last executing test programs: 3.887520991s ago: executing program 0 (id=4208): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'devgroup\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x18, 0x3, "0400"/20}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xfc}}, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000f40)={r2, 0xffffffffffffffff, 0x31, 0x0, @void}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r3}, 0xc) 2.792573147s ago: executing program 1 (id=4215): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002fff300851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000866000200f3ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff35}, 0x78) 2.677768819s ago: executing program 1 (id=4216): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x6, @broadcast, 0x4e24, 0x2, 'fo\x00', 0x12, 0x71, 0x79}, {@multicast2, 0x4e24, 0x1, 0x4, 0xffffffcd, 0x8000000}}, 0x44) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff9e4338bf2d1484dd6000318e00303a00fe880000000000000000000000000001ff020000000000000000000000000001020190780000000060000006da343a00ff01000000000000000000000100"/99], 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x22b7b6683ba65fec, 0x11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x6}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x814d, 0x0, 0x7, 0x401}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x20, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x4d}, {0x4, 0x2, [@TCA_HHF_QUANTUM={0x0, 0x2, 0xb53a}, @TCA_HHF_BACKLOG_LIMIT={0x0, 0x1, 0x20}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x5) 2.677498379s ago: executing program 3 (id=4217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x100}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x5}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x5}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xcb}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) 2.528662077s ago: executing program 1 (id=4219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd651", 0x9}, {&(0x7f0000000300)="051ae2b70000000000000000", 0xc}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x15, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000000, 0x39071, 0xffffffffffffffff, 0x65969000) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet(0x2, 0x2, 0x0) socket(0xa, 0x5, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) socket$kcm(0x21, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@cgroup=r7, r7, 0x2e}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="020000000400000008008bb4e1180eab996b0000f749e1124f7e5b24d59e44a7d082cadd2c994d3ecd012b01e89914983a0281d49d982362a04d86aaccab71f53f6e1ae84aa36b72b05ab3ef26db0517e6f5878c2249ae74ebcff6774a1104f32bfbfce7cfac6ac9b8cdd021af00b7d900000000000000", @ANYRES32=r6, @ANYBLOB="000200"/20, @ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="05000083959b989f03000000030000000000000000003487a4c90000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000006000000000000000300000018110000", @ANYRES32=r8, @ANYBLOB="000000000000c100b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000f4fe747255", @ANYRES32=r9, @ANYBLOB="0000000001000080180000000900000000000000040000000b960d0009000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.418217439s ago: executing program 3 (id=4221): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0xfffffffd, 0x25dfdbff, {{@in6=@mcast1, @in=@remote, 0x4e20, 0xb, 0xf7ff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x400000000000000, 0x300000000000000, 0xffffffffffffffff, 0x1000}, {0x1, 0x6, 0x80}, 0xfffffffc}, [@tmpl={0x144, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x0, 0x3c}, 0x0, @in6=@empty, 0x3502, 0x0, 0x2, 0x0, 0x0, 0xbd0}, {{@in6=@remote, 0x0, 0x3c}, 0xa, @in=@broadcast, 0xfffffffd, 0x1, 0x0, 0x0, 0x800, 0x800}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x0, 0x4, 0x8}, {{@in=@multicast2, 0x10000, 0x3c}, 0x0, @in6=@mcast2, 0x3504, 0x0, 0x2, 0x4, 0x0, 0xabb, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x0, @in=@local, 0x4, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) 2.237221643s ago: executing program 3 (id=4222): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010102}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x3b) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cf", 0x2}], 0x1}, 0x0) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)}, {&(0x7f0000000240)}, {&(0x7f0000000300)="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", 0xc9a}], 0x3}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000001000)=0xffffffffffffffff, 0x12) mkdirat$cgroup(r4, &(0x7f0000000080)='syz0\x00', 0x1ff) 2.109787054s ago: executing program 0 (id=4223): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) unshare(0x22020600) write$nci(r3, &(0x7f0000000140)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x2, @b={0x2, 0x2, 0x1, 0x3, {0x3, "20d9df"}}}, 0xc) write$cgroup_int(r2, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)={0x2c, r8, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', '\x00', "00000200", "b08068ebce17ab00"}, 0x28) setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r11 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xffffffa7}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x1f580}], 0x8}], 0x1, 0x20040800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000017000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000800"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.903085239s ago: executing program 4 (id=4224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x44004000) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x2, 0x6, 0x4}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004540000000c0a090000000000000000000a0000060900020073797a31000000000900010073797a310000000028000380180000800c00018006000100d103000008000340000000010c00008008000340000000022c0000000e0a010200000000000000000a0000000900020073797a31000000000900010073797a310000000014000000110001"], 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9bf8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b503020000000000850000008b000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000580080001401b008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.854224859s ago: executing program 2 (id=4225): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1, 0xffffffffffffffff, 0x60ff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5c00000030000504010000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000100000000000000000008000a0078563412", 0x5c}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x86, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256"}, 0x50) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000011c0)=@broute={'broute\x00', 0x20, 0x3, 0x4ea, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000cc0], 0x0, &(0x7f0000000540), &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"]}, 0x562) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0x6, 0x1, '\xfc\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4004) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x111, 0x4b4, 0x250, 0xd4feffff, 0x250, 0x20a, 0x278, 0x250, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [0x0, 0x0, 0xffffffff], [], 'ipvlan0\x00', 'veth0_macvtap\x00', {}, {}, 0x6, 0x1}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [0x10], 0x0, 0x0, 0xc2, 0xc}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @private1, [0x0, 0xfc97f2427bb8791, 0xff, 0xff], [0xff000000, 0xff000000, 0xff], 'bridge_slave_0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x8, 0x4, 0x20}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0xa, 0x2c], 0x6, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x24, r9, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 1.733832482s ago: executing program 0 (id=4226): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002fff300851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000f66000200f3ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff35}, 0x78) 1.715177141s ago: executing program 1 (id=4227): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000016940)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[@iv={0x18}], 0x18, 0x10}], 0x1, 0x20004010) socket$rds(0x15, 0x5, 0x0) socket$inet6(0xa, 0x80000, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f0000000180)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x95, 0x80000000, 0x4, @remote, @local, 0x0, 0x700, 0x1, 0x7}}) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000300)=r6) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) (async) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) shutdown(r0, 0x1) 1.649108771s ago: executing program 4 (id=4228): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="180200000200000000000000000000008500000087000000180100002020702500400000002020207b1af8ff00000000bfa100000000000007010000f80500000085000000750000009500"/89], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2f, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r4, 0x0, 0x0}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03a0005) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000008500000005"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000041000701fefeffff0000000001b7da63ef56c13cd221c1117c0000968677f55ce66bbd5608004280040008000c00018008000300ac14143304000280"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000001000000040000e50000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r9, 0x602, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20011}, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$tipc(r10, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x1}}, 0x10) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="2f0000000000000000001a10f3ce9cda85d4bedde6caf009b100007e873592072e8ba300b313beeca42e385304b275cea70df976496de013a400ac60c49ede64240e5a9390e60b", @ANYRES64=r3, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r13 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000000c00)={'ip6_vti0\x00', 0x0}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000340), 0x4) (async) r15 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r14, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r15, r11, 0x4, r12}, 0x10) 1.518993973s ago: executing program 0 (id=4229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r5, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x50) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x5}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) 1.318600198s ago: executing program 4 (id=4230): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) 1.265820546s ago: executing program 2 (id=4231): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0ea}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x4050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[], 0x18, 0x4000025}, 0x4) 1.157883043s ago: executing program 3 (id=4232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x100}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x5}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x5}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xcb}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) 1.131568401s ago: executing program 4 (id=4233): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0xfffffffd, 0x25dfdbff, {{@in6=@mcast1, @in=@remote, 0x4e20, 0xb, 0xf7ff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x400000000000000, 0x400000000000000, 0xffffffffffffffff, 0x1000}, {0x1, 0x6, 0x80}, 0xfffffffc}, [@tmpl={0x144, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x0, 0x3c}, 0x0, @in6=@empty, 0x3502, 0x0, 0x2, 0x0, 0x0, 0xbd0}, {{@in6=@remote, 0x0, 0x3c}, 0xa, @in=@broadcast, 0xfffffffd, 0x1, 0x0, 0x0, 0x800, 0x800}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x0, 0x4, 0x8}, {{@in=@multicast2, 0x10000, 0x3c}, 0x0, @in6=@mcast2, 0x3504, 0x0, 0x2, 0x4, 0x0, 0xabb, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x0, @in=@local, 0x4, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) 1.069714628s ago: executing program 0 (id=4234): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002440), 0x400, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000001540)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005a80)=ANY=[@ANYBLOB="38000000030101040000000000000000020000002400018014000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x2004c090}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x810, r0, 0x905f3000) r6 = socket(0x28, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000000)={r6}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r9, 0x0, 0x0, 0x4040081) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000000840)=[@in={0x2, 0x4e20, @empty}], 0x10) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x23, &(0x7f0000000200), &(0x7f0000000080)=0x14) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000240)={0x1, 0x3}, 0x8) 980.240587ms ago: executing program 2 (id=4235): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe703, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x11, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415a"]}]}, 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 924.394152ms ago: executing program 4 (id=4236): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000001500"/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x3d, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x42, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0xffffffff, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff, 0x10000000}, {}, {0x0, 0x0, 0xc, 0x7, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x28e, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x100000, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x6, 0x3}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xcb}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0xfffffffe}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0x4e}, {0x0, 0x54e4}, {0x0, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, {}, {0x2f, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x0, 0x2, 0xfffffffd, 0x80000, 0x3}, {}, {0x800000, 0x9, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x80}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x8}, {0x7f, 0x0, 0xfffffffe, 0xfffffffe}, {}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x8, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x80000000, 0x0, 0x7619, 0x0, 0x101}, {0x5, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7, 0x7f53}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x3, 0x0, 0x0, 0x0, 0xffffffff}], [{0x3}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x2, 0x1}, {}, {}, {0x1}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {0x749eb9ae44d9651f}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {0x3}, {}, {0x1}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x8, 0x1}, {}, {0x1}, {0x4}, {}, {0x0, 0x1}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x6}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=""/135, 0x87}, 0x40002101) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) 840.029547ms ago: executing program 0 (id=4237): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x80010, 0xffffffffffffffff, 0x32cc0000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000002580), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0xd, 0x0, 0x0, @void, @value=0x0}, 0x20) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f00000000c0)=0x48) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f00000002c0), 0x0, 0x48000000) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r2) 758.783265ms ago: executing program 3 (id=4238): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000f0000000000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x48850) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x65, 0x24, 0x1, 0x70bd2c, 0x25cfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfffb}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmmsg$inet6(r1, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="bb2b4e2bfc", 0x5}], 0x1}}], 0x1, 0x40000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xf0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) (rerun: 64) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @remote}, &(0x7f0000000040)=0xc) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private1, 0xfffffff2, 0x6, 0x4, 0x100, 0xffff, 0x42200040, r4}) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f00000000c0)={0x7, 0x7fffffff, 0x3}, 0xc) (async, rerun: 32) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0xbc}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7}, &(0x7f0000000240), &(0x7f0000000440)=r3}, 0x20) 709.514719ms ago: executing program 4 (id=4239): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x22400, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r7 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e40)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r8, {0x0, 0xfff0}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x24040812) (async) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) (async) r9 = socket(0x2b, 0x2, 0x8) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r10, 0x1, 0x2, &(0x7f0000000180)=0x5, 0x4) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400ecff0f00ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021200000240012800c0001006d6163766c616e001400028008000300030000000800010010"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) (async, rerun: 32) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x4000040) (async) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0xfc) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a3200000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) (async, rerun: 32) r11 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001c40)=ANY=[@ANYBLOB="280200001900010028bd7000fbdbdf251d0109004d0012803ffdf3f2028171a6fb780a54fe018b5e82a822e5be67607d02c08f034e3aabd5f926e2842504a4a6730c084a8dcec83fcf6d647b65c23e2635a87bf4a5d212e1d82a73e32decc319a8000000c4010680c001a980bc013e80b801a080b4016180ad016d8064c4f39e5a8bf7075598bed7433f839921ccb03fb134a3b196876b70baaea4163118d077a7e0c1765cd03b31b27bfb1b8d8138c1c584d2066b2debf8b0b310db4b1aef425b66f463d2f23ee796064df7fac114a0d9ca2097d33b1dfb5369ea375274b26a37efe91391b87c5a763ba6a10ca54e642ffee3da1555dbe57943a68eee57a34b919b1ebf67bf4f9a67ac2082d00133deee8390a60bd3d9d48ce63c9ec71edb076c4aaf095b37733ffc9a7ce489d95a02cd9e8eddd7fd08e232ec86427c0caa96a3bf474c6f32e52c8976edd923a1822f9875aad4354cfd64044d120c74c21d9a40996ef7d5a5d399c33fa456ee7fc04879ce2d7fe25d9e6290e949c0a01fdb9d6d7883c0cf8e2d2f5e00f595446f2eb3e40fde2c5cc9dbf89b82e12caf127efd51229c3c367add8b7adf83fa45819add7c8fcbaf429a7efb8e6a6e0bc45f08245708af8e78e7ad2b3497fb84159756916dd9d2972c6b10619df7d413a2048dcec7ef5b8225cbbe261f66fc5f96611b63617294d5438f14d71891faeb142628f567cb6552b6d382544359ef0ad23c6ef69b4d56cb5cfe05019089dc9e5c523d59cca7f70487000000"], 