last executing test programs: 3.718620211s ago: executing program 0 (id=2494): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000800)=ANY=[], 0x88}}], 0x2, 0x2400c044) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r3, r5, 0x0, 0x970b) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r7, &(0x7f0000000480), 0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)={0x4c, r11, 0x1, 0x200000, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, 0x0, &(0x7f0000000680)='GPL\x00', 0x80000, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[r8, r8, 0xffffffffffffffff], &(0x7f0000000dc0), 0x10, 0x5}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 2.606887203s ago: executing program 1 (id=2499): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x400, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}}, 0x0) 2.472206361s ago: executing program 1 (id=2500): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010003000000000000000a00000008000300", @ANYRES32=r3, @ANYBLOB="18005080040005"], 0x34}, 0x1, 0x0, 0x0, 0x48881}, 0x40) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x28, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xa}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) 2.059245426s ago: executing program 1 (id=2502): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000003e000701feffffff00000008017c0000040042800c00018006000600800a0000100002800c001980080001"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x41, 0x1, 0x25, 0x7}}], 0x18}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000080)="f2", 0x1) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, 0x0, 0x0) 1.8500149s ago: executing program 1 (id=2504): r0 = socket(0x1e, 0x4, 0x0) connect$inet(r0, &(0x7f0000000000)={0x1e, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x6, 0x80, 0x5, 0x0, 0xb, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x3c20, 0x2f00, 0xfffffffe, 0xb}}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x1a4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x178, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1cc}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, 0x1, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x200}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xbd1f63ae}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x81}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff012d}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004090}, 0x40) 1.841434853s ago: executing program 3 (id=2505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 1.783075197s ago: executing program 3 (id=2506): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8ae257a062cc3564) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12880030}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x204, r2, 0x2, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x6eb}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2000000}, {0x6, 0x11, 0xfffb}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xe8}, {0x8, 0x13, 0x7}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2e1}, {0x6, 0x11, 0x10}, {0x8, 0x13, 0x5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0xfff}, {0x5, 0x14, 0x1}}]}, 0x204}}, 0x8000) 1.674888256s ago: executing program 2 (id=2508): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x200, 0x70bd2b, 0x25dfdbfc, {0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x408c0) (async) write$cgroup_int(r0, &(0x7f0000000200), 0x12) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) (async) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x2e36, 0x10000}) 1.624268663s ago: executing program 0 (id=2509): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="824adbc1b9e7a57df8880abe908b90ec8fc56d9067f991a9e4a93c4b21ea3812da9ae1f9a0ab2e318ae725be1830f864148fd9f665a269ea853e0bd3dce9258859655775b073689f608a4f6b4411fa7a8c60fd2bf7e3d2d1f6452b7a0061b367ea7ed30afc4812d42288406e0b87fb4c486fe45711521f8d1f389e3d035175d2742b2d4fc2a0f46e0571ec67c04da841091dd3de8cf9db68276e9dcb0484324250b0597e20c32e8736516965d84cc2e1bb1fe565840466730b85bc4f874a1fdbb37b7a721a2e909e2a33073bf6af2d4fcbd06807e03707f7fda974eaba54598ee21fc8", @ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x2000000000000035, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000022c0)=[{&(0x7f0000001dc0)="a0", 0x1}, {&(0x7f0000000580)='|', 0x1}, {&(0x7f0000000540)="27b7", 0x2}, {&(0x7f0000001f80)="4135dae4b494a8a5c0d8a49cfa8adaa7fe6ee3ced175b56ec890979e8f0609e9bb2a6da629565f307cd798b282e0eb6c6243612354e9a6708eb326898bf082c980000039059093c8fadc1c4b75e96f7c712a3b7c82dbe905e1cd0ea8e212ab4f5397363d7682095fe3f91761b48f47f3e6e7967a4cc20d755ed314434b2b313366", 0x81}, {&(0x7f0000002040)='b', 0x1}, {&(0x7f0000002100)='P', 0x1}, {&(0x7f0000000780)='j', 0x1}], 0x7, 0x0) vmsplice(r3, &(0x7f0000000680)=[{&(0x7f00000004c0)="cf", 0x1}, {&(0x7f0000000500)="8b", 0x1}, {&(0x7f0000000600)=']', 0x1}, {&(0x7f0000000640)="fa", 0x1}, {&(0x7f0000000440)='\"', 0x1}, {&(0x7f0000000a40)="cb48eb0b02f247", 0x7}, {&(0x7f00000009c0)="fdacc564", 0x4}, {&(0x7f0000000c00)="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", 0x401}], 0x8, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x18200, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000001140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000180)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000a00), &(0x7f0000000740), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="0033c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010004b0429bd7000000000007a000000", @ANYRES32=0x0, @ANYBLOB="09a0010006800000240012800b00010062726964676500001400029f050024000100000005001600010010000a0001006b42"], 0x50}}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x103}) 1.584691372s ago: executing program 1 (id=2510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000008000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000003ad9888ab1dc193f133a333d4619e6800cf7c2274f9d1fa4cd5c93f400"/61], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1}, 0x2}, [{}, {0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000009000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f4ffa149c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31f5c3820cb7c9526d29138adeb69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000d80)=[r7, r7, 0xffffffffffffffff], &(0x7f0000000580)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}, {0x4, 0x1, 0x6, 0xb}, {0x5, 0x4, 0xd, 0x7}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r9, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="200000009fcaa819537c5fbc15ae9c1873d2afe1c744fffedb87c6b5686daf69983f8f0bcad0c533faecf451b59bff2a8d23b73b5451acd6e26d94188a52f7975113e1b03df7fa85b9428b7f89082b4cff1b31e010d5b2ba30282d6cace647a9846b20021c833471ba1513c81424dd8c14df09183bd669f0", @ANYRES16=r11, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640bfe3619cb4cb3d3960c121824"], 0x1f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) 1.475312375s ago: executing program 2 (id=2511): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0xbd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400200142603600e1208000b0000000401a80016000c00014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.457673519s ago: executing program 3 (id=2513): sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="18030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x318}, 0x1, 0x0, 0x0, 0x8004}, 0x4804) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fe8000000000000000000000000000bb0200010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000030000000003000000000000000000000000000000000000dd020000400000000400000000000000000001000000000084010500ac141439000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff000000000000000000000000007f000001000000000000000000000000000000003200000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000100000001030000000000000000000000000000ff02000000000000000000000000000100000000320000000200000020010000000000000000000000000001000000000000080000000000030000000000000000000000000000000000000000000000000000002b00000002"], 0x23c}}, 0x0) 1.346872908s ago: executing program 2 (id=2514): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) (async) syz_emit_ethernet(0xd81, &(0x7f0000008280)=ANY=[], 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) (async) r5 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r5}, 0x8) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES16=r1, @ANYBLOB="22533ba7d9c70ed864d16540c98e20b07f2330a14a726124721e1541a6fdff7ebf379a2dfe0b7402ca9114bcdb0de3ea7f6ef16425ff09a08f6e831ea5f99b6c6ce39320cb5415a6a2b77131e5195ae7f378f40177ff8cefb44817655cff3159bcce5dd00454325e4c258abcc84c8d4b12c7d8e590f1b7151e40781b04359ec66c2575c8f72f056e7ed6e3feff6c622c218d9d8fffb38a3536ac108597f0664ada6ab83bb2043cce14978f7495f3281c6014043b20a9cac0d681f57e8f"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)={0x188, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000014}, 0x220008c1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r6}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) (async) close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbf6, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x40804) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r8, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r9}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000400000000000000009000045d940c000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.346145546s ago: executing program 0 (id=2515): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket(0x2c, 0xa, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000400)=@canfd={{0x3, 0x1, 0x1}, 0x3a, 0x1, 0x0, 0x0, "1c49ef8b036ed420c88b05fd694b271d785450681b07c5eccb8922ff4a70204c0af52439e9b0bfa06391ac07002f97bf3ef1f45e4e3a009b323bed13ed63acfb"}, 0x48}}, 0x0) 1.274102563s ago: executing program 3 (id=2517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x4000040) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0x75, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f0000000580), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) 975.920979ms ago: executing program 0 (id=2518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{}, {0x95, 0x0, 0x0, 0x7000000}}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 915.185017ms ago: executing program 3 (id=2519): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x48011}, 0x40480c0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x2c, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES8=r3, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000004000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="800010d27577d401", 0x8}], 0x1}}], 0x1, 0x4094) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5) write$cgroup_subtree(r10, &(0x7f0000000a00)=ANY=[@ANYBLOB='-cpu'], 0x5) openat$cgroup_type(r8, &(0x7f0000000040), 0x2, 0x0) 913.91583ms ago: executing program 4 (id=2520): socket$inet(0x2, 0x1, 0x0) (async) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x30) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x30) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$can_j1939(0x1d, 0x2, 0x7) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000f00)) (async) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000f00)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000082810000300012800c0001006d6163766c616e0020000280080001001000000000000300030000000a00ed00aaaaaaaaaaaa000008000500", @ANYRES32=r6], 0x58}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 856.552702ms ago: executing program 0 (id=2521): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x73) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 825.536215ms ago: executing program 4 (id=2522): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000300)=@ethtool_rxfh={0x1}}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x0, 0x0, 0x0, 0x6}, {0x1}, 0x0, 0x7f}}, @TCA_TBF_BURST={0x8, 0x6, 0xa815}]}}]}, 0x60}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r5) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r8, 0x0) (async) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r8, 0x0) (async) ioctl$SIOCGETSGCNT_IN6(r8, 0x89e1, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x3a}, @empty}) (async) write$cgroup_int(r8, &(0x7f0000000000)=0x10, 0x12) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, r6, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x6d, 0xac, "b068a4f94b7a8f1e2f1515ae995b91923cf0fc4d7e20b67f4f0fc56bfda843d33e85dba2eabeca4e6bd1f4579e03de7410208da2fce7e1b623412db2c919bcfa123d7b177d92547b9f025f40472d9683fe61ab87e546bc32362496f459162a100895c33fbd9806bbe8"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4c}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x6, 0x96}}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 743.313624ms ago: executing program 2 (id=2523): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xda90) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000003c0)="00000000f1417854bea02219212f078365b410965953d07a63cd13b76922a018810c3362015bbaf453ebe908fae737094c544c105f3697928584cc0ddf596fae8be46df8050a3842973c677cf217d5ca6c569b871b25640b66a2", 0x5a}], 0x2) (async) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x9, &(0x7f0000000080), 0x4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) (async, rerun: 64) recvmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)}, 0x12000) (rerun: 64) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0xc00) (async) accept4(r3, 0x0, 0x0, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r10, 0x6b, 0x1, &(0x7f00000003c0), 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400200000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c00014000000000000001010800044000000001480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002140000001000010000000000000000000084000a606fe9d3a6800a"], 0x100}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) socket$tipc(0x1e, 0x2, 0x0) 553.144282ms ago: executing program 4 (id=2524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x14, &(0x7f00000001c0)="020000000980ffff", 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x64ed68c0c0d3dc21, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'erspan0\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r4 = socket$inet(0x2, 0x3, 0xa) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a7260180", @ANYRES32], 0x26c0}}, 0x4010) (async) sendmmsg$inet(r4, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000880), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="24000000000000000000000007000000861000000003010a"], 0x28}}], 0x1, 0x24000004) (async) write$tun(r0, &(0x7f0000001800)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x8016, 0x68, 0x0, 0x60, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "21f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da"}}, 0xfdef) 541.008257ms ago: executing program 3 (id=2525): socket(0x1e, 0x4, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)={@cgroup=r0, r0, 0x7, 0xce2d3afaee448c72, 0x4}, 0x20) socket(0xa, 0x1, 0x0) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) unshare(0x68040200) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@empty, @in=@local, 0x4e23, 0xfffe, 0x0, 0x0, 0x2, 0x0, 0x80, 0x3c, 0x0, 0xffffffffffffffff}, {@in=@empty, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x7fff, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x10, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}], @echo_reply}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x2, 0x4, 0x5, 0x6, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x6, 0xda, 0x0, 0x20000000}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d3}]}, 0x30}}, 0x90) sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 474.841852ms ago: executing program 2 (id=2526): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) getsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8800000010000d040400fdf20000000000000000", @ANYRES32=0x0, @ANYBLOB="0010000019500000540012800c0001006d6163766c616e0044000280080009000800000008000700d1ae00000800010002000000080003000000000800"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) 380.77669ms ago: executing program 0 (id=2527): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x7, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x23}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) 351.689115ms ago: executing program 4 (id=2528): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, r1, 0x220, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x9}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x83}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x44}, 0x1, 0x0, 0x0, 0x12008}, 0x6fc5f12870726172) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 309.538083ms ago: executing program 2 (id=2529): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000000}, [@map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xf}]}, &(0x7f0000000180)='syzkaller\x00', 0x3}, 0x94) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000110001002cbd7000fedbdf25fe8000000000000000000000000000bb000004d308003c000c0015005d0735000500000014000d00e0"], 0x48}}, 0x40) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) socket$inet6_sctp(0xa, 0x801, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x11, 0xffffffffffffffff, 0x80000000) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x2d, 0x400eeb4, 0x13}, 0x2c) 227.464652ms ago: executing program 4 (id=2530): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d5f"], 0xe0}], 0x1}, 0x40040) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000200)=0xfffffffa, 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) 75.723418ms ago: executing program 1 (id=2531): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{}, {0x95, 0x0, 0x0, 0x8000000}}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=2532): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x20, 0x80, 0x6, 0x4, {{0x7, 0x4, 0x0, 0x2c, 0x1c, 0x65, 0x0, 0xbc, 0x4, 0x0, @remote, @empty, {[@rr={0x7, 0x7, 0x9e, [@remote]}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0x2}, @typedef={0x8, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x2e, 0x0, 0x30]}}, &(0x7f0000000180)=""/244, 0x39, 0xf4, 0x1, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x51e, 0x0, 0x0, 0x0, 0x18}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback=0x21, r3, 0x8, &(0x7f00000002c0)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=[{0x0, 0x3, 0xf, 0xa}, {0x2, 0x2, 0xe, 0xe}, {0x2, 0x1, 0xa, 0x2}, {0x3, 0x5, 0xc, 0x5}, {0x3, 0x5, 0x3, 0x3}, {0x5, 0x5, 0x7, 0x3}], 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0, 0x1000000}, 0x20) unshare(0x68040200) kernel console output (not intermixed with test programs): table [ 191.349822][ T6285] ldm_validate_partition_table(): Disk read failed. [ 191.400711][ T6285] Dev nbd2: unable to read RDB block 0 [ 191.418162][ T6285] nbd2: unable to read partition table [ 191.537621][ T9918] netlink: 'syz.3.954': attribute type 303 has an invalid length. [ 191.547647][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.954'. [ 191.792236][ T9933] tipc: Enabled bearer , priority 0 [ 191.863641][ T9918] syz.3.954 (9918) used greatest stack depth: 15832 bytes left [ 191.938027][ T9933] syzkaller0: entered promiscuous mode [ 191.943547][ T9933] syzkaller0: entered allmulticast mode [ 192.906157][ T6065] tipc: Node number set to 3292170430 [ 193.590398][ T9933] tipc: Resetting bearer [ 193.597322][ T9947] netlink: 'syz.3.963': attribute type 3 has an invalid length. [ 193.637765][ T9973] syz_tun: entered allmulticast mode [ 193.662181][ T9932] tipc: Resetting bearer [ 193.771279][ T9932] tipc: Disabling bearer [ 193.827254][ T9975] syz_tun: left allmulticast mode [ 193.844275][ T9980] pim6reg99999999: entered allmulticast mode [ 193.977207][ T9987] __nla_validate_parse: 4 callbacks suppressed [ 193.977223][ T9987] netlink: 48 bytes leftover after parsing attributes in process `syz.1.970'. [ 194.085607][ T9995] netlink: 'syz.4.972': attribute type 96 has an invalid length. [ 194.166887][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.974'. [ 194.200230][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.974'. [ 194.344548][T10004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.975'. [ 194.354170][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.355426][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.381366][T10004] netlink: 32 bytes leftover after parsing attributes in process `syz.1.975'. [ 194.393396][T10004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.975'. [ 194.402608][T10004] netlink: 32 bytes leftover after parsing attributes in process `syz.1.975'. [ 194.449615][T10001] netlink: 40 bytes leftover after parsing attributes in process `syz.3.974'. [ 194.465427][T10007] netlink: 'syz.4.976': attribute type 1 has an invalid length. [ 194.516189][T10009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.976'. [ 194.605398][T10017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.978'. [ 195.376810][T10044] sctp: [Deprecated]: syz.0.985 (pid 10044) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.376810][T10044] Use struct sctp_sack_info instead [ 195.413001][T10048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.596841][T10052] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 198.417355][T10133] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 198.461082][T10169] bridge_slave_0: left allmulticast mode [ 198.468139][T10169] bridge_slave_0: left promiscuous mode [ 198.474196][T10169] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.486473][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.504021][T10169] bridge_slave_1: left allmulticast mode [ 198.522801][T10169] bridge_slave_1: left promiscuous mode [ 198.530548][T10169] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.551631][T10169] bond0: (slave bond_slave_0): Releasing backup interface [ 198.578486][T10169] bond0: (slave bond_slave_1): Releasing backup interface [ 198.610809][T10169] team0: Port device team_slave_0 removed [ 198.644018][T10169] team0: Port device team_slave_1 removed [ 198.724969][ T6065] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 198.828178][ T6065] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 198.849617][T10185] bond0: Device is already in use. [ 198.866811][T10174] team0: Mode changed to "activebackup" [ 199.037181][ T6065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.353249][T10214] netlink: 'syz.0.1025': attribute type 1 has an invalid length. [ 199.369546][T10214] netlink: 'syz.0.1025': attribute type 4 has an invalid length. [ 199.404932][T10215] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 200.139098][T10239] __nla_validate_parse: 15 callbacks suppressed [ 200.139118][T10239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1034'. [ 200.195468][T10239] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 201.447929][T10301] netlink: 'syz.4.1053': attribute type 5 has an invalid length. [ 201.546071][ T5871] Bluetooth: hci3: command 0x0406 tx timeout [ 201.552158][ T5871] Bluetooth: hci1: command 0x0406 tx timeout [ 201.560009][ T5880] Bluetooth: hci2: command 0x0401 tx timeout [ 201.613609][T10305] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1055'. [ 201.743784][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 201.770358][T10311] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 201.868541][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1056'. [ 202.702405][T10343] nbd: must specify at least one socket [ 202.762669][T10346] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.1066'. [ 202.807905][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1066'. [ 202.939976][T10349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1067'. [ 202.988694][T10349] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1067'. [ 203.395864][T10366] batadv0: entered promiscuous mode [ 203.411033][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'. [ 203.480367][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'. [ 203.618537][T10375] netlink: 'syz.0.1074': attribute type 3 has an invalid length. [ 203.998018][T10403] syzkaller0: entered promiscuous mode [ 204.018746][T10403] syzkaller0: entered allmulticast mode [ 204.077752][T10403] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 205.479499][T10452] veth1_to_bond: entered promiscuous mode [ 205.501890][T10452] veth1_to_bond: entered allmulticast mode [ 205.726724][T10448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.923845][T10461] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 206.293102][T10469] syzkaller0: entered promiscuous mode [ 206.301876][T10469] syzkaller0: entered allmulticast mode [ 206.333351][T10467] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 206.376344][T10472] __nla_validate_parse: 3 callbacks suppressed [ 206.376363][T10472] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1100'. [ 206.599810][T10475] geneve2: entered promiscuous mode [ 206.610806][ T1097] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.626564][ T1097] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.661179][ T1097] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.676450][ T1097] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.698980][T10479] syzkaller0: entered promiscuous mode [ 206.710429][T10479] syzkaller0: entered allmulticast mode [ 206.802975][T10484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1103'. [ 206.976854][T10497] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 207.039580][T10500] netlink: 'syz.3.1110': attribute type 2 has an invalid length. [ 207.113974][T10497] netlink: 'syz.2.1108': attribute type 4 has an invalid length. [ 207.161086][T10511] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 207.170350][T10511] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1112'. [ 207.179869][T10512] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1112'. [ 207.371004][T10519] netlink: 'syz.3.1115': attribute type 10 has an invalid length. [ 207.479170][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1118'. [ 207.762874][T10539] openvswitch: netlink: IPv4 tunnel dst address is zero [ 207.818362][T10505] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 207.824478][T10505] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 207.858160][T10550] tipc: Started in network mode [ 207.873348][T10550] tipc: Node identity e2b0a341d25, cluster identity 4711 [ 207.884517][T10505] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 207.891487][T10550] tipc: Enabled bearer , priority 0 [ 207.906273][T10505] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 207.916321][T10554] syzkaller0: entered promiscuous mode [ 207.936587][T10554] syzkaller0: entered allmulticast mode [ 207.944487][T10505] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 207.968353][T10505] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 207.990947][T10505] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 208.007898][T10505] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 208.011410][T10550] tipc: Resetting bearer [ 208.145406][T10549] tipc: Resetting bearer [ 208.190855][T10549] tipc: Disabling bearer [ 208.207473][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'. [ 208.461077][T10573] netlink: 'syz.4.1133': attribute type 1 has an invalid length. [ 208.658538][T10576] tipc: Cannot configure node identity twice [ 209.024341][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1140'. [ 209.057931][T10595] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1140'. [ 209.074872][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 209.141514][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'. [ 209.312096][T10611] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1144'. [ 209.343127][T10610] netlink: 'syz.1.1143': attribute type 1 has an invalid length. [ 210.057590][T10643] vlan3: entered promiscuous mode [ 210.076924][T10643] bridge0: entered promiscuous mode [ 210.269438][T10647] macsec0: entered promiscuous mode [ 210.277094][T10647] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 210.299441][T10647] macsec0: entered allmulticast mode [ 210.317651][T10647] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 213.596860][T10664] xfrm1: entered promiscuous mode [ 213.602053][T10664] xfrm1: entered allmulticast mode [ 213.938826][T10676] __nla_validate_parse: 5 callbacks suppressed [ 213.938843][T10676] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1162'. [ 214.044838][T10678] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1161'. [ 214.099465][T10678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.490840][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'. [ 214.531570][T10694] sctp: [Deprecated]: syz.1.1169 (pid 10694) Use of int in max_burst socket option deprecated. [ 214.531570][T10694] Use struct sctp_assoc_value instead [ 214.547635][T10702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1170'. [ 214.582456][T10702] xfrm1: entered promiscuous mode [ 214.587861][T10702] xfrm1: entered allmulticast mode [ 214.618871][T10704] tipc: Enabled bearer , priority 0 [ 214.702130][T10704] tipc: Disabling bearer [ 214.740655][T10709] tipc: Can't bind to reserved service type 1 [ 214.762059][T10717] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1175'. [ 214.917327][T10727] syz_tun: entered allmulticast mode [ 214.938940][T10729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1177'. [ 214.953298][T10727] dvmrp8: entered allmulticast mode [ 214.965405][T10731] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1179'. [ 214.974831][T10725] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1179'. [ 215.013794][T10727] syz_tun: left allmulticast mode [ 215.022402][T10727] dvmrp8: left allmulticast mode [ 215.502446][T10749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1185'. [ 215.543796][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'. [ 215.930011][T10759] IPv6: sit2: Disabled Multicast RS [ 216.967045][T10811] bond0: entered promiscuous mode [ 216.973208][T10811] bond0: left promiscuous mode [ 217.420493][T10846] batadv_slave_0: left promiscuous mode [ 217.434156][T10850] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 217.461029][T10846] macvlan0: left promiscuous mode [ 217.504145][T10846] gretap1: left promiscuous mode [ 217.526804][T10853] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 217.532001][T10846] gretap1: left allmulticast mode [ 217.653083][T10846] veth5: left promiscuous mode [ 217.690652][T10846] geneve3: left allmulticast mode [ 217.724048][ T9256] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 217.734292][ T9256] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 217.755882][ T9256] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 217.795222][ T9256] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 217.940151][ T9256] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 217.974642][ T9256] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 217.983569][ T9256] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 218.024730][ T9256] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 218.959581][T10910] __nla_validate_parse: 5 callbacks suppressed [ 218.959599][T10910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1233'. [ 219.201455][T10923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.445811][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'. [ 219.485833][T10934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1238'. [ 219.497041][T10940] netlink: 'syz.1.1238': attribute type 11 has an invalid length. [ 219.521856][T10934] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1238'. [ 219.546845][ T5870] Bluetooth: hci0: command tx timeout [ 219.565632][T10934] netlink: 540 bytes leftover after parsing attributes in process `syz.1.1238'. [ 219.706729][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1243'. [ 219.727491][T10949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1243'. [ 220.062576][T10956] netlink: 'syz.4.1245': attribute type 1 has an invalid length. [ 220.248413][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1246'. [ 220.598810][T10977] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1252'. [ 220.611321][T10977] netlink: 'syz.4.1252': attribute type 1 has an invalid length. [ 220.870618][T10994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1258'. [ 222.097550][T10999] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 222.345909][T11007] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.532885][T11007] bond3 (unregistering): Released all slaves [ 222.556224][T11013] vxcan1: entered allmulticast mode [ 222.566510][T11014] vxcan1: left allmulticast mode [ 222.649960][T11013] raw_sendmsg: syz.1.1264 forgot to set AF_INET. Fix it! [ 223.238746][T11049] netlink: 'syz.0.1274': attribute type 9 has an invalid length. [ 223.461343][T11061] syzkaller1: entered promiscuous mode [ 223.479758][T11061] syzkaller1: entered allmulticast mode [ 223.603749][T11073] netlink: 'syz.4.1277': attribute type 16 has an invalid length. [ 223.612241][T11073] netlink: 'syz.4.1277': attribute type 17 has an invalid length. [ 223.680098][T11073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.689281][T11073] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.714220][T11073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.826561][T11075] syzkaller0: entered promiscuous mode [ 223.832178][T11075] syzkaller0: entered allmulticast mode [ 223.865499][ T6065] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 224.120415][ T5870] Bluetooth: hci3: command tx timeout [ 224.287796][ T5864] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 225.442058][ T9264] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 225.609504][T11112] __nla_validate_parse: 12 callbacks suppressed [ 225.609522][T11112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1289'. [ 225.627375][T11110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.779990][T11124] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1293'. [ 226.159824][T11144] netlink: 'syz.3.1299': attribute type 13 has an invalid length. [ 226.169337][T11144] netlink: 'syz.3.1299': attribute type 17 has an invalid length. [ 226.194534][T11140] syzkaller0: entered promiscuous mode [ 226.200610][T11140] syzkaller0: entered allmulticast mode [ 226.249347][T11144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.256708][T11140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1298'. [ 226.277773][T11144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.444208][T11148] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1300'. [ 228.245229][ T9260] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 228.254241][ T9260] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 228.433168][T11167] netlink: 'syz.2.1305': attribute type 5 has an invalid length. [ 228.589757][T11166] veth0_virt_wifi: renamed from veth0_macvtap [ 228.677608][T11175] openvswitch: netlink: IP tunnel dst address not specified [ 228.837261][ T6065] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 229.288447][T11198] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.330072][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'. [ 229.340617][T11209] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1315'. [ 229.343145][T11198] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.383675][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1317'. [ 229.395758][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1317'. [ 229.406195][T11209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1315'. [ 229.542738][T11198] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.560460][T11198] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.654257][T11222] tipc: Enabling of bearer rejected, failed to enable media [ 229.680992][T11215] netlink: 'syz.1.1319': attribute type 15 has an invalid length. [ 229.703211][T11215] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1319'. [ 229.763551][T11198] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.774271][T11198] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.882111][T11198] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.893057][T11198] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.905820][T11228] netlink: 'syz.1.1322': attribute type 1 has an invalid length. [ 229.971247][T11228] bond6: (slave gretap2): making interface the new active one [ 229.991312][T11228] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 230.197003][ T9262] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.220459][ T9262] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.277544][ T9263] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.315735][ T9263] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.343435][T11243] xfrm1: entered promiscuous mode [ 230.361551][T11243] xfrm1: entered allmulticast mode [ 230.385268][ T9262] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.395019][ T9262] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.460522][ T9263] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.494020][T11255] netlink: 'syz.4.1329': attribute type 21 has an invalid length. [ 230.494905][ T9263] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.671026][T11264] netlink: 'syz.0.1331': attribute type 1 has an invalid length. [ 230.694073][T11271] netlink: 'syz.1.1330': attribute type 13 has an invalid length. [ 