last executing test programs: 14.320274737s ago: executing program 2 (id=2776): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) (fail_nth: 5) 4.715586531s ago: executing program 0 (id=2840): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x801, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xb}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xcc, 0xa8, @random="9021b4b140616c5e21e3706d0cbbed1ed37b2b5c8264c3fa59f385964df343394d097c25fb903b05349dd6f86c54b7e03e06697f36e8fda191715a81083eba47f18fc8528cf0bfdee59480c886f18e3bbdb3350a766eae835fc9162b2724d5980a7ccf1ed0a57354d40d8e7c25c73597306690f96882ff05bba3c089c9be438eacc955ee5e441cdfa166af3928cd78fdab60afae8dc565c6b002a8b516eff3429f8fd7097e0baae8a60b5b49dbb1963d1d382a9720ca04a2a007c3d1535706a35ecc1d818377de39"}]}, 0xe0}}, 0x2004c001) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9210}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0xfe}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x4000880) 4.655896577s ago: executing program 3 (id=2841): r0 = socket(0x9, 0x800, 0xfffffffd) r1 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) close(r1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r2, 0x8, 0x6, [0x5, 0x4800, 0xfff7, 0x7, 0x6, 0x8]}, &(0x7f00000001c0)=0x14) r3 = socket(0x1a, 0x3, 0x5) r4 = socket$unix(0x1, 0x1, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6040004}, 0x0) recvfrom$inet(r3, &(0x7f0000000300)=""/116, 0x74, 0x1020, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000400)={'macvlan1\x00', 0x800}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, r7, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x80}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000002}, 0x40) r8 = openat$cgroup_ro(r6, &(0x7f0000000600)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x7, 0x3, 0x8, 0x0, 0x41400, 0x1, 0x3, '\x00', 0x0, r8, 0x3, 0x2, 0x1}, 0x50) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000006c0), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r9, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000010) openat$cgroup_ro(r6, &(0x7f0000000900)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFCONF(r11, 0x8912, &(0x7f00000009c0)=@buf={0x42, &(0x7f0000000940)="709f86e5321f7e42f360b48361fbeb4b643636acecd7c723ff8cd833f73d10c7b186e81de10677d492acf419d6c973d847a03e522342629b8acd0e7fa01dfea6639b"}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r12, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0x80) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r13, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x14}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c00)={'wlan1\x00'}) recvmmsg(r3, &(0x7f0000005f40)=[{{&(0x7f0000000c40)=@qipcrtr, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000cc0)=""/142, 0x8e}], 0x1}, 0x9}, {{&(0x7f0000000dc0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000e40)=""/160, 0xa0}, {&(0x7f0000000f00)=""/90, 0x5a}, {&(0x7f0000000f80)=""/7, 0x7}, {&(0x7f0000000fc0)=""/68, 0x44}, {&(0x7f0000001040)=""/71, 0x47}, {&(0x7f00000010c0)=""/154, 0x9a}, {&(0x7f0000001180)=""/64, 0x40}, {&(0x7f00000011c0)=""/176, 0xb0}], 0x8, &(0x7f0000001300)=""/159, 0x9f}, 0x9}, {{&(0x7f00000013c0)=@l2, 0x80, &(0x7f0000001580)=[{&(0x7f0000001440)=""/243, 0xf3}, {&(0x7f0000001540)=""/52, 0x34}], 0x2, &(0x7f00000015c0)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/38, 0x26}, {&(0x7f0000004600)=""/111, 0x6f}, {&(0x7f0000004680)=""/25, 0x19}], 0x5, &(0x7f0000004740)=""/200, 0xc8}}, {{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000004840)=""/148, 0x94}, {&(0x7f0000004900)=""/111, 0x6f}, {&(0x7f0000004980)=""/185, 0xb9}, {&(0x7f0000004a40)=""/119, 0x77}, {&(0x7f0000004ac0)}, {&(0x7f0000004b00)=""/235, 0xeb}, {&(0x7f0000004c00)=""/207, 0xcf}], 0x7, &(0x7f0000004d80)=""/126, 0x7e}, 0x57cd}, {{&(0x7f0000004e00)=@ax25={{}, [@default, @default, @rose, @bcast, @rose, @remote, @bcast, @null]}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004e80)=""/28, 0x1c}, {&(0x7f0000004ec0)=""/48, 0x30}], 0x2, &(0x7f0000004f40)=""/4096, 0x1000}, 0x1ff}], 0x6, 0x40000020, &(0x7f00000060c0)={0x77359400}) setsockopt(r3, 0x37a, 0xf8000000, &(0x7f0000006100)="d2428011e7f08508cc4ec80d7d7e27d425b51d591c78f6054d15f530637d48b8407a05b6d5e674c77117d53ff922af28757661b6e878d1", 0x37) 4.525075381s ago: executing program 0 (id=2843): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="fc000000190001000000000010000000e0000001000000000000000000000000ac1414bb80ff00000000000000000000fffe000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000044000500fc0000000000000000000000000000010000000032000000ff800000ff0200000000000000000000000000010000000001"], 0xfc}}, 0x0) 4.41533585s ago: executing program 3 (id=2845): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x3, {}, 0xfe}, 0x18) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040600) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000004100), r0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000040), 0x4) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={0x0, 0xf0}, 0x1, 0x0, 0x0, 0x4090}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000300), &(0x7f0000000040)=0x8) 4.324104075s ago: executing program 0 (id=2846): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$kcm(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r4, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0c00990001fcffff2f000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.117039621s ago: executing program 4 (id=2849): bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0a00000008000000010000004000100042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x20, 0x80, 0x8, 0x3, {{0xf, 0x4, 0x3, 0x2e, 0x3c, 0x67, 0x0, 0x9d, 0x2f, 0x0, @remote, @local, {[@end, @end, @ssrr={0x89, 0x23, 0x96, [@loopback, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x30}, @multicast1, @empty]}]}}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x2e, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0xffff}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @loopback, @local}, &(0x7f0000000180)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x4, 0x7f, 0x20, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x700, 0xfffff801, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd8, r0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x814}, 0x40) 3.146871874s ago: executing program 1 (id=2852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff2, 0x1, 0x0}, &(0x7f00000002c0)=0x40) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="010005"]) 2.837173404s ago: executing program 1 (id=2853): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)=""/172, 0x3e, 0xac, 0x9}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000037408263cd7000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0xff05, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_POLICE={0x0, 0x5, [@TCA_POLICE_RATE64={0x0, 0x8, 0xc42}, @TCA_POLICE_RESULT, @TCA_POLICE_RATE={0x0, 0x2, [0x7f, 0x10000, 0x1ff, 0x3, 0xffffffff, 0x3, 0xb, 0x4, 0x1, 0x8, 0x58, 0xd, 0xff, 0x3, 0x7, 0xf, 0x4, 0xfb, 0x5, 0x7, 0x5, 0x8, 0x8, 0x9, 0xffffffff, 0x0, 0x1, 0xc78, 0x6, 0x2, 0x5, 0x6, 0x8, 0x3, 0x80, 0xdfc, 0x4, 0xfffff800, 0x1000, 0x8001, 0xda, 0xd8f7, 0x6, 0x4, 0x2, 0x6, 0x9, 0x6, 0x8001, 0x80000001, 0x1, 0x6, 0x8b, 0x0, 0x2, 0xffff, 0x7b0b, 0x3e8, 0xfffffffb, 0x0, 0xb, 0x6, 0x9, 0x9, 0x4, 0x1, 0x14, 0x1, 0x7, 0x6, 0x7, 0xfffffffa, 0x5, 0x401, 0x123, 0x9, 0xfffffff7, 0xb, 0xc6c7, 0xfff, 0x0, 0xa, 0x8, 0x40, 0x3ec800, 0x5, 0x6, 0x2, 0x441e, 0x82d, 0x9, 0x9, 0xffff, 0x6, 0x6, 0x9, 0x6, 0x100000, 0xe787f09, 0x7, 0x7, 0x5, 0xe, 0x3, 0xffffffff, 0xffffffff, 0x9, 0x1, 0x8, 0x2, 0xc000000, 0x6, 0xff, 0x7, 0x8, 0x891, 0x8000000, 0xbc000000, 0x40, 0xffff, 0x7, 0x4, 0x4, 0x4, 0x5, 0x0, 0x3, 0x8, 0x2, 0x7, 0x4, 0x590b, 0x0, 0x5, 0x7f, 0x6, 0xff, 0x6, 0x8, 0x8, 0x8, 0x3, 0x1000, 0x1, 0x80000000, 0x871, 0x1e, 0x7f, 0x1, 0xe, 0xfffffe00, 0x631, 0x0, 0x400000, 0xc, 0x2, 0x5, 0x5, 0x4, 0x3, 0xffff2c3b, 0x1, 0x7, 0x80000001, 0x3, 0x85, 0x100, 0x53, 0x5, 0x8, 0x100, 0x6, 0x9, 0x4, 0xdb, 0x7fff, 0x1, 0x6, 0xb06, 0xe36, 0x3, 0x7, 0x10000, 0x3a, 0x670, 0xe8d4, 0x1, 0xdb, 0x3, 0x401, 0x4, 0x1, 0x5, 0x3, 0x81, 0x0, 0x6, 0x4, 0x7fff, 0x100, 0x8, 0x0, 0x4, 0x2, 0xfffffeff, 0x3, 0x5, 0x3, 0xa8be, 0x4, 0x7fff, 0x1a19, 0x3, 0x4c42762b, 0x3, 0x3, 0x7, 0x0, 0x80000000, 0x1283, 0x5, 0xfffffffe, 0x6, 0x40, 0x0, 0x466, 0x5, 0x5, 0x443, 0x0, 0x8, 0x2, 0x9, 0x5, 0x1, 0x3, 0x1, 0x7, 0x800, 0x1ff, 0x0, 0xebed, 0x8ce5, 0xc9ad, 0x5, 0x9d1a, 0xb, 0x4, 0x9, 0x9, 0x821, 0xfffffff8, 0xb27, 0x6, 0x6, 0xe]}, @TCA_POLICE_RESULT={0x0, 0x5, 0x609}, @TCA_POLICE_RESULT={0x0, 0x5, 0xf}, @TCA_POLICE_TBF={0x0, 0x1, {0x1, 0x7, 0x8, 0x6, 0x0, {0x1, 0x0, 0x7, 0x6, 0xfffc, 0xffffffff}, {0x7, 0x1, 0x5, 0x10, 0x2, 0xfffffffb}, 0x2, 0x6, 0x5}}, @TCA_POLICE_AVRATE={0x0, 0x4, 0x500}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x7, 0x1, {0x7, 0x2}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$FICLONE(r0, 0x40049409, r11) 2.493399126s ago: executing program 1 (id=2854): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x40000000}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000012c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100"], 0x4ec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000000)=0xf, 0x4) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000180)=""/169, &(0x7f0000000040)=0xa9) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xd0, &(0x7f0000000540)=""/208, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.285112705s ago: executing program 2 (id=2779): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x44, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x6, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001240)={&(0x7f0000000f80)={0x2c0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4008010}, 0xeb9671c0674f07fd) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000225c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000022540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200, 0x8d0, 0xfff, 0x401, 0x5, 0x9, 0x0, 0x401, 0x9}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {}, {0x6, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r13, &(0x7f0000000100)=ANY=[@ANYBLOB="000000008c0400000076aaaaaaaaaaaa810026006d920000000000000000082f9078ac1414297f000001"], 0x2a) ioctl$SIOCSIFHWADDR(r13, 0x8924, &(0x7f0000000040)={'vlan1\x00', @multicast}) 1.571599698s ago: executing program 1 (id=2855): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="fc000000100001042bbd7000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="0000030000000000c800128009000100766c616e00000000b80002807c0004800c00030000000000070000000c00010025a400000e0000000c00010009000000060000000c00010000000000030000000c00010003000000020000000c00010081ffffff050000000c00010003000000040000000c000100020800002e0700000c00010003000000030000000c000100090000005a0900000c00020010000000150000001c0003800c00ffff01010000070000000c000100030000000800000006000100030000000600050088a8000014000300766c616e3000"], 0xfc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="fc000000100001042bbd7000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="0000030000000000c800128009000100766c616e00000000b80002807c0004800c00030000000000070000000c00010025a400000e0000000c00010009000000060000000c00010000000000030000000c00010003000000020000000c00010081ffffff050000000c00010003000000040000000c000100020800002e0700000c00010003000000030000000c000100090000005a0900000c00020010000000150000001c0003800c00ffff01010000070000000c000100030000000800000006000100030000000600050088a8000014000300766c616e3000"], 0xfc}}, 0x0) (async) 1.568111148s ago: executing program 3 (id=2856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0}, 0x94) 1.529465699s ago: executing program 2 (id=2857): read(0xffffffffffffffff, &(0x7f0000000080)=""/4, 0x4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="110725bd7000fbdbdf0804"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)={0x1e4, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',', 0x1) r5 = accept4(r0, 0x0, 0x0, 0x800) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) write(r6, &(0x7f0000000100)="520003000100b8", 0x7) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000280)}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) 1.451294814s ago: executing program 4 (id=2858): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40100, 0x66f31}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x2000000) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) socketpair(0x2c, 0x5, 0x7d1a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x25, 0x1c, @val=@tcx}, 0x1c) bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r5}, 0x8) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x28, 0x0, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x6, 0xfffff00c}, {0x6, 0x9, 0xa1, 0x1000}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r8) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000140)={0x6, 'team_slave_1\x00', {0x100}, 0x5c2}) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x11010, r1, 0x4c329000) 1.449283379s ago: executing program 0 (id=2859): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup=r0, r1, 0x2f, 0x18, 0x4}, 0x20) 1.385259456s ago: executing program 3 (id=2860): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f40)={0x0, r1, 0x0, 0xe7, &(0x7f0000000300)='cgrou\xea\xe1lp\x00mM \x1a\x90\x0e\x91 Q\xbb\xdb\x1c\xc4vS=I\t\xc6\xb6\x81\xe0\x93\'\x17{\x0f\'\x99?_$r[\x00\xd6\xd4\x1f\xb5\xf1\xeci\x84\x93\xd4\xd8\xa6\xa6J\xfe\xa6\xdb\xd8\xd4p\xe2\x16z\xfev\xf8\x1c\xaeGl;\x98e\xc82\t\xb2\x97\x9c\x93+O=\xdds\xc3\xac\x12W\a\xf9H\xe6\xaeW\xe9\xaaG\xd4\xc2\xad)]y8\x0f\b\xcd8\xa9\xc90\xc7\x91\xe7\xf6y\x1a8\xba\xcf\x00#\xcc\xfa\xd8\a\xc0\x90M\xa8\xb5\x15\x15Tu\x90\x9b\x97&\xfc\xb3.\xa2\xaa\r)\xc1Kb\x8d%,u\xc8\xbe\xba\xf7(\xa0\x11d;\xf1\xb5\x977//\xf7\xe6\xa4\xe9\x86\x91\x8c\xc5\x90\x11\xee\xb6\xb7\x9b\xacs\x9d3\xee\xbf8\x82\x86\x8c\x98o\xf8\xf6O.w7\x03\x8a\x8c\x8c\xd6\"#c\xc4\x8c2\xd9\xd6 \x86\x13vU\\O\xa6\xc3^\x06='}, 0x30) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r7, 0x0, 0x0}, 0x10) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, &(0x7f0000001300)={{r6}, r8, 0x2, @inherit={0x78, &(0x7f0000000140)={0x0, 0x6, 0x6, 0x401, {0x14, 0x3, 0x100000000, 0xf8, 0xffffffff96764f4f}, [0x3, 0x7fff, 0xffffffffffffff8b, 0xffffffffffffffff, 0x3ff, 0x6]}}, @subvolid=0x17}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000480)={"56ad10a6013a3584233b92aaa189bb72", 0x0, 0x0, {0x5, 0xa}, {0x2, 0xf6}, 0x7, [0x43, 0x95, 0x6, 0x7, 0x9, 0x2, 0x3, 0x9, 0xfffffffffffffff7, 0x9, 0x6, 0x32, 0x1, 0x5, 0x5b, 0x2]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000580)={"e869852089f1dd3165e8e8dc7c244013", r8, r9, {0x2, 0x3}, {0xb7, 0x2}, 0xff, [0x10000, 0x2, 0x3ff, 0xab3, 0x3, 0x5, 0x3, 0x8, 0x2, 0x6, 0x6, 0x7fff, 0x50d0, 0x80000001, 0x10, 0xfffffffffffffff9]}) (async) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) (async) r10 = openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) (async) pwritev(r10, &(0x7f0000000440)=[{&(0x7f0000000240)="d4382ed01904a1a847c50ae100f70e5e71ae3ded3cb6bdc02a5de9d439c491616d754846c701ebfd3456793571c6128a68d93214ff7856ca680b74e1141f7115840d1ee71d7159714ad5c6a2f532eadc195d4a54ca0e6d0488f6aacdc0ac74bad4aa82eabe01746313a12b595d7ea86d8f06d4fd141c8edf83f005a1178825768f", 0x81}], 0x1, 0x100, 0x0) 1.383991145s ago: executing program 2 (id=2861): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55", 0x75}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000505040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202) 1.272856776s ago: executing program 0 (id=2862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c00070000000000000000070800090000000000080008000000000008000600736970006f0ae91d32ec8fe5caccf25a9ff8"], 0x4c}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x94, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x46}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xeb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffe}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8bf9}]}, 0x94}, 0x1, 0x0, 0x0, 0x60}, 0x20000000) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="180200000002000000000000000040008500000020000000850000002300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="1c0000", 0x3, 0x0, 0x0, 0x0) close(0x3) 1.272610424s ago: executing program 3 (id=2863): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r1 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000180)=0x2f9, 0x4) unshare(0x22020400) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r3, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x8, 0x0, 0x0}}, 0x10) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f00000001c0)=0xfc, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0xbace, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}}, 0x0, 0xc}, &(0x7f0000000080)=0x90) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0xfff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000f40)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000000ec0)="c9df04cd8ce4f37656ffabb858c02ee95c69ff108ad5b76475bf8916734cbd57c84685f29a99074838097ed28b3d45bd4f24b1ad5ed7661fcf04c5f4e9fbfcebef046540294bb08de607993d1594343d19b89e6da0c4d2f7d7b92a2222268aa59e3113070d539092c09406c9", 0x6c}], 0x2}, 0x24004880) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="bd606a2a7f2c24475466a8f086dd60902d0300380000fe880000000000000000000000000001fe8000000000000000000000000000aa6c06000000000000072800000000080504000600001400000000030000000000000001000000000000000100000000000000c20400008001"], 0x0) 1.198864406s ago: executing program 1 (id=2864): socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000002c0)='f2fs_iostat_latency\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd7000ffcbdf250900020073797a1b0000000008004100736977001400330077673100"/56], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r4], 0x7c}}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000016000004000000000800003fbf1443407a000a0010000800"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800b0001006c6f6f6b7570000050000280080002400000001308000240000000120800054000000001080004400000000108000240000000130800024000000008080002400000000b08000440000000010900010073797a31000000000900010073797a30000000000900020073797a3200"], 0xb8}}, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e23, 0xa, 0x4e23, 0x0, 0x2, 0xa0, 0x0, 0x3b, r8, 0xffffffffffffffff}, {0x5, 0x5, 0x4, 0x5, 0xcc, 0x1, 0x4, 0x1}, {0x0, 0x8, 0x66296995, 0x9}, 0x3, 0x6e6bb7, 0x1, 0x1, 0x2, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x3501, 0x0, 0x0, 0x7, 0x7, 0x9, 0x1}}, 0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x98, 0x8, 0xfa04, 0x1b0, 0x6c02, 0x1b0, 0x194, 0x194, 0x1b0, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'veth0_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 1.112324503s ago: executing program 4 (id=2865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0x6, 0xb}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb080045007cb0f06110"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) connect$qrtr(r2, &(0x7f0000000080)={0x2a, 0x2, 0x8000}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000006c0)={'tunl0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x717, 0x721, 0x4, 0xfff, {{0x1b, 0x4, 0x1, 0x8, 0x6c, 0x67, 0x0, 0x4, 0x4, 0x0, @multicast2, @multicast2, {[@timestamp={0x44, 0x8, 0xe6, 0x0, 0x6, [0x0]}, @timestamp_addr={0x44, 0x4c, 0xba, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0x1}, {@empty, 0x6f}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xba2}, {@rand_addr=0x64010100, 0x7}, {@remote, 0x1}, {@multicast1}, {@private=0xa010101, 0x8}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x31}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@delneigh={0x28, 0x1d, 0x400, 0x70bd27, 0x25dfdbfd, {0x1c, 0x0, 0x0, r7, 0x1, 0x86, 0x6}, [@NDA_DST_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0xba9e27e393015d9f}, 0x2001c001) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x22020600) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r9}, 0x10) 1.050847061s ago: executing program 3 (id=2866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0xba01}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x2}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x40007, 0x7ed53619, 0x1, 0x2, 0xa8, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000001, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x6, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0xab, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffbfff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x38, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x4, 0x0, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x7fff, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x2]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x40, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x3, 0x0, 0x10, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x5, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1682, 0xa252, 0x2, 0x203, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0x200e, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x12, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x3, 0xb9a6, 0x522, 0x0, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x7fffffff, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x5, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x4, 0x21ce83b0, 0x2, 0x6, {0x9, 0x1, 0x1000, 0x4, 0x4, 0x401}, {0xe, 0x0, 0xc, 0x1, 0x9, 0x5}, 0x7, 0x80, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r8, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 875.997044ms ago: executing program 2 (id=2867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000000)={r0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d07000000374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6bebf5088a2a12dd1a1b14d948aa911cf50968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3a51cc87e068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a881192292469d2d25115be3cfb8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c5a7bd32cb8d3ca303a671a9339e77a"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004e0ffff030000000a00200000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) 698.468042ms ago: executing program 2 (id=2868): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x3, {}, 0xfe}, 0x18) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040600) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000004100), r0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000040), 0x4) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={0x0, 0xf0}, 0x1, 0x0, 0x0, 0x4090}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000300), &(0x7f0000000040)=0x8) 584.582455ms ago: executing program 4 (id=2869): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d03d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1bf4c727f30db4778beff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d571366", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde6682e5ecfe30b771e51c8d", 0x47}], 0x2, 0x0, 0x0, 0x806}], 0x1, 0x0) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffd, 0x4) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/32, 0x20}], 0x1}, 0x1}], 0x2, 0x2101, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 244.216851ms ago: executing program 4 (id=2871): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000050000004943000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a40)={{r1}, &(0x7f0000000840), &(0x7f0000001a00)}, 0x20) 236.694881ms ago: executing program 1 (id=2872): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffb1}, 0x48) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0x1, 0xf1, 0x200, 0x9, 0x6, 0x0, 0x7f, 0x80000001, 0x5, 0x4, 0xfffffff0, 0x1, 0x570, 0x4, 0x40008, 0xa5, 0x5, 0xdff, 0xff, 0x452, 0x1000, 0xb, 0x4}}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0xc101}) unshare(0x6020400) setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000140)=0x4) 216.97363ms ago: executing program 0 (id=2873): r0 = socket(0x22, 0x2, 0x2) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r3, &(0x7f0000000400)=""/66, 0x42, 0x100, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff00"], 0xc8}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x128, 0x1403, 0x2, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4040800}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=r6, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000940)={r6, r6}) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000000)=0xd, 0x4) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) shutdown(r5, 0x1) 0s ago: executing program 4 (id=2874): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000440)=[@iv={0xb8, 0x117, 0x2, 0xa4, "16df8be643bbcfcd0c0361b95515ef696ce512dcea03d541e31291965aff4a88d0f956d9a360505ccaa44215c256008b46ddd92587cc0f9e2c5c6f13d42919901a21db4fa7ce0bb3f01191d2eee8e0037633f6fa1a31bb23d7e05c906b7d83882aa669dda032ac35aa7e98a9180a225a1176cfc80644ba4dc8c99ffcfb8e9bbe9873c839f39e5f909a6dbbeac557a7c438a2f7db44a40997592298160f01f2e86f7bf81b"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x13, 0x117, 0x4, 0x40}], 0xe8}], 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1415, 0x103, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40008000}, 0x4000) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): e: 15 callbacks suppressed [ 304.964183][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1391'. [ 305.002302][T10915] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 305.044582][T10925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1391'. [ 305.065484][T10915] bond3 (unregistering): Released all slaves [ 305.110542][ T5898] tipc: Node number set to 3923227745 [ 305.239507][T10942] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1395'. [ 305.256104][T10921] xfrm0 speed is unknown, defaulting to 1000 [ 305.308933][T10942] netlink: 'syz.2.1395': attribute type 9 has an invalid length. [ 305.350539][T10942] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1395'. [ 305.393075][T10942] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1395'. [ 305.522519][T10952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1400'. [ 305.556797][T10952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1400'. [ 305.725187][T10968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1402'. [ 308.572658][T10921] ip6_vti0 speed is unknown, defaulting to 1000 [ 308.590056][T10976] syzkaller0: entered promiscuous mode [ 308.614635][T10976] syzkaller0: entered allmulticast mode [ 308.630704][T10980] FAULT_INJECTION: forcing a failure. [ 308.630704][T10980] name failslab, interval 1, probability 0, space 0, times 0 [ 308.644947][T10980] CPU: 1 UID: 0 PID: 10980 Comm: syz.0.1404 Not tainted syzkaller #0 PREEMPT(full) [ 308.644971][T10980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 308.644996][T10980] Call Trace: [ 308.645004][T10980] [ 308.645013][T10980] dump_stack_lvl+0xe8/0x150 [ 308.645044][T10980] should_fail_ex+0x414/0x560 [ 308.645079][T10980] should_failslab+0xa8/0x100 [ 308.645105][T10980] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 308.645135][T10980] ? __alloc_skb+0x198/0x3a0 [ 308.645154][T10980] ? __alloc_skb+0x1dc/0x3a0 [ 308.645183][T10980] ? __local_bh_enable_ip+0xd0/0x130 [ 308.645204][T10980] ? __alloc_skb+0x198/0x3a0 [ 308.645224][T10980] __alloc_skb+0x1dc/0x3a0 [ 308.645248][T10980] netlink_sendmsg+0x5c6/0xb30 [ 308.645282][T10980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.645310][T10980] ? aa_sock_msg_perm+0xf1/0x1b0 [ 308.645337][T10980] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.645355][T10980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.645379][T10980] __sock_sendmsg+0x21c/0x270 [ 308.645410][T10980] ____sys_sendmsg+0x505/0x820 [ 308.645438][T10980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.645470][T10980] ? import_iovec+0x74/0xa0 [ 308.645496][T10980] ___sys_sendmsg+0x21f/0x2a0 [ 308.645522][T10980] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.645579][T10980] ? __fget_files+0x2a/0x420 [ 308.645601][T10980] ? __fget_files+0x3a0/0x420 [ 308.645642][T10980] __x64_sys_sendmsg+0x19b/0x260 [ 308.645668][T10980] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.645700][T10980] ? __pfx_ksys_write+0x10/0x10 [ 308.645731][T10980] do_syscall_64+0xec/0xf80 [ 308.645751][T10980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.645769][T10980] ? trace_irq_disable+0x37/0x100 [ 308.645794][T10980] ? clear_bhb_loop+0x60/0xb0 [ 308.645816][T10980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.645836][T10980] RIP: 0033:0x7f7ab138f749 [ 308.645853][T10980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.645871][T10980] RSP: 002b:00007f7ab2280038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.645891][T10980] RAX: ffffffffffffffda RBX: 00007f7ab15e5fa0 RCX: 00007f7ab138f749 [ 308.645906][T10980] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000006 [ 308.645919][T10980] RBP: 00007f7ab2280090 R08: 0000000000000000 R09: 0000000000000000 [ 308.645931][T10980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.645947][T10980] R13: 00007f7ab15e6038 R14: 00007f7ab15e5fa0 R15: 00007ffefe51bc98 [ 308.645979][T10980] [ 309.111349][T10990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.533029][ T5898] hid-generic 0005:0002:5508.0001: item fetching failed at offset 3/4 [ 309.556784][ T5898] hid-generic 0005:0002:5508.0001: probe with driver hid-generic failed with error -22 [ 309.783269][T11022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1410'. [ 310.150457][T11043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1414'. [ 310.322471][T11049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1415'. [ 310.348504][T11049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1415'. [ 310.520013][T11068] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1417'. [ 310.544965][T11069] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1417'. [ 310.623814][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1419'. [ 310.632800][T11075] openvswitch: netlink: Flow actions attr not present in new flow. [ 311.094688][T11101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1424'. [ 311.129055][T11102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1425'. [ 311.163907][T11102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1425'. [ 311.190740][T11105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.391514][T11112] can: request_module (can-proto-5) failed. [ 311.769954][T11129] xfrm0 speed is unknown, defaulting to 1000 [ 312.094638][T11129] ip6_vti0 speed is unknown, defaulting to 1000 [ 312.817097][T11175] netlink: 'syz.3.1445': attribute type 8 has an invalid length. [ 313.727864][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1449'. [ 313.737053][T11191] veth0: entered promiscuous mode [ 313.780713][T11192] veth0 (unregistering): left promiscuous mode [ 314.928350][T11208] netlink: 'syz.3.1454': attribute type 5 has an invalid length. [ 314.989134][T11210] sctp: [Deprecated]: syz.0.1455 (pid 11210) Use of int in max_burst socket option. [ 314.989134][T11210] Use struct sctp_assoc_value instead [ 315.630286][T11233] __nla_validate_parse: 1 callbacks suppressed [ 315.630305][T11233] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1461'. [ 315.658687][T11219] syzkaller1: entered promiscuous mode [ 315.671291][T11219] syzkaller1: entered allmulticast mode [ 315.683480][T11229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1460'. [ 315.753198][T11233] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1461'. [ 315.874655][T11244] netlink: 'syz.3.1463': attribute type 13 has an invalid length. [ 315.882640][T11244] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1463'. [ 315.906295][T11244] syz_tun: refused to change device tx_queue_len [ 315.912767][T11244] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 316.176866][T11248] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1465'. [ 316.477226][T11256] netlink: 'syz.0.1468': attribute type 2 has an invalid length. [ 316.485235][T11256] netlink: 'syz.0.1468': attribute type 8 has an invalid length. [ 316.488627][T11258] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 316.492955][T11256] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1468'. [ 316.615470][T11258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1469'. [ 316.642674][T11258] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1469'. [ 316.948306][T11272] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 316.970547][T11275] netlink: 'syz.2.1473': attribute type 5 has an invalid length. [ 317.008014][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.016086][T11277] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1472'. [ 317.047970][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1474'. [ 317.066702][T11272] syzkaller0: entered promiscuous mode [ 317.072194][T11272] syzkaller0: entered allmulticast mode [ 317.101985][T11283] netlink: 'syz.4.1475': attribute type 29 has an invalid length. [ 318.854380][T11289] tipc: Enabled bearer , priority 0 [ 318.887188][T11290] syzkaller0: entered promiscuous mode [ 318.898495][T11290] syzkaller0: entered allmulticast mode [ 318.946897][T11288] tipc: Resetting bearer [ 318.970383][T11286] tipc: Resetting bearer [ 319.003075][T11286] tipc: Disabling bearer [ 319.042739][T11303] netlink: 'syz.4.1481': attribute type 7 has an invalid length. [ 319.050859][T11303] netlink: 'syz.4.1481': attribute type 8 has an invalid length. [ 319.133267][T11301] netlink: 'syz.0.1480': attribute type 9 has an invalid length. [ 319.547259][T11332] netlink: 'syz.1.1489': attribute type 5 has an invalid length. [ 319.639707][T11334] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 320.889266][T11379] netlink: 'syz.3.1501': attribute type 5 has an invalid length. [ 320.907512][T11378] syzkaller1: left promiscuous mode [ 320.912748][T11378] syzkaller1: left allmulticast mode [ 320.935831][T11376] __nla_validate_parse: 12 callbacks suppressed [ 320.935847][T11376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1499'. [ 321.202438][T11393] openvswitch: netlink: ERSPAN option length err (len 405, max 255). [ 322.237541][T11406] delete_channel: no stack [ 322.242193][T11424] netlink: 'syz.3.1510': attribute type 1 has an invalid length. [ 322.255591][T11451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1514'. [ 322.507452][T11465] xfrm0 speed is unknown, defaulting to 1000 [ 322.823800][T11480] netlink: 'syz.3.1521': attribute type 13 has an invalid length. [ 323.237887][T11498] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1528'. [ 323.261774][T11496] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20003 [ 323.322200][T11502] sctp: [Deprecated]: syz.0.1529 (pid 11502) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.322200][T11502] Use struct sctp_sack_info instead [ 323.462213][T11465] ip6_vti0 speed is unknown, defaulting to 1000 [ 323.853020][T11524] xfrm0 speed is unknown, defaulting to 1000 [ 324.560701][T11524] ip6_vti0 speed is unknown, defaulting to 1000 [ 324.899456][T11534] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1537'. [ 324.933431][T11534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1537'. [ 325.554789][T11556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.897415][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1548'. [ 