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_DEL(r9, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x94, 0x3, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xd5f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x87}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8000000000000001}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x24005) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x14, 0x1, 0x4, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4d0}, 0x40011) 694.995101ms ago: executing program 1 (id=4240): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002fff300851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000001066000200f3ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff35}, 0x78) 646.677606ms ago: executing program 2 (id=4241): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x9, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x2}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x30, 0x61, 0x5f]}}, 0x0, 0x41}, 0x28) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_j1939(r2, &(0x7f0000001080)={0x1d, r4, 0x3, {0x2, 0xf0, 0x2}, 0xff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x17, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000006000000000000004300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fffe000085000000cb000003bf09000000000000550901000000008095000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005e0320008500000006010000bf91000000000000b7020000030000008500000084000000b70000000005000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x0, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000300012800b0001006d6163736563000020000280080005000d0000000c0001000001000000000000050003000800000008000500", @ANYRES64=r0], 0x58}, 0x1, 0x0, 0x0, 0x24008800}, 0x800) 389.377683ms ago: executing program 1 (id=4242): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x3}, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001580)={&(0x7f0000000340)={0x1218, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x107c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2d, 0x5, "98c9362435bafdd402dd8b3fdf370a62b29a3648b7761484469efc618f9f67aad7dd462e7cd3f57d35"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x583a8edc}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\(#\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x800}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x188, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x98, 0x5, "bac1d38c19c3abb77e6e3ee105d7e2af9d6eb7469b8c369c3f81d373adf37730c7642be5b2ece94a04f07b81671ea67e2853e613f20b60ff52dca5a15c2b6a68ca2a98f799ee811f28b7be31e1397d7dd2483d7a6f6e5c493f1cc32bf59150eb81f4d84398c1813bcce94010770b0a14081f8eff5cf9365746abc09d2766dc0bab5bfb8d4e4e9eaac1e8885335f708eeb899e6c4"}, @ETHTOOL_A_BITSET_MASK={0x80, 0x5, "3e1cfac404b4c6e23bf53f9fd7e2fe10d2aef598ff14d74ff182e42dde4552e2f4061de2c91e7118a05e3b29c6bc952a574cec5eb3ed0391f8b2552e099679749ef973efb3d48815c9b8b11c4c87e87d0e65e1d91c6c286356a14d0450a552ee4b4068205f589990ba768e7e95b3a836814d19e751075012f696a99d"}, @ETHTOOL_A_BITSET_VALUE={0x5b, 0x4, "a59dd93d15907d22fa3ad5911825339cbab8a0952241e03a2bedc17a41899607dc954d5b265255a6052033729a548f04897166b66c72b0991241981244c1a84fe2fa78d31b6b50411ee57cb3567dd26f3178271d805f61"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1218}}, 0x4000) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) socket$inet6_sctp(0xa, 0x6, 0x84) sendfile(r0, r5, 0x0, 0x20000000002) 389.213293ms ago: executing program 2 (id=4243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x81, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x1c786f53}]}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x8, &(0x7f0000000000)=[{0x0, 0xf9, 0x6b}, {0x6, 0xe, 0x2, 0xdcb}, {0x5, 0x0, 0x0, 0xd1}, {0x10, 0x9c, 0x10, 0x5}, {0x7, 0x5, 0x1, 0xfffff849}, {0x2, 0xc, 0xf, 0xbe7}, {0xf, 0x27, 0x7, 0x2}, {0xfff, 0x9, 0x40, 0x6}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000100)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 303.997923ms ago: executing program 3 (id=4244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x20}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x15, 0x5, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt(r3, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x5}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) 0s ago: executing program 2 (id=4245): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x4, 0xf58) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x62a01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}}, 0x0) write$tun(r3, &(0x7f0000001840)=ANY=[@ANYRES16=r2], 0x22) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, 0x0, 0xf371cc2a4cc195fb) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, 0x0, 0x4042) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="05000700040000000500080000000000"], 0x2c}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@gettaction={0x30, 0x32, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x30}}, 0x20004055) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r6, @ANYRES32=r4, @ANYBLOB="0300000000000000280012f5ffffff0076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22eca65c11}, 0x24040051) socket$netlink(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): _slave_0 [ 617.786863][T19579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.813875][T19579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.828663][T19579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.835856][T19579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.835892][T19579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.101428][T19579] hsr_slave_0: entered promiscuous mode [ 618.112441][T19579] hsr_slave_1: entered promiscuous mode [ 618.128438][T19579] debugfs: 'hsr0' already exists in 'hsr' [ 618.128494][T19579] Cannot create hsr debugfs directory [ 618.602037][ T4934] Bluetooth: hci1: command tx timeout [ 620.677182][ T4934] Bluetooth: hci1: command tx timeout [ 621.968541][T19791] kthread_run failed with err -4 [ 622.325085][T19803] netlink: 'syz.1.3271': attribute type 3 has an invalid length. [ 622.335694][T19804] netlink: 'syz.1.3271': attribute type 3 has an invalid length. [ 622.347785][T19844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3279'. [ 622.347903][T19844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3279'. [ 622.961714][T19860] ipvlan1: entered promiscuous mode [ 622.970351][T19860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3282'. [ 623.034626][T19860] ipvlan1 (unregistering): left promiscuous mode [ 623.990877][T19579] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 624.011028][T19579] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 624.013417][T19579] bridge0: port 1(netdevsim0) entered disabled state [ 624.320116][T19909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3292'. [ 625.019924][T19916] vxcan1: tx address claim with dest, not broadcast [ 625.149741][T19927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3296'. [ 625.262066][T19579] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 625.450566][T19579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 625.460041][T19579] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 625.825062][T19579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 625.836473][T19579] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 625.920951][T19579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 625.962397][T19579] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 626.032902][T19579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 626.473426][T19941] syzkaller0: entered promiscuous mode [ 626.479444][T19941] syzkaller0: entered allmulticast mode [ 626.770025][T19976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3302'. [ 631.734788][ T5620] Bluetooth: hci5: command 0x0406 tx timeout [ 632.016229][T19976] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 632.352268][T20049] tap0: tun_chr_ioctl cmd 1074025677 [ 632.368999][T20049] tap0: linktype set to 778 [ 632.448366][T20052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3307'. [ 632.493324][T20056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3309'. [ 632.554071][ T5637] bridge0: entered promiscuous mode [ 632.730090][T20068] netlink: 'syz.0.3311': attribute type 8 has an invalid length. [ 632.932092][T19579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.021483][T20075] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3312'. [ 633.083507][T19579] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.160915][T16412] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.161064][T16412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.228399][T20079] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3312'. [ 633.239976][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.240109][ T6916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.598761][T20092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3314'. [ 633.613531][T20086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3314'. [ 633.766472][T20097] bond1: entered promiscuous mode [ 633.766525][T20097] bond1: entered allmulticast mode [ 634.204532][T20107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3316'. [ 634.350581][T20107] 8021q: adding VLAN 0 to HW filter on device bond3 [ 634.366907][T20107] bridge0: port 3(bond3) entered blocking state [ 634.368715][T20107] bridge0: port 3(bond3) entered disabled state [ 634.368891][T20107] bond3: entered allmulticast mode [ 634.400501][T20107] bond3: entered promiscuous mode [ 634.405932][T20107] bridge0: port 3(bond3) entered blocking state [ 634.406053][T20107] bridge0: port 3(bond3) entered forwarding state [ 634.507760][T20114] bridge_slave_0: left allmulticast mode [ 634.507830][T20114] bridge_slave_0: left promiscuous mode [ 634.508068][T20114] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.556155][T20114] bridge_slave_1: left allmulticast mode [ 634.562051][T20114] bridge_slave_1: left promiscuous mode [ 634.570380][T20114] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.616177][T20114] bond0: (slave bond_slave_0): Releasing backup interface [ 634.648019][T20114] bond0: (slave bond_slave_1): Releasing backup interface [ 634.688309][T20114] team0: Port device team_slave_0 removed [ 634.718171][T20114] team0: Port device team_slave_1 removed [ 634.728393][T20114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.736274][T20114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.777438][T20114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.777489][T20114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.816706][T20114] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 634.865954][T20112] syzkaller1: entered promiscuous mode [ 634.866006][T20112] syzkaller1: entered allmulticast mode [ 634.909986][T20118] syzkaller0: entered promiscuous mode [ 634.910042][T20118] syzkaller0: entered allmulticast mode [ 635.148628][T16412] bridge0: port 3(bond3) entered disabled state [ 635.211816][T20141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.268950][T20141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.476112][T20165] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3325'. [ 637.290921][T20187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3328'. [ 637.463340][T19579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.857318][T19579] veth0_vlan: entered promiscuous mode [ 637.956924][T19579] veth1_vlan: entered promiscuous mode [ 638.129688][T19579] veth0_macvtap: entered promiscuous mode [ 638.144525][T20205] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3331'. [ 638.154077][T19579] veth1_macvtap: entered promiscuous mode [ 638.179006][T20205] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3331'. [ 638.234738][T19579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.242994][T20207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.268000][T20207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.379382][T19579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.445333][T20211] bridge_slave_0: left allmulticast mode [ 638.451195][T20211] bridge_slave_0: left promiscuous mode [ 638.460538][T20211] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.486257][T20211] bridge_slave_1: left allmulticast mode [ 638.486307][T20211] bridge_slave_1: left promiscuous mode [ 638.486554][T20211] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.536480][T20211] bond0: (slave bond_slave_0): Releasing backup interface [ 638.566835][T20211] bond0: (slave bond_slave_1): Releasing backup interface [ 638.597815][T20211] team_slave_0: left promiscuous mode [ 638.618355][T20211] team0: Port device team_slave_0 removed [ 638.629173][T20211] team_slave_1: left promiscuous mode [ 638.659050][T20211] team0: Port device team_slave_1 removed [ 638.669106][T20211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.687731][T20211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.701418][T20211] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 638.731380][T16412] tipc: Resetting bearer [ 638.755017][T20223] netlink: 'syz.3.3336': attribute type 1 has an invalid length. [ 638.953260][T20223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 639.081075][ T3318] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.082612][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.083496][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.103148][T20223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3336'. [ 639.116538][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.117500][T20223] bond1: entered allmulticast mode [ 639.274718][T20223] bond1: (slave dummy0): making interface the new active one [ 639.274768][T20223] dummy0: entered allmulticast mode [ 639.297016][T20223] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 639.754981][T20236] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3338'. [ 639.773465][ T3318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.773519][ T3318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.856989][T20240] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 639.931748][T16406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.940029][T16406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.274973][T20249] netlink: 'syz.1.3344': attribute type 5 has an invalid length. [ 640.556521][T20255] syzkaller0: entered promiscuous mode [ 640.556576][T20255] syzkaller0: entered allmulticast mode [ 640.574331][T20255] netlink: 'syz.2.3224': attribute type 13 has an invalid length. [ 640.574373][T20255] netlink: 'syz.2.3224': attribute type 17 has an invalid length. [ 641.758352][T20255] syzkaller0: left promiscuous mode [ 641.765686][T20255] syzkaller0: left allmulticast mode [ 641.963842][ T4934] Bluetooth: hci4: command 0x0406 tx timeout [ 641.972235][T20274] bond4 (unregistering): Released all slaves [ 642.900006][T20322] netlink: 'syz.0.3358': attribute type 5 has an invalid length. [ 642.930430][T20327] netlink: 'syz.1.3359': attribute type 15 has an invalid length. [ 642.930471][T20327] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3359'. [ 643.372372][T20340] netlink: 'syz.3.3362': attribute type 10 has an invalid length. [ 643.409432][T20340] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.425731][T20340] bond0: (slave team0): Enslaving as an active interface with an up link [ 644.053253][T20366] sctp: [Deprecated]: syz.4.3368 (pid 20366) Use of int in maxseg socket option. [ 644.053253][T20366] Use struct sctp_assoc_value instead [ 645.133256][T20402] žÿ: renamed from team_slave_1 (while UP) [ 646.054264][T20445] x_tables: duplicate underflow at hook 1 [ 646.313176][T20449] netlink: 'syz.2.3386': attribute type 4 has an invalid length. [ 646.313217][T20449] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3386'. [ 646.507920][T20465] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3390'. [ 646.683361][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 646.723196][T20474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3393'. [ 646.988673][T20485] tc action pedit offset must be on 32 bit boundaries [ 646.988702][T20485] tc action pedit offset must be on 32 bit boundaries [ 646.988746][T20485] tc action pedit offset must be on 32 bit boundaries [ 646.988756][T20485] tc action pedit offset must be on 32 bit boundaries [ 646.988764][T20485] tc action pedit offset must be on 32 bit boundaries [ 646.988772][T20485] tc action pedit offset must be on 32 bit boundaries [ 646.988780][T20485] tc action pedit offset must be on 32 bit boundaries [ 646.988788][T20485] tc action pedit offset must be on 32 bit boundaries [ 646.988796][T20485] tc action pedit offset must be on 32 bit boundaries [ 646.988805][T20485] tc action pedit offset must be on 32 bit boundaries [ 646.988825][T20485] 0: reclassify loop, rule prio 0, protocol 800 [ 648.590993][T20436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 648.982204][T20492] batman_adv: batadv0: Adding interface: macvtap1 [ 648.990882][T20492] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.990965][T20492] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 649.044811][T20492] batman_adv: batadv0: Adding interface: macvtap2 [ 649.051579][T20492] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.080984][T20492] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 649.084380][T20509] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3401'. [ 649.119927][T20509] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3401'. [ 649.145000][T20509] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3401'. [ 649.228745][T20495] batman_adv: batadv0: Removing interface: macvtap1 [ 649.373734][T20495] batman_adv: batadv0: Removing interface: macvtap2 [ 649.570118][T20522] xt_TPROXY: Can be used only with -p tcp or -p udp [ 649.666948][T20524] ip6erspan1: entered allmulticast mode [ 649.792895][T20519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3405'. [ 650.332282][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3411'. [ 650.332330][T20546] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 650.366782][T20549] netlink: 'syz.1.3412': attribute type 1 has an invalid length. [ 650.374940][T20549] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3412'. [ 650.425655][T20551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3413'. [ 651.124444][T16007] bridge0: entered promiscuous mode [ 651.340309][T16406] IPVS: starting estimator thread 0... [ 