230.724091][T11264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.730019][T11271] netlink: 'syz.1.1330': attribute type 17 has an invalid length. [ 230.817216][T11272] __nla_validate_parse: 2 callbacks suppressed [ 230.817234][T11272] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1330'. [ 230.970219][T11271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.981483][T11271] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.994033][T11271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.017236][T11286] batadv_slave_0: entered promiscuous mode [ 231.203581][T11297] tipc: Enabled bearer , priority 0 [ 231.211803][T11297] sit0: entered promiscuous mode [ 231.224921][T11297] sit0: entered allmulticast mode [ 231.289311][T11297] tipc: Resetting bearer [ 231.360614][T11294] tipc: Disabling bearer [ 231.526255][T11285] batadv_slave_0: left promiscuous mode [ 231.944901][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 232.111096][T11336] IPv6: addrconf: prefix option has invalid lifetime [ 232.331945][T11348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1353'. [ 232.423513][T11348] xfrm1: entered promiscuous mode [ 232.449910][T11348] xfrm1: entered allmulticast mode [ 232.790471][T11362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1358'. [ 233.222392][T11374] tipc: Enabled bearer , priority 0 [ 233.316934][T11377] netlink: 'syz.2.1362': attribute type 9 has an invalid length. [ 233.676833][T11376] syzkaller0: entered promiscuous mode [ 233.694840][T11376] syzkaller0: entered allmulticast mode [ 233.723079][T11396] netlink: 'syz.4.1365': attribute type 4 has an invalid length. [ 233.814895][T11367] tipc: Resetting bearer [ 233.859033][T11367] tipc: Disabling bearer [ 234.210621][T11413] batadv0: left promiscuous mode [ 234.310097][T11413] veth0_to_team: left promiscuous mode [ 234.316332][T11413] veth0_to_team: left allmulticast mode [ 234.481972][T11413] ip6gre1: left promiscuous mode [ 234.513811][T11413] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 234.523747][T11413] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 234.530870][T11413] macsec0: left promiscuous mode [ 234.535895][T11413] macsec0: left allmulticast mode [ 234.541649][T11413] xfrm1: left promiscuous mode [ 234.546497][T11413] xfrm1: left allmulticast mode [ 234.610135][ T9261] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.654262][ T9261] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.672371][ T9261] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.709239][ T9261] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.265859][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1382'. [ 235.294889][T11468] batadv1: left allmulticast mode [ 235.299968][T11468] batadv1: left promiscuous mode [ 235.313884][T11468] bridge0: port 3(batadv1) entered disabled state [ 235.342325][T11468] bridge_slave_1: left allmulticast mode [ 235.363752][T11468] bridge_slave_1: left promiscuous mode [ 235.370530][T11468] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.430585][T11468] bridge_slave_0: left promiscuous mode [ 235.454783][T11468] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.737227][T11492] netlink: 'syz.2.1388': attribute type 1 has an invalid length. [ 235.750871][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'. [ 235.832740][T11482] lo speed is unknown, defaulting to 1000 [ 235.835032][T11494] nbd3: detected capacity change from 0 to 127 [ 235.857059][T11482] lo speed is unknown, defaulting to 1000 [ 235.857170][ T5870] block nbd3: Receive control failed (result -32) [ 235.866029][T11482] lo speed is unknown, defaulting to 1000 [ 235.949553][T11482] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 236.087768][T11482] lo speed is unknown, defaulting to 1000 [ 236.106122][T11482] lo speed is unknown, defaulting to 1000 [ 236.127659][T11482] lo speed is unknown, defaulting to 1000 [ 236.145328][T11514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.151086][T11482] lo speed is unknown, defaulting to 1000 [ 236.212560][T11482] lo speed is unknown, defaulting to 1000 [ 236.302425][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1396'. [ 236.325465][T11523] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 236.351521][T11523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.581536][T11528] tipc: Enabled bearer , priority 0 [ 236.605635][T11528] syzkaller0: entered promiscuous mode [ 236.633695][T11528] syzkaller0: entered allmulticast mode [ 236.715146][T11528] tipc: Resetting bearer [ 236.816149][T11527] tipc: Resetting bearer [ 236.850974][T11543] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20000 [ 236.875223][T11543] sctp: [Deprecated]: syz.0.1400 (pid 11543) Use of int in max_burst socket option deprecated. [ 236.875223][T11543] Use struct sctp_assoc_value instead [ 236.926807][T11527] tipc: Disabling bearer [ 237.526375][T11521] lo speed is unknown, defaulting to 1000 [ 238.098231][T11610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'. [ 238.219143][T11612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1419'. [ 238.237153][T11614] netlink: 'syz.3.1420': attribute type 31 has an invalid length. [ 238.241907][T11612] netlink: 'syz.4.1419': attribute type 1 has an invalid length. [ 238.257783][T11612] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1419'. [ 238.441399][T11591] lo speed is unknown, defaulting to 1000 [ 238.444477][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1421'. [ 238.576219][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1423'. [ 238.608424][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1423'. [ 238.904400][T11633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.955986][T11641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1427'. [ 238.971652][T11633] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1425'. [ 239.099379][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1430'. [ 239.145829][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 240.232850][T11653] lo speed is unknown, defaulting to 1000 [ 240.950760][T11672] lo speed is unknown, defaulting to 1000 [ 241.029429][T11745] syz0: rxe_newlink: already configured on veth1_to_hsr [ 241.246468][T11751] sctp: [Deprecated]: syz.0.1456 (pid 11751) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.246468][T11751] Use struct sctp_sack_info instead [ 241.273826][T11748] tipc: Enabled bearer , priority 0 [ 241.281763][T11748] syzkaller0: entered promiscuous mode [ 241.287691][T11748] syzkaller0: entered allmulticast mode [ 241.440796][T11754] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 241.457783][T11748] tipc: Resetting bearer [ 241.467048][T11747] tipc: Resetting bearer [ 241.503820][T11747] tipc: Disabling bearer [ 241.530267][T11756] __nla_validate_parse: 5 callbacks suppressed [ 241.530285][T11756] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1458'. [ 241.660918][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1459'. [ 241.685523][T11759] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1459'. [ 241.797525][T11763] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1461'. [ 241.812944][T11764] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1461'. [ 241.833961][T11764] sctp: [Deprecated]: syz.1.1461 (pid 11764) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.833961][T11764] Use struct sctp_sack_info instead [ 242.142882][T11780] ip6tnl1: entered allmulticast mode [ 242.355576][T11794] netlink: 'syz.1.1470': attribute type 6 has an invalid length. [ 242.373660][T11794] netlink: 'syz.1.1470': attribute type 7 has an invalid length. [ 242.382177][T11794] netlink: 'syz.1.1470': attribute type 8 has an invalid length. [ 242.946540][T11823] bond1: (slave ip6gretap1): making interface the new active one [ 242.964331][T11823] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 243.338286][T11841] geneve2: entered promiscuous mode [ 243.386269][T11814] lo speed is unknown, defaulting to 1000 [ 243.509643][T11854] nbd: nbd0 already in use [ 243.550998][T11854] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.560934][T11854] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.689605][T11859] netlink: 'syz.3.1487': attribute type 23 has an invalid length. [ 243.705801][T11854] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.727929][T11854] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.811462][T11854] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.864809][T11854] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.970273][T11854] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.019990][T11854] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.191836][ T9263] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.201817][ T9263] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.228122][ T9263] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.241499][ T9263] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.266188][ T9263] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.279171][ T9263] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.322045][ T9263] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.334870][ T9263] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.343304][T11886] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1495'. [ 244.533765][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1501'. [ 244.751073][T11913] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1503'. [ 245.288920][T11898] lo speed is unknown, defaulting to 1000 [ 246.231203][T11978] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1521'. [ 246.422391][T11992] netlink: 'syz.2.1523': attribute type 2 has an invalid length. [ 246.521613][T11994] syzkaller0: entered promiscuous mode [ 246.560625][T11992] : entered promiscuous mode [ 246.739067][T12008] netlink: 'syz.4.1528': attribute type 10 has an invalid length. [ 246.802902][T12001] geneve3: entered promiscuous mode [ 246.808996][ T5864] lo speed is unknown, defaulting to 1000 [ 246.811350][T12001] geneve3: entered allmulticast mode [ 246.821089][ T5864] syz2: Port: 1 Link DOWN [ 246.830333][T12008] team0: Device dummy0 is up. Set it down before adding it as a team port [ 246.855154][ T9256] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.867603][ T9256] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 246.893154][ T9256] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.920744][ T9256] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 246.959595][ T9256] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.969330][ T9256] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 246.994549][ T9256] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.016983][ T9256] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 247.071624][T12016] tipc: Enabled bearer , priority 0 [ 247.087966][T12016] syzkaller0: entered promiscuous mode [ 247.094083][T12016] syzkaller0: entered allmulticast mode [ 247.188560][T12026] delete_channel: no stack [ 247.328116][T12040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1538'. [ 247.340189][T12046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1539'. [ 248.074849][ T7091] tipc: Node number set to 820028225 [ 250.402051][T12057] FAULT_INJECTION: forcing a failure. [ 250.402051][T12057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.434705][T12057] CPU: 0 UID: 0 PID: 12057 Comm: syz.2.1543 Not tainted syzkaller #0 PREEMPT(full) [ 250.434731][T12057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.434755][T12057] Call Trace: [ 250.434763][T12057] [ 250.434771][T12057] dump_stack_lvl+0x189/0x250 [ 250.434797][T12057] ? __pfx____ratelimit+0x10/0x10 [ 250.434815][T12057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.434834][T12057] ? __pfx__printk+0x10/0x10 [ 250.434856][T12057] ? __might_fault+0xb0/0x130 [ 250.434889][T12057] should_fail_ex+0x414/0x560 [ 250.434915][T12057] _copy_from_user+0x2d/0xb0 [ 250.434933][T12057] ___sys_sendmsg+0x158/0x2a0 [ 250.434953][T12057] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.435002][T12057] ? __fget_files+0x2a/0x420 [ 250.435017][T12057] ? __fget_files+0x3a0/0x420 [ 250.435041][T12057] __x64_sys_sendmsg+0x19b/0x260 [ 250.435062][T12057] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.435090][T12057] ? __pfx_ksys_write+0x10/0x10 [ 250.435108][T12057] ? rcu_is_watching+0x15/0xb0 [ 250.435131][T12057] ? do_syscall_64+0xbe/0x3b0 [ 250.435152][T12057] do_syscall_64+0xfa/0x3b0 [ 250.435168][T12057] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.435184][T12057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.435200][T12057] ? clear_bhb_loop+0x60/0xb0 [ 250.435221][T12057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.435238][T12057] RIP: 0033:0x7f575338ebe9 [ 250.435254][T12057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.435269][T12057] RSP: 002b:00007f5754230038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.435288][T12057] RAX: ffffffffffffffda RBX: 00007f57535c5fa0 RCX: 00007f575338ebe9 [ 250.435301][T12057] RDX: 0000000000044000 RSI: 0000200000000f00 RDI: 0000000000000006 [ 250.435312][T12057] RBP: 00007f5754230090 R08: 0000000000000000 R09: 0000000000000000 [ 250.435322][T12057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.435332][T12057] R13: 00007f57535c6038 R14: 00007f57535c5fa0 R15: 00007fff99adfca8 [ 250.435362][T12057] [ 250.794188][T12044] lo speed is unknown, defaulting to 1000 [ 251.404926][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.481884][ T5864] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 251.753243][T12091] tipc: Enabled bearer , priority 0 [ 251.776402][T12091] syzkaller0: entered promiscuous mode [ 251.789660][T12091] syzkaller0: entered allmulticast mode [ 251.907419][T12091] tipc: Resetting bearer [ 251.919970][T12090] tipc: Resetting bearer [ 251.948615][ T5864] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 251.999832][T12090] tipc: Disabling bearer [ 252.010058][T12035] Set syz1 is full, maxelem 65536 reached [ 252.027810][T12100] FAULT_INJECTION: forcing a failure. [ 252.027810][T12100] name failslab, interval 1, probability 0, space 0, times 0 [ 252.040998][T12100] CPU: 1 UID: 0 PID: 12100 Comm: syz.1.1555 Not tainted syzkaller #0 PREEMPT(full) [ 252.041023][T12100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.041034][T12100] Call Trace: [ 252.041041][T12100] [ 252.041049][T12100] dump_stack_lvl+0x189/0x250 [ 252.041074][T12100] ? __pfx____ratelimit+0x10/0x10 [ 252.041092][T12100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.041111][T12100] ? __pfx__printk+0x10/0x10 [ 252.041140][T12100] ? __pfx___might_resched+0x10/0x10 [ 252.041162][T12100] should_fail_ex+0x414/0x560 [ 252.041188][T12100] should_failslab+0xa8/0x100 [ 252.041233][T12100] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 252.041255][T12100] ? __alloc_skb+0x112/0x2d0 [ 252.041273][T12100] __alloc_skb+0x112/0x2d0 [ 252.041289][T12100] netlink_sendmsg+0x5c6/0xb30 [ 252.041311][T12100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.041328][T12100] ? aa_sock_msg_perm+0xf1/0x1d0 [ 252.041347][T12100] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.041365][T12100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.041384][T12100] __sock_sendmsg+0x21c/0x270 [ 252.041409][T12100] ____sys_sendmsg+0x505/0x830 [ 252.041434][T12100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.041464][T12100] ? import_iovec+0x74/0xa0 [ 252.041487][T12100] ___sys_sendmsg+0x21f/0x2a0 [ 252.041515][T12100] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.041573][T12100] ? __fget_files+0x2a/0x420 [ 252.041588][T12100] ? __fget_files+0x3a0/0x420 [ 252.041615][T12100] __x64_sys_sendmsg+0x19b/0x260 [ 252.041638][T12100] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.041667][T12100] ? __pfx_ksys_write+0x10/0x10 [ 252.041686][T12100] ? rcu_is_watching+0x15/0xb0 [ 252.041710][T12100] ? do_syscall_64+0xbe/0x3b0 [ 252.041731][T12100] do_syscall_64+0xfa/0x3b0 [ 252.041747][T12100] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.041764][T12100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.041781][T12100] ? clear_bhb_loop+0x60/0xb0 [ 252.041802][T12100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.041818][T12100] RIP: 0033:0x7ffad7d8ebe9 [ 252.041834][T12100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.041849][T12100] RSP: 002b:00007ffad8c93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.041867][T12100] RAX: ffffffffffffffda RBX: 00007ffad7fc5fa0 RCX: 00007ffad7d8ebe9 [ 252.041879][T12100] RDX: 0000000000044000 RSI: 0000200000000f00 RDI: 0000000000000006 [ 252.041891][T12100] RBP: 00007ffad8c93090 R08: 0000000000000000 R09: 0000000000000000 [ 252.041901][T12100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.041912][T12100] R13: 00007ffad7fc6038 R14: 00007ffad7fc5fa0 R15: 00007fffd62851f8 [ 252.041943][T12100] [ 252.346928][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.402313][T12107] bridge0: port 1(erspan0) entered blocking state [ 252.409016][T12107] bridge0: port 1(erspan0) entered disabled state [ 252.415911][T12107] erspan0: entered allmulticast mode [ 252.423098][T12107] erspan0: entered promiscuous mode [ 252.431328][T12107] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1558'. [ 252.440906][T12107] erspan0: left allmulticast mode [ 252.446347][T12107] erspan0: left promiscuous mode [ 252.451635][T12107] bridge0: port 1(erspan0) entered disabled state [ 252.488126][T12114] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 252.538564][T12114] bond4: entered promiscuous mode [ 252.543641][T12114] bond4: entered allmulticast mode [ 252.554747][T12114] 8021q: adding VLAN 0 to HW filter on device bond4 [ 252.584834][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 252.610721][T12121] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20003 [ 252.813081][T12139] netlink: 'syz.0.1565': attribute type 1 has an invalid length. [ 252.964138][T12148] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1568'. [ 253.004283][T12152] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 253.016234][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'. [ 253.053662][T12145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.108771][T12159] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1571'. [ 253.223901][T12165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1574'. [ 253.254887][T12145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.432877][T12145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.443754][T12174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1574'. [ 253.601288][T12145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.940992][T12157] lo speed is unknown, defaulting to 1000 [ 254.055095][T12196] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1579'. [ 