, defaulting to 1000 [ 392.591913][T18474] vlan0: entered promiscuous mode [ 392.603547][T18474] team0: entered promiscuous mode [ 392.619084][T18474] team_slave_0: entered promiscuous mode [ 392.629620][T18474] team_slave_1: entered promiscuous mode [ 392.706230][T18470] lo speed is unknown, defaulting to 1000 [ 392.825478][T18479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3960'. [ 393.083175][T18486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3962'. [ 393.120247][T18486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3962'. [ 393.140455][T18486] netlink: 'syz.2.3962': attribute type 15 has an invalid length. [ 393.207318][T18496] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 393.580743][T18507] lo speed is unknown, defaulting to 1000 [ 393.656079][T18507] lo speed is unknown, defaulting to 1000 [ 393.736442][T18511] nbd: socks must be embedded in a SOCK_ITEM attr [ 393.944512][T18515] lo speed is unknown, defaulting to 1000 [ 394.049755][T18524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.059594][T18523] __nla_validate_parse: 1 callbacks suppressed [ 394.059613][T18523] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3974'. [ 394.146319][T18524] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 394.385597][T18533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3976'. [ 394.572213][T18515] lo speed is unknown, defaulting to 1000 [ 394.817511][T18546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3980'. [ 394.844444][T18546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3980'. [ 394.901023][T18546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: macsec1 [ 394.923759][T18546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.965808][T18546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.979358][T18546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.991922][T17324] lo speed is unknown, defaulting to 1000 [ 395.164856][T18550] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3976'. [ 395.798654][T18567] bond6: entered promiscuous mode [ 395.820149][T18567] macvlan4: entered promiscuous mode [ 395.825585][T18567] macvlan4: entered allmulticast mode [ 395.832447][T18567] bond6: (slave macvlan4): Opening slave failed [ 395.873889][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 396.049744][ T3687] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 396.076756][T18583] syzkaller0: entered promiscuous mode [ 396.082247][T18583] syzkaller0: entered allmulticast mode [ 396.114678][T18585] netlink: 'syz.4.3991': attribute type 6 has an invalid length. [ 396.306010][T18594] syzkaller0: entered promiscuous mode [ 396.311791][T18594] syzkaller0: entered allmulticast mode [ 396.752085][T18618] lo speed is unknown, defaulting to 1000 [ 396.762682][T18618] lo speed is unknown, defaulting to 1000 [ 396.988521][T18625] netlink: 'syz.4.4003': attribute type 10 has an invalid length. [ 397.015817][T18625] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 397.559812][T18620] delete_channel: no stack [ 397.583971][T18648] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4007'. [ 397.962351][T18669] netlink: 'syz.3.4012': attribute type 1 has an invalid length. [ 398.203599][T18671] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 398.234517][T18671] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 398.261360][T18671] bond1: (slave xfrm1): making interface the new active one [ 398.288592][T18671] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 398.328601][T18680] bond4: Removing last arp target with arp_interval on [ 398.337432][T18679] netlink: 'syz.0.4016': attribute type 10 has an invalid length. [ 398.352072][T18679] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 398.592092][ T30] audit: type=1804 audit(1768368652.237:4): pid=18694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4019" name="memory.events" dev="tmpfs" ino=1143 res=1 errno=0 [ 398.660134][ T30] audit: type=1800 audit(1768368652.237:5): pid=18694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4019" name="memory.events" dev="tmpfs" ino=1143 res=0 errno=0 [ 398.685124][T18703] lo speed is unknown, defaulting to 1000 [ 398.692237][T18707] wg1: entered promiscuous mode [ 398.697814][T18707] wg1: entered allmulticast mode [ 398.704800][T18703] lo speed is unknown, defaulting to 1000 [ 398.904275][T18721] IPVS: length: 8 != 405364254680 [ 399.220119][T18733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4027'. [ 399.338982][T18733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4027'. [ 399.500801][T18744] tipc: Enabled bearer , priority 0 [ 399.520168][T18743] tipc: Disabling bearer [ 400.071570][T18779] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 