651.435284][T20574] IPVS: using max 28 ests per chain, 67200 per kthread [ 651.892598][T20586] ±ÿ speed is unknown, defaulting to 1000 [ 651.950668][T20586] lo speed is unknown, defaulting to 1000 [ 651.961226][T20586] lo speed is unknown, defaulting to 1000 [ 652.433278][T20596] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3423'. [ 652.962683][T20608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3427'. [ 652.972483][ T42] IPVS: starting estimator thread 0... [ 652.992596][T20611] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 653.058426][T20612] IPVS: using max 28 ests per chain, 67200 per kthread [ 653.192048][T20608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3427'. [ 653.234004][T20620] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 653.234512][T20619] pim6reg0: tun_chr_ioctl cmd 35111 [ 653.270799][T20611] IPVS: Scheduler module ip_vs_sip not found [ 653.291938][T20617] netlink: Conntrack attr has 4 unknown bytes [ 653.340565][T20622] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3430'. [ 653.381978][T20629] Cannot find add_set index 0 as target [ 653.471676][T20632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3432'. [ 653.534243][T20634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3433'. [ 653.545739][T20634] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3433'. [ 653.593746][T20634] geneve2: entered promiscuous mode [ 653.599141][T20634] geneve2: entered allmulticast mode [ 653.636089][T20639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3433'. [ 653.636160][T20639] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3433'. [ 653.907250][T20646] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:21 [ 654.032327][T20646] syzkaller0: entered promiscuous mode [ 654.038561][T20646] syzkaller0: entered allmulticast mode [ 654.582081][T20687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.783620][T20691] netlink: 'syz.3.3445': attribute type 1 has an invalid length. [ 654.948503][T20691] bond2: entered promiscuous mode [ 654.948949][T20691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 655.021680][T20691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3445'. [ 655.031272][T20697] 8021q: adding VLAN 0 to HW filter on device bond2 [ 655.052485][T20697] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 655.052540][T20697] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 655.082726][T20697] bond2: (slave ip6gre1): making interface the new active one [ 655.082780][T20697] ip6gre1: entered promiscuous mode [ 655.099422][T20697] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 659.446874][T20729] netlink: 400 bytes leftover after parsing attributes in process `syz.0.3452'. [ 660.229848][T20752] bridge2: entered promiscuous mode [ 660.240893][T20752] bridge2: entered allmulticast mode [ 660.283351][T20752] team0: Port device bridge2 added [ 660.395688][T20752] bridge0: port 1(team0) entered blocking state [ 660.395800][T20752] bridge0: port 1(team0) entered disabled state [ 660.395980][T20752] team0: entered allmulticast mode [ 660.451382][T20752] team0: entered promiscuous mode [ 660.457597][T20758] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3458'. [ 660.572543][T20722] openvswitch: netlink: Invalid VLAN frame [ 661.095489][T20780] FAULT_INJECTION: forcing a failure. [ 661.095489][T20780] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 661.095562][T20780] CPU: 1 UID: 0 PID: 20780 Comm: syz.0.3466 Not tainted syzkaller #0 PREEMPT(full) [ 661.095585][T20780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 661.095596][T20780] Call Trace: [ 661.095603][T20780] [ 661.095610][T20780] dump_stack_lvl+0xe8/0x150 [ 661.095647][T20780] should_fail_ex+0x410/0x560 [ 661.095680][T20780] _copy_from_user+0x2d/0xb0 [ 661.095699][T20780] ___sys_sendmsg+0x1c6/0x360 [ 661.095721][T20780] ? __lock_acquire+0x6df/0x2e50 [ 661.095748][T20780] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.095772][T20780] ? kstrtouint+0x6e/0xe0 [ 661.095890][T20780] ? __fget_files+0x2a/0x420 [ 661.095916][T20780] ? __fget_files+0x3a2/0x420 [ 661.095948][T20780] __sys_sendmmsg+0x273/0x4d0 [ 661.095981][T20780] ? __pfx___sys_sendmmsg+0x10/0x10 [ 661.096009][T20780] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 661.096050][T20780] ? ksys_write+0x242/0x270 [ 661.096087][T20780] ? __pfx_ksys_write+0x10/0x10 [ 661.096122][T20780] __x64_sys_sendmmsg+0xa0/0xc0 [ 661.096143][T20780] do_syscall_64+0x166/0x520 [ 661.096167][T20780] ? trace_irq_disable+0x3b/0x140 [ 661.096186][T20780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.096206][T20780] ? clear_bhb_loop+0x70/0xc0 [ 661.096229][T20780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.096247][T20780] RIP: 0033:0x7fa9a5f9e159 [ 661.096265][T20780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.096280][T20780] RSP: 002b:00007fa9a6eef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 661.096301][T20780] RAX: ffffffffffffffda RBX: 00007fa9a6225fa0 RCX: 00007fa9a5f9e159 [ 661.096315][T20780] RDX: 00000000000003e8 RSI: 0000200000002340 RDI: 0000000000000003 [ 661.096327][T20780] RBP: 00007fa9a6eef090 R08: 0000000000000000 R09: 0000000000000000 [ 661.096339][T20780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.096349][T20780] R13: 00007fa9a6226038 R14: 00007fa9a6225fa0 R15: 00007ffcfa0bd4f8 [ 661.096379][T20780] [ 661.279270][T20784] syzkaller1: entered promiscuous mode [ 661.279293][T20784] syzkaller1: entered allmulticast mode [ 661.591714][T20785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3467'. [ 661.740405][T20785] netlink: 'syz.2.3467': attribute type 4 has an invalid length. [ 661.749989][T20785] netlink: 'syz.2.3467': attribute type 3 has an invalid length. [ 662.316483][ T5620] block nbd6: Receive control failed (result -32) [ 662.736245][T20818] v: renamed from veth0_vlan [ 662.748418][T20826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3475'. [ 662.854248][T20822] xfrm1: entered allmulticast mode [ 662.873560][T20820] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 662.896316][T20820] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.897494][T20820] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.332612][T20843] FAULT_INJECTION: forcing a failure. [ 663.332612][T20843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.347956][T20843] CPU: 0 UID: 0 PID: 20843 Comm: syz.0.3478 Not tainted syzkaller #0 PREEMPT(full) [ 663.347987][T20843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 663.347999][T20843] Call Trace: [ 663.348007][T20843] [ 663.348015][T20843] dump_stack_lvl+0xe8/0x150 [ 663.348049][T20843] should_fail_ex+0x410/0x560 [ 663.348088][T20843] _copy_from_user+0x2d/0xb0 [ 663.348109][T20843] ___sys_sendmsg+0x1c6/0x360 [ 663.348129][T20843] ? __lock_acquire+0x6df/0x2e50 [ 663.348155][T20843] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.348211][T20843] ? __fget_files+0x2a/0x420 [ 663.348238][T20843] ? __fget_files+0x3a2/0x420 [ 663.348275][T20843] __x64_sys_sendmsg+0x1b1/0x290 [ 663.348300][T20843] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 663.348345][T20843] do_syscall_64+0x166/0x520 [ 663.348371][T20843] ? trace_irq_disable+0x3b/0x140 [ 663.348391][T20843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.348412][T20843] ? clear_bhb_loop+0x70/0xc0 [ 663.348438][T20843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.348459][T20843] RIP: 0033:0x7fa9a5f9e159 [ 663.348480][T20843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.348499][T20843] RSP: 002b:00007fa9a6eef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.348523][T20843] RAX: ffffffffffffffda RBX: 00007fa9a6225fa0 RCX: 00007fa9a5f9e159 [ 663.348539][T20843] RDX: 0000000000000800 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 663.348552][T20843] RBP: 00007fa9a6eef090 R08: 0000000000000000 R09: 0000000000000000 [ 663.348566][T20843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.348578][T20843] R13: 00007fa9a6226038 R14: 00007fa9a6225fa0 R15: 00007ffcfa0bd4f8 [ 663.348613][T20843] [ 663.548171][T20840] batadv0: entered promiscuous mode [ 663.558915][T20840] macvtap1: entered promiscuous mode [ 663.566385][T20840] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 663.593519][T20840] batadv0: left promiscuous mode [ 663.813320][T20830] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 664.156281][T20870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3483'. [ 664.156335][T20870] nbd: must specify a size in bytes for the device [ 664.156872][T20870] block nbd3: NBD_DISCONNECT [ 664.156950][T20870] block nbd3: Send disconnect failed -32 [ 664.156969][T20870] block nbd3: Send disconnect failed -32 [ 664.156985][T20870] block nbd3: shutting down sockets [ 664.649693][T20886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3486'. [ 664.967410][T20877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3485'. [ 664.981953][T20855] openvswitch: netlink: Invalid VLAN frame [ 665.097397][T20895] netlink: 'syz.3.3488': attribute type 2 has an invalid length. [ 665.110746][T20894] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 665.110746][T20894] Please contact the netfilter-devel mailing list or update your nftables rules. [ 665.122717][ T6916] pim6reg: left allmulticast mode [ 665.122952][ T6916] pimreg: left allmulticast mode [ 665.667319][ T6916] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 665.737377][ T6916] bond11 (unregistering): (slave geneve3): Releasing active interface [ 665.837873][ T6916] bond14 (unregistering): (slave bridge8): Releasing backup interface [ 665.837936][ T6916] bond14 (unregistering): (slave bridge8): the permanent HWaddr of slave - da:f1:e9:7c:47:66 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 665.837967][ T6916] bond14 (unregistering): (slave bridge9): making interface the new active one [ 665.838102][ T6916] bond14 (unregistering): (slave bridge9): Error 16 setting MAC of new active slave [ 665.889482][ T6916] bond14 (unregistering): (slave bridge9): Releasing backup interface [ 665.907099][ T6916] bond16 (unregistering): (slave bridge10): Releasing backup interface [ 665.921967][ T6916] bond17 (unregistering): (slave bridge11): Releasing active interface [ 666.018987][ T6916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.031341][ T6916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.043555][ T6916] bond0 (unregistering): Released all slaves [ 666.059285][ T6916] bond1 (unregistering): (slave bond2): Releasing backup interface [ 666.073577][ T6916] bond1 (unregistering): Released all slaves [ 666.090697][ T6916] bond2 (unregistering): Released all slaves [ 666.137824][ T6916] bond3 (unregistering): Released all slaves [ 666.158005][ T6916] bond4 (unregistering): Released all slaves [ 666.169406][ T6916] bond5 (unregistering): Released all slaves [ 666.182593][ T6916] bond6 (unregistering): Released all slaves [ 666.221210][ T6916] bond7 (unregistering): Released all slaves [ 666.241686][ T6916] bond8 (unregistering): (slave lo): Releasing backup interface [ 666.250237][ T6916] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 666.252844][ T6916] bond8 (unregistering): Released all slaves [ 666.273871][ T6916] bond9 (unregistering): Released all slaves [ 666.293303][ T6916] bond10 (unregistering): (slave veth13): Releasing active interface [ 666.304158][ T6916] bond10 (unregistering): Released all slaves [ 666.331632][ T6916] bond11 (unregistering): Released all slaves [ 666.347231][ T6916] bond12 (unregistering): (slave veth17): Releasing backup interface [ 666.362745][ T6916] bond12 (unregistering): Released all slaves [ 666.379645][ T6916] bond13 (unregistering): (slave veth19): Releasing backup interface [ 666.389749][ T6916] bond13 (unregistering): Released all slaves [ 666.402765][ T6916] bond14 (unregistering): Released all slaves [ 666.413806][ T6916] bond15 (unregistering): Released all slaves [ 666.424971][ T6916] bond16 (unregistering): Released all slaves [ 666.440006][ T6916] bond17 (unregistering): Released all slaves [ 666.474253][ T6916] bond18 (unregistering): Released all slaves [ 666.487308][ T6916] bond19 (unregistering): Released all slaves [ 666.499368][ T6916] bond20 (unregistering): (slave veth0_to_bond): Releasing active interface [ 666.511444][ T6916] bond20 (unregistering): Released all slaves [ 666.527587][ T6916] bond21 (unregistering): Released all slaves [ 666.538188][ T5279] v: left promiscuous mode [ 666.561776][T16007] v: entered promiscuous mode [ 666.667252][T16013] lo speed is unknown, defaulting to 1000 [ 666.667298][T16013] syz0: Port: 1 Link DOWN [ 666.671483][T19685] lo speed is unknown, defaulting to 1000 [ 666.854615][T20917] FAULT_INJECTION: forcing a failure. [ 666.854615][T20917] name failslab, interval 1, probability 0, space 0, times 0 [ 666.854674][T20917] CPU: 0 UID: 0 PID: 20917 Comm: syz.3.3491 Not tainted syzkaller #0 PREEMPT(full) [ 666.854698][T20917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 666.854710][T20917] Call Trace: [ 666.854717][T20917] [ 666.854726][T20917] dump_stack_lvl+0xe8/0x150 [ 666.854760][T20917] should_fail_ex+0x410/0x560 [ 666.854795][T20917] ? __alloc_skb+0x1db/0x7a0 [ 666.854891][T20917] should_failslab+0xa8/0x100 [ 666.854917][T20917] ? __alloc_skb+0x1db/0x7a0 [ 666.854943][T20917] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 666.854974][T20917] ? __alloc_skb+0x18d/0x7a0 [ 666.855002][T20917] ? __alloc_skb+0x1db/0x7a0 [ 666.855037][T20917] __alloc_skb+0x1db/0x7a0 [ 666.855070][T20917] netlink_sendmsg+0x5d4/0xb40 [ 666.855107][T20917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.855138][T20917] ? apparmor_socket_sendmsg+0x98/0x360 [ 666.855174][T20917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.855197][T20917] sock_sendmsg_nosec+0x13a/0x180 [ 666.855227][T20917] ____sys_sendmsg+0x54e/0x850 [ 666.855255][T20917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 666.855287][T20917] ? import_iovec+0x73/0xa0 [ 666.855324][T20917] ___sys_sendmsg+0x2a5/0x360 [ 666.855344][T20917] ? __lock_acquire+0x6df/0x2e50 [ 666.855370][T20917] ? __pfx____sys_sendmsg+0x10/0x10 [ 666.855432][T20917] ? __fget_files+0x2a/0x420 [ 666.855458][T20917] ? __fget_files+0x3a2/0x420 [ 666.855496][T20917] __x64_sys_sendmsg+0x1b1/0x290 [ 666.855521][T20917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 666.855564][T20917] do_syscall_64+0x166/0x520 [ 666.855590][T20917] ? trace_irq_disable+0x3b/0x140 [ 666.855609][T20917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.855630][T20917] ? clear_bhb_loop+0x70/0xc0 [ 666.855655][T20917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.855676][T20917] RIP: 0033:0x7f7c18f9e159 [ 666.855697][T20917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.855714][T20917] RSP: 002b:00007f7c19f03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 666.855737][T20917] RAX: ffffffffffffffda RBX: 00007f7c19225fa0 RCX: 00007f7c18f9e159 [ 666.855752][T20917] RDX: 0000000000000800 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 666.855766][T20917] RBP: 00007f7c19f03090 R08: 0000000000000000 R09: 0000000000000000 [ 666.855779][T20917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.855791][T20917] R13: 00007f7c19226038 R14: 00007f7c19225fa0 R15: 00007fff5f869f48 [ 666.855824][T20917] [ 667.200962][T20919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3492'. [ 667.263707][ T6916] tipc: Disabling bearer [ 667.296482][ T6916] tipc: Left network mode [ 667.663272][T20935] netlink: 'syz.1.3496': attribute type 4 has an invalid length. [ 668.111414][T20954] openvswitch: netlink: IP tunnel dst address not specified [ 668.111477][T20954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.733888][T20984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3503'. [ 668.875074][T21001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3503'. [ 668.879978][T21000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3505'. [ 668.954438][T21003] FAULT_INJECTION: forcing a failure. [ 668.954438][T21003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.954522][T21003] CPU: 1 UID: 0 PID: 21003 Comm: syz.4.3506 Not tainted syzkaller #0 PREEMPT(full) [ 668.954561][T21003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 668.954573][T21003] Call Trace: [ 668.954582][T21003] [ 668.954591][T21003] dump_stack_lvl+0xe8/0x150 [ 668.954621][T21003] should_fail_ex+0x410/0x560 [ 668.954653][T21003] _copy_from_iter+0x1d3/0x1660 [ 668.954690][T21003] ? __pfx__copy_from_iter+0x10/0x10 [ 668.954714][T21003] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 668.954749][T21003] ? netlink_sendmsg+0x5d4/0xb40 [ 668.954770][T21003] ? netlink_sendmsg+0x5d4/0xb40 [ 668.954796][T21003] ? netlink_sendmsg+0x650/0xb40 [ 668.954815][T21003] ? skb_put+0x112/0x210 [ 668.954844][T21003] netlink_sendmsg+0x6c0/0xb40 [ 668.954873][T21003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 668.954902][T21003] ? apparmor_socket_sendmsg+0x98/0x360 [ 668.954931][T21003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 668.954950][T21003] sock_sendmsg_nosec+0x13a/0x180 [ 668.954976][T21003] ____sys_sendmsg+0x54e/0x850 [ 668.954999][T21003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 668.955027][T21003] ? import_iovec+0x73/0xa0 [ 668.955057][T21003] ___sys_sendmsg+0x2a5/0x360 [ 668.955074][T21003] ? __lock_acquire+0x6df/0x2e50 [ 668.955098][T21003] ? __pfx____sys_sendmsg+0x10/0x10 [ 668.955151][T21003] ? __fget_files+0x2a/0x420 [ 668.955173][T21003] ? __fget_files+0x3a2/0x420 [ 668.955206][T21003] __x64_sys_sendmsg+0x1b1/0x290 [ 668.955227][T21003] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 668.955267][T21003] do_syscall_64+0x166/0x520 [ 668.955291][T21003] ? trace_irq_disable+0x3b/0x140 [ 668.955307][T21003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.955327][T21003] ? clear_bhb_loop+0x70/0xc0 [ 668.955350][T21003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.955368][T21003] RIP: 0033:0x7f33eb19e159 [ 668.955386][T21003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.955402][T21003] RSP: 002b:00007f33ebf88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.955424][T21003] RAX: ffffffffffffffda RBX: 00007f33eb425fa0 RCX: 00007f33eb19e159 [ 668.955437][T21003] RDX: 0000000000000800 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 668.955450][T21003] RBP: 00007f33ebf88090 R08: 0000000000000000 R09: 0000000000000000 [ 668.955462][T21003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.955473][T21003] R13: 00007f33eb426038 R14: 00007f33eb425fa0 R15: 00007fff80c37d68 [ 668.955504][T21003] [ 669.402908][T21013] netlink: 'syz.0.3508': attribute type 2 has an invalid length. [ 669.414352][T21016] netlink: 'syz.0.3508': attribute type 2 has an invalid length. [ 