254.167071][ T9261] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.188710][T12197] bridge_slave_0: entered promiscuous mode [ 254.198914][T12197] bridge_slave_0: left allmulticast mode [ 254.205542][T12197] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 254.250033][T12201] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1580'. [ 254.374056][ T9261] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.463177][ T9262] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.641754][ T9262] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.654256][T12220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1584'. [ 254.777845][T12182] lo speed is unknown, defaulting to 1000 [ 254.850784][T12230] FAULT_INJECTION: forcing a failure. [ 254.850784][T12230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.881044][T12230] CPU: 1 UID: 0 PID: 12230 Comm: syz.2.1588 Not tainted syzkaller #0 PREEMPT(full) [ 254.881071][T12230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.881082][T12230] Call Trace: [ 254.881089][T12230] [ 254.881097][T12230] dump_stack_lvl+0x189/0x250 [ 254.881120][T12230] ? __pfx____ratelimit+0x10/0x10 [ 254.881138][T12230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.881157][T12230] ? __pfx__printk+0x10/0x10 [ 254.881179][T12230] ? __might_fault+0xb0/0x130 [ 254.881213][T12230] should_fail_ex+0x414/0x560 [ 254.881240][T12230] _copy_from_iter+0x1de/0x1790 [ 254.881273][T12230] ? rcu_is_watching+0x15/0xb0 [ 254.881292][T12230] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 254.881315][T12230] ? __pfx__copy_from_iter+0x10/0x10 [ 254.881335][T12230] ? __build_skb_around+0x257/0x3e0 [ 254.881356][T12230] ? netlink_sendmsg+0x642/0xb30 [ 254.881371][T12230] ? skb_put+0x11b/0x210 [ 254.881392][T12230] netlink_sendmsg+0x6b2/0xb30 [ 254.881420][T12230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.881441][T12230] ? aa_sock_msg_perm+0xf1/0x1d0 [ 254.881459][T12230] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 254.881477][T12230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.881495][T12230] __sock_sendmsg+0x21c/0x270 [ 254.881520][T12230] ____sys_sendmsg+0x505/0x830 [ 254.881545][T12230] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.881573][T12230] ? import_iovec+0x74/0xa0 [ 254.881596][T12230] ___sys_sendmsg+0x21f/0x2a0 [ 254.881618][T12230] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.881674][T12230] ? __fget_files+0x2a/0x420 [ 254.881689][T12230] ? __fget_files+0x3a0/0x420 [ 254.881715][T12230] __x64_sys_sendmsg+0x19b/0x260 [ 254.881737][T12230] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.881766][T12230] ? __pfx_ksys_write+0x10/0x10 [ 254.881784][T12230] ? rcu_is_watching+0x15/0xb0 [ 254.881806][T12230] ? do_syscall_64+0xbe/0x3b0 [ 254.881828][T12230] do_syscall_64+0xfa/0x3b0 [ 254.881844][T12230] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.881860][T12230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.881876][T12230] ? clear_bhb_loop+0x60/0xb0 [ 254.881897][T12230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.881918][T12230] RIP: 0033:0x7f575338ebe9 [ 254.881933][T12230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.881947][T12230] RSP: 002b:00007f5754230038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.881966][T12230] RAX: ffffffffffffffda RBX: 00007f57535c5fa0 RCX: 00007f575338ebe9 [ 254.881979][T12230] RDX: 0000000000044000 RSI: 0000200000000f00 RDI: 0000000000000006 [ 254.881990][T12230] RBP: 00007f5754230090 R08: 0000000000000000 R09: 0000000000000000 [ 254.882000][T12230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.882011][T12230] R13: 00007f57535c6038 R14: 00007f57535c5fa0 R15: 00007fff99adfca8 [ 254.882040][T12230] [ 255.287096][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1590'. [ 256.227623][T12272] FAULT_INJECTION: forcing a failure. [ 256.227623][T12272] name failslab, interval 1, probability 0, space 0, times 0 [ 256.307180][T12272] CPU: 1 UID: 0 PID: 12272 Comm: syz.4.1599 Not tainted syzkaller #0 PREEMPT(full) [ 256.307205][T12272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.307216][T12272] Call Trace: [ 256.307223][T12272] [ 256.307230][T12272] dump_stack_lvl+0x189/0x250 [ 256.307256][T12272] ? __pfx____ratelimit+0x10/0x10 [ 256.307275][T12272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.307294][T12272] ? __pfx__printk+0x10/0x10 [ 256.307317][T12272] ? __lock_acquire+0xab9/0xd20 [ 256.307350][T12272] should_fail_ex+0x414/0x560 [ 256.307377][T12272] should_failslab+0xa8/0x100 [ 256.307402][T12272] kmem_cache_alloc_noprof+0x73/0x3c0 [ 256.307423][T12272] ? skb_clone+0x212/0x3a0 [ 256.307447][T12272] skb_clone+0x212/0x3a0 [ 256.307471][T12272] __netlink_deliver_tap+0x404/0x850 [ 256.307506][T12272] ? netlink_deliver_tap+0x2e/0x1b0 [ 256.307525][T12272] netlink_deliver_tap+0x19c/0x1b0 [ 256.307544][T12272] netlink_unicast+0x7fa/0x9e0 [ 256.307576][T12272] ? __pfx_netlink_unicast+0x10/0x10 [ 256.307600][T12272] ? netlink_sendmsg+0x642/0xb30 [ 256.307615][T12272] ? skb_put+0x11b/0x210 [ 256.307635][T12272] netlink_sendmsg+0x805/0xb30 [ 256.307663][T12272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.307683][T12272] ? aa_sock_msg_perm+0xf1/0x1d0 [ 256.307703][T12272] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 256.307721][T12272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.307739][T12272] __sock_sendmsg+0x21c/0x270 [ 256.307765][T12272] ____sys_sendmsg+0x505/0x830 [ 256.307790][T12272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.307819][T12272] ? import_iovec+0x74/0xa0 [ 256.307848][T12272] ___sys_sendmsg+0x21f/0x2a0 [ 256.307871][T12272] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.307930][T12272] ? __fget_files+0x2a/0x420 [ 256.307945][T12272] ? __fget_files+0x3a0/0x420 [ 256.307972][T12272] __x64_sys_sendmsg+0x19b/0x260 [ 256.307994][T12272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 256.308024][T12272] ? __pfx_ksys_write+0x10/0x10 [ 256.308043][T12272] ? rcu_is_watching+0x15/0xb0 [ 256.308066][T12272] ? do_syscall_64+0xbe/0x3b0 [ 256.308088][T12272] do_syscall_64+0xfa/0x3b0 [ 256.308104][T12272] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.308120][T12272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.308145][T12272] ? clear_bhb_loop+0x60/0xb0 [ 256.308166][T12272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.308183][T12272] RIP: 0033:0x7fe6b418ebe9 [ 256.308198][T12272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.308212][T12272] RSP: 002b:00007fe6b50b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.308232][T12272] RAX: ffffffffffffffda RBX: 00007fe6b43c5fa0 RCX: 00007fe6b418ebe9 [ 256.308244][T12272] RDX: 0000000000044000 RSI: 0000200000000f00 RDI: 0000000000000006 [ 256.308255][T12272] RBP: 00007fe6b50b0090 R08: 0000000000000000 R09: 0000000000000000 [ 256.308266][T12272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.308277][T12272] R13: 00007fe6b43c6038 R14: 00007fe6b43c5fa0 R15: 00007ffed40c2728 [ 256.308307][T12272] [ 256.610936][T12238] lo speed is unknown, defaulting to 1000 [ 256.617896][T12278] smc: net device bond0 erased user defined pnetid SYZ [ 256.697187][T12268] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 256.765778][T12275] netlink: 'syz.0.1598': attribute type 11 has an invalid length. [ 256.834826][T12286] netlink: 'syz.4.1602': attribute type 3 has an invalid length. [ 257.098135][T12298] Bluetooth: MGMT ver 1.23 [ 257.173919][T12298] geneve2: entered promiscuous mode [ 257.199808][ T9262] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.222710][ T9262] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.254504][ T9262] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.276860][ T9262] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.771661][T12314] __nla_validate_parse: 9 callbacks suppressed [ 257.771681][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1608'. [ 258.006381][T12327] FAULT_INJECTION: forcing a failure. [ 258.006381][T12327] name failslab, interval 1, probability 0, space 0, times 0 [ 258.020470][T12327] CPU: 1 UID: 0 PID: 12327 Comm: syz.2.1612 Not tainted syzkaller #0 PREEMPT(full) [ 258.020495][T12327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.020506][T12327] Call Trace: [ 258.020514][T12327] [ 258.020521][T12327] dump_stack_lvl+0x189/0x250 [ 258.020547][T12327] ? __pfx____ratelimit+0x10/0x10 [ 258.020564][T12327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.020605][T12327] ? __pfx__printk+0x10/0x10 [ 258.020633][T12327] ? __pfx___might_resched+0x10/0x10 [ 258.020648][T12327] ? fs_reclaim_acquire+0x7d/0x100 [ 258.020677][T12327] should_fail_ex+0x414/0x560 [ 258.020704][T12327] should_failslab+0xa8/0x100 [ 258.020729][T12327] __kmalloc_cache_noprof+0x70/0x3d0 [ 258.020750][T12327] ? genl_start+0x1c9/0x6c0 [ 258.020774][T12327] genl_start+0x1c9/0x6c0 [ 258.020792][T12327] ? netlink_lookup+0x30/0x200 [ 258.020815][T12327] __netlink_dump_start+0x466/0x7e0 [ 258.020855][T12327] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 258.020880][T12327] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 258.020899][T12327] ? genl_get_cmd+0x7d9/0x910 [ 258.020926][T12327] ? __pfx_genl_start+0x10/0x10 [ 258.020944][T12327] ? __pfx_genl_dumpit+0x10/0x10 [ 258.020961][T12327] ? __pfx_genl_done+0x10/0x10 [ 258.020996][T12327] genl_rcv_msg+0x5da/0x790 [ 258.021023][T12327] ? __pfx_genl_rcv_msg+0x10/0x10 [ 258.021042][T12327] ? __pfx_nl80211_dump_scan+0x10/0x10 [ 258.021068][T12327] ? __asan_memcpy+0x40/0x70 [ 258.021086][T12327] ? __pfx_ref_tracker_free+0x10/0x10 [ 258.021118][T12327] netlink_rcv_skb+0x208/0x470 [ 258.021131][T12327] ? __lock_acquire+0xab9/0xd20 [ 258.021153][T12327] ? __pfx_genl_rcv_msg+0x10/0x10 [ 258.021173][T12327] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 258.021211][T12327] ? down_read+0x1ad/0x2e0 [ 258.021233][T12327] genl_rcv+0x28/0x40 [ 258.021250][T12327] netlink_unicast+0x82c/0x9e0 [ 258.021283][T12327] ? __pfx_netlink_unicast+0x10/0x10 [ 258.021308][T12327] ? netlink_sendmsg+0x642/0xb30 [ 258.021322][T12327] ? skb_put+0x11b/0x210 [ 258.021344][T12327] netlink_sendmsg+0x805/0xb30 [ 258.021371][T12327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.021392][T12327] ? aa_sock_msg_perm+0xf1/0x1d0 [ 258.021411][T12327] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 258.021428][T12327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.021446][T12327] __sock_sendmsg+0x21c/0x270 [ 258.021472][T12327] ____sys_sendmsg+0x505/0x830 [ 258.021497][T12327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.021526][T12327] ? import_iovec+0x74/0xa0 [ 258.021550][T12327] ___sys_sendmsg+0x21f/0x2a0 [ 258.021571][T12327] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.021628][T12327] ? __fget_files+0x2a/0x420 [ 258.021643][T12327] ? __fget_files+0x3a0/0x420 [ 258.021670][T12327] __x64_sys_sendmsg+0x19b/0x260 [ 258.021692][T12327] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 258.021723][T12327] ? __pfx_ksys_write+0x10/0x10 [ 258.021740][T12327] ? rcu_is_watching+0x15/0xb0 [ 258.021763][T12327] ? do_syscall_64+0xbe/0x3b0 [ 258.021785][T12327] do_syscall_64+0xfa/0x3b0 [ 258.021801][T12327] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.021816][T12327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.021839][T12327] ? clear_bhb_loop+0x60/0xb0 [ 258.021862][T12327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.021878][T12327] RIP: 0033:0x7f575338ebe9 [ 258.021895][T12327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.021909][T12327] RSP: 002b:00007f5754230038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.021928][T12327] RAX: ffffffffffffffda RBX: 00007f57535c5fa0 RCX: 00007f575338ebe9 [ 258.021941][T12327] RDX: 0000000000044000 RSI: 0000200000000f00 RDI: 0000000000000006 [ 258.021953][T12327] RBP: 00007f5754230090 R08: 0000000000000000 R09: 0000000000000000 [ 258.021963][T12327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.021974][T12327] R13: 00007f57535c6038 R14: 00007f57535c5fa0 R15: 00007fff99adfca8 [ 258.022006][T12327] [ 258.040161][T12329] netlink: 'syz.4.1613': attribute type 1 has an invalid length. [ 258.333025][T12340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1617'. [ 258.382326][T12329] 8021q: adding VLAN 0 to HW filter on device bond4 [ 258.528081][T12349] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 258.591748][T12352] netlink: 'syz.3.1622': attribute type 4 has an invalid length. [ 258.607533][T12352] netlink: 'syz.3.1622': attribute type 4 has an invalid length. [ 258.650629][T12352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1622'. [ 259.151270][T12393] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1629'. [ 259.261012][T12403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1632'. [ 259.276671][T12403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1632'. [ 259.304413][T12403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1632'. [ 259.343332][T12403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1632'. [ 259.378084][T12403] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1632'. [ 259.415105][T12407] netlink: 'syz.3.1632': attribute type 16 has an invalid length. [ 259.433505][T12407] netlink: 'syz.3.1632': attribute type 17 has an invalid length. [ 259.512256][T12403] IPv6: NLM_F_REPLACE set, but no existing node found! [ 259.738714][ T7909] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.757051][ T7909] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.778084][ T7909] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.798688][ T7909] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.062870][T12377] lo speed is unknown, defaulting to 1000 [ 260.309739][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1638'. [ 260.595012][T12441] syzkaller1: entered promiscuous mode [ 260.604401][T12441] syzkaller1: entered allmulticast mode [ 260.826809][T12452] FAULT_INJECTION: forcing a failure. [ 260.826809][T12452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.844977][T12452] CPU: 1 UID: 0 PID: 12452 Comm: syz.3.1644 Not tainted syzkaller #0 PREEMPT(full) [ 260.845003][T12452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 260.845014][T12452] Call Trace: [ 260.845021][T12452] [ 260.845029][T12452] dump_stack_lvl+0x189/0x250 [ 260.845054][T12452] ? __pfx____ratelimit+0x10/0x10 [ 260.845072][T12452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.845091][T12452] ? __pfx__printk+0x10/0x10 [ 260.845125][T12452] should_fail_ex+0x414/0x560 [ 260.845151][T12452] _copy_to_user+0x31/0xb0 [ 260.845174][T12452] simple_read_from_buffer+0xe1/0x170 [ 260.845202][T12452] proc_fail_nth_read+0x1b3/0x220 [ 260.845225][T12452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.845247][T12452] ? rw_verify_area+0x2a6/0x4d0 [ 260.845267][T12452] ? __lock_acquire+0xab9/0xd20 [ 260.845287][T12452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.845308][T12452] vfs_read+0x1fd/0xa30 [ 260.845333][T12452] ? fdget_pos+0x247/0x320 [ 260.845354][T12452] ? __pfx___mutex_lock+0x10/0x10 [ 260.845373][T12452] ? __pfx_vfs_read+0x10/0x10 [ 260.845395][T12452] ? __fget_files+0x2a/0x420 [ 260.845415][T12452] ? __fget_files+0x3a0/0x420 [ 260.845429][T12452] ? __fget_files+0x2a/0x420 [ 260.845455][T12452] ksys_read+0x145/0x250 [ 260.845479][T12452] ? __pfx_ksys_read+0x10/0x10 [ 260.845496][T12452] ? rcu_is_watching+0x15/0xb0 [ 260.845520][T12452] ? do_syscall_64+0xbe/0x3b0 [ 260.845543][T12452] do_syscall_64+0xfa/0x3b0 [ 260.845559][T12452] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.845576][T12452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.845592][T12452] ? clear_bhb_loop+0x60/0xb0 [ 260.845613][T12452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.845630][T12452] RIP: 0033:0x7f344c78d5fc [ 260.845646][T12452] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 260.845661][T12452] RSP: 002b:00007f344d618030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 260.845680][T12452] RAX: ffffffffffffffda RBX: 00007f344c9c5fa0 RCX: 00007f344c78d5fc [ 260.845693][T12452] RDX: 000000000000000f RSI: 00007f344d6180a0 RDI: 0000000000000006 [ 260.845704][T12452] RBP: 00007f344d618090 R08: 0000000000000000 R09: 0000000000000000 [ 260.845714][T12452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.845725][T12452] R13: 00007f344c9c6038 R14: 00007f344c9c5fa0 R15: 00007ffc3611e878 [ 260.845757][T12452] [ 261.418515][T12469] sctp: [Deprecated]: syz.0.1648 (pid 12469) Use of int in max_burst socket option. [ 261.418515][T12469] Use struct sctp_assoc_value instead [ 261.633092][T12475] syzkaller0: entered promiscuous mode [ 261.658581][T12475] syzkaller0: entered allmulticast mode [ 262.130894][T12494] syzkaller1: entered promiscuous mode [ 262.149000][T12494] syzkaller1: entered allmulticast mode [ 262.185942][T12494] netlink: 'syz.3.1656': attribute type 21 has an invalid length. [ 262.290389][T12494] netlink: 'syz.3.1656': attribute type 4 has an invalid length. [ 262.308963][T12494] netlink: 'syz.3.1656': attribute type 3 has an invalid length. [ 262.733441][T12545] netlink: 'syz.1.1667': attribute type 9 has an invalid length. [ 262.743062][T12545] netlink: 'syz.1.1667': attribute type 9 has an invalid length. [ 262.859200][T12552] tc_dump_action: action bad kind [ 262.903067][T12555] vti0: entered promiscuous mode [ 263.004549][T12561] : entered promiscuous mode [ 263.062522][T12567] __nla_validate_parse: 7 callbacks suppressed [ 263.062535][T12567] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1676'. [ 263.226614][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1677'. [ 263.236121][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 263.252892][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1677'. [ 263.254651][ T1097] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.265728][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 263.274715][ T1097] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.288221][ T1097] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.301061][ T1097] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.452128][T12581] validate_nla: 2 callbacks suppressed [ 263.452144][T12581] netlink: 'syz.2.1680': attribute type 11 has an invalid length. [ 263.472876][T12581] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1680'. [ 263.688595][T12593] team0: Device macsec1 is already an upper device of the team interface [ 264.204367][T12606] tipc: Enabled bearer , priority 0 [ 264.213678][T12606] syzkaller0: entered promiscuous mode [ 264.219479][T12606] syzkaller0: entered allmulticast mode [ 264.268177][T12603] tipc: Resetting bearer [ 264.269389][T12609] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1688'. [ 264.304084][T12609] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1688'. [ 