400.126126][T18779] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4036'. [ 400.198833][T18784] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4036'. [ 400.238440][T18786] syzkaller0: entered promiscuous mode [ 400.250878][T18786] syzkaller0: entered allmulticast mode [ 400.311718][T18789] syzkaller0: entered promiscuous mode [ 400.317660][T18789] syzkaller0: entered allmulticast mode [ 400.377483][T18793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4041'. [ 400.489774][ T5827] block nbd2: Receive control failed (result -32) [ 400.729840][T18811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4046'. [ 400.782270][T18813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4047'. [ 400.795463][T18813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4047'. [ 400.815094][T18813] netlink: 'syz.3.4047': attribute type 11 has an invalid length. [ 400.904916][T18819] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 401.030461][T18826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.047464][T18819] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4050'. [ 401.065011][T18826] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.088679][T18826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.105108][T16832] lo speed is unknown, defaulting to 1000 [ 401.107816][T18824] netlink: 'syz.3.4051': attribute type 3 has an invalid length. [ 401.119758][T18824] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4051'. [ 401.124670][T16832] syz2: Port: 1 Link ACTIVE [ 401.143242][T18824] netlink: 'syz.3.4051': attribute type 1 has an invalid length. [ 401.416414][T18855] netlink: 'syz.2.4055': attribute type 13 has an invalid length. [ 401.450287][T18854] batadv1: entered promiscuous mode [ 401.980860][T18891] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.353187][T18915] netlink: 'syz.2.4075': attribute type 1 has an invalid length. [ 402.404344][T18920] lo speed is unknown, defaulting to 1000 [ 402.443148][T18920] lo speed is unknown, defaulting to 1000 [ 402.544109][T18925] lo speed is unknown, defaulting to 1000 [ 402.810356][T18939] netlink: 'syz.0.4082': attribute type 1 has an invalid length. [ 402.846532][T18925] lo speed is unknown, defaulting to 1000 [ 403.101427][T18951] netlink: 'syz.2.4087': attribute type 89 has an invalid length. [ 403.117542][T18952] netlink: 'syz.0.4085': attribute type 13 has an invalid length. [ 403.195203][T18954] netlink: 'syz.1.4088': attribute type 5 has an invalid length. [ 403.757636][T18979] lo speed is unknown, defaulting to 1000 [ 403.906781][T18979] lo speed is unknown, defaulting to 1000 [ 404.305579][T18985] netlink: 'syz.0.4097': attribute type 10 has an invalid length. [ 404.334538][T18985] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 404.924613][T19020] x_tables: ip_tables: ah match: only valid for protocol 51 [ 405.178402][T19026] __nla_validate_parse: 13 callbacks suppressed [ 405.178422][T19026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4104'. [ 405.669643][T19046] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4108'. [ 405.674637][T19032] lo speed is unknown, defaulting to 1000 [ 405.742085][T19032] lo speed is unknown, defaulting to 1000 [ 406.057821][T19055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4110'. [ 406.093959][T19054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4110'. [ 406.103482][T19054] netlink: 'syz.1.4110': attribute type 1 has an invalid length. [ 406.103482][T19055] netlink: 'syz.1.4110': attribute type 1 has an invalid length. [ 406.185358][T19064] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4112'. [ 406.330390][T19054] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 406.341370][T19055] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 406.582942][T19090] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4118'. [ 406.625926][T19090] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4118'. [ 406.857400][T19106] xt_TCPMSS: Only works on TCP SYN packets [ 407.196530][T19088] bond7: Removing last ns target with arp_interval on [ 407.579855][T19131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4122'. [ 407.743016][T19137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4124'. [ 407.743806][T19138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4123'. [ 407.775939][T19138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.205955][T19146] bridge_slave_1: left allmulticast mode [ 408.218611][T19146] bridge_slave_1: left promiscuous mode [ 408.239228][T19146] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.251128][T19146] bridge_slave_0: left allmulticast mode [ 408.256920][T19146] bridge_slave_0: left promiscuous mode [ 