325.955288][T11566] xfrm0 speed is unknown, defaulting to 1000 [ 325.991610][T11573] sctp: [Deprecated]: syz.3.1549 (pid 11573) Use of int in max_burst socket option. [ 325.991610][T11573] Use struct sctp_assoc_value instead [ 326.053205][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1549'. [ 326.187246][T11575] bond0: Caught tx_queue_len zero misconfig [ 326.729837][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'. [ 326.769792][T11566] ip6_vti0 speed is unknown, defaulting to 1000 [ 326.891282][T11613] FAULT_INJECTION: forcing a failure. [ 326.891282][T11613] name failslab, interval 1, probability 0, space 0, times 0 [ 326.904343][T11613] CPU: 1 UID: 0 PID: 11613 Comm: syz.3.1558 Not tainted syzkaller #0 PREEMPT(full) [ 326.904368][T11613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 326.904380][T11613] Call Trace: [ 326.904388][T11613] [ 326.904397][T11613] dump_stack_lvl+0xe8/0x150 [ 326.904426][T11613] should_fail_ex+0x414/0x560 [ 326.904461][T11613] should_failslab+0xa8/0x100 [ 326.904487][T11613] __kmalloc_cache_noprof+0x84/0x700 [ 326.904506][T11613] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 326.904543][T11613] ? nft_trans_table_add+0x56/0x430 [ 326.904570][T11613] nft_trans_table_add+0x56/0x430 [ 326.904597][T11613] nf_tables_newtable+0xce3/0x1890 [ 326.904646][T11613] nfnetlink_rcv+0x11d9/0x2590 [ 326.904705][T11613] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 326.904773][T11613] ? netlink_deliver_tap+0x2e/0x1b0 [ 326.904799][T11613] ? netlink_deliver_tap+0x2e/0x1b0 [ 326.904841][T11613] netlink_unicast+0x82f/0x9e0 [ 326.904872][T11613] ? __pfx_netlink_unicast+0x10/0x10 [ 326.904893][T11613] ? __alloc_skb+0x198/0x3a0 [ 326.904913][T11613] ? netlink_sendmsg+0x642/0xb30 [ 326.904936][T11613] ? skb_put+0x11b/0x210 [ 326.904960][T11613] netlink_sendmsg+0x805/0xb30 [ 326.904994][T11613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.905022][T11613] ? aa_sock_msg_perm+0xf1/0x1b0 [ 326.905049][T11613] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 326.905068][T11613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.905094][T11613] __sock_sendmsg+0x21c/0x270 [ 326.905124][T11613] ____sys_sendmsg+0x505/0x820 [ 326.905153][T11613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.905186][T11613] ? import_iovec+0x74/0xa0 [ 326.905213][T11613] ___sys_sendmsg+0x21f/0x2a0 [ 326.905239][T11613] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.905302][T11613] ? __fget_files+0x2a/0x420 [ 326.905326][T11613] ? __fget_files+0x3a0/0x420 [ 326.905361][T11613] __x64_sys_sendmsg+0x19b/0x260 [ 326.905387][T11613] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.905420][T11613] ? __pfx_ksys_write+0x10/0x10 [ 326.905452][T11613] do_syscall_64+0xec/0xf80 [ 326.905472][T11613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.905490][T11613] ? trace_irq_disable+0x37/0x100 [ 326.905520][T11613] ? clear_bhb_loop+0x60/0xb0 [ 326.905543][T11613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.905563][T11613] RIP: 0033:0x7f6fbb58f749 [ 326.905580][T11613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.905597][T11613] RSP: 002b:00007f6fbc469038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.905619][T11613] RAX: ffffffffffffffda RBX: 00007f6fbb7e5fa0 RCX: 00007f6fbb58f749 [ 326.905634][T11613] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 326.905647][T11613] RBP: 00007f6fbc469090 R08: 0000000000000000 R09: 0000000000000000 [ 326.905660][T11613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.905672][T11613] R13: 00007f6fbb7e6038 R14: 00007f6fbb7e5fa0 R15: 00007ffde6f95528 [ 326.905706][T11613] [ 327.351736][T11615] xfrm0 speed is unknown, defaulting to 1000 [ 327.941334][T11633] netlink: 'syz.4.1566': attribute type 1 has an invalid length. [ 328.030475][T11633] veth3: entered promiscuous mode [ 328.046030][T11633] erspan0: entered allmulticast mode [ 328.285562][T11615] ip6_vti0 speed is unknown, defaulting to 1000 [ 328.735628][T11635] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 329.094806][T11653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1571'. [ 329.116817][T11653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1571'. [ 329.272702][T11659] pim6reg1: entered promiscuous mode [ 329.278567][T11659] pim6reg1: entered allmulticast mode [ 329.924962][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1578'. [ 329.998381][T11678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 330.174586][T11693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 330.256705][T11704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1582'. [ 330.267244][T11702] æÿîÿ: entered promiscuous mode [ 330.968488][T11733] netlink: 'syz.4.1591': attribute type 5 has an invalid length. [ 331.354348][T11756] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 331.524156][ T5905] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 331.674268][ T5905] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 331.825082][T11771] netlink: 'syz.2.1604': attribute type 5 has an invalid length. [ 332.077591][T11776] syzkaller0: entered promiscuous mode [ 332.087254][T11776] syzkaller0: entered allmulticast mode [ 332.118894][T11779] netlink: 'syz.1.1601': attribute type 11 has an invalid length. [ 332.154496][T11779] netlink: 'syz.1.1601': attribute type 11 has an invalid length. [ 332.162448][T11779] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1601'. [ 332.227298][T11786] syzkaller0: entered promiscuous mode [ 332.233151][T11786] syzkaller0: entered allmulticast mode [ 332.286521][T11786] tipc: Enabled bearer , priority 0 [ 332.330889][T11764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.396013][T11785] tipc: Resetting bearer [ 332.415063][T11785] tipc: Disabling bearer [ 332.572206][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1613'. [ 332.724787][T11804] netlink: 'syz.0.1616': attribute type 5 has an invalid length. [ 332.927842][T11816] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1619'. [ 333.206186][T11830] "syz.1.1624" (11830) uses obsolete ecb(arc4) skcipher [ 333.314243][T11842] FAULT_INJECTION: forcing a failure. [ 333.314243][T11842] name failslab, interval 1, probability 0, space 0, times 0 [ 333.339809][T11842] CPU: 0 UID: 0 PID: 11842 Comm: syz.0.1629 Not tainted syzkaller #0 PREEMPT(full) [ 333.339834][T11842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.339846][T11842] Call Trace: [ 333.339853][T11842] [ 333.339861][T11842] dump_stack_lvl+0xe8/0x150 [ 333.339889][T11842] should_fail_ex+0x414/0x560 [ 333.339923][T11842] should_failslab+0xa8/0x100 [ 333.339949][T11842] __kmalloc_noprof+0xdf/0x800 [ 333.339966][T11842] ? trace_kmalloc+0x1f/0xb0 [ 333.339981][T11842] ? nla_strdup+0x9d/0x140 [ 333.340007][T11842] nla_strdup+0x9d/0x140 [ 333.340026][T11842] ? nft_rhash_estimate+0x6f/0xa0 [ 333.340053][T11842] nf_tables_newset+0x136f/0x2540 [ 333.340092][T11842] ? __pfx_nf_tables_newset+0x10/0x10 [ 333.340127][T11842] ? __nla_parse+0x40/0x60 [ 333.340151][T11842] nfnetlink_rcv+0x11d9/0x2590 [ 333.340205][T11842] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 333.340270][T11842] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.340295][T11842] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.340336][T11842] netlink_unicast+0x82f/0x9e0 [ 333.340366][T11842] ? __pfx_netlink_unicast+0x10/0x10 [ 333.340385][T11842] ? __alloc_skb+0x198/0x3a0 [ 333.340406][T11842] ? netlink_sendmsg+0x642/0xb30 [ 333.340427][T11842] ? skb_put+0x11b/0x210 [ 333.340451][T11842] netlink_sendmsg+0x805/0xb30 [ 333.340483][T11842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.340511][T11842] ? aa_sock_msg_perm+0xf1/0x1b0 [ 333.340537][T11842] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.340556][T11842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.340581][T11842] __sock_sendmsg+0x21c/0x270 [ 333.340611][T11842] ____sys_sendmsg+0x505/0x820 [ 333.340640][T11842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.340671][T11842] ? import_iovec+0x74/0xa0 [ 333.340697][T11842] ___sys_sendmsg+0x21f/0x2a0 [ 333.340722][T11842] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.340776][T11842] ? __fget_files+0x2a/0x420 [ 333.340800][T11842] ? __fget_files+0x3a0/0x420 [ 333.340831][T11842] __x64_sys_sendmsg+0x19b/0x260 [ 333.340857][T11842] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.340889][T11842] ? __pfx_ksys_write+0x10/0x10 [ 333.340918][T11842] do_syscall_64+0xec/0xf80 [ 333.340938][T11842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.340956][T11842] ? trace_irq_disable+0x37/0x100 [ 333.340980][T11842] ? clear_bhb_loop+0x60/0xb0 [ 333.341001][T11842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.341019][T11842] RIP: 0033:0x7f7ab138f749 [ 333.341035][T11842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.341053][T11842] RSP: 002b:00007f7ab2280038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.341080][T11842] RAX: ffffffffffffffda RBX: 00007f7ab15e5fa0 RCX: 00007f7ab138f749 [ 333.341095][T11842] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 333.341107][T11842] RBP: 00007f7ab2280090 R08: 0000000000000000 R09: 0000000000000000 [ 333.341119][T11842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 333.341130][T11842] R13: 00007f7ab15e6038 R14: 00007f7ab15e5fa0 R15: 00007ffefe51bc98 [ 333.341161][T11842] [ 333.644999][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 333.675399][T11852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1632'. [ 333.845295][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1633'. [ 333.855355][T11857] IPv6: NLM_F_REPLACE set, but no existing node found! [ 333.962108][T11868] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1637'. [ 334.317259][T11897] syzkaller0: entered promiscuous mode [ 334.322971][T11897] syzkaller0: entered allmulticast mode [ 334.514179][T11903] wg1: entered promiscuous mode [ 334.528251][T11903] wg1: entered allmulticast mode [ 334.675290][T11914] "syz.3.1649" (11914) uses obsolete ecb(arc4) skcipher [ 334.753406][T11916] tipc: Enabled bearer , priority 0 [ 334.765479][T11916] syzkaller0: entered promiscuous mode [ 334.771036][T11916] syzkaller0: entered allmulticast mode [ 334.786325][T11918] gretap2: entered promiscuous mode [ 334.867592][T11915] tipc: Resetting bearer [ 334.890797][T11915] tipc: Disabling bearer [ 335.030699][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'. [ 335.052996][ T749] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.061614][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'. [ 335.071243][ T749] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.090879][ T749] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.114332][ T749] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.255611][T11939] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1660'. [ 335.305635][T11941] xfrm0 speed is unknown, defaulting to 1000 [ 335.336290][T11944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.351460][T11946] "syz.0.1662" (11946) uses obsolete ecb(arc4) skcipher [ 335.533857][T11952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1665'. [ 335.594157][T11952] tipc: Enabling of bearer rejected, failed to enable media [ 335.722557][T11941] ip6_vti0 speed is unknown, defaulting to 1000 [ 335.879688][T11965] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 336.093441][T11986] "syz.0.1676" (11986) uses obsolete ecb(arc4) skcipher [ 336.216134][T11990] netlink: 'syz.4.1678': attribute type 11 has an invalid length. [ 336.250883][T11990] netlink: 'syz.4.1678': attribute type 11 has an invalid length. [ 336.328074][T12003] FAULT_INJECTION: forcing a failure. [ 336.328074][T12003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.341843][T12003] CPU: 1 UID: 0 PID: 12003 Comm: syz.2.1681 Not tainted syzkaller #0 PREEMPT(full) [ 336.341869][T12003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.341881][T12003] Call Trace: [ 336.341888][T12003] [ 336.341897][T12003] dump_stack_lvl+0xe8/0x150 [ 336.341926][T12003] should_fail_ex+0x414/0x560 [ 336.341960][T12003] _copy_from_user+0x2d/0xb0 [ 336.341985][T12003] core_sys_select+0x4bc/0xa20 [ 336.342019][T12003] ? __pfx_core_sys_select+0x10/0x10 [ 336.342065][T12003] ? __pfx_set_user_sigmask+0x10/0x10 [ 336.342097][T12003] __se_sys_pselect6+0x27a/0x300 [ 336.342124][T12003] ? __pfx___se_sys_pselect6+0x10/0x10 [ 336.342146][T12003] ? __pfx_ksys_write+0x10/0x10 [ 336.342170][T12003] ? __x64_sys_pselect6+0x21/0xf0 [ 336.342195][T12003] do_syscall_64+0xec/0xf80 [ 336.342215][T12003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.342235][T12003] ? trace_irq_disable+0x37/0x100 [ 336.342260][T12003] ? clear_bhb_loop+0x60/0xb0 [ 336.342283][T12003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.342301][T12003] RIP: 0033:0x7fe8f458f749 [ 336.342318][T12003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.342335][T12003] RSP: 002b:00007fe8f5483038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 336.342356][T12003] RAX: ffffffffffffffda RBX: 00007fe8f47e5fa0 RCX: 00007fe8f458f749 [ 336.342371][T12003] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 336.342384][T12003] RBP: 00007fe8f5483090 R08: 0000000000000000 R09: 0000000000000000 [ 336.342397][T12003] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 336.342410][T12003] R13: 00007fe8f47e6038 R14: 00007fe8f47e5fa0 R15: 00007fff8de25e18 [ 336.342442][T12003] [ 336.527323][T12001] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.744107][T12001] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.867388][T12001] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.032329][T12022] syzkaller0: entered promiscuous mode [ 337.062511][T12022] syzkaller0: entered allmulticast mode [ 337.115839][T12001] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.261700][T12022] netlink: 'syz.4.1686': attribute type 13 has an invalid length. [ 337.271641][T12022] netlink: 'syz.4.1686': attribute type 12 has an invalid length. [ 337.287821][T12022] __nla_validate_parse: 7 callbacks suppressed [ 337.287838][T12022] netlink: 4308 bytes leftover after parsing attributes in process `syz.4.1686'. [ 337.403891][ T3558] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.471080][T12038] "syz.1.1690" (12038) uses obsolete ecb(arc4) skcipher [ 337.490511][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.534905][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.651339][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1691'. [ 338.098849][ T3751] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.308615][T12053] FAULT_INJECTION: forcing a failure. [ 338.308615][T12053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.352171][T12053] CPU: 0 UID: 0 PID: 12053 Comm: syz.4.1693 Not tainted syzkaller #0 PREEMPT(full) [ 338.352198][T12053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 338.352210][T12053] Call Trace: [ 338.352218][T12053] [ 338.352227][T12053] dump_stack_lvl+0xe8/0x150 [ 338.352255][T12053] should_fail_ex+0x414/0x560 [ 338.352291][T12053] _copy_from_user+0x2d/0xb0 [ 338.352322][T12053] core_sys_select+0x609/0xa20 [ 338.352355][T12053] ? __pfx_core_sys_select+0x10/0x10 [ 338.352401][T12053] ? __pfx_set_user_sigmask+0x10/0x10 [ 338.352433][T12053] __se_sys_pselect6+0x27a/0x300 [ 338.352460][T12053] ? __pfx___se_sys_pselect6+0x10/0x10 [ 338.352482][T12053] ? __pfx_ksys_write+0x10/0x10 [ 338.352506][T12053] ? __x64_sys_pselect6+0x21/0xf0 [ 338.352530][T12053] do_syscall_64+0xec/0xf80 [ 338.352550][T12053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.352567][T12053] ? trace_irq_disable+0x37/0x100 [ 338.352592][T12053] ? clear_bhb_loop+0x60/0xb0 [ 338.352615][T12053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.352633][T12053] RIP: 0033:0x7ff15698f749 [ 338.352649][T12053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.352666][T12053] RSP: 002b:00007ff15783b038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 338.352687][T12053] RAX: ffffffffffffffda RBX: 00007ff156be5fa0 RCX: 00007ff15698f749 [ 338.352702][T12053] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 338.352714][T12053] RBP: 00007ff15783b090 R08: 0000000000000000 R09: 0000000000000000 [ 338.352726][T12053] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 338.352739][T12053] R13: 00007ff156be6038 R14: 00007ff156be5fa0 R15: 00007fffcc3e40d8 [ 338.352770][T12053] [ 338.674407][T12068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1695'. [ 338.731027][T12074] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1699'. [ 338.790407][T12074] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1699'. [ 338.807495][T12079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1700'. [ 338.816683][T12079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1700'. [ 338.875967][T12079] ip6gretap2: entered allmulticast mode [ 338.889081][T12074] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.942376][T12086] "syz.4.1701" (12086) uses obsolete ecb(arc4) skcipher [ 339.021453][T12074] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.063717][T12092] tunl0: left allmulticast mode [ 339.071359][T12092] vxcan1: left allmulticast mode [ 339.085780][T12092] wg1: left promiscuous mode [ 339.090556][T12092] wg1: left allmulticast mode [ 339.114535][T12092] bond2: left promiscuous mode [ 339.119452][T12092] bond2: left allmulticast mode [ 339.125323][T12092] bridge2: left promiscuous mode [ 339.130400][T12092] bridge2: left allmulticast mode [ 339.137769][T12092] ipvlan1: left promiscuous mode [ 339.156136][T12092] ip6gretap2: left allmulticast mode [ 339.176596][T12074] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.220799][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1703'. [ 