264.395868][T12603] tipc: Disabling bearer [ 264.720957][T12626] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1694'. [ 265.059089][T12645] netlink: 'syz.0.1700': attribute type 2 has an invalid length. [ 265.093374][T12645] : entered promiscuous mode [ 265.320458][T12655] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 265.396698][T12662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1705'. [ 265.519342][T12664] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 265.604756][T12645] lo speed is unknown, defaulting to 1000 [ 265.639404][T12655] batadv_slave_0: entered promiscuous mode [ 265.714252][T12672] tipc: Enabled bearer , priority 0 [ 265.794089][T12672] syzkaller0: entered promiscuous mode [ 265.803547][T12672] syzkaller0: entered allmulticast mode [ 265.897598][T12662] lo speed is unknown, defaulting to 1000 [ 265.960857][T12672] tipc: Resetting bearer [ 266.228542][T12671] tipc: Resetting bearer [ 266.328413][T12671] tipc: Disabling bearer [ 266.570525][T12707] netlink: 'syz.2.1718': attribute type 39 has an invalid length. [ 267.510743][T12746] netlink: 'syz.4.1729': attribute type 3 has an invalid length. [ 267.796032][T12766] tipc: Enabling of bearer rejected, already enabled [ 267.816970][T12759] tipc: Resetting bearer [ 267.835018][T12759] syzkaller0: left allmulticast mode [ 267.994134][T12777] tipc: Enabling of bearer rejected, failed to enable media [ 268.176354][T12785] __nla_validate_parse: 4 callbacks suppressed [ 268.176372][T12785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1740'. [ 268.178405][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1740'. [ 268.397109][T12797] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1741'. [ 268.599359][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1743'. [ 268.778914][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1748'. [ 268.919534][T12818] veth7: entered promiscuous mode [ 269.061868][T12832] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1751'. [ 269.077443][T12832] netlink: 'syz.1.1751': attribute type 10 has an invalid length. [ 269.107968][T12832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.121673][T12834] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1752'. [ 269.128009][T12832] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 269.316867][T12834] batadv1: entered promiscuous mode [ 269.354415][T12834] batadv1: entered allmulticast mode [ 269.374944][T12844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1755'. [ 270.060955][T12881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1763'. [ 270.569578][T12903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1772'. [ 271.061310][T12873] lo speed is unknown, defaulting to 1000 [ 271.243945][T12950] netlink: 'syz.4.1781': attribute type 1 has an invalid length. [ 271.274174][T12950] netlink: 'syz.4.1781': attribute type 1 has an invalid length. [ 271.471399][T12964] netlink: 'syz.4.1781': attribute type 1 has an invalid length. [ 271.832215][T12964] 8021q: adding VLAN 0 to HW filter on device bond5 [ 271.912805][T12970] bond1: (slave wlan0): Releasing active interface [ 271.920558][T12970] bond1: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 271.964720][T12970] vlan2: entered promiscuous mode [ 272.031607][T12970] bond5: (slave wlan0): Opening slave failed [ 272.543493][T12999] netlink: 'syz.2.1792': attribute type 13 has an invalid length. [ 272.589661][T12999] netlink: 'syz.2.1792': attribute type 17 has an invalid length. [ 272.719743][T12999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.151914][T13016] netlink: 'syz.1.1797': attribute type 1 has an invalid length. [ 273.257894][T13016] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 273.624902][T12978] lo speed is unknown, defaulting to 1000 [ 273.644148][T13031] syz_tun: entered allmulticast mode [ 273.679771][T13029] dvmrp8: entered allmulticast mode [ 273.789206][T13029] syz_tun: left allmulticast mode [ 273.794412][T13029] dvmrp8: left allmulticast mode [ 274.373105][T13039] lo speed is unknown, defaulting to 1000 [ 274.412977][T13021] lo speed is unknown, defaulting to 1000 [ 274.489644][T12996] lo speed is unknown, defaulting to 1000 [ 275.503327][T13048] lo speed is unknown, defaulting to 1000 [ 275.659730][T13052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.769934][T13052] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 275.930241][T13069] __nla_validate_parse: 4 callbacks suppressed [ 275.930306][T13069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1811'. [ 275.949909][T13069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1811'. [ 275.989410][T13073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1813'. [ 276.162962][T13078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1815'. [ 276.992629][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1822'. [ 276.996465][T13095] lo speed is unknown, defaulting to 1000 [ 277.003652][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1822'. [ 277.032435][T13109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1822'. [ 277.101553][T13113] netlink: 'syz.0.1824': attribute type 10 has an invalid length. [ 277.116659][T13113] bond0: (slave wlan1): Opening slave failed [ 277.131933][T13115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1825'. [ 277.144350][T13113] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 277.263978][T13122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1827'. [ 277.332862][T13125] netlink: 'syz.2.1829': attribute type 3 has an invalid length. [ 277.706672][T13140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1833'. [ 278.240187][ T5864] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 278.285747][T13156] netlink: 'syz.2.1836': attribute type 10 has an invalid length. [ 278.312712][T13156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.320445][ T5864] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 278.372282][T13156] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 278.574032][ T7081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.824823][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 279.076717][T13180] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 279.178612][ T7081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.301271][T13188] netlink: 'syz.1.1848': attribute type 1 has an invalid length. [ 279.388747][T13188] 8021q: adding VLAN 0 to HW filter on device bond7 [ 279.413396][T13189] bond7: (slave ip6gretap2): making interface the new active one [ 279.423480][T13189] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 279.500287][T13200] netlink: 'syz.4.1852': attribute type 1 has an invalid length. [ 279.667176][T13188] veth7: entered promiscuous mode [ 279.684086][T13188] bond7: (slave veth7): Enslaving as an active interface with a down link [ 279.699153][T13189] erspan0: entered allmulticast mode [ 279.710634][T13189] bond7: (slave erspan0): Enslaving as an active interface with an up link [ 281.025108][T13247] __nla_validate_parse: 13 callbacks suppressed [ 281.025127][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1864'. [ 281.224970][T13254] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1865'. [ 281.495132][T13258] bridge5: entered promiscuous mode [ 281.500464][T13258] bridge5: entered allmulticast mode [ 281.507244][T13259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1866'. [ 281.912195][T13272] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.1869'. [ 282.181015][T13279] netlink: 'syz.1.1871': attribute type 1 has an invalid length. [ 282.291939][T13281] veth9: entered promiscuous mode [ 282.407058][T13279] 8021q: adding VLAN 0 to HW filter on device bond8 [ 282.443589][T13283] _ミZ`ヤ@S: entered promiscuous mode [ 282.492850][T13281] bond7: (slave erspan0): Releasing active interface [ 282.509833][T13281] ip6gretap2: entered promiscuous mode [ 282.531120][T13281] bond8: (slave erspan0): making interface the new active one [ 282.550737][T13281] bond8: (slave erspan0): Enslaving as an active interface with an up link [ 282.792003][T13304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1875'. [ 282.811156][T13301] batman_adv: batadv0: Interface deactivated: macvtap1 [ 282.843199][T13301] mac80211_hwsim hwsim6 wlan0 (unregistering): left allmulticast mode [ 282.912939][T13301] batman_adv: batadv0: Removing interface: macvtap1 [ 283.274702][T13326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1882'. [ 283.717871][T13344] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1886'. [ 284.076920][T13350] syzkaller0: entered allmulticast mode [ 284.139076][T13348] syzkaller0: entered promiscuous mode [ 284.151527][T13348] syzkaller0: entered allmulticast mode [ 284.244927][T13362] tipc: Enabling of bearer <電p:s> rejected, media not registered [ 284.312646][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1889'. [ 284.330029][T13365] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1889'. [ 284.580141][T13375] netlink: 'syz.4.1893': attribute type 11 has an invalid length. [ 284.643545][T13379] sctp: [Deprecated]: syz.1.1894 (pid 13379) Use of int in maxseg socket option. [ 284.643545][T13379] Use struct sctp_assoc_value instead [ 284.649421][T13383] netlink: 'syz.0.1895': attribute type 1 has an invalid length. [ 284.920841][T13388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.717440][T13398] batadv0: entered promiscuous mode [ 285.741030][T13398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.137196][T13405] workqueue: name exceeds WQ_NAME_LEN. Truncating to: タ^>コ>Mv^オ粭セヲクムKc'A・サ [ 286.447491][T13428] netlink: 'syz.3.1907': attribute type 1 has an invalid length. [ 286.478935][T13430] tipc: Enabling of bearer rejected, already enabled [ 286.504878][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 286.547536][T13430] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 286.551196][T13432] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20001 [ 286.585252][T13430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1908'. [ 286.610114][T13430] tipc: Resetting bearer [ 286.805963][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1910'. [ 287.040655][T13444] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 287.092786][T13444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1912'. [ 287.144537][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1912'. [ 287.392820][T13464] netlink: 'syz.2.1918': attribute type 6 has an invalid length. [ 287.551209][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'. [ 287.647240][T13468] netlink: 'syz.3.1919': attribute type 4 has an invalid length. [ 287.679487][T13468] netlink: 'syz.3.1919': attribute type 4 has an invalid length. [ 288.072601][T13485] tipc: Enabling of bearer <電p:s> rejected, media not registered [ 288.266237][T13472] lo speed is unknown, defaulting to 1000 [ 289.098595][T13492] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 289.308981][T13504] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1928'. [ 289.537436][T13512] bond0: (slave bond_slave_0): Releasing backup interface [ 289.555865][ T7091] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 289.729947][T13512] team0: Port device team_slave_0 removed [ 289.813353][T13512] team0: Port device team_slave_1 removed [ 289.899334][T13512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.923348][T13512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.938777][T13512] bond0: (slave macvlan0): Releasing backup interface [ 290.013951][T13512] bond1: (slave vlan2): Releasing active interface [ 290.036982][T13512] vlan2: left promiscuous mode [ 290.431527][ T7091] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 290.666192][T13547] tipc: Enabling of bearer <電p:s> rejected, media not registered [ 290.846271][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.411544][T13551] bond0: (slave wlan1): Releasing backup interface [ 291.524260][ T7090] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 291.548555][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.605091][T13509] lo speed is unknown, defaulting to 1000 [ 291.746308][ T7090] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 291.768805][T13560] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1939'. [ 292.218233][T13576] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 292.262172][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1946'. [ 292.375348][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1946'. [ 292.496657][T13538] lo speed is unknown, defaulting to 1000 [ 292.577267][T13590] netlink: 'syz.3.1948': attribute type 13 has an invalid length. [ 292.594818][T13591] netlink: 'syz.3.1948': attribute type 13 has an invalid length. [ 292.602677][T13591] netlink: 'syz.3.1948': attribute type 17 has an invalid length. [ 292.631242][T13590] netlink: 'syz.3.1948': attribute type 17 has an invalid length. [ 292.797649][T13590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.576133][T13590] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.593142][T13590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.642009][T13591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.670842][T13594] tipc: Enabling of bearer <電p:s> rejected, media not registered [ 293.690663][T13599] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1950'. [ 293.774948][ T1097] ip6gretap2: left promiscuous mode [ 293.867069][T13609] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1951'. [ 294.021573][T13606] syz_tun: entered allmulticast mode [ 294.156501][T13607] dvmrp8: entered allmulticast mode [ 294.232964][T13616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.304740][T13616] tipc: Failed to remove unknown binding: 66,1,1/0:3936774618/3936774652 [ 294.822846][T13634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1958'. [ 295.220827][T13640] netlink: 'syz.0.1960': attribute type 13 has an invalid length. [ 295.245125][T13640] netlink: 'syz.0.1960': attribute type 17 has an invalid length. [ 295.333351][T13640] sit0: left promiscuous mode [ 295.340871][T13640] sit0: left allmulticast mode [ 295.356228][T13640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.364290][T13640] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.378196][T13640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.400017][T13609] lo speed is unknown, defaulting to 1000 [ 295.409549][T13602] lo speed is unknown, defaulting to 1000 [ 295.429296][T13636] siw: device registration error -23 [ 295.512503][T13641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.640878][ T9263] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 296.116846][T13642] lo speed is unknown, defaulting to 1000 [ 296.950839][T13609] syz_tun: left allmulticast mode [ 296.965663][T13609] dvmrp8: left allmulticast mode [ 297.047185][T13663] netlink: 'syz.0.1965': attribute type 1 has an invalid length. [ 297.064877][T13663] netlink: 'syz.0.1965': attribute type 11 has an invalid length. [ 297.072732][T13663] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1965'. [ 297.081186][T13662] team0: Device macsec0 is already an upper device of the team interface [ 297.137629][T13647] lo speed is unknown, defaulting to 1000 [ 297.565905][T13686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1971'. [ 297.634091][T13692] netlink: 'syz.4.1973': attribute type 1 has an invalid length. [ 297.642495][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1971'. [ 297.702464][T13692] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1973'. [ 297.728992][T13700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1972'. [ 297.751682][T13692] netlink: 'syz.4.1973': attribute type 1 has an invalid length. [ 297.763276][T13700] netlink: 'syz.1.1972': attribute type 7 has an invalid length. [ 297.771842][T13699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.799520][T13692] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1973'. [ 297.813117][T13700] netlink: 'syz.1.1972': attribute type 8 has an invalid length. [ 297.833367][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1972'. [ 297.885528][T13692] netlink: 'syz.4.1973': attribute type 1 has an invalid length. [ 297.893330][T13692] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1973'. [ 297.903303][T13692] netlink: 'syz.4.1973': attribute type 1 has an invalid length. [ 297.915026][T13692] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1973'. [ 297.929180][T13692] netlink: 'syz.4.1973': attribute type 1 has an invalid length. [ 297.939951][T13692] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1973'. [ 297.955840][T13692] netlink: 'syz.4.1973': attribute type 1 has an invalid length. [ 297.968778][T13692] netlink: 'syz.4.1973': attribute type 1 has an invalid length. [ 297.980906][T13692] netlink: 'syz.4.1973': attribute type 1 has an invalid length. [ 298.035614][ T7090] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 298.085117][T13681] lo speed is unknown, defaulting to 1000 [ 298.990824][ T7090] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 299.243686][T13746] dvmrp8: entered allmulticast mode [ 299.474803][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 299.561932][T13761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.670526][T13764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.759758][T13761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.982147][T13745] dvmrp8: left allmulticast mode [ 300.048496][T13746] lo speed is unknown, defaulting to 1000 [ 300.293885][T13775] lo speed is unknown, defaulting to 1000 [ 301.048198][T13808] sit3: entered promiscuous mode [ 301.348282][T13802] lo speed is unknown, defaulting to 1000 [ 301.627938][T13862] tipc: Enabling of bearer <電p:s> rejected, media not registered [ 302.793349][T13961] FAULT_INJECTION: forcing a failure. [ 302.793349][T13961] name failslab, interval 1, probability 0, space 0, times 0 [ 302.815766][T13961] CPU: 1 UID: 0 PID: 13961 Comm: syz.0.2014 Not tainted syzkaller #0 PREEMPT(full) [ 302.815815][T13961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.815832][T13961] Call Trace: [ 302.815839][T13961] [ 302.815847][T13961] dump_stack_lvl+0x189/0x250 [ 302.815872][T13961] ? __pfx____ratelimit+0x10/0x10 [ 302.815890][T13961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.815930][T13961] ? __pfx__printk+0x10/0x10 [ 302.815958][T13961] ? __pfx___might_resched+0x10/0x10 [ 302.815978][T13961] should_fail_ex+0x414/0x560 [ 302.816005][T13961] should_failslab+0xa8/0x100 [ 302.816029][T13961] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 302.816051][T13961] ? __alloc_skb+0x112/0x2d0 [ 302.816076][T13961] __alloc_skb+0x112/0x2d0 [ 302.816098][T13961] netlink_sendmsg+0x5c6/0xb30 [ 302.816125][T13961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.816145][T13961] ? aa_sock_msg_perm+0xf1/0x1d0 [ 302.816164][T13961] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 302.816181][T13961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.816199][T13961] __sock_sendmsg+0x21c/0x270 [ 302.816231][T13961] ____sys_sendmsg+0x505/0x830 [ 302.816256][T13961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.816284][T13961] ? import_iovec+0x74/0xa0 [ 302.816307][T13961] ___sys_sendmsg+0x21f/0x2a0 [ 302.816328][T13961] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.816384][T13961] ? __fget_files+0x2a/0x420 [ 302.816398][T13961] ? __fget_files+0x3a0/0x420 [ 302.816424][T13961] __x64_sys_sendmsg+0x19b/0x260 [ 302.816446][T13961] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.816474][T13961] ? __pfx_ksys_write+0x10/0x10 [ 302.816492][T13961] ? rcu_is_watching+0x15/0xb0 [ 302.816515][T13961] ? do_syscall_64+0xbe/0x3b0 [ 302.816537][T13961] do_syscall_64+0xfa/0x3b0 [ 302.816552][T13961] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.816569][T13961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.816585][T13961] ? clear_bhb_loop+0x60/0xb0 [ 302.816606][T13961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.816622][T13961] RIP: 0033:0x7ff00e98ebe9 [ 302.816638][T13961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.816653][T13961] RSP: 002b:00007ff00f834038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.816672][T13961] RAX: ffffffffffffffda RBX: 00007ff00ebc5fa0 RCX: 00007ff00e98ebe9 [ 302.816684][T13961] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 302.816695][T13961] RBP: 00007ff00f834090 R08: 0000000000000000 R09: 0000000000000000 [ 302.816706][T13961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.816716][T13961] R13: 00007ff00ebc6038 R14: 00007ff00ebc5fa0 R15: 00007fff8f73e428 [ 302.816745][T13961] [ 303.262959][T13968] openvswitch: netlink: IP tunnel dst address not specified [ 303.343026][T13963] can: request_module (can-proto-0) failed. [ 303.413336][T13972] macsec0: entered promiscuous mode [ 303.430426][T13972] validate_nla: 96 callbacks suppressed [ 303.430447][T13972] netlink: 'syz.4.2018': attribute type 1 has an invalid length. [ 303.445775][T13972] netlink: 'syz.4.2018': attribute type 2 has an invalid length. [ 303.642805][T13978] __nla_validate_parse: 103 callbacks suppressed [ 303.642823][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2020'. [ 303.904536][T13991] netlink: 'syz.4.2026': attribute type 5 has an invalid length. [ 304.055888][T14000] siw: device registration error -23 [ 304.126451][T14007] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 304.265099][T14011] sctp: [Deprecated]: syz.4.2036 (pid 14011) Use of int in max_burst socket option deprecated. [ 304.265099][T14011] Use struct sctp_assoc_value instead [ 304.299441][T14011] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 304.425710][T14023] FAULT_INJECTION: forcing a failure. [ 304.425710][T14023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.467663][T14025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2040'. [ 304.505274][T14023] CPU: 1 UID: 0 PID: 14023 Comm: syz.1.2041 Not tainted syzkaller #0 PREEMPT(full) [ 304.505299][T14023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.505309][T14023] Call Trace: [ 304.505317][T14023] [ 304.505325][T14023] dump_stack_lvl+0x189/0x250 [ 304.505349][T14023] ? __pfx____ratelimit+0x10/0x10 [ 304.505367][T14023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.505385][T14023] ? __pfx__printk+0x10/0x10 [ 304.505407][T14023] ? __might_fault+0xb0/0x130 [ 304.505439][T14023] should_fail_ex+0x414/0x560 [ 304.505467][T14023] _copy_from_iter+0x1de/0x1790 [ 304.505493][T14023] ? rcu_is_watching+0x15/0xb0 [ 304.505510][T14023] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 304.505533][T14023] ? __pfx__copy_from_iter+0x10/0x10 [ 304.505553][T14023] ? __build_skb_around+0x257/0x3e0 [ 304.505574][T14023] ? netlink_sendmsg+0x642/0xb30 [ 304.505589][T14023] ? skb_put+0x11b/0x210 [ 304.505609][T14023] netlink_sendmsg+0x6b2/0xb30 [ 304.505634][T14023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.505652][T14023] ? aa_sock_msg_perm+0xf1/0x1d0 [ 304.505669][T14023] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.505685][T14023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.505702][T14023] __sock_sendmsg+0x21c/0x270 [ 304.505725][T14023] ____sys_sendmsg+0x505/0x830 [ 304.505760][T14023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.505788][T14023] ? import_iovec+0x74/0xa0 [ 304.505810][T14023] ___sys_sendmsg+0x21f/0x2a0 [ 304.505831][T14023] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.505884][T14023] ? __fget_files+0x2a/0x420 [ 304.505898][T14023] ? __fget_files+0x3a0/0x420 [ 304.505922][T14023] __x64_sys_sendmsg+0x19b/0x260 [ 304.505944][T14023] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.505972][T14023] ? __pfx_ksys_write+0x10/0x10 [ 304.505990][T14023] ? rcu_is_watching+0x15/0xb0 [ 304.506012][T14023] ? do_syscall_64+0xbe/0x3b0 [ 304.506033][T14023] do_syscall_64+0xfa/0x3b0 [ 304.506049][T14023] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.506065][T14023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.506081][T14023] ? clear_bhb_loop+0x60/0xb0 [ 304.506102][T14023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.506118][T14023] RIP: 0033:0x7ffad7d8ebe9 [ 304.506134][T14023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.506148][T14023] RSP: 002b:00007ffad8c93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.506167][T14023] RAX: ffffffffffffffda RBX: 00007ffad7fc5fa0 RCX: 00007ffad7d8ebe9 [ 304.506180][T14023] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 304.506191][T14023] RBP: 00007ffad8c93090 R08: 0000000000000000 R09: 0000000000000000 [ 304.506201][T14023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.506211][T14023] R13: 00007ffad7fc6038 R14: 00007ffad7fc5fa0 R15: 00007fffd62851f8 [ 304.506237][T14023] [ 304.967792][T14028] netlink: 212264 bytes leftover after parsing attributes in process `syz.3.2042'. [ 304.978951][T14028] netlink: 'syz.3.2042': attribute type 10 has an invalid length. [ 305.025988][T14025] bridge0: port 1(macvlan0) entered blocking state [ 305.089676][T14025] bridge0: port 1(macvlan0) entered disabled state [ 305.108638][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2038'. [ 305.131465][T14025] macvlan0: entered allmulticast mode [ 305.145056][T14025] bridge0: entered allmulticast mode [ 305.185756][T14025] macvlan0: left allmulticast mode [ 305.204961][T14025] bridge0: left allmulticast mode [ 305.326376][T14028] team0: Cannot enslave team device to itself [ 305.461841][T14047] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2048'. [ 305.520723][T14047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2048'. [ 305.563610][T14046] pim6reg1: entered promiscuous mode [ 305.591662][T14046] pim6reg1: entered allmulticast mode [ 305.747360][T14042] lo speed is unknown, defaulting to 1000 [ 305.888577][T14054] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2050'. [ 306.627166][T14067] 8021q: VLANs not supported on vcan0 [ 306.788416][T14072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2056'. [ 306.828818][T14072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2056'. [ 306.857005][T14072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2056'. [ 306.970274][T14072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.986056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.986252][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.021496][T14056] lo speed is unknown, defaulting to 1000 [ 307.412987][T14088] netlink: 'syz.1.2060': attribute type 21 has an invalid length. [ 307.526838][T14093] ipvlan2: entered promiscuous mode [ 307.552195][T14093] bridge0: port 1(ipvlan2) entered blocking state [ 307.588684][T14093] bridge0: port 1(ipvlan2) entered disabled state [ 307.619107][T14093] ipvlan2: entered allmulticast mode [ 307.624522][T14093] gretap0: entered allmulticast mode [ 307.633772][T14093] ipvlan2: left allmulticast mode [ 307.640092][T14093] gretap0: left allmulticast mode [ 308.600185][T14139] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 308.756781][T14145] __nla_validate_parse: 20 callbacks suppressed [ 308.756799][T14145] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2077'. [ 308.800069][T14144] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2077'. [ 308.843937][T14153] siw: device registration error -23 [ 309.149509][T14175] tipc: Enabling of bearer <電p:s> rejected, media not registered [ 310.125328][T14208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2093'. [ 310.171383][T14208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2093'. [ 310.418251][T14220] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2097'. [ 310.580621][T14230] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2100'. [ 310.662539][T14236] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2101'. [ 310.711232][T14236] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2101'. [ 310.901116][T14200] lo speed is unknown, defaulting to 1000 [ 310.968936][T14251] tipc: Enabling of bearer rejected, failed to enable media [ 311.163626][T14263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2111'. [ 311.186880][T14263] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2111'. [ 311.604201][T14280] tipc: Enabling of bearer <電p:s> rejected, media not registered [ 312.675083][T14324] smc: net device bond0 applied user defined pnetid SYZ2 [ 313.067383][T14337] netlink: 'syz.1.2135': attribute type 3 has an invalid length. [ 313.096375][T14337] syz_tun: entered allmulticast mode [ 313.105290][T14336] syz_tun: left allmulticast mode [ 313.566866][T14359] veth11: entered promiscuous mode [ 313.603224][T14362] tipc: Enabling of bearer <電p:s> rejected, media not registered [ 314.257470][T14382] __nla_validate_parse: 9 callbacks suppressed [ 314.258686][T14382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2147'. [ 314.399237][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2149'. [ 314.419906][T14388] netlink: 'syz.4.2149': attribute type 20 has an invalid length. [ 314.429207][T14388] netlink: 'syz.4.2149': attribute type 21 has an invalid length. [ 314.484134][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2152'. [ 314.540366][T14394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2152'. [ 314.554386][T14394] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2152'. [ 314.638218][T14401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2154'. [ 314.687685][T14401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2154'. [ 314.719306][T14378] lo speed is unknown, defaulting to 1000 [ 314.736860][T14403] tipc: Enabling of bearer <電p:s> rejected, media not registered [ 315.396666][T14408] lo speed is unknown, defaulting to 1000 [ 315.498498][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2162'. [ 315.638860][T14439] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2164'. [ 315.743605][T14445] FAULT_INJECTION: forcing a failure. [ 315.743605][T14445] name failslab, interval 1, probability 0, space 0, times 0 [ 315.766639][T14445] CPU: 1 UID: 0 PID: 14445 Comm: syz.1.2165 Not tainted syzkaller #0 PREEMPT(full) [ 315.766664][T14445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.766680][T14445] Call Trace: [ 315.766687][T14445] [ 315.766695][T14445] dump_stack_lvl+0x189/0x250 [ 315.766719][T14445] ? __pfx____ratelimit+0x10/0x10 [ 315.766737][T14445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.766757][T14445] ? __pfx__printk+0x10/0x10 [ 315.766788][T14445] ? __pfx___might_resched+0x10/0x10 [ 315.766807][T14445] ? fs_reclaim_acquire+0x7d/0x100 [ 315.766837][T14445] should_fail_ex+0x414/0x560 [ 315.766863][T14445] should_failslab+0xa8/0x100 [ 315.766888][T14445] __kmalloc_cache_noprof+0x70/0x3d0 [ 315.766909][T14445] ? rtnl_newlink+0xed/0x1c70 [ 315.766947][T14445] rtnl_newlink+0xed/0x1c70 [ 315.766964][T14445] ? __lock_acquire+0xab9/0xd20 [ 315.766996][T14445] ? __pfx_rtnl_newlink+0x10/0x10 [ 315.767020][T14445] ? is_bpf_text_address+0x26/0x2b0 [ 315.767051][T14445] ? __lock_acquire+0xab9/0xd20 [ 315.767087][T14445] ? __lock_acquire+0xab9/0xd20 [ 315.767133][T14445] ? is_bpf_text_address+0x26/0x2b0 [ 315.767159][T14445] ? is_bpf_text_address+0x292/0x2b0 [ 315.767180][T14445] ? is_bpf_text_address+0x26/0x2b0 [ 315.767211][T14445] ? __lock_acquire+0xab9/0xd20 [ 315.767258][T14445] ? __pfx_rtnl_newlink+0x10/0x10 [ 315.767274][T14445] rtnetlink_rcv_msg+0x7cf/0xb70 [ 315.767290][T14445] ? __lock_acquire+0xab9/0xd20 [ 315.767313][T14445] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 315.767329][T14445] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.767363][T14445] netlink_rcv_skb+0x208/0x470 [ 315.767378][T14445] ? __lock_acquire+0xab9/0xd20 [ 315.767400][T14445] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.767418][T14445] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.767448][T14445] ? netlink_deliver_tap+0x2e/0x1b0 [ 315.767473][T14445] netlink_unicast+0x82c/0x9e0 [ 315.767505][T14445] ? __pfx_netlink_unicast+0x10/0x10 [ 315.767529][T14445] ? netlink_sendmsg+0x642/0xb30 [ 315.767544][T14445] ? skb_put+0x11b/0x210 [ 315.767566][T14445] netlink_sendmsg+0x805/0xb30 [ 315.767593][T14445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.767619][T14445] ? aa_sock_msg_perm+0xf1/0x1d0 [ 315.767638][T14445] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 315.767655][T14445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.767673][T14445] __sock_sendmsg+0x21c/0x270 [ 315.767699][T14445] ____sys_sendmsg+0x505/0x830 [ 315.767724][T14445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.767756][T14445] ? import_iovec+0x74/0xa0 [ 315.767779][T14445] ___sys_sendmsg+0x21f/0x2a0 [ 315.767800][T14445] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.767857][T14445] ? __fget_files+0x2a/0x420 [ 315.767872][T14445] ? __fget_files+0x3a0/0x420 [ 315.767901][T14445] __x64_sys_sendmsg+0x19b/0x260 [ 315.767923][T14445] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 315.767952][T14445] ? __pfx_ksys_write+0x10/0x10 [ 315.767971][T14445] ? rcu_is_watching+0x15/0xb0 [ 315.767993][T14445] ? do_syscall_64+0xbe/0x3b0 [ 315.768016][T14445] do_syscall_64+0xfa/0x3b0 [ 315.768035][T14445] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.768052][T14445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.768069][T14445] ? clear_bhb_loop+0x60/0xb0 [ 315.768089][T14445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.768105][T14445] RIP: 0033:0x7ffad7d8ebe9 [ 315.768122][T14445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.768135][T14445] RSP: 002b:00007ffad8c93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.768155][T14445] RAX: ffffffffffffffda RBX: 00007ffad7fc5fa0 RCX: 00007ffad7d8ebe9 [ 315.768167][T14445] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 315.768179][T14445] RBP: 00007ffad8c93090 R08: 0000000000000000 R09: 0000000000000000 [ 315.768189][T14445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.768200][T14445] R13: 00007ffad7fc6038 R14: 00007ffad7fc5fa0 R15: 00007fffd62851f8 [ 315.768228][T14445] [ 316.256219][T14449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2167'. [ 316.815307][T14476] smc: net device bond0 applied user defined pnetid SYZ2 [ 316.818261][T14480] FAULT_INJECTION: forcing a failure. [ 316.818261][T14480] name failslab, interval 1, probability 0, space 0, times 0 [ 316.835415][T14480] CPU: 1 UID: 0 PID: 14480 Comm: syz.2.2178 Not tainted syzkaller #0 PREEMPT(full) [ 316.835440][T14480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.835451][T14480] Call Trace: [ 316.835459][T14480] [ 316.835466][T14480] dump_stack_lvl+0x189/0x250 [ 316.835492][T14480] ? __pfx____ratelimit+0x10/0x10 [ 316.835506][T14480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.835520][T14480] ? __pfx__printk+0x10/0x10 [ 316.835541][T14480] ? __pfx___might_resched+0x10/0x10 [ 316.835553][T14480] ? fs_reclaim_acquire+0x7d/0x100 [ 316.835579][T14480] should_fail_ex+0x414/0x560 [ 316.835606][T14480] should_failslab+0xa8/0x100 [ 316.835630][T14480] __kmalloc_cache_noprof+0x70/0x3d0 [ 316.835651][T14480] ? rtnl_newlink+0xed/0x1c70 [ 316.835666][T14480] ? kasan_save_free_info+0x46/0x50 [ 316.835688][T14480] rtnl_newlink+0xed/0x1c70 [ 316.835702][T14480] ? netlink_sendmsg+0x805/0xb30 [ 316.835717][T14480] ? __sock_sendmsg+0x21c/0x270 [ 316.835736][T14480] ? ____sys_sendmsg+0x505/0x830 [ 316.835759][T14480] ? ___sys_sendmsg+0x21f/0x2a0 [ 316.835775][T14480] ? __x64_sys_sendmsg+0x19b/0x260 [ 316.835791][T14480] ? do_syscall_64+0xfa/0x3b0 [ 316.835807][T14480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.835833][T14480] ? __pfx_rtnl_newlink+0x10/0x10 [ 316.835873][T14480] ? kasan_quarantine_put+0xdd/0x220 [ 316.835893][T14480] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.835916][T14480] ? nlmon_xmit+0xb0/0x100 [ 316.835931][T14480] ? kmem_cache_free+0x18f/0x400 [ 316.835959][T14480] ? __local_bh_enable_ip+0x12d/0x1c0 [ 316.835977][T14480] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.835995][T14480] ? __local_bh_enable_ip+0x12d/0x1c0 [ 316.836011][T14480] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 316.836032][T14480] ? __dev_queue_xmit+0x27b/0x3b50 [ 316.836052][T14480] ? __dev_queue_xmit+0x27b/0x3b50 [ 316.836069][T14480] ? __dev_queue_xmit+0x27b/0x3b50 [ 316.836089][T14480] ? __dev_queue_xmit+0x1d79/0x3b50 [ 316.836114][T14480] ? __lock_acquire+0xab9/0xd20 [ 316.836162][T14480] ? __pfx_rtnl_newlink+0x10/0x10 [ 316.836179][T14480] rtnetlink_rcv_msg+0x7cf/0xb70 [ 316.836199][T14480] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 316.836214][T14480] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 316.836229][T14480] ? ref_tracker_free+0x63a/0x7d0 [ 316.836251][T14480] ? __asan_memcpy+0x40/0x70 [ 316.836268][T14480] ? __pfx_ref_tracker_free+0x10/0x10 [ 316.836301][T14480] netlink_rcv_skb+0x208/0x470 [ 316.836319][T14480] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 316.836337][T14480] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.836366][T14480] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.836391][T14480] netlink_unicast+0x82c/0x9e0 [ 316.836423][T14480] ? __pfx_netlink_unicast+0x10/0x10 [ 316.836447][T14480] ? netlink_sendmsg+0x642/0xb30 [ 316.836461][T14480] ? skb_put+0x11b/0x210 [ 316.836483][T14480] netlink_sendmsg+0x805/0xb30 [ 316.836509][T14480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.836530][T14480] ? aa_sock_msg_perm+0xf1/0x1d0 [ 316.836549][T14480] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 316.836567][T14480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.836585][T14480] __sock_sendmsg+0x21c/0x270 [ 316.836610][T14480] ____sys_sendmsg+0x505/0x830 [ 