408.262755][T19146] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.444877][T19155] syzkaller0: entered promiscuous mode [ 408.450524][T19155] syzkaller0: entered allmulticast mode [ 408.482902][T19144] lo speed is unknown, defaulting to 1000 [ 408.551416][T19144] lo speed is unknown, defaulting to 1000 [ 408.598395][T19169] v: renamed from dummy0 (while UP) [ 408.686712][T19174] syzkaller0: entered promiscuous mode [ 408.705731][T19174] syzkaller0: entered allmulticast mode [ 408.812606][T19179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.950815][T19184] netlink: 'syz.4.4137': attribute type 32 has an invalid length. [ 409.053321][T19187] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 409.244628][T19188] netlink: 'syz.1.4139': attribute type 4 has an invalid length. [ 409.751355][T19217] ¾x9ÿ: renamed from bridge_slave_0 [ 409.874784][ T5835] Bluetooth: hci1: command 0x0405 tx timeout [ 409.895831][T19225] netlink: 'syz.3.4147': attribute type 10 has an invalid length. [ 410.307819][ C1] vcan0: j1939_session_tx_dat: 0xffff888033bac400: queue data error: -100 [ 410.318367][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 410.325281][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.333091][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.341005][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.348834][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.356775][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.364618][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.372537][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.380385][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.388333][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.396183][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.404114][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.411926][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.419870][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.427712][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.435668][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.443482][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.451422][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.459259][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.467195][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.475046][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.477961][T19233] __nla_validate_parse: 7 callbacks suppressed [ 410.477977][T19233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4149'. [ 410.482922][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.505749][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.513665][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.521472][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.529389][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.537248][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.545156][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.552967][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.560902][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.568736][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.576661][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.584510][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.592404][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.600258][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.608172][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.616039][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.723608][T19239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4150'. [ 410.958256][T19245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4153'. [ 410.985270][T19245] macsec0: entered promiscuous mode [ 411.006399][T19251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4154'. [ 411.024123][T19245] macsec0: entered allmulticast mode [ 411.139520][T19259] netlink: 'syz.3.4155': attribute type 6 has an invalid length. [ 411.158711][T19260] netlink: 'syz.1.4156': attribute type 1 has an invalid length. [ 411.183978][T19259] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4155'. [ 411.221673][T19260] bond8: entered promiscuous mode [ 411.227483][T19260] 8021q: adding VLAN 0 to HW filter on device bond8 [ 411.270220][T19268] netlink: 'syz.2.4160': attribute type 61 has an invalid length. [ 411.278306][T19268] netlink: 'syz.2.4160': attribute type 62 has an invalid length. [ 411.382242][T19278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4164'. [ 411.501937][T19287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4167'. [ 411.521189][T19287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4167'. [ 411.560664][T19282] lo