339.221510][T12100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1703'. [ 339.273783][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1704'. [ 339.304423][T12104] netlink: 'syz.1.1704': attribute type 30 has an invalid length. [ 339.317004][T12074] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.393145][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.411865][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.430482][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.449927][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.617465][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.707544][ T60] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.743287][T12126] xfrm0 speed is unknown, defaulting to 1000 [ 339.794182][ T60] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.829848][ T60] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.838181][T12135] "syz.3.1713" (12135) uses obsolete ecb(arc4) skcipher [ 340.005865][T12143] SET target dimension over the limit! [ 340.265111][T12126] ip6_vti0 speed is unknown, defaulting to 1000 [ 340.922355][T12178] Unsupported ieee802154 address type: 0 [ 340.987427][T12183] "syz.3.1725" (12183) uses obsolete ecb(arc4) skcipher [ 341.126222][T12190] C: renamed from team_slave_0 [ 341.176428][T12190] netlink: 'syz.2.1727': attribute type 2 has an invalid length. [ 341.198201][T12190] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 341.449718][T12207] netlink: 'syz.3.1735': attribute type 1 has an invalid length. [ 341.733330][T12227] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.811981][T12228] bond3: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 341.852637][T12227] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.927109][T12243] netlink: 'syz.2.1743': attribute type 1 has an invalid length. [ 341.959327][T12243] bond7: entered promiscuous mode [ 341.965829][T12243] 8021q: adding VLAN 0 to HW filter on device bond7 [ 341.988299][T12227] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.045851][T12243] bond7: (slave bridge4): making interface the new active one [ 342.064907][T12243] bridge4: entered promiscuous mode [ 342.071359][T12243] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 342.103294][T12251] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.150260][T12227] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.199589][T12251] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.271780][T12251] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.313548][ T749] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.347092][ T3527] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.380541][ T3751] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.397790][T12251] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.471811][ T3751] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.491544][T12262] syzkaller1: entered promiscuous mode [ 342.508508][T12262] syzkaller1: entered allmulticast mode [ 342.576556][ T3527] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.606049][ T3751] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.627486][ T3751] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.686541][ T3527] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.774872][T12278] xfrm0 speed is unknown, defaulting to 1000 [ 343.068042][T12295] __nla_validate_parse: 7 callbacks suppressed [ 343.068060][T12295] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1758'. [ 343.321848][T12278] ip6_vti0 speed is unknown, defaulting to 1000 [ 343.650671][T12319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1764'. [ 343.659918][T12319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1764'. [ 344.405973][T12351] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1773'. [ 344.438274][T12351] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1773'. [ 344.569463][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1775'. [ 344.580909][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1775'. [ 344.592467][T12360] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1775'. [ 344.868869][T12382] xt_policy: output policy not valid in PREROUTING and INPUT [ 344.915842][T12385] netlink: 464 bytes leftover after parsing attributes in process `syz.4.1784'. [ 345.013592][T12392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1787'. [ 345.377403][T12406] xfrm0 speed is unknown, defaulting to 1000 [ 345.710605][T12406] ip6_vti0 speed is unknown, defaulting to 1000 [ 345.759090][T12426] sock: sock_timestamping_bind_phc: sock not bind to device [ 345.767740][T12427] sock: sock_timestamping_bind_phc: sock not bind to device [ 345.911121][T12432] xt_TPROXY: Can be used only with -p tcp or -p udp [ 346.109235][T12438] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 346.411496][T12454] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 346.507446][T12454] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.662216][T12454] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.775250][T12454] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.841442][T12454] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.987024][ T3815] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.018326][ T3815] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.112117][ T8383] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.167479][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.283011][T12488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.319926][T12488] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 347.403176][T12493] x_tables: duplicate underflow at hook 2 [ 347.427899][T12497] netlink: 'syz.4.1817': attribute type 2 has an invalid length. [ 347.628190][T12507] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 348.169636][T12544] __nla_validate_parse: 10 callbacks suppressed [ 348.169655][T12544] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1830'. [ 348.962648][T12577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1841'. [ 349.147693][T12577] nbd: socks must be embedded in a SOCK_ITEM attr [ 349.174582][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1843'. [ 349.413738][T12598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1847'. [ 349.419134][T12577] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1841'. [ 349.641575][T12604] FAULT_INJECTION: forcing a failure. [ 349.641575][T12604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.657209][T12604] CPU: 0 UID: 0 PID: 12604 Comm: syz.0.1848 Not tainted syzkaller #0 PREEMPT(full) [ 349.657235][T12604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 349.657247][T12604] Call Trace: [ 349.657255][T12604] [ 349.657264][T12604] dump_stack_lvl+0xe8/0x150 [ 349.657292][T12604] should_fail_ex+0x414/0x560 [ 349.657327][T12604] _copy_from_iter+0x1cd/0x1630 [ 349.657359][T12604] ? __pfx__copy_from_iter+0x10/0x10 [ 349.657387][T12604] ? __build_skb_around+0x22d/0x3c0 [ 349.657409][T12604] ? __alloc_skb+0x198/0x3a0 [ 349.657429][T12604] ? netlink_sendmsg+0x642/0xb30 [ 349.657452][T12604] ? skb_put+0x11b/0x210 [ 349.657475][T12604] netlink_sendmsg+0x6b2/0xb30 [ 349.657508][T12604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.657537][T12604] ? aa_sock_msg_perm+0xf1/0x1b0 [ 349.657562][T12604] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 349.657581][T12604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.657606][T12604] __sock_sendmsg+0x21c/0x270 [ 349.657637][T12604] ____sys_sendmsg+0x505/0x820 [ 349.657664][T12604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.657696][T12604] ? import_iovec+0x74/0xa0 [ 349.657722][T12604] ___sys_sendmsg+0x21f/0x2a0 [ 349.657747][T12604] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.657803][T12604] ? __fget_files+0x2a/0x420 [ 349.657826][T12604] ? __fget_files+0x3a0/0x420 [ 349.657860][T12604] __x64_sys_sendmsg+0x19b/0x260 [ 349.657885][T12604] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.657917][T12604] ? __pfx_ksys_write+0x10/0x10 [ 349.657948][T12604] do_syscall_64+0xec/0xf80 [ 349.657968][T12604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.657986][T12604] ? trace_irq_disable+0x37/0x100 [ 349.658011][T12604] ? clear_bhb_loop+0x60/0xb0 [ 349.658034][T12604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.658053][T12604] RIP: 0033:0x7f7ab138f749 [ 349.658070][T12604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.658087][T12604] RSP: 002b:00007f7ab2280038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.658108][T12604] RAX: ffffffffffffffda RBX: 00007f7ab15e5fa0 RCX: 00007f7ab138f749 [ 349.658123][T12604] RDX: 00000000000008c0 RSI: 0000200000000700 RDI: 0000000000000004 [ 349.658135][T12604] RBP: 00007f7ab2280090 R08: 0000000000000000 R09: 0000000000000000 [ 349.658147][T12604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.658159][T12604] R13: 00007f7ab15e6038 R14: 00007f7ab15e5fa0 R15: 00007ffefe51bc98 [ 349.658191][T12604] [ 350.036800][T12602] bond4: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 350.061516][T12602] bond4 (unregistering): Released all slaves [ 350.097721][ T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.106562][ T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.125490][ T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.134844][ T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.217042][T12612] : renamed from bond_slave_0 [ 350.618006][T12626] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.740470][T12626] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.791768][T12626] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.805873][T12637] tc_dump_action: action bad kind [ 350.846620][T12626] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.016994][ T3527] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.069772][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.137145][ T3527] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.203329][ T3527] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.732298][T12679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1874'. [ 351.852133][T12676] xfrm0 speed is unknown, defaulting to 1000 [ 351.852459][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1874'. [ 351.955055][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1875'. [ 352.274415][T12701] SET target dimension over the limit! [ 352.316228][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1877'. [ 352.389425][T12676] ip6_vti0 speed is unknown, defaulting to 1000 [ 352.625287][T12721] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1882'. [ 352.741808][T12723] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 353.152923][T12744] xfrm0 speed is unknown, defaulting to 1000 [ 353.159662][T12746] netlink: 'syz.4.1894': attribute type 13 has an invalid length. [ 353.202773][T12746] netlink: 'syz.4.1894': attribute type 17 has an invalid length. [ 353.394101][T12744] ip6_vti0 speed is unknown, defaulting to 1000 [ 353.596093][T12754] syzkaller1: entered promiscuous mode [ 353.601605][T12754] syzkaller1: entered allmulticast mode [ 353.832043][T12763] xfrm0 speed is unknown, defaulting to 1000 [ 353.903805][T12760] __nla_validate_parse: 4 callbacks suppressed [ 353.903823][T12760] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1899'. [ 354.570957][T12790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1908'. [ 354.590006][T12790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1908'. [ 354.641272][T12792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1908'. [ 354.691258][T12792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1908'. [ 354.708782][T12763] ip6_vti0 speed is unknown, defaulting to 1000 [ 354.715100][T12799] lo: Caught tx_queue_len zero misconfig [ 355.081046][T12813] netlink: 'syz.3.1916': attribute type 12 has an invalid length. [ 356.328238][T12831] netlink: 'syz.4.1925': attribute type 13 has an invalid length. [ 356.336810][T12831] netlink: 'syz.4.1925': attribute type 17 has an invalid length. [ 356.357917][T12831] 0ªî{X¹¦: left allmulticast mode [ 356.374272][T12831] erspan0: left allmulticast mode [ 356.409168][T12838] xt_TCPMSS: Only works on TCP SYN packets [ 356.466104][T12831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.485239][T12843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1928'. [ 356.497731][T12831] 8021q: adding VLAN 0 to HW filter on device ` [ 356.528505][T12831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 356.719932][T12849] xt_bpf: check failed: parse error [ 356.762602][T12847] team0 (unregistering): Port device team_slave_0 removed [ 356.772438][T12847] team0 (unregistering): Port device team_slave_1 removed [ 356.874821][T12851] xfrm0 speed is unknown, defaulting to 1000 [ 356.952864][T12857] pim6reg: entered allmulticast mode [ 356.974688][T12857] syzkaller1: left promiscuous mode [ 356.983338][T12857] syzkaller1: left allmulticast mode [ 357.001025][T12856] pim6reg: left allmulticast mode [ 357.388430][T12851] ip6_vti0 speed is unknown, defaulting to 1000 [ 357.389224][T12870] xfrm0 speed is unknown, defaulting to 1000 [ 357.447897][T12878] pimreg: entered allmulticast mode [ 357.480732][T12878] pimreg: left allmulticast mode [ 357.769675][T12889] "syz.0.1943" (12889) uses obsolete ecb(arc4) skcipher [ 357.908399][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1944'. [ 358.081879][T12875] xfrm0 speed is unknown, defaulting to 1000 [ 358.252725][T12909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1947'. [ 358.332926][T12893] xfrm0 speed is unknown, defaulting to 1000 [ 358.579692][T12898] xfrm0 speed is unknown, defaulting to 1000 [ 358.604145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.613499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.693004][T12913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1948'. [ 358.790059][T12875] ip6_vti0 speed is unknown, defaulting to 1000 [ 359.030593][T12926] "syz.2.1954" (12926) uses obsolete ecb(arc4) skcipher [ 359.163048][T12870] ip6_vti0 speed is unknown, defaulting to 1000 [ 359.173736][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1956'. [ 359.370966][T12898] ip6_vti0 speed is unknown, defaulting to 1000 [ 359.630959][T12944] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1959'. [ 359.647164][T12893] ip6_vti0 speed is unknown, defaulting to 1000 [ 359.786716][T12944] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1959'. [ 359.924236][T12948] bridge: RTM_NEWNEIGH with invalid ether address [ 359.934515][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'. [ 359.988587][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'. [ 360.371606][T12957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1963'. [ 360.523889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.532791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.542015][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1963'. [ 361.229897][T12965] "syz.2.1965" (12965) uses obsolete ecb(arc4) skcipher [ 361.452098][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1969'. [ 361.497058][T12976] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1969'. [ 361.531374][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1969'. [ 361.771887][T12986] xfrm0 speed is unknown, defaulting to 1000 [ 361.938410][T12997] "syz.3.1977" (12997) uses obsolete ecb(arc4) skcipher [ 362.043896][T13002] netlink: 'syz.2.1978': attribute type 3 has an invalid length. [ 362.105795][T13002] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 362.125360][T13006] bond0: (slave syz_tun): Releasing backup interface [ 362.142318][T13006] ¾x9ÿ: left allmulticast mode [ 362.148763][T13006] ¾x9ÿ: left promiscuous mode [ 362.153687][T13006] bridge0: port 1(1¾x9ÿ) entered disabled state [ 362.164556][ T5898] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 362.185446][T13006] bridge_slave_1: left allmulticast mode [ 362.191097][T13006] bridge_slave_1: left promiscuous mode [ 362.222710][T13006] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.237267][T13006] bond0: (slave bond_slave_0): Releasing backup interface [ 362.246634][T13006] bond0: (slave bond_slave_1): Releasing backup interface [ 362.256326][T13006] team0: Port device C removed [ 362.263213][T13006] team0: Port device team_slave_1 removed [ 362.269842][T13006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.281085][T13006] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 362.302288][T12986] ip6_vti0 speed is unknown, defaulting to 1000 [ 362.443747][ T5836] Bluetooth: hci4: link tx timeout [ 362.451130][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.005286][ T5905] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 363.084807][T13019] veth3: entered promiscuous mode [ 363.365209][T13036] "syz.3.1989" (13036) uses obsolete ecb(arc4) skcipher [ 363.706158][T13046] netlink: 'syz.0.1994': attribute type 11 has an invalid length. [ 364.150410][T13073] "syz.0.2001" (13073) uses obsolete ecb(arc4) skcipher [ 364.350875][T13078] tipc: Enabling of bearer rejected, failed to enable media [ 364.454670][T13090] xfrm0 speed is unknown, defaulting to 1000 [ 364.523811][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 364.986279][T13090] ip6_vti0 speed is unknown, defaulting to 1000 [ 366.188437][T13145] __nla_validate_parse: 2 callbacks suppressed [ 366.188455][T13145] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2020'. [ 366.222096][T13145] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2020'. [ 366.428595][T13151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.437874][T13151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.454921][T13151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.471472][T13151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.489612][T13151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.507178][T13153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.734047][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.743972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.953911][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.830862][T13183] tipc: Enabled bearer , priority 0 [ 367.962578][T13183] syzkaller0: entered promiscuous mode [ 367.972088][T13183] syzkaller0: entered allmulticast mode [ 367.982790][T13183] tipc: Resetting bearer [ 368.036392][T13182] tipc: Resetting bearer [ 368.065357][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2031'. [ 370.844346][T13182] tipc: Disabling bearer [ 370.852588][T13191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2031'. [ 370.869152][ T10] tipc: Node number set to 1865133282 [ 370.875765][T13211] syzkaller0: entered promiscuous mode [ 370.881236][T13211] syzkaller0: entered allmulticast mode [ 370.924569][T13215] syzkaller0: left promiscuous mode [ 370.937985][T13196] xfrm0 speed is unknown, defaulting to 1000 [ 370.975453][T13227] "syz.2.2036" (13227) uses obsolete ecb(arc4) skcipher [ 371.283546][T13196] ip6_vti0 speed is unknown, defaulting to 1000 [ 371.405258][T13246] xfrm0 speed is unknown, defaulting to 1000 [ 371.446105][T13252] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2043'. [ 371.930014][T13259] team0: Port device bridge5 added [ 371.967699][T13246] ip6_vti0 speed is unknown, defaulting to 1000 [ 371.967857][T13259] bridge0: port 1(team0) entered blocking state [ 371.983234][T13259] bridge0: port 1(team0) entered disabled state [ 371.993863][T13259] team0: entered allmulticast mode [ 372.000942][T13259] bridge5: entered allmulticast mode [ 372.012511][T13259] team0: entered promiscuous mode [ 372.020004][T13259] bridge5: entered promiscuous mode [ 372.381235][T13266] "syz.2.2048" (13266) uses obsolete ecb(arc4) skcipher [ 372.436591][T13247] siw: device registration error -23 [ 374.086703][T13293] "syz.1.2059" (13293) uses obsolete ecb(arc4) skcipher [ 374.221827][T13296] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2058'. [ 374.233368][T13296] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2058'. [ 374.750409][T13329] "syz.2.2070" (13329) uses obsolete ecb(arc4) skcipher [ 375.009110][T13337] netlink: 'syz.2.2071': attribute type 5 has an invalid length. [ 375.046570][T13337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2071'. [ 375.498975][T13337] bond0: (slave wlan1): Releasing backup interface [ 375.626241][T13342] syzkaller1: entered promiscuous mode [ 375.673790][T13342] syzkaller1: entered allmulticast mode [ 375.698129][T13373] tipc: Enabled bearer , priority 0 [ 375.726723][T13364] syzkaller0: entered promiscuous mode [ 375.732257][T13364] syzkaller0: entered allmulticast mode [ 375.755225][T13358] xfrm0 speed is unknown, defaulting to 1000 [ 375.892894][T13373] tipc: Disabling bearer [ 375.991347][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2080'. [ 376.051656][T13386] "syz.3.2081" (13386) uses obsolete ecb(arc4) skcipher [ 376.440244][T13358] ip6_vti0 speed is unknown, defaulting to 1000 [ 376.880138][T13407] xfrm0 speed is unknown, defaulting to 1000 [ 376.896755][T13403] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 377.481410][T13417] xfrm0 speed is unknown, defaulting to 1000 [ 377.482995][T13407] ip6_vti0 speed is unknown, defaulting to 1000 [ 377.660043][T13430] "syz.0.2094" (13430) uses obsolete ecb(arc4) skcipher [ 378.065000][T13440] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2097'. [ 378.318364][T13417] ip6_vti0 speed is unknown, defaulting to 1000 [ 378.447512][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.818441][T13456] net_ratelimit: 4 callbacks suppressed [ 379.818458][T13456] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 380.385178][T13458] bond3: option arp_validate: invalid value (18446744073491447809) [ 380.416017][T13458] bond3 (unregistering): Released all slaves [ 380.504455][T13459] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 380.905148][T13471] "syz.3.2106" (13471) uses obsolete ecb(arc4) skcipher [ 381.629222][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 381.652519][T13488] netlink: 'syz.3.2113': attribute type 1 has an invalid length. [ 381.671885][T13488] netlink: 'syz.3.2113': attribute type 2 has an invalid length. [ 381.693034][T13488] netlink: 'syz.3.2113': attribute type 3 has an invalid length. [ 381.712188][T13488] pim6reg1: entered promiscuous mode [ 381.725700][T13488] pim6reg1: entered allmulticast mode [ 382.072536][T13510] netlink: 'syz.0.2119': attribute type 1 has an invalid length. [ 382.208684][T13518] netlink: 'syz.1.2124': attribute type 1 has an invalid length. [ 382.233218][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2124'. [ 382.345932][T13518] 8021q: adding VLAN 0 to HW filter on device bond4 [ 382.561608][T13522] bond4 (unregistering): Released all slaves [ 382.585085][T13532] xfrm0 speed is unknown, defaulting to 1000 [ 382.729342][T13552] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2131'. [ 382.749896][T13550] tipc: Enabled bearer , priority 0 [ 382.758078][T13550] syzkaller0: entered promiscuous mode [ 382.764767][T13550] syzkaller0: entered allmulticast mode [ 382.804129][T13550] tipc: Resetting bearer [ 382.817956][T13549] tipc: Resetting bearer [ 382.840484][T13549] tipc: Disabling bearer [ 382.854782][T13532] ip6_vti0 speed is unknown, defaulting to 1000 [ 383.120943][T13567] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 383.189100][T13571] netlink: 'syz.0.2136': attribute type 1 has an invalid length. [ 383.281692][T13575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.307247][T13575] bond0: (slave rose0): Enslaving as an active interface with an up link [ 383.787747][T13611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.796577][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.077578][T13624] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2146'. [ 384.689534][T13641] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2151'. [ 384.713449][T13641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2151'. [ 384.738271][T13641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2151'. [ 385.389733][T13685] sctp: [Deprecated]: syz.4.2164 (pid 13685) Use of int in maxseg socket option. [ 385.389733][T13685] Use struct sctp_assoc_value instead [ 385.922478][T13719] nftables ruleset with unbound chain [ 386.605486][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2187'. [ 386.734784][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2192'. [ 386.745465][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2192'. [ 386.762809][T13778] syzkaller0: entered promiscuous mode [ 386.768968][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2192'. [ 386.781151][T13778] syzkaller0: entered allmulticast mode [ 386.790352][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2192'. [ 386.810236][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2192'. [ 387.209716][T13805] netlink: 'syz.1.2200': attribute type 2 has an invalid length. [ 387.240268][T13805] !©9: entered promiscuous mode [ 387.265215][T13805] netlink: 'syz.1.2200': attribute type 2 has an invalid length. [ 387.273374][T13805] !©9: left promiscuous mode [ 387.524021][T13823] IPv6: addrconf: prefix option has invalid lifetime [ 387.530801][T13823] IPv6: addrconf: prefix option has invalid lifetime [ 387.606288][T13829] netlink: 'syz.3.2207': attribute type 1 has an invalid length. [ 387.692358][T13826] xfrm0 speed is unknown, defaulting to 1000 [ 388.187291][T13826] ip6_vti0 speed is unknown, defaulting to 1000 [ 388.667259][T13881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.898278][T13888] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 389.016102][T13892] netlink: 'syz.1.2229': attribute type 1 has an invalid length. [ 389.163860][T13904] __nla_validate_parse: 68 callbacks suppressed [ 389.163878][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2229'. [ 389.179435][T13892] 8021q: adding VLAN 0 to HW filter on device bond4 [ 389.285151][T13901] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 389.308396][T13901] bond4: (slave batadv2): making interface the new active one [ 389.366165][T13901] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 389.449070][T13909] Cannot find add_set index 4 as target [ 389.573518][T13904] bond4 (unregistering): (slave batadv2): Releasing active interface [ 389.586716][T13904] bond4 (unregistering): Released all slaves [ 389.620981][T13918] netlink: 'syz.4.2236': attribute type 4 has an invalid length. [ 389.636983][T13918] netlink: 'syz.4.2236': attribute type 1 has an invalid length. [ 389.711975][T13918] bond2: entered promiscuous mode [ 389.725967][T13918] bond2: entered allmulticast mode [ 389.732680][T13918] 8021q: adding VLAN 0 to HW filter on device bond2 [ 389.960231][T13926] pimreg: entered allmulticast mode [ 390.351352][T13944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.362463][T13944] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.363981][T13947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2245'. [ 390.387535][ T48] ip6_vti0 speed is unknown, defaulting to 1000 [ 390.394706][ T48] syz2: Port: 1 Link ACTIVE [ 390.399276][ T48] ip6_vti0 speed is unknown, defaulting to 1000 [ 390.435447][T13947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2245'. [ 390.548211][T13950] syzkaller0: entered promiscuous mode [ 390.553883][T13950] syzkaller0: entered allmulticast mode [ 393.188177][T13997] bridge0: entered promiscuous mode [ 393.219325][T13997] bridge0: left promiscuous mode [ 393.229411][T14010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.281343][T14014] xt_TCPMSS: Only works on TCP SYN packets [ 393.298632][T14016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2256'. [ 393.395121][T14020] netlink: 'syz.0.2258': attribute type 5 has an invalid length. [ 393.404082][T14016] bridge_slave_1: left allmulticast mode [ 393.429009][T14016] bridge_slave_1: left promiscuous mode [ 393.436708][T14016] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.457657][T14016] bridge_slave_0: left promiscuous mode [ 393.475653][T14016] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.494454][T14023] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2259'. [ 393.602428][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2259'. [ 393.804114][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 393.918646][T14038] bond4: option fail_over_mac: invalid value (127) [ 393.930457][T14038] bond4 (unregistering): Released all slaves [ 393.979490][T14044] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2263'. [ 394.104878][T14046] netlink: 'syz.1.2264': attribute type 9 has an invalid length. [ 394.112642][T14046] netlink: 'syz.1.2264': attribute type 11 has an invalid length. [ 394.154185][T14046] netlink: 'syz.1.2264': attribute type 12 has an invalid length. [ 394.163366][T14046] netlink: 187120 bytes leftover after parsing attributes in process `syz.1.2264'. [ 394.201188][ T10] hid-generic 0005:15C2:FFF9.0002: item fetching failed at offset 0/1 [ 394.234362][T14050] erspan0: left allmulticast mode [ 394.243094][ T10] hid-generic 0005:15C2:FFF9.0002: probe with driver hid-generic failed with error -22 [ 394.279220][T14050] sit0: left promiscuous mode [ 394.342073][T14050] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.351970][T14071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2268'. [ 394.380681][T14050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 394.475061][T14078] netlink: 'syz.2.2270': attribute type 13 has an invalid length. [ 394.500501][T14080] netlink: 'syz.1.2271': attribute type 1 has an invalid length. [ 394.641119][T14087] bond4: (slave bridge0): Enslaving as a backup interface with an up link [ 394.816381][T14098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2276'. [ 394.828374][T14100] batadv_slave_1: entered promiscuous mode [ 394.844256][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2274'. [ 394.859166][T14098] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2276'. [ 394.885730][T14099] batadv_slave_1 (unregistering): left promiscuous mode [ 394.932960][T14101] xfrm0 speed is unknown, defaulting to 1000 [ 394.951884][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2279'. [ 395.046968][T14110] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2280'. [ 395.103856][T14110] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2280'. [ 395.163919][T14114] netlink: 'syz.1.2281': attribute type 15 has an invalid length. [ 395.224332][T14101] ip6_vti0 speed is unknown, defaulting to 1000 [ 395.678583][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2291'. [ 395.803810][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 395.849270][T14149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.862170][T14148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2294'. [ 395.872674][T14149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.889861][T14149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.898632][T14149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.008967][T14149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.044027][T14149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.056806][T14149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.151736][T14149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.171080][T14163] tipc: Failed to remove unknown binding: 66,0,0/0:1923029338/1923029339 [ 396.174382][T14164] netlink: 'syz.1.2298': attribute type 6 has an invalid length. [ 396.198101][T14163] tipc: Failed to remove unknown binding: 66,0,0/0:1923029338/1923029339 [ 396.203396][T14164] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2298'. [ 396.696234][T14172] xfrm0 speed is unknown, defaulting to 1000 [ 396.986445][T14184] can: request_module (can-proto-3) failed. [ 397.064281][T14199] xfrm0 speed is unknown, defaulting to 1000 [ 397.083115][T14172] ip6_vti0 speed is unknown, defaulting to 1000 [ 397.654462][T14225] batman_adv: batadv0: Adding interface: vlan0 [ 397.660663][T14225] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.687917][T14225] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 397.705642][T14199] ip6_vti0 speed is unknown, defaulting to 1000 [ 399.001494][T14297] "syz.3.2329" (14297) uses obsolete ecb(arc4) skcipher [ 399.915102][T14328] __nla_validate_parse: 6 callbacks suppressed [ 399.915119][T14328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2338'. [ 399.947717][T14332] "syz.2.2340" (14332) uses obsolete ecb(arc4) skcipher [ 400.155866][T14328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2338'. [ 400.831036][ T52] block nbd0: Receive control failed (result -32) [ 400.868238][T14328] vlan2: entered promiscuous mode [ 400.873368][T14328] bond0: entered promiscuous mode [ 401.094396][T14348] xfrm0 speed is unknown, defaulting to 1000 [ 401.284285][T14368] netlink: 'syz.3.2347': attribute type 1 has an invalid length. [ 401.394031][T14374] SET target dimension over the limit! [ 401.417223][T14376] "syz.3.2351" (14376) uses obsolete ecb(arc4) skcipher [ 401.571988][T14386] tipc: Enabling of bearer rejected, failed to enable media [ 401.606480][T14348] ip6_vti0 speed is unknown, defaulting to 1000 [ 401.699113][T14395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2352'. [ 401.723488][T14393] net_ratelimit: 1016 callbacks suppressed [ 401.723504][T14393] netlink: zone id is out of range [ 401.776282][T14393] netlink: zone id is out of range [ 401.781433][T14393] netlink: zone id is out of range [ 401.787828][T14393] netlink: zone id is out of range [ 401.792950][T14393] netlink: zone id is out of range [ 401.823991][T14393] netlink: zone id is out of range [ 401.849412][T14393] netlink: zone id is out of range [ 401.863602][T14393] netlink: zone id is out of range [ 401.871135][ T30] audit: type=1800 audit(1767733501.679:3): pid=14405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2359" name="memory.events" dev="tmpfs" ino=2419 res=0 errno=0 [ 401.874293][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2359'. [ 401.898714][T14393] netlink: zone id is out of range [ 401.924385][T14402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2352'. [ 401.926935][T14406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2359'. [ 401.942416][T14393] netlink: zone id is out of range [ 401.950604][T14406] netlink: 'syz.1.2359': attribute type 18 has an invalid length. [ 402.165328][T14418] "syz.2.2364" (14418) uses obsolete ecb(arc4) skcipher [ 402.230417][T14413] xfrm0 speed is unknown, defaulting to 1000 [ 402.304992][T14421] batadv0: entered promiscuous mode [ 402.516188][T14430] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2368'. [ 402.665261][T14421] xfrm0 speed is unknown, defaulting to 1000 [ 402.858358][T14441] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2371'. [ 402.884573][T14441] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.969235][T14441] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.020351][T14413] ip6_vti0 speed is unknown, defaulting to 1000 [ 403.060649][T14441] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.119246][T14441] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.249880][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.272198][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.290219][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.326575][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.365608][T14421] ip6_vti0 speed is unknown, defaulting to 1000 [ 403.715254][T14461] "syz.2.2377" (14461) uses obsolete ecb(arc4) skcipher [ 403.897258][T14469] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2379'. [ 403.916445][T14467] netlink: 