669.419670][T21011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3509'. [ 669.442498][T21012] netlink: 'syz.1.3510': attribute type 1 has an invalid length. [ 669.713423][T21012] bond1: entered promiscuous mode [ 669.721333][T21012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 669.942287][T21023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 669.964901][T21023] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 669.964949][T21023] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 670.004172][T21023] bond1: (slave ipip0): making interface the new active one [ 670.014789][T21023] ipip0: entered promiscuous mode [ 670.036162][T21023] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 670.757660][T21068] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 670.766969][T21070] FAULT_INJECTION: forcing a failure. [ 670.766969][T21070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.782032][T21070] CPU: 0 UID: 0 PID: 21070 Comm: syz.0.3519 Not tainted syzkaller #0 PREEMPT(full) [ 670.782062][T21070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 670.782075][T21070] Call Trace: [ 670.782084][T21070] [ 670.782094][T21070] dump_stack_lvl+0xe8/0x150 [ 670.782132][T21070] should_fail_ex+0x410/0x560 [ 670.782167][T21070] _copy_from_iter+0x1d3/0x1660 [ 670.782209][T21070] ? __pfx__copy_from_iter+0x10/0x10 [ 670.782236][T21070] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 670.782266][T21070] ? netlink_sendmsg+0x5d4/0xb40 [ 670.782289][T21070] ? netlink_sendmsg+0x5d4/0xb40 [ 670.782319][T21070] ? netlink_sendmsg+0x650/0xb40 [ 670.782341][T21070] ? skb_put+0x112/0x210 [ 670.782373][T21070] netlink_sendmsg+0x6c0/0xb40 [ 670.782407][T21070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.782440][T21070] ? apparmor_socket_sendmsg+0x98/0x360 [ 670.782472][T21070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.782495][T21070] sock_sendmsg_nosec+0x13a/0x180 [ 670.782525][T21070] ____sys_sendmsg+0x54e/0x850 [ 670.782552][T21070] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.782583][T21070] ? import_iovec+0x73/0xa0 [ 670.782618][T21070] ___sys_sendmsg+0x2a5/0x360 [ 670.782638][T21070] ? __lock_acquire+0x6df/0x2e50 [ 670.782683][T21070] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.782743][T21070] ? __fget_files+0x2a/0x420 [ 670.782780][T21070] ? __fget_files+0x3a2/0x420 [ 670.782818][T21070] __x64_sys_sendmsg+0x1b1/0x290 [ 670.782842][T21070] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 670.782887][T21070] do_syscall_64+0x166/0x520 [ 670.782914][T21070] ? trace_irq_disable+0x3b/0x140 [ 670.782933][T21070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.782955][T21070] ? clear_bhb_loop+0x70/0xc0 [ 670.782980][T21070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.783001][T21070] RIP: 0033:0x7fa9a5f9e159 [ 670.783022][T21070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.783040][T21070] RSP: 002b:00007fa9a6eef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.783064][T21070] RAX: ffffffffffffffda RBX: 00007fa9a6225fa0 RCX: 00007fa9a5f9e159 [ 670.783079][T21070] RDX: 0000000000000800 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 670.783093][T21070] RBP: 00007fa9a6eef090 R08: 0000000000000000 R09: 0000000000000000 [ 670.783106][T21070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.783118][T21070] R13: 00007fa9a6226038 R14: 00007fa9a6225fa0 R15: 00007ffcfa0bd4f8 [ 670.783152][T21070] [ 671.073823][T21075] netlink: 'syz.1.3521': attribute type 30 has an invalid length. [ 671.171148][T21082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3522'. [ 671.593818][T21101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3524'. [ 671.603069][T21101] openvswitch: netlink: Flow key attribute not present in set flow. [ 672.214671][ T6916] hsr_slave_0: left promiscuous mode [ 672.245376][ T6916] hsr_slave_1: left promiscuous mode [ 672.320692][T21129] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3531'. [ 672.331499][T21129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3531'. [ 672.332337][ T6916] veth1_vlan: left promiscuous mode [ 672.332505][ T6916] veth0_vlan: left promiscuous mode [ 672.380678][T21131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3531'. [ 672.496849][T21134] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3532'. [ 672.731019][T21143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3533'. [ 673.263325][ T6916] team0 (unregistering): Port device team_slave_1 removed [ 673.283980][ T6916] team0 (unregistering): Port device team_slave_0 removed [ 673.407528][ T6916] team0 (unregistering): Port device dummy0 removed [ 673.473724][ T1117] smbdirect: ib_dev[syz0] removed [ 673.489695][T21134] bond3: left promiscuous mode [ 673.489954][T21134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3532'. [ 673.494759][T21134] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 673.498900][T21135] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 673.498941][T21135] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 673.498958][T21135] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 673.622433][T21153] FAULT_INJECTION: forcing a failure. [ 673.622433][T21153] name failslab, interval 1, probability 0, space 0, times 0 [ 673.636382][T21153] CPU: 1 UID: 0 PID: 21153 Comm: syz.1.3534 Not tainted syzkaller #0 PREEMPT(full) [ 673.636413][T21153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 673.636426][T21153] Call Trace: [ 673.636434][T21153] [ 673.636443][T21153] dump_stack_lvl+0xe8/0x150 [ 673.636481][T21153] should_fail_ex+0x410/0x560 [ 673.636517][T21153] should_failslab+0xa8/0x100 [ 673.636544][T21153] __kmalloc_cache_noprof+0xa3/0x600 [ 673.636573][T21153] ? xfrm_policy_alloc+0x78/0x2b0 [ 673.636677][T21153] ? xfrm_policy_alloc+0x78/0x2b0 [ 673.636705][T21153] xfrm_policy_alloc+0x78/0x2b0 [ 673.636725][T21153] xfrm_policy_construct+0x39/0x6b0 [ 673.636784][T21153] xfrm_add_policy+0x273/0x690 [ 673.636816][T21153] ? __pfx_xfrm_add_policy+0x10/0x10 [ 673.636839][T21153] ? apparmor_capable+0x126/0x170 [ 673.636869][T21153] ? __nla_parse+0x40/0x60 [ 673.636898][T21153] xfrm_user_rcv_msg+0x7a8/0xf30 [ 673.636928][T21153] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 673.636985][T21153] ? __mutex_trylock_common+0x15f/0x270 [ 673.637014][T21153] ? __pfx___mutex_trylock_common+0x10/0x10 [ 673.637041][T21153] ? rcu_is_watching+0x16/0xb0 [ 673.637074][T21153] ? trace_contention_end+0x3d/0x140 [ 673.637107][T21153] netlink_rcv_skb+0x226/0x4a0 [ 673.637130][T21153] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 673.637157][T21153] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 673.637197][T21153] ? netlink_deliver_tap+0x2e/0x1b0 [ 673.637220][T21153] ? netlink_deliver_tap+0x2e/0x1b0 [ 673.637244][T21153] xfrm_netlink_rcv+0x79/0x90 [ 673.637271][T21153] netlink_unicast+0x7bd/0x940 [ 673.637314][T21153] netlink_sendmsg+0x813/0xb40 [ 673.637348][T21153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.637381][T21153] ? apparmor_socket_sendmsg+0x98/0x360 [ 673.637412][T21153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.637434][T21153] sock_sendmsg_nosec+0x13a/0x180 [ 673.637464][T21153] ____sys_sendmsg+0x54e/0x850 [ 673.637492][T21153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.637524][T21153] ? import_iovec+0x73/0xa0 [ 673.637559][T21153] ___sys_sendmsg+0x2a5/0x360 [ 673.637579][T21153] ? __lock_acquire+0x6df/0x2e50 [ 673.637605][T21153] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.637666][T21153] ? __fget_files+0x2a/0x420 [ 673.637691][T21153] ? __fget_files+0x3a2/0x420 [ 673.637730][T21153] __x64_sys_sendmsg+0x1b1/0x290 [ 673.637755][T21153] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 673.637798][T21153] do_syscall_64+0x166/0x520 [ 673.637826][T21153] ? trace_irq_disable+0x3b/0x140 [ 673.637845][T21153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.637866][T21153] ? clear_bhb_loop+0x70/0xc0 [ 673.637893][T21153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.637914][T21153] RIP: 0033:0x7f2bbf99e159 [ 673.637936][T21153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.637954][T21153] RSP: 002b:00007f2bc0789028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.637978][T21153] RAX: ffffffffffffffda RBX: 00007f2bbfc25fa0 RCX: 00007f2bbf99e159 [ 673.637993][T21153] RDX: 0000000000000800 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 673.638006][T21153] RBP: 00007f2bc0789090 R08: 0000000000000000 R09: 0000000000000000 [ 673.638018][T21153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.638030][T21153] R13: 00007f2bbfc26038 R14: 00007f2bbfc25fa0 R15: 00007ffd77394628 [ 673.638065][T21153] [ 674.028395][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3536'. [ 674.088367][T21158] netlink: 'syz.1.3535': attribute type 11 has an invalid length. [ 674.160165][T21160] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 674.169834][T21160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3538'. [ 675.013113][T21188] vxcan3: entered promiscuous mode [ 675.122908][T21200] 8021q: VLANs not supported on syzkaller0 [ 675.143966][ T6916] IPVS: stop unused estimator thread 0... [ 676.109649][T21249] debugfs: '.PÑè'óG!DEÒSˆ' already exists in 'ieee80211' [ 676.248392][T21249] __nla_validate_parse: 7 callbacks suppressed [ 676.258761][T21249] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3551'. [ 676.573062][T21265] FAULT_INJECTION: forcing a failure. [ 676.573062][T21265] name failslab, interval 1, probability 0, space 0, times 0 [ 676.587961][T21265] CPU: 0 UID: 0 PID: 21265 Comm: syz.0.3556 Not tainted syzkaller #0 PREEMPT(full) [ 676.587992][T21265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 676.588004][T21265] Call Trace: [ 676.588013][T21265] [ 676.588021][T21265] dump_stack_lvl+0xe8/0x150 [ 676.588057][T21265] should_fail_ex+0x410/0x560 [ 676.588104][T21265] should_failslab+0xa8/0x100 [ 676.588132][T21265] __kmalloc_cache_noprof+0xa3/0x600 [ 676.588164][T21265] ? xfrm_policy_alloc+0x78/0x2b0 [ 676.588186][T21265] ? xfrm_policy_alloc+0x78/0x2b0 [ 676.588216][T21265] xfrm_policy_alloc+0x78/0x2b0 [ 676.588240][T21265] xfrm_policy_construct+0x39/0x6b0 [ 676.588278][T21265] xfrm_add_policy+0x273/0x690 [ 676.588313][T21265] ? __pfx_xfrm_add_policy+0x10/0x10 [ 676.588336][T21265] ? apparmor_capable+0x126/0x170 [ 676.588367][T21265] ? __nla_parse+0x40/0x60 [ 676.588392][T21265] xfrm_user_rcv_msg+0x7a8/0xf30 [ 676.588425][T21265] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 676.588484][T21265] ? __mutex_trylock_common+0x15f/0x270 [ 676.588515][T21265] ? __pfx___mutex_trylock_common+0x10/0x10 [ 676.588544][T21265] ? rcu_is_watching+0x16/0xb0 [ 676.588567][T21265] ? trace_contention_end+0x3d/0x140 [ 676.588602][T21265] netlink_rcv_skb+0x226/0x4a0 [ 676.588627][T21265] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 676.588654][T21265] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 676.588695][T21265] ? netlink_deliver_tap+0x2e/0x1b0 [ 676.588729][T21265] ? netlink_deliver_tap+0x2e/0x1b0 [ 676.588754][T21265] xfrm_netlink_rcv+0x79/0x90 [ 676.588780][T21265] netlink_unicast+0x7bd/0x940 [ 676.588811][T21265] netlink_sendmsg+0x813/0xb40 [ 676.588845][T21265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.588878][T21265] ? apparmor_socket_sendmsg+0x98/0x360 [ 676.588908][T21265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.588928][T21265] sock_sendmsg_nosec+0x13a/0x180 [ 676.588957][T21265] ____sys_sendmsg+0x54e/0x850 [ 676.588984][T21265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 676.589014][T21265] ? import_iovec+0x73/0xa0 [ 676.589049][T21265] ___sys_sendmsg+0x2a5/0x360 [ 676.589070][T21265] ? __lock_acquire+0x6df/0x2e50 [ 676.589095][T21265] ? __pfx____sys_sendmsg+0x10/0x10 [ 676.589157][T21265] ? __fget_files+0x2a/0x420 [ 676.589183][T21265] ? __fget_files+0x3a2/0x420 [ 676.589219][T21265] __x64_sys_sendmsg+0x1b1/0x290 [ 676.589244][T21265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 676.589286][T21265] do_syscall_64+0x166/0x520 [ 676.589312][T21265] ? trace_irq_disable+0x3b/0x140 [ 676.589330][T21265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.589353][T21265] ? clear_bhb_loop+0x70/0xc0 [ 676.589378][T21265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.589399][T21265] RIP: 0033:0x7fa9a5f9e159 [ 676.589420][T21265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.589437][T21265] RSP: 002b:00007fa9a6eef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.589459][T21265] RAX: ffffffffffffffda RBX: 00007fa9a6225fa0 RCX: 00007fa9a5f9e159 [ 676.589473][T21265] RDX: 0000000000000800 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 676.589486][T21265] RBP: 00007fa9a6eef090 R08: 0000000000000000 R09: 0000000000000000 [ 676.589499][T21265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.589510][T21265] R13: 00007fa9a6226038 R14: 00007fa9a6225fa0 R15: 00007ffcfa0bd4f8 [ 676.589545][T21265] [ 676.819949][T21270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3555'. [ 676.819974][T21270] openvswitch: netlink: Flow key attribute not present in set flow. [ 676.955373][T21271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3557'. [ 677.073302][T21271] bond4: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 677.099337][T21271] bond4 (unregistering): Released all slaves [ 677.425909][T21282] ±ÿ speed is unknown, defaulting to 1000 [ 677.441987][T21282] lo speed is unknown, defaulting to 1000 [ 677.653823][T21303] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3563'. [ 677.795546][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 678.151120][T21324] FAULT_INJECTION: forcing a failure. [ 678.151120][T21324] name failslab, interval 1, probability 0, space 0, times 0 [ 678.187105][T21324] CPU: 1 UID: 0 PID: 21324 Comm: syz.2.3570 Not tainted syzkaller #0 PREEMPT(full) [ 678.187139][T21324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 678.187151][T21324] Call Trace: [ 678.187159][T21324] [ 678.187166][T21324] dump_stack_lvl+0xe8/0x150 [ 678.187197][T21324] should_fail_ex+0x410/0x560 [ 678.187225][T21324] ? __alloc_skb+0x1db/0x7a0 [ 678.187247][T21324] should_failslab+0xa8/0x100 [ 678.187266][T21324] ? __alloc_skb+0x1db/0x7a0 [ 678.187286][T21324] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 678.187309][T21324] ? __alloc_skb+0x18d/0x7a0 [ 678.187331][T21324] ? __alloc_skb+0x1db/0x7a0 [ 678.187358][T21324] __alloc_skb+0x1db/0x7a0 [ 678.187383][T21324] xfrm_send_policy_notify+0x2a0/0x1c00 [ 678.187413][T21324] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 678.187434][T21324] ? lock_acquire+0x115/0x350 [ 678.187461][T21324] ? km_policy_notify+0x28/0x200 [ 678.187543][T21324] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 678.187563][T21324] km_policy_notify+0x121/0x200 [ 678.187581][T21324] ? km_policy_notify+0x28/0x200 [ 678.187602][T21324] xfrm_add_policy+0x4a1/0x690 [ 678.187628][T21324] ? __pfx_xfrm_add_policy+0x10/0x10 [ 678.187646][T21324] ? apparmor_capable+0x126/0x170 [ 678.187670][T21324] ? __nla_parse+0x40/0x60 [ 678.187689][T21324] xfrm_user_rcv_msg+0x7a8/0xf30 [ 678.187722][T21324] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 678.187770][T21324] ? __mutex_trylock_common+0x15f/0x270 [ 678.187793][T21324] ? __pfx___mutex_trylock_common+0x10/0x10 [ 678.187815][T21324] ? rcu_is_watching+0x16/0xb0 [ 678.187833][T21324] ? trace_contention_end+0x3d/0x140 [ 678.187860][T21324] netlink_rcv_skb+0x226/0x4a0 [ 678.187880][T21324] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 678.187901][T21324] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 678.187933][T21324] ? netlink_deliver_tap+0x2e/0x1b0 [ 678.187950][T21324] ? netlink_deliver_tap+0x2e/0x1b0 [ 678.187969][T21324] xfrm_netlink_rcv+0x79/0x90 [ 678.187989][T21324] netlink_unicast+0x7bd/0x940 [ 678.188016][T21324] netlink_sendmsg+0x813/0xb40 [ 678.188042][T21324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.188067][T21324] ? apparmor_socket_sendmsg+0x98/0x360 [ 678.188091][T21324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.188107][T21324] sock_sendmsg_nosec+0x13a/0x180 [ 678.188134][T21324] ____sys_sendmsg+0x54e/0x850 [ 678.188156][T21324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 678.188180][T21324] ? import_iovec+0x73/0xa0 [ 678.188208][T21324] ___sys_sendmsg+0x2a5/0x360 [ 678.188222][T21324] ? __lock_acquire+0x6df/0x2e50 [ 678.188242][T21324] ? __pfx____sys_sendmsg+0x10/0x10 [ 678.188291][T21324] ? __fget_files+0x2a/0x420 [ 678.188310][T21324] ? __fget_files+0x3a2/0x420 [ 678.188340][T21324] __x64_sys_sendmsg+0x1b1/0x290 [ 678.188358][T21324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 678.188394][T21324] do_syscall_64+0x166/0x520 [ 678.188415][T21324] ? trace_irq_disable+0x3b/0x140 [ 678.188430][T21324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.188446][T21324] ? clear_bhb_loop+0x70/0xc0 [ 678.188466][T21324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.188482][T21324] RIP: 0033:0x7fa057b9e159 [ 678.188498][T21324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.188513][T21324] RSP: 002b:00007fa058afa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.188533][T21324] RAX: ffffffffffffffda RBX: 00007fa057e25fa0 RCX: 00007fa057b9e159 [ 678.188549][T21324] RDX: 0000000000000800 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 678.188563][T21324] RBP: 00007fa058afa090 R08: 0000000000000000 R09: 0000000000000000 [ 678.188575][T21324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.188587][T21324] R13: 00007fa057e26038 R14: 00007fa057e25fa0 R15: 00007ffd26fe0bf8 [ 678.188623][T21324] [ 678.640297][T21327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3571'. [ 679.249628][T21357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3579'. [ 679.271816][ T1117] nci: nci_rx_work: unknown MT 0x6 [ 679.327284][T21357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3579'. [ 679.704156][T21366] bond0 (unregistering): Released all slaves [ 680.137795][T21379] netlink: 'syz.3.3586': attribute type 1 has an invalid length. [ 680.942423][T21414] netlink: 'syz.0.3593': attribute type 1 has an invalid length. [ 681.200520][T21424] netlink: 'syz.0.3595': attribute type 1 has an invalid length. [ 681.240820][T21424] bond2: entered promiscuous mode [ 681.246775][T21424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 681.275287][T21424] ipip0: entered allmulticast mode [ 681.312062][T21424] bond2: (slave bridge2): making interface the new active one [ 681.323239][T21424] bridge2: entered promiscuous mode [ 681.334402][T21424] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 681.833019][T21447] FAULT_INJECTION: forcing a failure. [ 681.833019][T21447] name failslab, interval 1, probability 0, space 0, times 0 [ 681.846276][T21447] CPU: 0 UID: 0 PID: 