speed is unknown, defaulting to 1000 [ 411.568623][T19282] lo speed is unknown, defaulting to 1000 [ 411.609384][T19292] batadv_slave_1: entered promiscuous mode [ 411.619568][T19292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4168'. [ 411.674195][T19292] batadv_slave_1 (unregistering): left promiscuous mode [ 411.696842][T19292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.819280][T19296] veth0_virt_wifi: entered promiscuous mode [ 411.863909][T19296] veth0_virt_wifi: entered allmulticast mode [ 411.951725][T19296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4170'. [ 411.954932][ T5835] Bluetooth: hci1: command 0x0405 tx timeout [ 412.003013][T19296] tipc: Enabled bearer , priority 0 [ 412.068106][T19295] tipc: Disabling bearer [ 412.738866][T19334] lo speed is unknown, defaulting to 1000 [ 412.786294][T19334] lo speed is unknown, defaulting to 1000 [ 412.791417][T19344] netlink: 'syz.4.4183': attribute type 2 has an invalid length. [ 412.862019][T19344] hmac(sha224: entered promiscuous mode [ 412.992375][T19349] netlink: 'syz.3.4184': attribute type 1 has an invalid length. [ 413.252801][T19363] delete_channel: no stack [ 413.414566][T19362] lo speed is unknown, defaulting to 1000 [ 413.452009][T19362] lo speed is unknown, defaulting to 1000 [ 413.816844][ T36] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x22 [ 414.732637][T19428] IPVS: Unknown mcast interface: macvtap0 [ 415.127125][T19452] netlink: 'syz.4.4206': attribute type 39 has an invalid length. [ 415.237311][T19458] siw: device registration error -23 [ 415.241694][T19437] bond2: Invalid ad_actor_system MAC address. [ 415.249033][T19437] bond2: option ad_actor_system: invalid value (7) [ 415.257538][T19437] bond2 (unregistering): Released all slaves [ 415.710732][T19469] lo speed is unknown, defaulting to 1000 [ 415.732106][T19469] lo speed is unknown, defaulting to 1000 [ 416.005556][T19477] syzkaller0: entered promiscuous mode [ 416.011038][T19477] syzkaller0: entered allmulticast mode [ 416.119319][T19479] __nla_validate_parse: 11 callbacks suppressed [ 416.119340][T19479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4214'. [ 416.190443][T19477] macsec0: entered promiscuous mode [ 416.214056][T19477] macsec0: entered allmulticast mode [ 416.668187][T19498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4219'. [ 416.693384][T19498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4219'. [ 416.896626][T19507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4223'. [ 416.956715][ T5827] block nbd3: Receive control failed (result -1) [ 417.091729][T19522] netlink: 'syz.3.4226': attribute type 61 has an invalid length. [ 417.118898][T19522] netlink: 'syz.3.4226': attribute type 62 has an invalid length. [ 417.252317][T16842] lo speed is unknown, defaulting to 1000 [ 417.547292][T19535] : renamed from bond_slave_0 [ 418.059875][T19564] tipc: Enabled bearer , priority 0 [ 418.074578][T19564] syzkaller0: entered promiscuous mode [ 418.080146][T19564] syzkaller0: entered allmulticast mode [ 418.095120][T19567] netlink: 'syz.3.4240': attribute type 4 has an invalid length. [ 418.164216][T19564] tipc: Resetting bearer [ 418.193312][T19563] tipc: Resetting bearer [ 418.267014][T19563] tipc: Disabling bearer [ 418.673739][T19601] netlink: 'syz.3.4253': attribute type 4 has an invalid length. [ 418.790554][T19608] netlink: 'syz.1.4254': attribute type 46 has an invalid length. [ 418.848527][T19608] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4254'. [ 418.962702][T19615] tipc: Enabled bearer , priority 0 [ 419.070012][T19615] syzkaller0: entered promiscuous mode [ 419.090370][T19615] syzkaller0: entered allmulticast mode [ 419.102637][T19615] tipc: Resetting bearer [ 419.129150][T19622] lo speed is unknown, defaulting to 1000 [ 419.137377][T19622] lo speed is unknown, defaulting to 1000 [ 419.174610][T19614] tipc: Resetting bearer [ 419.410729][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4264'. [ 420.635658][T19614] tipc: Disabling bearer [ 420.700087][ T5880] tipc: Node number set to 702044520 [ 420.810120][T19649] lo speed is unknown, defaulting to 1000 [ 420.850646][T19657] FAULT_INJECTION: forcing a failure. [ 420.850646][T19657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.868875][T19657] CPU: 0 UID: 0 PID: 19657 Comm: syz.0.4268 Not tainted syzkaller #0 PREEMPT(full) [ 420.868923][T19657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 420.868949][T19657] Call Trace: [ 420.868967][T19657] [ 420.868985][T19657] dump_stack_lvl+0xe8/0x150 [ 420.869018][T19657] should_fail_ex+0x414/0x560 [ 420.869053][T19657] _copy_from_user+0x2d/0xb0 [ 420.869079][T19657] __sys_bpf+0x1e3/0x860 [ 