'syz.1.2380': attribute type 14 has an invalid length. [ 403.943085][T14467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2380'. [ 405.084410][T14508] "syz.2.2389" (14508) uses obsolete ecb(arc4) skcipher [ 405.347310][T14519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2393'. [ 405.516003][T14519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2393'. [ 405.615013][T14527] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2393'. [ 405.711572][T14540] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2395'. [ 405.999024][T14561] "syz.4.2402" (14561) uses obsolete ecb(arc4) skcipher [ 406.096487][T14568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2403'. [ 406.116634][T14569] tipc: Enabled bearer , priority 0 [ 406.124306][T14569] syzkaller0: entered promiscuous mode [ 406.129938][T14569] syzkaller0: entered allmulticast mode [ 406.152747][T14569] tipc: Resetting bearer [ 406.164174][T14567] tipc: Resetting bearer [ 406.195658][T14567] tipc: Disabling bearer [ 406.250319][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2406'. [ 406.262185][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2406'. [ 406.272286][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2406'. [ 406.285972][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2406'. [ 406.295805][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2406'. [ 406.654361][T14599] xfrm0 speed is unknown, defaulting to 1000 [ 407.069308][T14599] ip6_vti0 speed is unknown, defaulting to 1000 [ 407.269374][T14621] netlink: 'syz.2.2417': attribute type 16 has an invalid length. [ 407.362622][T14622] xfrm0 speed is unknown, defaulting to 1000 [ 407.791336][T14632] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 407.797224][T14632] pim6reg1: linktype set to 805 [ 407.839788][T14634] netlink: 'syz.2.2422': attribute type 10 has an invalid length. [ 407.878301][T14634] geneve0: entered promiscuous mode [ 407.884718][T14634] geneve0: entered allmulticast mode [ 407.917844][T14634] team0: Failed to send options change via netlink (err -105) [ 407.935340][T14634] team0: Port device geneve0 added [ 407.997744][T13106] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.015647][T14622] ip6_vti0 speed is unknown, defaulting to 1000 [ 408.025326][T13106] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.045397][T13106] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.084589][T13106] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.273977][T14651] syzkaller0: entered promiscuous mode [ 408.284932][T14651] syzkaller0: entered allmulticast mode [ 408.470404][T14660] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 408.687951][T14668] bond10: Unable to set down delay as MII monitoring is disabled [ 408.719342][T14668] bond10 (unregistering): Released all slaves [ 408.983960][T14680] netlink: 'syz.4.2432': attribute type 11 has an invalid length. [ 409.981041][T14715] net_ratelimit: 34 callbacks suppressed [ 409.981060][T14715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.322746][T14724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.331294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.588960][T14730] xfrm0 speed is unknown, defaulting to 1000 [ 410.595446][T14740] netlink: 'syz.0.2448': attribute type 10 has an invalid length. [ 410.970040][T14764] __nla_validate_parse: 67 callbacks suppressed [ 410.970060][T14764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2452'. [ 410.988466][T14765] netlink: 'syz.4.2450': attribute type 16 has an invalid length. [ 410.993862][T14758] block nbd2: server does not support multiple connections per device. [ 411.008662][T14758] block nbd2: shutting down sockets [ 411.023459][T14742] xfrm0 speed is unknown, defaulting to 1000 [ 411.030513][T14730] ip6_vti0 speed is unknown, defaulting to 1000 [ 411.148008][T14770] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2456'. [ 411.167972][T14770] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2456'. [ 411.276677][T14776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2458'. [ 411.277316][T14777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2458'. [ 411.317556][T14779] netlink: 'syz.2.2459': attribute type 1 has an invalid length. [ 411.410506][T14779] 8021q: adding VLAN 0 to HW filter on device bond10 [ 411.439574][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2459'. [ 411.454218][T14783] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 411.465208][T14783] bond10: (slave batadv1): making interface the new active one [ 411.474584][T14783] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 411.513102][T14786] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2460'. [ 411.606442][T14779] bond10 (unregistering): (slave batadv1): Releasing active interface [ 411.616925][T14779] bond10 (unregistering): Released all slaves [ 411.639724][T14742] ip6_vti0 speed is unknown, defaulting to 1000 [ 411.807985][T14793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.830705][T14793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.854410][T14793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.884099][T14793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.894433][T14793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.924047][T14793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.940008][T14792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.089845][T14800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2465'. [ 412.099103][T14800] netlink: 'syz.2.2465': attribute type 9 has an invalid length. [ 412.108807][T14800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2465'. [ 412.270563][T14817] netlink: 'syz.0.2468': attribute type 21 has an invalid length. [ 412.296718][T14817] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2468'. [ 413.015686][T14852] netlink: 'syz.4.2478': attribute type 3 has an invalid length. [ 413.276082][T14865] netlink: 'syz.0.2482': attribute type 1 has an invalid length. [ 413.628289][T14884] geneve4: entered promiscuous mode [ 413.644048][T14884] geneve4: entered allmulticast mode [ 413.653307][ T3852] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 413.663121][T14880] xfrm0 speed is unknown, defaulting to 1000 [ 413.669910][ T3852] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 413.692730][T14888] netlink: 'syz.2.2487': attribute type 5 has an invalid length. [ 413.746714][T14886] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.814789][T14886] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.870601][ T3852] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 413.892150][T14898] netlink: 'syz.0.2485': attribute type 4 has an invalid length. [ 413.907599][ T3852] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 413.972656][T14888] geneve4: entered promiscuous mode [ 413.973590][T14900] netlink: 'syz.0.2485': attribute type 4 has an invalid length. [ 413.989182][T14888] geneve4: entered allmulticast mode [ 414.015118][ T3852] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 414.036413][ T3852] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 414.055613][ T3852] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 414.103317][T14886] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.145709][T14886] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.168857][T14886] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 414.208348][T14910] "syz.3.2493" (14910) uses obsolete ecb(arc4) skcipher [ 414.248077][T14886] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.268708][T14886] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.279591][T14886] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 414.354467][T14880] ip6_vti0 speed is unknown, defaulting to 1000 [ 414.388331][T14886] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.409031][T14886] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.421106][T14886] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 414.561425][T13066] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.573718][T13066] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 414.582633][T13066] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 414.689317][T13066] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.697640][T13066] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 414.715281][T13066] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 414.766242][T14926] xfrm0 speed is unknown, defaulting to 1000 [ 414.810968][T13102] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.829607][T13102] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 414.850847][T13102] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 414.890836][T13102] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.909791][T13102] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 414.920683][T13102] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 414.994643][T14941] : entered promiscuous mode [ 415.107134][T14926] ip6_vti0 speed is unknown, defaulting to 1000 [ 415.338171][T14942] xfrm0 speed is unknown, defaulting to 1000 [ 415.969185][T14962] 8021q: adding VLAN 0 to HW filter on device bond3 [ 416.037000][T14960] xfrm0 speed is unknown, defaulting to 1000 [ 416.049373][T14942] ip6_vti0 speed is unknown, defaulting to 1000 [ 416.072058][T14969] macsec1: entered allmulticast mode [ 416.077630][T14969] macsec0: entered allmulticast mode [ 416.475559][T14960] ip6_vti0 speed is unknown, defaulting to 1000 [ 416.766815][T14987] openvswitch: netlink: EtherType 50a is less than min 600 [ 416.820813][T14988] syzkaller0: entered promiscuous mode [ 416.826600][T14988] syzkaller0: entered allmulticast mode [ 416.866679][T14990] __nla_validate_parse: 11 callbacks suppressed [ 416.866698][T14990] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2516'. [ 418.441211][T15007] trusted_key: syz.4.2518 sent an empty control message without MSG_MORE. [ 418.520475][T15011] "syz.4.2520" (15011) uses obsolete ecb(arc4) skcipher [ 418.805943][T15025] netlink: zone id is out of range [ 418.822952][T15025] netlink: zone id is out of range [ 418.839772][T15025] netlink: zone id is out of range [ 418.845421][T15025] netlink: zone id is out of range [ 418.850661][T15025] netlink: zone id is out of range [ 418.857854][T15025] netlink: zone id is out of range [ 418.863378][T15025] netlink: zone id is out of range [ 418.870005][T15025] netlink: set zone limit has 8 unknown bytes [ 418.982031][T15030] xt_TCPMSS: Only works on TCP SYN packets [ 419.106553][T15036] syzkaller0: entered promiscuous mode [ 419.112039][T15036] syzkaller0: entered allmulticast mode [ 419.146594][T15036] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2530'. [ 419.343760][T15045] netlink: 'syz.2.2533': attribute type 1 has an invalid length. [ 419.351722][T15045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2533'. [ 419.636126][T15061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2540'. [ 419.688586][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2540'. [ 419.699519][T15065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2540'. [ 420.696659][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2542'. [ 421.032504][T15099] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2550'. [ 421.137608][T15097] xfrm0 speed is unknown, defaulting to 1000 [ 421.275426][T15120] "syz.0.2556" (15120) uses obsolete ecb(arc4) skcipher [ 421.633155][T15097] ip6_vti0 speed is unknown, defaulting to 1000 [ 421.685341][T15139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2561'. [ 421.735399][T15139] veth1: entered allmulticast mode [ 421.972941][T15149] macsec0: entered promiscuous mode [ 421.983333][T15149] macsec0: left promiscuous mode [ 422.069152][T15154] "syz.0.2568" (15154) uses obsolete ecb(arc4) skcipher [ 422.331188][T15167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2571'. [ 422.432443][T15167] team0: left allmulticast mode [ 422.441572][T15167] bridge5: left allmulticast mode [ 422.459277][T15167] geneve0: left allmulticast mode [ 422.470788][T15167] team0: left promiscuous mode [ 422.476277][T15167] bridge5: left promiscuous mode [ 422.482015][T15167] geneve0: left promiscuous mode [ 422.490722][T15167] bridge0: port 1(team0) entered disabled state [ 423.194253][T15197] "syz.3.2579" (15197) uses obsolete ecb(arc4) skcipher [ 423.264904][T15204] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2582'. [ 423.415458][T15214] vxcan3: entered promiscuous mode [ 423.765756][T15242] syzkaller0: entered promiscuous mode [ 423.771364][T15242] syzkaller0: entered allmulticast mode [ 424.368893][T15275] xfrm0 speed is unknown, defaulting to 1000 [ 424.422310][T15281] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 424.714656][T15275] ip6_vti0 speed is unknown, defaulting to 1000 [ 425.027621][T15312] netlink: 'syz.4.2610': attribute type 1 has an invalid length. [ 425.097816][T15308] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 425.117434][T15308] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 425.148810][T15309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2610'. [ 425.210225][T15309] 8021q: adding VLAN 0 to HW filter on device bond4 [ 425.345933][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2613'. [ 425.382607][T15311] xfrm0 speed is unknown, defaulting to 1000 [ 425.527811][T15333] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 425.605399][T15311] ip6_vti0 speed is unknown, defaulting to 1000 [ 426.199653][T15342] veth7: entered promiscuous mode [ 426.287371][T15342] xt_bpf: check failed: parse error [ 426.314194][T15343] erspan0: entered allmulticast mode [ 427.038685][T15372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2629'. [ 427.213915][T15374] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2628'. [ 427.233306][T15374] nbd: socks must be embedded in a SOCK_ITEM attr [ 427.240899][T15369] xfrm0 speed is unknown, defaulting to 1000 [ 427.302787][T15379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2630'. [ 427.606034][T15391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.614738][T15391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.623276][T15391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.641453][T15391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.660701][T15391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.683472][T15391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.702986][T15395] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 427.716799][T15391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.744731][T15391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.746243][T15369] ip6_vti0 speed is unknown, defaulting to 1000 [ 427.760409][T15391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.198896][T15430] gretap2: entered allmulticast mode [ 429.214984][T15431] xfrm0 speed is unknown, defaulting to 1000 [ 429.424984][T15442] syz.1.2646 (15442) used obsolete PPPIOCDETACH ioctl [ 429.477976][T15446] netlink: 'syz.0.2649': attribute type 11 has an invalid length. [ 429.681523][T15435] xfrm0 speed is unknown, defaulting to 1000 [ 429.682952][T15431] ip6_vti0 speed is unknown, defaulting to 1000 [ 430.073135][T15470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2656'. [ 430.121420][T15470] tipc: Enabled bearer , priority 0 [ 430.146854][T15472] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.2657'. [ 430.167148][T15470] syzkaller0: entered promiscuous mode [ 430.172637][T15470] syzkaller0: entered allmulticast mode [ 430.181218][T15435] ip6_vti0 speed is unknown, defaulting to 1000 [ 430.211572][T15470] tipc: Resetting bearer [ 430.235778][T15468] tipc: Resetting bearer [ 430.265141][T15468] tipc: Disabling bearer [ 430.502285][T15479] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2660'. [ 431.193415][T15486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2662'. [ 431.337242][T15498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2665'. [ 431.429324][T15503] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2664'. [ 431.451980][T15503] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2664'. [ 431.652506][T15513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2669'. [ 431.669627][T15511] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 431.683508][T15511] batman_adv: batadv0: Adding interface: gretap2 [ 431.690462][T15511] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.717515][T15511] batman_adv: batadv0: Interface activated: gretap2 [ 431.780660][T15511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2668'. [ 432.052408][T15532] xfrm0 speed is unknown, defaulting to 1000 [ 432.068162][T15534] net_ratelimit: 1016 callbacks suppressed [ 432.068180][T15534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.082936][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.372254][T15549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.404334][T15549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.413204][T15549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.419526][T15532] ip6_vti0 speed is unknown, defaulting to 1000 [ 432.422838][T15550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.446361][T15550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.468378][T15548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.540813][T15554] xfrm0 speed is unknown, defaulting to 1000 [ 432.600396][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2682'. [ 432.775403][T15572] netlink: 'syz.3.2685': attribute type 21 has an invalid length. [ 432.783312][T15572] netlink: 'syz.3.2685': attribute type 4 has an invalid length. [ 432.989378][T15581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.997827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.119986][T15554] ip6_vti0 speed is