21447 Comm: syz.0.3598 Not tainted syzkaller #0 PREEMPT(full) [ 681.846307][T21447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 681.846319][T21447] Call Trace: [ 681.846329][T21447] [ 681.846339][T21447] dump_stack_lvl+0xe8/0x150 [ 681.846376][T21447] should_fail_ex+0x410/0x560 [ 681.846411][T21447] ? __alloc_skb+0x1db/0x7a0 [ 681.846439][T21447] should_failslab+0xa8/0x100 [ 681.846464][T21447] ? __alloc_skb+0x1db/0x7a0 [ 681.846487][T21447] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 681.846514][T21447] ? __alloc_skb+0x18d/0x7a0 [ 681.846543][T21447] ? __alloc_skb+0x1db/0x7a0 [ 681.846579][T21447] __alloc_skb+0x1db/0x7a0 [ 681.846615][T21447] xfrm_alloc_compat+0x1a6/0x1740 [ 681.846658][T21447] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 681.846690][T21447] xfrm_nlmsg_multicast+0xda/0x1f0 [ 681.846728][T21447] xfrm_send_policy_notify+0xed2/0x1c00 [ 681.846767][T21447] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 681.846793][T21447] ? lock_acquire+0x115/0x350 [ 681.846828][T21447] ? km_policy_notify+0x28/0x200 [ 681.846855][T21447] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 681.846882][T21447] km_policy_notify+0x121/0x200 [ 681.846907][T21447] ? km_policy_notify+0x28/0x200 [ 681.846935][T21447] xfrm_add_policy+0x4a1/0x690 [ 681.846971][T21447] ? __pfx_xfrm_add_policy+0x10/0x10 [ 681.846995][T21447] ? apparmor_capable+0x126/0x170 [ 681.847029][T21447] ? __nla_parse+0x40/0x60 [ 681.847056][T21447] xfrm_user_rcv_msg+0x7a8/0xf30 [ 681.847090][T21447] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 681.847156][T21447] ? __mutex_trylock_common+0x15f/0x270 [ 681.847187][T21447] ? __pfx___mutex_trylock_common+0x10/0x10 [ 681.847215][T21447] ? rcu_is_watching+0x16/0xb0 [ 681.847242][T21447] ? trace_contention_end+0x3d/0x140 [ 681.847278][T21447] netlink_rcv_skb+0x226/0x4a0 [ 681.847304][T21447] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 681.847333][T21447] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 681.847376][T21447] ? netlink_deliver_tap+0x2e/0x1b0 [ 681.847399][T21447] ? netlink_deliver_tap+0x2e/0x1b0 [ 681.847431][T21447] xfrm_netlink_rcv+0x79/0x90 [ 681.847457][T21447] netlink_unicast+0x7bd/0x940 [ 681.847492][T21447] netlink_sendmsg+0x813/0xb40 [ 681.847529][T21447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.847563][T21447] ? apparmor_socket_sendmsg+0x98/0x360 [ 681.847595][T21447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.847617][T21447] sock_sendmsg_nosec+0x13a/0x180 [ 681.847647][T21447] ____sys_sendmsg+0x54e/0x850 [ 681.847676][T21447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 681.847716][T21447] ? import_iovec+0x73/0xa0 [ 681.847754][T21447] ___sys_sendmsg+0x2a5/0x360 [ 681.847773][T21447] ? __lock_acquire+0x6df/0x2e50 [ 681.847800][T21447] ? __pfx____sys_sendmsg+0x10/0x10 [ 681.847865][T21447] ? __fget_files+0x2a/0x420 [ 681.847891][T21447] ? __fget_files+0x3a2/0x420 [ 681.847928][T21447] __x64_sys_sendmsg+0x1b1/0x290 [ 681.847954][T21447] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 681.847999][T21447] do_syscall_64+0x166/0x520 [ 681.848026][T21447] ? trace_irq_disable+0x3b/0x140 [ 681.848045][T21447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.848067][T21447] ? clear_bhb_loop+0x70/0xc0 [ 681.848094][T21447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.848115][T21447] RIP: 0033:0x7fa9a5f9e159 [ 681.848136][T21447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.848154][T21447] RSP: 002b:00007fa9a6eef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.848178][T21447] RAX: ffffffffffffffda RBX: 00007fa9a6225fa0 RCX: 00007fa9a5f9e159 [ 681.848194][T21447] RDX: 0000000000000800 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 681.848207][T21447] RBP: 00007fa9a6eef090 R08: 0000000000000000 R09: 0000000000000000 [ 681.848220][T21447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.848232][T21447] R13: 00007fa9a6226038 R14: 00007fa9a6225fa0 R15: 00007ffcfa0bd4f8 [ 681.848269][T21447] [ 682.146918][T21352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 683.046687][T21482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3608'. [ 683.172553][T21459] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 683.206697][T21464] ipvlan2: entered promiscuous mode [ 683.210488][T21464] bridge0: port 1(ipvlan2) entered blocking state [ 683.210598][T21464] bridge0: port 1(ipvlan2) entered disabled state [ 683.210725][T21464] ipvlan2: entered allmulticast mode [ 683.210739][T21464] bridge0: entered allmulticast mode [ 683.223758][T21464] ipvlan2: left allmulticast mode [ 683.223780][T21464] bridge0: left allmulticast mode [ 683.350543][T21487] FAULT_INJECTION: forcing a failure. [ 683.350543][T21487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.350604][T21487] CPU: 1 UID: 0 PID: 21487 Comm: syz.3.3609 Not tainted syzkaller #0 PREEMPT(full) [ 683.350627][T21487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 683.350637][T21487] Call Trace: [ 683.350645][T21487] [ 683.350653][T21487] dump_stack_lvl+0xe8/0x150 [ 683.350695][T21487] should_fail_ex+0x410/0x560 [ 683.350727][T21487] _copy_from_user+0x2d/0xb0 [ 683.350746][T21487] kstrtouint_from_user+0xd6/0x180 [ 683.350774][T21487] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 683.350808][T21487] ? lock_acquire+0x115/0x350 [ 683.350833][T21487] proc_fail_nth_write+0x8e/0x210 [ 683.350892][T21487] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 683.350928][T21487] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 683.350954][T21487] vfs_write+0x296/0xba0 [ 683.350989][T21487] ? __pfx_vfs_write+0x10/0x10 [ 683.351016][T21487] ? __fget_files+0x2a/0x420 [ 683.351044][T21487] ? __fget_files+0x3a2/0x420 [ 683.351065][T21487] ? __fget_files+0x2a/0x420 [ 683.351097][T21487] ksys_write+0x150/0x270 [ 683.351125][T21487] ? __pfx_ksys_write+0x10/0x10 [ 683.351162][T21487] do_syscall_64+0x166/0x520 [ 683.351186][T21487] ? trace_irq_disable+0x3b/0x140 [ 683.351203][T21487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.351222][T21487] ? clear_bhb_loop+0x70/0xc0 [ 683.351245][T21487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.351263][T21487] RIP: 0033:0x7f7c18f5e98e [ 683.351281][T21487] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 683.351297][T21487] RSP: 002b:00007f7c19f02fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 683.351318][T21487] RAX: ffffffffffffffda RBX: 00007f7c19f036c0 RCX: 00007f7c18f5e98e [ 683.351332][T21487] RDX: 0000000000000001 RSI: 00007f7c19f030a0 RDI: 0000000000000004 [ 683.351344][T21487] RBP: 00007f7c19f03090 R08: 0000000000000000 R09: 0000000000000000 [ 683.351355][T21487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 683.351367][T21487] R13: 00007f7c19226038 R14: 00007f7c19225fa0 R15: 00007fff5f869f48 [ 683.351399][T21487] [ 685.208790][T21545] netlink: 'syz.0.3624': attribute type 2 has an invalid length. [ 685.240574][T21547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3625'. [ 685.241122][T21547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3625'. [ 686.500494][T21577] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3635'. [ 686.513120][T21577] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3635'. [ 686.523267][T21577] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3635'. [ 686.667032][T21495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 687.037261][T21593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3642'. [ 687.490581][T21622] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3650'. [ 687.501636][T21622] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3650'. [ 687.539354][T21624] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3649'. [ 687.539410][T21624] nbd: illegal input index 65508 [ 687.696973][T21624] syzkaller0: entered promiscuous mode [ 687.702689][T21624] syzkaller0: entered allmulticast mode [ 688.334844][T21651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.291181][T21694] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3665'. [ 692.316735][ T6916] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.331415][ T6916] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.331831][ T6916] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.331876][ T6916] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.855267][T21714] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 693.736892][T21740] netlink: 'syz.0.3680': attribute type 4 has an invalid length. [ 693.760860][T21741] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3681'. [ 693.808740][T21744] netlink: 428 bytes leftover after parsing attributes in process `syz.3.3682'. [ 694.047220][T21754] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3687'. [ 694.092512][T21759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3686'. [ 694.102363][T21754] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3687'. [ 694.113195][T21757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3686'. [ 694.119186][T21755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3685'. [ 694.650560][T21777] netlink: 'syz.3.3690': attribute type 1 has an invalid length. [ 694.796859][T21777] 8021q: adding VLAN 0 to HW filter on device bond3 [ 695.038007][T21798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3694'. [ 695.255968][T21777] bond1: (slave dummy0): Releasing active interface [ 695.256025][T21777] dummy0: left allmulticast mode [ 695.285352][T21801] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3690'. [ 695.307462][T21777] bond3: (slave dummy0): making interface the new active one [ 695.318280][T21777] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 695.378410][T21781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.417636][T21781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.467198][T21781] bond0 (unregistering): (slave team0): Releasing backup interface [ 695.500402][T21781] bond0 (unregistering): Released all slaves [ 696.030824][T21832] ip_tunnel: non-ECT from 10.1.1.0 with TOS=0x3 [ 696.175657][T21834] netlink: 'syz.4.3703': attribute type 1 has an invalid length. [ 696.337897][T21834] bond0: entered promiscuous mode [ 696.338379][T21834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.424008][T21834] bond0: (slave bridge1): making interface the new active one [ 696.424055][T21834] bridge1: entered promiscuous mode [ 696.449201][T21834] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 697.528753][T21895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.550087][T21892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.222255][T21912] ±ÿ speed is unknown, defaulting to 1000 [ 698.235776][T21923] sock: sock_timestamping_bind_phc: sock not bind to device [ 698.275472][ T5620] Bluetooth: hci0: command 0x0406 tx timeout [ 698.295508][T21912] lo speed is unknown, defaulting to 1000 [ 699.046217][T21937] ±ÿ speed is unknown, defaulting to 1000 [ 699.089486][T21937] lo speed is unknown, defaulting to 1000 [ 700.206530][T21984] xt_TCPMSS: Only works on TCP SYN packets [ 700.221445][T21980] __nla_validate_parse: 4 callbacks suppressed [ 700.221506][T21980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3731'. [ 700.221527][T21980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3731'. [ 700.221540][T21980] tc_dump_action: action bad kind [ 700.639045][T22005] syzkaller0: entered promiscuous mode [ 700.639088][T22005] syzkaller0: entered allmulticast mode [ 700.879394][T22011] batman_adv: batadv0: Adding interface: macvtap1 [ 700.886376][T22011] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.886454][T22011] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 701.194765][T22033] syzkaller1: entered allmulticast mode [ 701.813605][T22045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3753'. [ 702.142873][T22054] macsec1: entered promiscuous mode [ 702.142914][T22054] hsr0: entered promiscuous mode [ 702.424433][T22059] syzkaller1: entered allmulticast mode [ 702.851264][T22074] netlink: 'syz.3.3760': attribute type 1 has an invalid length. [ 702.940048][T22074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.942353][T22074] netlink: 'syz.3.3760': attribute type 1 has an invalid length. [ 702.977841][T22074] netlink: 'syz.3.3760': attribute type 1 has an invalid length. [ 702.978976][T22074] netlink: 'syz.3.3760': attribute type 1 has an invalid length. [ 702.979204][T22074] netlink: 'syz.3.3760': attribute type 1 has an invalid length. [ 702.979451][T22074] netlink: 'syz.3.3760': attribute type 1 has an invalid length. [ 702.979657][T22074] netlink: 'syz.3.3760': attribute type 1 has an invalid length. [ 702.979855][T22074] netlink: 'syz.3.3760': attribute type 1 has an invalid length. [ 702.980059][T22074] netlink: 'syz.3.3760': attribute type 1 has an invalid length. [ 702.980257][T22074] netlink: 'syz.3.3760': attribute type 1 has an invalid length. [ 702.992628][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.992900][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.993231][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.057736][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.067567][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.067807][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.070982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.071354][T22093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.071760][T22093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.093712][T22093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.299648][T22103] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3768'. [ 703.644599][T22116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3772'. [ 703.737270][T22116] veth3: entered allmulticast mode [ 703.852220][T22122] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3773'. [ 703.852308][T22122] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3773'. [ 703.852322][T22122] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3773'. [ 704.105040][T22131] 8021q: adding VLAN 0 to HW filter on device bond3 [ 704.651402][T22135] syzkaller1: entered promiscuous mode [ 704.657755][T22135] syzkaller1: entered allmulticast mode [ 705.324507][T22172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3788'. [ 705.338522][T22175] netlink: 324 bytes leftover after parsing attributes in process `syz.4.3787'. [ 705.631535][T22182] tipc: Started in network mode [ 705.631591][T22182] tipc: Node identity ac1414aa, cluster identity 4711 [ 705.632033][T22182] tipc: New replicast peer: 172.20.20.187 [ 705.653824][T22182] tipc: Enabled bearer , priority 5 [ 705.970827][T22177] syzkaller0: entered promiscuous mode [ 705.970878][T22177] syzkaller0: entered allmulticast mode [ 705.972574][T22183] syzkaller0: entered promiscuous mode [ 705.972697][T22183] syzkaller0: entered allmulticast mode [ 706.506477][T22217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3797'. [ 706.557090][T22217] ipvlan2: entered allmulticast mode [ 706.557152][T22217] syz_tun: entered allmulticast mode [ 706.745214][ T5637] tipc: Node number set to 2886997162 [ 707.449953][T22259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3807'. [ 707.607454][T22262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3808'. [ 707.607502][T22262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3808'. [ 707.608305][T22264] SET target dimension over the limit! [ 707.633208][T22262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3808'. [ 707.644284][T22267] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3808'. [ 707.656501][T22262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3808'. [ 707.668571][T22262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3808'. [ 707.816257][T22273] FAULT_INJECTION: forcing a failure. [ 707.816257][T22273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.831220][T22273] CPU: 0 UID: 0 PID: 22273 Comm: syz.2.3812 Not tainted syzkaller #0 PREEMPT(full) [ 707.831251][T22273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 707.831264][T22273] Call Trace: [ 707.831273][T22273] [ 707.831281][T22273] dump_stack_lvl+0xe8/0x150 [ 707.831314][T22273] should_fail_ex+0x410/0x560 [ 707.831346][T22273] _copy_from_user+0x2d/0xb0 [ 707.831366][T22273] ___sys_sendmsg+0x1c6/0x360 [ 707.831385][T22273] ? __lock_acquire+0x6df/0x2e50 [ 707.831410][T22273] ? __pfx____sys_sendmsg+0x10/0x10 [ 707.831471][T22273] ? __fget_files+0x2a/0x420 [ 707.831496][T22273] ? __fget_files+0x3a2/0x420 [ 707.831531][T22273] __x64_sys_sendmsg+0x1b1/0x290 [ 707.831555][T22273] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 707.831598][T22273] do_syscall_64+0x166/0x520 [ 707.831624][T22273] ? trace_irq_disable+0x3b/0x140 [ 707.831644][T22273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.831663][T22273] ? clear_bhb_loop+0x70/0xc0 [ 707.831688][T22273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.831708][T22273] RIP: 0033:0x7fa057b9e159 [ 707.831729][T22273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.831747][T22273] RSP: 002b:00007fa058afa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.831771][T22273] RAX: ffffffffffffffda RBX: 00007fa057e25fa0 RCX: 00007fa057b9e159 [ 707.831787][T22273] RDX: 0000000000004000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 707.831810][T22273] RBP: 00007fa058afa090 R08: 0000000000000000 R09: 0000000000000000 [ 707.831824][T22273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.831836][T22273] R13: 00007fa057e26038 R14: 00007fa057e25fa0 R15: 00007ffd26fe0bf8 [ 707.831870][T22273] [ 708.434307][T22286] ±ÿ speed is unknown, defaulting to 1000 [ 708.710788][T22286] lo speed is unknown, defaulting to 1000 [ 709.663326][T16408] net_ratelimit: 314 callbacks suppressed [ 709.663393][T16408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.663675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.780744][T22326] syzkaller0: entered promiscuous mode [ 709.786796][T22326] syzkaller0: entered allmulticast mode [ 709.824909][T22328] FAULT_INJECTION: forcing a failure. [ 709.824909][T22328] name failslab, interval 1, probability 0, space 0, times 0 [ 709.824954][T22328] CPU: 0 UID: 0 PID: 22328 Comm: syz.1.3825 Not tainted syzkaller #0 PREEMPT(full) [ 709.824979][T22328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 709.824991][T22328] Call Trace: [ 709.825000][T22328] [ 709.825008][T22328] dump_stack_lvl+0xe8/0x150 [ 709.825039][T22328] should_fail_ex+0x410/0x560 [ 709.825073][T22328] ? __alloc_skb+0x1db/0x7a0 [ 709.825098][T22328] should_failslab+0xa8/0x100 [ 709.825120][T22328] ? __alloc_skb+0x1db/0x7a0 [ 709.825142][T22328] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 709.825168][T22328] ? __alloc_skb+0x18d/0x7a0 [ 709.825193][T22328] ? __alloc_skb+0x1db/0x7a0 [ 709.825223][T22328] __alloc_skb+0x1db/0x7a0 [ 709.825252][T22328] netlink_sendmsg+0x5d4/0xb40 [ 709.825284][T22328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.825312][T22328] ? apparmor_socket_sendmsg+0x98/0x360 [ 709.825340][T22328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.825359][T22328] sock_sendmsg_nosec+0x13a/0x180 [ 709.825385][T22328] ____sys_sendmsg+0x54e/0x850 [ 709.825408][T22328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 709.825445][T22328] ? import_iovec+0x73/0xa0 [ 709.825475][T22328] ___sys_sendmsg+0x2a5/0x360 [ 709.825492][T22328] ? __lock_acquire+0x6df/0x2e50 [ 709.825516][T22328] ? __pfx____sys_sendmsg+0x10/0x10 [ 709.825568][T22328] ? __fget_files+0x2a/0x420 [ 709.825590][T22328] ? __fget_files+0x3a2/0x420 [ 709.825623][T22328] __x64_sys_sendmsg+0x1b1/0x290 [ 709.825644][T22328] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 709.825683][T22328] do_syscall_64+0x166/0x520 [ 709.825706][T22328] ? trace_irq_disable+0x3b/0x140 [ 709.825724][T22328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.825744][T22328] ? clear_bhb_loop+0x70/0xc0 [ 709.825766][T22328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.825784][T22328] RIP: 0033:0x7f2bbf99e159 [ 709.825802][T22328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.825817][T22328] RSP: 002b:00007f2bc0789028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.825838][T22328] RAX: ffffffffffffffda RBX: 00007f2bbfc25fa0 RCX: 00007f2bbf99e159 [ 709.825852][T22328] RDX: 0000000000004000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 709.825864][T22328] RBP: 00007f2bc0789090 R08: 0000000000000000 R09: 0000000000000000 [ 709.825876][T22328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.825887][T22328] R13: 00007f2bbfc26038 R14: 00007f2bbfc25fa0 R15: 00007ffd77394628 [ 709.825917][T22328] [ 710.185399][ T6916] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.185474][ T6916] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.185507][ T6916] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.185537][ T6916] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.947620][T22361] syzkaller0: entered promiscuous mode [ 710.953408][T22361] syzkaller0: entered allmulticast mode [ 711.028208][T22361] validate_nla: 30 callbacks suppressed [ 711.028283][T22361] netlink: 'syz.4.3837': attribute type 1 has an invalid length. [ 711.036992][T22367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.252035][T22372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.252694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.252962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.253260][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.480744][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.480982][ T100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.481014][ T100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.135506][T22367] tipc: Enabling of bearer rejected, failed to enable media [ 715.150911][T22371] __nla_validate_parse: 65 callbacks suppressed [ 715.159300][T22371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3840'. [ 715.159652][T22372] netlink: 75 bytes leftover after parsing attributes in process `syz.1.3840'. [ 715.396230][T16410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.399649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.552064][T22395] ip6gretap0: entered promiscuous mode [ 715.951066][T22420] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.951233][T22420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.951608][T22420] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.951769][T22420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.520204][T22445] FAULT_INJECTION: forcing a failure. [ 716.520204][T22445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.520266][T22445] CPU: 0 UID: 0 PID: 22445 Comm: syz.3.3857 Not tainted syzkaller #0 PREEMPT(full) [ 716.520290][T22445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 716.520301][T22445] Call Trace: [ 716.520308][T22445] [ 716.520316][T22445] dump_stack_lvl+0xe8/0x150 [ 716.520366][T22445] should_fail_ex+0x410/0x560 [ 716.520401][T22445] _copy_from_iter+0x1d3/0x1660 [ 716.520428][T22445] ? __alloc_skb+0x27a/0x7a0 [ 716.520459][T22445] ? __alloc_skb+0x27a/0x7a0 [ 716.520485][T22445] ? __alloc_skb+0x27a/0x7a0 [ 716.520511][T22445] ? __pfx__copy_from_iter+0x10/0x10 [ 716.520535][T22445] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 716.520562][T22445] ? __alloc_skb+0x27a/0x7a0 [ 716.520585][T22445] ? __alloc_skb+0x27a/0x7a0 [ 716.520616][T22445] ? netlink_sendmsg+0x650/0xb40 [ 716.520639][T22445] ? skb_put+0x112/0x210 [ 716.520667][T22445] netlink_sendmsg+0x6c0/0xb40 [ 716.520698][T22445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.520727][T22445] ? apparmor_socket_sendmsg+0x98/0x360 [ 716.520762][T22445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.520782][T22445] sock_sendmsg_nosec+0x13a/0x180 [ 716.520808][T22445] ____sys_sendmsg+0x54e/0x850 [ 716.520833][T22445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 716.520861][T22445] ? import_iovec+0x73/0xa0 [ 716.520891][T22445] ___sys_sendmsg+0x2a5/0x360 [ 716.520909][T22445] ? __lock_acquire+0x6df/0x2e50 [ 716.520935][T22445] ? __pfx____sys_sendmsg+0x10/0x10 [ 716.520988][T22445] ? __fget_files+0x2a/0x420 [ 716.521012][T22445] ? __fget_files+0x3a2/0x420 [ 716.521045][T22445] __x64_sys_sendmsg+0x1b1/0x290 [ 716.521067][T22445] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 716.521107][T22445] do_syscall_64+0x166/0x520 [ 716.521133][T22445] ? trace_irq_disable+0x3b/0x140 [ 716.521161][T22445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.521181][T22445] ? clear_bhb_loop+0x70/0xc0 [ 716.521204][T22445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.521222][T22445] RIP: 0033:0x7f7c18f9e159 [ 716.521241][T22445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.521257][T22445] RSP: 002b:00007f7c19f03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.521279][T22445] RAX: ffffffffffffffda RBX: 00007f7c19225fa0 RCX: 00007f7c18f9e159 [ 716.521292][T22445] RDX: 0000000000004000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 716.521304][T22445] RBP: 00007f7c19f03090 R08: 0000000000000000 R09: 0000000000000000 [ 716.521316][T22445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.521327][T22445] R13: 00007f7c19226038 R14: 00007f7c19225fa0 R15: 00007fff5f869f48 [ 716.521358][T22445] [ 717.241860][T22465] tipc: Started in network mode [ 717.247865][T22465] tipc: Node identity 7f000001, cluster identity 4711 [ 717.256894][T22465] tipc: New replicast peer: 127.0.0.1 [ 717.263197][T22465] tipc: Enabled bearer , priority 5 [ 717.658950][T22479] netlink: zone id is out of range [ 717.659184][T22479] netlink: zone id is out of range [ 717.659226][T22479] netlink: zone id is out of range [ 717.659234][T22479] netlink: zone id is out of range [ 717.659242][T22479] netlink: zone id is out of range [ 717.659249][T22479] netlink: zone id is out of range [ 717.659256][T22479] netlink: zone id is out of range [ 717.659263][T22479] netlink: zone id is out of range [ 717.782588][T22484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3868'. [ 717.796659][T22484] vlan0: entered promiscuous mode [ 718.226200][T22506] FAULT_INJECTION: forcing a failure. [ 718.226200][T22506] name failslab, interval 1, probability 0, space 0, times 0 [ 718.226276][T22506] CPU: 1 UID: 0 PID: 22506 Comm: syz.0.3874 Not tainted syzkaller #0 PREEMPT(full) [ 718.226301][T22506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 718.226314][T22506] Call Trace: [ 718.226323][T22506] [ 718.226332][T22506] dump_stack_lvl+0xe8/0x150 [ 718.226368][T22506] should_fail_ex+0x410/0x560 [ 718.226403][T22506] should_failslab+0xa8/0x100 [ 718.226426][T22506] ? skb_clone+0x212/0x3a0 [ 718.226448][T22506] kmem_cache_alloc_noprof+0xa1/0x600 [ 718.226482][T22506] ? skb_clone+0x212/0x3a0 [ 718.226510][T22506] skb_clone+0x212/0x3a0 [ 718.226535][T22506] __netlink_deliver_tap+0x413/0x860 [ 718.226572][T22506] ? netlink_deliver_tap+0x2e/0x1b0 [ 718.226598][T22506] netlink_deliver_tap+0x19c/0x1b0 [ 718.226620][T22506] netlink_unicast+0x781/0x940 [ 718.226652][T22506] netlink_sendmsg+0x813/0xb40 [ 718.226684][T22506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.226715][T22506] ? apparmor_socket_sendmsg+0x98/0x360 [ 718.226746][T22506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.226768][T22506] sock_sendmsg_nosec+0x13a/0x180 [ 718.226797][T22506] ____sys_sendmsg+0x54e/0x850 [ 718.226825][T22506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 718.226857][T22506] ? import_iovec+0x73/0xa0 [ 718.226893][T22506] ___sys_sendmsg+0x2a5/0x360 [ 718.226912][T22506] ? __lock_acquire+0x6df/0x2e50 [ 718.226939][T22506] ? __pfx____sys_sendmsg+0x10/0x10 [ 718.227006][T22506] ? __fget_files+0x2a/0x420 [ 718.227032][T22506] ? __fget_files+0x3a2/0x420 [ 718.227070][T22506] __x64_sys_sendmsg+0x1b1/0x290 [ 718.227095][T22506] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 718.227142][T22506] do_syscall_64+0x166/0x520 [ 718.227178][T22506] ? trace_irq_disable+0x3b/0x140 [ 718.227198][T22506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.227220][T22506] ? clear_bhb_loop+0x70/0xc0 [ 718.227245][T22506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.227266][T22506] RIP: 0033:0x7fa9a5f9e159 [ 718.227287][T22506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.227305][T22506] RSP: 002b:00007fa9a6eef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.227329][T22506] RAX: ffffffffffffffda RBX: 00007fa9a6225fa0 RCX: 00007fa9a5f9e159 [ 718.227344][T22506] RDX: 0000000000004000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 718.227358][T22506] RBP: 00007fa9a6eef090 R08: 0000000000000000 R09: 0000000000000000 [ 718.227372][T22506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.227384][T22506] R13: 00007fa9a6226038 R14: 00007fa9a6225fa0 R15: 00007ffcfa0bd4f8 [ 718.227420][T22506] [ 718.636597][T16007] tipc: Node number set to 2130706433 [ 718.679575][T22517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3877'. [ 718.719145][T22522] netlink: 'syz.2.3878': attribute type 1 has an invalid length. [ 718.781244][T22526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3876'. [ 718.804334][T22522] bond2: entered promiscuous mode [ 718.810330][T22522] 8021q: adding VLAN 0 to HW filter on device bond2 [ 718.820557][T22525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3878'. [ 718.873459][T22526] bond0 (unregistering): Released all slaves [ 718.978736][T22522] 8021q: adding VLAN 0 to HW filter on device bond2 [ 718.979158][T22522] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 718.979181][T22522] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 718.992807][T22525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3878'. [ 719.021760][T22522] bond2: (slave ipip0): making interface the new active one [ 719.021790][T22522] ipip0: entered promiscuous mode [ 719.043874][T22522] bond2: (slave ipip0): Enslaving as an active interface with an up link [ 719.177440][T22522] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3878'. [ 719.216974][T22525] ±ÿ speed is unknown, defaulting to 1000 [ 719.228799][T22525] lo speed is unknown, defaulting to 1000 [ 719.294065][T22538] netlink: 'syz.3.3882': attribute type 11 has an invalid length. [ 719.294098][T22538] netlink: 'syz.3.3882': attribute type 4 has an invalid length. [ 719.294131][T22538] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3882'. [ 719.303871][T22535] veth0: entered promiscuous mode [ 719.344130][T22543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3884'. [ 719.429607][T22536] veth0: left promiscuous mode [ 719.960973][T22568] xt_TCPMSS: Only works on TCP SYN packets [ 719.961295][T22568] xt_TCPMSS: Only works on TCP SYN packets [ 719.961606][T22568] xt_TCPMSS: Only works on TCP SYN packets [ 719.961874][T22568] xt_TCPMSS: Only works on TCP SYN packets [ 720.042799][T22565] bond3: left allmulticast mode [ 720.043204][T22565] bridge0: port 3(bond3) entered disabled state [ 720.511057][T22582] syzkaller0: entered promiscuous mode [ 720.511110][T22582] syzkaller0: entered allmulticast mode [ 720.520002][T22582] tipc: Started in network mode [ 720.520031][T22582] tipc: Node identity 262444261ed3, cluster identity 4711 [ 720.521814][T22582] tipc: Enabled bearer , priority 0 [ 720.958987][T22582] tipc: Resetting bearer [ 721.084379][T22582] tipc: Disabling bearer [ 721.167351][ T100] net_ratelimit: 95 callbacks suppressed [ 721.167431][ T100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.167744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.621061][T22633] __nla_validate_parse: 3 callbacks suppressed [ 721.621125][T22633] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3909'. [ 721.638773][T22633] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3909'. [ 721.795707][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.797424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.317754][T22664] x_tables: duplicate underflow at hook 1 [ 722.425497][T22670] sctp: [Deprecated]: syz.2.3920 (pid 22670) Use of int in maxseg socket option. [ 722.425497][T22670] Use struct sctp_assoc_value instead [ 722.435192][T22668] FAULT_INJECTION: forcing a failure. [ 722.435192][T22668] name failslab, interval 1, probability 0, space 0, times 0 [ 722.435228][T22668] CPU: 0 UID: 0 PID: 22668 Comm: syz.3.3919 Not tainted syzkaller #0 PREEMPT(full) [ 722.435250][T22668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 722.435260][T22668] Call Trace: [ 722.435268][T22668] [ 722.435276][T22668] dump_stack_lvl+0xe8/0x150 [ 722.435309][T22668] should_fail_ex+0x410/0x560 [ 722.435340][T22668] should_failslab+0xa8/0x100 [ 722.435364][T22668] __kvmalloc_node_noprof+0x176/0x820 [ 722.435387][T22668] ? hhf_init+0x514/0xa30 [ 722.435471][T22668] ? hhf_init+0x514/0xa30 [ 722.435501][T22668] hhf_init+0x514/0xa30 [ 722.435526][T22668] ? __pfx_hhf_init+0x10/0x10 [ 722.435551][T22668] qdisc_create+0x7b5/0xf00 [ 722.435617][T22668] ? lockdep_rtnl_is_held+0x26/0x40 [ 722.435680][T22668] tc_modify_qdisc+0x17af/0x2390 [ 722.435718][T22668] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 722.435744][T22668] ? __dev_queue_xmit+0x29b/0x3820 [ 722.435811][T22668] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 722.435834][T22668] rtnetlink_rcv_msg+0x7b9/0xc00 [ 722.435883][T22668] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 722.435907][T22668] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 722.435930][T22668] ? ref_tracker_free+0x689/0x830 [ 722.435959][T22668] ? __pfx_ref_tracker_free+0x10/0x10 [ 722.435996][T22668] netlink_rcv_skb+0x226/0x4a0 [ 722.436018][T22668] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 722.436045][T22668] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 722.436080][T22668] ? netlink_deliver_tap+0x2e/0x1b0 [ 722.436099][T22668] ? netlink_deliver_tap+0x2e/0x1b0 [ 722.436125][T22668] netlink_unicast+0x7bd/0x940 [ 722.436156][T22668] netlink_sendmsg+0x813/0xb40 [ 722.436186][T22668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.436216][T22668] ? apparmor_socket_sendmsg+0x98/0x360 [ 722.436254][T22668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.436274][T22668] sock_sendmsg_nosec+0x13a/0x180 [ 722.436299][T22668] ____sys_sendmsg+0x54e/0x850 [ 722.436323][T22668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 722.436351][T22668] ? import_iovec+0x73/0xa0 [ 722.436382][T22668] ___sys_sendmsg+0x2a5/0x360 [ 722.436399][T22668] ? __lock_acquire+0x6df/0x2e50 [ 722.436423][T22668] ? __pfx____sys_sendmsg+0x10/0x10 [ 722.436479][T22668] ? __fget_files+0x2a/0x420 [ 722.436501][T22668] ? __fget_files+0x3a2/0x420 [ 722.436539][T22668] __x64_sys_sendmsg+0x1b1/0x290 [ 722.436561][T22668] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 722.436602][T22668] do_syscall_64+0x166/0x520 [ 722.436625][T22668] ? trace_irq_disable+0x3b/0x140 [ 722.436652][T22668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.436671][T22668] ? clear_bhb_loop+0x70/0xc0 [ 722.436694][T22668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.436712][T22668] RIP: 0033:0x7f7c18f9e159 [ 722.436730][T22668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.436746][T22668] RSP: 002b:00007f7c19f03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 722.436767][T22668] RAX: ffffffffffffffda RBX: 00007f7c19225fa0 RCX: 00007f7c18f9e159 [ 722.436781][T22668] RDX: 0000000000004000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 722.436793][T22668] RBP: 00007f7c19f03090 R08: 0000000000000000 R09: 0000000000000000 [ 722.436805][T22668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.436816][T22668] R13: 00007f7c19226038 R14: 00007f7c19225fa0 R15: 00007fff5f869f48 [ 722.436848][T22668] [ 722.522450][T22666] netlink: 'syz.1.3918': attribute type 1 has an invalid length. [ 723.347169][T22674] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 723.362543][T22691] sctp: [Deprecated]: syz.4.3927 (pid 22691) Use of struct sctp_assoc_value in delayed_ack socket option. [ 723.362543][T22691] Use struct sctp_sack_info instead [ 723.873600][T22702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3929'. [ 723.907069][T22702] bond4: option lacp_active: invalid value (5) [ 723.919657][T22702] bond4 (unregistering): Released all slaves [ 724.074983][T22705] FAULT_INJECTION: forcing a failure. [ 724.074983][T22705] name failslab, interval 1, probability 0, space 0, times 0 [ 724.092279][T22705] CPU: 1 UID: 0 PID: 22705 Comm: syz.4.3931 Not tainted syzkaller #0 PREEMPT(full) [ 724.092312][T22705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 724.092325][T22705] Call Trace: [ 724.092334][T22705] [ 724.092343][T22705] dump_stack_lvl+0xe8/0x150 [ 724.092382][T22705] should_fail_ex+0x410/0x560 [ 724.092419][T22705] should_failslab+0xa8/0x100 [ 724.092445][T22705] __kvmalloc_node_noprof+0x176/0x820 [ 724.092471][T22705] ? __kvmalloc_node_noprof+0x345/0x820 [ 724.092492][T22705] ? hhf_init+0x552/0xa30 [ 724.092518][T22705] ? hhf_init+0x552/0xa30 [ 724.092553][T22705] hhf_init+0x552/0xa30 [ 724.092584][T22705] ? __pfx_hhf_init+0x10/0x10 [ 724.092612][T22705] qdisc_create+0x7b5/0xf00 [ 724.092643][T22705] ? lockdep_rtnl_is_held+0x26/0x40 [ 724.092672][T22705] tc_modify_qdisc+0x17af/0x2390 [ 724.092717][T22705] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 724.092746][T22705] ? __dev_queue_xmit+0x29b/0x3820 [ 724.092809][T22705] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 724.092836][T22705] rtnetlink_rcv_msg+0x7b9/0xc00 [ 724.092871][T22705] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 724.092904][T22705] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 724.092931][T22705] ? ref_tracker_free+0x689/0x830 [ 724.092965][T22705] ? __pfx_ref_tracker_free+0x10/0x10 [ 724.093008][T22705] netlink_rcv_skb+0x226/0x4a0 [ 724.093033][T22705] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 724.093065][T22705] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 724.093104][T22705] ? netlink_deliver_tap+0x2e/0x1b0 [ 724.093127][T22705] ? netlink_deliver_tap+0x2e/0x1b0 [ 724.093170][T22705] netlink_unicast+0x7bd/0x940 [ 724.093205][T22705] netlink_sendmsg+0x813/0xb40 [ 724.093241][T22705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 724.093281][T22705] ? apparmor_socket_sendmsg+0x98/0x360 [ 724.093314][T22705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 724.093337][T22705] sock_sendmsg_nosec+0x13a/0x180 [ 724.093368][T22705] ____sys_sendmsg+0x54e/0x850 [ 724.093396][T22705] ? __pfx_____sys_sendmsg+0x10/0x10 [ 724.093429][T22705] ? import_iovec+0x73/0xa0 [ 724.093465][T22705] ___sys_sendmsg+0x2a5/0x360 [ 724.093485][T22705] ? __lock_acquire+0x6df/0x2e50 [ 724.093513][T22705] ? __pfx____sys_sendmsg+0x10/0x10 [ 724.093571][T22705] ? __fget_files+0x2a/0x420 [ 724.093595][T22705] ? __fget_files+0x3a2/0x420 [ 724.093633][T22705] __x64_sys_sendmsg+0x1b1/0x290 [ 724.093656][T22705] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 724.093702][T22705] do_syscall_64+0x166/0x520 [ 724.093729][T22705] ? trace_irq_disable+0x3b/0x140 [ 724.093749][T22705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.093778][T22705] ? clear_bhb_loop+0x70/0xc0 [ 724.093802][T22705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.093820][T22705] RIP: 0033:0x7f33eb19e159 [ 724.093837][T22705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.093851][T22705] RSP: 002b:00007f33ebf88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 724.093871][T22705] RAX: ffffffffffffffda RBX: 00007f33eb425fa0 RCX: 00007f33eb19e159 [ 724.093883][T22705] RDX: 0000000000004000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 724.093894][T22705] RBP: 00007f33ebf88090 R08: 0000000000000000 R09: 0000000000000000 [ 724.093904][T22705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.093914][T22705] R13: 00007f33eb426038 R14: 00007f33eb425fa0 R15: 00007fff80c37d68 [ 724.093941][T22705] [ 724.528968][T22714] tipc: Enabled bearer , priority 0 [ 724.537645][T22714] syzkaller0: entered promiscuous mode [ 724.543413][T22714] syzkaller0: entered allmulticast mode [ 724.602250][T22714] tipc: Resetting bearer [ 724.608444][T22713] tipc: Resetting bearer [ 724.649059][T22713] tipc: Disabling bearer [ 724.744702][T22718] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 724.805622][T22721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3937'. [ 724.814942][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3937'. [ 725.002178][T16412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.002422][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.002956][T16412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.367980][T22738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3942'. [ 725.378801][T22738] siw: device registration error -23 [ 725.419500][T22743] netlink: 'syz.1.3945': attribute type 1 has an invalid length. [ 725.479904][T22743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.481826][T22746] syzkaller0: entered promiscuous mode [ 725.481848][T22746] syzkaller0: entered allmulticast mode [ 725.490933][T22737] tipc: Enabled bearer , priority 0 [ 725.588192][T22754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3945'. [ 725.712298][T22754] bond0: (slave dummy0): making interface the new active one [ 725.720737][T22754] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 725.732448][T22736] tipc: Resetting bearer [ 725.800171][T22736] tipc: Disabling bearer [ 726.319572][T22777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3951'. [ 726.335422][T22777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3951'. [ 726.481309][T22788] FAULT_INJECTION: forcing a failure. [ 726.481309][T22788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.496210][T22788] CPU: 1 UID: 0 PID: 22788 Comm: syz.0.3956 Not tainted syzkaller #0 PREEMPT(full) [ 726.496241][T22788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 726.496254][T22788] Call Trace: [ 726.496263][T22788] [ 726.496273][T22788] dump_stack_lvl+0xe8/0x150 [ 726.496311][T22788] should_fail_ex+0x410/0x560 [ 726.496346][T22788] _copy_from_iter+0x1d3/0x1660 [ 726.496376][T22788] ? __alloc_skb+0x27a/0x7a0 [ 726.496406][T22788] ? __alloc_skb+0x27a/0x7a0 [ 726.496435][T22788] ? __alloc_skb+0x27a/0x7a0 [ 726.496465][T22788] ? __pfx__copy_from_iter+0x10/0x10 [ 726.496497][T22788] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 726.496526][T22788] ? __alloc_skb+0x27a/0x7a0 [ 726.496552][T22788] ? __alloc_skb+0x27a/0x7a0 [ 726.496586][T22788] ? netlink_sendmsg+0x650/0xb40 [ 726.496610][T22788] ? skb_put+0x112/0x210 [ 726.496642][T22788] netlink_sendmsg+0x6c0/0xb40 [ 726.496677][T22788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.496710][T22788] ? apparmor_socket_sendmsg+0x98/0x360 [ 726.496742][T22788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.496765][T22788] sock_sendmsg_nosec+0x13a/0x180 [ 726.496794][T22788] ____sys_sendmsg+0x54e/0x850 [ 726.496821][T22788] ? __pfx_____sys_sendmsg+0x10/0x10 [ 726.496852][T22788] ? import_iovec+0x73/0xa0 [ 726.496888][T22788] ___sys_sendmsg+0x2a5/0x360 [ 726.496907][T22788] ? __lock_acquire+0x6df/0x2e50 [ 726.496933][T22788] ? __pfx____sys_sendmsg+0x10/0x10 [ 726.496993][T22788] ? __fget_files+0x2a/0x420 [ 726.497018][T22788] ? __fget_files+0x3a2/0x420 [ 726.497056][T22788] __x64_sys_sendmsg+0x1b1/0x290 [ 726.497080][T22788] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 726.497125][T22788] do_syscall_64+0x166/0x520 [ 726.497160][T22788] ? trace_irq_disable+0x3b/0x140 [ 726.497179][T22788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.497201][T22788] ? clear_bhb_loop+0x70/0xc0 [ 726.497227][T22788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.497247][T22788] RIP: 0033:0x7fa9a5f9e159 [ 726.497267][T22788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.497285][T22788] RSP: 002b:00007fa9a6eef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.497308][T22788] RAX: ffffffffffffffda RBX: 00007fa9a6225fa0 RCX: 00007fa9a5f9e159 [ 726.497323][T22788] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 726.497337][T22788] RBP: 00007fa9a6eef090 R08: 0000000000000000 R09: 0000000000000000 [ 726.497350][T22788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.497363][T22788] R13: 00007fa9a6226038 R14: 00007fa9a6225fa0 R15: 00007ffcfa0bd4f8 [ 726.497397][T22788] [ 726.804399][T22795] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3957'. [ 726.814776][T22794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3955'. [ 726.842586][T22785] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3955'. [ 726.853302][T22797] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3958'. [ 726.853383][T22797] netlink: 'syz.3.3958': attribute type 9 has an invalid length. [ 726.853399][T22797] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3958'. [ 726.853412][T22797] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3958'. [ 726.862814][T22797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3958'. [ 726.915982][T22785] team_slave_1: entered promiscuous mode [ 726.918976][ T100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.919245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.941414][T22785] gretap0: entered promiscuous mode [ 726.948590][T22785] debugfs: 'hsr1' already exists in 'hsr' [ 726.954905][T22785] Cannot create hsr debugfs directory [ 726.954932][T22785] hsr1: entered promiscuous mode [ 727.128394][T22797] 8021q: adding VLAN 0 to HW filter on device bond4 [ 727.200323][T22809] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 727.200475][T22811] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 727.214992][T22798] bond3: (slave dummy0): Releasing active interface [ 727.268251][T22798] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 727.679119][T22826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3968'. [ 727.679181][T22826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3968'. [ 727.755367][T22833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3971'. [ 727.814902][T22830] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 727.824446][T22836] FAULT_INJECTION: forcing a failure. [ 727.824446][T22836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.824507][T22836] CPU: 0 UID: 0 PID: 22836 Comm: syz.3.3970 Not tainted syzkaller #0 PREEMPT(full) [ 727.824540][T22836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 727.824551][T22836] Call Trace: [ 727.824559][T22836] [ 727.824567][T22836] dump_stack_lvl+0xe8/0x150 [ 727.824599][T22836] should_fail_ex+0x410/0x560 [ 727.824630][T22836] _copy_from_iter+0x1d3/0x1660 [ 727.824656][T22836] ? __alloc_skb+0x27a/0x7a0 [ 727.824682][T22836] ? __alloc_skb+0x27a/0x7a0 [ 727.824708][T22836] ? __alloc_skb+0x27a/0x7a0 [ 727.824733][T22836] ? __pfx__copy_from_iter+0x10/0x10 [ 727.824755][T22836] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 727.824780][T22836] ? __alloc_skb+0x27a/0x7a0 [ 727.824802][T22836] ? __alloc_skb+0x27a/0x7a0 [ 727.824832][T22836] ? netlink_sendmsg+0x650/0xb40 [ 727.824853][T22836] ? skb_put+0x112/0x210 [ 727.824881][T22836] netlink_sendmsg+0x6c0/0xb40 [ 727.824910][T22836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.824939][T22836] ? apparmor_socket_sendmsg+0x98/0x360 [ 727.824967][T22836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.824986][T22836] sock_sendmsg_nosec+0x13a/0x180 [ 727.825011][T22836] ____sys_sendmsg+0x54e/0x850 [ 727.825035][T22836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 727.825066][T22836] ? import_iovec+0x73/0xa0 [ 727.825096][T22836] ___sys_sendmsg+0x2a5/0x360 [ 727.825113][T22836] ? __lock_acquire+0x6df/0x2e50 [ 727.825136][T22836] ? __pfx____sys_sendmsg+0x10/0x10 [ 727.825196][T22836] ? __fget_files+0x2a/0x420 [ 727.825218][T22836] ? __fget_files+0x3a2/0x420 [ 727.825250][T22836] __x64_sys_sendmsg+0x1b1/0x290 [ 727.825271][T22836] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 727.825311][T22836] do_syscall_64+0x166/0x520 [ 727.825334][T22836] ? trace_irq_disable+0x3b/0x140 [ 727.825351][T22836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.825369][T22836] ? clear_bhb_loop+0x70/0xc0 [ 727.825391][T22836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.825410][T22836] RIP: 0033:0x7f7c18f9e159 [ 727.825427][T22836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.825443][T22836] RSP: 002b:00007f7c19f03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.825465][T22836] RAX: ffffffffffffffda RBX: 00007f7c19225fa0 RCX: 00007f7c18f9e159 [ 727.825479][T22836] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 727.825491][T22836] RBP: 00007f7c19f03090 R08: 0000000000000000 R09: 0000000000000000 [ 727.825503][T22836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.825515][T22836] R13: 00007f7c19226038 R14: 00007f7c19225fa0 R15: 00007fff5f869f48 [ 727.825545][T22836] [ 728.453721][T22856] ovs-s!!: entered promiscuous mode [ 728.583683][T22865] netlink: 'syz.0.3979': attribute type 1 has an invalid length. [ 728.686044][T22865] bond4: entered promiscuous mode [ 728.687988][T22865] 8021q: adding VLAN 0 to HW filter on device bond4 [ 729.002214][T22891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 730.757952][ T1117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.759526][T16412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.759717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.698124][T22878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 731.770012][T22885] FAULT_INJECTION: forcing a failure. [ 731.770012][T22885] name failslab, interval 1, probability 0, space 0, times 0 [ 731.783748][T22885] CPU: 1 UID: 0 PID: 22885 Comm: syz.2.3985 Not tainted syzkaller #0 PREEMPT(full) [ 731.783780][T22885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 731.783793][T22885] Call Trace: [ 731.783802][T22885] [ 731.783812][T22885] dump_stack_lvl+0xe8/0x150 [ 731.783850][T22885] should_fail_ex+0x410/0x560 [ 731.783888][T22885] should_failslab+0xa8/0x100 [ 731.783916][T22885] __kmalloc_noprof+0xfe/0x720 [ 731.783949][T22885] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 731.783979][T22885] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 731.784017][T22885] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 731.784057][T22885] genl_family_rcv_msg_doit+0xda/0x340 [ 731.784094][T22885] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 731.784143][T22885] ? apparmor_capable+0x126/0x170 [ 731.784172][T22885] ? bpf_lsm_capable+0x9/0x20 [ 731.784203][T22885] ? security_capable+0x7e/0x2c0 [ 731.784242][T22885] genl_rcv_msg+0x614/0x7a0 [ 731.784279][T22885] ? __pfx_genl_rcv_msg+0x10/0x10 [ 731.784306][T22885] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 731.784340][T22885] ? __pfx_ref_tracker_free+0x10/0x10 [ 731.784384][T22885] netlink_rcv_skb+0x226/0x4a0 [ 731.784409][T22885] ? __pfx_genl_rcv_msg+0x10/0x10 [ 731.784439][T22885] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 731.784482][T22885] ? down_read+0x2be/0x330 [ 731.784516][T22885] genl_rcv+0x28/0x40 [ 731.784543][T22885] netlink_unicast+0x7bd/0x940 [ 731.784578][T22885] netlink_sendmsg+0x813/0xb40 [ 731.784612][T22885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.784639][T22885] ? apparmor_socket_sendmsg+0x98/0x360 [ 731.784671][T22885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.784694][T22885] sock_sendmsg_nosec+0x13a/0x180 [ 731.784724][T22885] ____sys_sendmsg+0x54e/0x850 [ 731.784752][T22885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 731.784790][T22885] ? import_iovec+0x73/0xa0 [ 731.784826][T22885] ___sys_sendmsg+0x2a5/0x360 [ 731.784846][T22885] ? __lock_acquire+0x6df/0x2e50 [ 731.784873][T22885] ? __pfx____sys_sendmsg+0x10/0x10 [ 731.784937][T22885] ? __fget_files+0x2a/0x420 [ 731.784963][T22885] ? __fget_files+0x3a2/0x420 [ 731.785001][T22885] __x64_sys_sendmsg+0x1b1/0x290 [ 731.785025][T22885] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 731.785072][T22885] do_syscall_64+0x166/0x520 [ 731.785098][T22885] ? trace_irq_disable+0x3b/0x140 [ 731.785126][T22885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.785148][T22885] ? clear_bhb_loop+0x70/0xc0 [ 731.785174][T22885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.785192][T22885] RIP: 0033:0x7fa057b9e159 [ 731.785213][T22885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.785231][T22885] RSP: 002b:00007fa058afa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.785255][T22885] RAX: ffffffffffffffda RBX: 00007fa057e25fa0 RCX: 00007fa057b9e159 [ 731.785270][T22885] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 731.785283][T22885] RBP: 00007fa058afa090 R08: 0000000000000000 R09: 0000000000000000 [ 731.785297][T22885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.785309][T22885] R13: 00007fa057e26038 R14: 00007fa057e25fa0 R15: 00007ffd26fe0bf8 [ 731.785346][T22885] [ 732.057191][ T6916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.057456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.390650][T22906] syzkaller0: entered promiscuous mode [ 732.390713][T22906] syzkaller0: entered allmulticast mode [ 732.416120][T22906] __nla_validate_parse: 5 callbacks suppressed [ 732.416174][T22906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3992'. [ 732.467273][T22911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3994'. [ 732.476751][T22911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3994'. [ 732.743429][T22921] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 733.212931][T22915] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3995'. [ 733.291472][T22947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.292079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.350156][T22954] trusted_key: syz.4.4001 sent an empty control message without MSG_MORE. [ 733.392242][T22949] syzkaller0: entered promiscuous mode [ 733.398697][T22949] syzkaller0: entered allmulticast mode [ 733.544711][T22962] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 733.827829][T22977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4008'. [ 733.827877][T22977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4008'. [ 735.808387][T16408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.808842][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.527605][ T1117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.181452][ T100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.184056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.788273][T23000] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.823960][T23000] hsr0: left promiscuous mode [ 739.172699][ T30] audit: type=1800 audit(1788053452.368:44): pid=23025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4019" name="blkio.bfq.time_recursive" dev="tmpfs" ino=812 res=0 errno=0 [ 739.235593][ T4934] Bluetooth: hci1: command 0x0406 tx timeout [ 739.375734][T23035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4020'. [ 739.382043][T23037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4021'. [ 739.382070][T23037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4021'. [ 739.421166][T23035] xt_TCPMSS: Only works on TCP SYN packets [ 739.896332][T23045] IPVS: Unknown mcast interface: vcan0 [ 739.918095][T23039] bridge_slave_1: left allmulticast mode [ 739.918151][T23039] bridge_slave_1: left promiscuous mode [ 739.918385][T23039] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.952442][T23039] bridge_slave_0: left allmulticast mode [ 739.952515][T23039] bridge_slave_0: left promiscuous mode [ 739.956442][T23039] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.321890][T23061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4026'. [ 740.331901][T23055] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 740.647189][T23074] netlink: 'syz.4.4030': attribute type 10 has an invalid length. [ 740.647252][T23074] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4030'. [ 740.734007][T23074] wg2: entered promiscuous mode [ 740.759810][T23074] team0: Port device wg2 added [ 740.760762][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e5d1400: rx timeout, send abort [ 740.902696][T23079] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4031'. [ 741.152469][T23086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4033'. [ 741.152522][T23086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4033'. [ 741.178174][T23088] netlink: 'syz.3.4035': attribute type 4 has an invalid length. [ 741.186545][T23088] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4035'. [ 