420.869108][T19657] ? __pfx___sys_bpf+0x10/0x10 [ 420.869151][T19657] ? ksys_write+0x22a/0x250 [ 420.869173][T19657] ? __pfx_ksys_write+0x10/0x10 [ 420.869200][T19657] __x64_sys_bpf+0x7c/0x90 [ 420.869226][T19657] do_syscall_64+0xec/0xf80 [ 420.869249][T19657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.869268][T19657] ? trace_irq_disable+0x37/0x100 [ 420.869294][T19657] ? clear_bhb_loop+0x60/0xb0 [ 420.869318][T19657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.869344][T19657] RIP: 0033:0x7f531798f749 [ 420.869362][T19657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.869379][T19657] RSP: 002b:00007f5318879038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.869401][T19657] RAX: ffffffffffffffda RBX: 00007f5317be5fa0 RCX: 00007f531798f749 [ 420.869415][T19657] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 420.869428][T19657] RBP: 00007f5318879090 R08: 0000000000000000 R09: 0000000000000000 [ 420.869441][T19657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.869453][T19657] R13: 00007f5317be6038 R14: 00007f5317be5fa0 R15: 00007fff88a40678 [ 420.869486][T19657] [ 421.082502][T19649] lo speed is unknown, defaulting to 1000 [ 421.216115][T19667] netlink: zone id is out of range [ 421.221285][T19667] netlink: zone id is out of range [ 421.243969][T19667] netlink: zone id is out of range [ 421.263868][T19667] netlink: zone id is out of range [ 421.269062][T19667] netlink: zone id is out of range [ 421.284476][T19667] netlink: zone id is out of range [ 421.292651][T19667] netlink: zone id is out of range [ 421.328876][T19659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4269'. [ 421.337764][T19667] netlink: zone id is out of range [ 421.349391][T19665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4270'. [ 421.371080][T19667] netlink: zone id is out of range [ 421.383987][T19667] netlink: zone id is out of range [ 421.477153][ T5830] Bluetooth: hci3: command 0x0405 tx timeout [ 421.489703][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 421.697475][T19672] m1Ie5nè‹Ò: entered promiscuous mode [ 421.820355][T19678] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 421.898794][T19678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4273'. [ 421.911813][T19678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4273'. [ 422.017439][T19686] netlink: 'syz.1.4275': attribute type 9 has an invalid length. [ 422.058059][T19688] netlink: 'syz.1.4275': attribute type 9 has an invalid length. [ 422.286187][T19695] syzkaller0: entered promiscuous mode [ 422.291698][T19695] syzkaller0: entered allmulticast mode [ 422.646698][T19714] netlink: 'syz.2.4284': attribute type 1 has an invalid length. [ 422.945452][T19725] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4287'. [ 423.073249][T19731] ip6t_srh: unknown srh match flags 4000 [ 423.118928][T19726] lo speed is unknown, defaulting to 1000 [ 423.147738][T19726] lo speed is unknown, defaulting to 1000 [ 423.434763][T19749] netlink: 'syz.4.4293': attribute type 8 has an invalid length. [ 423.541534][T19748] lo speed is unknown, defaulting to 1000 [ 423.550364][T19753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4294'. [ 423.568360][T19748] lo speed is unknown, defaulting to 1000 [ 423.771977][T19758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4290'. [ 423.886223][T19765] syzkaller0: entered promiscuous mode [ 423.891995][T19765] syzkaller0: entered allmulticast mode [ 423.934279][T19749] lo speed is unknown, defaulting to 1000 [ 423.968899][T19749] lo speed is unknown, defaulting to 1000 [ 424.454355][T19783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4300'. [ 424.609551][T19787] sctp: [Deprecated]: syz.2.4302 (pid 19787) Use of int in maxseg socket option. [ 424.609551][T19787] Use struct sctp_assoc_value instead [ 424.939626][T19804] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4308'. [ 424.949383][T19804] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4308'. [ 425.360214][T19821] pim6reg99999999: entered allmulticast mode [ 425.756104][T19843] lo speed is unknown, defaulting to 1000 [ 425.787896][T19843] lo speed is unknown, defaulting to 1000 [ 426.450719][T19891] FAULT_INJECTION: forcing a failure. [ 426.450719][T19891] name failslab, interval 1, probability 0, space 0, times 0 [ 426.468155][T19891] CPU: 1 UID: 0 PID: 19891 Comm: syz.0.4331 Not tainted syzkaller #0 PREEMPT(full) [ 426.468192][T19891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 426.468204][T19891] Call Trace: [ 426.468212][T19891] [ 426.468226][T19891] dump_stack_lvl+0xe8/0x150 [ 426.468255][T19891] should_fail_ex+0x414/0x560 [ 426.468291][T19891] should_failslab+0xa8/0x100 [ 