unknown, defaulting to 1000 [ 434.513870][T15641] xfrm0 speed is unknown, defaulting to 1000 [ 434.907231][T15641] ip6_vti0 speed is unknown, defaulting to 1000 [ 435.224443][T15677] netlink: 'syz.0.2719': attribute type 1 has an invalid length. [ 435.281938][T15677] 8021q: adding VLAN 0 to HW filter on device bond3 [ 435.500138][T15682] veth7: entered promiscuous mode [ 435.509829][T15682] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 435.571325][T15684] tipc: Enabled bearer , priority 0 [ 435.616233][T15684] syzkaller0: entered promiscuous mode [ 435.630479][T15684] syzkaller0: entered allmulticast mode [ 435.721501][T15685] tipc: Resetting bearer [ 435.778622][T15683] tipc: Resetting bearer [ 435.797393][T15683] tipc: Disabling bearer [ 436.002796][T15696] FAULT_INJECTION: forcing a failure. [ 436.002796][T15696] name failslab, interval 1, probability 0, space 0, times 0 [ 436.045023][T15696] CPU: 0 UID: 0 PID: 15696 Comm: syz.3.2726 Not tainted syzkaller #0 PREEMPT(full) [ 436.045050][T15696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 436.045066][T15696] Call Trace: [ 436.045074][T15696] [ 436.045083][T15696] dump_stack_lvl+0xe8/0x150 [ 436.045113][T15696] should_fail_ex+0x414/0x560 [ 436.045148][T15696] should_failslab+0xa8/0x100 [ 436.045173][T15696] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 436.045202][T15696] ? __d_alloc+0x37/0x6f0 [ 436.045225][T15696] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 436.045264][T15696] __d_alloc+0x37/0x6f0 [ 436.045293][T15696] d_alloc_pseudo+0x21/0xc0 [ 436.045320][T15696] alloc_file_pseudo+0xcc/0x210 [ 436.045347][T15696] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 436.045369][T15696] ? do_raw_spin_unlock+0x122/0x240 [ 436.045396][T15696] ? _raw_spin_unlock+0x28/0x50 [ 436.045432][T15696] sock_alloc_file+0xb8/0x2e0 [ 436.045457][T15696] ? __sys_socket+0x12c/0x1b0 [ 436.045487][T15696] __sys_socket+0x13d/0x1b0 [ 436.045518][T15696] __x64_sys_socket+0x7a/0x90 [ 436.045548][T15696] do_syscall_64+0xec/0xf80 [ 436.045567][T15696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.045586][T15696] ? trace_irq_disable+0x37/0x100 [ 436.045611][T15696] ? clear_bhb_loop+0x60/0xb0 [ 436.045634][T15696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.045658][T15696] RIP: 0033:0x7f6fbb591667 [ 436.045676][T15696] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.045694][T15696] RSP: 002b:00007f6fbc467fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 436.045715][T15696] RAX: ffffffffffffffda RBX: 00007f6fbb7e5fa0 RCX: 00007f6fbb591667 [ 436.045731][T15696] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 436.045743][T15696] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 436.045755][T15696] R10: 00002000000002c0 R11: 0000000000000286 R12: 0000000000000001 [ 436.045768][T15696] R13: 00007f6fbb7e6038 R14: 00007f6fbb7e5fa0 R15: 00007ffde6f95528 [ 436.045800][T15696] [ 436.428190][T15704] __nla_validate_parse: 5 callbacks suppressed [ 436.428210][T15704] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2728'. [ 436.475659][T15707] team0: Port device team_slave_0 removed [ 436.492216][T15707] team0: Port device team_slave_1 removed [ 436.511616][T15704] sctp: [Deprecated]: syz.1.2728 (pid 15704) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.511616][T15704] Use struct sctp_sack_info instead [ 436.719821][T15721] xfrm0 speed is unknown, defaulting to 1000 [ 436.722814][T15722] raw_sendmsg: syz.2.2736 forgot to set AF_INET. Fix it! [ 436.815500][T15728] netlink: 'syz.3.2734': attribute type 3 has an invalid length. [ 436.884969][T15728] netlink: 'syz.3.2734': attribute type 3 has an invalid length. [ 436.930249][T15721] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.010479][T15740] FAULT_INJECTION: forcing a failure. [ 437.010479][T15740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.045199][T15740] CPU: 1 UID: 0 PID: 15740 Comm: syz.0.2741 Not tainted syzkaller #0 PREEMPT(full) [ 437.045223][T15740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 437.045235][T15740] Call Trace: [ 437.045242][T15740] [ 437.045251][T15740] dump_stack_lvl+0xe8/0x150 [ 437.045278][T15740] should_fail_ex+0x414/0x560 [ 437.045312][T15740] _copy_from_user+0x2d/0xb0 [ 437.045337][T15740] __sys_sendto+0x25c/0x520 [ 437.045358][T15740] ? __pfx___sys_sendto+0x10/0x10 [ 437.045405][T15740] ? exc_page_fault+0x71/0xd0 [ 437.045426][T15740] ? do_user_addr_fault+0xc85/0x1380 [ 437.045449][T15740] __x64_sys_sendto+0xde/0x100 [ 437.045472][T15740] do_syscall_64+0xec/0xf80 [ 437.045491][T15740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.045508][T15740] ? trace_irq_disable+0x37/0x100 [ 437.045531][T15740] ? clear_bhb_loop+0x60/0xb0 [ 437.045554][T15740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.045573][T15740] RIP: 0033:0x7f7ab13915dc [ 437.045589][T15740] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 437.045607][T15740] RSP: 002b:00007f7ab227eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 437.045626][T15740] RAX: ffffffffffffffda RBX: 00007f7ab227efc0 RCX: 00007f7ab13915dc [ 437.045641][T15740] RDX: 0000000000000020 RSI: 00007f7ab227f010 RDI: 0000000000000007 [ 437.045654][T15740] RBP: 0000000000000000 R08: 00007f7ab227ef14 R09: 000000000000000c [ 437.045666][T15740] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 437.045677][T15740] R13: 00007f7ab227ef68 R14: 00007f7ab227f010 R15: 0000000000000000 [ 437.045707][T15740] [ 437.218644][ C1] net_ratelimit: 11 callbacks suppressed [ 437.218663][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.233368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.264252][T15743] tun0: tun_chr_ioctl cmd 1074025672 [ 437.269693][T15743] tun0: ignored: set checksum disabled [ 437.279393][T15743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2742'. [ 437.289793][T15743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2742'. [ 437.298825][T15743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2742'. [ 437.551458][T15732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.716745][T15798] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2757'. [ 439.068785][T15778] xfrm0 speed is unknown, defaulting to 1000 [ 439.087726][T15807] xt_CT: No such helper "snmp" [ 439.179893][T15812] IPv6: NLM_F_REPLACE set, but no existing node found! [ 439.189687][T15813] IPv6: NLM_F_REPLACE set, but no existing node found! [ 439.614099][T15826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.632657][T15826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.641026][T15826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.659891][T15826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.675080][T15826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.685692][T15826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.697834][T15826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.724705][T15829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2765'. [ 439.851029][T15778] ip6_vti0 speed is unknown, defaulting to 1000 [ 439.887904][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.657746][T15876] xfrm0 speed is unknown, defaulting to 1000 [ 440.787286][T15877] can: request_module (can-proto-0) failed. [ 440.899744][T15887] FAULT_INJECTION: forcing a failure. [ 440.899744][T15887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.939691][T15887] CPU: 0 UID: 0 PID: 15887 Comm: syz.2.2776 Not tainted syzkaller #0 PREEMPT(full) [ 440.939718][T15887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 440.939731][T15887] Call Trace: [ 440.939739][T15887] [ 440.939748][T15887] dump_stack_lvl+0xe8/0x150 [ 440.939777][T15887] should_fail_ex+0x414/0x560 [ 440.939813][T15887] _copy_from_iter+0x1cd/0x1630 [ 440.939846][T15887] ? __pfx__copy_from_iter+0x10/0x10 [ 440.939867][T15887] ? __build_skb_around+0x22d/0x3c0 [ 440.939890][T15887] ? __alloc_skb+0x198/0x3a0 [ 440.939910][T15887] ? netlink_sendmsg+0x642/0xb30 [ 440.939933][T15887] ? skb_put+0x11b/0x210 [ 440.939958][T15887] netlink_sendmsg+0x6b2/0xb30 [ 440.939992][T15887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.940027][T15887] ? aa_sock_msg_perm+0xf1/0x1b0 [ 440.940054][T15887] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 440.940072][T15887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.940098][T15887] __sock_sendmsg+0x21c/0x270 [ 440.940130][T15887] __sys_sendto+0x3bd/0x520 [ 440.940153][T15887] ? __pfx___sys_sendto+0x10/0x10 [ 440.940199][T15887] ? exc_page_fault+0x71/0xd0 [ 440.940223][T15887] ? do_user_addr_fault+0xc85/0x1380 [ 440.940248][T15887] __x64_sys_sendto+0xde/0x100 [ 440.940273][T15887] do_syscall_64+0xec/0xf80 [ 440.940293][T15887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.940311][T15887] ? trace_irq_disable+0x37/0x100 [ 440.940336][T15887] ? clear_bhb_loop+0x60/0xb0 [ 440.940360][T15887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.940379][T15887] RIP: 0033:0x7fe8f45915dc [ 440.940396][T15887] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 440.940412][T15887] RSP: 002b:00007fe8f5481ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 440.940432][T15887] RAX: ffffffffffffffda RBX: 00007fe8f5481fc0 RCX: 00007fe8f45915dc [ 440.940445][T15887] RDX: 0000000000000020 RSI: 00007fe8f5482010 RDI: 0000000000000007 [ 440.940458][T15887] RBP: 0000000000000000 R08: 00007fe8f5481f14 R09: 000000000000000c [ 440.940470][T15887] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 440.940481][T15887] R13: 00007fe8f5481f68 R14: 00007fe8f5482010 R15: 0000000000000000 [ 440.940513][T15887] [ 441.346133][T15876] ip6_vti0 speed is unknown, defaulting to 1000 [ 441.452346][T15894] syzkaller1: entered promiscuous mode [ 441.478532][T15894] syzkaller1: entered allmulticast mode [ 441.576177][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 441.600224][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 441.608133][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 441.622018][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 441.629788][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 441.894611][T15904] xfrm0 speed is unknown, defaulting to 1000 [ 442.024342][T15919] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2787'. [ 442.412910][T15941] netlink: 'syz.1.2793': attribute type 1 has an invalid length. [ 442.506949][T15904] ip6_vti0 speed is unknown, defaulting to 1000 [ 442.571048][T15948] netlink: 'syz.1.2795': attribute type 21 has an invalid length. [ 442.579510][T15948] netlink: 'syz.1.2795': attribute type 1 has an invalid length. [ 442.587379][T15948] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2795'. [ 442.630622][T13066] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.641347][T13066] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 442.652111][T13066] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 442.714642][T13066] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.744867][T13066] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 442.754994][T13066] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 442.803847][T15951] FAULT_INJECTION: forcing a failure. [ 442.803847][T15951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.838927][T15951] CPU: 1 UID: 0 PID: 15951 Comm: syz.0.2796 Not tainted syzkaller #0 PREEMPT(full) [ 442.838953][T15951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 442.838965][T15951] Call Trace: [ 442.838973][T15951] [ 442.838981][T15951] dump_stack_lvl+0xe8/0x150 [ 442.839011][T15951] should_fail_ex+0x414/0x560 [ 442.839046][T15951] _copy_to_user+0x31/0xb0 [ 442.839072][T15951] simple_read_from_buffer+0xe1/0x170 [ 442.839101][T15951] proc_fail_nth_read+0x1b3/0x220 [ 442.839126][T15951] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 442.839150][T15951] ? rw_verify_area+0x2a6/0x4d0 [ 442.839168][T15951] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 442.839190][T15951] vfs_read+0x200/0xa30 [ 442.839207][T15951] ? fdget_pos+0x247/0x320 [ 442.839235][T15951] ? __pfx___mutex_lock+0x10/0x10 [ 442.839257][T15951] ? __pfx_vfs_read+0x10/0x10 [ 442.839277][T15951] ? __fget_files+0x2a/0x420 [ 442.839305][T15951] ? __fget_files+0x3a0/0x420 [ 442.839328][T15951] ? __fget_files+0x2a/0x420 [ 442.839361][T15951] ksys_read+0x145/0x250 [ 442.839382][T15951] ? __pfx_ksys_read+0x10/0x10 [ 442.839413][T15951] do_syscall_64+0xec/0xf80 [ 442.839432][T15951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.839451][T15951] ? trace_irq_disable+0x37/0x100 [ 442.839476][T15951] ? clear_bhb_loop+0x60/0xb0 [ 442.839499][T15951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.839517][T15951] RIP: 0033:0x7f7ab138e15c [ 442.839534][T15951] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 442.839551][T15951] RSP: 002b:00007f7ab2280030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 442.839571][T15951] RAX: ffffffffffffffda RBX: 00007f7ab15e5fa0 RCX: 00007f7ab138e15c [ 442.839586][T15951] RDX: 000000000000000f RSI: 00007f7ab22800a0 RDI: 0000000000000004 [ 442.839599][T15951] RBP: 00007f7ab2280090 R08: 0000000000000000 R09: 0000000000000000 [ 442.839611][T15951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.839623][T15951] R13: 00007f7ab15e6038 R14: 00007f7ab15e5fa0 R15: 00007ffefe51bc98 [ 442.839656][T15951] [ 443.202953][T13066] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.218208][T13066] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 443.228215][T13066] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 443.279327][T15960] tunl0: Caught tx_queue_len zero misconfig [ 443.332986][T13066] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.364249][T13066] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 443.376475][T13066] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 443.391189][T15962] netlink: 'syz.0.2799': attribute type 5 has an invalid length. [ 443.513991][T15964] xfrm0 speed is unknown, defaulting to 1000 [ 443.724079][ T5836] Bluetooth: hci5: command tx timeout [ 443.841640][T13066] batman_adv: batadv0: Interface deactivated: gretap2 [ 444.161610][T15991] net_ratelimit: 300 callbacks suppressed [ 444.161638][T15991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.176963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.186506][T15991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.202066][T13102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.213757][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.225806][T15979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.325807][T13066] bond4 (unregistering): (slave gretap1): Releasing active interface [ 444.352659][T13066] batman_adv: batadv0: Removing interface: gretap2 [ 444.391635][T13066] bond1 (unregistering): (slave gre1): Releasing backup interface [ 444.400059][T13066] gre1 (unregistering): left promiscuous mode [ 444.444184][T13066] team0: Port device geneve0 removed [ 444.613515][T13066] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 444.622124][T13066] bridge4 (unregistering): left promiscuous mode [ 444.704999][T13066] team0: Port device bridge5 removed [ 444.727150][T15981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.735587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.762936][T13066] bond0 (unregistering): Released all slaves [ 444.870053][T13066] bond1 (unregistering): Released all slaves [ 444.952410][T13066] bond2 (unregistering): Released all slaves [ 445.038072][T13066] bond3 (unregistering): Released all slaves [ 445.121981][T13066] bond4 (unregistering): Released all slaves [ 445.205792][T13066] bond5 (unregistering): Released all slaves [ 445.217630][T13066] bond6 (unregistering): Released all slaves [ 445.301247][T13066] bond7 (unregistering): Released all slaves [ 445.313016][T13066] bond8 (unregistering): Released all slaves [ 445.325341][T13066] bond9 (unregistering): Released all slaves [ 445.342097][T15964] ip6_vti0 speed is unknown, defaulting to 1000 [ 445.352373][T15904] chnl_net:caif_netlink_parms(): no params data found [ 445.512422][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2806'. [ 445.697734][T15904] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.713177][T15904] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.726290][T15904] bridge_slave_0: entered allmulticast mode [ 445.738337][T15904] bridge_slave_0: entered promiscuous mode [ 445.747152][T15904] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.754817][T15904] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.763334][T15904] bridge_slave_1: entered allmulticast mode [ 445.771856][T15904] bridge_slave_1: entered promiscuous mode [ 445.810280][ T5836] Bluetooth: hci5: command tx timeout [ 445.868204][T16026] netlink: 'syz.1.2810': attribute type 4 has an invalid length. [ 445.919741][T16029] netlink: 'syz.1.2810': attribute type 4 has an invalid length. [ 445.943008][T15904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.962360][T15904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.045249][T15904] team0: Port device team_slave_0 added [ 446.057538][T15904] team0: Port device team_slave_1 added [ 446.094102][T16033] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 446.151703][T16033] "syz.4.2812" (16033) uses obsolete ecb(arc4) skcipher [ 446.253065][T15904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.261681][T15904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.292285][T15904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.292513][T16037] FAULT_INJECTION: forcing a failure. [ 446.292513][T16037] name failslab, interval 1, probability 0, space 0, times 0 [ 446.318903][T15904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.325755][T16037] CPU: 1 UID: 0 PID: 16037 Comm: syz.4.2814 Not tainted syzkaller #0 PREEMPT(full) [ 446.325780][T16037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 