316.836635][T14480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.836663][T14480] ? import_iovec+0x74/0xa0 [ 316.836686][T14480] ___sys_sendmsg+0x21f/0x2a0 [ 316.836707][T14480] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.836769][T14480] ? __fget_files+0x2a/0x420 [ 316.836783][T14480] ? __fget_files+0x3a0/0x420 [ 316.836810][T14480] __x64_sys_sendmsg+0x19b/0x260 [ 316.836832][T14480] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 316.836861][T14480] ? __pfx_ksys_write+0x10/0x10 [ 316.836880][T14480] ? rcu_is_watching+0x15/0xb0 [ 316.836902][T14480] ? do_syscall_64+0xbe/0x3b0 [ 316.836924][T14480] do_syscall_64+0xfa/0x3b0 [ 316.836940][T14480] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.836955][T14480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.836972][T14480] ? clear_bhb_loop+0x60/0xb0 [ 316.836993][T14480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.837008][T14480] RIP: 0033:0x7f575338ebe9 [ 316.837024][T14480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.837038][T14480] RSP: 002b:00007f5754230038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.837057][T14480] RAX: ffffffffffffffda RBX: 00007f57535c5fa0 RCX: 00007f575338ebe9 [ 316.837070][T14480] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 316.837080][T14480] RBP: 00007f5754230090 R08: 0000000000000000 R09: 0000000000000000 [ 316.837091][T14480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.837101][T14480] R13: 00007f57535c6038 R14: 00007f57535c5fa0 R15: 00007fff99adfca8 [ 316.837131][T14480] [ 317.961104][T14510] netlink: 'syz.0.2186': attribute type 7 has an invalid length. [ 318.005040][T14518] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 318.152771][T14472] lo speed is unknown, defaulting to 1000 [ 319.009641][T14540] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 319.026008][T14540] ip6gretap0: entered promiscuous mode [ 319.031729][T14540] macsec0: entered allmulticast mode [ 319.040712][T14540] ip6gretap0: entered allmulticast mode [ 319.056734][T14540] ip6gretap0: left allmulticast mode [ 319.072508][T14540] ip6gretap0: left promiscuous mode [ 319.149837][T14543] !: renamed from dummy0 (while UP) [ 319.235653][T14520] lo speed is unknown, defaulting to 1000 [ 319.308058][T14521] lo speed is unknown, defaulting to 1000 [ 320.079762][T14567] __nla_validate_parse: 5 callbacks suppressed [ 320.079781][T14567] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2199'. [ 320.582413][T14569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2200'. [ 320.712761][T14569] netlink: 'syz.2.2200': attribute type 6 has an invalid length. [ 321.608707][T14617] netlink: 'syz.2.2213': attribute type 1 has an invalid length. [ 321.619764][T14624] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2215'. [ 321.690383][T14628] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2217'. [ 321.705767][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 321.735109][T14628] 8021q: VLANs not supported on ipvlan1 [ 321.759814][T14628] macsec1: entered promiscuous mode [ 321.768864][T14628] macsec1: entered allmulticast mode [ 321.871836][T14637] sctp: [Deprecated]: syz.0.2219 (pid 14637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.871836][T14637] Use struct sctp_sack_info instead [ 322.021904][T14645] tipc: Enabling of bearer <電p:s> rejected, media not registered [ 322.862911][T14679] openvswitch: netlink: Missing valid actions attribute. [ 322.926819][T14679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.121179][T14694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.128532][T14694] IPv6: NLM_F_CREATE should be set when creating new route [ 323.135983][T14694] IPv6: NLM_F_CREATE should be set when creating new route [ 323.143261][T14694] IPv6: NLM_F_CREATE should be set when creating new route [ 323.193972][T14698] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.269100][T14702] netlink: 'syz.0.2236': attribute type 1 has an invalid length. [ 323.366433][T14705] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2236'. [ 323.955400][T14718] netlink: 'syz.0.2240': attribute type 3 has an invalid length. [ 324.004864][T14718] netlink: 'syz.0.2240': attribute type 1 has an invalid length. [ 324.026858][T14718] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2240'. [ 324.202027][T14729] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2245'. [ 324.347857][T14740] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2249'. [ 324.433341][T14744] netlink: 'syz.4.2249': attribute type 10 has an invalid length. [ 324.462501][T14744] batadv0: left promiscuous mode [ 324.481260][T14747] netlink: 'syz.2.2251': attribute type 1 has an invalid length. [ 324.519760][T14744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.525605][T14750] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2252'. [ 324.550462][T14750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.568961][T14744] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 324.633096][T14747] 8021q: adding VLAN 0 to HW filter on device bond6 [ 324.862222][T14760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2255'. [ 325.912515][T14789] __nla_validate_parse: 1 callbacks suppressed [ 325.912532][T14789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2263'. [ 326.005784][T14791] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2264'. [ 326.136803][T14798] sctp: [Deprecated]: syz.2.2264 (pid 14798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.136803][T14798] Use struct sctp_sack_info instead [ 326.147589][T14799] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2267'. [ 326.280293][T14803] netlink: 'syz.4.2269': attribute type 3 has an invalid length. [ 326.409867][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2271'. [ 326.524092][T14811] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2270'. [ 327.261500][T14815] lo speed is unknown, defaulting to 1000 [ 327.611387][T14852] syzkaller0: entered promiscuous mode [ 327.621445][T14852] syzkaller0: entered allmulticast mode [ 327.629169][T14857] netlink: 'syz.2.2285': attribute type 13 has an invalid length. [ 327.637594][T14863] tipc: Enabling of bearer rejected, already enabled [ 327.716681][T14852] openvswitch: netlink: Duplicate or invalid key (type 0). [ 327.740122][T14852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.886856][T14865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2290'. [ 329.341562][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2296'. [ 329.350722][T14886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2296'. [ 330.077796][T14875] vlan0: entered promiscuous mode [ 330.418344][T14899] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2300'. [ 330.722846][T14918] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2304'. [ 331.261013][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2312'. [ 331.331266][T14930] "syz.0.2311" (14930) uses obsolete ecb(arc4) skcipher [ 331.655102][ T30] audit: type=1107 audit(1756614317.961:7): pid=14955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='j」ルツ`Thl\エテハO(、ウ.Z゚シ」-|ニ`x>f-- /ィD⌒CfヒネラJル JYOキh-E蝌>メ' [ 331.687076][T14958] netlink: 'syz.2.2317': attribute type 1 has an invalid length. [ 331.695007][T14958] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2317'. [ 331.742104][ T30] audit: type=1107 audit(1756614317.961:8): pid=14955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='j」ルツ`Thl\エテハO(、ウ.Z゚シ」-|ニ`x>f-- /ィD⌒CfヒネラJル JYOキh-E蝌>メ' [ 331.828087][ T30] audit: type=1107 audit(1756614317.961:9): pid=14955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='j」ルツ`Thl\エテハO(、ウ.Z゚シ」-|ニ`x>f-- /ィD⌒CfヒネラJル JYOキh-E蝌>メ' [ 331.851942][T14959] syzkaller0: entered promiscuous mode [ 331.857721][T14959] syzkaller0: entered allmulticast mode [ 331.870317][ T30] audit: type=1107 audit(1756614317.961:10): pid=14955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='j」ルツ`Thl\エテハO(、ウ.Z゚シ」-|ニ`x>f-- /ィD⌒CfヒネラJル JYOキh-E蝌>メ' [ 331.888801][T14962] syz_tun: entered allmulticast mode [ 331.909029][ T30] audit: type=1107 audit(1756614317.961:11): pid=14955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='j」ルツ`Thl\エテハO(、ウ.Z゚シ」-|ニ`x>f-- /ィD⌒CfヒネラJル JYOキh-E蝌>メ' [ 331.926686][T14962] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 331.959704][ T30] audit: type=1107 audit(1756614317.961:12): pid=14955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='j」ルツ`Thl\エテハO(、ウ.Z゚シ」-|ニ`x>f-- /ィD⌒CfヒネラJル JYOキh-E蝌>メ' [ 331.980428][T14965] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2318'. [ 332.025946][ T30] audit: type=1107 audit(1756614317.961:13): pid=14955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='j」ルツ`Thl\エテハO(、ウ.Z゚シ」-|ニ`x>f-- /ィD⌒CfヒネラJル JYOキh-E蝌>メ' [ 332.125262][ T30] audit: type=1107 audit(1756614317.961:14): pid=14955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='j」ルツ`Thl\エテハO(、ウ.Z゚シ」-|ニ`x>f-- /ィD⌒CfヒネラJル JYOキh-E蝌>メ' [ 332.184897][ T30] audit: type=1107 audit(1756614317.961:15): pid=14955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='j」ルツ`Thl\エテハO(、ウ.Z゚シ」-|ニ`x>f-- /ィD⌒CfヒネラJル JYOキh-E蝌>メ' [ 332.223735][ T30] audit: type=1107 audit(1756614317.961:16): pid=14955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='j」ルツ`Thl\エテハO(、ウ.Z゚シ」-|ニ`x>f-- /ィD⌒CfヒネラJル JYOキh-E蝌>メ' [ 332.346854][T14977] netlink: 'syz.1.2321': attribute type 8 has an invalid length. [ 332.584907][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 334.256605][T15006] vlan3: entered allmulticast mode [ 334.261916][T15006] bridge_slave_0: entered allmulticast mode [ 334.328701][T15019] xfrm0: entered promiscuous mode [ 334.333870][T15019] xfrm0: entered allmulticast mode [ 334.566112][T15031] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2337'. [ 334.637733][T15035] netlink: 'syz.4.2339': attribute type 10 has an invalid length. [ 334.637733][T15036] netlink: 'syz.4.2339': attribute type 10 has an invalid length. [ 334.638513][T15035] bond0: (slave wlan1): Opening slave failed [ 334.711326][T15036] bond0: (slave wlan1): Opening slave failed [ 334.949059][T15053] siw: device registration error -23 [ 334.988491][T15057] netlink: 'syz.1.2345': attribute type 1 has an invalid length. [ 335.031840][T15057] 8021q: adding VLAN 0 to HW filter on device bond9 [ 335.048352][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2345'. [ 335.089600][T15057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2345'. [ 335.119276][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2350'. [ 335.129990][T15068] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2350'. [ 335.183592][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2350'. [ 335.282818][T15058] veth13: entered promiscuous mode [ 335.361890][T15058] bond9: (slave veth13): Enslaving as an active interface with a down link [ 335.382718][T15073] syzkaller0: entered promiscuous mode [ 335.395331][T15073] syzkaller0: entered allmulticast mode [ 335.416405][T15071] bond8: (slave erspan0): Releasing active interface [ 335.482111][T15071] bond9: (slave erspan0): making interface the new active one [ 335.508347][T15071] erspan0: entered promiscuous mode [ 335.514235][T15071] bond9: (slave erspan0): Enslaving as an active interface with an up link [ 335.724475][T15092] openvswitch: netlink: Tunnel attr 3 has unexpected len 264 expected 1 [ 335.747850][T15087] can: request_module (can-proto-0) failed. [ 335.864058][T15101] netlink: 'syz.2.2356': attribute type 1 has an invalid length. [ 335.991349][T15111] tipc: Enabling of bearer <電p:s> rejected, media not registered [ 337.345152][T15149] lo speed is unknown, defaulting to 1000 [ 337.638343][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2377'. [ 337.668011][T15175] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 337.713947][T15181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2378'. [ 337.931073][T15185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2379'. [ 338.163301][T15197] bond0: Device is already in use. [ 338.595392][T15206] netlink: 'syz.1.2384': attribute type 10 has an invalid length. [ 338.669666][T15206] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2384'. [ 338.719651][T15206] bond0: entered promiscuous mode [ 338.734226][T15206] batadv0: entered promiscuous mode [ 338.787953][T15206] bond0: entered allmulticast mode [ 338.801030][T15206] batadv0: entered allmulticast mode [ 338.835617][T15206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.845497][T15206] bridge0: port 1(bond0) entered blocking state [ 338.852052][T15206] bridge0: port 1(bond0) entered disabled state [ 338.866833][T15206] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 339.109952][T15236] tipc: Enabling of bearer <電p:s> rejected, media not registered [ 339.169679][T15239] pim6reg: entered allmulticast mode [ 339.189807][T15239] netlink: 'syz.0.2393': attribute type 1 has an invalid length. [ 339.272217][T15239] gretap3: entered allmulticast mode [ 339.287011][T15239] bond5: (slave gretap3): making interface the new active one [ 339.301754][T15239] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 339.333540][T15239] pim6reg: left allmulticast mode [ 339.649920][T15263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2401'. [ 339.684221][T15263] bridge0: port 1(macvlan0) entered blocking state [ 339.697668][T15263] bridge0: port 1(macvlan0) entered disabled state [ 339.704528][T15263] macvlan0: entered allmulticast mode [ 339.713006][T15263] bridge0: entered allmulticast mode [ 339.723900][T15263] macvlan0: left allmulticast mode [ 339.729832][T15263] bridge0: left allmulticast mode [ 339.968457][T15285] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2407'. [ 340.034230][T15285] gretap0: entered promiscuous mode [ 340.309085][T15266] lo speed is unknown, defaulting to 1000 [ 340.323468][T15297] siw: device registration error -23 [ 340.469630][T15305] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2411'. [ 340.501834][T15305] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2411'. [ 341.069836][T15316] netlink: 'syz.4.2414': attribute type 21 has an invalid length. [ 341.089810][T15316] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2414'. [ 341.189496][T15316] netlink: 'syz.4.2414': attribute type 4 has an invalid length. [ 341.210930][T15316] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2414'. [ 341.543324][T15330] tipc: Enabling of bearer <電p:s> rejected, media not registered [ 341.592678][T15326] syzkaller0: entered promiscuous mode [ 341.621239][T15326] syzkaller0: entered allmulticast mode [ 341.671759][T15326] tipc: Enabled bearer , priority 0 [ 341.713691][T15326] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 341.902069][T15340] tipc: Resetting bearer [ 341.931600][T15325] tipc: Resetting bearer [ 341.996400][T15325] tipc: Disabling bearer [ 342.142659][T15368] netlink: 'syz.4.2426': attribute type 21 has an invalid length. [ 342.468228][T15387] netlink: 'syz.0.2431': attribute type 1 has an invalid length. [ 342.562164][T15386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.622028][T15397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.640792][T15394] netlink: 'syz.2.2434': attribute type 39 has an invalid length. [ 342.687319][T15401] tipc: Enabling of bearer rejected, already enabled [ 342.892148][T15415] tipc: Enabling of bearer <電p:s> rejected, media not registered [ 342.977429][T15419] netlink: 'syz.0.2443': attribute type 4 has an invalid length. [ 343.780776][T15447] netlink: 'syz.1.2448': attribute type 3 has an invalid length. [ 343.813176][T15447] __nla_validate_parse: 6 callbacks suppressed [ 343.813193][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2448'. [ 343.865114][T15452] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2449'. [ 343.895386][T15454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2450'. [ 343.951505][T15456] netlink: 'syz.2.2451': attribute type 4 has an invalid length. [ 344.244514][T15429] lo speed is unknown, defaulting to 1000 [ 344.371975][T15460] macvtap1: entered allmulticast mode [ 344.382659][T15460] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 344.393230][T15460] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 344.409215][T15477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.919345][T15458] lo speed is unknown, defaulting to 1000 [ 345.363817][T15501] syzkaller0: entered promiscuous mode [ 345.370054][T15501] syzkaller0: entered allmulticast mode [ 345.377475][T15475] lo speed is unknown, defaulting to 1000 [ 346.685505][T15510] lo speed is unknown, defaulting to 1000 [ 346.690427][T15550] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 346.716104][ T9264] erspan0: left promiscuous mode [ 346.722088][T15548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2481'. [ 346.789113][T15553] netlink: 'syz.2.2482': attribute type 13 has an invalid length. [ 346.805034][T15553] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2482'. [ 346.972830][T15566] netlink: 'syz.0.2486': attribute type 12 has an invalid length. [ 346.995854][T15566] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2486'. [ 347.061787][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2484'. [ 347.079860][T15562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2484'. [ 347.146274][T15562] gtp0: entered promiscuous mode [ 347.333367][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2487'. [ 347.343127][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2487'. [ 347.352855][T15576] gretap0: left promiscuous mode [ 347.363843][T15576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.385542][ T6065] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 347.495751][T15581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.685548][T15587] netlink: 'syz.0.2493': attribute type 8 has an invalid length. [ 347.711680][T15589] netlink: 'syz.0.2493': attribute type 8 has an invalid length. [ 347.808353][T15556] lo speed is unknown, defaulting to 1000 [ 347.954396][T15511] lo speed is unknown, defaulting to 1000 [ 348.126243][T15592] netlink: 'syz.0.2494': attribute type 13 has an invalid length. [ 348.143988][T15592] netlink: 'syz.0.2494': attribute type 17 has an invalid length. [ 348.173516][T15592] syz_tun: left allmulticast mode [ 348.202829][T15592] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 348.350279][ T6065] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 348.541817][T15601] netlink: 'syz.1.2497': attribute type 1 has an invalid length. [ 348.657855][T15601] 8021q: adding VLAN 0 to HW filter on device bond10 [ 348.711681][T15603] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 348.737060][T15603] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 348.752889][T15603] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 348.869673][T15604] gretap3: entered promiscuous mode [ 