426.468316][T19891] kmem_cache_alloc_noprof+0x88/0x710 [ 426.468346][T19891] ? skb_clone+0x212/0x3a0 [ 426.468370][T19891] ? gnet_stats_finish_copy+0x3ed/0x5a0 [ 426.468391][T19891] skb_clone+0x212/0x3a0 [ 426.468414][T19891] ? netlink_trim+0x166/0x2c0 [ 426.468440][T19891] netlink_trim+0x17d/0x2c0 [ 426.468464][T19891] netlink_broadcast_filtered+0xd6/0x1000 [ 426.468488][T19891] ? __alloc_skb+0x204/0x3b0 [ 426.468510][T19891] ? __pfx_tc_fill_qdisc+0x10/0x10 [ 426.468530][T19891] ? rcu_is_watching+0x15/0xb0 [ 426.468552][T19891] ? trace_kmalloc+0x1f/0xb0 [ 426.468578][T19891] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 426.468605][T19891] ? __alloc_skb+0x290/0x3b0 [ 426.468630][T19891] nlmsg_notify+0xf0/0x1a0 [ 426.468661][T19891] tc_modify_qdisc+0x1b2b/0x2020 [ 426.468692][T19891] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 426.468741][T19891] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 426.468759][T19891] rtnetlink_rcv_msg+0x77c/0xb70 [ 426.468785][T19891] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 426.468813][T19891] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 426.468833][T19891] ? __lock_acquire+0x6b6/0x2cf0 [ 426.468866][T19891] netlink_rcv_skb+0x208/0x470 [ 426.468893][T19891] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 426.468916][T19891] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 426.468954][T19891] ? netlink_deliver_tap+0x2e/0x1b0 [ 426.468989][T19891] netlink_unicast+0x82f/0x9e0 [ 426.469020][T19891] ? __pfx_netlink_unicast+0x10/0x10 [ 426.469042][T19891] ? __alloc_skb+0x198/0x3b0 [ 426.469063][T19891] ? netlink_sendmsg+0x642/0xb30 [ 426.469088][T19891] ? skb_put+0x11b/0x210 [ 426.469113][T19891] netlink_sendmsg+0x805/0xb30 [ 426.469148][T19891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.469179][T19891] ? aa_sock_msg_perm+0xf1/0x1b0 [ 426.469206][T19891] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 426.469225][T19891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.469253][T19891] __sock_sendmsg+0x21c/0x270 [ 426.469286][T19891] ____sys_sendmsg+0x505/0x820 [ 426.469316][T19891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.469349][T19891] ? import_iovec+0x74/0xa0 [ 426.469376][T19891] ___sys_sendmsg+0x21f/0x2a0 [ 426.469402][T19891] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.469457][T19891] ? __fget_files+0x2a/0x420 [ 426.469480][T19891] ? __fget_files+0x3a0/0x420 [ 426.469511][T19891] __x64_sys_sendmsg+0x19b/0x260 [ 426.469537][T19891] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.469569][T19891] ? __pfx_ksys_write+0x10/0x10 [ 426.469598][T19891] do_syscall_64+0xec/0xf80 [ 426.469620][T19891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.469638][T19891] ? trace_irq_disable+0x37/0x100 [ 426.469662][T19891] ? clear_bhb_loop+0x60/0xb0 [ 426.469685][T19891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.469704][T19891] RIP: 0033:0x7f531798f749 [ 426.469721][T19891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.469736][T19891] RSP: 002b:00007f5318879038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.469756][T19891] RAX: ffffffffffffffda RBX: 00007f5317be5fa0 RCX: 00007f531798f749 [ 426.469770][T19891] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 426.469782][T19891] RBP: 00007f5318879090 R08: 0000000000000000 R09: 0000000000000000 [ 426.469802][T19891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.469813][T19891] R13: 00007f5317be6038 R14: 00007f5317be5fa0 R15: 00007fff88a40678 [ 426.469845][T19891] [ 426.846765][T19895] netlink: 'syz.4.4333': attribute type 21 has an invalid length. [ 426.854711][T19895] __nla_validate_parse: 6 callbacks suppressed [ 426.854728][T19895] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4333'. [ 427.172897][T19910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4338'. [ 427.271920][T19910] lo speed is unknown, defaulting to 1000 [ 427.282435][T19910] lo speed is unknown, defaulting to 1000 [ 427.301706][T17328] IPVS: starting estimator thread 0... [ 427.389192][T19924] netlink: 'syz.2.4339': attribute type 1 has an invalid length. [ 427.397382][T19924] netlink: 'syz.2.4339': attribute type 1 has an invalid length. [ 427.405237][T19920] IPVS: using max 30 ests per chain, 72000 per kthread [ 427.416667][T19924] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4339'. [ 427.437393][T19924] tipc: Enabled bearer , priority 0 [ 427.463554][T19924] syzkaller0: entered promiscuous mode [ 427.479421][T19924] syzkaller0: entered allmulticast mode [ 427.716862][T19913] tipc: Resetting bearer [ 427.764326][T19913] tipc: Disabling bearer [ 427.784664][T19942] FAULT_INJECTION: forcing a failure. [ 427.784664][T19942] name failslab, interval 1, probability 