446.325792][T16037] Call Trace: [ 446.325799][T16037] [ 446.325808][T16037] dump_stack_lvl+0xe8/0x150 [ 446.325836][T16037] should_fail_ex+0x414/0x560 [ 446.325869][T16037] should_failslab+0xa8/0x100 [ 446.325894][T16037] kmem_cache_alloc_noprof+0x88/0x710 [ 446.325923][T16037] ? skb_clone+0x212/0x3a0 [ 446.325952][T16037] skb_clone+0x212/0x3a0 [ 446.325979][T16037] __netlink_deliver_tap+0x404/0x850 [ 446.326015][T16037] ? netlink_deliver_tap+0x2e/0x1b0 [ 446.326039][T16037] netlink_deliver_tap+0x19c/0x1b0 [ 446.326063][T16037] netlink_sendskb+0x68/0x140 [ 446.326086][T16037] netlink_unicast+0x397/0x9e0 [ 446.326116][T16037] ? __pfx_netlink_unicast+0x10/0x10 [ 446.326135][T16037] ? __alloc_skb+0x198/0x3a0 [ 446.326154][T16037] ? __alloc_skb+0x27e/0x3a0 [ 446.326177][T16037] ctrl_getfamily+0x499/0x590 [ 446.326214][T16037] ? __pfx_ctrl_getfamily+0x10/0x10 [ 446.326242][T16037] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 446.326270][T16037] genl_family_rcv_msg_doit+0x215/0x300 [ 446.326295][T16037] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 446.326336][T16037] genl_rcv_msg+0x60e/0x790 [ 446.326360][T16037] ? __pfx_genl_rcv_msg+0x10/0x10 [ 446.326376][T16037] ? __pfx_ctrl_getfamily+0x10/0x10 [ 446.326406][T16037] ? __asan_memcpy+0x40/0x70 [ 446.326422][T16037] ? __pfx_ref_tracker_free+0x10/0x10 [ 446.326447][T16037] netlink_rcv_skb+0x208/0x470 [ 446.326471][T16037] ? __pfx_genl_rcv_msg+0x10/0x10 [ 446.326490][T16037] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 446.326511][T16037] ? genl_rcv+0x19/0x40 [ 446.326554][T16037] ? down_read+0x274/0x2e0 [ 446.326574][T16037] ? genl_rcv+0xd/0x40 [ 446.326603][T16037] genl_rcv+0x28/0x40 [ 446.326628][T16037] netlink_unicast+0x82f/0x9e0 [ 446.326657][T16037] ? __pfx_netlink_unicast+0x10/0x10 [ 446.326677][T16037] ? __alloc_skb+0x198/0x3a0 [ 446.326696][T16037] ? netlink_sendmsg+0x642/0xb30 [ 446.326717][T16037] ? skb_put+0x11b/0x210 [ 446.326741][T16037] netlink_sendmsg+0x805/0xb30 [ 446.326773][T16037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.326801][T16037] ? aa_sock_msg_perm+0xf1/0x1b0 [ 446.326827][T16037] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 446.326844][T16037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.326869][T16037] __sock_sendmsg+0x21c/0x270 [ 446.326900][T16037] __sys_sendto+0x3bd/0x520 [ 446.326922][T16037] ? __pfx___sys_sendto+0x10/0x10 [ 446.326967][T16037] ? exc_page_fault+0x71/0xd0 [ 446.326990][T16037] ? do_user_addr_fault+0xc85/0x1380 [ 446.327014][T16037] __x64_sys_sendto+0xde/0x100 [ 446.327038][T16037] do_syscall_64+0xec/0xf80 [ 446.327056][T16037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.327073][T16037] ? trace_irq_disable+0x37/0x100 [ 446.327097][T16037] ? clear_bhb_loop+0x60/0xb0 [ 446.327120][T16037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.327138][T16037] RIP: 0033:0x7ff1569915dc [ 446.327155][T16037] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 446.327171][T16037] RSP: 002b:00007ff157839ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 446.327196][T16037] RAX: ffffffffffffffda RBX: 00007ff157839fc0 RCX: 00007ff1569915dc [ 446.327210][T16037] RDX: 0000000000000020 RSI: 00007ff15783a010 RDI: 0000000000000007 [ 446.327222][T16037] RBP: 0000000000000000 R08: 00007ff157839f14 R09: 000000000000000c [ 446.327234][T16037] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 446.327245][T16037] R13: 00007ff157839f68 R14: 00007ff15783a010 R15: 0000000000000000 [ 446.327276][T16037] [ 446.684887][T15904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.711046][T15904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.929238][T16048] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 446.967263][T15904] hsr_slave_0: entered promiscuous mode [ 446.975061][T15904] hsr_slave_1: entered promiscuous mode [ 446.981542][T15904] debugfs: 'hsr0' already exists in 'hsr' [ 446.987424][T15904] Cannot create hsr debugfs directory [ 447.399101][T13066] : left promiscuous mode [ 447.482240][T13066] tipc: Disabling bearer [ 447.501324][T13066] tipc: Left network mode [ 447.888713][ T5836] Bluetooth: hci5: command tx timeout [ 447.923590][ T30] audit: type=1800 audit(1767733547.729:4): pid=16076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2823" name="memory.events" dev="tmpfs" ino=2961 res=0 errno=0 [ 447.991828][T15904] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 448.018542][T15904] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 448.054640][T15904] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 448.124451][T15904] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 448.296289][T16100] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.2828'. [ 448.316471][T16100] openvswitch: netlink: Message has 6 unknown bytes. [ 448.478388][T15904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.502701][T16102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2830'. [ 448.577721][T16107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.634882][T15904] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.697497][ T3815] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.704728][ T3815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.759198][ T3815] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.766353][ T3815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.883366][T13066] hsr_slave_0: left promiscuous mode [ 448.910179][T13066] hsr_slave_1: left promiscuous mode [ 448.932696][T16120] "syz.3.2833" (16120) uses obsolete ecb(arc4) skcipher [ 449.050809][T16122] netlink: 'syz.0.2834': attribute type 1 has an invalid length. [ 449.061699][T16124] FAULT_INJECTION: forcing a failure. [ 449.061699][T16124] name failslab, interval 1, probability 0, space 0, times 0 [ 449.083729][T16122] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2834'. [ 449.101191][T16124] CPU: 0 UID: 0 PID: 16124 Comm: syz.3.2835 Not tainted syzkaller #0 PREEMPT(full) [ 449.101216][T16124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 449.101229][T16124] Call Trace: [ 449.101237][T16124] [ 449.101245][T16124] dump_stack_lvl+0xe8/0x150 [ 449.101275][T16124] should_fail_ex+0x414/0x560 [ 449.101310][T16124] should_failslab+0xa8/0x100 [ 449.101336][T16124] __kmalloc_cache_noprof+0x84/0x700 [ 449.101357][T16124] ? virtio_transport_do_socket_init+0x57/0x2f0 [ 449.101390][T16124] virtio_transport_do_socket_init+0x57/0x2f0 [ 449.101418][T16124] vsock_assign_transport+0x62e/0x7f0 [ 449.101451][T16124] vsock_connect+0x5a1/0xd40 [ 449.101481][T16124] ? aa_sk_perm+0x15f/0x920 [ 449.101512][T16124] ? __pfx_vsock_connect+0x10/0x10 [ 449.101540][T16124] ? __pfx_aa_sk_perm+0x10/0x10 [ 449.101563][T16124] ? __pfx_autoremove_wake_function+0x10/0x10 [ 449.101599][T16124] ? bpf_lsm_socket_connect+0x9/0x20 [ 449.101621][T16124] __sys_connect+0x316/0x440 [ 449.101641][T16124] ? __fget_files+0x3a0/0x420 [ 449.101665][T16124] ? __pfx___sys_connect+0x10/0x10 [ 449.101699][T16124] ? __pfx_ksys_write+0x10/0x10 [ 449.101727][T16124] __x64_sys_connect+0x7a/0x90 [ 449.101748][T16124] do_syscall_64+0xec/0xf80 [ 449.101768][T16124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.101786][T16124] ? trace_irq_disable+0x37/0x100 [ 449.101811][T16124] ? clear_bhb_loop+0x60/0xb0 [ 449.101835][T16124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.101854][T16124] RIP: 0033:0x7f6fbb58f749 [ 449.101869][T16124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.101887][T16124] RSP: 002b:00007f6fbc469038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 449.101908][T16124] RAX: ffffffffffffffda RBX: 00007f6fbb7e5fa0 RCX: 00007f6fbb58f749 [ 449.101923][T16124] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 0000000000000005 [ 449.101935][T16124] RBP: 00007f6fbc469090 R08: 0000000000000000 R09: 0000000000000000 [ 449.101948][T16124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.101960][T16124] R13: 00007f6fbb7e6038 R14: 00007f6fbb7e5fa0 R15: 00007ffde6f95528 [ 449.101994][T16124] [ 449.500650][T13066] pimreg (unregistering): left allmulticast mode [ 449.965740][ T5836] Bluetooth: hci5: command tx timeout [ 450.134475][T16131] syzkaller1: left promiscuous mode [ 450.139828][T16131] syzkaller1: left allmulticast mode [ 450.352751][T16138] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2838'. [ 450.369519][T16142] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.2839'. [ 450.414788][T16142] openvswitch: netlink: Message has 6 unknown bytes. [ 450.628606][T15904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.674670][T16152] "syz.1.2844" (16152) uses obsolete ecb(arc4) skcipher [ 450.807651][T15904] veth0_vlan: entered promiscuous mode [ 450.846779][T16154] xfrm0 speed is unknown, defaulting to 1000 [ 450.860525][T16161] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.890037][T16161] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 451.034142][T16161] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.053794][T16161] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 451.094127][T16169] tipc: Enabling of bearer rejected, failed to enable media [ 451.105090][T16169] veth1: entered promiscuous mode [ 451.110143][T16169] veth1: entered allmulticast mode [ 451.136528][T15904] veth1_vlan: entered promiscuous mode [ 451.262946][T16161] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.301411][T16161] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 451.366750][T13066] IPVS: stop unused estimator thread 0... [ 451.386508][T16161] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.416866][T16161] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 451.455148][T16154] ip6_vti0 speed is unknown, defaulting to 1000 [ 451.497445][T15904] veth0_macvtap: entered promiscuous mode [ 451.515339][T15904] veth1_macvtap: entered promiscuous mode [ 451.597158][ T6466] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 451.613685][ T6466] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 451.651332][T15904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.702950][ T3751] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 451.744848][ T3751] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 451.763518][T15904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.814821][T13100] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 451.823194][T13100] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 451.932766][ T3751] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.966232][ T3751] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.977245][T16161] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 451.994419][T16161] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 452.034503][ T3751] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.043232][ T3751] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.077318][T16161] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 452.087619][T16161] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 452.195504][T16161] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 452.234100][T16161] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 452.321549][T16189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2853'. [ 452.458790][ T3751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.487361][ T3751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.551082][ T4901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.574054][ T4901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.028856][T16199] syzkaller0: entered promiscuous mode [ 453.034910][T16199] syzkaller0: entered allmulticast mode [ 453.066956][T16199] tipc: Started in network mode [ 453.071999][T16199] tipc: Node identity 825ea2c0ed4, cluster identity 4711 [ 453.206340][T16199] tipc: Enabled bearer , priority 0 [ 453.350387][T16195] tipc: Resetting bearer [ 453.405752][T16195] tipc: Disabling bearer [ 453.545608][T16207] "syz.2.2857" (16207) uses obsolete ecb(arc4) skcipher [ 453.622510][T16209] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2858'. [ 453.861140][T16229] netlink: 'syz.3.2863': attribute type 2 has an invalid length. [ 453.876484][T16229] netlink: 'syz.3.2863': attribute type 1 has an invalid length. [ 453.911064][T16229] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2863'. [ 453.957988][T16239] wg1 speed is unknown, defaulting to 1000 [ 453.967501][T16239] wg1 speed is unknown, defaulting to 1000 [ 453.974966][T16239] wg1 speed is unknown, defaulting to 1000 [ 453.994896][T16239] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 454.117415][T16246] xt_TCPMSS: Only works on TCP SYN packets [ 454.135605][T16242] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2866'. [ 454.143200][T16239] wg1 speed is unknown, defaulting to 1000 [ 454.156931][T16239] wg1 speed is unknown, defaulting to 1000 [ 454.165249][T16225] IPVS: Scheduler module ip_vs_sip not found [ 454.178838][T16247] netlink: 'syz.4.2865': attribute type 3 has an invalid length. [ 454.198496][T16247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2865'. [ 454.339889][T16239] wg1 speed is unknown, defaulting to 1000 [ 454.368606][T16239] wg1 speed is unknown, defaulting to 1000 [ 454.378291][T16239] wg1 speed is unknown, defaulting to 1000 [ 454.415303][T16251] xfrm0 speed is unknown, defaulting to 1000 [ 454.834418][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 454.854504][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 454.863162][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 454.876284][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 454.894620][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 455.072564][ T9562] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 455.084499][ T9562] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 455.092911][ T9562] CPU: 0 UID: 0 PID: 9562 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 455.102368][ T9562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 455.112427][ T9562] RIP: 0010:klist_del+0x49/0x110 [ 455.117374][ T9562] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 89 03 d7 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 6b 03 d7 f6 4d 8b 7e 58 4c 89 f7 e8 1f 11 [ 455.136980][ T9562] RSP: 0018:ffffc9000c12f7a8 EFLAGS: 00010202 [ 455.143042][ T9562] RAX: 000000000000000b RBX: ffff88802969b060 RCX: ffff88807f435b80 [ 455.151002][ T9562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 455.158959][ T9562] RBP: ffffc9000c12f8d0 R08: ffff8880b1fbe0f3 R09: 1ffff110163f7c1e [ 455.166917][ T9562] R10: dffffc0000000000 R11: ffffed10163f7c1f R12: dffffc0000000000 [ 455.174878][ T9562] R13: 1ffff110052d360c R14: 0000000000000000 R15: ffff88807bca2758 [ 455.182839][ T9562] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 455.191762][ T9562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.198336][ T9562] CR2: 000000110c37d701 CR3: 000000005dcc0000 CR4: 00000000003526f0 [ 455.206297][ T9562] Call Trace: [ 455.209564][ T9562] [ 455.212485][ T9562] device_del+0x280/0x8e0 [ 455.216805][ T9562] ? _raw_spin_unlock_irq+0x2e/0x50 [ 455.221998][ T9562] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 455.228053][ T9562] ? __pfx_device_del+0x10/0x10 [ 455.232888][ T9562] ? netdev_unregister_kobject+0x344/0x450 [ 455.238687][ T9562] unregister_netdevice_many_notify+0x1ddd/0x2340 [ 455.245102][ T9562] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 455.251861][ T9562] ? rtnl_net_dev_lock+0x36/0x2f0 [ 455.256875][ T9562] ? rtnl_net_dev_lock+0x36/0x2f0 [ 455.261886][ T9562] unregister_netdev+0x157/0x1f0 [ 455.266816][ T9562] ? __pfx_unregister_netdev+0x10/0x10 [ 455.272267][ T9562] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 455.278070][ T9562] bnep_session+0x29a5/0x2bd0 [ 455.282737][ T9562] ? __lock_acquire+0x6b6/0x2cf0 [ 455.287673][ T9562] ? __pfx_bnep_session+0x10/0x10 [ 455.292687][ T9562] ? __pfx_woken_wake_function+0x10/0x10 [ 455.298312][ T9562] ? __kthread_parkme+0x7b/0x200 [ 455.303238][ T9562] ? __kthread_parkme+0x1a1/0x200 [ 455.308249][ T9562] kthread+0x711/0x8a0 [ 455.312312][ T9562] ? __pfx_bnep_session+0x10/0x10 [ 455.317322][ T9562] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 455.321903][ T9562] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.327093][ T9562] ? __pfx_kthread+0x10/0x10 [ 455.331670][ T9562] ret_from_fork+0x510/0xa50 [ 455.336245][ T9562] ? __pfx_ret_from_fork+0x10/0x10 [ 455.341338][ T9562] ? __switch_to+0xc9e/0x1480 [ 455.346004][ T9562] ? __pfx_kthread+0x10/0x10 [ 455.350584][ T9562] ret_from_fork_asm+0x1a/0x30 [ 455.355344][ T9562] [ 455.358358][ T9562] Modules linked in: [ 455.363702][ T9562] ---[ end trace 0000000000000000 ]--- [ 455.386751][ T9562] RIP: 0010:klist_del+0x49/0x110 [ 455.391761][ T9562] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 89 03 d7 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 6b 03 d7 f6 4d 8b 7e 58 4c 89 f7 e8 1f 11 [ 455.413681][ T9562] RSP: 0018:ffffc9000c12f7a8 EFLAGS: 00010202 [ 455.419835][ T9562] RAX: 000000000000000b RBX: ffff88802969b060 RCX: ffff88807f435b80 [ 455.428924][ T9562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 455.436980][ T9562] RBP: ffffc9000c12f8d0 R08: ffff8880b1fbe0f3 R09: 1ffff110163f7c1e [ 455.445073][ T9562] R10: dffffc0000000000 R11: ffffed10163f7c1f R12: dffffc0000000000 [ 455.453098][ T9562] R13: 1ffff110052d360c R14: 0000000000000000 R15: ffff88807bca2758 [ 455.461229][ T9562] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 455.470324][ T9562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.477130][ T9562] CR2: 00007fdd951aff98 CR3: 0000000068a74000 CR4: 00000000003526f0 [ 455.485990][ T9562] Kernel panic - not syncing: Fatal exception [ 455.492411][ T9562] Kernel Offset: disabled [ 455.496716][ T9562] Rebooting in 86400 seconds..