741.260812][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e5d1400: abort rx timeout. Force session deactivation [ 741.542017][T23100] netlink: 'syz.2.4037': attribute type 1 has an invalid length. [ 741.557915][T23099] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.4038'. [ 741.637932][T16408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.638190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.706339][T23100] 8021q: adding VLAN 0 to HW filter on device bond3 [ 742.281104][ T100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.924207][T16410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.924561][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.012877][T23161] netlink: 'syz.2.4056': attribute type 8 has an invalid length. [ 743.117277][T23156] ±ÿ speed is unknown, defaulting to 1000 [ 743.167916][T23156] lo speed is unknown, defaulting to 1000 [ 744.487529][T23209] syzkaller0: entered promiscuous mode [ 744.487576][T23209] syzkaller0: entered allmulticast mode [ 744.533830][T23209] tipc: Enabled bearer , priority 0 [ 744.553599][T23209] tipc: Resetting bearer [ 744.584185][T23206] tipc: Resetting bearer [ 744.632300][T23206] tipc: Disabling bearer [ 745.100485][T23228] syzkaller0: entered promiscuous mode [ 745.100529][T23228] syzkaller0: entered allmulticast mode [ 745.584188][T23246] __nla_validate_parse: 8 callbacks suppressed [ 745.584254][T23246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4077'. [ 745.584278][T23246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4077'. [ 745.624760][T23242] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 745.776108][T23256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4080'. [ 745.829653][T23260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4080'. [ 745.981590][T23259] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.982429][T23259] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.999853][T23259] bridge0: entered allmulticast mode [ 746.054994][T23263] bridge_slave_1: left allmulticast mode [ 746.062361][T23263] bridge_slave_1: left promiscuous mode [ 746.071048][T23263] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.124893][T23263] bridge_slave_0: left allmulticast mode [ 746.134149][T23263] bridge_slave_0: left promiscuous mode [ 746.144275][T23263] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.183466][T23276] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4083'. [ 747.033187][T23303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4092'. [ 747.044151][T23303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4092'. [ 747.398036][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.398260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.451208][T23325] netlink: 'syz.1.4097': attribute type 29 has an invalid length. [ 747.451269][T23325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4097'. [ 747.453512][T23325] netlink: 'syz.1.4097': attribute type 29 has an invalid length. [ 747.453529][T23325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4097'. [ 747.862584][T23354] netlink: 'syz.1.4103': attribute type 6 has an invalid length. [ 747.892215][T23354] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 747.904359][T19685] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 748.038183][ T1041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.302020][T23360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4105'. [ 748.678386][T16410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.680653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.691708][T23382] batadv_slave_0: entered promiscuous mode [ 748.707478][T23384] batadv_slave_0: left promiscuous mode [ 749.558434][T16408] nci: nci_ntf_packet: unknown ntf opcode 0xe2c [ 749.579092][T23404] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 749.831068][T23421] netlink: 'syz.2.4117': attribute type 1 has an invalid length. [ 749.831134][T23421] netlink: 'syz.2.4117': attribute type 2 has an invalid length. [ 750.099236][T23410] 8021q: adding VLAN 0 to HW filter on device bond4 [ 750.440518][T23431] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 750.442855][T23431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.551509][T23434] openvswitch: ovs-system: Dropping previously announced user features [ 750.616079][T23436] __nla_validate_parse: 5 callbacks suppressed [ 750.616128][T23436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4122'. [ 750.616153][T23436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4122'. [ 751.111982][T23455] xt_policy: output policy not valid in PREROUTING and INPUT [ 751.145823][T23458] xt_policy: output policy not valid in PREROUTING and INPUT [ 751.236917][T23457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.531309][T23456] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4130'. [ 751.766859][T23480] IPVS: Scheduler module ip_vs_sip not found [ 751.836068][T23492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4138'. [ 751.845441][T23492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4138'. [ 752.400647][T23512] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4145'. [ 752.464191][T23515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4146'. [ 752.476557][T23513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4144'. [ 752.522309][T16410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.522540][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.870819][T23537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4150'. [ 753.020409][T23526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4149'. [ 753.734508][T23572] ±ÿ speed is unknown, defaulting to 1000 [ 753.759835][T23572] lo speed is unknown, defaulting to 1000 [ 753.795858][ T100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.798878][ T6917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.799153][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.662935][T23604] netlink: 'syz.3.4165': attribute type 4 has an invalid length. [ 754.717754][T23604] netlink: 'syz.3.4165': attribute type 2 has an invalid length. [ 755.664688][T23637] bond5 (unregistering): Released all slaves [ 755.710483][T23640] __nla_validate_parse: 7 callbacks suppressed [ 755.710554][T23640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4178'. [ 755.710589][T23640] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4178'. [ 755.792180][T23643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.792501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.839028][T23643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.839350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.858315][T23643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.199456][T23663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4185'. [ 756.408358][T23667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4186'. [ 756.408409][T23667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4186'. [ 756.520723][T23677] syzkaller1: entered promiscuous mode [ 756.526708][T23677] syzkaller1: entered allmulticast mode [ 757.435566][T23705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4198'. [ 757.435672][T23705] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4198'. [ 757.586873][T23707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4199'. [ 757.586940][T23707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4199'. [ 757.644771][ T6917] net_ratelimit: 61 callbacks suppressed [ 757.644887][ T6917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.645138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.742589][T23710] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4199'. [ 757.847959][T23710] netlink: 'syz.2.4199': attribute type 1 has an invalid length. [ 759.520353][T23744] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 759.520398][T23744] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 759.639356][T23744] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 759.639398][T23744] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 759.746689][T23744] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 759.792637][T23744] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 759.856599][T23744] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 759.866456][T23744] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 760.081093][T23744] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 760.081143][T23744] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 760.783129][T23802] xt_TCPMSS: Only works on TCP SYN packets [ 760.853496][T23818] __nla_validate_parse: 10 callbacks suppressed [ 760.853556][T23818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4228'. [ 760.898759][T23812] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4228'. [ 760.909666][T23812] openvswitch: netlink: Flow key attr not present in new flow. [ 761.002368][T23818] hsr_slave_1 (unregistering): left promiscuous mode [ 761.434802][T23836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4234'. [ 761.434861][T23836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4234'. [ 762.212409][T23871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4242'. [ 762.544989][ T5620] block nbd3: Receive control failed (result -1) ** replaying previous printk message ** [ 762.544989][ T5620] block nbd3: Receive control failed (result -1) [ 762.551752][ T5620] [ 762.564120][ T5620] ====================================================== [ 762.571262][ T5620] WARNING: possible circular locking dependency detected [ 762.578322][ T5620] syzkaller #0 Not tainted [ 762.583029][ T5620] ------------------------------------------------------ [ 762.590251][ T5620] kworker/u9:2/5620 is trying to acquire lock: [ 762.596613][ T5620] ffff88804a5baae0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 762.606509][ T5620] [ 762.606509][ T5620] but task is already holding lock: [ 762.614453][ T5620] ffff888055c9ba68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 762.623920][ T5620] [ 762.623920][ T5620] which lock already depends on the new lock. [ 762.623920][ T5620] [ 762.634634][ T5620] [ 762.634634][ T5620] the existing dependency chain (in reverse order) is: [ 762.644115][ T5620] [ 762.644115][ T5620] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 762.652048][ T5620] __mutex_lock+0x19d/0x1550 [ 762.657536][ T5620] nbd_queue_rq+0x373/0xff0 [ 762.662921][ T5620] blk_mq_dispatch_rq_list+0x499/0x1990 [ 762.669535][ T5620] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 762.676953][ T5620] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 762.683551][ T5620] blk_mq_run_work_fn+0x16c/0x300 [ 762.689272][ T5620] process_scheduled_works+0xc3d/0x1630 [ 762.695640][ T5620] worker_thread+0xa47/0xfb0 [ 762.701066][ T5620] kthread+0x38b/0x480 [ 762.706095][ T5620] ret_from_fork+0x514/0xb70 [ 762.711233][ T5620] ret_from_fork_asm+0x1a/0x30 [ 762.716528][ T5620] [ 762.716528][ T5620] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 762.723749][ T5620] __mutex_lock+0x19d/0x1550 [ 762.728883][ T5620] nbd_queue_rq+0xc1/0xff0 [ 762.733923][ T5620] blk_mq_dispatch_rq_list+0x499/0x1990 [ 762.740120][ T5620] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 762.747367][ T5620] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 762.754002][ T5620] blk_mq_run_work_fn+0x16c/0x300 [ 762.759575][ T5620] process_scheduled_works+0xc3d/0x1630 [ 762.765992][ T5620] worker_thread+0xa47/0xfb0 [ 762.771575][ T5620] kthread+0x38b/0x480 [ 762.776188][ T5620] ret_from_fork+0x514/0xb70 [ 762.781630][ T5620] ret_from_fork_asm+0x1a/0x30 [ 762.787587][ T5620] [ 762.787587][ T5620] -> #4 (set->srcu){.+.+}-{0:0}: [ 762.795129][ T5620] __synchronize_srcu+0xc9/0x2f0 [ 762.800878][ T5620] elevator_switch+0x1e8/0x7b0 [ 762.806746][ T5620] elevator_change+0x2fa/0x480 [ 762.812247][ T5620] elevator_set_default+0x375/0x440 [ 762.818284][ T5620] blk_register_queue+0x3f3/0x4e0 [ 762.824110][ T5620] __add_disk+0x6cb/0xe30 [ 762.829060][ T5620] add_disk_fwnode+0x100/0x3a0 [ 762.834613][ T5620] nbd_dev_add+0x733/0xb60 [ 762.839558][ T5620] nbd_init+0x168/0x1f0 [ 762.844534][ T5620] do_one_initcall+0x250/0x870 [ 762.849837][ T5620] do_initcall_level+0x10a/0x1a0 [ 762.855575][ T5620] do_initcalls+0x59/0xa0 [ 762.860605][ T5620] kernel_init_freeable+0x29d/0x3e0 [ 762.866389][ T5620] kernel_init+0x22/0x1d0 [ 762.871474][ T5620] ret_from_fork+0x514/0xb70 [ 762.876726][ T5620] ret_from_fork_asm+0x1a/0x30 [ 762.882220][ T5620] [ 762.882220][ T5620] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 762.890589][ T5620] __mutex_lock+0x19d/0x1550 [ 762.896086][ T5620] elevator_change+0x1af/0x480 [ 762.902288][ T5620] elevator_set_none+0xb5/0x140 [ 762.907960][ T5620] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 762.915437][ T5620] nbd_start_device+0x189/0xb30 [ 762.921140][ T5620] nbd_genl_connect+0x167d/0x1cd0 [ 762.927853][ T5620] genl_family_rcv_msg_doit+0x233/0x340 [ 762.934211][ T5620] genl_rcv_msg+0x614/0x7a0 [ 762.939937][ T5620] netlink_rcv_skb+0x226/0x4a0 [ 762.945611][ T5620] genl_rcv+0x28/0x40 [ 762.950914][ T5620] netlink_unicast+0x7bd/0x940 [ 762.956311][ T5620] netlink_sendmsg+0x813/0xb40 [ 762.961788][ T5620] sock_sendmsg_nosec+0x13a/0x180 [ 762.967876][ T5620] ____sys_sendmsg+0x54e/0x850 [ 762.973340][ T5620] ___sys_sendmsg+0x2a5/0x360 [ 762.978637][ T5620] __x64_sys_sendmsg+0x1b1/0x290 [ 762.985264][ T5620] do_syscall_64+0x166/0x520 [ 762.991757][ T5620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.999005][ T5620] [ 762.999005][ T5620] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 763.007728][ T5620] blk_alloc_queue+0x544/0x690 [ 763.013698][ T5620] __blk_mq_alloc_disk+0x194/0x390 [ 763.019383][ T5620] nbd_dev_add+0x494/0xb60 [ 763.024422][ T5620] nbd_init+0x168/0x1f0 [ 763.029319][ T5620] do_one_initcall+0x250/0x870 [ 763.034700][ T5620] do_initcall_level+0x10a/0x1a0 [ 763.040267][ T5620] do_initcalls+0x59/0xa0 [ 763.045482][ T5620] kernel_init_freeable+0x29d/0x3e0 [ 763.052715][ T5620] kernel_init+0x22/0x1d0 [ 763.057832][ T5620] ret_from_fork+0x514/0xb70 [ 763.063034][ T5620] ret_from_fork_asm+0x1a/0x30 [ 763.068361][ T5620] [ 763.068361][ T5620] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 763.075850][ T5620] fs_reclaim_acquire+0x71/0x100 [ 763.081431][ T5620] __kmalloc_noprof+0xbc/0x720 [ 763.088154][ T5620] tls_sw_sendmsg+0x59b/0x2b50 [ 763.093736][ T5620] sock_sendmsg_nosec+0x90/0x180 [ 763.099671][ T5620] sock_sendmsg+0x1ca/0x2d0 [ 763.105244][ T5620] splice_to_socket+0xb5e/0x12a0 [ 763.110731][ T5620] direct_splice_actor+0x101/0x160 [ 763.116990][ T5620] splice_direct_to_actor+0x57b/0xcb0 [ 763.125584][ T5620] do_splice_direct+0x195/0x290 [ 763.132135][ T5620] do_sendfile+0x52e/0x7c0 [ 763.137299][ T5620] __se_sys_sendfile64+0x144/0x1a0 [ 763.143923][ T5620] do_syscall_64+0x166/0x520 [ 763.150013][ T5620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.157624][ T5620] [ 763.157624][ T5620] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 763.167958][ T5620] __lock_acquire+0x15ff/0x2e50 [ 763.173629][ T5620] lock_acquire+0x115/0x350 [ 763.179240][ T5620] lock_sock_nested+0x41/0x100 [ 763.185286][ T5620] inet_shutdown+0x6a/0x390 [ 763.190708][ T5620] nbd_mark_nsock_dead+0x2cb/0x550 [ 763.197527][ T5620] recv_work+0x1cee/0x1e10 [ 763.203032][ T5620] process_scheduled_works+0xc3d/0x1630 [ 763.209676][ T5620] worker_thread+0xa47/0xfb0 [ 763.215183][ T5620] kthread+0x38b/0x480 [ 763.219850][ T5620] ret_from_fork+0x514/0xb70 [ 763.225196][ T5620] ret_from_fork_asm+0x1a/0x30 [ 763.231097][ T5620] [ 763.231097][ T5620] other info that might help us debug this: [ 763.231097][ T5620] [ 763.244199][ T5620] Chain exists of: [ 763.244199][ T5620] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 763.244199][ T5620] [ 763.257715][ T5620] Possible unsafe locking scenario: [ 763.257715][ T5620] [ 763.266577][ T5620] CPU0 CPU1 [ 763.272402][ T5620] ---- ---- [ 763.278725][ T5620] lock(&nsock->tx_lock); [ 763.283601][ T5620] lock(&cmd->lock); [ 763.291700][ T5620] lock(&nsock->tx_lock); [ 763.299321][ T5620] lock(sk_lock-AF_INET6-NBD); [ 763.305259][ T5620] [ 763.305259][ T5620] *** DEADLOCK *** [ 763.305259][ T5620] [ 763.314311][ T5620] locks held by kworker/u9:2/5620: 3, last CPU#1: [ 763.322219][ T5620] #0: ffff8880265e2940 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 763.334038][ T5620] #1: ffffc900041d7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 763.346347][ T5620] #2: ffff888055c9ba68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 763.357180][ T5620] [ 763.357180][ T5620] stack backtrace: [ 763.363632][ T5620] CPU: 1 UID: 0 PID: 5620 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 763.374162][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 763.385209][ T5620] Workqueue: nbd3-recv recv_work [ 763.390833][ T5620] Call Trace: [ 763.394489][ T5620] [ 763.397527][ T5620] dump_stack_lvl+0xe8/0x150 [ 763.402515][ T5620] print_circular_bug+0x2e2/0x300 [ 763.407666][ T5620] check_noncircular+0x12f/0x150 [ 763.412970][ T5620] __lock_acquire+0x15ff/0x2e50 [ 763.418011][ T5620] ? preempt_schedule_notrace+0x56/0x90 [ 763.423936][ T5620] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 763.430108][ T5620] ? __pfx_inet_shutdown+0x10/0x10 [ 763.435518][ T5620] lock_acquire+0x115/0x350 [ 763.440130][ T5620] ? inet_shutdown+0x6a/0x390 [ 763.445400][ T5620] lock_sock_nested+0x41/0x100 [ 763.450372][ T5620] ? inet_shutdown+0x6a/0x390 [ 763.455923][ T5620] inet_shutdown+0x6a/0x390 [ 763.461014][ T5620] nbd_mark_nsock_dead+0x2cb/0x550 [ 763.466245][ T5620] recv_work+0x1cee/0x1e10 [ 763.470769][ T5620] ? __lock_acquire+0x6df/0x2e50 [ 763.476249][ T5620] ? register_lock_class+0x31/0x2e0 [ 763.481645][ T5620] ? __lock_acquire+0x6df/0x2e50 [ 763.486589][ T5620] ? trace_hrtimer_start+0x82/0x200 [ 763.492325][ T5620] ? __pfx_recv_work+0x10/0x10 [ 763.498926][ T5620] ? do_raw_spin_lock+0x12b/0x2f0 [ 763.504479][ T5620] ? rcu_is_watching+0x16/0xb0 [ 763.509502][ T5620] ? process_scheduled_works+0x97a/0x1630 [ 763.515701][ T5620] process_scheduled_works+0xc3d/0x1630 [ 763.523684][ T5620] ? __pfx_process_scheduled_works+0x10/0x10 [ 763.530058][ T5620] ? assign_work+0x3cf/0x5d0 [ 763.534702][ T5620] worker_thread+0xa47/0xfb0 [ 763.539699][ T5620] kthread+0x38b/0x480 [ 763.543999][ T5620] ? __pfx_worker_thread+0x10/0x10 [ 763.549182][ T5620] ? __pfx_kthread+0x10/0x10 [ 763.554267][ T5620] ret_from_fork+0x514/0xb70 [ 763.558900][ T5620] ? __pfx_ret_from_fork+0x10/0x10 [ 763.565002][ T5620] ? __switch_to+0xc89/0x1420 [ 763.569830][ T5620] ? __pfx_kthread+0x10/0x10 [ 763.575366][ T5620] ret_from_fork_asm+0x1a/0x30 [ 763.580459][ T5620] [ 763.737818][T23885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4245'.