0, space 0, times 0 [ 427.798486][T19942] CPU: 0 UID: 0 PID: 19942 Comm: syz.4.4345 Not tainted syzkaller #0 PREEMPT(full) [ 427.798511][T19942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 427.798524][T19942] Call Trace: [ 427.798533][T19942] [ 427.798543][T19942] dump_stack_lvl+0xe8/0x150 [ 427.798573][T19942] should_fail_ex+0x414/0x560 [ 427.798605][T19942] ? __pfx_cake_init+0x10/0x10 [ 427.798634][T19942] should_failslab+0xa8/0x100 [ 427.798660][T19942] __kmalloc_cache_noprof+0x84/0x700 [ 427.798681][T19942] ? is_dynamic_key+0xd6/0x1c0 [ 427.798699][T19942] ? cake_init+0x5e/0x9f0 [ 427.798727][T19942] ? __pfx_cake_init+0x10/0x10 [ 427.798754][T19942] cake_init+0x5e/0x9f0 [ 427.798785][T19942] ? lockdep_rtnl_is_held+0x26/0x40 [ 427.798812][T19942] ? qdisc_lookup+0x36d/0x6d0 [ 427.798841][T19942] ? __pfx_cake_init+0x10/0x10 [ 427.798868][T19942] qdisc_create+0x7ac/0xea0 [ 427.798899][T19942] tc_modify_qdisc+0x1547/0x2020 [ 427.798933][T19942] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 427.798984][T19942] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 427.799003][T19942] rtnetlink_rcv_msg+0x77c/0xb70 [ 427.799030][T19942] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 427.799051][T19942] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 427.799074][T19942] ? __lock_acquire+0x6b6/0x2cf0 [ 427.799109][T19942] netlink_rcv_skb+0x208/0x470 [ 427.799137][T19942] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 427.799161][T19942] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 427.799197][T19942] ? netlink_deliver_tap+0x2e/0x1b0 [ 427.799231][T19942] netlink_unicast+0x82f/0x9e0 [ 427.799262][T19942] ? __pfx_netlink_unicast+0x10/0x10 [ 427.799284][T19942] ? __alloc_skb+0x198/0x3b0 [ 427.799306][T19942] ? netlink_sendmsg+0x642/0xb30 [ 427.799330][T19942] ? skb_put+0x11b/0x210 [ 427.799356][T19942] netlink_sendmsg+0x805/0xb30 [ 427.799392][T19942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.799430][T19942] ? aa_sock_msg_perm+0xf1/0x1b0 [ 427.799457][T19942] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 427.799474][T19942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.799501][T19942] __sock_sendmsg+0x21c/0x270 [ 427.799532][T19942] ____sys_sendmsg+0x505/0x820 [ 427.799562][T19942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.799594][T19942] ? import_iovec+0x74/0xa0 [ 427.799621][T19942] ___sys_sendmsg+0x21f/0x2a0 [ 427.799648][T19942] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.799706][T19942] ? __fget_files+0x2a/0x420 [ 427.799729][T19942] ? __fget_files+0x3a0/0x420 [ 427.799764][T19942] __x64_sys_sendmsg+0x19b/0x260 [ 427.799791][T19942] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.799825][T19942] ? __pfx_ksys_write+0x10/0x10 [ 427.799857][T19942] do_syscall_64+0xec/0xf80 [ 427.799879][T19942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.799898][T19942] ? trace_irq_disable+0x37/0x100 [ 427.799922][T19942] ? clear_bhb_loop+0x60/0xb0 [ 427.799947][T19942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.799966][T19942] RIP: 0033:0x7f7163f8f749 [ 427.799984][T19942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.800002][T19942] RSP: 002b:00007f7164e1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.800024][T19942] RAX: ffffffffffffffda RBX: 00007f71641e5fa0 RCX: 00007f7163f8f749 [ 427.800040][T19942] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 427.800053][T19942] RBP: 00007f7164e1a090 R08: 0000000000000000 R09: 0000000000000000 [ 427.800066][T19942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.800078][T19942] R13: 00007f71641e6038 R14: 00007f71641e5fa0 R15: 00007ffce7a6cca8 [ 427.800110][T19942] [ 427.800180][T19942] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 428.158242][T19942] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 428.166656][T19942] CPU: 0 UID: 0 PID: 19942 Comm: syz.4.4345 Not tainted syzkaller #0 PREEMPT(full) [ 428.176016][T19942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 428.186062][T19942] RIP: 0010:hrtimer_try_to_cancel+0x7d/0x420 [ 428.192040][T19942] Code: ae 12 00 48 8b 5c 24 08 48 8b 44 24 10 42 80 3c 30 00 74 08 48 89 df e8 91 ce 78 00 4c 8b 3b 49 8d 5f 10 49 89 dc 49 c1 ec 03 <43> 0f b6 04 34 84 c0 0f 85 bf 00 00 00 8b 2b 89 ee 83 e6 01 31 ff [ 428.211640][T19942] RSP: 0018:ffffc9000ba67218 EFLAGS: 00010202 [ 428.217704][T19942] RAX: 1ffff1100c1ff860 RBX: 0000000000000010 RCX: 1ffff1100c1ff861 [ 428.225674][T19942] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: ffff888060ffc2d0 [ 428.233634][T19942] RBP: ffffc9000ba67410 R08: 0000000000000dc0 R09: 00000000ffffffff [ 428.241594][T19942] R10: dffffc0000000000 R11: ffffffff896d0900 R12: 0000000000000002 [ 428.249559][T19942] R13: 00000000fffffff4 R14: dffffc0000000000 R15: 0000000000000000 [ 428.257519][T19942] FS: 00007f7164e1a6c0(0000) GS:ffff888125e1e000(0000) knlGS:0000000000000000 [ 428.266435][T19942] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.273003][T19942] CR2: 00007f1e4f00f000 CR3: 000000007cae0000 CR4: 00000000003526f0 [ 428.280969][T19942] Call Trace: [ 428.284235][T19942] [ 428.287155][T19942] ? __pfx_cake_destroy+0x10/0x10 [ 428.292180][T19942] hrtimer_cancel+0x16/0x50 [ 428.296679][T19942] cake_destroy+0x28/0x100 [ 428.301098][T19942] qdisc_create+0xaa3/0xea0 [ 428.305595][T19942] tc_modify_qdisc+0x1547/0x2020 [ 428.310527][T19942] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 428.315809][T19942] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 428.321091][T19942] rtnetlink_rcv_msg+0x77c/0xb70 [ 428.326029][T19942] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 428.331130][T19942] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 428.336577][T19942] ? __lock_acquire+0x6b6/0x2cf0 [ 428.341508][T19942] netlink_rcv_skb+0x208/0x470 [ 428.346266][T19942] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 428.351718][T19942] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 428.357002][T19942] ? netlink_deliver_tap+0x2e/0x1b0 [ 428.362201][T19942] netlink_unicast+0x82f/0x9e0 [ 428.366961][T19942] ? __pfx_netlink_unicast+0x10/0x10 [ 428.372242][T19942] ? __alloc_skb+0x198/0x3b0 [ 428.376824][T19942] ? netlink_sendmsg+0x642/0xb30 [ 428.381758][T19942] ? skb_put+0x11b/0x210 [ 428.385994][T19942] netlink_sendmsg+0x805/0xb30 [ 428.390757][T19942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.396035][T19942] ? aa_sock_msg_perm+0xf1/0x1b0 [ 428.400968][T19942] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 428.406241][T19942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.411523][T19942] __sock_sendmsg+0x21c/0x270 [ 428.416198][T19942] ____sys_sendmsg+0x505/0x820 [ 428.420954][T19942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.426233][T19942] ? import_iovec+0x74/0xa0 [ 428.430729][T19942] ___sys_sendmsg+0x21f/0x2a0 [ 428.435399][T19942] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.440601][T19942] ? __fget_files+0x2a/0x420 [ 428.445191][T19942] ? __fget_files+0x3a0/0x420 [ 428.449874][T19942] __x64_sys_sendmsg+0x19b/0x260 [ 428.454804][T19942] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.460256][T19942] ? __pfx_ksys_write+0x10/0x10 [ 428.465097][T19942] do_syscall_64+0xec/0xf80 [ 428.469611][T19942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.475665][T19942] ? trace_irq_disable+0x37/0x100 [ 428.480683][T19942] ? clear_bhb_loop+0x60/0xb0 [ 428.485351][T19942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.491233][T19942] RIP: 0033:0x7f7163f8f749 [ 428.495638][T19942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.515232][T19942] RSP: 002b:00007f7164e1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.523637][T19942] RAX: ffffffffffffffda RBX: 00007f71641e5fa0 RCX: 00007f7163f8f749 [ 428.531603][T19942] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 428.539559][T19942] RBP: 00007f7164e1a090 R08: 0000000000000000 R09: 0000000000000000 [ 428.547516][T19942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.555473][T19942] R13: 00007f71641e6038 R14: 00007f71641e5fa0 R15: 00007ffce7a6cca8 [ 428.563442][T19942] [ 428.566455][T19942] Modules linked in: [ 428.572252][T19942] ---[ end trace 0000000000000000 ]--- [ 428.633672][T19942] RIP: 0010:hrtimer_try_to_cancel+0x7d/0x420 [ 428.639693][T19942] Code: ae 12 00 48 8b 5c 24 08 48 8b 44 24 10 42 80 3c 30 00 74 08 48 89 df e8 91 ce 78 00 4c 8b 3b 49 8d 5f 10 49 89 dc 49 c1 ec 03 <43> 0f b6 04 34 84 c0 0f 85 bf 00 00 00 8b 2b 89 ee 83 e6 01 31 ff [ 428.659447][T19942] RSP: 0018:ffffc9000ba67218 EFLAGS: 00010202 [ 428.665561][T19942] RAX: 1ffff1100c1ff860 RBX: 0000000000000010 RCX: 1ffff1100c1ff861 [ 428.673534][T19942] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: ffff888060ffc2d0 [ 428.682301][T19942] RBP: ffffc9000ba67410 R08: 0000000000000dc0 R09: 00000000ffffffff [ 428.690571][T19942] R10: dffffc0000000000 R11: ffffffff896d0900 R12: 0000000000000002 [ 428.698575][T19942] R13: 00000000fffffff4 R14: dffffc0000000000 R15: 0000000000000000 [ 428.706568][T19942] FS: 00007f7164e1a6c0(0000) GS:ffff888125e1e000(0000) knlGS:0000000000000000 [ 428.715533][T19942] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.722251][T19942] CR2: 0000000000000004 CR3: 000000007cae0000 CR4: 00000000003526f0 [ 428.737133][T19942] Kernel panic - not syncing: Fatal exception [ 428.743627][T19942] Kernel Offset: disabled [ 428.747941][T19942] Rebooting in 86400 seconds..