348.900966][T15596] lo speed is unknown, defaulting to 1000 [ 349.309197][T15616] __nla_validate_parse: 18 callbacks suppressed [ 349.309216][T15616] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2498'. [ 349.641402][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2501'. [ 349.864874][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 350.172777][T15652] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2512'. [ 350.191667][T15655] netlink: 'syz.2.2511': attribute type 21 has an invalid length. [ 350.199920][T15655] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2511'. [ 350.263206][T15658] netlink: 'syz.1.2510': attribute type 13 has an invalid length. [ 350.306484][T15658] netlink: 'syz.1.2510': attribute type 17 has an invalid length. [ 350.353269][T15658] erspan0: left allmulticast mode [ 350.403622][T15658] bond0: left promiscuous mode [ 350.427744][T15658] batadv0: left promiscuous mode [ 350.433130][T15658] bond0: left allmulticast mode [ 350.443530][T15658] batadv0: left allmulticast mode [ 350.452420][T15658] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.484407][T15673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.586594][T15658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 350.607541][ T6065] lo speed is unknown, defaulting to 1000 [ 350.636075][ T6065] syz2: Port: 1 Link ACTIVE [ 350.749537][T15678] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2520'. [ 351.045845][T15666] lo speed is unknown, defaulting to 1000 [ 351.250332][T15708] netlink: 'syz.0.2527': attribute type 1 has an invalid length. [ 351.264799][T15702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2526'. [ 351.273879][T15702] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2526'. [ 351.292761][T15710] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2525'. [ 351.401463][T15708] 8021q: adding VLAN 0 to HW filter on device bond6 [ 351.471854][T15714] vlan0: entered promiscuous mode [ 351.494635][T15714] bond6: entered promiscuous mode [ 351.510072][T15714] vlan0: entered allmulticast mode [ 351.522858][T15714] bond6: entered allmulticast mode [ 351.524955][T15722] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 351.556418][T15717] batadv0: entered promiscuous mode [ 351.676021][T15708] bond6: (slave gretap4): making interface the new active one [ 351.683659][T15708] gretap4: entered promiscuous mode [ 351.689289][T15708] gretap4: entered allmulticast mode [ 351.697515][T15708] [ 351.699863][T15708] ====================================================== [ 351.706918][T15708] WARNING: possible circular locking dependency detected [ 351.713952][T15708] syzkaller #0 Not tainted [ 351.718420][T15708] ------------------------------------------------------ [ 351.725424][T15708] syz.0.2527/15708 is trying to acquire lock: [ 351.731468][T15708] ffff88807637af30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 351.740505][T15708] [ 351.740505][T15708] but task is already holding lock: [ 351.747848][T15708] ffff888056675158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 351.757676][T15708] [ 351.757676][T15708] which lock already depends on the new lock. [ 351.757676][T15708] [ 351.768065][T15708] [ 351.768065][T15708] the existing dependency chain (in reverse order) is: [ 351.777061][T15708] [ 351.777061][T15708] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 351.785305][T15708] lock_acquire+0x120/0x360 [ 351.790319][T15708] _raw_spin_lock+0x2e/0x40 [ 351.795328][T15708] sch_direct_xmit+0x153/0x4b0 [ 351.800598][T15708] __dev_queue_xmit+0x1857/0x3b50 [ 351.806153][T15708] hsr_forward_skb+0x158b/0x2860 [ 351.811596][T15708] hsr_dev_xmit+0x1a5/0x220 [ 351.816603][T15708] dev_hard_start_xmit+0x2d7/0x830 [ 351.822219][T15708] __dev_queue_xmit+0x1b8d/0x3b50 [ 351.827750][T15708] ip6_finish_output2+0xfb3/0x1480 [ 351.833366][T15708] ip6_output+0x340/0x550 [ 351.838199][T15708] NF_HOOK+0x9e/0x380 [ 351.842688][T15708] mld_sendpack+0x8d4/0xe60 [ 351.847788][T15708] mld_ifc_work+0x83e/0xd60 [ 351.852809][T15708] process_scheduled_works+0xae1/0x17b0 [ 351.858855][T15708] worker_thread+0x8a0/0xda0 [ 351.863949][T15708] kthread+0x70e/0x8a0 [ 351.868520][T15708] ret_from_fork+0x3f9/0x770 [ 351.873614][T15708] ret_from_fork_asm+0x1a/0x30 [ 351.878885][T15708] [ 351.878885][T15708] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 351.886628][T15708] validate_chain+0xb9b/0x2140 [ 351.891900][T15708] __lock_acquire+0xab9/0xd20 [ 351.897086][T15708] lock_acquire+0x120/0x360 [ 351.902095][T15708] _raw_spin_lock_bh+0x36/0x50 [ 351.907365][T15708] hsr_dev_xmit+0x19a/0x220 [ 351.912378][T15708] dev_hard_start_xmit+0x2d7/0x830 [ 351.917995][T15708] __dev_queue_xmit+0x1b8d/0x3b50 [ 351.923523][T15708] NF_HOOK+0x310/0x3a0 [ 351.928105][T15708] arp_xmit+0x16c/0x270 [ 351.932764][T15708] arp_solicit+0xc1d/0xe60 [ 351.937705][T15708] __neigh_event_send+0xf70/0x1560 [ 351.943336][T15708] neigh_resolve_output+0x198/0x750 [ 351.949042][T15708] ip_finish_output2+0xd40/0x1160 [ 351.954576][T15708] ip_output+0x29f/0x450 [ 351.959329][T15708] iptunnel_xmit+0x5f8/0xa90 [ 351.964516][T15708] ip_tunnel_xmit+0x1c41/0x2390 [ 351.969874][T15708] gre_tap_xmit+0x590/0x7a0 [ 351.974892][T15708] dev_hard_start_xmit+0x2d7/0x830 [ 351.980508][T15708] sch_direct_xmit+0x241/0x4b0 [ 351.985780][T15708] __dev_queue_xmit+0x1857/0x3b50 [ 351.991309][T15708] alb_send_lp_vid+0x324/0x510 [ 351.996579][T15708] alb_send_learning_packets+0x10d/0x2c0 [ 352.002721][T15708] alb_fasten_mac_swap+0x665/0xfa0 [ 352.008339][T15708] bond_alb_handle_active_change+0xc10/0xec0 [ 352.014836][T15708] bond_change_active_slave+0x1048/0x3770 [ 352.021085][T15708] bond_select_active_slave+0x8e2/0xd00 [ 352.027143][T15708] bond_enslave+0x229c/0x3a20 [ 352.032333][T15708] do_set_master+0x533/0x6d0 [ 352.037519][T15708] rtnl_newlink_create+0x677/0xb00 [ 352.043134][T15708] rtnl_newlink+0x16d6/0x1c70 [ 352.048309][T15708] rtnetlink_rcv_msg+0x7cf/0xb70 [ 352.053757][T15708] netlink_rcv_skb+0x208/0x470 [ 352.059044][T15708] netlink_unicast+0x82c/0x9e0 [ 352.064317][T15708] netlink_sendmsg+0x805/0xb30 [ 352.069584][T15708] __sock_sendmsg+0x21c/0x270 [ 352.074769][T15708] ____sys_sendmsg+0x505/0x830 [ 352.080062][T15708] ___sys_sendmsg+0x21f/0x2a0 [ 352.085243][T15708] __x64_sys_sendmsg+0x19b/0x260 [ 352.090683][T15708] do_syscall_64+0xfa/0x3b0 [ 352.095688][T15708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.102082][T15708] [ 352.102082][T15708] other info that might help us debug this: [ 352.102082][T15708] [ 352.112293][T15708] Possible unsafe locking scenario: [ 352.112293][T15708] [ 352.119724][T15708] CPU0 CPU1 [ 352.125069][T15708] ---- ---- [ 352.130412][T15708] lock(&qdisc_xmit_lock_key#4); [ 352.135429][T15708] lock(&hsr->seqnr_lock); [ 352.142433][T15708] lock(&qdisc_xmit_lock_key#4); [ 352.149968][T15708] lock(&hsr->seqnr_lock); [ 352.154455][T15708] [ 352.154455][T15708] *** DEADLOCK *** [ 352.154455][T15708] [ 352.162579][T15708] 9 locks held by syz.0.2527/15708: [ 352.167758][T15708] #0: ffffffff8fa53320 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 352.177254][T15708] #1: ffffffff8f538d48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 352.186284][T15708] #2: ffffffff8e139f40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 352.196210][T15708] #3: ffff888055341258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50 [ 352.208814][T15708] #4: ffff888056675158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 352.219085][T15708] #5: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 352.227949][T15708] #6: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160 [ 352.237681][T15708] #7: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 352.246452][T15708] #8: ffffffff8e139f40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 352.256380][T15708] [ 352.256380][T15708] stack backtrace: [ 352.262251][T15708] CPU: 0 UID: 0 PID: 15708 Comm: syz.0.2527 Not tainted syzkaller #0 PREEMPT(full) [ 352.262269][T15708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 352.262278][T15708] Call Trace: [ 352.262285][T15708] [ 352.262293][T15708] dump_stack_lvl+0x189/0x250 [ 352.262313][T15708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.262327][T15708] ? __pfx__printk+0x10/0x10 [ 352.262346][T15708] ? print_lock_name+0xde/0x100 [ 352.262365][T15708] print_circular_bug+0x2ee/0x310 [ 352.262382][T15708] check_noncircular+0x134/0x160 [ 352.262398][T15708] validate_chain+0xb9b/0x2140 [ 352.262412][T15708] ? __lock_acquire+0xab9/0xd20 [ 352.262430][T15708] ? skb_network_protocol+0x508/0x760 [ 352.262446][T15708] ? is_bpf_text_address+0x26/0x2b0 [ 352.262466][T15708] ? __pfx_skb_network_protocol+0x10/0x10 [ 352.262483][T15708] __lock_acquire+0xab9/0xd20 [ 352.262502][T15708] ? hsr_dev_xmit+0x19a/0x220 [ 352.262518][T15708] lock_acquire+0x120/0x360 [ 352.262534][T15708] ? hsr_dev_xmit+0x19a/0x220 [ 352.262551][T15708] ? __pfx_netif_skb_features+0x10/0x10 [ 352.262566][T15708] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 352.262586][T15708] ? hsr_dev_xmit+0x19a/0x220 [ 352.262602][T15708] _raw_spin_lock_bh+0x36/0x50 [ 352.262619][T15708] ? hsr_dev_xmit+0x19a/0x220 [ 352.262634][T15708] hsr_dev_xmit+0x19a/0x220 [ 352.262652][T15708] dev_hard_start_xmit+0x2d7/0x830 [ 352.262673][T15708] __dev_queue_xmit+0x1b8d/0x3b50 [ 352.262689][T15708] ? arp_send_dst+0xa5/0x340 [ 352.262704][T15708] ? arp_solicit+0xc1d/0xe60 [ 352.262720][T15708] ? __neigh_event_send+0xf70/0x1560 [ 352.262741][T15708] ? __dev_queue_xmit+0x27b/0x3b50 [ 352.262756][T15708] ? do_set_master+0x533/0x6d0 [ 352.262769][T15708] ? rtnl_newlink_create+0x677/0xb00 [ 352.262782][T15708] ? rtnl_newlink+0x16d6/0x1c70 [ 352.262793][T15708] ? netlink_rcv_skb+0x208/0x470 [ 352.262806][T15708] ? netlink_unicast+0x82c/0x9e0 [ 352.262823][T15708] ? __sock_sendmsg+0x21c/0x270 [ 352.262855][T15708] ? ____sys_sendmsg+0x505/0x830 [ 352.262868][T15708] ? ___sys_sendmsg+0x21f/0x2a0 [ 352.262881][T15708] ? __x64_sys_sendmsg+0x19b/0x260 [ 352.262894][T15708] ? do_syscall_64+0xfa/0x3b0 [ 352.262908][T15708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.262922][T15708] ? __pfx___dev_queue_xmit+0x10/0x10 [ 352.262943][T15708] ? __lock_acquire+0xab9/0xd20 [ 352.262968][T15708] ? NF_HOOK+0x9e/0x3a0 [ 352.262984][T15708] NF_HOOK+0x310/0x3a0 [ 352.263001][T15708] ? __pfx_arp_xmit_finish+0x10/0x10 [ 352.263016][T15708] ? NF_HOOK+0x9e/0x3a0 [ 352.263031][T15708] ? __pfx_NF_HOOK+0x10/0x10 [ 352.263047][T15708] ? arp_xmit+0x23/0x270 [ 352.263067][T15708] arp_xmit+0x16c/0x270 [ 352.263081][T15708] ? arp_xmit+0x23/0x270 [ 352.263098][T15708] arp_solicit+0xc1d/0xe60 [ 352.263116][T15708] ? arp_solicit+0x11a/0xe60 [ 352.263133][T15708] ? __pfx_arp_solicit+0x10/0x10 [ 352.263153][T15708] ? __neigh_event_send+0xf08/0x1560 [ 352.263172][T15708] ? __pfx_arp_solicit+0x10/0x10 [ 352.263188][T15708] __neigh_event_send+0xf70/0x1560 [ 352.263210][T15708] neigh_resolve_output+0x198/0x750 [ 352.263229][T15708] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 352.263249][T15708] ip_finish_output2+0xd40/0x1160 [ 352.263265][T15708] ? ip_skb_dst_mtu+0x18d/0xb70 [ 352.263282][T15708] ? ip_finish_output2+0x452/0x1160 [ 352.263299][T15708] ? __pfx_ip_finish_output2+0x10/0x10 [ 352.263315][T15708] ? ip_skb_dst_mtu+0x18d/0xb70 [ 352.263330][T15708] ? ip_skb_dst_mtu+0x917/0xb70 [ 352.263345][T15708] ? ip_finish_output+0x33a/0x3f0 [ 352.263362][T15708] ip_output+0x29f/0x450 [ 352.263376][T15708] ? ip_output+0x5b/0x450 [ 352.263391][T15708] iptunnel_xmit+0x5f8/0xa90 [ 352.263416][T15708] ip_tunnel_xmit+0x1c41/0x2390 [ 352.263442][T15708] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 352.263457][T15708] ? gre_build_header+0x3fd/0xa40 [ 352.263475][T15708] ? __pfx_gre_build_header+0x10/0x10 [ 352.263494][T15708] ? iptunnel_handle_offloads+0x2fd/0x630 [ 352.263510][T15708] gre_tap_xmit+0x590/0x7a0 [ 352.263527][T15708] ? __pfx_gre_tap_xmit+0x10/0x10 [ 352.263540][T15708] ? __lock_acquire+0xab9/0xd20 [ 352.263561][T15708] dev_hard_start_xmit+0x2d7/0x830 [ 352.263582][T15708] sch_direct_xmit+0x241/0x4b0 [ 352.263603][T15708] ? __pfx_sch_direct_xmit+0x10/0x10 [ 352.263620][T15708] ? netlink_rcv_skb+0x208/0x470 [ 352.263634][T15708] __dev_queue_xmit+0x1857/0x3b50 [ 352.263653][T15708] ? __dev_queue_xmit+0x27b/0x3b50 [ 352.263674][T15708] ? __pfx___dev_queue_xmit+0x10/0x10 [ 352.263690][T15708] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 352.263706][T15708] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 352.263725][T15708] ? __build_skb_around+0x257/0x3e0 [ 352.263744][T15708] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 352.263757][T15708] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 352.263776][T15708] ? alb_send_lp_vid+0x139/0x510 [ 352.263794][T15708] alb_send_lp_vid+0x324/0x510 [ 352.263814][T15708] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 352.263833][T15708] ? __pfx_alb_set_slave_mac_addr+0x10/0x10 [ 352.263856][T15708] alb_send_learning_packets+0x10d/0x2c0 [ 352.263874][T15708] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 352.263893][T15708] ? alb_swap_mac_addr+0x221/0x320 [ 352.263909][T15708] ? dev_addr_check+0x20/0x250 [ 352.263925][T15708] alb_fasten_mac_swap+0x665/0xfa0 [ 352.263945][T15708] bond_alb_handle_active_change+0xc10/0xec0 [ 352.263964][T15708] ? __pfx_bond_alb_handle_active_change+0x10/0x10 [ 352.263981][T15708] ? __kasan_kmalloc+0x93/0xb0 [ 352.264002][T15708] ? __local_bh_enable_ip+0x12d/0x1c0 [ 352.264021][T15708] bond_change_active_slave+0x1048/0x3770 [ 352.264043][T15708] ? __pfx_bond_change_active_slave+0x10/0x10 [ 352.264058][T15708] ? __queue_work+0x102/0xfb0 [ 352.264074][T15708] ? __queue_work+0xc56/0xfb0 [ 352.264089][T15708] ? mod_delayed_work_on+0x128/0x200 [ 352.264103][T15708] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.264116][T15708] ? mod_delayed_work_on+0x1ac/0x200 [ 352.264131][T15708] ? netdev_change_features+0x8d/0xd0 [ 352.264152][T15708] bond_select_active_slave+0x8e2/0xd00 [ 352.264170][T15708] ? __pfx_bond_select_active_slave+0x10/0x10 [ 352.264185][T15708] ? __pfx_bond_set_carrier+0x10/0x10 [ 352.264201][T15708] ? netdev_is_rx_handler_busy+0x6e/0x140 [ 352.264217][T15708] ? __pfx_bond_handle_frame+0x10/0x10 [ 352.264233][T15708] bond_enslave+0x229c/0x3a20 [ 352.264259][T15708] ? __pfx_bond_enslave+0x10/0x10 [ 352.264280][T15708] ? __pfx___dev_notify_flags+0x10/0x10 [ 352.264299][T15708] ? mutex_is_locked+0x17/0x50 [ 352.264313][T15708] do_set_master+0x533/0x6d0 [ 352.264330][T15708] rtnl_newlink_create+0x677/0xb00 [ 352.264348][T15708] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 352.264363][T15708] ? __pfx___mutex_lock+0x10/0x10 [ 352.264381][T15708] ? ns_capable+0x8a/0xf0 [ 352.264394][T15708] rtnl_newlink+0x16d6/0x1c70 [ 352.264407][T15708] ? netlink_sendmsg+0x805/0xb30 [ 352.264424][T15708] ? __pfx_rtnl_newlink+0x10/0x10 [ 352.264444][T15708] ? kasan_quarantine_put+0xdd/0x220 [ 352.264459][T15708] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.264473][T15708] ? nlmon_xmit+0xb0/0x100 [ 352.264486][T15708] ? kmem_cache_free+0x18f/0x400 [ 352.264505][T15708] ? __local_bh_enable_ip+0x12d/0x1c0 [ 352.264517][T15708] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.264530][T15708] ? __local_bh_enable_ip+0x12d/0x1c0 [ 352.264542][T15708] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 352.264557][T15708] ? __dev_queue_xmit+0x27b/0x3b50 [ 352.264573][T15708] ? __dev_queue_xmit+0x27b/0x3b50 [ 352.264589][T15708] ? __dev_queue_xmit+0x27b/0x3b50 [ 352.264604][T15708] ? __dev_queue_xmit+0x1d79/0x3b50 [ 352.264621][T15708] ? __lock_acquire+0xab9/0xd20 [ 352.264648][T15708] ? __pfx_rtnl_newlink+0x10/0x10 [ 352.264659][T15708] rtnetlink_rcv_msg+0x7cf/0xb70 [ 352.264673][T15708] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 352.264684][T15708] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 352.264696][T15708] ? ref_tracker_free+0x63a/0x7d0 [ 352.264714][T15708] ? __asan_memcpy+0x40/0x70 [ 352.264727][T15708] ? __pfx_ref_tracker_free+0x10/0x10 [ 352.264748][T15708] netlink_rcv_skb+0x208/0x470 [ 352.264761][T15708] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 352.264774][T15708] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 352.264790][T15708] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.264805][T15708] netlink_unicast+0x82c/0x9e0 [ 352.264825][T15708] ? __pfx_netlink_unicast+0x10/0x10 [ 352.264848][T15708] ? netlink_sendmsg+0x642/0xb30 [ 352.264860][T15708] ? skb_put+0x11b/0x210 [ 352.264874][T15708] netlink_sendmsg+0x805/0xb30 [ 352.264890][T15708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.264905][T15708] ? aa_sock_msg_perm+0xf1/0x1d0 [ 352.264918][T15708] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 352.264933][T15708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.264946][T15708] __sock_sendmsg+0x21c/0x270 [ 352.264963][T15708] ____sys_sendmsg+0x505/0x830 [ 352.264980][T15708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.264998][T15708] ? import_iovec+0x74/0xa0 [ 352.265014][T15708] ___sys_sendmsg+0x21f/0x2a0 [ 352.265029][T15708] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.265055][T15708] ? __fget_files+0x2a/0x420 [ 352.265067][T15708] ? __fget_files+0x3a0/0x420 [ 352.265082][T15708] __x64_sys_sendmsg+0x19b/0x260 [ 352.265098][T15708] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.265116][T15708] ? rcu_is_watching+0x15/0xb0 [ 352.265131][T15708] ? do_syscall_64+0xbe/0x3b0 [ 352.265146][T15708] do_syscall_64+0xfa/0x3b0 [ 352.265159][T15708] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.265171][T15708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.265183][T15708] ? clear_bhb_loop+0x60/0xb0 [ 352.265198][T15708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.265211][T15708] RIP: 0033:0x7ff00e98ebe9 [ 352.265225][T15708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.265237][T15708] RSP: 002b:00007ff00f834038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.265252][T15708] RAX: ffffffffffffffda RBX: 00007ff00ebc5fa0 RCX: 00007ff00e98ebe9 [ 352.265263][T15708] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 352.265272][T15708] RBP: 00007ff00ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 352.265280][T15708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.265288][T15708] R13: 00007ff00ebc6038 R14: 00007ff00ebc5fa0 R15: 00007fff8f73e428 [ 352.265305][T15708] [ 353.282492][T15708] bond6: (slave gretap4): Enslaving as an active interface with an up link [ 353.294894][T15703] lo speed is unknown, defaulting to 1000 [ 353.307746][T15708] syz.0.2527 (15708) used greatest stack depth: 15656 bytes left [ 353.329426][T15730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2533'. [ 353.424847][T15728] lo speed is unknown, defaulting to 1000